Rebase on upstream 4.6.1: see https://github.com/sosreport/sos/releases/tag/4.6.1 for full changelog.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-2fb8991c68 2024-01-20 03:24:12.788932 -------------------------------------------------------------------------------- Name : sos Product : Fedora 38 Version : 4.6.1 Release : 1.fc38 URL : https://github.com/sosreport/sos Summary : A set of tools to gather troubleshooting information from a system Description : Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers. -------------------------------------------------------------------------------- Update Information: Rebase on upstream 4.6.1: see https://github.com/sosreport/sos/releases/tag/4.6.1 for full changelog. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 11 2024 Sandro Bonazzola - 4.6.1-1 - Update to 4.6.1 - Resolves: fedora#2257777 - Resolves: fedora#2244214 * Mon Aug 21 2023 Sandro Bonazzola - 4.6.0-1 - Update to 4.6.0 - Resolves: fedora#2232710 * Mon Jul 24 2023 Sandro Bonazzola - 4.5.6-1 - Update to 4.5.6 - Resolves: fedora#2224676 - Resolves: fedora#2223526 * Sat Jul 22 2023 Fedora Release Engineering - 4.5.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 27 2023 Python Maint - 4.5.5-2 - Rebuilt for Python 3.12 * Tue Jun 27 2023 Sandro Bonazzola - 4.5.5-1 - Update to 4.5.5 - Resolves: rhbz#2217163 * Wed Jun 14 2023 Python Maint - 4.5.4-4 - Rebuilt for Python 3.12 * Thu Jun 1 2023 Sandro Bonazzola - 4.5.4-3 - Adapt to new Fedora packaging guidelines * Mon May 29 2023 Sandro Bonazzola - 4.5.4-2 - Remove unneeded requirements * Mon May 29 2023 Sandro Bonazzola - 4.5.4-1 -Update to 4.5.4 - Resolves: rhbz#2210423 * Tue May 2 2023 Sandro Bonazzola - 4.5.3-1 - Update to 4.5.3 - Resolves: rhbz#2192086 * Mon Apr 3 2023 Sandro Bonazzola - 4.5.2-1 - Update to 4.5.2 - Resolves: rhbz#2183722 * Fri Mar 17 2023 Sandro Bonazzola - 4.5.1-2 - migrated to SPDX license -------------------------------------------------------------------------------- References: [ 1 ] Bug #2244214 - sos: Ansible Automation Platform collects customer passwords and tokens via sosreport [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2244214 [ 2 ] Bug #2257777 - sos-4.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257777 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2fb8991c68' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds access when the byte array representing the state . MGASA-2022-0112 - Updated swtpm packages fix security vulnerability Publication date: 23 Mar 2022 URL: https://advisories.mageia.org/MGASA-2022-0112.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-23645 swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3, v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds. (CVE-2022-23645) References: - https://bugs.mageia.org/show_bug.cgi?id=30125 - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.