Fedora 37 Update: virtualbox-guest-additions-7.0.8-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-f8869f8872
2023-05-01 01:28:35.280271
--------------------------------------------------------------------------------
Name : virtualbox-guest-additions
Product : Fedora 37
Version : 7.0.8
Release : 1.fc37
URL : https://www.virtualbox.org/wiki/VirtualBox
Summary : VirtualBox Guest Additions
Description :
This package replaces the application of Virtualbox's own methodology to
install Guest Additions (in menu: Devices | Insert Guest Additions CD-image file).
VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for
enterprise as well as home use. This package contains the VirtualBox
Guest Additions which support better integration of VirtualBox guests
with the Host, including file sharing, clipboard sharing and Seamless mode.
Aditional note: this package can be installed on an non-guest system, because it is
harmless and services would not run anyway.
--------------------------------------------------------------------------------
Update Information:
Update virtualbox-guest-additions to 7.0.8 (#2187763)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 19 2023 S��rgio Basto <sergio(a)serjux.com> - 7.0.8-1
- Update virtualbox-guest-additions to 7.0.8 (#2187763)
- Replaces with sed -i "s/VBOX_ZLIB_STATIC/VBoxZlibStatic/; s/VBOX_ZLIB-x86/VBoxZlib-x86/; s/VBOX_ZLIB/VBoxZlib/; s/VBOX_LIBXML2/VBoxLibXml2/; s/VBOX_VPX/VBoxLibVpx/;s/VBOX_LZF/VBoxLzf/;s/VBOX_LIBPNG/VBoxLibPng/; s/VBOX_LIBCURL/VBoxLibCurl/;s/VBOX_DXVK/VBoxDxVk/;s/VBOX_OGG/VBoxLibOgg/;s/VBOX_VORBIS/VBoxLibVorbis/; s/VBOX_TPMS/VBoxLibTpms/" virtualbox-guest-additions.spec
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187763 - virtualbox-guest-additions-7.0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2187763
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-f8869f8872' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: kernel-6.2.13-200.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-70986ed850
2023-05-01 01:28:35.280264
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 37
Version : 6.2.13
Release : 200.fc37
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 6.2.13 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 26 2023 Augusto Caringi <acaringi(a)redhat.com> [6.2.13-0]
- Linux v6.2.13
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-70986ed850' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
[SECURITY] Fedora 37 Update: git-2.40.1-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-d84a75ea52
2023-05-01 01:28:35.280257
--------------------------------------------------------------------------------
Name : git
Product : Fedora 37
Version : 2.40.1
Release : 1.fc37
URL : https://git-scm.com/
Summary : Fast Version Control System
Description :
Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals.
The git rpm installs common set of tools which are usually using with
small amount of dependencies. To install all git packages, including
tools for integrating with other SCMs, install the git-all meta-package.
--------------------------------------------------------------------------------
Update Information:
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the
release notes for 2.30.9 for details of each CVE as well as the following
security advisories from the git project:
https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx
(CVE-2023-25652)
https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844
(CVE-2023-29007) (At this time there is no upstream advisory for
CVE-2023-25815. This issue does not affect the Fedora packages as we do not use
the runtime prefix support.) Release notes:
https://github.com/git/git/raw/v2.30.9/Documentation/RelNotes/2.30.9.txt
https://github.com/git/git/raw/v2.40.1/Documentation/RelNotes/2.40.1.txt
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 25 2023 Todd Zullinger <tmz(a)pobox.com> - 2.40.1-1
- update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2188333 - CVE-2023-25652 git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents
https://bugzilla.redhat.com/show_bug.cgi?id=2188333
[ 2 ] Bug #2188338 - CVE-2023-29007 git: arbitrary configuration injection when renaming or deleting a section from a configuration file
https://bugzilla.redhat.com/show_bug.cgi?id=2188338
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-d84a75ea52' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: vim-9.0.1486-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-b3128e8836
2023-05-01 01:28:35.280249
--------------------------------------------------------------------------------
Name : vim
Product : Fedora 37
Version : 9.0.1486
Release : 1.fc37
URL : http://www.vim.org/
Summary : The VIM editor
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.
--------------------------------------------------------------------------------
Update Information:
patchlevel 1486
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 25 2023 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:9.0.1486-1
- patchlevel 1486
* Fri Apr 21 2023 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:9.0.1472-1
- patchlevel 1472
* Tue Apr 11 2023 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:9.0.1443-1
- patchlevel 1443
* Tue Apr 11 2023 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:9.0.1440-2
- incorporate License tag changes based on legal team response
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-b3128e8836' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: rpm-4.18.1-2.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-8fdfe77c1d
2023-05-01 01:28:35.280242
--------------------------------------------------------------------------------
Name : rpm
Product : Fedora 37
Version : 4.18.1
Release : 2.fc37
URL : http://www.rpm.org/
Summary : The RPM package management system
Description :
The RPM Package Manager (RPM) is a powerful command line driven
package management system capable of installing, uninstalling,
verifying, querying, and updating software packages. Each software
package consists of an archive of files along with information about
the package like its version, a description, etc.
--------------------------------------------------------------------------------
Update Information:
Rebase to rpm 4.18.1 (https://rpm.org/wiki/Releases/4.18.1). Revert %_smp_mflags
patch to avoid breaking packages single-quoting it.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 24 2023 Michal Domonkos <mdomonko(a)redhat.com> - 4.18.1-2
- Revert %_smp_mflags patch to avoid breaking packages single-quoting it
* Mon Apr 24 2023 Michal Domonkos <mdomonko(a)redhat.com> - 4.18.1-1
- Rebase to rpm 4.18.1 (https://rpm.org/wiki/Releases/4.18.1)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-8fdfe77c1d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: libass-0.17.1-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-1d340960b6
2023-05-01 01:28:35.280235
--------------------------------------------------------------------------------
Name : libass
Product : Fedora 37
Version : 0.17.1
Release : 1.fc37
URL : https://github.com/libass
Summary : Portable library for SSA/ASS subtitles rendering
Description :
Libass is a portable library for SSA/ASS subtitles rendering.
--------------------------------------------------------------------------------
Update Information:
* Fix buffer overread if soft-wrapping occurred and
ASS_FEATURE_WHOLE_TEXT_LAYOUT was enabled via API or due to Encoding -1 (bug
introduced in 0.16.0)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 24 2023 Nicolas Chauvet <kwizart(a)gmail.com> - 0.17.1-1
- Update to 0.17.1
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-1d340960b6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: rust-bumpalo-3.12.1-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-0b48d3f81d
2023-05-01 01:28:35.280228
--------------------------------------------------------------------------------
Name : rust-bumpalo
Product : Fedora 37
Version : 3.12.1
Release : 1.fc37
URL : https://crates.io/crates/bumpalo
Summary : Fast bump allocation arena for Rust
Description :
A fast bump allocation arena for Rust.
--------------------------------------------------------------------------------
Update Information:
Update to version 3.12.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 22 2023 Fabio Valentini <decathorpe(a)gmail.com> - 3.12.1-1
- Update to version 3.12.1; Fixes RHBZ#2188726
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-0b48d3f81d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: rust-os_pipe-1.1.4-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-62e5dfb0b2
2023-05-01 01:28:35.280221
--------------------------------------------------------------------------------
Name : rust-os_pipe
Product : Fedora 37
Version : 1.1.4
Release : 1.fc37
URL : https://crates.io/crates/os_pipe
Summary : Cross-platform library for opening OS pipes
Description :
A cross-platform library for opening OS pipes.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 22 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.4-1
- Update to version 1.1.4; Fixes RHBZ#2188747
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-62e5dfb0b2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: rust-deser-hjson-1.1.1-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-5177abac16
2023-05-01 01:28:35.280214
--------------------------------------------------------------------------------
Name : rust-deser-hjson
Product : Fedora 37
Version : 1.1.1
Release : 1.fc37
URL : https://crates.io/crates/deser-hjson
Summary : Hjson deserializer for Serde
Description :
A Hjson deserializer for Serde.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 22 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.1-1
- Update to version 1.1.1; Fixes RHBZ#2188781
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-5177abac16' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year
Fedora 37 Update: libtirpc-1.3.3-1.rc1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-83279212cc
2023-05-01 01:28:35.280206
--------------------------------------------------------------------------------
Name : libtirpc
Product : Fedora 37
Version : 1.3.3
Release : 1.rc1.fc37
URL : http://git.linux-nfs.org/?p=steved/libtirpc.git;a=summary
Summary : Transport Independent RPC Library
Description :
This package contains SunLib's implementation of transport-independent
RPC (TI-RPC) documentation. This library forms a piece of the base of
Open Network Computing (ONC), and is derived directly from the
Solaris 2.3 source.
TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V
Transport Layer Interface (TLI) or an equivalent X/Open Transport Interface
(XTI). TI-RPC is on-the-wire compatible with the TS-RPC, which is supported
by almost 70 vendors on all major operating systems. TS-RPC source code
(RPCSRC 4.0) remains available from several internet sites.
--------------------------------------------------------------------------------
Update Information:
Updated to the latest upstream RC release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 21 2023 Steve Dickson <steved(a)redhat.com> - 1.3.3-1.rc1
- Updated to the latest upstream RC release: libtirpc-1-3-4-rc1 (bz 1725329)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1725329 - Regression in RPC Behavior with TCP-only portmapper
https://bugzilla.redhat.com/show_bug.cgi?id=1725329
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-83279212cc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year