package-announce January 2019

package-announce@lists.fedoraproject.org

1 participants
1555 discussions

[SECURITY] Fedora 28 Update: docker-1.13.1-63.git1185cfd.fc28
by updates＠fedoraproject.org 30 Jan '19

30 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-901feba171 2019-01-31 02:11:11.622088 -------------------------------------------------------------------------------- Name : docker Product : Fedora 28 Version : 1.13.1 Release : 63.git1185cfd.fc28 URL : https://github.com/projectatomic/docker Summary : Automates deployment of containerized applications Description : Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container that a developer builds and tests on a laptop will run at scale, in production*, on VMs, bare-metal servers, OpenStack clusters, public instances, or combinations of the above. -------------------------------------------------------------------------------- Update Information: - Resolves: #1666565, #1666566 - CVE-2018-20699 - Resolves: #1663068, #1667622 - umount all procfs and sysfs with --no-pivot - built docker @projectatomic/docker-1.13.1 commit 1185cfd - built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 19 2019 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-63.git1185cfd - Resolves: #1666565, #1666566 - CVE-2018-20699 - Resolves: #1663068, #1667622 - umount all procfs and sysfs with --no-pivot - built docker @projectatomic/docker-1.13.1 commit 1185cfd - built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43 * Mon Jul 23 2018 Jonathan Lebon <jonathan(a)jlebon.com> - 2:1.13.1-61.git9cb56fd - simplify d-s-s config file installation * Sun Jul 8 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-60.git9cb56fd - Resolves: #1598581, #1598583 - CVE-2018-10892 - built docker @projectatomic/docker-1.13.1 commit 9cb56fd - built docker-novolume-plugin commit 385ec70 - built rhel-push-plugin commit af9107b - built docker-lvm-plugin commit 20a1f68 - built docker-runc @projectatomic/docker-1.13.1 commit b425831 - built docker-containerd @projectatomic/docker-1.13.1 commit 42e825a - built docker-init commit fec3683 - built libnetwork commit d00ceed - update comments in /etc/sysconfig/docker RE: registries.conf From: Tom Sweeney <tsweeney(a)redhat.com> * Tue Jun 12 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-59.gitaf6b32b - built docker @projectatomic/docker-1.13.1 commit af6b32b - built docker-novolume-plugin commit 385ec70 - built rhel-push-plugin commit af9107b - built docker-lvm-plugin commit 6675634 - built docker-runc @projectatomic/docker-1.13.1 commit b425831 - built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68 - built docker-init commit fec3683 - built libnetwork commit 19279f0 * Tue Jun 12 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-58.git6c336e4 - built docker-runc @projectatomic/docker-1.13.1 commit 18eb957 * Wed Jun 6 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-57.git6c336e4 - remove outdated comment about docker_transition_unconfined * Thu May 24 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-56.git6c336e4 - rebased container-storage-setup to 0.11.0 commit 65f91d4 * Wed May 23 2018 Colin Walters <walters(a)verbum.org> - 2:1.13.1-55.git6c336e4 - Drop oci-register-machine Recommends; this broke a downstream build because oci-register-machine was missing systemd-nspawn as a dependency, but generally it has not been worth maintaining. See previous discussion: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2016-May… * Mon May 21 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-54.git6c336e4 - Resolves: #1559274 - built docker @projectatomic/docker-1.13.1 commit 6c336e4 - built docker-novolume-plugin commit 385ec70 - built rhel-push-plugin commit af9107b - built docker-lvm-plugin commit 04caa55 - built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa - built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68 - built docker-init commit 5b117de - built libnetwork commit c15b372 * Tue May 15 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-53.git89b0e65 - do not compress debuginfo with dwz to support delve debugger * Fri Apr 13 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-52.git89b0e65 - Resolves: #1558425 - built docker @projectatomic/docker-1.13.1 commit 89b0e65 - built docker-novolume-plugin commit 385ec70 - built rhel-push-plugin commit af9107b - built docker-lvm-plugin commit 04caa55 - built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa - built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68 - built docker-init commit 5b117de - built libnetwork commit c15b372 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1663068 - runc: not using pivot_root allows mounting of /proc https://bugzilla.redhat.com/show_bug.cgi?id=1663068 [ 2 ] Bug #1666565 - CVE-2018-20699 docker: Memory exhaustion via large integer used with --cpuset-mems or --cpuset-cpus https://bugzilla.redhat.com/show_bug.cgi?id=1666565 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-901feba171' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 28 Update: fedmod-0.4.5-1.fc28
by updates＠fedoraproject.org 30 Jan '19

30 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-e51273b24a 2019-01-31 02:11:11.622073 -------------------------------------------------------------------------------- Name : fedmod Product : Fedora 28 Version : 0.4.5 Release : 1.fc28 URL : https://pagure.io/modularity/fedmod Summary : Utilities for generating & maintaining modulemd files Description : fedmod provides tools for converting existing RPMs (most notably metapackages) into module definitions in Fedora's modulemd format. -------------------------------------------------------------------------------- Update Information: This update fixes a crash when using non-default datasets and allows using dashes in dataset release names. Additionally, it adds the `--flatpak-common` option, copes with Flatpak manifests using `id` rather than `app-id` and cleans up modulemd files generated for Flatpaks. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-e51273b24a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 28 Update: spectrwm-3.2.0-1.fc28
by updates＠fedoraproject.org 30 Jan '19

30 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-281130eb4d 2019-01-31 02:11:11.621961 -------------------------------------------------------------------------------- Name : spectrwm Product : Fedora 28 Version : 3.2.0 Release : 1.fc28 URL : https://github.com/conformal/spectrwm Summary : Minimalist tiling window manager written in C Description : Spectrwm is a small dynamic tiling window manager for X11. It tries to stay out of the way so that valuable screen real estate can be used for much more important stuff. It has sane defaults and does not require one to learn a language to do any configuration. It was written by hackers for hackers and it strives to be small, compact and fast. -------------------------------------------------------------------------------- Update Information: Update to 3.2.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 2 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3.2.0-1 - Update to 3.2.0 * Mon Jul 23 2018 <lars(a)oddbit.com> - 3.1.0-1 - Update to 3.1.0 * Mon Jul 23 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3.0.2-7 - Resolves: #1606394 - FTBFS issue (add BR: gcc) * Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-281130eb4d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 29 Update: xdg-desktop-portal-1.2.0-1.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-67c2f827b4 2019-01-30 02:06:12.445810 -------------------------------------------------------------------------------- Name : xdg-desktop-portal Product : Fedora 29 Version : 1.2.0 Release : 1.fc29 URL : https://github.com/flatpak/xdg-desktop-portal/ Summary : Portal frontend service to flatpak Description : xdg-desktop-portal works by exposing a series of D-Bus interfaces known as portals under a well-known name (org.freedesktop.portal.Desktop) and object path (/org/freedesktop/portal/desktop). The portal interfaces include APIs for file access, opening URIs, printing and others. -------------------------------------------------------------------------------- Update Information: Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID works in flatpakrepo files in all cases. * Don't error out with empty installations in uninstall. * Add helper that validates icon files during export. * Don't allow root to modify the (non-root) per-user flatpak installation, as this risks causing problems later. * Remove some incorrect warnings from flatpak repair. * Allow multiple name segments after prefix when exporting files. * Allow specification of ellipsization in --colums options. * Handle dates as well as timestamps in appdata * Fixed a bug where flatpak remote-delete removed too many refs. * Now we use raw terminal mode during a transaction to a avoid problems with input during the operation causing problems with escape sequences. * Generate a fontconfig directory remapping snippet as will be needed for newer versions of fontconfig. * Support --extra-collection-id in build-commit-from to bind the commit to multiple collection ids. This is work in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache, fixing the build of large applications like libreoffice in some cases. * Add new default-branch manifest option to allow overridable branch name. xdg-desktop- portal 1.2.0 * notification: Use icon validator from flatpak * notification: Don't leave temp files around * email: Validate options better * inhibit: Validate options better * file chooser: Add support for setting the current filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation updates * file chooser: Support setting current filter -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.2.0-1 - Update to 1.2.0 (#1669552) * Tue Oct 9 2018 David King <amigadave(a)amigadave.com> - 1.0.3-1 - Update to 1.0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669554 [ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669552 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 29 Update: flatpak-builder-1.0.3-1.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-67c2f827b4 2019-01-30 02:06:12.445810 -------------------------------------------------------------------------------- Name : flatpak-builder Product : Fedora 29 Version : 1.0.3 Release : 1.fc29 URL : http://flatpak.org/ Summary : Tool to build flatpaks from source Description : Flatpak-builder is a tool for building flatpaks from sources. See http://flatpak.org/ for more information. -------------------------------------------------------------------------------- Update Information: Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID works in flatpakrepo files in all cases. * Don't error out with empty installations in uninstall. * Add helper that validates icon files during export. * Don't allow root to modify the (non-root) per-user flatpak installation, as this risks causing problems later. * Remove some incorrect warnings from flatpak repair. * Allow multiple name segments after prefix when exporting files. * Allow specification of ellipsization in --colums options. * Handle dates as well as timestamps in appdata * Fixed a bug where flatpak remote-delete removed too many refs. * Now we use raw terminal mode during a transaction to a avoid problems with input during the operation causing problems with escape sequences. * Generate a fontconfig directory remapping snippet as will be needed for newer versions of fontconfig. * Support --extra-collection-id in build-commit-from to bind the commit to multiple collection ids. This is work in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache, fixing the build of large applications like libreoffice in some cases. * Add new default-branch manifest option to allow overridable branch name. xdg-desktop- portal 1.2.0 * notification: Use icon validator from flatpak * notification: Don't leave temp files around * email: Validate options better * inhibit: Validate options better * file chooser: Add support for setting the current filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation updates * file chooser: Support setting current filter -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.0.3-1 - Update to 1.0.3 * Tue Jan 15 2019 Kalev Lember <klember(a)redhat.com> - 1.0.2-1 - Update to 1.0.2 - Change bzr requires to recommends * Tue Oct 16 2018 Kalev Lember <klember(a)redhat.com> - 1.0.1-2 - Change svn requires to recommends (#1639355) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669554 [ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669552 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 29 Update: xdg-desktop-portal-gtk-1.2.0-1.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-67c2f827b4 2019-01-30 02:06:12.445810 -------------------------------------------------------------------------------- Name : xdg-desktop-portal-gtk Product : Fedora 29 Version : 1.2.0 Release : 1.fc29 URL : https://github.com/flatpak/xdg-desktop-portal-gtk Summary : Backend implementation for xdg-desktop-portal using GTK+ Description : A backend implementation for xdg-desktop-portal that is using GTK+ and various pieces of GNOME infrastructure, such as the org.gnome.Shell.Screenshot or org.gnome.SessionManager D-Bus interfaces. -------------------------------------------------------------------------------- Update Information: Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID works in flatpakrepo files in all cases. * Don't error out with empty installations in uninstall. * Add helper that validates icon files during export. * Don't allow root to modify the (non-root) per-user flatpak installation, as this risks causing problems later. * Remove some incorrect warnings from flatpak repair. * Allow multiple name segments after prefix when exporting files. * Allow specification of ellipsization in --colums options. * Handle dates as well as timestamps in appdata * Fixed a bug where flatpak remote-delete removed too many refs. * Now we use raw terminal mode during a transaction to a avoid problems with input during the operation causing problems with escape sequences. * Generate a fontconfig directory remapping snippet as will be needed for newer versions of fontconfig. * Support --extra-collection-id in build-commit-from to bind the commit to multiple collection ids. This is work in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache, fixing the build of large applications like libreoffice in some cases. * Add new default-branch manifest option to allow overridable branch name. xdg-desktop- portal 1.2.0 * notification: Use icon validator from flatpak * notification: Don't leave temp files around * email: Validate options better * inhibit: Validate options better * file chooser: Add support for setting the current filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation updates * file chooser: Support setting current filter -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.2.0-1 - Update to 1.2.0 * Wed Jan 16 2019 Kalev Lember <klember(a)redhat.com> - 1.1.1-1 - Update to 1.1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669554 [ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669552 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 29 Update: flatpak-1.2.0-1.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-67c2f827b4 2019-01-30 02:06:12.445810 -------------------------------------------------------------------------------- Name : flatpak Product : Fedora 29 Version : 1.2.0 Release : 1.fc29 URL : http://flatpak.org/ Summary : Application deployment framework for desktop apps Description : flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. -------------------------------------------------------------------------------- Update Information: Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID works in flatpakrepo files in all cases. * Don't error out with empty installations in uninstall. * Add helper that validates icon files during export. * Don't allow root to modify the (non-root) per-user flatpak installation, as this risks causing problems later. * Remove some incorrect warnings from flatpak repair. * Allow multiple name segments after prefix when exporting files. * Allow specification of ellipsization in --colums options. * Handle dates as well as timestamps in appdata * Fixed a bug where flatpak remote-delete removed too many refs. * Now we use raw terminal mode during a transaction to a avoid problems with input during the operation causing problems with escape sequences. * Generate a fontconfig directory remapping snippet as will be needed for newer versions of fontconfig. * Support --extra-collection-id in build-commit-from to bind the commit to multiple collection ids. This is work in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache, fixing the build of large applications like libreoffice in some cases. * Add new default-branch manifest option to allow overridable branch name. xdg-desktop- portal 1.2.0 * notification: Use icon validator from flatpak * notification: Don't leave temp files around * email: Validate options better * inhibit: Validate options better * file chooser: Add support for setting the current filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation updates * file chooser: Support setting current filter -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.2.0-1 - Update to 1.2.0 - Enable installed tests and add to tests subpackage * Fri Dec 14 2018 David King <amigadave(a)amigadave.com> - 1.0.6-4 - Fix OCI download progress reporting * Fri Nov 30 2018 fedora-toolbox <otaylor(a)redhat.com> - 1.0.6-3 - Add a patch to fix OCI system remotes - Add patch fixing permissions on icons downloaded from an OCI registry * Fri Nov 16 2018 Kalev Lember <klember(a)redhat.com> - 1.0.6-1 - Update to 1.0.6 * Mon Nov 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.5-2 - Recommend p11-kit-server instead of just p11-kit (#1649049) * Mon Nov 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.5-1 - Update to 1.0.5 * Fri Oct 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.4-1 - Update to 1.0.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669554 [ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1669552 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 29 Update: lua-5.3.5-3.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-ee57bda7ae 2019-01-30 02:06:12.445800 -------------------------------------------------------------------------------- Name : lua Product : Fedora 29 Version : 5.3.5 Release : 3.fc29 URL : http://www.lua.org/ Summary : Powerful light-weight programming language Description : Lua is a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Lua is free software. Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and extensible semantics. Lua is dynamically typed, interpreted from bytecodes, and has automatic memory management with garbage collection, making it ideal for configuration, scripting, and rapid prototyping. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2019-6706. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2019 Tom Callaway <spot(a)fedoraproject.org> - 5.3.5-3 - apply fix for CVE-2019-6706 (bz1670020) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1670019 - CVE-2019-6706 lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1670019 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-ee57bda7ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 29 Update: radvd-2.17-17.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-9790f1867a 2019-01-30 02:06:12.445789 -------------------------------------------------------------------------------- Name : radvd Product : Fedora 29 Version : 2.17 Release : 17.fc29 URL : http://www.litech.org/radvd/ Summary : A Router Advertisement daemon Description : radvd is the router advertisement daemon for IPv6. It listens to router solicitations and sends router advertisements as described in "Neighbor Discovery for IP Version 6 (IPv6)" (RFC 2461). With these advertisements hosts can automatically configure their addresses and some other parameters. They also can choose a default router based on these advertisements. Install radvd if you are setting up IPv6 network and/or Mobile IPv6 services. -------------------------------------------------------------------------------- Update Information: Fix double-free in InterfaceList -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 27 2019 Pavel Zhukov <pzhukov(a)redhat.com> - 2.17-17 - Fix double-free in InterfaceList * Tue Nov 27 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 2.17-16 - Depends on network-online target (#1652459) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1669297 - radvd: Use After Free in case of misconfiguration https://bugzilla.redhat.com/show_bug.cgi?id=1669297 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-9790f1867a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 29 Update: filezilla-3.40.0-1.fc29
by updates＠fedoraproject.org 29 Jan '19

29 Jan '19

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-4d42825ffa 2019-01-30 02:06:12.445778 -------------------------------------------------------------------------------- Name : filezilla Product : Fedora 29 Version : 3.40.0 Release : 1.fc29 URL : http://filezilla-project.org/ Summary : FTP, FTPS and SFTP client Description : FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS (FTPS) and SSH File Transfer Protocol (SFTP) - Cross-platform - Available in many languages - Supports resume and transfer of large files >4GB - Easy to use Site Manager and transfer queue - Drag & drop support - Speed limits - Filename filters - Network configuration wizard -------------------------------------------------------------------------------- Update Information: 3.40.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 25 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 3.40.0-1 - 3.40.0 final. * Tue Jan 22 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 3.40.0-0.rc2 - 3.40.0 rc2 * Fri Nov 30 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.39.0-1 - 3.39.0 final. * Mon Nov 26 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.39.0-0.rc1 - 3.39.0-rc1 * Sun Oct 28 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.38.1-1 - 3.38.1 * Fri Oct 26 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.38.0-1 - 3.38.0 * Fri Oct 19 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.38.0-0.rc1 - 3.38.0-rc1 * Fri Oct 5 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.37.4-1 - 3.37.4 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-4d42825ffa' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
...
156
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce January 2019