Fedora 35 Update: qrencode-4.1.1-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-40f5815008
2021-12-01 01:19:37.797951
--------------------------------------------------------------------------------
Name : qrencode
Product : Fedora 35
Version : 4.1.1
Release : 1.fc35
URL : http://fukuchi.org/works/qrencode/
Summary : Generate QR 2D barcodes
Description :
Qrencode is a utility software using libqrencode to encode string data in
a QR Code and save as a PNG image.
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 23 2021 Marcus M��ller <marcus(a)hostalia.de> - 4.1.1-1
- Update to 4.1.1
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-40f5815008' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
Fedora 35 Update: inxi-3.3.09-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-19158d4fae
2021-12-01 01:19:37.797940
--------------------------------------------------------------------------------
Name : inxi
Product : Fedora 35
Version : 3.3.09
Release : 1.fc35
URL : http://smxi.org/docs/inxi.htm
Summary : A full featured system information script
Description :
Inxi offers a wide range of built-in options, as well as a good number of extra
features which require having the script recommends installed on the system.
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.09.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 25 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.3.09-1
- Update to 3.3.09
- Add perl-Data-Dumper requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2026495 - None
https://bugzilla.redhat.com/show_bug.cgi?id=2026495
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-19158d4fae' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
Fedora 35 Update: virtualbox-guest-additions-6.1.30-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-45342f4576
2021-12-01 01:19:37.797929
--------------------------------------------------------------------------------
Name : virtualbox-guest-additions
Product : Fedora 35
Version : 6.1.30
Release : 1.fc35
URL : https://www.virtualbox.org/wiki/VirtualBox
Summary : VirtualBox Guest Additions
Description :
VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for
enterprise as well as home use. This package contains the VirtualBox
Guest Additions which support better integration of VirtualBox guests
with the Host, including file sharing, clipboard sharing and Seamless mode.
--------------------------------------------------------------------------------
Update Information:
Update Virtualbox Guest Additions to 6.1.30 (#2025728)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 24 2021 S��rgio Basto <sergio(a)serjux.com> - 6.1.30-1
- Update Virtualbox Guest Additions to 6.1.30 (#2025728)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2025728 - virtualbox-guest-additions-6.1.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2025728
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-45342f4576' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
Fedora 35 Update: valgrind-3.18.1-5.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-be68434ede
2021-12-01 01:19:37.797918
--------------------------------------------------------------------------------
Name : valgrind
Product : Fedora 35
Version : 3.18.1
Release : 5.fc35
URL : http://www.valgrind.org/
Summary : Tool for finding memory management bugs in programs
Description :
Valgrind is an instrumentation framework for building dynamic analysis
tools. There are Valgrind tools that can automatically detect many
memory management and threading bugs, and profile your programs in
detail. You can also use Valgrind to build new tools. The Valgrind
distribution currently includes six production-quality tools: a memory
error detector (memcheck, the default tool), two thread error
detectors (helgrind and drd), a cache and branch-prediction profiler
(cachegrind), a call-graph generating cache and branch-prediction
profiler (callgrind), and a heap profiler (massif).
--------------------------------------------------------------------------------
Update Information:
Fix various bugs in 3.18.1. ppc64le updates, arm64 updates, s390x updates, drd
mutex fixes and rust demangling updates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Mark Wielaard <mjw(a)fedoraproject.org> - 3.18.1-5
- Add valgrind-3.18.1-demangle-namespace.patch
* Fri Nov 19 2021 Mark Wielaard <mjw(a)fedoraproject.org> - 3.18.1-4
- Add valgrind-3.18.1-condvar.patch
* Wed Nov 17 2021 Mark Wielaard <mjw(a)fedoraproject.org> - 3.18.1-3
- Add valgrind-3.18.1-ppc-pstq.patch
- Add valgrind-3.18.1-ppc-pstq-tests.patch
- Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
- Add valgrind-3.18.1-rust-v0-demangle.patch
- Add valgrind-3.18.1-arm64-doubleword-cas.patch
- Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
- Add valgrind-3.18.1-arm64-atomic-align.patch
- Add valgrind-3.18.1-amd64-more-spec-rules.patch
* Mon Nov 1 2021 Mark Wielaard <mjw(a)fedoraproject.org> - 3.18.1-2
- Add valgrind-3.18.1-dhat-tests-copy.patch
- Add valgrind-3.18.1-s390x-EXRL.patch
- Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-be68434ede' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
Fedora 35 Update: fluidsynth-2.2.4-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-481396b872
2021-12-01 01:19:37.797907
--------------------------------------------------------------------------------
Name : fluidsynth
Product : Fedora 35
Version : 2.2.4
Release : 1.fc35
URL : http://www.fluidsynth.org/
Summary : Real-time software synthesizer
Description :
FluidSynth is a real-time software synthesizer based on the SoundFont 2
specifications. It is a "software synthesizer". FluidSynth can read MIDI events
from the MIDI input device and render them to the audio device. It features
real-time effect modulation using SoundFont 2.01 modulators, and a built-in
command line shell. It can also play MIDI files (note: FluidSynth was previously
called IIWU Synth).
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.2.4-1
- Update to 2.2.4
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-481396b872' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
[SECURITY] Fedora 35 Update: xen-4.15.1-4.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-03645e9807
2021-12-01 01:19:37.797895
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 35
Version : 4.15.1
Release : 4.fc35
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
guests may exceed their designated memory limit [XSA-385, CVE-2021-28706] PoD
operations on misaligned GFNs [XSA-388, CVE-2021-28704, CVE-2021-28707
CVE-2021-28708] issues with partially successful P2M updates on x86 [XSA-389,
CVE-2021-28705, CVE-2021-28709] certain VT-d IOMMUs may not work in shared page
table mode [XSA-390, CVE-2021-28710]
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 23 2021 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.1-4
- guests may exceed their designated memory limit [XSA-385, CVE-2021-28706]
- PoD operations on misaligned GFNs [XSA-388, CVE-2021-28704, CVE-2021-28707
CVE-2021-28708]
- issues with partially successful P2M updates on x86 [XSA-389,
CVE-2021-28705, CVE-2021-28709]
- certain VT-d IOMMUs may not work in shared page table mode [XSA-390,
CVE-2021-28710]
* Wed Oct 6 2021 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.1-3
- rebuild (f36 only) for OCaml 4.13.1
* Tue Oct 5 2021 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.1-2
- PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702]
(#2011248)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2025046 - CVE-2021-28710 xen: Certain VT-d IOMMUs may not work in shared page table mode
https://bugzilla.redhat.com/show_bug.cgi?id=2025046
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-03645e9807' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
Fedora 35 Update: pigeonascent-1.5.2-3.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-631da470db
2021-12-01 01:19:37.797883
--------------------------------------------------------------------------------
Name : pigeonascent
Product : Fedora 35
Version : 1.5.2
Release : 3.fc35
URL : https://escada-games.itch.io/pigeon-ascent
Summary : Take care of your own pigeon as they fight
Description :
Take care of your own pigeon as they fight increasingly stronger foes, and
then facing the legendary Pigeon God at the end��� can you keep death far from
your bird?
--------------------------------------------------------------------------------
Update Information:
Exclude failing architecture.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Dennis Payne <dulsi(a)identicalsoftware.com> - 1.5.2-3
- Exclude failing architecture.
* Sat Nov 20 2021 Dennis Payne <dulsi(a)identicalsoftware.com> - 1.5.2-2
- Use only buildroot not RPM_BUILD_ROOT
* Tue Sep 28 2021 Dennis Payne <dulsi(a)identicalsoftware.com> - 1.5.2-1
- Initial package creation.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-631da470db' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
[SECURITY] Fedora 35 Update: moby-engine-20.10.11-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-79ba5abef6
2021-12-01 01:19:37.797871
--------------------------------------------------------------------------------
Name : moby-engine
Product : Fedora 35
Version : 20.10.11
Release : 1.fc35
URL : https://www.docker.com
Summary : The open-source application container engine
Description :
Docker is an open source project to build, ship and run any application as a
lightweight container.
Docker containers are both hardware-agnostic and platform-agnostic. This means
they can run anywhere, from your laptop to the largest EC2 compute instance and
everything in between - and they don't require you to use a particular
language, framework or packaging system. That makes them great building blocks
for deploying and scaling web apps, databases, and backend services without
depending on a particular stack or provider.
--------------------------------------------------------------------------------
Update Information:
Update containerd and moby-engine - Security fix for CVE-2021-41190
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Olivier Lemasle <o.lemasle(a)gmail.com> - 20.10-11-1
- Update to upstream 20.10.11 (fixes rhbz#2024384)
- Mitigates CVE-2021-41190 (fixes rhbz#2024940)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2024938 - CVE-2021-41190 opencontainers: OCI manifest and index parsing confusion
https://bugzilla.redhat.com/show_bug.cgi?id=2024938
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-79ba5abef6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
[SECURITY] Fedora 35 Update: golang-github-containerd-ttrpc-1.1.0-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-79ba5abef6
2021-12-01 01:19:37.797871
--------------------------------------------------------------------------------
Name : golang-github-containerd-ttrpc
Product : Fedora 35
Version : 1.1.0
Release : 1.fc35
URL : https://github.com/containerd/ttrpc
Summary : GRPC for low-memory environments
Description :
GRPC for low-memory environments.
The existing grpc-go project requires a lot of memory overhead for importing
packages and at runtime. While this is great for many services with low density
requirements, this can be a problem when running a large number of services on a
single machine or on a machine with a small amount of memory.
Using the same GRPC definitions, this project reduces the binary size and
protocol overhead required. We do this by eliding the net/http, net/http2 and
grpc package used by grpc replacing it with a lightweight framing protocol. The
result are smaller binaries that use less resident memory with the same ease of
use as GRPC.
--------------------------------------------------------------------------------
Update Information:
Update containerd and moby-engine - Security fix for CVE-2021-41190
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Olivier Lemasle <o.lemasle(a)gmail.com> - 1.1.0-1
- Update to upstream 1.1.0 (fixes rhbz#2021872)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2024938 - CVE-2021-41190 opencontainers: OCI manifest and index parsing confusion
https://bugzilla.redhat.com/show_bug.cgi?id=2024938
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-79ba5abef6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months
[SECURITY] Fedora 35 Update: containerd-1.5.8-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-79ba5abef6
2021-12-01 01:19:37.797871
--------------------------------------------------------------------------------
Name : containerd
Product : Fedora 35
Version : 1.5.8
Release : 1.fc35
URL : https://github.com/containerd/containerd
Summary : Open and reliable container runtime
Description :
Containerd is an industry-standard container runtime with an emphasis on
simplicity, robustness and portability. It is available as a daemon for Linux
and Windows, which can manage the complete container lifecycle of its host
system: image transfer and storage, container execution and supervision,
low-level storage and network attachments, etc.
--------------------------------------------------------------------------------
Update Information:
Update containerd and moby-engine - Security fix for CVE-2021-41190
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Olivier Lemasle <o.lemasle(a)gmail.com> - 1.5.8-1
- Update to upstream 1.5.8 (fixes rhbz#2013807)
- Mitigate CVE-2021-41190 (fixes GHSA-5j5w-g665-5m35, fixes rhbz#2024941)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2024938 - CVE-2021-41190 opencontainers: OCI manifest and index parsing confusion
https://bugzilla.redhat.com/show_bug.cgi?id=2024938
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-79ba5abef6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 5 months