[ol8_baseos_latest] rpm-plugin-ima-4.14.3-19.el8_5.2.aarch64

Rpm plugin ima file signatures

Changelog (Show File list) (Show related packages)

• Mon Jan 10 2022 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-19.2

  - Address covscan issues in binding sigs validation patch (#2022537)

• Thu Jan 06 2022 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-19.1

  - Validate and require subkey binding sigs on PGP pubkeys (#2022537)
  - Fixes CVE-2021-3521

• Wed Oct 06 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-19

  - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)

• Thu Aug 26 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-18

  - Address important covscan issues (#1996665), vol. 2

• Mon Aug 23 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-17

  - Address important covscan issues (#1996665)

• Thu Aug 19 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16

  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)

• Thu Jul 15 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15

  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)

• Thu May 27 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-14

  - Be more careful about copying data from signature header (#1958477)
  - Fixes CVE-2021-20271

• Fri Feb 12 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13

  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)

• Tue Feb 09 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12

  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)