[SECURITY] Fedora 34 Update: spamassassin-3.4.5-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-bf06dcffa8
2021-03-31 00:15:12.087364
--------------------------------------------------------------------------------
Name : spamassassin
Product : Fedora 34
Version : 3.4.5
Release : 1.fc34
URL : https://spamassassin.apache.org/
Summary : Spam filter for email which can be invoked from mail delivery agents
Description :
SpamAssassin provides you with a way to reduce if not completely eliminate
Unsolicited Commercial Email (SPAM) from your incoming email. It can
be invoked by a MDA such as sendmail or postfix, or can be called from
a procmail script, .forward file, etc. It uses a genetic-algorithm
evolved scoring system to identify messages which look spammy, then
adds headers to the message so they can be filtered by the user's mail
reading software. This distribution includes the spamd/spamc components
which create a server that considerably speeds processing of mail.
To enable spamassassin, if you are receiving mail locally, simply add
this line to your ~/.procmailrc:
INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc
To filter spam for all users, add that line to /etc/procmailrc
(creating if necessary).
--------------------------------------------------------------------------------
Update Information:
Upstream version 3.4.5. See http://mail-archives.apache.org/mod_mbox/www-
announce/202103.mbox/%3cd028983e-bad3-854b-ec9a-e8b0f922d627(a)apache.org%3e for
details. Fixes CVE-2020-1946
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 25 2021 Kevin Fenzi <kevin(a)scrye.com> - 3.4.5-1
- Update to 3.4.5. Fixes rhbz#1942575
- Fixes CVE-2020-1946
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1862520 - request rebuild for F32; compile-time SSL lib update for 'spamc'
https://bugzilla.redhat.com/show_bug.cgi?id=1862520
[ 2 ] Bug #1943277 - CVE-2020-1946 spamassassin: Malicious rule configuration files can be configured to run system commands [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1943277
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-bf06dcffa8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: crun-0.18-4.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-fc544263a3
2021-03-31 00:15:12.087353
--------------------------------------------------------------------------------
Name : crun
Product : Fedora 34
Version : 0.18
Release : 4.fc34
URL : https://github.com/containers/crun
Summary : OCI runtime written in C
Description :
crun is a runtime for running OCI containers
--------------------------------------------------------------------------------
Update Information:
update libcap dependency
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 25 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.18-4
- bump release tag to stay ahead of older fedora
* Thu Mar 25 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.18-2
- Requires: libcap >= 2.48
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-fc544263a3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: libwacom-1.9-2.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-a036356461
2021-03-31 00:15:12.087342
--------------------------------------------------------------------------------
Name : libwacom
Product : Fedora 34
Version : 1.9
Release : 2.fc34
URL : https://github.com/linuxwacom/libwacom
Summary : Tablet Information Client Library
Description :
libwacom is a library that provides information about Wacom tablets and
tools. This information can then be used by drivers or applications to tweak
the UI or general settings to match the physical tablet.
--------------------------------------------------------------------------------
Update Information:
Add X1 Yoga6 data files (#1940872)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 25 2021 Peter Hutterer <peter.hutterer(a)redhat.com> 1.9-2
- Add X1 Yoga6 data files (#1940872)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1940872 - Lenovo: Upstream libwacom fix for X1 Yoga6
https://bugzilla.redhat.com/show_bug.cgi?id=1940872
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-a036356461' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: initial-setup-0.3.89-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-0211018bde
2021-03-31 00:15:12.087332
--------------------------------------------------------------------------------
Name : initial-setup
Product : Fedora 34
Version : 0.3.89
Release : 1.fc34
URL : https://fedoraproject.org/wiki/InitialSetup
Summary : Initial system configuration utility
Description :
The initial-setup utility runs after installation. It guides the user through
a series of steps that allows for easier configuration of the machine.
--------------------------------------------------------------------------------
Update Information:
Drope unneeded Buildrequires on the anaconda package
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 23 2021 Martin Kolman <mkolman(a)redhat.com> - 0.3.89-1
- Include scripts in the updates image (vponcova)
- Drop build time dependency on the anaconda package (mkolman)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-0211018bde' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
[SECURITY] Fedora 34 Update: xen-4.14.1-7.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-7b4dcfcb6d
2021-03-31 00:15:12.087321
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 34
Version : 4.14.1
Release : 7.fc34
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 18 2021 Michael Young <m.a.young(a)durham.ac.uk> - 4.14.1-7
- HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1940609 - CVE-2021-28687 xen: HVM soft-reset crashes toolstack (XSA-368)
https://bugzilla.redhat.com/show_bug.cgi?id=1940609
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-7b4dcfcb6d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: xorg-x11-drv-openchrome-0.6.400-1.20210215git5dbad06.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-20703b1ef4
2021-03-31 00:15:12.087310
--------------------------------------------------------------------------------
Name : xorg-x11-drv-openchrome
Product : Fedora 34
Version : 0.6.400
Release : 1.20210215git5dbad06.fc34
URL : http://www.freedesktop.org/wiki/Openchrome/
Summary : Xorg X11 openchrome video driver
Description :
X.Org X11 openchrome video driver.
--------------------------------------------------------------------------------
Update Information:
Fix build against DRI1-less X server
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 17 2021 Xavier Bachelot <xavier(a)bachelot.org> - 0.6.400-1
- Update to 0.6.400
- Fix building with DRI1-less F34+ X server (RHBZ#1923707)
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1923707 - xorg-x11-drv-openchrome: FTBFS in Fedora rawhide/f34
https://bugzilla.redhat.com/show_bug.cgi?id=1923707
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-20703b1ef4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: nfs-utils-2.5.3-2.rc1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-e31a53a752
2021-03-31 00:15:12.087299
--------------------------------------------------------------------------------
Name : nfs-utils
Product : Fedora 34
Version : 2.5.3
Release : 2.rc1.fc34
URL : http://linux-nfs.org/
Summary : NFS utilities and supporting clients and daemons for the kernel NFS server
Description :
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
This package also contains the showmount program. Showmount queries the
mount daemon on a remote host for information about the NFS (Network File
System) server on the remote host. For example, showmount can display the
clients which are mounted on that host.
This package also contains the mount.nfs and umount.nfs program.
--------------------------------------------------------------------------------
Update Information:
Updated to the latest RC release: nfs-utils-2-5-4-rc1 (bz 1939257) Enable NFS
server RDMA by default (bz 1931565)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 16 2021 Steve Dickson <steved(a)redhat.com> 2.5.3-3.rc1
- Enable NFS server RDMA by default (bz 1931565)
* Mon Mar 15 2021 Steve Dickson <steved(a)redhat.com> 2.5.3-2.rc1
- Updated to the latest RC release: nfs-utils-2-5-4-rc1 (bz 1939257)
* Sat Mar 13 2021 Steve Dickson <steved(a)redhat.com> 2.5.3-1
- Created a V4 only client package
- Broke out the stat cmds using python into a separate package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1868828 - "nfsdclnts --hostname | head" creates Traceback
https://bugzilla.redhat.com/show_bug.cgi?id=1868828
[ 2 ] Bug #1931565 - NFS server should enable RDMA by default
https://bugzilla.redhat.com/show_bug.cgi?id=1931565
[ 3 ] Bug #1939257 - nfs-utils-2-5-4-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1939257
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-e31a53a752' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: libgudev-236-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-e36679da86
2021-03-31 00:15:12.087284
--------------------------------------------------------------------------------
Name : libgudev
Product : Fedora 34
Version : 236
Release : 1.fc34
URL : https://wiki.gnome.org/Projects/libgudev
Summary : GObject-based wrapper library for libudev
Description :
This library makes it much simpler to use libudev from programs
already using GObject. It also makes it possible to easily use libudev
from other programming languages, such as Javascript, because of
GObject introspection support.
--------------------------------------------------------------------------------
Update Information:
This update adds a few new API calls.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 16 2021 Bastien Nocera <bnocera(a)redhat.com> - 236-1
+ libgudev-236-1
- Update to 236
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-e36679da86' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
Fedora 34 Update: libmaxminddb-1.5.2-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-4b46e8cb90
2021-03-31 00:15:12.087217
--------------------------------------------------------------------------------
Name : libmaxminddb
Product : Fedora 34
Version : 1.5.2
Release : 1.fc34
URL : https://maxmind.github.io/libmaxminddb
Summary : C library for the MaxMind DB file format
Description :
The package contains libmaxminddb library.
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 16 2021 Michal Ruprich <mruprich(a)redhat.com> - 1.5.2-1
- Update to 1.5.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1930395 - libmaxminddb-1.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1930395
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-4b46e8cb90' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months
[SECURITY] Fedora 33 Update: openssl-1.1.1k-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-d049f32a82
2021-03-30 14:30:27.146396
--------------------------------------------------------------------------------
Name : openssl
Product : Fedora 33
Version : 1.1.1k
Release : 1.fc33
URL : http://www.openssl.org/
Summary : Utilities from the general purpose cryptography library with TLS implementation
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
--------------------------------------------------------------------------------
Update Information:
Upgrade to version 1.1.1.k
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 26 2021 Sahana Prasad <sahana(a)redhat.com> - 1:1.1.1k-1
- Upgrade to version 1.1.1.k
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-d049f32a82' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 2 months