Fedora 35 Update: choqok-1.7.0-7.20220622gitde3801b.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-dded85c885
2022-07-01 01:16:02.429461
--------------------------------------------------------------------------------
Name : choqok
Product : Fedora 35
Version : 1.7.0
Release : 7.20220622gitde3801b.fc35
URL : https://github.com/KDE/choqok
Summary : KDE Micro-Blogging Client
Description :
A Free/Open Source micro-blogging client for K Desktop Environment.
The name comes from an ancient Persian word, which means Sparrow!
Choqok currently supports:
Twitter, Friendica, Mastodon social, Pump.io network, GNU social
and Open Collaboration Services.
--------------------------------------------------------------------------------
Update Information:
Crash upon exit rhbz#1861171 ---- Crash upon exit rhbz#1861171
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2022 Gerald Cox <gbcox(a)fedoraproject.org> - 1.7.0-7
- Crash upon exit rhbz#1861171
* Sun Jun 19 2022 Gerald Cox <gbcox(a)fedoraproject.org> - 1.7.0-6
- Crash upon exit rhbz#1861171
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1861171 - Choqok crash upon exit
https://bugzilla.redhat.com/show_bug.cgi?id=1861171
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-dded85c885' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 35 Update: livecd-tools-31.0-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-779270660d
2022-07-01 01:16:02.429449
--------------------------------------------------------------------------------
Name : livecd-tools
Product : Fedora 35
Version : 31.0
Release : 1.fc35
URL : https://github.com/livecd-tools/livecd-tools
Summary : Tools for building live CDs
Description :
Tools for generating live CDs on Fedora based systems including
derived distributions such as RHEL, CentOS and others. See
http://fedoraproject.org/wiki/FedoraLiveCD for more details.
--------------------------------------------------------------------------------
Update Information:
This update reworks how SELinux policies are set for images such that it no
longer implicitly uses the host policy for setting labels. This makes cross
distro image builds where SELinux policies differ much easier to do.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 15 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 1:31.0-1
- Release 31.0 (neal)
- imgcreate/creator.py: fix SELinux unmount order (3526918+cbs228)
- livecd-iso-to-disk: Remove useless test to fix issue #237 (fgrose)
- imgcreate/kickstart.py: correct setfiles relabeling (3526918+cbs228)
- fs.py: Avoid bind mounting an existing file target. (fgrose)
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1:30.0-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-779270660d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 35 Update: pungi-4.3.5-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-01aff217a3
2022-07-01 01:16:02.429434
--------------------------------------------------------------------------------
Name : pungi
Product : Fedora 35
Version : 4.3.5
Release : 1.fc35
URL : https://pagure.io/pungi
Summary : Distribution compose tool
Description :
A tool to create anaconda based installation trees/isos of a set of rpms.
--------------------------------------------------------------------------------
Update Information:
New upstream release. * Handling of module defaults and obsoletes was fixed. *
CTS keytab can now be specified with a hostname wildcard. * Branding in OSTree
installer can be skipped. * Warnings printed by koji client are now ignored when
trying to find task ID in the output. * Optimization for not cloning the same
repository multiple times was reverted, as there were rare cases where it did
not work correctly.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 15 2022 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.3.5-1
- Fix module defaults and obsoletes validation (mkulik)
- Update the cts_keytab field in order to get the hostname of the server
(ounsal)
- Add skip_branding to ostree_installer. (lzhuang)
- kojiwrapper: Ignore warnings before task id (lsedlar)
- Restrict jsonschema version (lsedlar)
- Revert "Do not clone the same repository multiple times, re-use already
cloned repository" (hlin)
- Involve bandit (hlin)
* Wed Jun 8 2022 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.3.4-2
- Backport patch for building DVDs with xorriso command
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-01aff217a3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 35 Update: rygel-0.40.4-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-f576993f5c
2022-07-01 01:16:02.429358
--------------------------------------------------------------------------------
Name : rygel
Product : Fedora 35
Version : 0.40.4
Release : 1.fc35
URL : https://wiki.gnome.org/Projects/Rygel
Summary : A collection of UPnP/DLNA services
Description :
Rygel is a home media solution that allows you to easily share audio, video and
pictures, and control of media player on your home network. In technical terms
it is both a UPnP AV MediaServer and MediaRenderer implemented through a plug-in
mechanism. Interoperability with other devices in the market is achieved by
conformance to very strict requirements of DLNA and on the fly conversion of
media to format that client devices are capable of handling.
--------------------------------------------------------------------------------
Update Information:
Update to 0.40.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 15 2022 David King <amigadave(a)amigadave.com> - 0.40.4-1
- Update to 0.40.4
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-f576993f5c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 36 Update: testcloud-0.8.1-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-e1eeb823a9
2022-07-01 01:05:36.532546
--------------------------------------------------------------------------------
Name : testcloud
Product : Fedora 36
Version : 0.8.1
Release : 1.fc36
URL : https://pagure.io/testcloud
Summary : Tool for running cloud images locally
Description :
testcloud is a relatively simple system which is capable of booting images
designed for cloud systems on a local system with minimal configuration.
testcloud is designed to be (and remain) somewhat simple, trading fancy cloud
system features for ease of use and sanity in development.
--------------------------------------------------------------------------------
Update Information:
- CoreOS: Go on with COREOS_DATA replace failure
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2022 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.8.1-1
- CoreOS: Go on with COREOS_DATA replace failure
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-e1eeb823a9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
[SECURITY] Fedora 36 Update: curl-7.82.0-6.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-8bd3bf5b40
2022-07-01 01:05:36.532533
--------------------------------------------------------------------------------
Name : curl
Product : Fedora 36
Version : 7.82.0
Release : 6.fc36
URL : https://curl.se/
Summary : A utility for getting files from remote servers (FTP, HTTP, and others)
Description :
curl is a command line tool for transferring data with URL syntax, supporting
FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,
SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP
uploading, HTTP form based upload, proxies, cookies, user+password
authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer
resume, proxy tunneling and a busload of other useful tricks.
--------------------------------------------------------------------------------
Update Information:
- fix unpreserved file permissions (CVE-2022-32207) - fix Set-Cookie denial of
service (CVE-2022-32205) - fix HTTP compression denial of service
(CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2022 Kamil Dudka <kdudka(a)redhat.com> - 7.82.0-6
- fix unpreserved file permissions (CVE-2022-32207)
- fix Set-Cookie denial of service (CVE-2022-32205)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2101646 - CVE-2022-32205 curl: Set-Cookie denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2101646
[ 2 ] Bug #2101648 - CVE-2022-32206 curl: HTTP compression denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2101648
[ 3 ] Bug #2101652 - CVE-2022-32207 curl: Unpreserved file permissions [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2101652
[ 4 ] Bug #2101654 - CVE-2022-32208 curl: FTP-KRB bad message verification [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2101654
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-8bd3bf5b40' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 36 Update: nfs-utils-2.6.1-2.rc8.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-38325154c4
2022-07-01 01:05:36.532523
--------------------------------------------------------------------------------
Name : nfs-utils
Product : Fedora 36
Version : 2.6.1
Release : 2.rc8.fc36
URL : http://linux-nfs.org/
Summary : NFS utilities and supporting clients and daemons for the kernel NFS server
Description :
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
This package also contains the showmount program. Showmount queries the
mount daemon on a remote host for information about the NFS (Network File
System) server on the remote host. For example, showmount can display the
clients which are mounted on that host.
This package also contains the mount.nfs and umount.nfs program.
--------------------------------------------------------------------------------
Update Information:
Updated to the latest RC release: nfs-utils-2-6-2-rc8
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 28 2022 Steve Dickson <steved(a)redhat.com> 2.6.1-2.rc8
- Updated to the latest RC release: nfs-utils-2-6-2-rc8 (bz 2101479)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2022136 - nfs-utils-2.6.2.rc4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2022136
[ 2 ] Bug #2099256 - kdump dump to nfs fails
https://bugzilla.redhat.com/show_bug.cgi?id=2099256
[ 3 ] Bug #2100668 - "Apply all sysctl settings when NFS-related modules are loaded" causes error messages in early boot of images, prevents nfs module loading (so breaks e.g. 'inst.updates=nfs', 'inst.stage2=nfs'...)
https://bugzilla.redhat.com/show_bug.cgi?id=2100668
[ 4 ] Bug #2101479 - nfs-utils-2.6.2.rc8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101479
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-38325154c4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 36 Update: perl-Socket-2.034-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-738f473648
2022-07-01 01:05:36.532513
--------------------------------------------------------------------------------
Name : perl-Socket
Product : Fedora 36
Version : 2.034
Release : 1.fc36
URL : https://metacpan.org/release/Socket
Summary : Networking constants and support functions
Description :
This Perl module provides a variety of constants, structure manipulators and
other functions related to socket-based networking. The values and functions
provided are useful when used in conjunction with Perl core functions such as
socket(), setsockopt() and bind(). It also provides several other support
functions, mostly for dealing with conversions of network addresses between
human-readable and native binary forms, and for hostname resolver operations.
--------------------------------------------------------------------------------
Update Information:
2.034 [BUGFIX] Workaround for inet_ntop/inet_pton being defined by recent
releases of mingw-w64
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 28 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 4:2.034-1
- 2.034 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2101385 - perl-Socket-2.034 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101385
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-738f473648' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
Fedora 36 Update: openldap-2.6.2-2.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-c55726ac00
2022-07-01 01:05:36.532504
--------------------------------------------------------------------------------
Name : openldap
Product : Fedora 36
Version : 2.6.2
Release : 2.fc36
URL : http://www.openldap.org/
Summary : LDAP support libraries
Description :
OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
Protocol) applications and development tools. LDAP is a set of
protocols for accessing directory services (usually phone book style
information, but other information is possible) over the Internet,
similar to the way DNS (Domain Name System) information is propagated
over the Internet. The openldap package contains configuration files,
libraries, and documentation for OpenLDAP.
--------------------------------------------------------------------------------
Update Information:
Automatic update for openldap-2.6.2-2.fc36. **Changelog** ``` * Mon Jun 27 2022
Simon Pichugin <spichugi(a)redhat.com> - 2.6.2-2 - Fix debuginfo missing issue
(#2101614) ```
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 27 2022 Simon Pichugin <spichugi(a)redhat.com> - 2.6.2-2
- Fix debuginfo missing issue (#2101614)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2101614 - openldap-clients debuginfo packages are missing after 2.6 rebase
https://bugzilla.redhat.com/show_bug.cgi?id=2101614
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-c55726ac00' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months
[SECURITY] Fedora 36 Update: httpd-2.4.54-3.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-e620fb15d5
2022-07-01 01:05:36.532495
--------------------------------------------------------------------------------
Name : httpd
Product : Fedora 36
Version : 2.4.54
Release : 3.fc36
URL : https://httpd.apache.org/
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, efficient, and extensible
web server.
--------------------------------------------------------------------------------
Update Information:
- new version 2.4.54 - various security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Joe Orton <jorton(a)redhat.com> - 2.4.54-3
- update PCRE config selection
* Thu Jun 9 2022 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.4.54-2
- new version 2.4.54
* Mon May 16 2022 Joe Orton <jorton(a)redhat.com> - 2.4.53-7
- disable package notes
* Fri May 13 2022 Joe Orton <jorton(a)redhat.com> - 2.4.53-6
- use %set_build_flags macro
* Thu Apr 21 2022 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.4.53-5
- don't use bomb.gif icon for all files/dirs ending with core
* Wed Apr 20 2022 Joe Orton <jorton(a)redhat.com> - 2.4.53-4
- switch to PCRE2 for new releases
* Thu Apr 7 2022 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.4.53-3
- Related: #2070517 - fix issue when mod_systemd is not loaded
* Wed Mar 30 2022 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.4.53-2
- Resolves: #2070517 - Allow install httpd with smaller footprint
- try to minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now in the main httpd package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094998 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2094998
[ 2 ] Bug #2095003 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2095003
[ 3 ] Bug #2095007 - CVE-2022-28615 httpd: out-of-bounds read in ap_strcmp_match() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2095007
[ 4 ] Bug #2095013 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2095013
[ 5 ] Bug #2095016 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2095016
[ 6 ] Bug #2095019 - CVE-2022-30556 httpd: mod_lua: Information disclosure with websockets [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2095019
[ 7 ] Bug #2095021 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2095021
[ 8 ] Bug #2099897 - Can it be updated 2.4.54 to fix CISE HIGH vulnerability reports?
https://bugzilla.redhat.com/show_bug.cgi?id=2099897
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-e620fb15d5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 11 months