Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 28: FEDORA-2018-dbcb80405c Low Priority TLS Threat Advisory

fedora
Calendar Grey January 15, 2019
Dist Fedora Esm H88
This advisory addresses a low-priority TLS issue in nbdkit 1.4.4 for Fedora. Users should update to maintain secure communications and follow best practices
New upstream version 1.4.4

Summary

NBD is a protocol for accessing block devices (hard disks and

disk-like things) over the network.

'nbdkit' is a toolkit for creating NBD servers.

The key features are:

* Multithreaded NBD server written in C with good performance.

* Well-documented, simple plugin API with a stable ABI guarantee.

Allows you to export "unconventional" block devices easily.

* Liberal license (BSD) allows nbdkit to be linked to proprietary

libraries or included in proprietary code.

You probably want to install one of more plugins (nbdkit-plugin-*).

To develop plugins, install the nbdkit-devel package and start by

reading the nbdkit(1) and nbdkit-plugin(3) manual pages.

New upstream version 1.4.4. Fix low priority security issue with TLS:

* Tue Dec 4 2018 Richard W.M. Jones - 1.4.4-1

- New upstream version 1.4.4.

- Fix low priority security issue with TLS:

* Sun Aug 19 2018 Richard W.M. Jones - 1.4.3-1

- New upstream version 1.4.3.

* Wed Aug 1 2018 Richard W.M. Jones - 1.4.2-1

- New upstream version 1.4.2.

* Fri Jul 20 2018 Richard W.M. Jones - 1.4.1-1

- New upstream version 1.4.1.

- Small refactorings in the spec file.

* Fri Jul 6 2018 Richard W.M. Jones - 1.4.0-1

- New upstream version 1.4.0.

- Add support for Tcl plugins.

- New plugins: ext2, random, tcl, zero.

- New filters: blocksize, fua, log, nozero.

- New bash tab completion subpackage.

* Sun Jul 1 2018 Richard W.M. Jones - 1.2.4-3

- Add all upstream patches since 1.2.4 was released.

* Tue Jun 12 2018 Richard W.M. Jones - 1.2.4-2

- Add all upstream patches since 1.2.4 was released.

* Sat Jun 9 2018 Richard W.M. Jones - 1.2.4-1

- New stable version 1.2.4.

- Remove upstream patches.

- Enable tarball signatures.

- Add upstream patch to fix tests when guestfish not available.

* Wed Jun 6 2018 Richard W.M. Jones - 1.2.3-1

- New stable version 1.2.3.

- Add patch to work around libvirt problem with relative socket paths.

- Add patch to fix the xz plugin test with recent guestfish.

* Sat Apr 21 2018 Richard W.M. Jones - 1.2.2-1

- New stable version 1.2.2.

* Mon Apr 9 2018 Richard W.M. Jones - 1.2.1-1

- New stable version 1.2.1.

* Fri Apr 6 2018 Richard W.M. Jones - 1.2.0-1

- Move to stable branch version 1.2.0.

su -c 'dnf upgrade --advisory FEDORA-2018-dbcb80405c' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
low
Lowest
Low
Medium
High
Critical

Product: Fedora 28
Version: 1.4.4
Release: 1.fc28
Summary: NBD server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here