Fedora 31 Update: libtirpc-1.2.6-0.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-412a32b359
2020-04-30 03:42:10.987317
--------------------------------------------------------------------------------
Name : libtirpc
Product : Fedora 31
Version : 1.2.6
Release : 0.fc31
URL : http://git.linux-nfs.org/?p=steved/libtirpc.git;a=summary
Summary : Transport Independent RPC Library
Description :
This package contains SunLib's implementation of transport-independent
RPC (TI-RPC) documentation. This library forms a piece of the base of
Open Network Computing (ONC), and is derived directly from the
Solaris 2.3 source.
TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V
Transport Layer Interface (TLI) or an equivalent X/Open Transport Interface
(XTI). TI-RPC is on-the-wire compatible with the TS-RPC, which is supported
by almost 70 vendors on all major operating systems. TS-RPC source code
(RPCSRC 4.0) remains available from several internet sites.
--------------------------------------------------------------------------------
Update Information:
Updated to the latest upstream release: libtirpc-1-2-6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 14 2020 Steve Dickson <steved(a)redhat.com> 1.2.6-0
- Updated to the latest upstream release: libtirpc-1-2-6 (bz 1822751)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1822751 - libtirpc-1.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1822751
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-412a32b359' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
[SECURITY] Fedora 30 Update: openssl-1.1.1g-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-da2d1ef2d7
2020-04-30 02:50:26.526867
--------------------------------------------------------------------------------
Name : openssl
Product : Fedora 30
Version : 1.1.1g
Release : 1.fc30
URL : http://www.openssl.org/
Summary : Utilities from the general purpose cryptography library with TLS implementation
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.1g from upstream fixing possible remote DoS security
issue.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2020 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1g-1
- update to the 1.1.1g release
* Tue Apr 7 2020 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1f-1
- update to the 1.1.1f release
* Thu Mar 26 2020 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1e-2
- revert the unexpected EOF error reporting change as it is
too disruptive for the stable release branch
* Fri Mar 20 2020 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1e-1
- update to the 1.1.1e release
- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa
* Mon Feb 17 2020 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1d-7
- apply Intel CET support patches by hjl (#1788699)
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:1.1.1d-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Nov 21 2019 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1d-5
- allow zero length parameters in KDF_CTX_ctrl()
* Thu Nov 14 2019 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1d-4
- backport of SSKDF from master
* Wed Nov 13 2019 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1d-3
- backport of KBKDF and KRB5KDF from master
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1781004 - CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1781004
[ 2 ] Bug #1814314 - openssl-1.1.1g is available
https://bugzilla.redhat.com/show_bug.cgi?id=1814314
[ 3 ] Bug #1826338 - CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1826338
[ 4 ] Bug #1827149 - Please provide openssl 1.1.1g
https://bugzilla.redhat.com/show_bug.cgi?id=1827149
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-da2d1ef2d7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
Fedora 30 Update: xournalpp-1.0.18-2.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-ba5ec61071
2020-04-30 02:50:26.526852
--------------------------------------------------------------------------------
Name : xournalpp
Product : Fedora 30
Version : 1.0.18
Release : 2.fc30
URL : https://github.com/xournalpp/xournalpp
Summary : Handwriting note-taking software with PDF annotation support
Description :
Xournal++ is a handwriting note-taking software with PDF annotation support.
Supports Pen input like Wacom Tablets
--------------------------------------------------------------------------------
Update Information:
A fix for a desktop file not associated with an application (#Desktop file is
not associated with application (rhbz#1826395) ---- Update to 1.0.18
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 21 2020 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1.0.18-2
- Set value key on desktop file associated with application (#1826395)
* Thu Apr 16 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 1.0.18-1
- Update to 1.0.18 (#1824351)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1798239 - xournalpp-1.0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1798239
[ 2 ] Bug #1824351 - xournalpp-1.0.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1824351
[ 3 ] Bug #1826395 - Desktop file is not associated with application
https://bugzilla.redhat.com/show_bug.cgi?id=1826395
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-ba5ec61071' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
Fedora 30 Update: focuswriter-1.7.6-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-94faaba206
2020-04-30 02:50:26.526837
--------------------------------------------------------------------------------
Name : focuswriter
Product : Fedora 30
Version : 1.7.6
Release : 1.fc30
URL : http://gottcode.org/focuswriter/
Summary : A full screen, distraction-free writing program
Description :
A full screen, distraction-free writing program. You can customize your
environment by changing the font, colors, and background image to add ambiance
as you type. FocusWriter features an on-the-fly updating word count, optional
auto-save, optional daily goals, and an interface that hides away to allow you
to focus more clearly; additionally, when you open the program your current
work-in-progress will automatically load and position you at the end of your
document, so that you can immediately jump back in.
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 22 2020 Vojtech Trefny <vtrefny(a)redhat.com> - 1.7.6-1
- Update to 1.7.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1826617 - focuswriter-1.7.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1826617
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-94faaba206' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
[SECURITY] Fedora 30 Update: sqliteodbc-0.9996-4.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1e85425a52
2020-04-30 02:50:26.526819
--------------------------------------------------------------------------------
Name : sqliteodbc
Product : Fedora 30
Version : 0.9996
Release : 4.fc30
URL : http://www.ch-werner.de/sqliteodbc
Summary : SQLite ODBC Driver
Description :
ODBC driver for SQLite interfacing SQLite 2.x and/or 3.x using the
unixODBC or iODBC driver managers. For more information refer to:
- http://www.sqlite.org - SQLite engine
- http://www.unixodbc.org - unixODBC Driver Manager
- http://www.iodbc.org - iODBC Driver Manager
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2020-12050 (use mktemp(1) for temp. file name creation)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 22 2020 Damian Wrobel <dwrobel(a)ertelnet.rybnik.pl> - 0.9996-4
- Fix CVE-2020-12050 (use mktemp(1) for temp. file name creation)
- Use absolute paths for binaries
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1825762 - Packaging vulnerability in sqliteODBC exposing to local privilege escalation to root
https://bugzilla.redhat.com/show_bug.cgi?id=1825762
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1e85425a52' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
Fedora 30 Update: fail2ban-0.11.1-6.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-30b046478a
2020-04-30 02:50:26.526754
--------------------------------------------------------------------------------
Name : fail2ban
Product : Fedora 30
Version : 0.11.1
Release : 6.fc30
URL : http://fail2ban.sourceforge.net/
Summary : Daemon to ban hosts that cause multiple authentication errors
Description :
Fail2Ban scans log files and bans IP addresses that makes too many password
failures. It updates firewall rules to reject the IP address. These rules can
be defined by the user. Fail2Ban can read multiple log files such as sshd or
Apache web server ones.
Fail2Ban is able to reduce the rate of incorrect authentications attempts
however it cannot eliminate the risk that weak authentication presents.
Configure services to use only two factor or public/private authentication
mechanisms if you really want to protect services.
This is a meta-package that will install the default configuration. Other
sub-packages are available to install support for other actions and
configurations.
--------------------------------------------------------------------------------
Update Information:
Change default from firewalld-ipset to firewalld-rich-rules, fixes #1823746.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 16 2020 Richard Shaw <hobbes1069(a)gmail.com> - 0.11.1-6
- Change default firewalld backend from ipset to rich-rules as ipset causes
firewalld to use legacy iptables. Fixes RHBZ#1823746.
- Remove conditionals for EL versions less than 7.
* Thu Mar 19 2020 Richard Shaw <hobbes1069(a)gmail.com> - 0.11.1-5
- Update for Python 3.9.
* Wed Feb 26 2020 Orion Poplawski <orion(a)nwra.com> - 0.11.1-4
- Add SELinux policy
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1823746 - fail2ban-firewalld default action uses unsupport direct rule, should use rich-rule
https://bugzilla.redhat.com/show_bug.cgi?id=1823746
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-30b046478a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
Fedora 30 Update: foliate-2.1.1-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-730b29468e
2020-04-30 02:50:26.526738
--------------------------------------------------------------------------------
Name : foliate
Product : Fedora 30
Version : 2.1.1
Release : 1.fc30
URL : https://johnfactotum.github.io/foliate/
Summary : Simple and modern GTK eBook reader
Description :
A simple and modern GTK eBook viewer, built with GJS and Epub.js.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 9 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.1.1-1
- Update to 2.1.1
* Wed Apr 8 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.1.0-1
- Update to 2.1.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-730b29468e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
[SECURITY] Fedora 30 Update: python-bleach-3.1.4-2.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-827b677e15
2020-04-30 02:50:26.526679
--------------------------------------------------------------------------------
Name : python-bleach
Product : Fedora 30
Version : 3.1.4
Release : 2.fc30
URL : https://github.com/mozilla/bleach
Summary : An easy whitelist-based HTML-sanitizing tool
Description :
Bleach is an HTML sanitizing library that escapes or strips markup and
attributes based on a white list.
--------------------------------------------------------------------------------
Update Information:
Update to version 3.1.4, an upstream security release. See the [upstream
changelog](https://github.com/mozilla/bleach/blob/v3.1.4/CHANGES) for details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 22 2020 Nils Philippsen <nils(a)redhat.com> - 3.1.4-2
- skip failing tests regardless of Python version
* Wed Apr 22 2020 Nils Philippsen <nils(a)redhat.com> - 3.1.4-1
- version 3.1.4
- use pythonhosted.org source URL as the tarballs match published hashes
- only skip failing tests and only on Python 3.9
- cope with html5lib prerelease on EL8
* Wed Feb 19 2020 Matthias Runge <mrunge(a)redhat.com> - 3.1.0-5
- skip tests for python 3.9
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Sep 3 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 3.1.0-4
- Drop python2-bleach (#1746757).
* Fri Aug 16 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.1.0-3
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed Mar 6 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 3.1.0-1
- Update to 3.1.0.
- https://github.com/mozilla/bleach/blob/v3.1.0/CHANGES
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1815055 - python-bleach: Bleach: behavior parsing did not match browser behavior which could result in mutation XSS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1815055
[ 2 ] Bug #1815062 - python-bleach: Bleach: Specific calls to function bleach.clean could result in mutation XSS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1815062
[ 3 ] Bug #1820625 - CVE-2020-6817 python-bleach: behavior parsing style attributes could result in a regular expression denial of service (ReDoS) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1820625
[ 4 ] Bug #1826275 - CVE-2020-6802 python-bleach: mutation XSS vulnerability [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1826275
[ 5 ] Bug #1826639 - python bleach fails to import in EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1826639
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-827b677e15' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
Fedora 30 Update: vgrive-1.6.0-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-63b6e4234a
2020-04-30 02:50:26.526665
--------------------------------------------------------------------------------
Name : vgrive
Product : Fedora 30
Version : 1.6.0
Release : 1.fc30
URL : https://github.com/bcedu/VGrive
Summary : Google Drive client for Linux
Description :
VGrive is a client (back-end and front-end) for Google Drive made in vala.
- Start VGrive and sync your files with Google Drive through a clean and
minimalist gui.
- Automaticlly detects changes in local and remote files and sync them.
- Choose the local path where VGrive syncs your files.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 16 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.6.0-1
- Update to 1.6.0
* Fri Apr 10 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.5.2-1
- Update to 1.5.2
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-63b6e4234a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months
Fedora 30 Update: babeld-1.9.2-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-f3276310a1
2020-04-30 02:50:26.526652
--------------------------------------------------------------------------------
Name : babeld
Product : Fedora 30
Version : 1.9.2
Release : 1.fc30
URL : http://www.pps.univ-paris-diderot.fr/~jch/software/babel/
Summary : Ad-hoc network routing daemon
Description :
Babel is a loop-avoiding distance-vector routing protocol roughly
based on HSDV and AODV, but with provisions for link cost estimation
and redistribution of routes from other routing protocols.
--------------------------------------------------------------------------------
Update Information:
1.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 22 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.9.2-1
- 1.9.2
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1826540 - babeld-1.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1826540
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-f3276310a1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 12 months