public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Fabio M. Di Nitto <fdinitto@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/kronosnet] rawhide: New upstream release
Date: Mon, 20 Jul 2026 13:49:30 GMT [thread overview]
Message-ID: <178455537089.1.1629994741435123076.rpms-kronosnet-35dc31e6ef22@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/kronosnet
Branch : rawhide
Commit : 35dc31e6ef22b0908fd8c8986b972c63973a524c
Author : Fabio M. Di Nitto <fdinitto@redhat.com>
Date : 2026-07-20T15:48:57+02:00
Stats : +13/-4 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/kronosnet/c/35dc31e6ef22b0908fd8c8986b972c63973a524c?branch=rawhide
Log:
New upstream release
- CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
- CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
- CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
- tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
- libnozzle: Introduce test macros similar to libknet
- docs: convert README to markdown format
Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>
---
diff --git a/.gitignore b/.gitignore
index ec9e39b..f9ca2e0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/kronosnet-1.34.tar.xz
+/kronosnet-1.35.tar.xz
diff --git a/kronosnet.spec b/kronosnet.spec
index 2168f86..1ff3bae 100644
--- a/kronosnet.spec
+++ b/kronosnet.spec
@@ -41,8 +41,8 @@
Name: kronosnet
Summary: Multipoint-to-Multipoint VPN daemon
-Version: 1.34
-Release: 2%{?dist}
+Version: 1.35
+Release: 1%{?dist}
License: GPL-2.0-or-later AND LGPL-2.1-or-later
URL: https://kronosnet.org
Source0: https://kronosnet.org/releases/%{name}-%{version}.tar.xz
@@ -462,6 +462,15 @@ Requires: libknet1%{_isa} = %{version}-%{release}
%endif
%changelog
+* Mon Jul 20 2026 Fabio M. Di Nitto <fdinitto@redhat.com> - 1.35-1
+- New upstream release
+- CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
+- CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
+- CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
+- tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
+- libnozzle: Introduce test macros similar to libknet
+- docs: convert README to markdown format
+
* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.34-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
diff --git a/sources b/sources
index 7405bb1..1da75c0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kronosnet-1.34.tar.xz) = f6130f8f086d3f5550fb1822e5146083def7bd15e0efd41b90f15733a483780b8448a458ab6180815da6b8e99db7df83298b0e57dd831f221d5ceae5530703f5
+SHA512 (kronosnet-1.35.tar.xz) = b6636f7f73d05a14945cf08ef1bc5795f111b906a7e6aa523c38323f4065b912f07a25173ea164f8411c4bc2c2ca0ca018cf4cde829b63dc1022de12373ef2fb
reply other threads:[~2026-07-20 13:49 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178455537089.1.1629994741435123076.rpms-kronosnet-35dc31e6ef22@fedoraproject.org \
--to=fdinitto@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox