[SECURITY] Fedora 34 Update: libssh-0.9.6-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-288925ac19
2021-09-29 01:07:02.642940
--------------------------------------------------------------------------------
Name : libssh
Product : Fedora 34
Version : 0.9.6
Release : 1.fc34
URL : http://www.libssh.org
Summary : A library implementing the SSH protocol
Description :
The ssh library was designed to be used by programmers needing a working SSH
implementation by the mean of a library. The complete control of the client is
made by the programmer. With libssh, you can remotely execute programs, transfer
files, use a secure and transparent tunnel for your remote programs. With its
Secure FTP implementation, you can play with remote files easily, without
third-party programs others than libcrypto (from openssl).
--------------------------------------------------------------------------------
Update Information:
Rebase to libssh-0.9.6 Fix CVE-2021-3634
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 13 2021 Norbert Pocs <npocs(a)redhat.com> - 0.9.6-1
- Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
overflow when rekeying
- Resolves: rhbz#1994600
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1998135 - CVE-2021-3634 libssh: possible heap-based buffer overflow when rekeying [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1998135
[ 2 ] Bug #1998163 - libssh-0.9.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1998163
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-288925ac19' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 34 Update: php-7.4.24-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-3936d60533
2021-09-29 01:07:02.642930
--------------------------------------------------------------------------------
Name : php
Product : Fedora 34
Version : 7.4.24
Release : 1.fc34
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.4.24** (23 Sep 2021) **Core:** * Fixed bug php#81302 (Stream
position after stream filter removed). (cmb) * Fixed bug php#81346 (Non-seekable
streams don't update position after write). (cmb) * Fixed bug php#73122 (Integer
Overflow when concatenating strings). (cmb) **GD:** * Fixed bug php#53580
(During resize gdImageCopyResampled cause colors change). (cmb) **Opcache:** *
Fixed bug php#81353 (segfault with preloading and statically bound closure).
(Nikita) **Shmop:** * Fixed bug php#81407 (shmop_open won't attach and causes
php to crash). (cmb) **Standard:** * Fixed bug php#71542 (disk_total_space
does not work with relative paths). (cmb) * Fixed bug php#81400 (Unterminated
string in dns_get_record() results). (cmb) **SysVMsg:** * Fixed bug php#78819
(Heap Overflow in msg_send). (cmb) **XML:** * Fixed bug php#81351 (xml_parse
may fail, but has no error code). (cmb, Nikita)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Remi Collet <remi(a)remirepo.net> - 7.4.24-1
- Update to 7.4.24 - http://www.php.net/releases/7_4_24.php
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-3936d60533' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 34 Update: newsboat-2.25-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-a4fc436889
2021-09-29 01:07:02.642920
--------------------------------------------------------------------------------
Name : newsboat
Product : Fedora 34
Version : 2.25
Release : 1.fc34
URL : https://www.newsboat.org
Summary : RSS/Atom feed reader for the text console
Description :
Newsboat is a fork of Newsbeuter, an RSS/Atom feed reader for the text console.
--------------------------------------------------------------------------------
Update Information:
Update to version 2.25.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Jan Stan��k <jstanek(a)redhat.com> - 2.25-1
- Upgrade to version 2.25
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2006056 - newsboat-2.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2006056
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-a4fc436889' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 33 Update: php-7.4.24-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-ac51e4911e
2021-09-29 01:07:46.121680
--------------------------------------------------------------------------------
Name : php
Product : Fedora 33
Version : 7.4.24
Release : 1.fc33
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.4.24** (23 Sep 2021) **Core:** * Fixed bug php#81302 (Stream
position after stream filter removed). (cmb) * Fixed bug php#81346 (Non-seekable
streams don't update position after write). (cmb) * Fixed bug php#73122 (Integer
Overflow when concatenating strings). (cmb) **GD:** * Fixed bug php#53580
(During resize gdImageCopyResampled cause colors change). (cmb) **Opcache:** *
Fixed bug php#81353 (segfault with preloading and statically bound closure).
(Nikita) **Shmop:** * Fixed bug php#81407 (shmop_open won't attach and causes
php to crash). (cmb) **Standard:** * Fixed bug php#71542 (disk_total_space
does not work with relative paths). (cmb) * Fixed bug php#81400 (Unterminated
string in dns_get_record() results). (cmb) **SysVMsg:** * Fixed bug php#78819
(Heap Overflow in msg_send). (cmb) **XML:** * Fixed bug php#81351 (xml_parse
may fail, but has no error code). (cmb, Nikita)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Remi Collet <remi(a)remirepo.net> - 7.4.24-1
- Update to 7.4.24 - http://www.php.net/releases/7_4_24.php
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-ac51e4911e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 34 Update: cbmc-5.38.0-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-963b93162e
2021-09-29 01:07:02.642911
--------------------------------------------------------------------------------
Name : cbmc
Product : Fedora 34
Version : 5.38.0
Release : 1.fc34
URL : http://www.cprover.org/cbmc/
Summary : Bounded Model Checker for ANSI-C and C++ programs
Description :
CBMC generates traces that demonstrate how an assertion can be violated, or
proves that the assertion cannot be violated within a given number of loop
iterations.
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 15 2021 Vincent Mihalkovic <vmihalko(a)redhat.com> - 5.38.0-1
- New upstream release of cbmc and also cbmc-utils
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-963b93162e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 33 Update: cbmc-5.38.0-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-500496d709
2021-09-29 01:07:46.121671
--------------------------------------------------------------------------------
Name : cbmc
Product : Fedora 33
Version : 5.38.0
Release : 1.fc33
URL : http://www.cprover.org/cbmc/
Summary : Bounded Model Checker for ANSI-C and C++ programs
Description :
CBMC generates traces that demonstrate how an assertion can be violated, or
proves that the assertion cannot be violated within a given number of loop
iterations.
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 15 2021 Vincent Mihalkovic <vmihalko(a)redhat.com> - 5.38.0-1
- New upstream release of cbmc and also cbmc-utils
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-500496d709' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 34 Update: srain-1.3.0-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-540ce92033
2021-09-29 01:07:02.642902
--------------------------------------------------------------------------------
Name : srain
Product : Fedora 34
Version : 1.3.0
Release : 1.fc34
URL : https://github.com/SrainApp/srain
Summary : Modern, beautiful IRC client written in GTK+ 3
Description :
Modern, beautiful IRC client written in GTK+ 3.
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.3.0-1
- build(update): 1.3.0
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.2.4-3
- Rebuilt with OpenSSL 3.0.0
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-540ce92033' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 34 Update: perl-CPAN-Perl-Releases-5.20210920-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-9065b6d76f
2021-09-29 01:07:02.642892
--------------------------------------------------------------------------------
Name : perl-CPAN-Perl-Releases
Product : Fedora 34
Version : 5.20210920
Release : 1.fc34
URL : https://metacpan.org/release/CPAN-Perl-Releases
Summary : Mapping Perl releases on CPAN to the location of the tarballs
Description :
CPAN::Perl::Releases is a module that contains the mappings of all perl
releases that have been uploaded to CPAN to the authors/id/ path that the
tarballs reside in.
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20210920-1
- 5.20210920 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2006104 - perl-CPAN-Perl-Releases-5.20210920 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2006104
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-9065b6d76f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 33 Update: srain-1.3.0-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-273c9f05bd
2021-09-29 01:07:46.121661
--------------------------------------------------------------------------------
Name : srain
Product : Fedora 33
Version : 1.3.0
Release : 1.fc33
URL : https://github.com/SrainApp/srain
Summary : Modern, beautiful IRC client written in GTK+ 3
Description :
Modern, beautiful IRC client written in GTK+ 3.
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.3.0-1
- build(update): 1.3.0
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.2.4-3
- Rebuilt with OpenSSL 3.0.0
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-273c9f05bd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months
Fedora 34 Update: bpfmon-2.50-1.fc34
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-91a962b988
2021-09-29 01:07:02.642883
--------------------------------------------------------------------------------
Name : bpfmon
Product : Fedora 34
Version : 2.50
Release : 1.fc34
URL : https://github.com/bbonev/bpfmon/
Summary : Traffic monitor for BPF expression/iptables rule
Description :
While tcpdump shows what packets are going through the
network, bpfmon will show how much in terms
of bytes per second and packets per second in a
nice pseudo-graphical terminal interface.
bpfmon also supports monitoring an iptables rule that
is selected by command line option or selected from a
menu.
--------------------------------------------------------------------------------
Update Information:
New version 2.50
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 21 2021 Boian Bonev <bbonev(a)ipacct.com> - 2.50-1
- New version 2.50
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.49-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-91a962b988' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 7 months