stable

prosody-0.11.8-1.fc32

FEDORA-2021-54d3af6388 created by robert 4 years ago for Fedora 32

Prosody 0.11.8

This is a new minor release for the 0.11.x stable branch, it includes bug fixes and performance improvements!

Upstream would like to thank the Jitsi folks for helping to improve websocket performance in this and the previous release.

This release also fixes a security issue, where channel binding, which connects the authentication layer (i.e. SASL) with the security layer (i.e. TLS) to detect man-in-the-middle attacks, could be used on connections encrypted with TLS 1.3, despite the holy texts declaring this undefined.

Security

  • mod_saslauth: Disable ‘tls-unique’ channel binding with TLS 1.3 (#1542)

Fixes and improvements

  • net.websocket.frames: Improve websocket masking performance by using the new util.strbitop
  • util.strbitop: Library for efficient bitwise operations on strings

Minor changes

  • MUC: Correctly advertise whether the subject can be changed (#1155)
  • MUC: Preserve disco ‘node’ attribute (or lack thereof) in responses (#1595)
  • MUC: Fix logic bug causing unnecessary presence to be sent (#1615)
  • mod_bosh: Fix error if client tries to connect to component (#425)
  • mod_bosh: Pick out the ‘wait’ before checking it instead of earlier
  • mod_pep: Advertise base PubSub feature (#1632)
  • mod_pubsub: Fix notification stanza type setting (#1605)
  • mod_s2s: Prevent keepalives before client has established a stream
  • net.adns: Fix bug that sent empty DNS packets (#1619)
  • net.http.server: Don’t send Content-Length on 1xx/204 responses (#1596)
  • net.websocket.frames: Fix length calculation bug (#1598)
  • util.dbuffer: Make length API in line with Lua strings
  • util.dbuffer: Optimize substring operations
  • util.debug: Fix locals being reported under wrong stack frame in some cases
  • util.dependencies: Fix check for Lua bitwise operations library (#1594)
  • util.interpolation: Fix combination of filters and fallback values #1623
  • util.promise: Preserve tracebacks
  • util.stanza: Reject ASCII control characters (#1606)
  • timers: Ensure timers can’t block other processing (#1620)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-54d3af6388

This update has been submitted for testing by robert.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata
Type
security
Severity
low
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
4 years ago
in testing
4 years ago
in stable
3 years ago
BZ#1928951 prosody-0.11.8 is available
0
0

Automated Test Results