Fedora 34 Update: rust-pipe-0.4.0-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-43972b7d27
2021-07-29 01:06:35.173545
--------------------------------------------------------------------------------
Name : rust-pipe
Product : Fedora 34
Version : 0.4.0
Release : 1.fc34
URL : https://crates.io/crates/pipe
Summary : Synchronous Read/Write memory pipe
Description :
Synchronous Read/Write memory pipe.
--------------------------------------------------------------------------------
Update Information:
Update to version 0.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 20 2021 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.0-1
- Update to version 0.4.0.
- Fixes RHBZ#1902430
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-43972b7d27' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 10 months
Fedora 34 Update: rust-c_vec-2.0.0-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-dbe3a4f572
2021-07-29 01:06:35.173535
--------------------------------------------------------------------------------
Name : rust-c_vec
Product : Fedora 34
Version : 2.0.0
Release : 1.fc34
URL : https://crates.io/crates/c_vec
Summary : Structures to wrap C arrays
Description :
Structures to wrap C arrays.
--------------------------------------------------------------------------------
Update Information:
Update to version 2.0.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 20 2021 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.0-1
- Update to version 2.0.0.
- Fixes RHBZ#1882797
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-dbe3a4f572' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 10 months
Fedora 34 Update: jc-1.16.0-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-28b02906f5
2021-07-29 01:06:35.173526
--------------------------------------------------------------------------------
Name : jc
Product : Fedora 34
Version : 1.16.0
Release : 1.fc34
URL : https://github.com/kellyjonbrazil/jc
Summary : Serialize the output of CLI tools and file-types to structured JSON
Description :
JSON CLI output utility. JC is used to JSONify the output of many
command-line tools and file types for easier parsing in scripts.
--------------------------------------------------------------------------------
Update Information:
Update to v1.16.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 20 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.16.0-1
- Update to v1.16.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1976931 - jc-1.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1976931
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-28b02906f5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 10 months
[SECURITY] Fedora 34 Update: ruby-3.0.2-149.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-36cdab1f8d
2021-07-29 01:06:35.173516
--------------------------------------------------------------------------------
Name : ruby
Product : Fedora 34
Version : 3.0.2
Release : 149.fc34
URL : https://www.ruby-lang.org/
Summary : An interpreter of object-oriented scripting language
Description :
Ruby is the interpreted scripting language for quick and easy
object-oriented programming. It has many features to process text
files and to do system management tasks (as in Perl). It is simple,
straight-forward, and extensible.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-36327 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Jarek Prokop <jprokop(a)redhat.com> - 3.0.2-149
- Upgrade to Ruby 3.0.2.
- Fix command injection vulnerability in RDoc.
Resolves: CVE-2021-31799
- Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
Resolves: CVE-2021-31810
- Fix StartTLS stripping vulnerability in Net::IMAP.
Resolves: CVE-2021-32066
- Fix dependencies of gems with explicit source installed from a different
source.
Resolves: CVE-2020-36327
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958999 - CVE-2020-36327 rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source
https://bugzilla.redhat.com/show_bug.cgi?id=1958999
[ 2 ] Bug #1980126 - CVE-2021-31810 ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host
https://bugzilla.redhat.com/show_bug.cgi?id=1980126
[ 3 ] Bug #1980128 - CVE-2021-32066 ruby: StartTLS stripping vulnerability in Net::IMAP
https://bugzilla.redhat.com/show_bug.cgi?id=1980128
[ 4 ] Bug #1980132 - CVE-2021-31799 rubygem-rdoc: Command injection vulnerability in RDoc
https://bugzilla.redhat.com/show_bug.cgi?id=1980132
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-36cdab1f8d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 10 months
Fedora 34 Update: coin-or-Bonmin-1.8.8-4.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-d0933b7672
2021-07-29 01:06:35.173506
--------------------------------------------------------------------------------
Name : coin-or-Bonmin
Product : Fedora 34
Version : 1.8.8
Release : 4.fc34
URL : http://projects.coin-or.org/Bonmin
Summary : Basic Open-source Nonlinear Mixed INteger programming
Description :
Bonmin (Basic Open-source Nonlinear Mixed INteger programming) is an
experimental open-source C++ code for solving general MINLP (Mixed Integer
NonLinear Programming) problems of the form:
min f(x)
s.t. g_L <= g(x) <= g_U
x_L <= x <= x_U
x_i in Z for all i in I and,
x_i in R for all i not in I.
where f(x): R^n --> R, g(x): R^n --> R^m are twice continuously differentiable
functions and I is a subset of {1,..,n}.
Bonmin features several algorithms
* B-BB is a NLP-based branch-and-bound algorithm,
* B-OA is an outer-approximation decomposition algorithm,
* B-QG is an implementation of Quesada and Grossmann's branch-and-cut
algorithm,
* B-Hyb is a hybrid outer-approximation based branch-and-cut algorithm.
The algorithms in Bonmin are exact when the functions f and g are convex;
in the case where f or g or both are non-convex they are heuristics.
--------------------------------------------------------------------------------
Update Information:
This update adds a few upstream patches to fix various bugs. For more
information, see: - https://github.com/coin-
or/Bonmin/commit/3c51a306137f6f6f37825770987585b407919ff8 -
https://github.com/coin-
or/Bonmin/commit/fe6f493c1ac45373db1a6a29138d70c85a310a08 -
https://github.com/coin-
or/Bonmin/commit/bce858f7874e1d2d9e57cc96ab8b8185e85a9651 (fixes bug 1956936)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 20 2021 Jerry James <loganjerry(a)gmail.com> - 1.8.8-4
- Add upstream patches: -clear, -bool, and -assertions (bz 1956936)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956936 - Bonmin crashes with glibc assertions
https://bugzilla.redhat.com/show_bug.cgi?id=1956936
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-d0933b7672' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 10 months