Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 39: FEDORA-2023-6b89bc0305 Auth Bypass in NATS Server

fedora
Calendar Grey November 3, 2023
Dist Fedora Esm H88
Fedora 39 has released an update addressing an authentication vulnerability in golang-google-protobuf, along with resolving issues related to NATS: 2023-01 server, boosting overall security
Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats- server: Adding accounts for just the system account adds auth bypass

Summary

Go support for Google's protocol buffers.

Update Information:

Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats- server: Adding accounts for just the system account adds auth bypass

Topics%20covered

Topics Covered

security advisory fedora patch authentication bypass golang nats

Change Log

* Sun Sep 24 2023 Mikel Olasagasti Uranga - 1.31.0-4 - Add obsolete on removed goaltipath compat package * Sun Sep 24 2023 Mikel Olasagasti Uranga - 1.31.0-3 - Revert adding goaltipath * Wed Sep 13 2023 Mark E. Fuller - 1.31.0-2 - Update golang-google-protobuf.spec - add deprecated altpath * Sat Sep 9 2023 Mark E. Fuller - 1.31.0-1 - update to v1.31.0, close rhbz#2176730, rhbz#2171555, rhbz#2225889 * Thu Jul 20 2023 Fedora Release Engineering - 1.28.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering - 1.28.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

References

Fedora Update Notification FEDORA-2023-6b89bc0305 2023-11-03 18:20:20.950604 Name : golang-google-protobuf Product : Fedora 39 Version : 1.31.0 Release : 4.fc39 URL : https://github.com/protocolbuffers/protobuf-go Summary : Go support for Google's protocol buffers Description : Go support for Google's protocol buffers.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-6b89bc0305' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: golang-google-protobuf
Product: Fedora 39
Version: 1.31.0
Release: 4.fc39
URL: https://github.com/protocolbuffers/protobuf-go
Summary: Go support for Google's protocol buffers

Topics%20covered

Topics Covered

security advisory fedora patch authentication bypass golang nats

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here