package-announce October 2022

package-announce@lists.fedoraproject.org

1 participants
2402 discussions

[SECURITY] Fedora 36 Update: curl-7.82.0-9.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-01ffde372c 2022-10-30 20:59:07.278958 -------------------------------------------------------------------------------- Name : curl Product : Fedora 36 Version : 7.82.0 Release : 9.fc36 URL : https://curl.se/ Summary : A utility for getting files from remote servers (FTP, HTTP, and others) Description : curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer resume, proxy tunneling and a busload of other useful tricks. -------------------------------------------------------------------------------- Update Information: - url: use IDN decoded names for HSTS checks (CVE-2022-42916) - http_proxy: restore the protocol pointer on error (CVE-2022-42915) - netrc: replace fgets with Curl_get_line (CVE-2022-35260) - fix POST following PUT confusion (CVE-2022-32221) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 26 2022 Kamil Dudka <kdudka(a)redhat.com> - 7.82.0-9 - url: use IDN decoded names for HSTS checks (CVE-2022-42916) - http_proxy: restore the protocol pointer on error (CVE-2022-42915) - netrc: replace fgets with Curl_get_line (CVE-2022-35260) - fix POST following PUT confusion (CVE-2022-32221) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2137769 - CVE-2022-42916 curl: HSTS bypass via IDN [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2137769 [ 2 ] Bug #2137780 - CVE-2022-32221 curl: POST following PUT confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2137780 [ 3 ] Bug #2138111 - CVE-2022-42915 curl: HTTP proxy double-free [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2138111 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-01ffde372c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 36 Update: ibus-typing-booster-2.19.7-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-96fd9b3394 2022-10-30 20:59:07.278939 -------------------------------------------------------------------------------- Name : ibus-typing-booster Product : Fedora 36 Version : 2.19.7 Release : 1.fc36 URL : https://mike-fabian.github.io/ibus-typing-booster/ Summary : A completion input method Description : Ibus-typing-booster is a context sensitive completion input method to speedup typing. -------------------------------------------------------------------------------- Update Information: Update to 2.19.7 Avoid inline completion when OSK (on-screen-keyboard) is shown (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/395) Do not reset input purpose on focus out (See: https://gitlab.gnome.org/GNOME/gnome- shell/-/issues/5966#note_1576732) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 24 2022 Mike FABIAN <mfabian(a)redhat.com> - 2.19.7-1 - Update to 2.19.7 - Avoid inline completion when OSK (on-screen-keyboard) is shown (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/395) - Do not reset input purpose on focus out (See: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/5966#note_1576732) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-96fd9b3394' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 36 Update: webkit2gtk3-2.38.1-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-2652b8aec6 2022-10-30 20:59:07.278948 -------------------------------------------------------------------------------- Name : webkit2gtk3 Product : Fedora 36 Version : 2.38.1 Release : 1.fc36 URL : https://www.webkitgtk.org/ Summary : GTK Web content engine library Description : WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3. -------------------------------------------------------------------------------- Update Information: * Make xdg-dbus-proxy work if host session bus address is an abstract socket. * Use a single xdg-dbus-proxy process when sandbox is enabled. * Fix high resolution video playback due to unimplemented changeType operation. * Ensure GSubprocess uses posix_spawn() again and inherit file descriptors. * Fix player getting stuck in buffering (paused) state for progressive streaming. * Do not try to preconnect on link click when link preconnect setting is disabled. * Fix close status code returned when the client closes a WebSocket in some cases. * Fix media player duration calculation. * Fix several crashes and rendering issues. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 25 2022 Michael Catanzaro <mcatanzaro(a)redhat.com> 2.38.1-1 - Update to 2.38.1 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-2652b8aec6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 36 Update: python-fsspec-2022.10.0-1.fc36~bootstrap
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-c2af70614c 2022-10-30 20:59:07.278929 -------------------------------------------------------------------------------- Name : python-fsspec Product : Fedora 36 Version : 2022.10.0 Release : 1.fc36~bootstrap URL : https://github.com/fsspec/filesystem_spec Summary : Specification for Pythonic file system interfaces Description : Filesystem Spec is a project to unify various projects and classes to work with remote filesystems and file-system-like abstractions using a standard pythonic interface. -------------------------------------------------------------------------------- Update Information: Update to latest version ---- Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 23 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2022.10.0-1 - Update to latest version (#2136198) * Mon Oct 17 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2022.8.2-1 - Update to latest version (#2122769) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2122769 - python-fsspec-2022.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2122769 [ 2 ] Bug #2136198 - python-fsspec-2022.10.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2136198 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-c2af70614c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 36 Update: python-rasterio-1.3.3-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-6ed2addc57 2022-10-30 20:59:07.278920 -------------------------------------------------------------------------------- Name : python-rasterio Product : Fedora 36 Version : 1.3.3 Release : 1.fc36 URL : https://github.com/mapbox/rasterio Summary : Fast and direct raster I/O for use with Numpy and SciPy Description : Rasterio reads and writes geospatial raster data. Geographic information systems use GeoTIFF and other formats to organize and store gridded, or raster, datasets. Rasterio reads and writes these formats and provides a Python API based on ND arrays. -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 23 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 1.3.3-1 - Update to latest version (#2136303) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2136303 - python-rasterio-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2136303 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-6ed2addc57' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 36 Update: nwg-panel-0.7.12-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-9f52a8b50c 2022-10-30 20:59:07.278910 -------------------------------------------------------------------------------- Name : nwg-panel Product : Fedora 36 Version : 0.7.12 Release : 1.fc36 URL : https://github.com/nwg-piotr/nwg-panel Summary : GTK3-based panel for sway window manager Description : I have been using sway since 2019 and find it the most comfortable working environment, but... Have you ever missed all the graphical bells and whistles in your panel, we used to have in tint2? It happens to me. That's why I decided to try to code a GTK-based panel, including best features from my two favourites: Waybar and tint2. Many thanks to Developers and Contributors of the both projects! There are 8 modules available at the moment, and I don't plan on many more. Basis system controls are available in the Controls module, and whatever else you may need, there's an executor for that. -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 23 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.7.12-1 - chore(update): 0.7.12 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-9f52a8b50c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 36 Update: cacti-1.2.22-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-1a85254c11 2022-10-30 20:59:07.278901 -------------------------------------------------------------------------------- Name : cacti Product : Fedora 36 Version : 1.2.22 Release : 1.fc36 URL : https://www.cacti.net/ Summary : An rrd based graphing tool Description : Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. -------------------------------------------------------------------------------- Update Information: - Update to 1.2.22 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.22-1 - Update to 1.2.22 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.21-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-1a85254c11' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 36 Update: cacti-spine-1.2.22-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-1a85254c11 2022-10-30 20:59:07.278901 -------------------------------------------------------------------------------- Name : cacti-spine Product : Fedora 36 Version : 1.2.22 Release : 1.fc36 URL : https://cacti.net Summary : Threaded poller for Cacti written in C Description : Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance. -------------------------------------------------------------------------------- Update Information: - Update to 1.2.22 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.22-1 - Update to 1.2.22 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.21-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-1a85254c11' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 36 Update: mbedtls-2.28.1-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-ff582c5b0d 2022-10-30 20:59:07.278892 -------------------------------------------------------------------------------- Name : mbedtls Product : Fedora 36 Version : 2.28.1 Release : 1.fc36 URL : https://tls.mbed.org/ Summary : Light-weight cryptographic and SSL/TLS library Description : Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their (embedded) applications with as little hassle as possible. FOSS License Exception: https://tls.mbed.org/foss-license-exception -------------------------------------------------------------------------------- Update Information: Update to 2.28.1 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 2.28.1-1 - Update to 2.28.1 * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.28.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2037309 - CVE-2021-45450 mbedtls: policy bypass or oracle-based decryption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2037309 [ 2 ] Bug #2037320 - CVE-2021-45451 mbedtls: policy bypass/oracle-based decryption in psa_aead_generate_nonce [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2037320 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-ff582c5b0d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 36 Update: golang-github-cli-gh-0.1.2-1.fc36
by updates＠fedoraproject.org 30 Oct '22

30 Oct '22

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-ae40353a77 2022-10-30 20:59:07.278882 -------------------------------------------------------------------------------- Name : golang-github-cli-gh Product : Fedora 36 Version : 0.1.2 Release : 1.fc36 URL : https://github.com/cli/go-gh Summary : A Go module for interacting with gh and the GitHub API from the command line Description : A Go module for interacting with gh and the GitHub API from the command line. -------------------------------------------------------------------------------- Update Information: Update to 0.1.2 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 0.1.2-1 - Update to 0.1.2 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-ae40353a77' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce October 2022