--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-610589457a
2021-03-02 15:01:48.650000
--------------------------------------------------------------------------------
Name : prosody
Product : Fedora EPEL 8
Version : 0.11.8
Release : 1.el8
URL :
https://prosody.im/
Summary : Flexible communications server for Jabber/XMPP
Description :
Prosody is a flexible communications server for Jabber/XMPP written in Lua.
It aims to be easy to use, and light on resources. For developers it aims
to be easy to extend and give a flexible system on which to rapidly develop
added functionality, or prototype new protocols.
--------------------------------------------------------------------------------
Update Information:
Prosody 0.11.8 ============== This is a new minor release for the 0.11.x stable
branch, it includes bug fixes and performance improvements! Upstream would like
to thank the Jitsi folks for helping to improve websocket performance in this
and the previous release. This release also fixes a security issue, where
channel binding, which connects the authentication layer (i.e. SASL) with the
security layer (i.e. TLS) to detect man-in-the-middle attacks, could be used on
connections encrypted with TLS 1.3, despite the holy texts declaring this
undefined. Security -------- * mod_saslauth: Disable ���tls-unique��� channel
binding with TLS 1.3 (#1542) Fixes and improvements ----------------------
* net.websocket.frames: Improve websocket masking performance by using the new
util.strbitop * util.strbitop: Library for efficient bitwise operations on
strings Minor changes ------------- * MUC: Correctly advertise whether the
subject can be changed (#1155) * MUC: Preserve disco ���node��� attribute (or lack
thereof) in responses (#1595) * MUC: Fix logic bug causing unnecessary
presence to be sent (#1615) * mod_bosh: Fix error if client tries to connect
to component (#425) * mod_bosh: Pick out the ���wait��� before checking it instead
of earlier * mod_pep: Advertise base PubSub feature (#1632) * mod_pubsub:
Fix notification stanza type setting (#1605) * mod_s2s: Prevent keepalives
before client has established a stream * net.adns: Fix bug that sent empty DNS
packets (#1619) * net.http.server: Don���t send Content-Length on 1xx/204
responses (#1596) * net.websocket.frames: Fix length calculation bug (#1598)
* util.dbuffer: Make length API in line with Lua strings * util.dbuffer:
Optimize substring operations * util.debug: Fix locals being reported under
wrong stack frame in some cases * util.dependencies: Fix check for Lua bitwise
operations library (#1594) * util.interpolation: Fix combination of filters
and fallback values #1623 * util.promise: Preserve tracebacks * util.stanza:
Reject ASCII control characters (#1606) * timers: Ensure timers can���t block
other processing (#1620)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 15 2021 Robert Scheck <robert(a)fedoraproject.org> 0.11.8-1
- Upgrade to 0.11.8 (#1928951)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928951 - prosody-0.11.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1928951
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update prosody' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------