--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-6b89bc0305
2023-11-03 18:20:20.950604
--------------------------------------------------------------------------------

Name        : golang-github-nats-io-jwt-2
Product     : Fedora 39
Version     : 2.5.2
Release     : 1.fc39
URL         : https://github.com/nats-io/jwt
Summary     : JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem
Description :
JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem.

--------------------------------------------------------------------------------
Update Information:

Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats-
server: Adding accounts for just the system account adds auth bypass
--------------------------------------------------------------------------------
ChangeLog:

* Wed Sep 20 2023 Mark E. Fuller  - 2.5.2-1
- update to v2.5.2, close rhbz#2239736
* Wed Sep 13 2023 Mark E. Fuller  - 2.5.0-1
- inital import, close rhbz#2237326
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-6b89bc0305' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Do not reply to spam, report it: https://pagure.io/login/

Fedora 39: golang-github-nats-io-jwt-2 2023-6b89bc0305

November 3, 2023
Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats- server: Adding accounts for just the system account adds auth bypass

Summary

JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem.

Update Information:

Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats- server: Adding accounts for just the system account adds auth bypass

Change Log

* Wed Sep 20 2023 Mark E. Fuller - 2.5.2-1 - update to v2.5.2, close rhbz#2239736 * Wed Sep 13 2023 Mark E. Fuller - 2.5.0-1 - inital import, close rhbz#2237326

References

Fedora Update Notification FEDORA-2023-6b89bc0305 2023-11-03 18:20:20.950604 Name : golang-github-nats-io-jwt-2 Product : Fedora 39 Version : 2.5.2 Release : 1.fc39 URL : https://github.com/nats-io/jwt Summary : JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem Description : JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-6b89bc0305' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
Name : golang-github-nats-io-jwt-2
Product : Fedora 39
Version : 2.5.2
Release : 1.fc39
URL : https://github.com/nats-io/jwt
Summary : JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem

Related News

Linux Mint 22: Elevating Security and Usability for Admins
3 - 5 min read
Linux Mint has has long been recognized as a versatile and user-friendly distribution and has earned great popularity among administrators and
Exim 4.98 Addresses Critical Vulnerabilities, Bolsters Email Server Security
2 - 4 min read
Exim is one of Unix-like systems' most widely used mail transfer agents. It's essential for email delivery and handling and is a significant part of
Recent OpenSSH RCE Bug Explained: Impact & Mitigations
2 - 4 min read
In an era where cybersecurity threats loom larger than ever, the discovery of a Remote Code Execution (RCE) vulnerability in OpenSSH by Qualys’
CVE-2024-4577: A Swiftly Weaponized Vulnerability for Ransomware Distribution
2 - 4 min read
Security researchers recently issued an update detailing how attackers are exploiting a PHP code execution vulnerability to spread TellYouThePass
Play Ransomware Group Unleashes New Threat on ESXi Environments: Analysis & Mitigation Strategies
3 - 5 min read
The Play ransomware group, well-known for its double-extortion tactics, recently unveiled a Linux variant targeting ESXi environments. This
Critical Linux Kernel Vulnerabilities Patched in Ubuntu Azure Systems
2 - 4 min read
Canonical has fixed several recently identified critical Linux kernel vulnerabilities in July 2024. These vulnerabilities primarily affect Microsoft
The Urgent Need for Secure Software Development: New Report Serves as a Wake-Up Call for the Industry
3 - 5 min read
The Linux Foundation and Open Source Security Foundation recently published a report entitled "Secure Software Development Education 2024
Severe Linux Kernel Privilege Escalation Bugs Could Compromise Entire Systems
2 - 4 min read
The Cybersecurity and Infrastructure Security Agency (CISA) recently added a new Linux kernel privilege escalation bug ( CVE-2024-1086 ) to its

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved