FEDORA-2025-bbabead4d7
Packages in this update:
rust-routinator-0.14.1-2.fc41
Update description:
New
ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990)
If merging mutliple ASPA objects for a single customer ASN results in more than 16,380 provider ASNs, the ASPA is dropped. (Note that ASPA objects with more than 16,380 provider ASNs are already rejected during parsing.) (#996)
New archive-stats command that shows some statistics of an RRDP archive. (#982)
Re-enabled the use of GZIP compression in HTTP request sent by the RRDP collector. Measures to deal with exploding data have been implemented in rpki-rs#319. (#997)
Bug fixes
Fixed an issue with checking the file names in manifests that let to a crash when non-ASCII characters are used. (rpki-rs#320, reported by Haya Schulmann and Niklas Vogel of Goethe University Frankfurt/ATHENE Center and assigned CVE-2025-0638)
The validation HTTP endpoints now accept prefixes with non-zero host bits. (#987)
Removed duplicate rtr_client_reset_queries in HTTP metrics. (#992 by @sleinen)
Improved disk space consumption of the new RRDP archives by re-using empty space when updating an object and padding all objects to a multiple of 256 bytes. (#982)
More Stories
USN-7262-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...
crun-1.20-2.fc40
FEDORA-2025-166f075581 Packages in this update: crun-1.20-2.fc40 Update description: Security fix for GHSA-f42g-r5jj-qh4j Read More
crun-1.20-2.fc41
FEDORA-2025-46200d968d Packages in this update: crun-1.20-2.fc41 Update description: Security fix for GHSA-f42g-r5jj-qh4j Read More
USN-7259-3: GNU C Library vulnerability
USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory...
USN-7259-2: GNU C Library vulnerability
USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory...
USN-7261-1: Vim vulnerability
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this...