The following Fedora 34 Security updates need testing: Age URL 33 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bd024d2a7 podman-3.4.4-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7129fbaeed python-lxml-4.6.5-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e37e1e6c7a wordpress-5.8.3-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-00a529a8bf mingw-uriparser-0.9.6-1.fc34 uriparser-0.9.6-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dc62389784 btrbk-0.31.3-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5aeda24c24 thefuck-3.32-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d918ad60e5 kernel-5.15.14-100.fc34
The following Fedora 34 Critical Path updates have yet to be approved: Age URL 280 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34 ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34 sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34 40 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be annobin-9.79-3.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ca43a58b6 hwdata-0.355-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7129fbaeed python-lxml-4.6.5-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8f1068a7a8 rdma-core-37.2-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ca03da1d7 ndctl-72.1-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-875349d9f5 git-2.34.1-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4b47a838eb gnome-desktop3-40.7-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-90bf83c4f0 mtools-4.0.37-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d918ad60e5 kernel-5.15.14-100.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-96c490ce12 zstd-1.5.1-6.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d9522bc88 gnome-shell-40.8-1.fc34 mutter-40.8-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-62c39ffea7 pango-1.48.11-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
argparse-manpage-2.1-1.fc34 augeas-1.13.0-1.fc34 binaryen-104-1.fc34 cfn-lint-0.56.4-1.fc34 gh-2.4.0-3.fc34 ghc-rpm-macros-2.3.11-1.fc34 golang-github-chromedp-cdproto-0-0.8.20220112git12edfde.fc34 libmetalink-0.1.3-24.fc34 libreswan-4.6-1.fc34 lollypop-1.4.27-1.fc34 lprint-1.1.0-1.fc34 mirrorlist-server-3.0.6-1.fc34 moby-engine-20.10.12-1.fc34 nodejs-14.18.3-1.fc34 nv-codec-headers-11.1.5.1-1.fc34 osbuild-composer-42-1.fc34 perl-String-Interpolate-Named-1.02-1.fc34 php-doctrine-lexer-1.2.2-1.fc34 php-pecl-igbinary-3.2.7-1.fc34 pspg-5.5.3-1.fc34 python-bugzilla-3.2.0-1.fc34 python-editorconfig-0.12.3-4.fc34 python-fastavro-1.4.9-1.fc34 python-testinfra-5.3.1-6.fc34 qgnomeplatform-0.8.4-1.fc34 rhino-1.7.14-1.fc34 rust-console-0.15.0-1.fc34 rust-console0.14-0.14.1-1.fc34 rust-hyperfine-1.12.0-1.fc34 rust-indicatif-0.16.2-1.fc34 rust-indicatif0.15-0.15.0-1.fc34 rust-ipnetwork-0.18.0-1.fc34 rust-ipnetwork0.17-0.17.0-1.fc34 rust-roxmltree-0.14.1-1.fc34 rust-svg_metadata-0.4.2-4.fc34 seamonkey-2.53.10.2-1.fc34 solaar-1.1.1-1.fc34 tcpdump-4.99.1-2.fc34 thermald-2.4.8-1.fc34 touchegg-2.0.13-1.fc34 vim-8.2.4068-1.fc34 wireshark-3.6.1-1.fc34 zeitgeist-1.0.4-1.fc34
Details about builds:
================================================================================ argparse-manpage-2.1-1.fc34 (FEDORA-2022-cc36758826) Build manual page from Python ArgumentParser object -------------------------------------------------------------------------------- Update Information:
new upstream release -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Pavel Raiskup praiskup@redhat.com - 2.1-1 - new upstream release: https://github.com/praiskup/argparse-manpage/releases/tag/v2.1 --------------------------------------------------------------------------------
================================================================================ augeas-1.13.0-1.fc34 (FEDORA-2022-6367a527e4) A library for changing configuration files -------------------------------------------------------------------------------- Update Information:
New upstream version 1.13.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Richard W.M. Jones rjones@redhat.com - 1.13.0-1 - New upstream version 1.13.0 * Wed Jul 21 2021 Fedora Release Engineering releng@fedoraproject.org - 1.12.1-0.2.git18558bb - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ binaryen-104-1.fc34 (FEDORA-2022-19dcde908c) Compiler and toolchain infrastructure library for WebAssembly -------------------------------------------------------------------------------- Update Information:
Bugfix release including fix for CVE-2021-45290 and CVE-2021-45293. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 11 2022 Dominik Mierzejewski rpm@greysector.net 104-1 - update to 104 (#2033827) - fixes CVE-2021-45290 (#2037323, #2037325) - fixes CVE-2021-45293 (#2037324, #2037326) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2033827 - binaryen-104 is available https://bugzilla.redhat.com/show_bug.cgi?id=2033827 [ 2 ] Bug #2037325 - CVE-2021-45290 binaryen: assertion abort in wasm::handle_unreachable [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2037325 [ 3 ] Bug #2037326 - CVE-2021-45293 binaryen: Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2037326 --------------------------------------------------------------------------------
================================================================================ cfn-lint-0.56.4-1.fc34 (FEDORA-2022-2a38081b42) CloudFormation Linter -------------------------------------------------------------------------------- Update Information:
Update to 0.56.4 - Update CloudFormation specs to 52.0.0 - Add region `ap- southeast-3` -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net 0.56.4-1 - Update to 0.56.3 (close RHBZ#2039002) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039002 - cfn-lint-0.56.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2039002 --------------------------------------------------------------------------------
================================================================================ gh-2.4.0-3.fc34 (FEDORA-2022-3f1a98c2d2) GitHub���s official command line tool -------------------------------------------------------------------------------- Update Information:
Update to 2.4.0. Closes rhbz#2034689 Release notes: https://github.com/cli/cli/releases/tag/v2.4.0 Correct %goipath; generate manpages; fix dependencies ``` diff -%global goipath github.com/cli/cli +%global goipath github.com/cli/cli/v2 ``` **Please note that, due to the `%goipath` change, the devel package's name has changed from `golang-github- cli-devel` to `golang-github-cli-2-devel`. The new package appropriately obsoletes the old one.** -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Maxwell G gotmax@e.email 2.4.0-3 - Fix %goipath; generate manpages; fix dependencies * Thu Dec 30 2021 Mikel Olasagasti Uranga mikel@olasagasti.info 2.4.0-1 - Update to 2.4.0. Closes rhbz#2034689 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2034689 - gh-2.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2034689 --------------------------------------------------------------------------------
================================================================================ ghc-rpm-macros-2.3.11-1.fc34 (FEDORA-2022-0f7dcd833b) RPM macros for building Haskell packages for GHC -------------------------------------------------------------------------------- Update Information:
support packaging ghcX.Y -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 5 2022 Jens Petersen petersen@redhat.com - 2.3.11-1 - ghc-deps.sh: fix the rts deps erasure cleanly * Wed Dec 29 2021 Jens Petersen petersen@redhat.com - 2.3.10-1 - ghc_html_dir: use ghc_name for ghcX.Y docs * Mon Dec 20 2021 Jens Petersen petersen@redhat.com - 2.3.9-1 - ghc-deps.sh: only exclude unversioned rts.conf * Mon Dec 20 2021 Jens Petersen petersen@redhat.com - 2.3.8-1 - _arch fits Cabal better for ghclibplatform * Mon Dec 20 2021 Jens Petersen petersen@redhat.com - 2.3.7-1 - ghclibplatform: Cabal uses i386 for i686 * Mon Dec 20 2021 Jens Petersen petersen@redhat.com - 2.3.6-1 - fix missing Hadrian ghc dependency generation * Sun Dec 19 2021 Jens Petersen petersen@redhat.com - 2.3.5-1 - Hadrian haddock dirs are not versioned * Sun Dec 19 2021 Jens Petersen petersen@redhat.com - 2.3.4-1 - move Cabal_arch into ghclibplatform macro * Sun Dec 19 2021 Jens Petersen petersen@redhat.com - 2.3.3-1 - fixup ghc_arch renaming it to Cabal_arch * Sat Dec 18 2021 Jens Petersen petersen@redhat.com - 2.3.2-1 - define ghcliblib and ghclibplatform globally - fix ghc-deps.sh dependency generation for Hadrian - Cabal uses ppc64 in paths for ppc64le * Fri Dec 17 2021 Jens Petersen petersen@redhat.com - 2.3.1-1 - ghc_gen_filelists: support ghc Hadrian install * Wed Dec 8 2021 Jens Petersen petersen@redhat.com - 2.3.0-1 - support fileattrs dependency generation for ghc9.2 - drop dependency generation for rhel6 * Thu Sep 9 2021 Jens Petersen petersen@redhat.com - 2.2.4-1 - cabal_configure: add -fhide-source-paths to ghc-options (works for ghc-8.2 and above) * Mon Aug 23 2021 Jens Petersen petersen@redhat.com - 2.2.3-6 - F35 obsoletes for attempt * Mon Aug 23 2021 Jens Petersen petersen@redhat.com - 2.2.3-5 - add F35 obsoletes for base-noprelude and failure * Tue Aug 17 2021 Jens Petersen petersen@redhat.com - 2.2.3-4 - F35 obsoletes for pandoc-citeproc, HsYAML-aeson, chalmers-lava2000, cpio-conduit, and codec-rpm * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 2.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ golang-github-chromedp-cdproto-0-0.8.20220112git12edfde.fc34 (FEDORA-2022-2b3e3de15c) Generated commands, types, and events for the Chrome DevTools Protocol domains -------------------------------------------------------------------------------- Update Information:
Update to latest commit; fix compatibility with latest Chromium -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Elliott Sales de Andrade quantum.analyst@gmail.com - 0-0.8.20220112git12edfde - Bump to commit 12edfdeb56f8221197015a2f3eb5ddf922b096d1 * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 0-0.7.20210114gitdabd2f2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libmetalink-0.1.3-24.fc34 (FEDORA-2022-4edc1860d3) Metalink library written in C -------------------------------------------------------------------------------- Update Information:
Fix some [memory issues](https://bugs.launchpad.net/libmetalink/+bug/1784359) and generally improve packaging. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net 0.1.3-24 - Package AUTHORS, ChangeLog, and NEWS files * Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net 0.1.3-23 - Drop EPEL7 support in the spec file * Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net - 0.1.3-16 - Switch to GitHub release archive; as a result, we must now run autoreconf - Patch additional allocation-related issues - Switch BR���s to pkgconfig(���) - Drop obsolete macros and workarounds - General tidying - Don���t glob over the .so version * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 0.1.3-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libreswan-4.6-1.fc34 (FEDORA-2022-a4bca77f88) Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec -------------------------------------------------------------------------------- Update Information:
Resolves: CVE-2022-23094 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Paul Wouters paul.wouters@aiven.io - 4.6-1 - Resolves: CVE-2022-23094 - Resolves: rhbz#2039604 libreswan-4.6 is available - Add gpg key and signature check for build -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039604 - libreswan-4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2039604 --------------------------------------------------------------------------------
================================================================================ lollypop-1.4.27-1.fc34 (FEDORA-2022-e22a801281) Music player for GNOME -------------------------------------------------------------------------------- Update Information:
Update to 1.4.27-1 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Martin Gansser martinkg@fedoraproject.org - 1.4.27-1 - Update to 1.4.27 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039738 - lollypop-1.4.27 is available https://bugzilla.redhat.com/show_bug.cgi?id=2039738 --------------------------------------------------------------------------------
================================================================================ lprint-1.1.0-1.fc34 (FEDORA-2022-71d231e2f8) A Label Printer Application -------------------------------------------------------------------------------- Update Information:
2035381 - lprint-1.1.0 is available -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 4 2022 Zdenek Dohnal zdohnal@redhat.com - 1.1.0-1 - 2035381 - lprint-1.1.0 is available * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 1.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2035381 - lprint-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2035381 --------------------------------------------------------------------------------
================================================================================ mirrorlist-server-3.0.6-1.fc34 (FEDORA-2022-70a0a61af3) Mirrorlist Server -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com - 3.0.6-1 - Update to version 3.0.6. * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 3.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ moby-engine-20.10.12-1.fc34 (FEDORA-2022-84da5df475) The open-source application container engine -------------------------------------------------------------------------------- Update Information:
Update to 20.10.12. Fixes rhbz#2032534. Install zsh completions to the correct directory. Fixes rhbz#2038888. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 11 2022 Maxwell G gotmax@e.email - 20.10.12-1 - Update to 20.10.12. Fixes rhbz#2032534. - Install zsh completions to the correct directory. Fixes rhbz#2038888. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2032534 - moby-engine-20.10.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=2032534 [ 2 ] Bug #2038888 - moby-engine-zsh-completion installs in the wrong path https://bugzilla.redhat.com/show_bug.cgi?id=2038888 --------------------------------------------------------------------------------
================================================================================ nodejs-14.18.3-1.fc34 (FEDORA-2022-78090d2099) JavaScript runtime -------------------------------------------------------------------------------- Update Information:
## 2022-01-10, Version 14.18.3 'Fermium' (LTS), @richardlau This is a security release. ### Notable changes #### Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531) Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly. Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the `--security-revert` command-line option. More details will be available at [CVE-2021-44531](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44531) after publication. #### Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532) Node.js converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain, allowing the bypass of these name constraints. Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the `--security-revert` command-line option. More details will be available at [CVE-2021-44532](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44532) after publication. #### Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533) Node.js did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in order to inject a Common Name that would allow bypassing the certificate subject verification. Affected versions of Node.js do not accept multi-value Relative Distinguished Names and are thus not vulnerable to such attacks themselves. However, third- party code that uses node's ambiguous presentation of certificate subjects may be vulnerable. More details will be available at [CVE-2021-44533](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44533) after publication. #### Prototype pollution via `console.table` properties (Low)(CVE-2022-21824) Due to the formatting logic of the `console.table()` function it was not safe to allow user controlled input to be passed to the `properties` parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be `__proto__`. The prototype pollution has very limited control, in that it only allows an empty string to be assigned numerical keys of the object prototype. Versions of Node.js with the fix for this use a null protoype for the object these properties are being assigned to. More details will be available at [CVE-2022-21824](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21824) after publication. Thanks to Patrik Oldsberg (rugvip) for reporting this vulnerability. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 11 2022 Stephen Gallagher sgallagh@redhat.com - 1:14.18.3-1 - Security release 14.18.3 - Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531) - Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532) - Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533) - Prototype pollution via `console.table` properties (Low)(CVE-2022-21824) --------------------------------------------------------------------------------
================================================================================ nv-codec-headers-11.1.5.1-1.fc34 (FEDORA-2022-edd506666e) FFmpeg version of Nvidia Codec SDK headers -------------------------------------------------------------------------------- Update Information:
- Update -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Leigh Scott leigh123linux@gmail.com - 11.1.5.1-1 - Update to 11.1.5.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1991249 - nv-codec-headers-11.1.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1991249 --------------------------------------------------------------------------------
================================================================================ osbuild-composer-42-1.fc34 (FEDORA-2022-051963358b) An image building service based on osbuild -------------------------------------------------------------------------------- Update Information:
Update osbuild-composer to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Packit Service user-cont-team+packit-service@redhat.com - 42-1 CHANGES WITH 42: ---------------- * RHEL-86/90: refactoring of `osPipeline` and its variants (#2139) * api/cloud: drop v1 API (#2163) * weldr: return an error if host distro wasn't found in distro registry (#2158) * dnf json cache cleaner (#2119) * Update terraform SHA (#2157) * build(deps): bump actions/setup-go from 2.1.4 to 2.1.5 (#2156)
Contributions from: Achilleas Koutsou, Jakub Rusz, Juan Abia, Ond��ej Budai, Thomas Lavocat, Tomas Hozza, Sanne Raymaekers
��� Grenoble, 2022-01-12 --------------------------------------------------------------------------------
================================================================================ perl-String-Interpolate-Named-1.02-1.fc34 (FEDORA-2022-ebaa765ab1) Interpolated named arguments in string -------------------------------------------------------------------------------- Update Information:
Upgrade to upstream. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 13 2022 Johan Vromans jvromans@squirrel.nl - 1.02-1 - Upgrade to upstream. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039707 - perl-String-Interpolate-Named-1.02 is available https://bugzilla.redhat.com/show_bug.cgi?id=2039707 --------------------------------------------------------------------------------
================================================================================ php-doctrine-lexer-1.2.2-1.fc34 (FEDORA-2022-8b68226431) Base library for a lexer that can be used in top-down, recursive descent parsers -------------------------------------------------------------------------------- Update Information:
**Version 1.2.2** * 59: PHPStan 1.3, Doctrine Coding Standard 9 thanks to @derrabus * 58: Allow the installation on PHP 7.1 thanks to @derrabus -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Remi Collet remi@remirepo.net - 1.2.2-1 - update to 1.2.2 - switch to phpunit9 * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 1.2.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ php-pecl-igbinary-3.2.7-1.fc34 (FEDORA-2022-1f86667362) Replacement for the standard PHP serializer -------------------------------------------------------------------------------- Update Information:
**Version 3.2.7** * Update test expectations for php 8.2.0-dev. Add `#[AllowDynamicProperties]` Attribute to some tests to avoid notices. * In php 8.1+, make igbinary_unserialize check to see if an equivalent interned string already exists when unserializing object property names, array keys, and class names and use that instead of creating a brand new string. * Avoid debug build assertion failure for `HT_ASSERT_RC1` the same way as PHP's unserialize - this is a case where ostensibly there are no other references to the array being unserialized. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Remi Collet remi@remirepo.net - 3.2.7-1 - update to 3.2.7 --------------------------------------------------------------------------------
================================================================================ pspg-5.5.3-1.fc34 (FEDORA-2022-db4c3e6108) A unix pager optimized for psql -------------------------------------------------------------------------------- Update Information:
new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/5.5.3 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Pavel Raiskup praiskup@redhat.com - 5.5.3-1 - new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/5.5.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2032870 - pspg-5.5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2032870 --------------------------------------------------------------------------------
================================================================================ python-bugzilla-3.2.0-1.fc34 (FEDORA-2022-27a61c31fd) Python library for interacting with Bugzilla -------------------------------------------------------------------------------- Update Information:
* Update to version 3.2.0 * Use soon-to-be-required Authorization header for RH bugzilla * Remove cookie auth support -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Cole Robinson crobinso@redhat.com - 3.2.0-1 - Update to version 3.2.0 - Use soon-to-be-required Authorization header for RH bugzilla - Remove cookie auth support --------------------------------------------------------------------------------
================================================================================ python-editorconfig-0.12.3-4.fc34 (FEDORA-2022-1cfa27b32e) EditorConfig File Locator and Interpreter for Python -------------------------------------------------------------------------------- Update Information:
Update to 0.12.3 with assorted bugfixes and improvements. Build PDF documentation and add a `-doc` subpackage. Add more license files, run the tests, and generally improve packaging. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net 0.12.3-4 - Port to pyproject-rpm-macros * Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net 0.12.3-3 - Fix building with doc_pdf disabled * Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net - 0.12.3-1 - Update to 0.12.3 (close RHBZ#1876235) - Modernize spec file (still under ���old guidelines��� for now) - Add a -doc subpackage and build PDF - Add more license files - Run the tests * Tue Jul 27 2021 Fedora Release Engineering releng@fedoraproject.org - 0.12.0-22 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint python-maint@redhat.com - 0.12.0-21 - Rebuilt for Python 3.10 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1876235 - python-editorconfig-0.12.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1876235 --------------------------------------------------------------------------------
================================================================================ python-fastavro-1.4.9-1.fc34 (FEDORA-2022-bdc486fc01) Fast Avro for Python -------------------------------------------------------------------------------- Update Information:
Update to 1.4.9: Allow decompressing zstandard stream block -------------------------------------------------------------------------------- ChangeLog:
* Sun Jan 9 2022 Benjamin A. Beasley code@musicinmybrain.net 1.4.9-1 - Update to 1.4.9 (close RHBZ#2038426) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2038426 - python-fastavro-1.4.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2038426 --------------------------------------------------------------------------------
================================================================================ python-testinfra-5.3.1-6.fc34 (FEDORA-2022-076142825b) Unit testing for config-managed server state -------------------------------------------------------------------------------- Update Information:
Fix ansible dependency https://src.fedoraproject.org/rpms/python- testinfra/pull-request/4 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Chedi Toueiti chedi.toueiti@gmail.com 5.3.1-6 - spec file modernization * Wed Jan 12 2022 Maxwell G gotmax@e.email - 5.3.1-5 - Fix ansible dependency * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 5.3.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint python-maint@redhat.com - 5.3.1-3 - Rebuilt for Python 3.10 --------------------------------------------------------------------------------
================================================================================ qgnomeplatform-0.8.4-1.fc34 (FEDORA-2022-1506aaf093) Qt5 Platform Theme aimed to accommodate Gnome settings -------------------------------------------------------------------------------- Update Information:
QGnomePlatform 0.8.4 bugfix release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Jan Grulich jgrulich@redhat.com - 0.8.4-1 - 0.8.4 --------------------------------------------------------------------------------
================================================================================ rhino-1.7.14-1.fc34 (FEDORA-2022-ef90af7083) Rhino -------------------------------------------------------------------------------- Update Information:
- Update to 1.7.14 (#2024769) - Change package url - Add new test deps: mvn(jakarta.xml.soap:jakarta.xml.soap-api) - Write new description and summary - Remove POM properties (it's not used anymore) - Add Automatic-Module-Name and Bundle-SymbolicName to manifest attributes - Add different license for each subpackage -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.14-1 - Update to 1.7.14 (#2024769) - Change package url - Add new test deps: mvn(jakarta.xml.soap:jakarta.xml.soap-api) - Write new description and summary - Remove POM properties (it's not used anymore) - Add Automatic-Module-Name and Bundle-SymbolicName to manifest attributes - Add different license for each subpackage * Mon Jan 3 2022 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-10 - Ignore tests for now due to unstable builds (VM crashes, tests took much time, etc.) * Wed Dec 1 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-9 - Change BR: maven-local-openjdk11 * Sat Oct 16 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-8 - Don't build in ix86 cpu architecture - Increase test's forkCount to 5x Cores -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2024769 - rhino-1.7.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=2024769 --------------------------------------------------------------------------------
================================================================================ rust-console-0.15.0-1.fc34 (FEDORA-2022-70a0a61af3) Terminal and console abstraction for Rust -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 0.15.0-1 - Update to version 0.15.0; Fixes RHBZ#2014317 * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 0.14.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-console0.14-0.14.1-1.fc34 (FEDORA-2022-70a0a61af3) Terminal and console abstraction for Rust -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 0.14.1-1 - Initial import (console 0.14 compat package) --------------------------------------------------------------------------------
================================================================================ rust-hyperfine-1.12.0-1.fc34 (FEDORA-2022-70a0a61af3) Command-line benchmarking tool -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 1.12.0-1 - Update to version 1.12.0; Fixes RHBZ#2014895 * Tue Jul 27 2021 Fedora Release Engineering releng@fedoraproject.org - 1.11.0-5 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-indicatif-0.16.2-1.fc34 (FEDORA-2022-70a0a61af3) Progress bar and cli reporting library for Rust -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 0.16.2-1 - Update to version 0.16.2; Fixes RHBZ#1955499 * Tue Jul 27 2021 Fedora Release Engineering releng@fedoraproject.org - 0.15.0-5 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-indicatif0.15-0.15.0-1.fc34 (FEDORA-2022-70a0a61af3) Progress bar and cli reporting library for Rust -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 0.15.0-1 - Initial import (indicatif 0.15 compat package) --------------------------------------------------------------------------------
================================================================================ rust-ipnetwork-0.18.0-1.fc34 (FEDORA-2022-70a0a61af3) Library to work with IP CIDRs in Rust -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 0.18.0-1 - Update to version 0.18.0; Fixes RHBZ#1949309 * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 0.17.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-ipnetwork0.17-0.17.0-1.fc34 (FEDORA-2022-70a0a61af3) Library to work with IP CIDRs in Rust -------------------------------------------------------------------------------- Update Information:
- Update mirrorlist-server to version 3.0.6. - Update hyperfine to version 1.12.0. - Update the indicatif crate to version 0.16.2. - Introduce a compat package for indicatif versions 0.15.x. - Update the console crate to version 0.15.0. - Introduce a compat package for console versions 0.14.x. - Update the ipnetwork crate to version 0.18.0. - Introduce a compat package for ipnetwork versions 0.17.x. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com 0.17.0-1 - Initial import (ipnetwork 0.17 compat package) --------------------------------------------------------------------------------
================================================================================ rust-roxmltree-0.14.1-1.fc34 (FEDORA-2022-40e46355ed) Represent an XML as a read-only tree -------------------------------------------------------------------------------- Update Information:
Update roxmltree, and patch svg_metadata to use it ## 0.14.1 - 2021-04-01 - The std feature is enabled by default now. ## 0.14.0 - 2020-12-27 Added - An ability to reject XML with DTD in it. - The library is no_std + alloc now. - ParsingOptions - Document::parse_with_options - Error::DtdDetected -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Michel Alexandre Salim salimma@fedoraproject.org 0.14.1-1 - Update to 0.14.1 * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 0.13.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1911029 - rust-roxmltree-0.14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1911029 --------------------------------------------------------------------------------
================================================================================ rust-svg_metadata-0.4.2-4.fc34 (FEDORA-2022-40e46355ed) Extracts metadata (like the viewBox, width, and height) from SVG graphics -------------------------------------------------------------------------------- Update Information:
Update roxmltree, and patch svg_metadata to use it ## 0.14.1 - 2021-04-01 - The std feature is enabled by default now. ## 0.14.0 - 2020-12-27 Added - An ability to reject XML with DTD in it. - The library is no_std + alloc now. - ParsingOptions - Document::parse_with_options - Error::DtdDetected -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Michel Alexandre Salim salimma@fedoraproject.org - 0.4.2-4 - Rebuilt for roxmltree 0.14.x - Opt in to rpmautospec * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 0.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1911029 - rust-roxmltree-0.14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1911029 --------------------------------------------------------------------------------
================================================================================ seamonkey-2.53.10.2-1.fc34 (FEDORA-2022-5f32897cb0) Web browser, e-mail, news, IRC client, HTML editor -------------------------------------------------------------------------------- Update Information:
Update to 2.53.10.2 Backport some fixes to improve compatibility with modern sites -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Dmitry Butskoy Dmitry@Butskoy.name 2.53.10.2-1 - update to 2.53.10.2 - backport nullish coalescing support (mozbz 1566141 and others) - backport optional chaining support (mozbz 1566143 and others) * Sat Jan 8 2022 Miro Hron��ok mhroncok@redhat.com - 2.53.10.1-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/LIBFFI34 --------------------------------------------------------------------------------
================================================================================ solaar-1.1.1-1.fc34 (FEDORA-2022-34dcbe2824) Device manager for a wide range of Logitech devices -------------------------------------------------------------------------------- Update Information:
* Keep left pane in Solaar main window the same size * Fix crash when checking a process condition when X11 not running * Add version number to output of solaar show * Fix crash when pinging a device with unknown protocol * Display battery percentage estimates from battery voltage * Add minimal support for Logitech PRO X Wireless Gaming Headset * Push settings when device requests software reconfiguration * Fix read for key/button diversion setting * Add modalias information to Solaar metainfo * Don't do on-screen notifications when devices are powered on * Add setting to switch crown between smooth and ratchet scrolling * Add `write_prefix_bytes` argument to Boolean validator * Update Russian and Spanish translations * New shell script tools to help determine capabilities of receivers * Add special keys for MX Keys for Business and MX Keys Mini * Improve tray menu ordering * Add `--tray-icon-size` option to get around bugs in some tray implementations -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Dominik Mierzejewski rpm@greysector.net - 1.1.1-1 - update to 1.1.1 (#2035614) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2035614 - solaar-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2035614 --------------------------------------------------------------------------------
================================================================================ tcpdump-4.99.1-2.fc34 (FEDORA-2022-79a07015bb) A network traffic monitoring tool -------------------------------------------------------------------------------- Update Information:
New version of tcpslice-1.5 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Michal Ruprich mruprich@redhat.com - 14:4.99.1-2 - New version of tcpslice-1.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2033818 - update tcpslice to 1.4 https://bugzilla.redhat.com/show_bug.cgi?id=2033818 --------------------------------------------------------------------------------
================================================================================ thermald-2.4.8-1.fc34 (FEDORA-2022-5f9980918b) Thermal Management daemon -------------------------------------------------------------------------------- Update Information:
Update to 2.4.8 (#2038523) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Benjamin Berg bberg@redhat.com - 2.4.8-1 - Update to 2.4.8 (#2038523) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2038523 - thermald-2.4.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2038523 --------------------------------------------------------------------------------
================================================================================ touchegg-2.0.13-1.fc34 (FEDORA-2022-e5bd78a75e) Multi-touch gesture recognizer -------------------------------------------------------------------------------- Update Information:
Update to version 2.0.13. Release notes: https://github.com/JoseExposito/touchegg/blob/2.0.13/CHANGELOG.md ---- Perform initial import. Close rhbz#2035944. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com - 2.0.13-1 - Update to version 2.0.13; Fixes RHBZ#2038561 * Sun Dec 26 2021 Maxwell G gotmax@e.email - 2.0.12-1 - Perform initial import. Close rhbz#2035944. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2035944 - Review Request: touchegg - Multi-touch gesture recognizer https://bugzilla.redhat.com/show_bug.cgi?id=2035944 [ 2 ] Bug #2038561 - touchegg-2.0.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2038561 --------------------------------------------------------------------------------
================================================================================ vim-8.2.4068-1.fc34 (FEDORA-2022-48b86d586f) The VIM editor -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-46059, CVE-2022-0158, CVE-2022-0156 ---- Security fix for CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4186, CVE-2021-4192, CVE-2021-4193 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.4068-1 - patchlevel 4068 * Mon Jan 10 2022 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.4051-1 - patchlevel 4051 * Fri Jan 7 2022 Malcolm Inglis miinglis@amazon.com - 2:8.2.4006-2 - add 'gui' build condition for vim-X11 * Wed Jan 5 2022 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.4006-1 - patchlevel 4006 * Wed Dec 15 2021 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.3811-1 - patchlevel 3811 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2034720 - CVE-2021-4136 vim: heap-based buffer overflow in eval_lambda() in src/eval.c https://bugzilla.redhat.com/show_bug.cgi?id=2034720 [ 2 ] Bug #2035928 - CVE-2021-4166 vim: out-of-bounds read in do_arg_all() in src/arglist.c https://bugzilla.redhat.com/show_bug.cgi?id=2035928 [ 3 ] Bug #2035930 - CVE-2021-4173 vim: use-after-free with nested :def function https://bugzilla.redhat.com/show_bug.cgi?id=2035930 [ 4 ] Bug #2036129 - CVE-2021-4187 vim: use-after-free vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2036129 [ 5 ] Bug #2039843 - CVE-2022-0156 vim: vulnerable to Use After Free https://bugzilla.redhat.com/show_bug.cgi?id=2039843 [ 6 ] Bug #2039846 - CVE-2022-0158 vim: vulnerable to Heap-based Buffer Overflow https://bugzilla.redhat.com/show_bug.cgi?id=2039846 [ 7 ] Bug #2039850 - CVE-2021-46059 vim: pointer dereference vulnerability via the vim_regexec_multi function at regexp.c may lead to DoS https://bugzilla.redhat.com/show_bug.cgi?id=2039850 --------------------------------------------------------------------------------
================================================================================ wireshark-3.6.1-1.fc34 (FEDORA-2022-1daf93c51d) Network traffic analyzer -------------------------------------------------------------------------------- Update Information:
New version 3.6.1, Security fix for CVE-2021-4181, CVE-2021-4182, CVE-2021-4183, CVE-2021-4184, CVE-2021-4185, CVE-2021-4186, CVE-2021-4190 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Michal Ruprich mruprich@redhat.com - 1:3.6.1-1 - New version 3.6.1 - Fix for CVE-2021-4181, CVE-2021-4182, CVE-2021-4183, CVE-2021-4184, CVE-2021-4185, CVE-2021-4190 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039000 - CVE-2021-4181 wireshark: Sysdig Event dissector crash https://bugzilla.redhat.com/show_bug.cgi?id=2039000 [ 2 ] Bug #2039005 - CVE-2021-4182 wireshark: RFC 7468 file parser infinite loop https://bugzilla.redhat.com/show_bug.cgi?id=2039005 [ 3 ] Bug #2039009 - CVE-2021-4184 wireshark: BitTorrent DHT dissector infinite loop https://bugzilla.redhat.com/show_bug.cgi?id=2039009 [ 4 ] Bug #2039011 - CVE-2021-4185 wireshark: RTMPT dissector infinite loop https://bugzilla.redhat.com/show_bug.cgi?id=2039011 [ 5 ] Bug #2039013 - CVE-2021-4186 wireshark: Gryphon dissector crash https://bugzilla.redhat.com/show_bug.cgi?id=2039013 [ 6 ] Bug #2039027 - CVE-2021-4183 wireshark: pcapng file parser crash https://bugzilla.redhat.com/show_bug.cgi?id=2039027 [ 7 ] Bug #2039029 - CVE-2021-4190 wireshark: Kafka dissector infinite loop https://bugzilla.redhat.com/show_bug.cgi?id=2039029 --------------------------------------------------------------------------------
================================================================================ zeitgeist-1.0.4-1.fc34 (FEDORA-2022-228516a590) Framework providing Desktop activity awareness -------------------------------------------------------------------------------- Update Information:
Update to version 1.0.4. This is mostly bug-fixes and patches we had already applied on top of 1.0.3. Release notes: https://gitlab.freedesktop.org/zeitgeist/zeitgeist/-/blob/v1.0.4/NEWS -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 12 2022 Fabio Valentini decathorpe@gmail.com - 1.0.4-1 - Update to version 1.0.4. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039967 - zeitgeist-1.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2039967 --------------------------------------------------------------------------------