October 2022 - package-announce - Fedora Mailing-Lists

[SECURITY] Fedora 36 Update: xen-4.16.2-2.fc36

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-5b594b82ac 2022-10-30 20:59:07.278645 -------------------------------------------------------------------------------- Name : xen Product : Fedora 36 Version : 4.16.2 Release : 2.fc36 URL : http://xen.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: Arm: unbounded memory consumption for 2nd-level page tables [XSA-409, CVE-2022-33747] P2M pool freeing may take excessively long [XSA-410, CVE-2022-33746] lock order inversion in transitive grant copy handling [XSA-411, CVE-2022-33748] -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 14 2022 Michael Young <m.a.young(a)durham.ac.uk> - 4.16.2-2 - Arm: unbounded memory consumption for 2nd-level page tables [XSA-409, CVE-2022-33747] - P2M pool freeing may take excessively long [XSA-410, CVE-2022-33746] - lock order inversion in transitive grant copy handling [XSA-411, CVE-2022-33748] -------------------------------------------------------------------------------- References: [ 1 ] Bug #2135262 - CVE-2022-33748 xen: lock order inversion in transitive grant copy handling https://bugzilla.redhat.com/show_bug.cgi?id=2135262 [ 2 ] Bug #2135267 - CVE-2022-33747 xen: unbounded memory consumption for 2nd-level page tables https://bugzilla.redhat.com/show_bug.cgi?id=2135267 [ 3 ] Bug #2135640 - CVE-2022-33746 xen: P2M pool freeing may take excessively long https://bugzilla.redhat.com/show_bug.cgi?id=2135640 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-5b594b82ac' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

Fedora 35 Update: python-fsspec-2022.10.0-1.fc35~bootstrap

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-49e0960a99 2022-10-30 20:59:15.942718 -------------------------------------------------------------------------------- Name : python-fsspec Product : Fedora 35 Version : 2022.10.0 Release : 1.fc35~bootstrap URL : https://github.com/fsspec/filesystem_spec Summary : Specification for Pythonic file system interfaces Description : Filesystem Spec is a project to unify various projects and classes to work with remote filesystems and file-system-like abstractions using a standard pythonic interface. -------------------------------------------------------------------------------- Update Information: Update to latest version ---- Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 23 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2022.10.0-1 - Update to latest version (#2136198) * Mon Oct 17 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2022.8.2-1 - Update to latest version (#2122769) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2122769 - python-fsspec-2022.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2122769 [ 2 ] Bug #2136198 - python-fsspec-2022.10.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2136198 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-49e0960a99' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

Fedora 35 Update: nwg-panel-0.7.12-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-157352049a 2022-10-30 20:59:15.942708 -------------------------------------------------------------------------------- Name : nwg-panel Product : Fedora 35 Version : 0.7.12 Release : 1.fc35 URL : https://github.com/nwg-piotr/nwg-panel Summary : GTK3-based panel for sway window manager Description : I have been using sway since 2019 and find it the most comfortable working environment, but... Have you ever missed all the graphical bells and whistles in your panel, we used to have in tint2? It happens to me. That's why I decided to try to code a GTK-based panel, including best features from my two favourites: Waybar and tint2. Many thanks to Developers and Contributors of the both projects! There are 8 modules available at the moment, and I don't plan on many more. Basis system controls are available in the Controls module, and whatever else you may need, there's an executor for that. -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 23 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.7.12-1 - chore(update): 0.7.12 * Thu Oct 13 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.7.11-1 - chore(update): 0.7.11 * Fri Oct 7 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.7.10-1 - chore(update): 0.7.10 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-157352049a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

Fedora 35 Update: python-rasterio-1.3.3-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-5e1b3ace86 2022-10-30 20:59:15.942696 -------------------------------------------------------------------------------- Name : python-rasterio Product : Fedora 35 Version : 1.3.3 Release : 1.fc35 URL : https://github.com/mapbox/rasterio Summary : Fast and direct raster I/O for use with Numpy and SciPy Description : Rasterio reads and writes geospatial raster data. Geographic information systems use GeoTIFF and other formats to organize and store gridded, or raster, datasets. Rasterio reads and writes these formats and provides a Python API based on ND arrays. -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 23 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 1.3.3-1 - Update to latest version (#2136303) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2136303 - python-rasterio-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2136303 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-5e1b3ace86' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

[SECURITY] Fedora 35 Update: cacti-spine-1.2.22-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-30049cdcdb 2022-10-30 20:59:15.942682 -------------------------------------------------------------------------------- Name : cacti-spine Product : Fedora 35 Version : 1.2.22 Release : 1.fc35 URL : https://cacti.net Summary : Threaded poller for Cacti written in C Description : Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance. -------------------------------------------------------------------------------- Update Information: - Update to 1.2.22 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.22-1 - Update to 1.2.22 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.21-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-30049cdcdb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

[SECURITY] Fedora 35 Update: cacti-1.2.22-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-30049cdcdb 2022-10-30 20:59:15.942682 -------------------------------------------------------------------------------- Name : cacti Product : Fedora 35 Version : 1.2.22 Release : 1.fc35 URL : https://www.cacti.net/ Summary : An rrd based graphing tool Description : Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. -------------------------------------------------------------------------------- Update Information: - Update to 1.2.22 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.22-1 - Update to 1.2.22 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.21-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-30049cdcdb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

Fedora 35 Update: google-api-python-client-2.65.0-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-38bd992253 2022-10-30 20:59:15.942667 -------------------------------------------------------------------------------- Name : google-api-python-client Product : Fedora 35 Version : 2.65.0 Release : 1.fc35 URL : https://github.com/googleapis/google-api-python-client Summary : Google APIs Client Library for Python Description : Written by Google, this library provides a small, flexible, and powerful Python client library for accessing Google APIs. -------------------------------------------------------------------------------- Update Information: Update to 2.65.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 2:2.65.0-1 - Update to 2.65.0 - Closes rhbz#2132200 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-38bd992253' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

Fedora 35 Update: mold-1.6.0-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-6e914f04b2 2022-10-30 20:59:15.942658 -------------------------------------------------------------------------------- Name : mold Product : Fedora 35 Version : 1.6.0 Release : 1.fc35 URL : https://github.com/rui314/mold Summary : A Modern Linker Description : mold is a faster drop-in replacement for existing Unix linkers. It is several times faster than the LLVM lld linker. mold is designed to increase developer productivity by reducing build time, especially in rapid debug-edit-rebuild cycles. -------------------------------------------------------------------------------- Update Information: Bump version to 1.6.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Christoph Erhardt <fedora(a)sicherha.de> - 1.6.0-1 - Bump version to 1.6.0 - Add new supported architectures - Drop upstreamed patch -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-6e914f04b2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

[SECURITY] Fedora 35 Update: golang-github-distribution-3-3.0.0-0.1.pre1.20221009git0122d7d.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-739c7a0058 2022-10-30 20:59:15.942649 -------------------------------------------------------------------------------- Name : golang-github-distribution-3 Product : Fedora 35 Version : 3.0.0 Release : 0.1.pre1.20221009git0122d7d.fc35 URL : https://github.com/distribution/distribution Summary : Docker toolkit to pack, ship, store, and deliver container content Description : The Docker toolset to pack, ship, store, and deliver content. This repository's main product is the Docker Registry 2.0 implementation for storing and distributing Docker images. It supersedes the docker/docker-registry project with a new API design, focused around security and performance. -------------------------------------------------------------------------------- Update Information: Update to 3.0.0 pre1 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 3.0.0-0.1.pre1 - Update to 3.0.0 pre1 * Wed Aug 10 2022 Maxwell G <gotmax(a)e.email> 2.8.0~beta.1-5 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.8.0~beta.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jul 19 2022 Maxwell G <gotmax(a)e.email> 2.8.0~beta.1-3 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang * Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.8.0~beta.1-2 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 * Thu Feb 3 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.8.0~beta.1-1 - Initial import -------------------------------------------------------------------------------- References: [ 1 ] Bug #2067394 - CVE-2022-21698 golang-github-distribution-3: prometheus/client_golang: Denial of service using InstrumentHandlerCounter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2067394 [ 2 ] Bug #2067427 - CVE-2022-21698 golang-github-distribution-3: prometheus/client_golang: Denial of service using InstrumentHandlerCounter [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2067427 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-739c7a0058' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

Fedora 35 Update: libcpuid-0.6.0-1.fc35

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-b37537012b 2022-10-30 20:59:15.942639 -------------------------------------------------------------------------------- Name : libcpuid Product : Fedora 35 Version : 0.6.0 Release : 1.fc35 URL : https://github.com/anrieff/libcpuid Summary : Provides CPU identification for x86 Description : Libcpuid provides CPU identification for the x86 (and x86_64). -------------------------------------------------------------------------------- Update Information: Update to 0.6.0-1 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 22 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 0.6.0-1 - Update to 0.6.0 * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2136069 - Please update to v0.6 https://bugzilla.redhat.com/show_bug.cgi?id=2136069 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-b37537012b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 year, 6 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce October 2022