Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

Fedora 39: FEDORA-2023-6b89bc0305 High: nats-server Auth Bypass

fedora
Calendar Grey November 3, 2023
Scroller Fedora
Stay informed: Fedora 39 has a vital update for nats-server, enhancing security and resolving functionality issues, alongside performance boosts
Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats- server: Adding accounts for just the system account adds auth bypass

Summary

A High Performance NATS Server written in Go and hosted by the Cloud Native

Computing Foundation (CNCF).

Update Information:

Contains updates to address CVE-2022-{28357,41717} and also NATS: 2023-01 nats- server: Adding accounts for just the system account adds auth bypass

Topics%20covered

Topics Covered

security advisory high severity update Fedora auth bypass nats-server

Change Log

* Sun Oct 15 2023 Mark E. Fuller - 2.10.3-1 - update to v2.10.3, close rhbz#2244204 * Sat Oct 7 2023 Mark E. Fuller - 2.10.2-1 - update to v2.10.2, close rhbz#2242568 * Tue Sep 26 2023 Mark E. Fuller - 2.10.1-4 - disable tests which intermittently fail due to timeout * Tue Sep 26 2023 Mark E. Fuller - 2.10.1-3 - rebuild for CVE-2022-{28357,41717} * Fri Sep 22 2023 Mark E. Fuller - 2.10.1-2 - apply -f to %gometa * Fri Sep 22 2023 Mark E. Fuller - 2.10.1-1 - v2.10.1, close rhbz#2239760 * Tue Sep 19 2023 Mark E. Fuller - 2.9.22-1 - update to v2.9.22, close rhbz#1939310

References

Fedora Update Notification FEDORA-2023-6b89bc0305 2023-11-03 18:20:20.950604 Name : nats-server Product : Fedora 39 Version : 2.10.3 Release : 1.fc39 URL : https://github.com/nats-io/nats-server Summary : High-Performance server for NATS, the cloud native messaging system Description : A High Performance NATS Server written in Go and hosted by the Cloud Native Computing Foundation (CNCF).

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-6b89bc0305' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: nats-server
Product: Fedora 39
Version: 2.10.3
Release: 1.fc39
URL: https://github.com/nats-io/nats-server
Summary: High-Performance server for NATS, the cloud native messaging system

Topics%20covered

Topics Covered

security advisory high severity update Fedora auth bypass nats-server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.