Fedora 30 Update: texstudio-2.12.22-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-902433c946
2020-01-31 01:11:29.743325
--------------------------------------------------------------------------------
Name : texstudio
Product : Fedora 30
Version : 2.12.22
Release : 1.fc30
URL : https://www.texstudio.org
Summary : A feature-rich editor for LaTeX documents
Description :
TeXstudio, formerly known as TexmakerX is a fork of the
LaTeX IDE TexMaker and gives you an environment where you can
easily create and manage LaTeX documents.
It provides modern writing support, like interactive spell checking,
code folding and syntax highlighting.
Also it serves as a starting point from where you can easily run
all necessary LaTeX tools.
Although TeXstudio has a lot of additional features,
it tries to be like an improved version of Texmaker,
so it keeps it look&feel.
--------------------------------------------------------------------------------
Update Information:
- bugfix release - https://github.com/texstudio-
org/texstudio/compare/2.12.20...2.12.22 ---- - update to 2.12.20 - fixes
https://github.com/texstudio-org/texstudio/issues/861
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 18 2020 Johannes Lips <hannes(a)fedoraproject.org> 2.12.22-1
- Update to latest upstream bugfix release 2.12.22
* Fri Jan 17 2020 Marek Kasik <mkasik(a)redhat.com> 2.12.20-2
- Rebuild for poppler-0.84.0
* Tue Jan 14 2020 Johannes Lips <hannes(a)fedoraproject.org> 2.12.20-1
- Update to latest upstream bugfix release 2.12.20
* Thu Dec 26 2019 Johannes Lips <hannes(a)fedoraproject.org> 2.12.18-1
- Update to latest upstream bugfix release 2.12.18
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.12.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun May 19 2019 Johannes Lips <hannes(a)fedoraproject.org> 2.12.16-1
- Update to latest upstream bugfix release 2.12.16
- added qt5-qtsvg as requires to fix bug #1716129
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-902433c946' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: debmirror-2.33-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-e7807c1d4f
2020-01-31 01:11:29.743310
--------------------------------------------------------------------------------
Name : debmirror
Product : Fedora 30
Version : 2.33
Release : 1.fc30
URL : http://packages.qa.debian.org/d/debmirror.html
Summary : Debian partial mirror script, with ftp and package pool support
Description :
This program downloads and maintains a partial local Debian mirror.
It can mirror any combination of architectures, distributions and
sections. Files are transferred by ftp, http, hftp or rsync, and package
pools are fully supported. It also does locking and updates trace files.
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 18 2020 S��rgio Basto <sergio(a)serjux.com> - 2.33-1
- Update to 2.33
* Mon Oct 7 2019 S��rgio Basto <sergio(a)serjux.com> - 2.32-1
- Update to 2.32
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.30-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782653 - debmirror-2.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1782653
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-e7807c1d4f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
[SECURITY] Fedora 30 Update: xen-4.11.3-3.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-2d9a75fadb
2020-01-31 01:11:29.743295
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 30
Version : 4.11.3
Release : 3.fc30
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
arm: a CPU may speculate past the ERET instruction [XSA-312]
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 14 2020 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.3-3
- arm: a CPU may speculate past the ERET instruction [XSA-312]
* Thu Dec 12 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.3-2
- denial of service in find_next_bit() [XSA-307, CVE-2019-19581,
CVE-2019-19582] (#1782211)
- denial of service in HVM/PVH guest userspace code [XSA-308,
CVE-2019-19583] (#1782206)
- privilege escalation due to malicious PV guest [XSA-309, CVE-2019-19578]
(#1782210)
- Further issues with restartable PV type change operations [XSA-310,
CVE-2019-19580] (#1782207)
- vulnerability in dynamic height handling for AMD IOMMU pagetables
[XSA-311, CVE-2019-19577] (#1782208)
* Tue Dec 3 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.3-1
- update to 4.11.3
remove patches now fixed upstream
adjust xen.use.fedora.ipxe.patch
* Tue Nov 26 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-4
- Device quarantine for alternate pci assignment methods [XSA-306,
CVE-2019-19579] (#1780559)
* Tue Nov 12 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-3
- add missing XSA-299 patches
- x86: Machine Check Error on Page Size Change DoS [XSA-304, CVE-2018-12207]
- TSX Asynchronous Abort speculative side channel [XSA-305, CVE-2019-11135]
* Fri Nov 1 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-2
- VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] (#1771368)
- missing descriptor table limit checking in x86 PV emulation [XSA-298,
CVE-2019-18425] (#1771341)
- Issues with restartable PV type change operations [XSA-299, CVE-2019-18421]
(#1767726)
- add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423]
(#1771345)
- passed through PCI devices may corrupt host memory after deassignment
[XSA-302, CVE-2019-18424] (#1767731)
- ARM: Interrupts are unconditionally unmasked in exception handlers
[XSA-303, CVE-2019-18422] (#1771443)
* Mon Jul 1 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-1
- update to 4.11.2
remove patches now fixed upstream
adjust xen.use.fedora.ipxe.patch
drop parts of xen.gcc9.fixes.patch
* Sat Jun 15 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.1-6
- Unlimited Arm Atomics Operations [XSA-295, CVE-2019-17349,
CVE-2019-17350] (#1720760)
* Tue May 14 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.1-5
- Microarchitectural Data Sampling speculative side channel [XSA-297,
CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091]
- additional patches so above applies cleanly
- work around grub2 issues in dom0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1791288 - arm: a CPU may speculate past the ERET instruction which could lead to host memory read
https://bugzilla.redhat.com/show_bug.cgi?id=1791288
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-2d9a75fadb' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
[SECURITY] Fedora 30 Update: thunderbird-68.4.1-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-d18d24c943
2020-01-31 01:11:29.743281
--------------------------------------------------------------------------------
Name : thunderbird
Product : Fedora 30
Version : 68.4.1
Release : 1.fc30
URL : http://www.mozilla.org/projects/thunderbird/
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 13 2020 Jan Horak <jhorak(a)redhat.com> - 68.4.1-1
- Update to 68.4.1 build1
* Tue Dec 17 2019 Jan Horak <jhorak(a)redhat.com> - 68.3.1-1
- Update to 68.3.1 build1
* Mon Dec 9 2019 Martin Stransky <stransky(a)redhat.com> - 68.3.0-2
- Added fix for mzbz#1576268
* Tue Dec 3 2019 Jan Horak <jhorak(a)redhat.com> - 68.3.0-1
- Update to 68.3.0 build2
* Tue Nov 5 2019 Jan Horak <jhorak(a)redhat.com> - 68.2.2-1
- Update to 68.2.2 build1
* Fri Nov 1 2019 Jan Horak <jhorak(a)redhat.com> - 68.2.1-1
- Update to 68.2.1 build1
* Tue Oct 29 2019 Jan Horak <jhorak(a)redhat.com> - 68.2.0-1
- Update to 68.2.0
* Wed Oct 23 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-4
- Added symbolic icon
* Thu Oct 3 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-3
- Allow downgrades of the profile because after distro upgrade there is a chance
that the the downgrade refusal dialog is shown.
* Fri Sep 27 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-1
- Update to 68.1.1
* Thu Sep 26 2019 Martin Stransky <stransky(a)redhat.com> - 68.1.0-2
- Allow profile downgrade
* Thu Sep 12 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.0-1
- Update to 68.1.0
* Thu Aug 29 2019 Jan Horak <jhorak(a)redhat.com> - 68.0-1
- Update to 68.0
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 60.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed Jul 10 2019 Martin Stransky <stransky(a)redhat.com> - 60.8.0-1
- Update to 60.8.0
* Fri Jun 21 2019 Jan Horak <jhorak(a)redhat.com> - 60.7.2-2
- Update to 60.7.2 build 2
* Thu Jun 20 2019 Jan Horak <jhorak(a)redhat.com> - 60.7.2-1
- Update to 60.7.2
* Tue Jun 18 2019 Jan Horak <jhorak(a)redhat.com> - 60.7.1-1
- Update to 60.7.1
* Mon May 20 2019 Martin Stransky <stransky(a)redhat.com> - 60.7.0-1
- Update to 60.7.0
* Wed May 15 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-5
- Fixed startup crashes (rhbz#1709373, rhbz#1685276, rhbz#1708611)
* Fri Apr 12 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-4
- Addef fix for mozbz#1508378
* Wed Apr 3 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-3
- Added fixes for mozbz#1526243, mozbz#1540145, mozbz#526293
* Tue Mar 26 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-2
- Added rawhide build fix
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-d18d24c943' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: grub2-2.02-88.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-e3adf88ba7
2020-01-31 01:11:29.743267
--------------------------------------------------------------------------------
Name : grub2
Product : Fedora 30
Version : 2.02
Release : 88.fc30
URL : http://www.gnu.org/software/grub/
Summary : Bootloader with support for Linux, Multiboot and more
Description :
The GRand Unified Bootloader (GRUB) is a highly configurable and
customizable bootloader with modular architecture. It supports a rich
variety of kernel formats, file systems, computer architectures and
hardware devices.
--------------------------------------------------------------------------------
Update Information:
Make blscfg to support the GRUB_{SAVEDEFAULT,CMDLINE_LINUX_DEFAULT} options that
were not supported in a BLS configuration
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 13 2020 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-88
- 10_linux.in: Also use GRUB_CMDLINE_LINUX_DEFAULT to set kernelopts
- Make the blscfg module honour the GRUB_SAVEDEFAULT option
Resolves: rhbz#1704926
* Thu Dec 5 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-87
- Drop patch fixing a corner case in BLS variable expansion
Related: rhbz#1779611
* Wed Nov 27 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-86
- blscfg: add a space char when appending fields for variable expansion
- grub.d: Fix boot_indeterminate getting set on boot_success=0 boot
* Tue Nov 26 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-85
- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
Resolves: CVE-2019-14865
Resolves: rhbz#1776580
* Wed Oct 16 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-84
- 99-grub-mkconfig: Also disable BLS usage for Xen Dom0 hosts
Resolves: rhbz#1761799
- blscfg: Fix typo for gfxpayload variable name
Resolves: rhbz#1706489
* Thu Oct 10 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-83
- 99-grub-mkconfig: Fix script condition to exit and remove ppc64 BE check
Related: rhbz#1703700
* Wed Oct 9 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-82
- 99-grub-mkconfig: Disable BLS usage for Xen DomU guests
Resolves: rhbz#1703700
* Mon May 20 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-81
- Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set
* Wed May 15 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-80
- Fix error messages wrongly being printed when executing blscfg command
Resolves: rhbz#1699761
- Remove bogus load_env after blscfg command in 10_linux
* Tue May 7 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-79
- Make blscfg module compatible at least up to the Fedora 19 GRUB core
Related: rhbz#1652806
* Thu Apr 18 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-78
- Add 10_reset_boot_success to Makefile
Related: rhbz#1701003
* Thu Apr 18 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-77
- grub.d: Split out boot success reset from menu auto hide script (lorbus)
Resolves: rhbz#1701003
- HTTP boot: strncmp returns 0 on equal (stephen)
* Mon Apr 15 2019 Javier Martinez Canillas <javierm(a)redhat.com> - 2.02-76
- Execute grub2-switch-to-blscfg script in %posttrans instead of %post
Resolves: rhbz#1652806
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704926 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1704926
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-e3adf88ba7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: pcre2-10.34-4.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1bf28d7626
2020-01-31 01:11:29.743252
--------------------------------------------------------------------------------
Name : pcre2
Product : Fedora 30
Version : 10.34
Release : 4.fc30
URL : https://www.pcre.org/
Summary : Perl-compatible regular expression library
Description :
PCRE2 is a re-working of the original PCRE (Perl-compatible regular
expression) library to provide an entirely new API.
PCRE2 is written in C, and it has its own API. There are three sets of
functions, one for the 8-bit library, which processes strings of bytes, one
for the 16-bit library, which processes strings of 16-bit values, and one for
the 32-bit library, which processes strings of 32-bit values. There are no C++
wrappers. This package provides support for strings in 8-bit and UTF-8
encodings. Install pcre2-utf16 or pcre2-utf32 packages for the other ones.
The distribution does contain a set of C wrapper functions for the 8-bit
library that are based on the POSIX regular expression API (see the pcre2posix
man page). These can be found in a library called libpcre2posix. Note that
this just provides a POSIX calling interface to PCRE2; the regular expressions
themselves still follow Perl syntax and semantics. The POSIX API is
restricted, and does not give full access to all of PCRE2's facilities.
--------------------------------------------------------------------------------
Update Information:
This release fixes a crash in JITted code when a *THEN verb is used in a
lookahead assertion. It also upgrades PCRE2 library to 10.34 version that
provides a support for matching in invalid UTF strings, a non-atomic positive
lookarounds outside JIT, new pcre2_get_match_data_size() and
pcre2_maketables_free() functions, and Unicode 12.1.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 13 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-4
- Fix a crash in JITted code when a *THEN verb is used in a lookahead assertion
(upstream bug #2510)
* Mon Jan 13 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-3
- Fix a crash in pcre2_jit_compile when passing a NULL code argument (upstream
bug #2487)
* Mon Jan 13 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-2
- Fix JIT to respect NOTEMPTY options (upstream bug #2473)
* Mon Jan 13 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-1
- 10.34 bump
* Mon Jan 13 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-0.1.RC2
- 10.34-RC2 bump
- Fix an infinite loop in 64-bit ARM JIT with NEON instructions
* Mon Jan 13 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-0.1.RC1
- 10.34-RC1 bump
* Mon Nov 18 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-16
- Fix optimized caseless matching of non-ASCII characters in assertions
(upstream bug #2466)
* Tue Oct 29 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-15
- Fix a use after free when freeing JIT memory (upstream bug #2453)
- Fix thread-safeness in regexec() (upstream bug #2447)
* Mon Sep 9 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-14
- Fix a crash in JIT match when a subject has a zero length and an invalid
pointer (upstream bug #2440)
* Tue Aug 27 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-13
- Readd a fix for a mismatch with a lookbehind within a lookahead within
a lookbehind and fix the regression in matching a lookbehind after
a condition (bug #1743863)
* Mon Aug 26 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-12
- Revert a fix for a mismatch with a lookbehind within a lookahead within
a lookbehind (bug #1743863)
* Mon Aug 12 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-11
- Fix reporting rightmost consulted characters
* Mon Aug 5 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-10
- Fix an incorrect computation of a group length when a branch exceeds 65535
(upstream bug #2428)
- Use HTTPS protocol in URL metadata
* Mon Jul 22 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-9
- Fix a recursion in compiling an expression with a lookbehind within a
lookahead (upstream bug #2412)
* Wed Jul 17 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-8
- Fix a mismatch with a lookbehind within a lookahead within a lookbehind
(upstream bug #2412)
* Thu Jul 11 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-7
- Fix an integer overflow when checking a lookbehind length
* Wed Jul 3 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-6
- Fix a DFA to recognize a partial match if the end of a subject is encountered
in a lookahead, an atomic group, or a recursion
* Thu Jun 20 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-5
- Do not ignore {1} quantifier when it is applied to a non-possessive group
with more alternatives
* Mon Jun 17 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-4
- Fix a non-JIT match to return (*MARK) names from a successful conditional
assertion
- Fix pcre2grep --only-matching output when number of capturing groups exceeds
32 (upstream bug #2407)
* Mon May 13 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-3
- Correct a misspelling in a documentation
- Fix a crash when \X is used without UTF mode in a JIT (upstream bug #2399)
* Mon May 6 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-2
- Validate number of capturing parentheses
* Tue Apr 16 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-1
- 10.33 bump
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1bf28d7626' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
[SECURITY] Fedora 30 Update: nss-3.49.0-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-9254bf8b94
2020-01-31 01:11:29.743237
--------------------------------------------------------------------------------
Name : nss
Product : Fedora 30
Version : 3.49.0
Release : 1.fc30
URL : http://www.mozilla.org/projects/security/pki/nss/
Summary : Network Security Services
Description :
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.
--------------------------------------------------------------------------------
Update Information:
Updates the nss package to upstream NSS 3.49. For details about new
functionality and a list of bugs fixed in this release please see the upstream
release notes - https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2020 Daiki Ueno <dueno(a)redhat.com> - 3.49.0-1
- Update to NSS 3.49
- Fix build on armv7hl with the patch proposed in upstream
* Fri Jan 3 2020 Daiki Ueno <dueno(a)redhat.com> - 3.48.0-1
- Update to NSS 3.48
* Tue Dec 3 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.1-4
- Update nss-3.47-certdb-temp-cert.patch to avoid setting empty trust value
* Tue Dec 3 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.1-3
- Update nss-3.47-certdb-temp-cert.patch to the final version
* Thu Nov 28 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.1-2
- Fix intermittent SEC_ERROR_UNKNOWN_ISSUER (#1752303, #1648617)
* Fri Nov 22 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.1-1
- Update to NSS 3.47.1
* Thu Nov 7 2019 Bob Relyea <rrelyea(a)redhat.com> - 3.47.0-3
- Include ike mechanism fix
* Wed Oct 23 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.0-2
- Install cmac.h required by blapi.h (#1764513)
* Tue Oct 22 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.0-1
- Update to NSS 3.47
* Mon Oct 21 2019 Daiki Ueno <dueno(a)redhat.com> - 3.46.1-1
- Update to NSS 3.46.1
* Wed Sep 4 2019 Daiki Ueno <dueno(a)redhat.com> - 3.46.0-2
- Rebuild with NSPR 4.22
* Tue Sep 3 2019 Daiki Ueno <dueno(a)redhat.com> - 3.46.0-1
- Update to NSS 3.46
* Tue Jul 2 2019 Daiki Ueno <dueno(a)redhat.com> - 3.44.1-1
- Update to NSS 3.44.1
* Mon May 20 2019 Daiki Ueno <dueno(a)redhat.com> - 3.44.0-2
- Skip TLS 1.3 tests under FIPS mode
* Fri May 17 2019 Daiki Ueno <dueno(a)redhat.com> - 3.44.0-1
- Update to NSS 3.44
* Mon May 6 2019 Daiki Ueno <dueno(a)redhat.com> - 3.43.0-3
- Fix PKCS#11 module leak if C_GetSlotInfo() failed
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-9254bf8b94' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: tigervnc-1.10.1-2.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-067347e8f7
2020-01-31 01:11:29.743222
--------------------------------------------------------------------------------
Name : tigervnc
Product : Fedora 30
Version : 1.10.1
Release : 2.fc30
URL : http://www.tigervnc.com
Summary : A TigerVNC remote display system
Description :
Virtual Network Computing (VNC) is a remote display system which
allows you to view a computing 'desktop' environment not only on the
machine where it is running, but from anywhere on the Internet and
from a wide variety of machine architectures. This package contains a
client which will allow you to connect to other desktops running a VNC
server.
--------------------------------------------------------------------------------
Update Information:
Tigervnc update.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 13 2020 Jan Grulich <jgrulich(a)redhat.com> - 1.10.1-2
- Build with -std=c++11
* Fri Dec 20 2019 Jan Grulich <jgrulich(a)redhat.com> - 1.10.1-1
- Update to 1.10.1
* Tue Dec 10 2019 Jan Grulich <jgrulich(a)redhat.com> - 1.10.0-2
- Properly install systemd files
* Mon Nov 18 2019 Jan Grulich <jgrulich(a)redhat.com> - 1.10.0-1
- Update to 1.10.0
* Fri Oct 18 2019 Jan Grulich <jgrulich(a)redhat.com> - 1.9.90-1
- Update to 1.9.90 (1.10 beta)
- Add systemd user service file
- Use a wrapper for systemd system service file to workaround systemd limitations
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Jul 19 2019 Dan Hor��k <dan[at]danny.cz> - 1.9.0-6
- drop the s390x special handling (related #1727029)
* Wed Jun 12 2019 Jan Grulich <jgrulich(a)redhat.com> - 1.9.0-5
- Add missing arguments to systemd_postun scriptlets
Resolves: bz#1716411
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789916 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1789916
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-067347e8f7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: selinux-policy-3.14.3-55.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-384545235e
2020-01-31 01:11:29.743207
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 30
Version : 3.14.3
Release : 55.fc30
URL : https://github.com/fedora-selinux/selinux-policy
Summary : SELinux policy configuration
Description :
SELinux Base package for SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2.20091117
--------------------------------------------------------------------------------
Update Information:
For more info see: https://koji.fedoraproject.org/koji/buildinfo?buildID=1428717
---- New selinux-policy package build
https://koji.fedoraproject.org/koji/taskinfo?taskID=39961410
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 13 2020 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-55
- Boolean: rngd_t to use executable memory
* Fri Dec 20 2019 Zdenek Pytela <zpytela(a)redhat.com> - 3.14.3-54
- Allow journalctl read init state BZ(1731753)
- Allow named_t domain to mmap named_zone_t files BZ(1647493)
* Mon Dec 2 2019 Zdenek Pytela <zpytela(a)redhat.com> - 3.14.3-53
- Allow spamd_update_t access antivirus_unit_file_t BZ(1774092)
- Allow ksmtuned_t domain to trace processes in user namespace
- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Allow systemd to create and bindmount dirs.
- Allow strongswan start using swanctl method BZ(1773381)
* Sun Nov 3 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-52
- Label /var/cache/nginx as httpd_cache_t
- Allow abrt_upload_watch_t domain to send dgram msgs to kernel processes and stream connect to journald
- Allow capability dac_override in logwatch_mail_t domain
- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
- Allow rhsmcertd_t domain to read/write rtas_errd_var_lock_t files
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
- Label /etc/postfix/chroot-update as postfix_exec_t
- Update tmpreaper_t policy due to fuser command
- Allow kdump_t domain to create netlink_route and udp sockets
- Allow fail2ban_t domain to create netlink netfilter sockets.
- Allow dovecot get filesystem quotas
* Fri Oct 25 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-51
- Allow confined users to run newaliases
- Allow tmpreaper_t domain to read all domains state
- Allow nagios_script_t domain list files labled sysfs_t.
- Allow jetty_t domain search and read cgroup_t files.
- Dontaudit domains read/write leaked pipes
* Tue Oct 22 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-50
- Allow nagios_script_t domain list files labled sysfs_t.
- Allow jetty_t domain search and read cgroup_t files.
- Dontaudit and disallow sys_admin capability for keepalived_t domain
- Update numad policy to allow signull, kill, nice and trace processes
- Label /var/log/hawkey.log as rpm_log_t and update rpm named filetrans interfaces.
- Allow ipmievd_t to RW watchdog devices
- Update allow rules set for pads_t domain
- Allow user domains to manage user session services
- Allow staff and user users to get status of user systemd session
- Update sudo_role_template() to allow caller domain to read syslog pid files
* Wed Oct 9 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-49
- Remove duplicate file context for /usr//bin/nova-api-metadata
- Allow setroubleshoot_fixit_t to read random_device_t
- Label /etc/named direcotory as named_conf_t BZ(1759495)
- Allow dkim to execute sendmail
- Update virt_read_content interface to allow caller domain mmap virt_content_t block devices and files
- Update aide_t domain to allow this tool to analyze also /dev filesystem
- Update interface modutils_read_module_deps to allow caller domain also mmap modules_dep_t files BZ(1758634)
- Allow avahi_t to send msg to xdm_t
- Update dev_manage_sysfs() to support managing also lnk files BZ(1759019)
- Allow systemd_logind_t domain to read blk_files in domain removable_device_t
- Add new interface udev_getattr_rules_chr_files()
* Fri Oct 4 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-48
- Update aide_t domain to allow this tool to analyze also /dev filesystem
- Add net_broadcast capability to openvswitch_t domain BZ(1716044)
- Allow exim_t to read mysqld conf files if exim_can_connect_db is enabled. BZ(1756973)
- Label /var/log/collectd.log as collectd_log_t
- Allow boltd_t domain to manage sysfs files and dirs BZ(1754360)
- Add fowner capability to the pcp_pmlogger_t domain BZ(1754767)
- networkmanager: allow NetworkManager_t to create bluetooth_socket
- Add new interface udev_getattr_rules_chr_files()
- Allow systemd(init_t) to load kernel modules
- Allow xdm_t setpcap capability in user namespace BZ(1756790)
- Allow xdm_t domain to user netlink_route sockets BZ(1756791)
- Allow sudo userdomain to run rpm related commands
- Add sys_admin capability for ipsec_t domain
- Allow systemd_modules_load_t domain to read systemd pid files
- Add new interface init_read_pid_files()
- Allow systemd labeled as init_t domain to manage faillog_t objects
- Add file context ipsec_var_run_t for /var/run/charon\.dck to ipsec.fc
* Fri Sep 20 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-47
- Dontaudit thumb_t domain to getattr of nsfs_t files BZ(1753598)
- Allow rhsmcertd_t domain to read rtas_errd lock files
- Add new interface rtas_errd_read_lock()
- Update allow rules set for nrpe_t domain
- Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label
- Allow dlm_controld_t domain to read random device
- Add sys_ptrace capability to pcp_pmlogger_t domain BZ(1751816)
- Allow gssproxy_t domain read state of all processes on system
- Allow xdm_t domain to read sssd pid files BZ(1753240)
* Fri Sep 13 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-46
- Add sys_ptrace capability to pcp_pmlogger_t domain BZ(1751816)
- Allow gssproxy_t domain read state of all processes on system
- Add travis CI also to F30 selinux-policy contrib repo
- Add sys_admin capability for keepalived_t labeled processes
- Allow user_mail_domain attribute to manage files labeled as etc_aliases_t.
- Fix abrt_upload_watch_t in abrt policy
- Add setgid and setuid capabilities to keepalived_t domain
- Allow psad_t domain to create tcp diag sockets BZ(1750324)
- Allow systemd to mount fwupd_cache_t BZ(1750288)
- Allow rtkit_daemon_t domain set process nice value in user namespaces BZ(1750024)
- Dontaudit rhsmcertd_t to write to dirs labeled as lib_t BZ(1556763)
- Label /var/run/mysql as mysqld_var_run_t
- Allow chronyd_t domain to manage and create chronyd_tmp_t dirs,files,sock_file objects.
- Allow sandbox_web_type domains to sys_ptrace and sys_chroot in user namespaces
- Update gnome_dontaudit_read_config
- Allow devicekit_var_lib_t dirs to be created by systemd during service startup. BZ(1748997)
- Update travis-CI file
- Allow systemd labeled as init_t domain to remount rootfs filesystem
- Add interface files_remount_rootfs()
- Allow systemd to relabel all files on system.
- Allow userdomains to dbus chat with policykit daemon
* Wed Sep 4 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-45
- Allow zabbix_t domain to manage zabbix_var_lib_t sock files and connect to unix_stream_socket
- Dontaudit sandbox web types to setattr lib_t dirs
- Dontaudit system_mail_t domains to check for existence other applications on system BZ(1747369)
- Allow haproxy_t domain to read network state of system
- Allow processes labeled as keepalived_t domain to get process group
- Allow pesign_t domain to read/write named cache files.
- Allow httpd_t domain to read/write named_cache_t files
- Add new interface bind_rw_cache()
- Allow cupsd_t domain to create directory with name ppd in dirs labeled as cupsd_etc_t with label cupsd_rw_etc_t.
- Update cpucontrol_t SELinux policy
- Allow pcp_pmcd_t domain to bind on udp port labeled as statsd_port_t
- Run lldpd service as lldpad_t.
- Allow spamd_update_t domain to create unix dgram sockets.
- Update dbus role template for confined users to allow login into x session
- Label /usr/libexec/microcode_ctl/reload_microcode as cpucontrol_exec_t
- Fix typo in networkmanager_append_log() interface
- Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
- Allow login user type to use systemd user session
- Allow systemd labeled as init_t to remove sockets with tmp_t label BZ(1745632)
- Allow domains systemd_networkd_t and systemd_logind_t to chat over dbus
- Label udp 8125 port as statsd_port_t
* Tue Aug 13 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-44
- cockpit: Allow cockpit-session to read cockpit-tls state
- Allow zebrat_t domain to read state of NetworkManager_t processes BZ(1739983)
- Allow named_t domain to read/write samba_var_t files BZ(1738794)
- Dontaudit abrt_t domain to read root_t files
- Allow ipa_dnskey_t domain to read kerberos keytab
- Allow mongod_t domain to read cgroup_t files BZ(1739357)
- Update ibacm_t policy
- Allow dlm_controld_t domain setgid capability
- Allow tlp domain run tlp in trace mode BZ(1737106)
- Allow cgdcbxd_t domain to list cgroup dirs
- Update ctdbd_t policy
- Update bind_read_cache() interface to allow caller domain also list named_cache_t dirs.
- Allow xdm_t domain to read kernel sysctl BZ(1740385)
- Add sys_admin capability for xdm_t in user namespace. BZ(1740386)
- Allow dbus communications with resolved for DNS lookups
- Allow auditd_t domain to create auditd_tmp_t temporary files and dirs in /tmp or /var/tmp
- Label '/var/usrlocal/(.*/)?sbin(/.*)?' as bin_t
- Update systemd_dontaudit_read_unit_files() interface to dontaudit alos listing dirs
- Run lvmdbusd service as lvm_t
* Tue Jul 30 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-43
- Allow dhcpd_t domain to read network sysctls.
- Allow nut services to communicate with unconfined domains
- Allow virt_domain to Support ecryptfs home dirs.
- Allow domain transition lsmd_t to sensord_t
- Allow httpd_t to signull mailman_cgi_t process
- Allow machinectl to run pull-tar BZ(1724247)
* Fri Jul 26 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-42
- Allow spamd_update_t domain to read network state of system BZ(1733172)
- Allow dlm_controld_t domain to transition to the lvm_t
- Allow sandbox_web_client_t domain to do sys_chroot in user namespace
- Allow virtlockd process read virtlockd.conf file
- Add more permissions for session dbus types to make working dbus broker with systemd user sessions
- Allow sssd_t domain to read gnome config and named cache files
- Allow brltty to request to load kernel module
- Add svnserve_tmp_t label forl svnserve temp files to system private tmp
- Allow sssd_t domain to read kernel net sysctls BZ(1732185)
- Allow mysqld_t domain to domtrans to ifconfig_t domain when executing ifconfig tool
- Allow cyrus work with PrivateTmp
- Make cgdcbxd_t domain working with SELinux enforcing.
- Make working wireshark execute byt confined users staff_t and sysadm_t
- Dontaudit virt_domain to manage ~/.cache dirs BZ(1730963)
- Allow svnserve_t domain to read system state
- Label user cron spool file with user_cron_spool_t
- Update gnome_role_template() template to allow sysadm_t confined user to login to xsession
- Add interface collectd_manage_rw_content()
- Allow lograte_t domain to manage collect_rw_content files and dirs
- Allow ifconfig_t domain to manage vmware logs
- Remove system_r role from staff_u user.
- Add systemd_private_tmp_type attribute
- Allow systemd to load kernel modules during boot process.
- Allow sysadm_t and staff_t domains to read wireshark shared memory
- Label /usr/libexec/utempter/utempter as utemper_exec_t
- Allow ipsec_t domain to read/write l2tpd pipe BZ(1731197)
- Allow sysadm_t domain to create netlink selinux sockets
- Make cgdcbxd active in Fedora upstream sources
* Wed Jul 17 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-41
- Label user cron spool file with user_cron_spool_t
- Update gnome_role_template() template to allow sysadm_t confined user to login to xsession
- Add interface collectd_manage_rw_content()
- Allow lograte_t domain to manage collect_rw_content files and dirs
- Allow systemd_hostnamed_t domain to dbus chat with sosreport_t domain
- Update tomcat_can_network_connect_db boolean to allow tomcat domains also connect to redis ports
- Allow mysqld_t domain to manage cluster pid files
- Relabel /usr/sbin/virtlockd from virt_exec_t to virtlogd_exec_t.
- Allow ptp4l_t domain to write to pmc socket which is created by pmc command line tool
- Allow dkim-milter to send e-mails BZ(1716937)
- Update spamassasin policy to make working /usr/share/spamassassin/sa-update.cron script BZ(1711799)
- Update svnserve_t policy to make working svnserve hooks
- Allow varnishlog_t domain to check for presence of varnishd_t domains
- Update sandboxX policy to make working firefox inside SELinux sandbox
- Remove allow rule from svirt_transition_svirt_sandbox interface to don't allow containers to connect to random services
- Allow httpd_t domain to read /var/lib/softhsm/tokens to allow httpd daemon to use pkcs#11 devices
- Allow gssd_t domain to list tmpfs_t dirs
- Allow mdadm_t domain to read tmpfs_t files
- Allow sbd_t domain to check presence of processes labeled as cluster_t
- Dontaudit httpd_sys_script_t to read systemd unit files
- Allow blkmapd_t domain to read nvme devices
- Update cpucontrol_t domain to make working microcode service
- Allow domain transition from logwatch_t do postfix_postqueue_t
- Allow chronyc_t domain to create and write to non_security files in case when sysadmin is redirecting output to file e.g: 'chronyc -n tracking > /var/lib/test'
- Allow httpd_sys_script_t domain to mmap httpcontent
- Allow sbd_t to manage cgroups_t files
- Update wireshark policy to make working tshar labeled as wireshark_t
- Update virt_use_nfs boolean to allow svirt_t domain to mmap nfs_t files
- Allow sysadm_t domain to create netlink selinux sockets
- Make cgdcbxd active in Fedora upstream sources
- Allow sysadm_t domain to dbus chat with rtkit daemon
- Allow x_userdomains to nnp domain transition to thumb_t domain
- Allow unconfined_domain_type to setattr own process lnk files.
- Add interface files_write_generic_pid_sockets()
- Dontaudit writing to user home dirs by gnome-keyring-daemon
- Allow staff and admin domains to setpcap in user namespace
- Allow staff and sysadm to use lockdev
- Allow staff and sysadm users to run iotop.
- Dontaudit traceroute_t domain require sys_admin capability
- Dontaudit dbus chat between kernel_t and init_t
- Allow systemd labeled as init_t to create mountpoints without any specific label as default_t
* Wed Jul 10 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-40
- Update dbusd policy and netowrkmanager to allow confined users to connect to vpn over NetworkManager
- Allow glusterd_t domain to setpgid
- Allow lsmd_t domain to execute /usr/bin/debuginfo-install
- Allow sbd_t domain to manage cgroup dirs
- Allow opafm_t domain to modify scheduling information of another process.
- Allow wireshark_t domain to create netlink netfilter sockets
- Allow gpg_agent_t domain to use nsswitch
- Allow httpd script types to mmap httpd rw content
- Allow dkim_milter_t domain to execute shell BZ(17116937)
- Allow sbd_t domain to use nsswitch
- Allow rhsmcertd_t domain to send signull to all domains
- Allow snort_t domain to create netlink netfilter sockets BZ(1723184)
- Dontaudit blueman to read state of all domains on system BZ(1722696)
- Allow boltd_t domain to use ps and get state of all domains on system. BZ(1723217)
- Allow rtkit_daemon_t to uise sys_ptrace usernamespace capability BZ(1723308)
- Replace "-" by "_" in types names
- Change condor_domain declaration in condor_systemctl
- Allow firewalld_t domain to read iptables_var_run_t files BZ(1722405)
- Allow spamd_update_t domain to read state of other domains and can execute itself
- Fix all interfaces which cannot by compiled because of typos
- Allow X userdomains to mmap user_fonts_cache_t dirs
- Allow auditd_t domain to send signals to audisp_remote_t domain
- Allow systemd labeled as init_t domain to read/write faillog_t. BZ(1723132)
- Allow systemd_tmpfiles_t domain to relabel from usermodehelper_t files
- Add interface kernel_relabelfrom_usermodehelper()
- Dontaudit unpriv_userdomain to manage boot_t files
- Allow xdm_t domain to mmap /var/lib/gdm/.cache/fontconfig BZ(1725509)
- Allow systemd to execute bootloader grub2-set-bootflag BZ(1722531)
- Allow associate efivarfs_t on sysfs_t
* Tue Jun 18 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-39
- Add vnstatd_var_lib_t to mountpoint attribute BZ(1648864)
- cockpit: Support split-out TLS proxy
- Allow dkim_milter_t to use shell BZ(1716937)
- Create explicit fc rule for mailman executable BZ(1666004)
- Update interface networkmanager_manage_pid_files() to allow manage also dirs
- Allow dhcpd_t domain to mmap dnssec_t files BZ(1718701)
- Add new interface bind_map_dnssec_keys()
- Update virt_use_nfs() boolean to allow virt_t to mmap nfs_t files
- Allow redis_t domain to read public sssd files
- Allow fetchmail_t to connect to dovecot stream sockets BZ(1715569)
- Allow confined users to login via cockpit
- Allow nfsd_t domain to do chroot becasue of new version of nfsd
- Add gpg_agent_roles to system_r roles
- Allow qpidd_t domain to getattr all fs_t filesystem and mmap usr_t files
- Allow rhsmcertd_t domain to manage rpm cache
- Allow sbd_t domain to read tmpfs_t symlinks
- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
- Allow kadmind_t domain to read home config data
- Allow sbd_t domain to readwrite cgroups
- Allow NetworkManager_t domain to read nsfs_t files BZ(1715597)
- Label /var/log/pacemaker/pacemaker as cluster_var_log_t
- Allow certmonger_t domain to manage named cache files/dirs
- Allow pcp_pmcd_t domain to domtrans to mdadm_t domain BZ(1714800)
- Allow crack_t domain read /et/passwd files
- Label fontconfig cache and config files and directories BZ(1659905)
- Allow dhcpc_t domain to manage network manager pid files
- Label /usr/sbin/nft as iptables_exec_t
- Allow userdomain attribute to manage cockpit_ws_t stream sockets
- Allow ssh_agent_type to read/write cockpit_session_t unnamed pipes
- Add interface ssh_agent_signal()
* Thu May 30 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-38
- Allow pcp_pmcd_t domain to domtrans to mdadm_t domain BZ(1714800)
- Allow spamd_update_t to exec itsef
- Fix broken logwatch SELinux module
- Allow logwatch_mail_t to manage logwatch cache files/dirs
- Update wireshark_t domain to use several sockets
- Dontaudit net_admin capability for confined users dbusd type
- Allow kadmind_t domain to read pkcs11 module configs
- Allow kadmind_t domain to read named_cache_t files
- Fix bind_read_cache() interface to allow only read perms to caller domains
- Grant varnishlog_t access to varnishd_etc_t
- Allow nrpe_t domain to read process state of systemd_logind_t
- Allow mongod_t domain to connect on https port BZ(1711922)
- Allow chronyc_t domain to create own tmpfiles and allow communicate send data over unix dgram sockets
- Dontaudit spamd_update_t domain to read all domains states BZ(1711799)
- Allow pcp_pmie_t domain to use sys_ptrace usernamespace cap BZ(1705871)
- Allow userdomains to send data over dgram sockets to userdomains dbus services BZ(1710119)
- Revert "Allow userdomains to send data over dgram sockets to userdomains dbus services BZ(1710119)"
- Make boinc_var_lib_t mountpoint BZ(1711682)
- Allow wireshark_t domain to create fifo temp files
- All NetworkManager_ssh_t rules have to be in same optional block with ssh_basic_client_template(), fixing this bug in NetworkManager policy
- Allow dbus chat between NetworkManager_t and NetworkManager_ssh_t domains. BZ(1677484)
- Allow sysctl_rpc_t and sysctl_irq_t to be stored on fs_t
- Add interface systemd_logind_read_state()
- Fix find commands in Makefiles
- Allow systemd-timesyncd to read network state BZ(1694272)
* Fri May 17 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-37
- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
- Add domain transition that systemd labeled as init_t can execute spamd_update_exec_t binary to run newly created process as spamd_update_t
- Remove allow rule for virt_qemu_ga_t to write/append user_tmp_t files
- Label /var/run/user/*/dbus-1 as session_dbusd_tmp_t
- Add dac_override capability to namespace_init_t domain
- Label /usr/sbin/corosync-qdevice as cluster_exec_t
- Allow NetworkManager_ssh_t domain to open communication channel with system dbus. BZ(1677484)
- Label /usr/libexec/dnf-utils as debuginfo_exec_t
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
- Allow nrpe_t domain to be dbus cliennt
- Add interface sssd_signull()
- Label /usr/bin/tshark as wireshark_exec_t
- Update userdomains to allow confined users to create gpg keys
- Allow associate all filesystem_types with fs_t
- Dontaudit syslogd_t using kill in unamespaces BZ(1711122)
- Allow init_t to manage session_dbusd_tmp_t dirs
- Allow systemd_gpt_generator_t to read/write to clearance
- Allow su_domain_type to getattr to /dev/gpmctl
- Update userdom_login_user_template() template to make working systemd user session for guest and xguest SELinux users
* Fri May 17 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-36
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
- Allow nrpe_t domain to be dbus cliennt
- Add interface sssd_signull()
- Label /usr/bin/tshark as wireshark_exec_t
- Fix typo in dbus_role_template()
- Allow userdomains to send data over dgram sockets to userdomains dbus services BZ(1710119)
- Allow userdomains dbus domain to execute dbus broker. BZ(1710113)
- Allow dovedot_deliver_t setuid/setgid capabilities BZ(1709572)
- Allow virt domains to access xserver devices BZ(1705685)
- Allow aide to be executed by systemd with correct (aide_t) domain BZ(1648512)
- Dontaudit svirt_tcg_t domain to read process state of libvirt BZ(1594598)
- Allow pcp_pmie_t domain to use fsetid capability BZ(1708082)
- Allow pcp_pmlogger_t to use setrlimit BZ(1708951)
- Allow gpsd_t domain to read udev db BZ(1709025)
- Add sys_ptrace capaiblity for namespace_init_t domain
- Allow systemd to execute sa-update in spamd_update_t domain BZ(1705331)
- Allow rhsmcertd_t domain to read rpm cache files
- Label /efi same as /boot/efi boot_t BZ(1571962)
- Allow transition from udev_t to tlp_t BZ(1705246)
- Remove initrc_exec_t for /usr/sbin/apachectl file
* Fri May 3 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-35
- Add fcontext for apachectl util to fix missing output when executed "httpd -t" from this script.
* Thu May 2 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-34
- Allow iscsid_t domain to mmap modules_dep_t files
- Allow ngaios to use chown capability
- Dontaudit gpg_domain to create netlink_audit sockets
- Remove role transition in rpm_run() interface to allow sysadm_r jump to rpm_t type. BZ(1704251)
- Allow dirsrv_t domain to execute own tmp files BZ(1703111)
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
- Update domain_can_mmap_files() boolean to allow also mmap lnk files
- Improve userdom interfaces to drop guest_u SELinux user to use nsswitch
* Fri Apr 26 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-33
- Allow transition from cockpit_session to unpriv user domains
* Thu Apr 25 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-32
- Introduce deny_bluetooth boolean
- Allow greylist_milter_t to read network system state BZ(1702672)
- Allow freeipmi domains to mmap freeipmi_var_cache_t files
- Allow rhsmcertd_t and rpm_t domains to chat over dbus
- Allow thumb_t domain to delete cache_home_t files BZ(1701643)
- Update gnome_role_template() to allow _gkeyringd_t domains to chat with systemd_logind over dbus
- Add new interface boltd_dbus_chat()
- Allow fwupd_t and modemmanager_t domains to communicate over dbus BZ(1701791)
- Allow keepalived_t domain to create and use netlink_connector sockets BZ(1701750)
- Allow cockpit_ws_t domain to set limits BZ(1701703)
- Update Nagios policy when sudo is used
- Deamon rhsmcertd is able to install certs for docker again
- Introduce deny_bluetooth boolean
- Don't allow a container to connect to random services
- Remove file context /usr/share/spamassassin/sa-update\.cron -> bin_t to label sa-update.cron as spamd_update_exec_t.
- Allow systemd_logind_t and systemd_resolved_t domains to chat over dbus
- Allow unconfined_t to use bpf tools
- Allow x_userdomains to communicate with boltd daemon over dbus
* Fri Apr 19 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.3-31
- Fix typo in cups SELinux policy
- Allow iscsid_t to read modules deps BZ(1700245)
- Allow cups_pdf_t domain to create cupsd_log_t dirs in /var/log BZ(1700442)
- Allow httpd_rotatelogs_t to execute generic binaries
- Update system_dbus policy because of dbus-broker-20-2
- Allow httpd_t doman to read/write /dev/zero device BZ(1700758)
- Allow tlp_t domain to read module deps files BZ(1699459)
- Add file context for /usr/lib/dotnet/dotnet
- Update dev_rw_zero() interface by adding map permission
- Allow bounded transition for executing init scripts
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1788210 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1788210
[ 2 ] Bug #1697886 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1697886
[ 3 ] Bug #1731753 - SELinux is preventing journalctl from 'search' accesses on the directory 1.
https://bugzilla.redhat.com/show_bug.cgi?id=1731753
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-384545235e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: ethtool-5.4-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-211f579cec
2020-01-31 01:11:29.743184
--------------------------------------------------------------------------------
Name : ethtool
Product : Fedora 30
Version : 5.4
Release : 1.fc30
URL : https://www.kernel.org/pub/software/network/ethtool/
Summary : Settings tool for Ethernet NICs
Description :
This utility allows querying and changing settings such as speed,
port, auto-negotiation, PCI locations and checksum offload on many
network devices, especially of Ethernet devices.
--------------------------------------------------------------------------------
Update Information:
ethtool 5.4 =========== * Feature: `ethtool`: implement support for Energy
Detect Power Down * Fix: fix arithmetic on pointer to void is a GNU extension
warning * Fix: fix unused parameter warnings in `do_version()` and
`show_usage()` * Fix: fix unused parameter warning in `find_option()` * Fix:
fix unused parameter warning in `dump_eeprom()` * Fix: fix unused parameter
warning in `altera_tse_dump_regs()` * Fix: fix unused parameter warning in
`sfc_dump_regs()` * Fix: fix unused parameter warning in
`print_simple_table()` * Fix: fix unused parameter warning in
`natsemi_dump_regs()` * Fix: fix unused parameter warning in
`netsemi_dump_eeprom()` * Fix: fix unused parameter warning in
`ixgbe_dump_regs()` * Fix: fix unused parameter warning in
`realtek_dump_regs()` * Fix: fix unused parameter warning in
`lan78xx_dump_regs()` * Fix: fix unused parameter warning in `{skge,
sky2}_dump_regs()` * Fix: fix unused parameter warning in `dsa_dump_regs()`
* Fix: fix unused parameter warning in `vmxnet3_dump_regs()` * Fix: fix unused
parameter warning in `st_{mac100, gmac}_dump_regs()` * Fix: fix unused
parameter warning in `ixgbevf_dump_regs()` * Fix: fix unused parameter warning
in `fec_8xx_dump_regs()` * Fix: fix unused parameter warning in
`tg3_dump_{eeprom, regs}()` * Fix: fix unused parameter warning in
`vioc_dump_regs()` * Fix: fix unused parameter warning in `e100_dump_regs()`
* Fix: fix unused parameter warning in `de2104[01]_dump_regs()` * Fix: fix
unused parameter warning in `igb_dump_regs()` * Fix: fix unused parameter
warning in `e1000_dump_regs()` * Fix: fix unused parameter warning in
`smsc911x_dump_regs()` * Fix: fix unused parameter warning in
`at76c50x_usb_dump_regs()` * Fix: fix unused parameter warning in
`fec_dump_regs()` * Fix: fix unused parameter warning in
`amd8111e_dump_regs()` * Fix: fix unused parameter warning in
`et131x_dump_regs()` * Fix: fix unused parameter warning in
`ibm_emac_dump_regs()` * Fix: fix unused parameter warning in
`ixgb_dump_regs()` * Fix: fix unused parameter warning in `fjes_dump_regs()`
* Fix: fix unused parameter warning in `e1000_get_mac_type()` * Fix:
`ethtool`: correctly interpret bitrate of 255 * Fix: `ethtool`: mark 10G Base-
ER as SFF-8472 revision 10.4 onwards * Fix: `ethtool`: add 0x16 and 0x1c
extended compliance codes
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 12 2020 Robert Scheck <robert(a)fedoraproject.org> - 2:5.4-1
- Upgrade to 5.4 (#1789949)
* Thu Sep 26 2019 Robert Scheck <robert(a)fedoraproject.org> - 2:5.3-1
- Upgrade to 5.3 (#1754625)
* Sat Aug 17 2019 Robert Scheck <robert(a)fedoraproject.org> - 2:5.2-1
- Upgrade to 5.2 (#1742322)
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:5.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon May 20 2019 Robert Scheck <robert(a)fedoraproject.org> - 2:5.1-1
- Upgrade to 5.1 (#1711442)
* Sun Apr 28 2019 Robert Scheck <robert(a)fedoraproject.org> - 2:5.0-1
- Upgrade to 5.0 (#1622263)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789949 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1789949
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-211f579cec' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months