Fedora 34 Update: gscan2pdf-2.12.5-1.fc34
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-463c0e89ac
2022-02-25 17:01:56.011268
--------------------------------------------------------------------------------
Name : gscan2pdf
Product : Fedora 34
Version : 2.12.5
Release : 1.fc34
URL : http://gscan2pdf.sourceforge.net/
Summary : GUI for producing a multipage PDF from a scan
Description :
A GUI to ease the process of producing a multipage PDF from a scan.
--------------------------------------------------------------------------------
Update Information:
This release fixes logging Unicode characters. It also improves German, Italian,
Russian, Slovak, and Ukrainian translations.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 16 2022 Petr Pisar <ppisar(a)redhat.com> - 2.12.5-1
- 2.12.5 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2054880 - gscan2pdf-2.12.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2054880
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-463c0e89ac' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
[SECURITY] Fedora 34 Update: qemu-5.2.0-9.fc34
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-5d0676b098
2022-02-25 17:01:56.011254
--------------------------------------------------------------------------------
Name : qemu
Product : Fedora 34
Version : 5.2.0
Release : 9.fc34
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:
* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.
As QEMU requires no host kernel patches to run, it is safe and easy to use.
--------------------------------------------------------------------------------
Update Information:
virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 5.2.0-9
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)
Resolves: rhbz#2044863
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2044863 - CVE-2022-0358 QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405
https://bugzilla.redhat.com/show_bug.cgi?id=2044863
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-5d0676b098' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
Fedora 34 Update: libical-3.0.14-1.fc34
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-94bfde125e
2022-02-25 17:01:56.011183
--------------------------------------------------------------------------------
Name : libical
Product : Fedora 34
Version : 3.0.14
Release : 1.fc34
URL : https://libical.github.io/libical/
Summary : Reference implementation of the iCalendar data type and serialization format
Description :
Reference implementation of the iCalendar data type and serialization format
used in dozens of calendaring and scheduling products.
--------------------------------------------------------------------------------
Update Information:
Update to the 3.0.14 release, which fixes: * icalvalue: Reset non-UTC
icaltimetype::zone on set * Fix icalcomponent_set_due not removing TZID when
necessary Include also patched Evolution, where the libical change uncovered a
bug in the code.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 7 2022 Milan Crha <mcrha(a)redhat.com> - 3.0.14-1
- Update to 3.0.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051054 - libical-3.0.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2051054
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-94bfde125e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
Fedora 34 Update: evolution-3.40.4-3.fc34
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-94bfde125e
2022-02-25 17:01:56.011183
--------------------------------------------------------------------------------
Name : evolution
Product : Fedora 34
Version : 3.40.4
Release : 3.fc34
URL : https://wiki.gnome.org/Apps/Evolution
Summary : Mail and calendar client for GNOME
Description :
Evolution is the GNOME mailer, calendar, contact manager and
communications tool. The components which make up Evolution
are tightly integrated with one another and act as a seamless
personal information-management tool.
--------------------------------------------------------------------------------
Update Information:
Update to the 3.0.14 release, which fixes: * icalvalue: Reset non-UTC
icaltimetype::zone on set * Fix icalcomponent_set_due not removing TZID when
necessary Include also patched Evolution, where the libical change uncovered a
bug in the code.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Milan Crha <mcrha(a)redhat.com> - 3.40.4-3
- Add patch 'ECompEditor: Timezone can be reset on component save'
- Related: #2051054 (Update to libical 3.0.14)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051054 - libical-3.0.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2051054
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-94bfde125e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
[SECURITY] Fedora 35 Update: flac-1.3.4-1.fc35
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-db30f1bd42
2022-02-25 16:50:19.402622
--------------------------------------------------------------------------------
Name : flac
Product : Fedora 35
Version : 1.3.4
Release : 1.fc35
URL : https://www.xiph.org/flac/
Summary : An encoder/decoder for the Free Lossless Audio Codec
Description :
FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC
is similar to Ogg Vorbis, but lossless. The FLAC project consists of
the stream format, reference encoders and decoders in library form,
flac, a command-line program to encode and decode FLAC files, metaflac,
a command-line metadata editor for FLAC files and input plugins for
various music players.
This package contains the command-line tools and documentation.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-0561
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 24 2022 Miroslav Lichvar <mlichvar(a)redhat.com> 1.3.4-1
- update to 1.3.4 (CVE-2021-0561)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2057776 - CVE-2021-0561 flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c
https://bugzilla.redhat.com/show_bug.cgi?id=2057776
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-db30f1bd42' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
[SECURITY] Fedora 35 Update: gnutls-3.7.2-3.fc35
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-62ac7b3744
2022-02-25 16:50:19.402631
--------------------------------------------------------------------------------
Name : gnutls
Product : Fedora 35
Version : 3.7.2
Release : 3.fc35
URL : http://www.gnutls.org/
Summary : A TLS protocol implementation
Description :
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS
protocols and technologies around them. It provides a simple C language
application programming interface (API) to access the secure communications
protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and
other required structures.
--------------------------------------------------------------------------------
Update Information:
Security fix for https://www.gnutls.org/security-new.html#GNUTLS-SA-2022-01-17
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 24 2022 Zoltan Fridrich <zfridric(a)redhat.com> - 3.7.2-3
- Fix race condition in gnutls_x509_trust_list_verify_crt2 (#2050164)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2044988 - gnutls: Race condition in gnutls_x509_trust_list_verify_crt2
https://bugzilla.redhat.com/show_bug.cgi?id=2044988
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-62ac7b3744' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
Fedora 35 Update: icewm-2.9.6-1.fc35
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-794b8b6f8b
2022-02-25 16:50:19.402611
--------------------------------------------------------------------------------
Name : icewm
Product : Fedora 35
Version : 2.9.6
Release : 1.fc35
URL : https://ice-wm.org/
Summary : Window manager designed for speed, usability, and consistency
Description :
IceWM is a window manager for the X Window System (freedesktop, XFree86). The
goal of IceWM is speed, simplicity, and not getting in the user's way.
You can install minimal version of IceWM without all optional dependencies:
sudo dnf install icewm-minimal-session --setopt=install_weak_deps=False
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 24 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.9.6-1
- chore(update): 2.9.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2057948 - icewm-2.9.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2057948
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-794b8b6f8b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
[SECURITY] Fedora 35 Update: vim-8.2.4460-1.fc35
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-63ca9a1129
2022-02-25 16:50:19.402601
--------------------------------------------------------------------------------
Name : vim
Product : Fedora 35
Version : 8.2.4460
Release : 1.fc35
URL : http://www.vim.org/
Summary : The VIM editor
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit --- Security fixes for CVE-2022-0714, CVE-2022-0729
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 24 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.4460-1
- patchlevel 4460
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2057187 - CVE-2022-0714 vim: buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=2057187
[ 2 ] Bug #2057716 - CVE-2022-0729 vim: Use of Out-of-range Pointer Offset
https://bugzilla.redhat.com/show_bug.cgi?id=2057716
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-63ca9a1129' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
[SECURITY] Fedora 35 Update: kernel-5.16.11-200.fc35
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-952bb7b856
2022-02-25 16:50:19.402591
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 35
Version : 5.16.11
Release : 200.fc35
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 5.16.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 23 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.16.11-0]
- spec: don't overwrite auto.conf with .config (Ondrej Mosnacek)
- New configs for 5.16.10 (Justin M. Forbes)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2043520 - CVE-2022-23222 kernel: local privileges escalation in kernel/bpf/verifier.c
https://bugzilla.redhat.com/show_bug.cgi?id=2043520
[ 2 ] Bug #2044578 - CVE-2022-0500 kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges
https://bugzilla.redhat.com/show_bug.cgi?id=2044578
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-952bb7b856' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months
Fedora 35 Update: nmap-7.92-1.fc35
by updatesï¼ fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-db05340ff9
2022-02-25 16:50:19.402581
--------------------------------------------------------------------------------
Name : nmap
Product : Fedora 35
Version : 7.92
Release : 1.fc35
URL : http://nmap.org/
Summary : Network exploration tool and security scanner
Description :
Nmap is a utility for network exploration or security auditing. It supports
ping scanning (determine which hosts are up), many port scanning techniques
(determine what services the hosts are offering), and TCP/IP fingerprinting
(remote host operating system identification). Nmap also offers flexible target
and port specification, decoy scanning, determination of TCP sequence
predictability characteristics, reverse-identd scanning, and more. In addition
to the classic command-line nmap executable, the Nmap suite includes a flexible
data transfer, redirection, and debugging tool (netcat utility ncat), a utility
for comparing scan results (ndiff), and a packet generation and response
analysis tool (nping).
--------------------------------------------------------------------------------
Update Information:
New version 7.92
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 22 2022 Martin Osvald <mosvald(a)redhat.com> - 3:7.92-1
- New version 7.92
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3:7.91-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 3:7.91-9
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1991184 - nmap-7.92 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1991184
[ 2 ] Bug #2020453 - Ncat won't work with --proxy
https://bugzilla.redhat.com/show_bug.cgi?id=2020453
[ 3 ] Bug #2022355 - nmap has out of date component
https://bugzilla.redhat.com/show_bug.cgi?id=2022355
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-db05340ff9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2Â years, 4Â months