Fedora 34 Moderate Advisory: Keepalived Dbus Access Control Fix

Keepalived provides simple and robust facilities for load balancing

and high availability to Linux system and Linux based infrastructures.

The load balancing framework relies on well-known and widely used

Linux Virtual Server (IPVS) kernel module providing Layer4 load

balancing. Keepalived implements a set of checkers to dynamically and

adaptively maintain and manage load-balanced server pool according

their health. High availability is achieved by VRRP protocol. VRRP is

a fundamental brick for router failover. In addition, keepalived

implements a set of hooks to the VRRP finite state machine providing

low-level and high-speed protocol interactions. Keepalived frameworks

can be used independently or all together to provide resilient

infrastructures.

Fix dbus policy (#2027158, CVE-2021-442255)

* Tue Dec 14 2021 Ryan O'Hara - 2.2.4-2

- Fix dbus policy (#2027158, CVE-2021-442255)

* Tue Dec 14 2021 Ryan O'Hara - 2.2.4-1

- Update to 2.2.4 (#1996274)

[ 1 ] Bug #1996274 - keepalived-2.2.4 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1996274

[ 2 ] Bug #2027158 - CVE-2021-44225 keepalived: dbus access control bypass [fedora-34]

https://bugzilla.redhat.com/show_bug.cgi?id=2027158

su -c 'dnf upgrade --advisory FEDORA-2021-255eff1bb5' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure