security May 2017

security@lists.fedoraproject.org

4 participants
2 discussions

Modularity and needed changes on CVE handling side?
by Stanislav Ochotnicky 01 Jun '17

01 Jun '17

Hi folks, this is just to make sure things won't come up as a surprise. I am assuming there are a few things that might need to be tweaked on your end due to incoming Fedora modularity. I think we'll need help figuring out what all those things are. Initial thoughts are: * bugzilla components for modules will need to be created * when CVE hits, module components with the issue should get a bug as well. Module components containing old rpms need to be rebuilt - I assume we'd want to tweak BZ handling scripts that you use to make sure it's all cross linked? * bodhi updates for these components need to go out (Bodhi team already working on making this possible) Basically - at this point I am looking for someone to help identify what might be needed. However if we are OK with some lower standards for modules for some time or there are other considerations - it would be good to know. Thoughts? -- Stanislav Ochotnicky <sochotnicky(a)redhat.com> Software Engineer, PnT DevOps - Brno PGP: F434 2286 27DC 7D9B 2B64 0866 BCBD 752E 7B08 7241 Red Hat Inc. http://www.redhat.com

5 4

KeepassXC audit
by Germano Massullo 14 May '17

14 May '17

KeepassXC is a fork of the (not so active) KeepassX password manager. I am wondering if Fedora security memebers could be interested in giving a look to my KeepassXC review request, and perhaps a very quick look to the source code, in order to find out if there are any macroscopic security holes https://bugzilla.redhat.com/show_bug.cgi?id=1450633 https://keepassxc.org/ https://github.com/keepassxreboot/keepassxc Have a nice day!

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

security May 2017