Aggregator

rpki-client-9.9-1.el10_2

Fedora Security Advisories
1 week ago
FEDORA-EPEL-2026-f7b19f60e3 Packages in this update:
  • rpki-client-9.9-1.el10_2
Update description: rpki-client 9.9
  • Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps reduce load on both the RP itself and the publication points. It reduces log clutter and improves RP run duration.
  • Support for OpenSSL 4.
  • Add additional fail safe: only output config files on successful run.
  • In Rsync mode, include .gbr files in transfer for backwards compatibility.
  • Exclude hidden files and directories (/.*) when synchronizing via Rsync.
  • Limit the length of filenames as they appear in various ASN.1 fields to 255.
  • Improve readability by printing CCR ManifestState sorted by AKI.
  • Improve warnings related to malformed CCRs.
  • Limit the range of deltas added to the queue.
  • Rework error handling in rrdp_handle_file.
  • Ensure consistent states in persistent HTTP connections.
  • Tighten well-formedness checks on AIA & SIA extensions in certs.
  • Clear last_modified after each response on a persistent HTTP connection.
  • ASPAs with too many providers are no longer included in CCR output.
  • Replace assert() with a graceful failure by aborting the http request.
  • Fix a off-by-one in the internal IP address overlap checker.

rpki-client-9.9-1.el10_3

Fedora Security Advisories
1 week ago
FEDORA-EPEL-2026-07a9b752f7 Packages in this update:
  • rpki-client-9.9-1.el10_3
Update description: rpki-client 9.9
  • Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps reduce load on both the RP itself and the publication points. It reduces log clutter and improves RP run duration.
  • Support for OpenSSL 4.
  • Add additional fail safe: only output config files on successful run.
  • In Rsync mode, include .gbr files in transfer for backwards compatibility.
  • Exclude hidden files and directories (/.*) when synchronizing via Rsync.
  • Limit the length of filenames as they appear in various ASN.1 fields to 255.
  • Improve readability by printing CCR ManifestState sorted by AKI.
  • Improve warnings related to malformed CCRs.
  • Limit the range of deltas added to the queue.
  • Rework error handling in rrdp_handle_file.
  • Ensure consistent states in persistent HTTP connections.
  • Tighten well-formedness checks on AIA & SIA extensions in certs.
  • Clear last_modified after each response on a persistent HTTP connection.
  • ASPAs with too many providers are no longer included in CCR output.
  • Replace assert() with a graceful failure by aborting the http request.
  • Fix a off-by-one in the internal IP address overlap checker.

rpki-client-9.9-1.el8

Fedora Security Advisories
1 week ago
FEDORA-EPEL-2026-2af0a88013 Packages in this update:
  • rpki-client-9.9-1.el8
Update description: rpki-client 9.9
  • Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps reduce load on both the RP itself and the publication points. It reduces log clutter and improves RP run duration.
  • Support for OpenSSL 4.
  • Add additional fail safe: only output config files on successful run.
  • In Rsync mode, include .gbr files in transfer for backwards compatibility.
  • Exclude hidden files and directories (/.*) when synchronizing via Rsync.
  • Limit the length of filenames as they appear in various ASN.1 fields to 255.
  • Improve readability by printing CCR ManifestState sorted by AKI.
  • Improve warnings related to malformed CCRs.
  • Limit the range of deltas added to the queue.
  • Rework error handling in rrdp_handle_file.
  • Ensure consistent states in persistent HTTP connections.
  • Tighten well-formedness checks on AIA & SIA extensions in certs.
  • Clear last_modified after each response on a persistent HTTP connection.
  • ASPAs with too many providers are no longer included in CCR output.
  • Replace assert() with a graceful failure by aborting the http request.
  • Fix a off-by-one in the internal IP address overlap checker.

rpki-client-9.9-1.fc43

Fedora Security Advisories
1 week ago
FEDORA-2026-52e9ee2c4d Packages in this update:
  • rpki-client-9.9-1.fc43
Update description: rpki-client 9.9
  • Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps reduce load on both the RP itself and the publication points. It reduces log clutter and improves RP run duration.
  • Support for OpenSSL 4.
  • Add additional fail safe: only output config files on successful run.
  • In Rsync mode, include .gbr files in transfer for backwards compatibility.
  • Exclude hidden files and directories (/.*) when synchronizing via Rsync.
  • Limit the length of filenames as they appear in various ASN.1 fields to 255.
  • Improve readability by printing CCR ManifestState sorted by AKI.
  • Improve warnings related to malformed CCRs.
  • Limit the range of deltas added to the queue.
  • Rework error handling in rrdp_handle_file.
  • Ensure consistent states in persistent HTTP connections.
  • Tighten well-formedness checks on AIA & SIA extensions in certs.
  • Clear last_modified after each response on a persistent HTTP connection.
  • ASPAs with too many providers are no longer included in CCR output.
  • Replace assert() with a graceful failure by aborting the http request.
  • Fix a off-by-one in the internal IP address overlap checker.

rpki-client-9.9-1.el9

Fedora Security Advisories
1 week ago
FEDORA-EPEL-2026-48389f1eca Packages in this update:
  • rpki-client-9.9-1.el9
Update description: rpki-client 9.9
  • Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps reduce load on both the RP itself and the publication points. It reduces log clutter and improves RP run duration.
  • Support for OpenSSL 4.
  • Add additional fail safe: only output config files on successful run.
  • In Rsync mode, include .gbr files in transfer for backwards compatibility.
  • Exclude hidden files and directories (/.*) when synchronizing via Rsync.
  • Limit the length of filenames as they appear in various ASN.1 fields to 255.
  • Improve readability by printing CCR ManifestState sorted by AKI.
  • Improve warnings related to malformed CCRs.
  • Limit the range of deltas added to the queue.
  • Rework error handling in rrdp_handle_file.
  • Ensure consistent states in persistent HTTP connections.
  • Tighten well-formedness checks on AIA & SIA extensions in certs.
  • Clear last_modified after each response on a persistent HTTP connection.
  • ASPAs with too many providers are no longer included in CCR output.
  • Replace assert() with a graceful failure by aborting the http request.
  • Fix a off-by-one in the internal IP address overlap checker.

rpki-client-9.9-1.fc44

Fedora Security Advisories
1 week ago
FEDORA-2026-fb17adc9de Packages in this update:
  • rpki-client-9.9-1.fc44
Update description: rpki-client 9.9
  • Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps reduce load on both the RP itself and the publication points. It reduces log clutter and improves RP run duration.
  • Support for OpenSSL 4.
  • Add additional fail safe: only output config files on successful run.
  • In Rsync mode, include .gbr files in transfer for backwards compatibility.
  • Exclude hidden files and directories (/.*) when synchronizing via Rsync.
  • Limit the length of filenames as they appear in various ASN.1 fields to 255.
  • Improve readability by printing CCR ManifestState sorted by AKI.
  • Improve warnings related to malformed CCRs.
  • Limit the range of deltas added to the queue.
  • Rework error handling in rrdp_handle_file.
  • Ensure consistent states in persistent HTTP connections.
  • Tighten well-formedness checks on AIA & SIA extensions in certs.
  • Clear last_modified after each response on a persistent HTTP connection.
  • ASPAs with too many providers are no longer included in CCR output.
  • Replace assert() with a graceful failure by aborting the http request.
  • Fix a off-by-one in the internal IP address overlap checker.

kernel-7.1.10-200.fc44

Fedora Security Advisories
1 week ago
FEDORA-2026-73acdf12db Packages in this update:
  • kernel-7.1.10-200.fc44
Update description:

The 7.1.10 stable kernel update contains a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream will assign CVEs, but we will not know what those are until a bit after this update ships.

kernel-7.1.10-100.fc43

Fedora Security Advisories
1 week ago
FEDORA-2026-6d18f005f1 Packages in this update:
  • kernel-7.1.10-100.fc43
Update description:

The 7.1.10 stable kernel update contains a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream will assign CVEs, but we will not know what those are until a bit after this update ships.