Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 31: FEDORA-2019-a75665981b Critical Denial of Service

fedora
Calendar Grey September 17, 2019
Dist Fedora Esm H88
This notice outlines the Fedora 31 nbdkit upgrade, focusing on essential measures against severe Denial of Service vulnerabilities identified.
New upstream version 1.14.1

Summary

NBD is a protocol for accessing block devices (hard disks and

disk-like things) over the network.

nbdkit is a toolkit for creating NBD servers.

The key features are:

* Multithreaded NBD server written in C with good performance.

* Minimal dependencies for the basic server.

* Liberal license (BSD) allows nbdkit to be linked to proprietary

libraries or included in proprietary code.

* Well-documented, simple plugin API with a stable ABI guarantee.

Lets you to export "unconventional" block devices easily.

* You can write plugins in C or many other languages.

* Filters can be stacked in front of plugins to transform the output.

In Fedora, 'nbdkit' is a meta-package which pulls in the core server

and a useful subset of plugins and filters.

If you want just the server, install 'nbdkit-server'.

To develop plugins, install the 'nbdkit-devel' package and start by

reading the nbdkit(1) and nbdkit-plugin(3) manual pages.

New upstream version 1.14.1. Fixes Denial of Service / Amplication Attack:

su -c 'dnf upgrade --advisory FEDORA-2019-a75665981b' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 1.14.1
Release: 1.fc31
Summary: NBD server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here