package-announce December 2021

package-announce@lists.fedoraproject.org

1 participants
2492 discussions

[SECURITY] Fedora 34 Update: moby-engine-20.10.11-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-eb2742b148 2021-12-01 01:12:49.872927 -------------------------------------------------------------------------------- Name : moby-engine Product : Fedora 34 Version : 20.10.11 Release : 1.fc34 URL : https://www.docker.com Summary : The open-source application container engine Description : Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance and everything in between - and they don't require you to use a particular language, framework or packaging system. That makes them great building blocks for deploying and scaling web apps, databases, and backend services without depending on a particular stack or provider. -------------------------------------------------------------------------------- Update Information: Update containerd and moby-engine - Security fix for CVE-2021-41190 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Olivier Lemasle <o.lemasle(a)gmail.com> - 20.10-11-1 - Update to upstream 20.10.11 (fixes rhbz#2024384) - Mitigates CVE-2021-41190 (fixes rhbz#2024940) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2024938 - CVE-2021-41190 opencontainers: OCI manifest and index parsing confusion https://bugzilla.redhat.com/show_bug.cgi?id=2024938 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-eb2742b148' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 34 Update: containerd-1.5.8-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-eb2742b148 2021-12-01 01:12:49.872927 -------------------------------------------------------------------------------- Name : containerd Product : Fedora 34 Version : 1.5.8 Release : 1.fc34 URL : https://github.com/containerd/containerd Summary : Open and reliable container runtime Description : Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc. -------------------------------------------------------------------------------- Update Information: Update containerd and moby-engine - Security fix for CVE-2021-41190 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Olivier Lemasle <o.lemasle(a)gmail.com> - 1.5.8-1 - Update to upstream 1.5.8 (fixes rhbz#2013807) - Mitigate CVE-2021-41190 (fixes GHSA-5j5w-g665-5m35, fixes rhbz#2024941) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2024938 - CVE-2021-41190 opencontainers: OCI manifest and index parsing confusion https://bugzilla.redhat.com/show_bug.cgi?id=2024938 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-eb2742b148' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 34 Update: bear-3.0.17-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-17ef809378 2021-12-01 01:12:49.872916 -------------------------------------------------------------------------------- Name : bear Product : Fedora 34 Version : 3.0.17 Release : 1.fc34 URL : https://github.com/rizsotto/bear Summary : Tool that generates a compilation database for clang tooling Description : Build ear produces compilation database in JSON format. This database describes how single compilation unit should be processed and can be used by Clang tooling. -------------------------------------------------------------------------------- Update Information: New upstream release 3.0.17 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 3.0.17-1 - New upstream release 3.0.17, fixes rhbz#2023138 * Sun Nov 7 2021 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 3.0.16-1 - New upstream release 3.0.16, fixes rhbz#2007711 * Sun Nov 7 2021 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 3.0.15-3 - Enable unit tests & add optional test dependencies * Sun Nov 7 2021 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 3.0.15-2 - Re-enable functional tests * Sun Nov 7 2021 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 3.0.15-1 - New upstream release 3.0.15, fixes rhbz#2002549 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2023138 - bear-3.0.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=2023138 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-17ef809378' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 34 Update: rust-remove_dir_all-0.7.0-3.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-b7902f1579 2021-12-01 01:12:49.872906 -------------------------------------------------------------------------------- Name : rust-remove_dir_all Product : Fedora 34 Version : 0.7.0 Release : 3.fc34 URL : https://crates.io/crates/remove_dir_all Summary : Safe, reliable implementation of remove_dir_all Description : Safe, reliable implementation of remove_dir_all for Windows. -------------------------------------------------------------------------------- Update Information: Disable broken tests that have been failing since the update to Rust 1.55. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.0-3 - Disable tests as the seem to be broken with Rust 1.55+. * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-b7902f1579' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 34 Update: rabbitmq-server-3.8.26-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-ad2b2a8b64 2021-12-01 01:12:49.872895 -------------------------------------------------------------------------------- Name : rabbitmq-server Product : Fedora 34 Version : 3.8.26 Release : 1.fc34 URL : https://www.rabbitmq.com/ Summary : The RabbitMQ server Description : RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. -------------------------------------------------------------------------------- Update Information: RabbitMQ ver. 3.8.26 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 3.8.26-1 - Ver. 3.8.26 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-ad2b2a8b64' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 34 Update: xq-0.0.6-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-594822c195 2021-12-01 01:12:49.872884 -------------------------------------------------------------------------------- Name : xq Product : Fedora 34 Version : 0.0.6 Release : 1.fc34 URL : https://github.com/sibprogrammer/xq Summary : Command line XML beautifier and content extractor. Similar to jq Description : Command line XML beautifier and content extractor. Similar to jq. -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 0.0.6-1 - Initial import BZ#2023085 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2023085 - Review Request: xq - Command line XML beautifier and content extractor, similar to jq https://bugzilla.redhat.com/show_bug.cgi?id=2023085 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-594822c195' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 34 Update: libdxfrw-1.0.1-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-67c946a9f3 2021-12-01 01:12:49.872874 -------------------------------------------------------------------------------- Name : libdxfrw Product : Fedora 34 Version : 1.0.1 Release : 1.fc34 URL : https://github.com/LibreCAD/libdxfrw Summary : Library to read/write DXF files Description : libdxfrw is a free C++ library to read and write DXF files in both formats, ASCII and binary form. -------------------------------------------------------------------------------- Update Information: Update libdxfrw to 1.0.1 (from upstream git). Rebuild librecad against it. This fixes CVE-2021-21898, CVE-2021-21899, and CVE-2021-21900. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Tom Callaway <spot(a)fedoraproject.org> - 1.0.1-1 - rebase to new code home, fixes CVE-2021-21898/21899/21900 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.3-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Thu May 27 2021 Tom Callaway <spot(a)fedoraproject.org> - 0.6.3-18 - disable rpath -------------------------------------------------------------------------------- References: [ 1 ] Bug #2025628 - CVE-2021-21899 librecad: heap out-of-bounds write in dwgCompressor:copyCompBytes21 https://bugzilla.redhat.com/show_bug.cgi?id=2025628 [ 2 ] Bug #2025631 - CVE-2021-21900 librecad: use-after-free in dxfRW:processLType() https://bugzilla.redhat.com/show_bug.cgi?id=2025631 [ 3 ] Bug #2025634 - CVE-2021-21898 librecad: out-of-bounds write in dwgCompressor:decompress18() https://bugzilla.redhat.com/show_bug.cgi?id=2025634 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-67c946a9f3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 34 Update: librecad-2.2.0-0.11.rc2.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-67c946a9f3 2021-12-01 01:12:49.872874 -------------------------------------------------------------------------------- Name : librecad Product : Fedora 34 Version : 2.2.0 Release : 0.11.rc2.fc34 URL : http://librecad.org/ Summary : Computer Assisted Design (CAD) Application Description : A graphical and comprehensive 2D CAD application. -------------------------------------------------------------------------------- Update Information: Update libdxfrw to 1.0.1 (from upstream git). Rebuild librecad against it. This fixes CVE-2021-21898, CVE-2021-21899, and CVE-2021-21900. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Tom Callaway <spot(a)fedoraproject.org> - 2.2.0-0.11.rc2 - rebuild against new libdxfrw - rebase to 1d31427 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-0.10.rc2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2025628 - CVE-2021-21899 librecad: heap out-of-bounds write in dwgCompressor:copyCompBytes21 https://bugzilla.redhat.com/show_bug.cgi?id=2025628 [ 2 ] Bug #2025631 - CVE-2021-21900 librecad: use-after-free in dxfRW:processLType() https://bugzilla.redhat.com/show_bug.cgi?id=2025631 [ 3 ] Bug #2025634 - CVE-2021-21898 librecad: out-of-bounds write in dwgCompressor:decompress18() https://bugzilla.redhat.com/show_bug.cgi?id=2025634 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-67c946a9f3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 34 Update: pdf2djvu-0.9.18.2-1.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-09c7f5049f 2021-12-01 01:12:49.872831 -------------------------------------------------------------------------------- Name : pdf2djvu Product : Fedora 34 Version : 0.9.18.2 Release : 1.fc34 URL : http://jwilk.net/software/pdf2djvu Summary : PDF to DjVu converter Description : pdf2djvu creates DjVu files from PDF files. It's able to extract: graphics, text layer, hyperlinks, document outline (bookmarks) and metadata. -------------------------------------------------------------------------------- Update Information: - Update to 0.9.18.2 fixes rhbz#2025677 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.18.2-1 - Update to 0.9.18.2 fixes rhbz#2025677 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2025677 - pdf2djvu-0.9.18.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2025677 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-09c7f5049f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 34 Update: perl-Archive-Zip-SimpleZip-0.040-2.fc34
by updates＠fedoraproject.org 30 Nov '21

30 Nov '21

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-23818d4355 2021-12-01 01:12:49.872820 -------------------------------------------------------------------------------- Name : perl-Archive-Zip-SimpleZip Product : Fedora 34 Version : 0.040 Release : 2.fc34 URL : https://metacpan.org/release/Archive-Zip-SimpleZip/ Summary : Create Zip Archives Description : Archive::Zip::SimpleZip is a module that allows the creation of Zip archives. For reading Zip archives, there is a companion module, called Archive::Zip::SimpleUnzip, that can read Zip archives. -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 18 2021 Xavier Bachelot <xavier(a)bachelot.org> 0.040-2 - Review fixes * Thu Oct 7 2021 Xavier Bachelot <xavier(a)bachelot.org> 0.040-1 - Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #2011830 - Review Request: perl-Archive-Zip-SimpleZip - Create Zip Archives https://bugzilla.redhat.com/show_bug.cgi?id=2011830 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-23818d4355' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce December 2021