[SECURITY] Fedora 36 Update: thunderbird-102.10.0-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-6c3278c87b
2023-04-30 01:23:32.978960
--------------------------------------------------------------------------------
Name : thunderbird
Product : Fedora 36
Version : 102.10.0
Release : 1.fc36
URL : http://www.mozilla.org/projects/thunderbird/
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.
--------------------------------------------------------------------------------
Update Information:
Update to 102.10.0 ; https://www.mozilla.org/en-
US/security/advisories/mfsa2023-15/ ; https://www.thunderbird.net/en-
US/thunderbird/102.10.0/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 11 2023 Eike Rathke <erack(a)redhat.com> - 102.10.0-1
- Update to 102.10.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-6c3278c87b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 36 Update: rust-1.69.0-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-3c4db5aa72
2023-04-29 05:12:00.195058
--------------------------------------------------------------------------------
Name : rust
Product : Fedora 36
Version : 1.69.0
Release : 1.fc36
URL : https://www.rust-lang.org
Summary : The Rust Programming Language
Description :
Rust is a systems programming language that runs blazingly fast, prevents
segfaults, and guarantees thread safety.
This package includes the Rust compiler and documentation generator.
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.69.0: * Cargo now suggests to automatically fix some warnings
* Debug information is not included in build scripts by default anymore *
Stabilized APIs See the [blog post](https://blog.rust-
lang.org/2023/04/20/Rust-1.69.0.html) and [release
notes](https://github.com/rust-
lang/rust/blob/stable/RELEASES.md#version-1690-2023-04-20) for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Josh Stone <jistone(a)redhat.com> - 1.69.0-1
- Update to 1.69.0.
- Obsolete rust-analysis.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2188445 - rust-1.69.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2188445
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-3c4db5aa72' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 36 Update: rust-matchers-0.1.0-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-82bc4b07a9
2023-04-29 05:12:00.195051
--------------------------------------------------------------------------------
Name : rust-matchers
Product : Fedora 36
Version : 0.1.0
Release : 1.fc36
URL : https://crates.io/crates/matchers
Summary : Regex matching on character and byte streams
Description :
Regex matching on character and byte streams.
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the matchers crate.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.0-1
- Initial import (#2187798)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-82bc4b07a9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 36 Update: nginx-mod-vts-0.2.1-4.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-b2f869f8ed
2023-04-29 05:12:00.195044
--------------------------------------------------------------------------------
Name : nginx-mod-vts
Product : Fedora 36
Version : 0.2.1
Release : 4.fc36
URL : https://github.com/vozlt/nginx-module-vts
Summary : Nginx virtual host traffic status module
Description :
Nginx virtual host traffic status module.
--------------------------------------------------------------------------------
Update Information:
Rebuild for nginx-1.24
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 17 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 0.2.1-4
- Rebuild for nginx 1.24.0
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2188405 - F36FailsToInstall: nginx-mod-vts
https://bugzilla.redhat.com/show_bug.cgi?id=2188405
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-b2f869f8ed' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
[SECURITY] Fedora 36 Update: rust-comrak-0.18.0-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-b37722768e
2023-04-29 05:12:00.195037
--------------------------------------------------------------------------------
Name : rust-comrak
Product : Fedora 36
Version : 0.18.0
Release : 1.fc36
URL : https://crates.io/crates/comrak
Summary : 100% CommonMark-compatible GitHub Flavored Markdown parser and formatter
Description :
A 100% CommonMark-compatible GitHub Flavored Markdown parser and
formatter.
--------------------------------------------------------------------------------
Update Information:
- Update comrak to version 0.18.0. - Disable the unused markdown support in
askama and askama_shared crates, which depends on an ancient version of comrak.
This update also includes fixes for two medium-severity security issues in
comrak (CVE-2023-28631 and CVE-2023-28626).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.18.0-1
- Update to version 0.18.0; Fixes RHBZ#2094154
* Sat Feb 4 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.12.1-7
- Rebuild for fixed frame pointer compiler flags in Rust RPM macros
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094154 - rust-comrak-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2094154
[ 2 ] Bug #2184923 - CVE-2023-28631 rust-comrak: attacker controlled data in AST nodes is not validated [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184923
[ 3 ] Bug #2184926 - CVE-2023-28626 rust-comrak: quadratic runtime when parsing Markdown [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184926
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-b37722768e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
[SECURITY] Fedora 36 Update: rust-askama_shared-0.12.2-4.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-b37722768e
2023-04-29 05:12:00.195037
--------------------------------------------------------------------------------
Name : rust-askama_shared
Product : Fedora 36
Version : 0.12.2
Release : 4.fc36
URL : https://crates.io/crates/askama_shared
Summary : Shared code for Askama
Description :
Shared code for Askama.
--------------------------------------------------------------------------------
Update Information:
- Update comrak to version 0.18.0. - Disable the unused markdown support in
askama and askama_shared crates, which depends on an ancient version of comrak.
This update also includes fixes for two medium-severity security issues in
comrak (CVE-2023-28631 and CVE-2023-28626).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.12.2-4
- Disable unused markdown support with outdated comrak dependency
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094154 - rust-comrak-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2094154
[ 2 ] Bug #2184923 - CVE-2023-28631 rust-comrak: attacker controlled data in AST nodes is not validated [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184923
[ 3 ] Bug #2184926 - CVE-2023-28626 rust-comrak: quadratic runtime when parsing Markdown [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184926
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-b37722768e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
[SECURITY] Fedora 36 Update: rust-askama-0.11.1-4.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-b37722768e
2023-04-29 05:12:00.195037
--------------------------------------------------------------------------------
Name : rust-askama
Product : Fedora 36
Version : 0.11.1
Release : 4.fc36
URL : https://crates.io/crates/askama
Summary : Type-safe, compiled Jinja-like templates for Rust
Description :
Type-safe, compiled Jinja-like templates for Rust.
--------------------------------------------------------------------------------
Update Information:
- Update comrak to version 0.18.0. - Disable the unused markdown support in
askama and askama_shared crates, which depends on an ancient version of comrak.
This update also includes fixes for two medium-severity security issues in
comrak (CVE-2023-28631 and CVE-2023-28626).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.11.1-4
- Disable unused markdown support with outdated comrak dependency
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094154 - rust-comrak-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2094154
[ 2 ] Bug #2184923 - CVE-2023-28631 rust-comrak: attacker controlled data in AST nodes is not validated [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184923
[ 3 ] Bug #2184926 - CVE-2023-28626 rust-comrak: quadratic runtime when parsing Markdown [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184926
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-b37722768e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 36 Update: rust-eyre-0.6.8-5.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-61b55a1ee9
2023-04-29 05:12:00.195030
--------------------------------------------------------------------------------
Name : rust-eyre
Product : Fedora 36
Version : 0.6.8
Release : 5.fc36
URL : https://crates.io/crates/eyre
Summary : Flexible concrete Error Reporting type with customizable Reports
Description :
Flexible concrete Error Reporting type built on std::error::Error with
customizable Reports.
--------------------------------------------------------------------------------
Update Information:
Skip some doctests that fail to compile with thiserror 1.0.40. Fixes FTBFS
issues on all current branches of Fedora.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.8-5
- Skip some doctests that fail to compile with thiserror 1.0.40
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-61b55a1ee9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 36 Update: remmina-1.4.30-2.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-1509d21c1e
2023-04-29 05:12:00.195023
--------------------------------------------------------------------------------
Name : remmina
Product : Fedora 36
Version : 1.4.30
Release : 2.fc36
URL : https://remmina.org
Summary : Remote Desktop Client
Description :
Remmina is a remote desktop client written in GTK+, aiming to be useful for
system administrators and travelers, who need to work with lots of remote
computers in front of either large monitors or tiny net-books.
Remmina supports multiple network protocols in an integrated and consistent
user interface. Currently RDP, VNC and SSH are supported.
Please don't forget to install the plugins for the protocols you want to use.
--------------------------------------------------------------------------------
Update Information:
Add patch: 0010_remmina_fix_vnc_crash_domain_socket_c6adb35b.patch
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Phil Wyett <philip.wyett(a)kathenas.org> - 1.4.30-2
- Add patch: 0001_remmina_fix_vnc_crash_domain_socket.patch
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-1509d21c1e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 36 Update: opensips-3.2.12-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-3c3bc0049b
2023-04-29 05:12:00.195017
--------------------------------------------------------------------------------
Name : opensips
Product : Fedora 36
Version : 3.2.12
Release : 1.fc36
URL : https://opensips.org
Summary : Open Source SIP Server
Description :
OpenSIPS or Open SIP Server is a very fast and flexible SIP (RFC3261)
proxy server. Written entirely in C, opensips can handle thousands calls
per second even on low-budget hardware. A C Shell like scripting language
provides full control over the server's behaviour. It's modular
architecture allows only required functionality to be loaded.
Currently the following modules are available: digest authentication,
CPL scripts, instant messaging, MySQL and UNIXODBC support, a presence agent,
radius authentication, record routing, an SMS gateway, a jabber gateway, a
transaction and dialog module, OSP module, statistics support,
registrar and user location.
--------------------------------------------------------------------------------
Update Information:
OpenSIPS ver. 3.2.12
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 20 2023 Peter Lemenkov <lemenkov(a)gmail.com> - 3.2.12-1
- Ver. 3.2.12
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-3c3bc0049b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year