Fedora 30 Update: vdr-epg2vdr-1.1.113-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-524b9e6c2c
2020-04-01 02:35:47.694742
--------------------------------------------------------------------------------
Name : vdr-epg2vdr
Product : Fedora 30
Version : 1.1.113
Release : 1.fc30
URL : http://projects.vdr-developer.org/git/vdr-plugin-epg2vdr.git
Summary : A plugin to retrieve EPG data from a mysql database into VDR
Description :
This plugin is used to retrieve EPG data into the VDR. The EPG data
was loaded from a mysql database.
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.113-1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.1.113-1
- Update to 1.1.113
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-524b9e6c2c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
[SECURITY] Fedora 30 Update: phpMyAdmin-4.9.5-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-25f3aea389
2020-04-01 02:35:47.694723
--------------------------------------------------------------------------------
Name : phpMyAdmin
Product : Fedora 30
Version : 4.9.5
Release : 1.fc30
URL : https://www.phpmyadmin.net/
Summary : Handle the administration of MySQL over the World Wide Web
Description :
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the World Wide Web. Most frequently used operations are supported
by the user interface (managing databases, tables, fields, relations, indexes,
users, permissions), while you still have the ability to directly execute any
SQL statement.
Features include an intuitive web interface, support for most MySQL features
(browse and drop databases, tables, views, fields and indexes, create, copy,
drop, rename and alter databases, tables, fields and indexes, maintenance
server, databases and tables, with proposals on server configuration, execute,
edit and bookmark any SQL-statement, even batch-queries, manage MySQL users
and privileges, manage stored procedures and triggers), import data from CSV
and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text
and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers,
creating PDF graphics of your database layout, creating complex queries using
Query-by-example (QBE), searching globally in a database or a subset of it,
transforming stored data into any format using a set of predefined functions,
like displaying BLOB-data as image or download-link and much more...
--------------------------------------------------------------------------------
Update Information:
The **phpMyAdmin** team announces the release of both **4.9.5** and **5.0.2**.
Both versions contain several security fixes: * PMASA-2020-2 SQL injection
vulnerability in the user accounts page, particularly when changing a password *
PMASA-2020-3 SQL injection vulnerability relating to the search feature *
PMASA-2020-4 SQL injection and XSS having to do with displaying results *
Removing of the "options" field for the external transformation. There are many
other bugs fixes, please see the ChangeLog file included with this release for
full details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Remi Collet <remi(a)remirepo.net> - 4.9.5-1
- update to 4.9.5 (2020-03-21, security release)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816097 - CVE-2020-10804 phpMyAdmin: SQL injection was found in retrieval of the current username which could result privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1816097
[ 2 ] Bug #1816131 - CVE-2020-10803 phpMyAdmin: Inserting specially crafted code in database tables, retrieving and displaying resuts could result in XSS
https://bugzilla.redhat.com/show_bug.cgi?id=1816131
[ 3 ] Bug #1816144 - CVE-2020-10802 phpMyAdmin: SQL injection was found in generating certain queries for search actions which could result in malicious D M
https://bugzilla.redhat.com/show_bug.cgi?id=1816144
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-25f3aea389' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 30 Update: php-phpmyadmin-sql-parser5-5.3.1-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-2467b8feb4
2020-04-01 02:35:47.694664
--------------------------------------------------------------------------------
Name : php-phpmyadmin-sql-parser5
Product : Fedora 30
Version : 5.3.1
Release : 1.fc30
URL : https://github.com/phpmyadmin/sql-parser
Summary : A validating SQL lexer and parser with a focus on MySQL dialect
Description :
A validating SQL lexer and parser with a focus on MySQL dialect.
This library was originally developed for phpMyAdmin during
the Google Summer of Code 2015.
Autoloader: /usr/share/php/PhpMyAdmin/SqlParser5/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 5.3.1** - 2020-03-20 * Revert some changes with the understanding of
ANSI_QUOTES mode and identifiers * Suggest motranslator 5.0 in README ----
**Version 5.3.0** - 2020-03-20 * Stop instanciating an object to check its
class name. (#290) * Replace sscanf by equivalent native PHP functions because
sscanf can be disabled for security reasons. (#270) * Allow phpunit 9 * Allow
phpmyadmin/motranslator 5.0 * Fix for php error when "INSERT INTO x SET a = 1"
is "INSERT INTO x SET = 1" (#295) * Fixed lexer fails to detect "*" as a
wildcard (#288) * Fixed ANSI_QUOTES support (#284) * Fixed parser mistakes with
comments (#156)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2020 Remi Collet <remi(a)remirepo.net> - 5.3.1-1
- update to 5.3.1
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-2467b8feb4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 30 Update: pcre2-10.34-8.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-ed8d4d492b
2020-04-01 02:35:47.694650
--------------------------------------------------------------------------------
Name : pcre2
Product : Fedora 30
Version : 10.34
Release : 8.fc30
URL : https://www.pcre.org/
Summary : Perl-compatible regular expression library
Description :
PCRE2 is a re-working of the original PCRE (Perl-compatible regular
expression) library to provide an entirely new API.
PCRE2 is written in C, and it has its own API. There are three sets of
functions, one for the 8-bit library, which processes strings of bytes, one
for the 16-bit library, which processes strings of 16-bit values, and one for
the 32-bit library, which processes strings of 32-bit values. There are no C++
wrappers. This package provides support for strings in 8-bit and UTF-8
encodings. Install pcre2-utf16 or pcre2-utf32 packages for the other ones.
The distribution does contain a set of C wrapper functions for the 8-bit
library that are based on the POSIX regular expression API (see the pcre2posix
man page). These can be found in a library called libpcre2posix. Note that
this just provides a POSIX calling interface to PCRE2; the regular expressions
themselves still follow Perl syntax and semantics. The POSIX API is
restricted, and does not give full access to all of PCRE2's facilities.
--------------------------------------------------------------------------------
Update Information:
This release fixes computing an offest for the start of the UTF-16 error when a
high surrogate is not followed by a valid low surrogate, compiling a lookbehind
when preceded by a DEFINE group, and makes manual pages about the pattern syntax
always available.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-8
- Fix computing an offest for the start of the UTF-16 error when a high
surrogate is not followed by a valid low surrogate (upstream bug #2527)
- Fix compiling a lookbehind when preceded by a DEFINE group
(upstream bug #2531)
- Make manual pages about pattern syntax available when the library is
installed (bug #1808612)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808612 - The pcre2 manual pages are in the devel packages but they describe the syntax and therefore are necessary all the time
https://bugzilla.redhat.com/show_bug.cgi?id=1808612
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-ed8d4d492b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 30 Update: perl-Pod-Usage-1.70-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-9360ad9872
2020-04-01 02:35:47.694636
--------------------------------------------------------------------------------
Name : perl-Pod-Usage
Product : Fedora 30
Version : 1.70
Release : 1.fc30
URL : https://metacpan.org/release/Pod-Usage
Summary : Print a usage message from embedded POD documentation
Description :
pod2usage will print a usage message for the invoking script (using its
embedded POD documentation) and then exit the script with the desired exit
status. The usage message printed may have any one of three levels of
"verboseness": If the verbose level is 0, then only a synopsis is printed.
If the verbose level is 1, then the synopsis is printed along with a
description (if present) of the command line options and arguments. If the
verbose level is 2, then the entire manual page is printed.
--------------------------------------------------------------------------------
Update Information:
This release fixes invoking pod2usage tool when using "-verbose 3" opions with
STDIN, emphasizing I<> text if Pod::Text::Termcap is used, a documentation,
executing an external pager it has the program switches. It also prefers PAGER
enviroment variable to $Config{pager} value.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2020 Petr Pisar <ppisar(a)redhat.com> - 4:1.70-1
- 1.70 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1813720 - perl-Pod-Usage-1.70 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1813720
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-9360ad9872' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 30 Update: linux-firmware-20200316-106.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1070052d10
2020-04-01 02:35:47.694616
--------------------------------------------------------------------------------
Name : linux-firmware
Product : Fedora 30
Version : 20200316
Release : 106.fc30
URL : http://www.kernel.org/
Summary : Firmware files used by the Linux kernel
Description :
This package includes firmware files required for some devices to
operate.
--------------------------------------------------------------------------------
Update Information:
== Update to upstream 20200316 release * Bluetooth firmware updates: Intel,
QCom, RTL8822C * Agilio SmartNIC flower firmware to rev AOTC-2.12.A.13 * amdgpu:
Update to raven2, renoir, navi10, vega10, vega12, vega20 * Intel i915: HuC, DMC
firmware updates * nvidia: add TU116/117 signed firmware * amlogic: video
decoder firmware updates * rtl_nic: update firmware for RTL8153A
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2020 Peter Robinson <pbrobinson(a)fedoraproject.org> 20200316-106
- Update to upstream 20200316 release
- Bluetooth firmware updates: Intel, QCom, RTL8822C
- Agilio SmartNIC flower firmware to rev AOTC-2.12.A.13
- amdgpu: Update to raven2, renoir, navi10, vega10, vega12, vega20
- Intel i915: HuC, DMC firmware updates
- nvidia: add TU116/117 signed firmware
- amlogic: video decoder firmware updates
- rtl_nic: update firmware for RTL8153A
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1070052d10' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
[SECURITY] Fedora 30 Update: libarchive-3.3.3-7.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-71b2273a9f
2020-04-01 02:35:47.694450
--------------------------------------------------------------------------------
Name : libarchive
Product : Fedora 30
Version : 3.3.3
Release : 7.fc30
URL : http://www.libarchive.org/
Summary : A library for handling streaming archive formats
Description :
Libarchive is a programming library that can create and read several different
streaming archive formats, including most popular tar variants, several cpio
formats, and both BSD and GNU ar variants. It can also write shar archives and
read ISO9660 CDROM images and ZIP archives.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-18408 RAR reader: fix use after free If
read_data_compressed() returns ARCHIVE_FAILED, the caller is allowed to continue
with next archive headers. We need to set rar->start_new_table after the
ppmd7_context got freed, otherwise it won't be allocated again.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2019 Ondrej Dubaj <odubaj(a)redhat.com> - 3.3.3-7
- fixed use after free in rar (#1769980)
- fixed zstd test
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1769980 - CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1769980
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-71b2273a9f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: xrootd-ceph-4.11.3-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-f5572b133e
2020-04-01 01:54:46.133372
--------------------------------------------------------------------------------
Name : xrootd-ceph
Product : Fedora 31
Version : 4.11.3
Release : 1.fc31
URL : https://github.com/xrootd/xrootd-ceph
Summary : XRootD plug-in for interfacing with the Ceph storage platform
Description :
The xrootd-ceph is an OSS layer plug-in for the XRootD server for interfacing
with the Ceph storage platform.
--------------------------------------------------------------------------------
Update Information:
XrootD 4.11.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.11.3-1
- Update to version 4.11.3
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:4.11.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-f5572b133e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: wicked-0.6.63-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-33c0bd3b08
2020-04-01 01:54:46.133402
--------------------------------------------------------------------------------
Name : wicked
Product : Fedora 31
Version : 0.6.63
Release : 1.fc31
URL : https://en.opensuse.org/Portal:Wicked
Summary : Network configuration infrastructure
Description :
Wicked is a network configuration infrastructure incorporating a number
of existing frameworks into a unified architecture, providing a DBUS
interface to network configuration.
--------------------------------------------------------------------------------
Update Information:
Initial packaging of Wicked for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1812294 - Review Request: wicked - Network configuration infrastructure
https://bugzilla.redhat.com/show_bug.cgi?id=1812294
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-33c0bd3b08' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: solaar-1.0.2-0.1.rc1.20200322git563ef0d.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-2d902a1576
2020-04-01 01:54:46.133387
--------------------------------------------------------------------------------
Name : solaar
Product : Fedora 31
Version : 1.0.2
Release : 0.1.rc1.20200322git563ef0d.fc31
URL : https://github.com/pwr/Solaar
Summary : Device manager for a wide range of Logitech devices
Description :
Solaar is a device manager for Logitech's Unifying Receiver peripherals. It is
able to pair/unpair devices to the receiver and, for most devices, read battery
status.
gtk3 is recommended. Without it, you can run solaar commands to view the
configuration of the devices and pair/unpair peripherals but you cannot use the
graphical interface.
--------------------------------------------------------------------------------
Update Information:
* Look up tray icon filenames to get around a bug in libappindicator. *
Make the default behavior be to show the main window at startup. * Support
c537 nano receiver * Add logind signals for suspend/resume. * Remove
solaar-gnome3 package * Ignore features for devices that don't follow feature
specification * Add probe command to command-line interface to dump receiver
registers * Don't terminate on malformed or unknown messages * Create
fewer internal notifications for messages from devices * Add a button to the
main window to terminate (quit) Solaar * Set up nano receivers as receivers
with no unpairing and with re-pairing * Set up c534 as receiver with max 2
pairings, no unpairing, re-pairing * Better support receivers that do not
unpair or when pairing replace existing pairings * Add information about
receiver pairing to receiver data structure * Better support devices that
only allow a limited number of total re-pairings * Add --window option to
control main window visibility and tray usage * Ignore receiver if USB id is
not retrieved * Fix bug with double deleting when devices are disconnected *
Determine some receiver information from data structure for USB ids * Treat
battery level of 0 as unknown * Fix bug on devices with no serial number *
Drop support for python2, and use python3 throughout * Fix bug in remembering
features discovered from device reports * Show icons in main window device
list * Count offline devices when determining whether pairing is possible *
Update French, Dutch, German, and Croation translations * Better icons for
battery levels * Support DPI, Backlight 2, Battery Voltage features *
Support M585, M590, M330, MX Master 2s and 3, new M310, new K800, craft keyboard
* Documentation improvements * Clean up directory structure and remove
unused files
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Dominik Mierzejewski <rpm(a)greysector.net> - 1.0.2-0.1.rc1.20200322git563ef0d
- update to 1.0.2-rc1 + two recent commits
- drop obsolete patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1710758 - solaar panel icon not displayed if receiver is unplugged
https://bugzilla.redhat.com/show_bug.cgi?id=1710758
[ 2 ] Bug #1754278 - [abrt] solaar: gtk_cell_renderer_get_aligned_area(): python3.7 killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1754278
[ 3 ] Bug #1754295 - [abrt] solaar: check_feature(): settings_templates.py:381:check_feature:AttributeError: '_SETTINGS_LIST' object has no attribute 'low_res_scroll'
https://bugzilla.redhat.com/show_bug.cgi?id=1754295
[ 4 ] Bug #1761158 - [abrt] solaar: read(): base.py:208:_read:logitech_receiver.base.NoReceiver: {'reason': OSError(5, 'Input/output error')}
https://bugzilla.redhat.com/show_bug.cgi?id=1761158
[ 5 ] Bug #1770288 - [abrt] solaar: __call__(): settings.py:64:__call__:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=1770288
[ 6 ] Bug #1777460 - [abrt] solaar: update(): window.py:792:update:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=1777460
[ 7 ] Bug #1786196 - Critical battery icon on 50%
https://bugzilla.redhat.com/show_bug.cgi?id=1786196
[ 8 ] Bug #1791334 - [abrt] solaar: update(): window.py:792:update:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=1791334
[ 9 ] Bug #1795944 - [abrt] solaar: check_feature(): settings_templates.py:381:check_feature:AttributeError: '_SETTINGS_LIST' object has no attribute 'low_res_scroll'
https://bugzilla.redhat.com/show_bug.cgi?id=1795944
[ 10 ] Bug #1814073 - solaar-1.0.2-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1814073
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-2d902a1576' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years