Fedora 32 Update: python-jack-client-0.5.2-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-a165853141
2020-04-01 16:31:17.045510
--------------------------------------------------------------------------------
Name : python-jack-client
Product : Fedora 32
Version : 0.5.2
Release : 1.fc32
URL : http://jackclient-python.rtfd.org
Summary : JACK Audio Connection Kit (JACK) Client for Python
Description :
Python module that provides bindings for the JACK library.
The module is able to create audio input and output ports,
also provides the functionality to manage MIDI ports.
This package installs the library for Python.
--------------------------------------------------------------------------------
Update Information:
Initial release for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1804307 - Review Request: python-jack-client - JACK Audio Connection Kit (JACK) Client for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1804307
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-a165853141' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
[SECURITY] Fedora 32 Update: coturn-4.5.1.1-3.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-6efa0fc869
2020-04-01 16:31:17.045495
--------------------------------------------------------------------------------
Name : coturn
Product : Fedora 32
Version : 4.5.1.1
Release : 3.fc32
URL : https://github.com/coturn/coturn/
Summary : TURN/STUN & ICE Server
Description :
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gateway.
It can be used as a general-purpose network traffic TURN server/gateway, too.
This implementation also includes some extra features. Supported RFCs:
TURN specs:
- RFC 5766 - base TURN specs
- RFC 6062 - TCP relaying TURN extension
- RFC 6156 - IPv6 extension for TURN
- Experimental DTLS support as client protocol.
STUN specs:
- RFC 3489 - "classic" STUN
- RFC 5389 - base "new" STUN specs
- RFC 5769 - test vectors for STUN protocol testing
- RFC 5780 - NAT behavior discovery support
The implementation fully supports the following client-to-TURN-server protocols:
- UDP (per RFC 5766)
- TCP (per RFC 5766 and RFC 6062)
- TLS (per RFC 5766 and RFC 6062); TLS1.0/TLS1.1/TLS1.2
- DTLS (experimental non-standard feature)
Supported relay protocols:
- UDP (per RFC 5766)
- TCP (per RFC 6062)
Supported user databases (for user repository, with passwords or keys, if
authentication is required):
- SQLite
- MySQL
- PostgreSQL
- Redis
Redis can also be used for status and statistics storage and notification.
Supported TURN authentication mechanisms:
- long-term
- TURN REST API (a modification of the long-term mechanism, for time-limited
secret-based authentication, for WebRTC applications)
The load balancing can be implemented with the following tools (either one or a
combination of them):
- network load-balancer server
- DNS-based load balancing
- built-in ALTERNATE-SERVER mechanism.
--------------------------------------------------------------------------------
Update Information:
* An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1
web server parses POST requests. A specially crafted HTTP POST request can lead
to information leaks and other misbehavior. * An exploitable denial-of-service
vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
A specially crafted HTTP POST request can lead to server crash and denial of
service.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.1-3
- Added upstream patch for CVE-2020-6061 (#1816159)
- Backported upstream patch for CVE-2020-6062 (#1816163)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816159 - CVE-2020-6061 coturn: specially crafted HTTP POST request can lead to heap overflow which can result in information leak
https://bugzilla.redhat.com/show_bug.cgi?id=1816159
[ 2 ] Bug #1816163 - CVE-2020-6062 coturn: specially crafted HTTP POST request can lead to server crash and denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1816163
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-6efa0fc869' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: zita-ajbridge-0.8.2-3.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-d1ab84dbde
2020-04-01 16:31:17.045479
--------------------------------------------------------------------------------
Name : zita-ajbridge
Product : Fedora 32
Version : 0.8.2
Release : 3.fc32
URL : https://kokkinizita.linuxaudio.org/linuxaudio/
Summary : Allows ALSA devices to be JACK clients
Description :
Zita-ajbridge provides two applications, zita-a2j and zita-j2a. They
allow to use an ALSA device as a Jack client, to provide additional
capture (a2j) or playback (j2a) channels. Functionally these are
equivalent to the alsa_in and alsa_out clients that come with Jack,
but they provide much better audio quality. The resampling ratio will
typically be stable within 1 PPM and change only very smoothly. Delay
will be stable as well even under worst case conditions, e.g. the Jack
client running near the end of the cycle.
--------------------------------------------------------------------------------
Update Information:
Initial relase for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1803945 - Review Request: zita-ajbridge - Allows ALSA devices to be JACK clients
https://bugzilla.redhat.com/show_bug.cgi?id=1803945
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-d1ab84dbde' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
[SECURITY] Fedora 32 Update: drupal8-8.8.4-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-e62856911b
2020-04-01 16:31:17.045460
--------------------------------------------------------------------------------
Name : drupal8
Product : Fedora 32
Version : 8.8.4
Release : 1.fc32
URL : https://www.drupal.org/8
Summary : An open source content management platform
Description :
Drupal is an open source content management platform powering millions of
websites and applications. It���s built, used, and supported by an active and
diverse community of people around the world.
--------------------------------------------------------------------------------
Update Information:
https://www.drupal.org/project/drupal/releases?version=8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Shawn Iwinski <shawn(a)iwin.ski> - 8.8.4-1
- Update to 8.8.4 (RHBZ #1705226)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1705226 - drupal8-8.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1705226
[ 2 ] Bug #1816223 - drupal8: Drupal: in HTML data processor pasting specially crafted HTML code could result in XSS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1816223
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-e62856911b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: python-sphinx-press-theme-0.5.1-4.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-92c812f0b5
2020-04-01 16:31:17.045439
--------------------------------------------------------------------------------
Name : python-sphinx-press-theme
Product : Fedora 32
Version : 0.5.1
Release : 4.fc32
URL : https://schettino72.github.io/sphinx_press_site/
Summary : A Sphinx-doc theme based on Vuepress
Description :
A modern responsive theme for python's Sphinx documentation generator.
See it in action on Press Theme own website.
This theme is based on VuePress.
--------------------------------------------------------------------------------
Update Information:
New package: a Sphinx-doc theme that is based on Vuepress.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1815154 - Review Request: python-sphinx-press-theme - A Sphinx-doc theme based on Vuepress
https://bugzilla.redhat.com/show_bug.cgi?id=1815154
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-92c812f0b5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: urh-2.8.4-2.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-d042c0b64e
2020-04-01 16:31:17.045424
--------------------------------------------------------------------------------
Name : urh
Product : Fedora 32
Version : 2.8.4
Release : 2.fc32
URL : https://github.com/jopohl/urh
Summary : Universal Radio Hacker: investigate wireless protocols like a boss
Description :
The Universal Radio Hacker is a software for investigating unknown wireless
protocols.
--------------------------------------------------------------------------------
Update Information:
This is an update adding AirSpy R2 native support.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2020 David Sastre <david.sastre(a)redhat.com> - 2.8.4-2
- Add AirSpy R2 native support
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-d042c0b64e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: libpqxx-7.0.5-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-c4f6aee343
2020-04-01 16:31:17.045408
--------------------------------------------------------------------------------
Name : libpqxx
Product : Fedora 32
Version : 7.0.5
Release : 1.fc32
URL : http://pqxx.org/
Summary : C++ client API for PostgreSQL
Description :
C++ client API for PostgreSQL. The standard front-end (in the sense of
"language binding") for writing C++ programs that use PostgreSQL.
Supersedes older libpq++ interface.
--------------------------------------------------------------------------------
Update Information:
Update to latest release v7.0.5. Includes some small fixes and improvements. See
release notes[1] for details. [1] https://github.com/jtv/libpqxx/releases
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 22 2020 Matthew Krupcale <mkrupcale(a)matthewkrupcale.com> - 1:7.0.5-1
- Update to v7.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1807328 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1807328
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-c4f6aee343' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: nfs-ganesha-3.2-5.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-e8138f7970
2020-04-01 16:31:17.045392
--------------------------------------------------------------------------------
Name : nfs-ganesha
Product : Fedora 32
Version : 3.2
Release : 5.fc32
URL : https://github.com/nfs-ganesha/nfs-ganesha/wiki
Summary : NFS-Ganesha is a NFS Server running in user space
Description :
nfs-ganesha : NFS-GANESHA is a NFS Server running in user space.
It comes with various back-end modules (called FSALs) provided as
shared objects to support different file systems and name-spaces.
--------------------------------------------------------------------------------
Update Information:
NFSv4-compound-op-fails SEGV
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Kaleb S. KEITHLEY <kkeithle at redhat.com> - 3.2-5
- NFS-Ganesha 3.2, NFSv4-compound-op-fails SEGV
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-e8138f7970' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: php-phpseclib-2.0.26-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-f2ce162abb
2020-04-01 16:31:17.045374
--------------------------------------------------------------------------------
Name : php-phpseclib
Product : Fedora 32
Version : 2.0.26
Release : 1.fc32
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.26** * SFTP: another attempt at speeding up uploads (#1455) *
SSH2: try logging in with none as an auth method first (#1454) * ASN1: fix
for malformed ASN1 strings (#1456)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Remi Collet <remi(a)remirepo.net> - 2.0.26-1
- update to 2.0.26
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-f2ce162abb' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month
Fedora 32 Update: scap-security-guide-0.1.49-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-0850ae6819
2020-04-01 16:31:17.045351
--------------------------------------------------------------------------------
Name : scap-security-guide
Product : Fedora 32
Version : 0.1.49
Release : 1.fc32
URL : https://github.com/ComplianceAsCode/content/
Summary : Security guidance and baselines in SCAP formats
Description :
The scap-security-guide project provides a guide for configuration of the
system from the final system's security point of view. The guidance is specified
in the Security Content Automation Protocol (SCAP) format and constitutes
a catalog of practical hardening advice, linked to government requirements
where applicable. The project bridges the gap between generalized policy
requirements and specific implementation guidelines. The Fedora system
administrator can use the oscap CLI tool from openscap-scanner package, or the
scap-workbench GUI tool from scap-workbench package to verify that the system
conforms to provided guideline. Refer to scap-security-guide(8) manual page for
further information.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream SCAP-Security-Guide-0.1.49 release:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Watson Sato <wsato(a)redhat.com> - 0.1.49-1
- Update to latest upstream SCAP-Security-Guide-0.1.49 release:
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.49
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-0850ae6819' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 1 month