Fedora 34 Update: perl-Module-CoreList-5.20211120-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-f3531067ed
2021-12-01 01:12:49.872714
--------------------------------------------------------------------------------
Name : perl-Module-CoreList
Product : Fedora 34
Version : 5.20211120
Release : 1.fc34
URL : https://metacpan.org/release/Module-CoreList
Summary : What modules are shipped with versions of perl
Description :
Module::CoreList provides information on which core and dual-life modules
are shipped with each version of perl.
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.6
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20211120-1
- 5.20211120 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2025236 - perl-Module-CoreList-5.20211120 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2025236
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-f3531067ed' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
Fedora 34 Update: php-league-mime-type-detection-1.9.0-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-1cef3bc6de
2021-12-01 01:12:49.872703
--------------------------------------------------------------------------------
Name : php-league-mime-type-detection
Product : Fedora 34
Version : 1.9.0
Release : 1.fc34
URL : https://github.com/thephpleague/mime-type-detection
Summary : Mime-type detection for Flysystem
Description :
This package supplies a generic mime-type detection interface with a finfo
based implementation.
Autoloader: /usr/share/php/League/MimeTypeDetection/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 1.9.0** - 2021-11-21 Updated - Updated lookup
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Remi Collet <remi(a)remirepo.net> - 1.9.0-1
- update to 1.9.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-1cef3bc6de' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
Fedora 34 Update: php-phpunit-php-code-coverage9-9.2.9-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-6a459433e9
2021-12-01 01:12:49.872692
--------------------------------------------------------------------------------
Name : php-phpunit-php-code-coverage9
Product : Fedora 34
Version : 9.2.9
Release : 1.fc34
URL : https://github.com/sebastianbergmann/php-code-coverage
Summary : PHP code coverage information
Description :
Library that provides collection, processing, and rendering functionality
for PHP code coverage information.
Autoloader: /usr/share/php/SebastianBergmann/CodeCoverage9/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 9.2.9** - 2021-11-19 Fixed *
[#882](https://github.com/sebastianbergmann/php-code-coverage/issues/882):
PHPUnit 9.2.8 has wrong version number
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 20 2021 Remi Collet <remi(a)remirepo.net> - 9.2.9-1
- update to 9.2.9
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-6a459433e9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
Fedora 34 Update: php-doctrine-doctrine-bundle2-2.4.4-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-68cdbf953a
2021-12-01 01:12:49.872681
--------------------------------------------------------------------------------
Name : php-doctrine-doctrine-bundle2
Product : Fedora 34
Version : 2.4.4
Release : 1.fc34
URL : https://github.com/doctrine/DoctrineBundle
Summary : Symfony Bundle for Doctrine
Description :
Doctrine DBAL & ORM Bundle for the Symfony Framework.
Autoloader: /usr/share/php/Doctrine/Bundle/DoctrineBundle2/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 2.4.4** Bug * 1414: v2.4.3 breaks SLC configurations based on
services thanks to @Philosoft CI,Improvement * 1406: Reuse workflows from
upstream thanks to @greg0ire
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 22 2021 Remi Collet <remi(a)remirepo.net> - 2.4.4-1
- update to 2.4.4
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-68cdbf953a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
Fedora 34 Update: jpegxl-0.6.1-6.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-c76e4417b9
2021-12-01 01:12:49.872670
--------------------------------------------------------------------------------
Name : jpegxl
Product : Fedora 34
Version : 0.6.1
Release : 6.fc34
URL : https://jpeg.org/jpegxl/
Summary : JPEG XL image format reference implementation
Description :
This package contains a reference implementation of JPEG XL (encoder and
decoder).
--------------------------------------------------------------------------------
Update Information:
- Update jpegxl to 0.6.1. - Rebuild aom for bumped libjxl soname.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 21 2021 Bj��rn Esser <besser82(a)fedoraproject.org> 0.6.1-6
- Add manual release override
* Sun Nov 21 2021 Bj��rn Esser <besser82(a)fedoraproject.org> 0.6.1-4
- Rebuild without soname bootstrap
* Sun Nov 21 2021 Bj��rn Esser <besser82(a)fedoraproject.org> 0.6.1-3
- Fix BuildRequires when bumping soname
* Sun Nov 21 2021 Bj��rn Esser <besser82(a)fedoraproject.org> 0.6.1-2
- Set explicit soname
* Sun Nov 21 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.6.1-1
- Update to 0.6.1 Close: rhbz#2018648
* Sat Oct 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> 0.5-3
- Rebuild for OpenEXR/Imath 3.1
* Tue Sep 7 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.5-2
- Rebuild. Close: rhbz#1997038
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-c76e4417b9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
Fedora 34 Update: aom-3.1.1-2.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-c76e4417b9
2021-12-01 01:12:49.872670
--------------------------------------------------------------------------------
Name : aom
Product : Fedora 34
Version : 3.1.1
Release : 2.fc34
URL : http://aomedia.org/
Summary : Royalty-free next-generation video format
Description :
The Alliance for Open Media���s focus is to deliver a next-generation
video format that is:
- Interoperable and open;
- Optimized for the Internet;
- Scalable to any modern device at any bandwidth;
- Designed with a low computational footprint and optimized for hardware;
- Capable of consistent, highest-quality, real-time video delivery; and
- Flexible for both commercial and non-commercial content, including
user-generated content.
This package contains the reference encoder and decoder.
--------------------------------------------------------------------------------
Update Information:
- Update jpegxl to 0.6.1. - Rebuild aom for bumped libjxl soname.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 21 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.1.1-2
- Rebuild (jpegxl)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-c76e4417b9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
Fedora 34 Update: pungi-4.3.2-2.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-a7936bba21
2021-12-01 01:12:49.872659
--------------------------------------------------------------------------------
Name : pungi
Product : Fedora 34
Version : 4.3.2
Release : 2.fc34
URL : https://pagure.io/pungi
Summary : Distribution compose tool
Description :
A tool to create anaconda based installation trees/isos of a set of rpms.
--------------------------------------------------------------------------------
Update Information:
pungi-4.3.2-2 fixes a bug in pungi-4.3.2-1 which will cause test phase fail.
---- New pungi release 4.3.2-1 - gather: Load JSON mapping relative to config
dir (lsedlar) - gather: Stop requiring all variants/arches in JSON (lsedlar) -
doc: make dnf "backend" settings easier to discover (kdreyer) - Remove
with_jigdo argument (lsedlar) - Check dependencies after config validation
(lsedlar) - default "with_jigdo" to False (kdreyer) - Stop trying to validate
non-existent metadata (lsedlar) - test images for metadata deserialization error
(fdipretre) - repoclosure: Use --forcearch for dnf repoclosure (lsedlar) -
extra_isos: Allow reusing old images (lsedlar) - createiso: Allow reusing old
images (lsedlar) - Remove default runroot channel (lsedlar)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 15 2021 Haibo Lin <hlin(a)redhat.com> - 4.3.2-2
- Backport patch for generating images.json
* Thu Nov 11 2021 Haibo Lin <hlin(a)redhat.com> - 4.3.2-1
- gather: Load JSON mapping relative to config dir (lsedlar)
- gather: Stop requiring all variants/arches in JSON (lsedlar)
- doc: make dnf "backend" settings easier to discover (kdreyer)
- Remove with_jigdo argument (lsedlar)
- Check dependencies after config validation (lsedlar)
- default "with_jigdo" to False (kdreyer)
- Stop trying to validate non-existent metadata (lsedlar)
- test images for metadata deserialization error (fdipretre)
- repoclosure: Use --forcearch for dnf repoclosure (lsedlar)
- extra_isos: Allow reusing old images (lsedlar)
- createiso: Allow reusing old images (lsedlar)
- Remove default runroot channel (lsedlar)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-a7936bba21' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
[SECURITY] Fedora 34 Update: libldb-2.3.2-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-1d77047c61
2021-12-01 01:12:49.872644
--------------------------------------------------------------------------------
Name : libldb
Product : Fedora 34
Version : 2.3.2
Release : 1.fc34
URL : http://ldb.samba.org/
Summary : A schema-less, ldap like, API and database
Description :
An extensible library that implements an LDAP like API to access remote LDAP
servers, or use local tdb databases.
--------------------------------------------------------------------------------
Update Information:
Update to latest samba and libldb release (addressing various CVEs) and rebuild
freeipa
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 4 2021 Guenther Deschner <gdeschner(a)redhat.com> - 2.3.2-1
- libldb-2.3.2 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2019660 - CVE-2016-2124 samba: SMB1 client connections can be downgraded to plaintext authentication
https://bugzilla.redhat.com/show_bug.cgi?id=2019660
[ 2 ] Bug #2019666 - CVE-2021-23192 samba: Subsequent DCE/RPC fragment injection vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=2019666
[ 3 ] Bug #2019672 - CVE-2020-25717 samba: A user in an AD Domain could become root on domain members
https://bugzilla.redhat.com/show_bug.cgi?id=2019672
[ 4 ] Bug #2019726 - CVE-2020-25718 samba: Samba AD DC did not correctly sandbox Kerberos tickets issues by an RODC
https://bugzilla.redhat.com/show_bug.cgi?id=2019726
[ 5 ] Bug #2019732 - CVE-2020-25719 samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
https://bugzilla.redhat.com/show_bug.cgi?id=2019732
[ 6 ] Bug #2019764 - CVE-2020-25722 samba: Samba AD DC did not do sufficient access and conformance checking of data stored
https://bugzilla.redhat.com/show_bug.cgi?id=2019764
[ 7 ] Bug #2021726 - CVE-2021-3738 samba: Use after free in Samba AD DC RPC server
https://bugzilla.redhat.com/show_bug.cgi?id=2021726
[ 8 ] Bug #2021728 - CVE-2020-25721 samba: Kerberos acceptors need easy access to stableAD identifiers (eg objectSid)
https://bugzilla.redhat.com/show_bug.cgi?id=2021728
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-1d77047c61' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
[SECURITY] Fedora 34 Update: samba-4.14.10-2.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-1d77047c61
2021-12-01 01:12:49.872644
--------------------------------------------------------------------------------
Name : samba
Product : Fedora 34
Version : 4.14.10
Release : 2.fc34
URL : https://www.samba.org
Summary : Server and Client software to interoperate with Windows machines
Description :
Samba is the standard Windows interoperability suite of programs for Linux and
Unix.
--------------------------------------------------------------------------------
Update Information:
Update to latest samba and libldb release (addressing various CVEs) and rebuild
freeipa
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 13 2021 Guenther Deschner <gdeschner(a)redhat.com> - 4.14.10-2
- Fix IPA DC schannel support
* Thu Nov 11 2021 Guenther Deschner <gdeschner(a)redhat.com> - 4.14.10-1
- Fix winbind trusted domain regression
- related: #2021716
* Tue Nov 9 2021 Guenther Deschner <gdeschner(a)redhat.com> - 4.14.10-0
- Update to Samba 4.14.10
- resolves: #2019660, #2021711 - Security fixes for CVE-2016-2124
- resolves: #2019672, #2021716 - Security fixes for CVE-2020-25717
- resolves: #2019726, #2021718 - Security fixes for CVE-2020-25718
- resolves: #2019732, #2021719 - Security fixes for CVE-2020-25719
- resolves: #2021728, #2021729 - Security fixes for CVE-2020-25721
- resolves: #2019764, #2021721 - Security fixes for CVE-2020-25722
- resolves: #2021726, #2021727 - Security fixes for CVE-2021-3738
- resolves: #2019666, #2021715 - Security fixes for CVE-2021-23192
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2019660 - CVE-2016-2124 samba: SMB1 client connections can be downgraded to plaintext authentication
https://bugzilla.redhat.com/show_bug.cgi?id=2019660
[ 2 ] Bug #2019666 - CVE-2021-23192 samba: Subsequent DCE/RPC fragment injection vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=2019666
[ 3 ] Bug #2019672 - CVE-2020-25717 samba: A user in an AD Domain could become root on domain members
https://bugzilla.redhat.com/show_bug.cgi?id=2019672
[ 4 ] Bug #2019726 - CVE-2020-25718 samba: Samba AD DC did not correctly sandbox Kerberos tickets issues by an RODC
https://bugzilla.redhat.com/show_bug.cgi?id=2019726
[ 5 ] Bug #2019732 - CVE-2020-25719 samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
https://bugzilla.redhat.com/show_bug.cgi?id=2019732
[ 6 ] Bug #2019764 - CVE-2020-25722 samba: Samba AD DC did not do sufficient access and conformance checking of data stored
https://bugzilla.redhat.com/show_bug.cgi?id=2019764
[ 7 ] Bug #2021726 - CVE-2021-3738 samba: Use after free in Samba AD DC RPC server
https://bugzilla.redhat.com/show_bug.cgi?id=2021726
[ 8 ] Bug #2021728 - CVE-2020-25721 samba: Kerberos acceptors need easy access to stableAD identifiers (eg objectSid)
https://bugzilla.redhat.com/show_bug.cgi?id=2021728
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-1d77047c61' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months
[SECURITY] Fedora 34 Update: freeipa-4.9.6-4.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-1d77047c61
2021-12-01 01:12:49.872644
--------------------------------------------------------------------------------
Name : freeipa
Product : Fedora 34
Version : 4.9.6
Release : 4.fc34
URL : http://www.freeipa.org/
Summary : The Identity, Policy and Audit system
Description :
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
--------------------------------------------------------------------------------
Update Information:
Update to latest samba and libldb release (addressing various CVEs) and rebuild
freeipa
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 11 2021 Alexander Bokovoy <abokovoy(a)redhat.com> - 4.9.6-4
- Hardening for CVE-2020-25717 part 2
- Handle S4U for users from trusted domains
* Wed Nov 10 2021 Alexander Bokovoy <abokovoy(a)redhat.com> - 4.9.6-3
- Hardening for CVE-2020-25717
- Generate SIDs for IPA users and groups by default
- Verify MS-PAC consistency when it is generated or validated
- Rebuild against samba-4.14.10
- Resolves: rhbz#2021720
- Synchronize with RHEL 8.5 patches for FreeIPA 4.9.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2019660 - CVE-2016-2124 samba: SMB1 client connections can be downgraded to plaintext authentication
https://bugzilla.redhat.com/show_bug.cgi?id=2019660
[ 2 ] Bug #2019666 - CVE-2021-23192 samba: Subsequent DCE/RPC fragment injection vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=2019666
[ 3 ] Bug #2019672 - CVE-2020-25717 samba: A user in an AD Domain could become root on domain members
https://bugzilla.redhat.com/show_bug.cgi?id=2019672
[ 4 ] Bug #2019726 - CVE-2020-25718 samba: Samba AD DC did not correctly sandbox Kerberos tickets issues by an RODC
https://bugzilla.redhat.com/show_bug.cgi?id=2019726
[ 5 ] Bug #2019732 - CVE-2020-25719 samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
https://bugzilla.redhat.com/show_bug.cgi?id=2019732
[ 6 ] Bug #2019764 - CVE-2020-25722 samba: Samba AD DC did not do sufficient access and conformance checking of data stored
https://bugzilla.redhat.com/show_bug.cgi?id=2019764
[ 7 ] Bug #2021726 - CVE-2021-3738 samba: Use after free in Samba AD DC RPC server
https://bugzilla.redhat.com/show_bug.cgi?id=2021726
[ 8 ] Bug #2021728 - CVE-2020-25721 samba: Kerberos acceptors need easy access to stableAD identifiers (eg objectSid)
https://bugzilla.redhat.com/show_bug.cgi?id=2021728
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-1d77047c61' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 4 months