ELBA-2024-29892

ELBA-2024-29892 - needrestart Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2024-11-25

Description

[3.8-1]
- Update to 3.8 to fix several CVEs:
- CVE-2024-48991: Prevent race condition on /proc//exec evaluation
- CVE-2024-11003: Drop usage of Module::ScanDeps to prevent LPE.
- CVE-2024-48990: Do not set PYTHONPATH environment variable to prevent a LPE.
- CVE-2024-48992: Do not set RUBYLIB environment variable to prevent a LPE.

[3.6-14]
- convert license to SPDX

[3.6-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[3.6-12]
- Rebuilt for Python 3.13

[3.6-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[3.6-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[3.6-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[3.6-8]
- Rebuilt for Python 3.12

[3.6-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[3.6-6]
- Add BR perl-generators to automatically generates run-time dependencies
for installed Perl files

[3.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[3.6-4]
- Rebuilt for Python 3.11

[3.6-3]
- fix changelog

[3.6-2]
- Fix debconf template

[3.6-1]
- NUR

[3.5-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[3.5-8]
- Don't own /usr/lib/python3.X/site-packages

[3.5-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[3.5-6]
- Rebuilt for Python 3.10

[3.5-5]
- move 'iucode-tool' to Recommends as it is not available in all
architectures

[3.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.5-2]
- Rebuilt for Python 3.9

[3.5-1]
- NUR: removed patch integrated upstream and update debconf template
- downgrade debconf to Recommends on systems supporting weak dependencies

-[3.4-5
- Rebuilt for Python 3.9

[3.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[3.4-3]
- Rebuilt for Python 3.8

[3.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.4-1]
- NUR
- backport patch to blacklist the network service; accepted
upstream but not yet released
- remove workaround related to terminal size detection in
a non-interractive situation, fixed upstream
(see https://github.com/liske/needrestart/pull/110)
- update debconf templates

[3.3-3]
- limit Python files to the actual plugin, thus avoiding to embed Python
bytecode and also owning the general Python lib path by mistake
(fixes #1672094)

[3.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.3-1]
- NUR
- YUM plugin: use subprocess32 as recommended by Python
subprocess documentation, and catch all exceptions
- removes the 20-rpm hook, this is breaking the RPM DB
- workaround needrestart#123
- add missing dependency on 'iucode-tool'
- install new documentation file 'README.uCode.md'
- update debconf templates
- NUR: removed all patches, integrated upstream
- added workaround for GetTerminalSize problem when used
non-interractively (see needrestart#110)
- fix crash with YUM plugin when called by yum-cron

[2.11-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.11-10]
- Rebuilt for Python 3.7

[2.11-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.11-8]
- fix 'check_needed' variable scope in YUM plugin
- fix YUM plugin Python encoding problem
- declare YUM plugin can be run non-interactively
- YUM/DNF plugins: run non-interactively if --assumeyes is used

[2.11-7]
- forgot the %{?dist} release component

[2.11-6]
- Thanks Matthias Runge Mauchin for the review
- break description line too long

[2.11-5]
- add dependency on respective YUM/DNF packages to avoid unowned directories

[2.11-4]
- make the changelog more readable

[2.11-3]
- YUM plugin: call needrestart in close_hook to avoid RPMDB mess
- fix conditional to install DNF plugin instead of YUM plugin
- build depends on python3-devel to get the related macros
- fix DNF plugin directory creation

[2.11-2]
- update YUM and DNF plugins: don't crash when needrestart itself is being removed

[2.11-1]
- initial packaging

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	needrestart-3.8-1.el8.src.rpm	a291e3fe5081f1e57ddef9202f724fbd	-	ol8_aarch64_developer_EPEL
	needrestart-3.8-1.el8.noarch.rpm	9422e466a6644778e3e75390e05e85d8	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	needrestart-3.8-1.el8.src.rpm	a291e3fe5081f1e57ddef9202f724fbd	-	ol8_x86_64_developer_EPEL
	needrestart-3.8-1.el8.noarch.rpm	9422e466a6644778e3e75390e05e85d8	-	ol8_x86_64_developer_EPEL