An ocsinventory-agent security update has been released for Fedora 31
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-4c8a066b83
2020-01-16 19:15:48.104563
--------------------------------------------------------------------------------
Name : ocsinventory-agent
Product : Fedora 31
Version : 2.6.0
Release : 3.2.fc31
URL : http://www.ocsinventory-ng.org/
Summary : Open Computer and Software Inventory Next Generation client
Description :
Open Computer and Software Inventory Next Generation is an application
designed to help a network or system administrator keep track of computer
configuration and software installed on the network.
It also allows deploying software, commands or files on Windows and
Linux client computers.
ocsinventory-agent provides the client for Linux (Unified Unix Agent).
--------------------------------------------------------------------------------
Update Information:
Per Upstream, a malicious CA could result in unexpected inventory access with
the System CA patch. The risk is very low. That patch is now dropped.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2020 Pat Riehecky - 2.6.0-3.2
- More cleanup UTF8 parse
- Smarter use of local CA list
* Fri Dec 27 2019 Pat Riehecky - 2.6.0-3.1
- Cleanup UTF8 parse
- drop system CA list, keep local CA list
* Wed Dec 18 2019 Pat Riehecky - 2.6.0-3
- Use system CA certs if no custom client CA set
* Tue Dec 3 2019 Pat Riehecky - 2.6.0-2.1
- Backport a few patches from upstream
* Thu Aug 15 2019 Pat Riehecky - 2.6.0-2
- Return to Fedora
- Use systemd timers rather than cron for regular runs
- Add a handful of possible timers users might want
* Mon May 20 2019 Philippe Beaumont - 2.6.0-1
- Update to 2.6.0
* Mon Dec 31 2018 Philippe Beaumont - 2.4.2-3
- Remove Module::Install as dependancy
* Mon Dec 24 2018 Philippe Beaumont - 2.4.2-2
- Add core agent
* Tue Jul 31 2018 Philippe Beaumont - 2.4.2-1
- Update to 2.4.2
* Sun Feb 11 2018 Philippe Beaumont - 2.4.0-1
- Update to 2.4.0
* Mon Jan 15 2018 Philippe Beaumont - 2.3.0-2
- Add SSL dependancies
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1786712 - Failed to load Ocsinventory::Agent, Global symbol "$self" requires explicit package name
https://bugzilla.redhat.com/show_bug.cgi?id=1786712
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-4c8a066b83' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
