New Packages for Noetic 2021-09-27

sloretz · 2021-09-27T17:48:23.939Z

We’re happy to announce 6 new packages and 58 updates are now available in ROS Noetic. This sync was tagged as noetic/2021-09-27.

Besides the normal package updates, this update also includes a fix for CVE-2021-37146 in ros_comm. In versions of ros_comm up to and including version 1.15.11, a malformed XMLRPC request would cause roscore to spend an excessive amount of time processing the request, leading to a potential denial-of-service with repeated requests. A fix to make the XMLRPC server in roscore reject malformed requests was merged in PR https://github.com/ros/ros_comm/pull/2185, and released in ros_comm version 1.15.13 (part of this sync). We rate the impact of this vulnerability as low; an attacker with access to roscore could do various other things to cause a denial-of-service attack or worse. To our knowledge this vulnerability was never seen in the wild. This issue was initially reported by Junfeng Yang from Didi Research America, LLC.

Thank you to every maintainer and contributor who made these updates available!

Package Updates for ROS Noetic

Added Packages [6]:

ros-noetic-clober-msgs: 1.0.1-1
ros-noetic-microstrain-inertial-examples: 2.0.4-1
ros-noetic-qb-chain-control: 2.2.2-1
ros-noetic-qb-chain-description: 2.2.2-1
ros-noetic-qb-move-control: 2.2.2-1
ros-noetic-qb-move-description: 2.2.2-1

Updated Packages [58]:

ros-noetic-apriltag: 3.1.5-1 → 3.1.6-1
ros-noetic-audio-capture: 0.3.11-1 → 0.3.12-1
ros-noetic-audio-common: 0.3.11-1 → 0.3.12-1
ros-noetic-audio-common-msgs: 0.3.11-1 → 0.3.12-1
ros-noetic-audio-play: 0.3.11-1 → 0.3.12-1
ros-noetic-bosch-locator-bridge: 1.0.2-1 → 1.0.3-1
ros-noetic-computer-status-msgs: 2.0.0-2 → 2.1.0-1
ros-noetic-eigenpy: 2.6.7-1 → 2.6.8-1
ros-noetic-franka-control: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-description: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-example-controllers: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-gazebo: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-gripper: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-hw: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-msgs: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-ros: 0.8.0-1 → 0.8.1-1
ros-noetic-franka-visualization: 0.8.0-1 → 0.8.1-1
ros-noetic-libmavconn: 1.8.0-1 → 1.9.0-1
ros-noetic-mavlink: 2021.8.8-1 → 2021.9.9-1
ros-noetic-mavros: 1.8.0-1 → 1.9.0-1
ros-noetic-mavros-extras: 1.8.0-1 → 1.9.0-1
ros-noetic-mavros-msgs: 1.8.0-1 → 1.9.0-1
ros-noetic-message-filters: 1.15.11-1 → 1.15.13-1
ros-noetic-microstrain-inertial-driver: 2.0.2-1 → 2.0.4-1
ros-noetic-microstrain-inertial-msgs: 2.0.2-1 → 2.0.4-1
ros-noetic-pcl-conversions: 1.7.2-1 → 1.7.3-1
ros-noetic-pcl-ros: 1.7.2-1 → 1.7.3-1
ros-noetic-perception-pcl: 1.7.2-1 → 1.7.3-1
ros-noetic-plotjuggler: 3.2.1-1 → 3.3.0-1
ros-noetic-psen-scan-v2: 0.3.1-1 → 0.3.2-1
ros-noetic-ros-comm: 1.15.11-1 → 1.15.13-1
ros-noetic-rosbag: 1.15.11-1 → 1.15.13-1
ros-noetic-rosbag-storage: 1.15.11-1 → 1.15.13-1
ros-noetic-roscpp: 1.15.11-1 → 1.15.13-1
ros-noetic-rosgraph: 1.15.11-1 → 1.15.13-1
ros-noetic-roslaunch: 1.15.11-1 → 1.15.13-1
ros-noetic-roslz4: 1.15.11-1 → 1.15.13-1
ros-noetic-rosmaster: 1.15.11-1 → 1.15.13-1
ros-noetic-rosmsg: 1.15.11-1 → 1.15.13-1
ros-noetic-rosnode: 1.15.11-1 → 1.15.13-1
ros-noetic-rosout: 1.15.11-1 → 1.15.13-1
ros-noetic-rosparam: 1.15.11-1 → 1.15.13-1
ros-noetic-rospy: 1.15.11-1 → 1.15.13-1
ros-noetic-rospy-message-converter: 0.5.6-1 → 0.5.7-1
ros-noetic-rosservice: 1.15.11-1 → 1.15.13-1
ros-noetic-rostest: 1.15.11-1 → 1.15.13-1
ros-noetic-rostopic: 1.15.11-1 → 1.15.13-1
ros-noetic-roswtf: 1.15.11-1 → 1.15.13-1
ros-noetic-slam-toolbox: 1.5.5-1 → 1.5.6-1
ros-noetic-slam-toolbox-msgs: 1.5.5-1 → 1.5.6-1
ros-noetic-slam-toolbox-rviz: 1.5.5-1 → 1.5.6-1
ros-noetic-sound-play: 0.3.11-1 → 0.3.12-1
ros-noetic-sr-hand-detector: 0.0.6-1 → 0.0.7-1
ros-noetic-test-mavros: 1.8.0-1 → 1.9.0-1
ros-noetic-topic-tools: 1.15.11-1 → 1.15.13-1
ros-noetic-ur-client-library: 0.3.1-1 → 0.3.2-1
ros-noetic-xacro: 1.14.8-1 → 1.14.9-1
ros-noetic-xmlrpcpp: 1.15.11-1 → 1.15.13-1

Removed Packages [0]:

Thanks to all ROS maintainers who make packages available to the ROS community. The above list of packages was made possible by the work of the following maintainers:

Alessandro Tondo
Alexander Gutenkunst
Austin Hendrix
Davide Faconti
Felix Exner
Franka Emika GmbH
Isaac I.Y. Saito
Jacob Perron
Justin Carpentier
Martin Günther
Max Krogius
Paul Bovbel
Rob Fisher
Robert Haschke
Shadow Robot’s Software Team
Stefan Laible
Steve Macenski
Vladimir Ermakov
clobot-git

Osilva · 2021-09-30T11:58:27.534Z

Thank you for the update.

system · 2021-10-30T11:59:04.164Z

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.