[SECURITY] Fedora 30 Update: firejail-0.9.62-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-0fb484d7f7
2020-02-27 16:43:31.469840
--------------------------------------------------------------------------------
Name : firejail
Product : Fedora 30
Version : 0.9.62
Release : 1.fc30
URL : https://github.com/netblue30/firejail
Summary : Linux namespaces sandbox program
Description :
Firejail is a SUID sandbox program that reduces the risk of security
breaches by restricting the running environment of untrusted applications
using Linux namespaces. It includes a sandbox profile for Mozilla Firefox.
--------------------------------------------------------------------------------
Update Information:
Rebase to version 0.9.62
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Ondrej Dubaj <odubaj(a)redhat.com> - 0.9.62-1
- Rebase to version 0.9.62
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1725965 - firejail-0.9.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1725965
[ 2 ] Bug #1716681 - CVE-2019-12589 firejail: improper seccomp restrictions due to filters being writable inside the jail [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1716681
[ 3 ] Bug #1803907 - Error mounting appimage: appimage.c:119 appimage_set: Invalid argument
https://bugzilla.redhat.com/show_bug.cgi?id=1803907
[ 4 ] Bug #1787915 - [abrt] firejail: ioperm(): faudit killed by SIGSYS
https://bugzilla.redhat.com/show_bug.cgi?id=1787915
[ 5 ] Bug #1716910 - CVE-2019-12499 firejail: file descriptors command execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1716910
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-0fb484d7f7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: postgresql-11.7-2.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-434a30f703
2020-02-27 16:43:31.469824
--------------------------------------------------------------------------------
Name : postgresql
Product : Fedora 30
Version : 11.7
Release : 2.fc30
URL : http://www.postgresql.org/
Summary : PostgreSQL client programs
Description :
PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream release 11.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 11.7-2
- Release bump after changelog fix
* Mon Feb 17 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 11.7-1
- Rebase to upstream release 11.7
* Wed Nov 27 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 11.6-1
- New upstream version 11.6
* Wed Aug 7 2019 Petr Kubat <pkubat(a)redhat.com> - 11.5-1
- New upstream version 11.5
https://www.postgresql.org/docs/11/release-11-5.html
* Tue Jul 9 2019 Petr Kubat <pkubat(a)redhat.com> - 11.4-1
- New upstream version 11.4
https://www.postgresql.org/docs/11/release-11-4.html
* Thu May 9 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 11.3-1
- Rebase to upstream release 11.3
https://www.postgresql.org/docs/11/release-11-3.html
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-434a30f703' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: libpq-12.2-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-0697263271
2020-02-27 16:43:31.469808
--------------------------------------------------------------------------------
Name : libpq
Product : Fedora 30
Version : 12.2
Release : 1.fc30
URL : http://www.postgresql.org/
Summary : PostgreSQL client library
Description :
The libpq package provides the essential shared library for any PostgreSQL
client program or interface. You will need to install this package to use any
other PostgreSQL package or any clients that need to connect to a PostgreSQL
server.
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream release 12.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 12.2-1
- Rebase to upstream release 12.2
* Tue Feb 4 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 12.1-1
- Rebase to upstream release 12.1
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Nov 25 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 11.6-1
- Rebase to upstream version 11.6
* Wed Aug 7 2019 Petr Kubat <pkubat(a)redhat.com> - 11.5-1
- New upstream version 11.5
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
>>>>>>> master
* Tue Jul 9 2019 Petr Kubat <pkubat(a)redhat.com> - 11.4-1
- New upstream version 11.4
* Fri May 10 2019 Pavel Raiskup <praiskup(a)redhat.com> - 11.3-2
- obsolete anything < %majorversion+1
* Thu May 9 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 11.3-1
- New upstream version 11.3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-0697263271' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: accounts-qml-module-0.7-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-2bcd5ee423
2020-02-27 16:43:31.469792
--------------------------------------------------------------------------------
Name : accounts-qml-module
Product : Fedora 30
Version : 0.7
Release : 1.fc30
URL : https://gitlab.com/accounts-sso/accounts-qml-module
Summary : QML bindings for libaccounts-qt + libsignon-qt
Description :
This QML module provides an API to manage the user's online accounts and get
their authentication data. It's a tiny wrapper around the Qt-based APIs of
libaccounts-qt and libsignon-qt.
--------------------------------------------------------------------------------
Update Information:
QML bindings for libaccounts-qt + libsignon-qt
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 11 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 0.7-1
- first try, inspiration from opensuse packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1801765 - Review Request: accounts-qml-module - QML bindings for libaccounts-qt + libsignon-qt
https://bugzilla.redhat.com/show_bug.cgi?id=1801765
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-2bcd5ee423' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: whois-5.5.6-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-881594a179
2020-02-27 16:43:31.469762
--------------------------------------------------------------------------------
Name : whois
Product : Fedora 30
Version : 5.5.6
Release : 1.fc30
URL : http://www.linux.it/~md/software/
Summary : Improved WHOIS client
Description :
Searches for an object in a RFC 3912 database.
This version of the WHOIS client tries to guess the right server to ask for
the specified object. If no guess can be made it will connect to
whois.networksolutions.com for NIC handles or whois.arin.net for IPv4
addresses and network names.
--------------------------------------------------------------------------------
Update Information:
This release updates a record for th. domain. It also adds records for ��������������.
and ���������. domains.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Petr Pisar <ppisar(a)redhat.com> - 5.5.6-1
- 5.5.6 bump
* Thu Jan 23 2020 Petr Pisar <ppisar(a)redhat.com> - 5.5.5-1
- 5.5.5 bump
* Wed Jan 15 2020 Petr Pisar <ppisar(a)redhat.com> - 5.5.4-2
- Fix hiding legal strings on at. subdomains (bug #1791035)
* Fri Jan 3 2020 Petr Pisar <ppisar(a)redhat.com> - 5.5.4-1
- 5.5.4 bump
* Mon Nov 18 2019 Petr Pisar <ppisar(a)redhat.com> - 5.5.3-1
- 5.5.3 bump
* Tue Oct 29 2019 Petr Pisar <ppisar(a)redhat.com> - 5.5.2-2
- Adjusts obsoletance for whois-mkpasswd-5.5.2 (bug #1684112)
* Thu Oct 3 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.5.2-1
- 5.5.2 bump
* Mon Aug 19 2019 Petr Pisar <ppisar(a)redhat.com> - 5.5.1-1
- 5.5.1 bump
* Tue Jul 23 2019 Petr Pisar <ppisar(a)redhat.com> - 5.5.0-1
- 5.5.0 bump
* Thu Jun 13 2019 Petr Pisar <ppisar(a)redhat.com> - 5.4.3-1
- 5.4.3 bump
* Wed Apr 24 2019 Petr Pisar <ppisar(a)redhat.com> - 5.4.2-2
- Modernize spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1803516 - whois-5.5.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1803516
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-881594a179' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: authselect-1.1-3.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-262cfead59
2020-02-27 16:43:31.469746
--------------------------------------------------------------------------------
Name : authselect
Product : Fedora 30
Version : 1.1
Release : 3.fc30
URL : https://github.com/pbrezina/authselect
Summary : Configures authentication and identity sources from supported profiles
Description :
Authselect is designed to be a replacement for authconfig but it takes
a different approach to configure the system. Instead of letting
the administrator build the PAM stack with a tool (which may potentially
end up with a broken configuration), it would ship several tested stacks
(profiles) that solve a use-case and are well tested and supported.
At the same time, some obsolete features of authconfig are not
supported by authselect.
--------------------------------------------------------------------------------
Update Information:
Fix https://github.com/pbrezina/authselect/issues/197 - authselect was unable to
restore default non-authselect configuration.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Pavel B��ezina <pbrezina(a)redhat.com> - 1.1-4
- fix restoring non-authselect configuration from backup
* Wed Jan 29 2020 Pavel B��ezina <pbrezina(a)redhat.com> - 1.1-2
- cli: fix auto backup when --force is set
* Thu Jun 13 2019 Pavel B��ezina <pbrezina(a)redhat.com> - 1.1-1
- Rebase to 1.1
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-262cfead59' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: python-pycryptodomex-3.9.6-2.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-7204f05856
2020-02-27 16:43:31.469730
--------------------------------------------------------------------------------
Name : python-pycryptodomex
Product : Fedora 30
Version : 3.9.6
Release : 2.fc30
URL : http://www.pycryptodome.org/
Summary : A self-contained cryptographic library for Python
Description :
PyCryptodome is a self-contained Python package of low-level cryptographic
primitives. It's a fork of PyCrypto. It brings several enhancements with respect
to the last official version of PyCrypto (2.6.1), for instance:
* Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
* Accelerated AES on Intel platforms via AES-NI
* Elliptic curves cryptography (NIST P-256 curve only)
* Better and more compact API (nonce and iv attributes for ciphers, automatic
generation of random nonces and IVs, simplified CTR cipher mode, and more)
* SHA-3 (including SHAKE XOFs) and BLAKE2 hash algorithms
* Salsa20 and ChaCha20 stream ciphers
* scrypt and HKDF
* Deterministic (EC)DSA
* Password-protected PKCS#8 key containers
* Shamir's Secret Sharing scheme
* Random numbers get sourced directly from the OS (and not from a CSPRNG in
userspace)
* Cleaner RSA and DSA key generation (largely based on FIPS 186-4)
* Major clean ups and simplification of the code base
PyCryptodome is not a wrapper to a separate C library like OpenSSL. To the
largest possible extent, algorithms are implemented in pure Python. Only the
pieces that are extremely critical to performance (e.g. block ciphers) are
implemented as C extensions.
Note: all modules are installed under the Cryptodome package to avoid conflicts
with the PyCrypto library.
--------------------------------------------------------------------------------
Update Information:
Move test suite module to a separate package ([RHBZ
#1802989](https://bugzilla.redhat.com/show_bug.cgi?id=1802989))
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.6-2
- Move test suite module to a separate package (RHBZ #1802989)
* Mon Feb 3 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.6-1
- Update to 3.9.6
* Tue Nov 19 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.4-1
- Update to 3.9.4
* Fri Nov 15 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.3-1
- Update to 3.9.3
* Fri Nov 15 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.2-1
- Update to 3.9.2
- Spec cleanup
* Wed Aug 28 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.0-1
- Update to 3.9.0
* Fri Aug 9 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.8.2-1
- Update to 3.8.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1802989 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1802989
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-7204f05856' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
Fedora 30 Update: php-seld-phar-utils-1.1.0-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-fa8aef488f
2020-02-27 16:43:31.469714
--------------------------------------------------------------------------------
Name : php-seld-phar-utils
Product : Fedora 30
Version : 1.1.0
Release : 1.fc30
URL : https://github.com/Seldaek/phar-utils
Summary : PHAR file format utilities
Description :
PHAR file format utilities, for when PHP phars you up.
To use this library, you just have to add, in your project:
require_once '/usr/share/php/Seld/PharUtils/autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.0** *Added Linter class with a lint function to lint all PHP
files inside a Phar file.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Remi Collet <remi(a)remirepo.net> - 1.1.0-1
- update to 1.1.0
* Tue Jan 14 2020 Remi Collet <remi(a)remirepo.net> - 1.0.2-1
- update to 1.0.2
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-fa8aef488f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
[SECURITY] Fedora 30 Update: etcd-3.3.12-5.20190413gitf29b1ad.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-279c61dd70
2020-02-27 16:43:31.469697
--------------------------------------------------------------------------------
Name : etcd
Product : Fedora 30
Version : 3.3.12
Release : 5.20190413gitf29b1ad.fc30
URL : https://github.com/coreos/etcd
Summary : A highly-available key value store for shared configuration
Description :
A highly-available key value store for shared configuration.
--------------------------------------------------------------------------------
Update Information:
Rebuilt to fix [GHSA-
jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/...
jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.3.12-5
- Rebuilt for GHSA-jf24-p9p9-4rjh
* Tue Apr 16 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.3.12-4.20190413gitf29b1ad
- etcd.service: do not pass command line flags already defined in environment
* Mon Apr 15 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.3.12-3.20190413gitf29b1ad
- Fix building of etcd
* Sat Apr 13 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.3.12-2.20190413gitf29b1ad
- Bump to commit f29b1ada19713544b698dab8c94c97cfa1e83dac
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-279c61dd70' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months
[SECURITY] Fedora 30 Update: caddy-1.0.3-2.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-279c61dd70
2020-02-27 16:43:31.469697
--------------------------------------------------------------------------------
Name : caddy
Product : Fedora 30
Version : 1.0.3
Release : 2.fc30
URL : https://caddyserver.com
Summary : Web server with automatic HTTPS
Description :
Caddy is the web server with automatic HTTPS.
This package was built with the following plugins:
http.geoip
http.realip
tls.dns.azure
tls.dns.cloudflare
tls.dns.digitalocean
tls.dns.googlecloud
tls.dns.powerdns
tls.dns.rackspace
tls.dns.route53
--------------------------------------------------------------------------------
Update Information:
Rebuilt to fix [GHSA-
jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/...
jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.3-2
- Rebuilt for GHSA-jf24-p9p9-4rjh
* Wed Oct 23 2019 Carl George <carl(a)george.computer> - 1.0.3-1
- Update to v1
- Remove dyn, gandi, namecheap, and rfc2136 dns providers
- Add patch0 to fix `-version` flag
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 9 2019 Carl George <carl(a)george.computer> - 0.11.4-2
- Switch unit file from ProtectSystem strict to full rhbz#1706651
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-279c61dd70' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 3 months