Fedora 33 Update: golang-github-chromedp-cdproto-0-0.5.20210114gitdabd2f2.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-4793b63584
2021-01-31 01:21:54.387712
--------------------------------------------------------------------------------
Name : golang-github-chromedp-cdproto
Product : Fedora 33
Version : 0
Release : 0.5.20210114gitdabd2f2.fc33
URL : https://github.com/chromedp/cdproto
Summary : Generated commands, types, and events for the Chrome DevTools Protocol domains
Description :
Package cdproto contains the generated commands, types, and events for the
Chrome DevTools Protocol domains.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 16 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0-0.5.20210114gitdabd2f2
- Bump to commit dabd2f2e76933dc1f17357c2e1f954c052b21c1c
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917069 - golang-github-chromedp-0.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1917069
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-4793b63584' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 33 Update: golang-github-chromedp-0.6.4-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-4793b63584
2021-01-31 01:21:54.387712
--------------------------------------------------------------------------------
Name : golang-github-chromedp
Product : Fedora 33
Version : 0.6.4
Release : 1.fc33
URL : https://github.com/chromedp/chromedp
Summary : Drive browsers supporting the Chrome DevTools Protocol
Description :
A faster, simpler way to drive browsers supporting the Chrome DevTools
Protocol.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 16 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.6.4-1
- Update to latest version
- Enable tests in package
* Wed Jan 13 2021 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.6.1-1
- Update to latest upstream release 0.6.1 (#1909898)
* Mon Jan 4 2021 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.5.5-1
- Update to latest upstream release 0.5.5 (#1909898)
* Tue Dec 22 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.5.4-1
- Update to latest upstream release 0.5.4 (#1909898)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917069 - golang-github-chromedp-0.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1917069
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-4793b63584' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
[SECURITY] Fedora 32 Update: xen-4.13.2-6.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-16c9c40d4d
2021-01-31 01:08:28.835477
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 32
Version : 4.13.2
Release : 6.fc32
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
IRQ vector leak on x86 [XSA-360]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 21 2021 Michael Young <m.a.young(a)durham.ac.uk> - 4.13.2-6
- IRQ vector leak on x86 [XSA-360]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921313 - CVE-2021-3308 xen: IRQ vector leak on x86
https://bugzilla.redhat.com/show_bug.cgi?id=1921313
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-16c9c40d4d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
[SECURITY] Fedora 32 Update: chromium-88.0.4324.96-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-b7cc24375b
2021-01-31 01:08:28.835465
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora 32
Version : 88.0.4324.96
Release : 1.fc32
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
This is probably not the update you want. Let me be clear, it does fix the
security vulnerabilities in this list: CVE-2020-16044 CVE-2021-21118
CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123
CVE-2021-21124 CVE-2021-21125 CVE-2021-21126 CVE-2021-21127 CVE-2021-21129
CVE-2021-21130 CVE-2021-21131 CVE-2021-21132 CVE-2021-21133 CVE-2021-21134
CVE-2021-21135 CVE-2021-21136 CVE-2021-21137 CVE-2021-21138 CVE-2021-21139
CVE-2021-21140 CVE-2021-21141 CVE-2021-21117 CVE-2021-21128 But it will not
behave like Google Chrome does. Google has announced that it is cutting off
access to the Sync and "other Google Exclusive" APIs from all builds except
Google Chrome. This will make the Fedora Chromium build significantly less
functional (along with every other distro packaged Chromium). It is noteworthy
that Google _gave_ the builders of distribution Chromium packages these access
rights back in 2013 via API keys, specifically so that we could have open source
builds of Chromium with (near) feature parity to Chrome. And now they're taking
it away. The reasoning given for this change? Google does not want users to be
able to "access their personal Chrome Sync data (such as bookmarks) ... with a
non-Google, Chromium-based browser." They're not closing a security hole,
they're just requiring that everyone use Chrome. Or to put it bluntly, they do
not want you to access their Google API functionality without using proprietary
software (Google Chrome). There is no good reason for Google to do this, other
than to force people to use Chrome. I gave a lot of thought to whether I wanted
to continue to maintain the Chromium package in Fedora, given that many (most?)
users will be confused/annoyed when API functionality like sync and geolocation
stops working for no good reason. Ultimately, I decided to continue for now,
because there were at least some users who didn't mind, and if I stopped,
someone else would start over and run blindly into this problem. I would say
that you might want to reconsider whether you want to use Chromium or not. If
you want the full "Google" experience, you can run the proprietary Chrome. If
you want to use a FOSS browser that isn't hobbled, there is a Firefox package in
Fedora. Oh, last, but not least, Google isn't shutting off the API access until
March 15, 2021, but I have gone ahead and disabled it starting with this update.
I'd rather you read about it here (even though most users will never see this)
than have it just happen.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 20 2021 Tom Callaway <spot(a)fedoraproject.org> - 88.0.4324.96-1
- 88 goes from beta to stable
- disable use of api keys (Google shut off API access)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1918218 - CVE-2021-21118 chromium-browser: Insufficient data validation in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1918218
[ 2 ] Bug #1918219 - CVE-2021-21119 chromium-browser: Use after free in Media
https://bugzilla.redhat.com/show_bug.cgi?id=1918219
[ 3 ] Bug #1918220 - CVE-2021-21120 chromium-browser: Use after free in WebSQL
https://bugzilla.redhat.com/show_bug.cgi?id=1918220
[ 4 ] Bug #1918222 - CVE-2021-21121 chromium-browser: Use after free in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1918222
[ 5 ] Bug #1918223 - CVE-2021-21122 chromium-browser: Use after free in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1918223
[ 6 ] Bug #1918224 - CVE-2021-21123 chromium-browser: Insufficient data validation in File System API
https://bugzilla.redhat.com/show_bug.cgi?id=1918224
[ 7 ] Bug #1918225 - CVE-2021-21124 chromium-browser: Potential user after free in Speech Recognizer
https://bugzilla.redhat.com/show_bug.cgi?id=1918225
[ 8 ] Bug #1918226 - CVE-2021-21125 chromium-browser: Insufficient policy enforcement in File System API
https://bugzilla.redhat.com/show_bug.cgi?id=1918226
[ 9 ] Bug #1918227 - CVE-2021-21126 chromium-browser: Insufficient policy enforcement in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1918227
[ 10 ] Bug #1918228 - CVE-2021-21127 chromium-browser: Insufficient policy enforcement in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1918228
[ 11 ] Bug #1918229 - CVE-2021-21129 chromium-browser: Insufficient policy enforcement in File System API
https://bugzilla.redhat.com/show_bug.cgi?id=1918229
[ 12 ] Bug #1918230 - CVE-2021-21130 chromium-browser: Insufficient policy enforcement in File System API
https://bugzilla.redhat.com/show_bug.cgi?id=1918230
[ 13 ] Bug #1918231 - CVE-2021-21131 chromium-browser: Insufficient policy enforcement in File System API
https://bugzilla.redhat.com/show_bug.cgi?id=1918231
[ 14 ] Bug #1918232 - CVE-2021-21132 chromium-browser: Inappropriate implementation in DevTools
https://bugzilla.redhat.com/show_bug.cgi?id=1918232
[ 15 ] Bug #1918233 - CVE-2021-21133 chromium-browser: Insufficient policy enforcement in Downloads
https://bugzilla.redhat.com/show_bug.cgi?id=1918233
[ 16 ] Bug #1918235 - CVE-2021-21134 chromium-browser: Incorrect security UI in Page Info
https://bugzilla.redhat.com/show_bug.cgi?id=1918235
[ 17 ] Bug #1918236 - CVE-2021-21135 chromium-browser: Inappropriate implementation in Performance API
https://bugzilla.redhat.com/show_bug.cgi?id=1918236
[ 18 ] Bug #1918237 - CVE-2021-21136 chromium-browser: Insufficient policy enforcement in WebView
https://bugzilla.redhat.com/show_bug.cgi?id=1918237
[ 19 ] Bug #1918238 - CVE-2021-21137 chromium-browser: Inappropriate implementation in DevTools
https://bugzilla.redhat.com/show_bug.cgi?id=1918238
[ 20 ] Bug #1918239 - CVE-2021-21138 chromium-browser: Use after free in DevTools
https://bugzilla.redhat.com/show_bug.cgi?id=1918239
[ 21 ] Bug #1918240 - CVE-2021-21139 chromium-browser: Inappropriate implementation in iframe sandbox
https://bugzilla.redhat.com/show_bug.cgi?id=1918240
[ 22 ] Bug #1918241 - CVE-2021-21140 chromium-browser: Uninitialized Use in USB
https://bugzilla.redhat.com/show_bug.cgi?id=1918241
[ 23 ] Bug #1918242 - CVE-2021-21141 chromium-browser: Insufficient policy enforcement in File System API
https://bugzilla.redhat.com/show_bug.cgi?id=1918242
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-b7cc24375b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 32 Update: grafana-pcp-3.0.2-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-5798d01278
2021-01-31 01:08:28.835441
--------------------------------------------------------------------------------
Name : grafana-pcp
Product : Fedora 32
Version : 3.0.2
Release : 1.fc32
URL : https://github.com/performancecopilot/grafana-pcp
Summary : Performance Co-Pilot Grafana Plugin
Description :
This Grafana plugin for Performance Co-Pilot includes datasources for
scalable time series from pmseries(1) and Redis, live PCP metrics and
bpftrace scripts from pmdabpftrace(1), as well as several dashboards.
--------------------------------------------------------------------------------
Update Information:
update to upstream 3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 22 2021 Andreas Gerstmayr <agerstmayr(a)redhat.com> 3.0.2-1
- update to 3.0.2 tagged upstream community sources, see CHANGELOG
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-5798d01278' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 32 Update: libmongocrypt-1.2.0-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-3748c8aa1a
2021-01-31 01:08:28.835429
--------------------------------------------------------------------------------
Name : libmongocrypt
Product : Fedora 32
Version : 1.2.0
Release : 1.fc32
URL : https://github.com/mongodb/libmongocrypt
Summary : The companion C library for client side encryption in drivers
Description :
The companion C library for client side encryption in drivers.
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.0** Added - Support AWS temporary credentials via session token.
Fixed - Add "=" padding to base64url encoding.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 22 2021 Remi Collet <remi(a)remirepo.net> - 1.2.0-1
- update to 1.2.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-3748c8aa1a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 32 Update: perl-Image-ExifTool-12.16-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-3b533eaec0
2021-01-31 01:08:28.835416
--------------------------------------------------------------------------------
Name : perl-Image-ExifTool
Product : Fedora 32
Version : 12.16
Release : 1.fc32
URL : http://www.sno.phy.queensu.ca/%7Ephil/exiftool/
Summary : Utility for reading and writing image meta info
Description :
ExifTool is a Perl module with an included command-line application for
reading and writing meta information in image, audio, and video files.
It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile,
Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2,
TIFF, GIF, PNG, MNG, JNG, MIFF, EPS, PS, AI, PDF, PSD, BMP, THM, CRW,
CR2, MRW, NEF, PEF, ORF, DNG, and many other types of images. ExifTool
also extracts information from the maker notes of many digital cameras
by various manufacturers including Canon, Casio, FujiFilm, GE, HP,
JVC/Victor, Kodak, Leaf, Minolta/Konica-Minolta, Nikon, Olympus/Epson,
Panasonic/Leica, Pentax/Asahi, Reconyx, Ricoh, Samsung, Sanyo,
Sigma/Foveon, and Sony.
--------------------------------------------------------------------------------
Update Information:
Update to latest stable (12.16). ---- add arg_files as doc
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 22 2021 Tom Callaway <spot(a)fedoraproject.org> - 12.16-1
- update to latest stable (12.16)
* Tue Jan 19 2021 Tom Callaway <spot(a)fedoraproject.org> - 12.00-3
- add arg_files as doc
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 12.00-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917309 - Please include missing argument files in package
https://bugzilla.redhat.com/show_bug.cgi?id=1917309
[ 2 ] Bug #1918698 - Upgrade perl-Image-ExifTool to 12.15
https://bugzilla.redhat.com/show_bug.cgi?id=1918698
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-3b533eaec0' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 32 Update: fuse-overlayfs-1.4.0-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-368b44df44
2021-01-31 01:08:28.835405
--------------------------------------------------------------------------------
Name : fuse-overlayfs
Product : Fedora 32
Version : 1.4.0
Release : 1.fc32
URL : https://github.com/containers/fuse-overlayfs
Summary : FUSE overlay+shiftfs implementation for rootless containers
Description :
FUSE overlay+shiftfs implementation for rootless containers.
--------------------------------------------------------------------------------
Update Information:
Autobuilt v1.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 22 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.4.0-1
- autobuilt v1.4.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-368b44df44' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 32 Update: grafana-7.3.6-2.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-c32dc6a3b8
2021-01-31 01:08:28.835394
--------------------------------------------------------------------------------
Name : grafana
Product : Fedora 32
Version : 7.3.6
Release : 2.fc32
URL : https://grafana.org
Summary : Metrics dashboard and graph editor
Description :
Grafana is an open source, feature rich metrics dashboard and graph editor for
Graphite, InfluxDB & OpenTSDB.
--------------------------------------------------------------------------------
Update Information:
``` Fri Jan 22 2021 Andreas Gerstmayr <agerstmayr(a)redhat.com> 7.3.6-2 -
change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ
#1916083) - add pcp-redis-datasource to allow_loading_unsigned_plugins config
option ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 22 2021 Andreas Gerstmayr <agerstmayr(a)redhat.com> 7.3.6-2
- change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
- add pcp-redis-datasource to allow_loading_unsigned_plugins config option
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-c32dc6a3b8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months
Fedora 32 Update: urw-base35-fonts-20200910-2.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-fc7061dc99
2021-01-31 01:08:28.835383
--------------------------------------------------------------------------------
Name : urw-base35-fonts
Product : Fedora 32
Version : 20200910
Release : 2.fc32
URL : https://www.urwpp.de/en/
Summary : Core Font Set containing 35 freely distributable fonts from (URW)++
Description :
The Level 2 Core Font Set is a PostScript specification of 35 base fonts that
can be used with any PostScript file. In Fedora, these fonts are provided freely
by (URW)++ company, and are mainly utilized by applications using Ghostscript.
This meta-package will install all the 35 fonts from the urw-base35-fonts.
--------------------------------------------------------------------------------
Update Information:
Fix some X11-related packaging bugs
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 22 2021 Anna Khaitovich <akhaitov(a)redhat.com> - 20200910-2
- Fix some X11-related packaging bugs (#1918947)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-fc7061dc99' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 3 months