Rebuild for CVE-2022-27191 ---- Fix FTBFS Close: rhbz#2045471. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-08ae2dd481 2022-05-07 04:08:14.315797 --------------------------------------------------------------------------------Name : golang-github-haproxytech-dataplaneapi Product : Fedora 36 Version : 2.4.4 Release : 3.fc36 URL : https://github.com/haproxytech/dataplaneapi Summary : HAProxy Data Plane API Description : HAProxy Data Plane API. --------------------------------------------------------------------------------Update Information: Rebuild for CVE-2022-27191 ---- Fix FTBFS Close: rhbz#2045471 --------------------------------------------------------------------------------ChangeLog: * Sat Apr 16 2022 Fabio Alessandro Locati - 2.4.4-3 - Rebuilt for CVE-2022-27191 --------------------------------------------------------------------------------References: [ 1 ] Bug #2045471 - golang-github-appc-goaci: FTBFS in Fedora rawhide/f36 https://bugzilla.redhat.com/show_bug.cgi?id=2045471 [ 2 ] Bug #2074262 - CVE-2022-27191 golang-x-crypto: golang: crash in a golang.org/x/crypto/ssh server [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2074262 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-08ae2dd481' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
An update for dpdk is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: dpdk security, bug fix, and enhancement update Advisory ID: RHSA-2020:2683-01 Product: Red Hat Enterprise Linux Extras Advisory URL: https://access.redhat.com/errata/RHSA-2020:2683 Issue date: 2020-06-23 CVE Names: CVE-2020-10722 CVE-2020-10723 ==================================================================== 1. Summary: An update for dpdk is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux 7 Extras - noarch, ppc64le, x86_64 3. Description: The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. The following packages have been upgraded to a later upstream version: dpdk (18.11.8). (BZ#1825276) Security Fix(es): * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722) * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes thechanges described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1825276 - [Rebase] Rebase DPDK to 18.11.7 1828867 - CVE-2020-10722 dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() 1828874 - CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() 6. Package List: Red Hat Enterprise Linux 7 Extras: Source: dpdk-18.11.8-1.el7_8.src.rpm noarch: dpdk-doc-18.11.8-1.el7_8.noarch.rpm ppc64le: dpdk-18.11.8-1.el7_8.ppc64le.rpm dpdk-debuginfo-18.11.8-1.el7_8.ppc64le.rpm dpdk-devel-18.11.8-1.el7_8.ppc64le.rpm dpdk-tools-18.11.8-1.el7_8.ppc64le.rpm x86_64: dpdk-18.11.8-1.el7_8.x86_64.rpm dpdk-debuginfo-18.11.8-1.el7_8.x86_64.rpm dpdk-devel-18.11.8-1.el7_8.x86_64.rpm dpdk-tools-18.11.8-1.el7_8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-10722 https://access.redhat.com/security/cve/CVE-2020-10723 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXvIRvtzjgjWX9erEAQjeMhAAhyMsM083QLQC1GJPlWUnwqphqxiGf2Tc AX0CwtpzVINlEhJk97r3MLqTT1wHmpvJmW75VgWGbj6MnKcoPMd/JFzx/wOszFU1 bB+0K/WF4zoe4ot4+HatpIjQvDpOlXKNHkOkPeEffsKWGrY6j5y2mIp58PmJ6Kaq j2N5G3Cu6LLyvhT6XUYGBTWOJQEwm6VrHoe4HftsQkhF70HfqLQ02naIIUn9elUb CRLdorqs3wmEocUkkg3M3oucLxmM1jhx4Mg8o9rNteO3/D4Kdg+wTUwx4EA2+9jK Ky47Fs1HTQYHcw3P1g+j+YhcDJH/mFEJhN2Xcm/3WMITDVHAoj2DLnfSfYK8aOF7 1KuifclLAYdUvbe4eM0rPvo4zU71cHFxl0jazaGiPCX3SsMpSaXXo0hzwAc4LlUj qYOEIFk+TVV8vfOP8yBKFcK/vP2GP1boUsnImEiit2dUQb609xWnRTVVPWF5mqvK RgDaJEUY4EssQKCM0btozZoPQCzGAZtrkqZrfY1bMPxGJEu8KqBvHZo/gLthQERa UuEXpydZ20sRSng/s020SlPdpwo7alG3KiOfIiW7ebEXlU2AJNZeHQSi3V0nvUOT 1OeORup7Fv1Z94Epj/HtJ3aSBs7LT3HBG3P9BNDUjf5XFhluBgNuiJ9xlivQQxIM L+Mgyyy30r0=i5/J -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.