Fedora 34: libolm 2021-b514c8ea72
Summary
An implementation of the Double Ratchet cryptographic ratchet in C++.
Fixes CVE in libolm as described here:
https://matrix.org/blog/2021/12/13/disclosure-buffer-overflow-in-libolm-and-matrix-js-sdk ---- Updated to version 3.2.7.
* Mon Dec 13 2021 Vitaly Zaitsev
- Updated to version 3.2.8 with CVE fixes.
* Tue Dec 7 2021 Vitaly Zaitsev
- Updated to version 3.2.7.
su -c 'dnf upgrade --advisory FEDORA-2021-b514c8ea72' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
FEDORA-2021-b514c8ea72 2021-12-16 01:11:58.361875 Product : Fedora 34 Version : 3.2.8 Release : 1.fc34 URL : https://gitlab.matrix.org/matrix-org/olm Summary : Double Ratchet cryptographic library Description : An implementation of the Double Ratchet cryptographic ratchet in C++. Fixes CVE in libolm as described here: https://matrix.org/blog/2021/12/13/disclosure-buffer-overflow-in-libolm-and-matrix-js-sdk ---- Updated to version 3.2.7. * Mon Dec 13 2021 Vitaly Zaitsev - 3.2.8-1 - Updated to version 3.2.8 with CVE fixes. * Tue Dec 7 2021 Vitaly Zaitsev - 3.2.7-1 - Updated to version 3.2.7. su -c 'dnf upgrade --advisory FEDORA-2021-b514c8ea72' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Change Log
References