[SECURITY] Fedora 28 Update: docker-1.13.1-63.git1185cfd.fc28
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-901feba171
2019-01-31 02:11:11.622088
--------------------------------------------------------------------------------
Name : docker
Product : Fedora 28
Version : 1.13.1
Release : 63.git1185cfd.fc28
URL : https://github.com/projectatomic/docker
Summary : Automates deployment of containerized applications
Description :
Docker is an open-source engine that automates the deployment of any
application as a lightweight, portable, self-sufficient container that will
run virtually anywhere.
Docker containers can encapsulate any payload, and will run consistently on
and between virtually any server. The same container that a developer builds
and tests on a laptop will run at scale, in production*, on VMs, bare-metal
servers, OpenStack clusters, public instances, or combinations of the above.
--------------------------------------------------------------------------------
Update Information:
- Resolves: #1666565, #1666566 - CVE-2018-20699 - Resolves: #1663068, #1667622
- umount all procfs and sysfs with --no-pivot - built docker
@projectatomic/docker-1.13.1 commit 1185cfd - built docker-runc
@projectatomic/docker-1.13.1 commit e4ffe43
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-63.git1185cfd
- Resolves: #1666565, #1666566 - CVE-2018-20699
- Resolves: #1663068, #1667622 - umount all procfs and sysfs with --no-pivot
- built docker @projectatomic/docker-1.13.1 commit 1185cfd
- built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43
* Mon Jul 23 2018 Jonathan Lebon <jonathan(a)jlebon.com> - 2:1.13.1-61.git9cb56fd
- simplify d-s-s config file installation
* Sun Jul 8 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-60.git9cb56fd
- Resolves: #1598581, #1598583 - CVE-2018-10892
- built docker @projectatomic/docker-1.13.1 commit 9cb56fd
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 20a1f68
- built docker-runc @projectatomic/docker-1.13.1 commit b425831
- built docker-containerd @projectatomic/docker-1.13.1 commit 42e825a
- built docker-init commit fec3683
- built libnetwork commit d00ceed
- update comments in /etc/sysconfig/docker RE: registries.conf
From: Tom Sweeney <tsweeney(a)redhat.com>
* Tue Jun 12 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-59.gitaf6b32b
- built docker @projectatomic/docker-1.13.1 commit af6b32b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 6675634
- built docker-runc @projectatomic/docker-1.13.1 commit b425831
- built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
- built docker-init commit fec3683
- built libnetwork commit 19279f0
* Tue Jun 12 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-58.git6c336e4
- built docker-runc @projectatomic/docker-1.13.1 commit 18eb957
* Wed Jun 6 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-57.git6c336e4
- remove outdated comment about docker_transition_unconfined
* Thu May 24 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-56.git6c336e4
- rebased container-storage-setup to 0.11.0 commit 65f91d4
* Wed May 23 2018 Colin Walters <walters(a)verbum.org> - 2:1.13.1-55.git6c336e4
- Drop oci-register-machine Recommends; this broke a downstream build because
oci-register-machine was missing systemd-nspawn as a dependency, but generally
it has not been worth maintaining.
See previous discussion: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2016-M...
* Mon May 21 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-54.git6c336e4
- Resolves: #1559274
- built docker @projectatomic/docker-1.13.1 commit 6c336e4
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 04caa55
- built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa
- built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
- built docker-init commit 5b117de
- built libnetwork commit c15b372
* Tue May 15 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> - 2:1.13.1-53.git89b0e65
- do not compress debuginfo with dwz to support delve debugger
* Fri Apr 13 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.13.1-52.git89b0e65
- Resolves: #1558425
- built docker @projectatomic/docker-1.13.1 commit 89b0e65
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 04caa55
- built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa
- built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
- built docker-init commit 5b117de
- built libnetwork commit c15b372
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663068 - runc: not using pivot_root allows mounting of /proc
https://bugzilla.redhat.com/show_bug.cgi?id=1663068
[ 2 ] Bug #1666565 - CVE-2018-20699 docker: Memory exhaustion via large integer used with --cpuset-mems or --cpuset-cpus
https://bugzilla.redhat.com/show_bug.cgi?id=1666565
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-901feba171' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: fedmod-0.4.5-1.fc28
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-e51273b24a
2019-01-31 02:11:11.622073
--------------------------------------------------------------------------------
Name : fedmod
Product : Fedora 28
Version : 0.4.5
Release : 1.fc28
URL : https://pagure.io/modularity/fedmod
Summary : Utilities for generating & maintaining modulemd files
Description :
fedmod provides tools for converting existing RPMs (most notably metapackages)
into module definitions in Fedora's modulemd format.
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash when using non-default datasets and allows using
dashes in dataset release names. Additionally, it adds the `--flatpak-common`
option, copes with Flatpak manifests using `id` rather than `app-id` and cleans
up modulemd files generated for Flatpaks.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-e51273b24a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: spectrwm-3.2.0-1.fc28
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-281130eb4d
2019-01-31 02:11:11.621961
--------------------------------------------------------------------------------
Name : spectrwm
Product : Fedora 28
Version : 3.2.0
Release : 1.fc28
URL : https://github.com/conformal/spectrwm
Summary : Minimalist tiling window manager written in C
Description :
Spectrwm is a small dynamic tiling window manager for X11.
It tries to stay out of the way so that valuable screen real
estate can be used for much more important stuff.
It has sane defaults and does not require one to learn a
language to do any configuration. It was written by hackers
for hackers and it strives to be small, compact and fast.
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 2 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3.2.0-1
- Update to 3.2.0
* Mon Jul 23 2018 <lars(a)oddbit.com> - 3.1.0-1
- Update to 3.1.0
* Mon Jul 23 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3.0.2-7
- Resolves: #1606394 - FTBFS issue (add BR: gcc)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-281130eb4d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 29 Update: xdg-desktop-portal-1.2.0-1.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-67c2f827b4
2019-01-30 02:06:12.445810
--------------------------------------------------------------------------------
Name : xdg-desktop-portal
Product : Fedora 29
Version : 1.2.0
Release : 1.fc29
URL : https://github.com/flatpak/xdg-desktop-portal/
Summary : Portal frontend service to flatpak
Description :
xdg-desktop-portal works by exposing a series of D-Bus interfaces known as
portals under a well-known name (org.freedesktop.portal.Desktop) and object
path (/org/freedesktop/portal/desktop). The portal interfaces include APIs for
file access, opening URIs, printing and others.
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID
works in flatpakrepo files in all cases. * Don't error out with empty
installations in uninstall. * Add helper that validates icon files during
export. * Don't allow root to modify the (non-root) per-user flatpak
installation, as this risks causing problems later. * Remove some incorrect
warnings from flatpak repair. * Allow multiple name segments after prefix when
exporting files. * Allow specification of ellipsization in --colums options. *
Handle dates as well as timestamps in appdata * Fixed a bug where flatpak
remote-delete removed too many refs. * Now we use raw terminal mode during a
transaction to a avoid problems with input during the operation causing problems
with escape sequences. * Generate a fontconfig directory remapping snippet as
will be needed for newer versions of fontconfig. * Support --extra-collection-id
in build-commit-from to bind the commit to multiple collection ids. This is work
in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache,
fixing the build of large applications like libreoffice in some cases. * Add new
default-branch manifest option to allow overridable branch name. xdg-desktop-
portal 1.2.0 * notification: Use icon validator from flatpak * notification:
Don't leave temp files around * email: Validate options better * inhibit:
Validate options better * file chooser: Add support for setting the current
filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation
updates * file chooser: Support setting current filter
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.2.0-1
- Update to 1.2.0 (#1669552)
* Tue Oct 9 2018 David King <amigadave(a)amigadave.com> - 1.0.3-1
- Update to 1.0.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669554
[ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669552
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 29 Update: flatpak-builder-1.0.3-1.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-67c2f827b4
2019-01-30 02:06:12.445810
--------------------------------------------------------------------------------
Name : flatpak-builder
Product : Fedora 29
Version : 1.0.3
Release : 1.fc29
URL : http://flatpak.org/
Summary : Tool to build flatpaks from source
Description :
Flatpak-builder is a tool for building flatpaks from sources.
See http://flatpak.org/ for more information.
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID
works in flatpakrepo files in all cases. * Don't error out with empty
installations in uninstall. * Add helper that validates icon files during
export. * Don't allow root to modify the (non-root) per-user flatpak
installation, as this risks causing problems later. * Remove some incorrect
warnings from flatpak repair. * Allow multiple name segments after prefix when
exporting files. * Allow specification of ellipsization in --colums options. *
Handle dates as well as timestamps in appdata * Fixed a bug where flatpak
remote-delete removed too many refs. * Now we use raw terminal mode during a
transaction to a avoid problems with input during the operation causing problems
with escape sequences. * Generate a fontconfig directory remapping snippet as
will be needed for newer versions of fontconfig. * Support --extra-collection-id
in build-commit-from to bind the commit to multiple collection ids. This is work
in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache,
fixing the build of large applications like libreoffice in some cases. * Add new
default-branch manifest option to allow overridable branch name. xdg-desktop-
portal 1.2.0 * notification: Use icon validator from flatpak * notification:
Don't leave temp files around * email: Validate options better * inhibit:
Validate options better * file chooser: Add support for setting the current
filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation
updates * file chooser: Support setting current filter
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.0.3-1
- Update to 1.0.3
* Tue Jan 15 2019 Kalev Lember <klember(a)redhat.com> - 1.0.2-1
- Update to 1.0.2
- Change bzr requires to recommends
* Tue Oct 16 2018 Kalev Lember <klember(a)redhat.com> - 1.0.1-2
- Change svn requires to recommends (#1639355)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669554
[ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669552
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 29 Update: xdg-desktop-portal-gtk-1.2.0-1.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-67c2f827b4
2019-01-30 02:06:12.445810
--------------------------------------------------------------------------------
Name : xdg-desktop-portal-gtk
Product : Fedora 29
Version : 1.2.0
Release : 1.fc29
URL : https://github.com/flatpak/xdg-desktop-portal-gtk
Summary : Backend implementation for xdg-desktop-portal using GTK+
Description :
A backend implementation for xdg-desktop-portal that is using GTK+ and various
pieces of GNOME infrastructure, such as the org.gnome.Shell.Screenshot or
org.gnome.SessionManager D-Bus interfaces.
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID
works in flatpakrepo files in all cases. * Don't error out with empty
installations in uninstall. * Add helper that validates icon files during
export. * Don't allow root to modify the (non-root) per-user flatpak
installation, as this risks causing problems later. * Remove some incorrect
warnings from flatpak repair. * Allow multiple name segments after prefix when
exporting files. * Allow specification of ellipsization in --colums options. *
Handle dates as well as timestamps in appdata * Fixed a bug where flatpak
remote-delete removed too many refs. * Now we use raw terminal mode during a
transaction to a avoid problems with input during the operation causing problems
with escape sequences. * Generate a fontconfig directory remapping snippet as
will be needed for newer versions of fontconfig. * Support --extra-collection-id
in build-commit-from to bind the commit to multiple collection ids. This is work
in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache,
fixing the build of large applications like libreoffice in some cases. * Add new
default-branch manifest option to allow overridable branch name. xdg-desktop-
portal 1.2.0 * notification: Use icon validator from flatpak * notification:
Don't leave temp files around * email: Validate options better * inhibit:
Validate options better * file chooser: Add support for setting the current
filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation
updates * file chooser: Support setting current filter
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.2.0-1
- Update to 1.2.0
* Wed Jan 16 2019 Kalev Lember <klember(a)redhat.com> - 1.1.1-1
- Update to 1.1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669554
[ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669552
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 29 Update: flatpak-1.2.0-1.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-67c2f827b4
2019-01-30 02:06:12.445810
--------------------------------------------------------------------------------
Name : flatpak
Product : Fedora 29
Version : 1.2.0
Release : 1.fc29
URL : http://flatpak.org/
Summary : Application deployment framework for desktop apps
Description :
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to 1.2.0 flatpak 1.2.0 * Ensure DeployCollectionID
works in flatpakrepo files in all cases. * Don't error out with empty
installations in uninstall. * Add helper that validates icon files during
export. * Don't allow root to modify the (non-root) per-user flatpak
installation, as this risks causing problems later. * Remove some incorrect
warnings from flatpak repair. * Allow multiple name segments after prefix when
exporting files. * Allow specification of ellipsization in --colums options. *
Handle dates as well as timestamps in appdata * Fixed a bug where flatpak
remote-delete removed too many refs. * Now we use raw terminal mode during a
transaction to a avoid problems with input during the operation causing problems
with escape sequences. * Generate a fontconfig directory remapping snippet as
will be needed for newer versions of fontconfig. * Support --extra-collection-id
in build-commit-from to bind the commit to multiple collection ids. This is work
in progress in ostree. flatpak-builder 1.0.3 * Compress changes in cache,
fixing the build of large applications like libreoffice in some cases. * Add new
default-branch manifest option to allow overridable branch name. xdg-desktop-
portal 1.2.0 * notification: Use icon validator from flatpak * notification:
Don't leave temp files around * email: Validate options better * inhibit:
Validate options better * file chooser: Add support for setting the current
filter * Translation updates xdg-desktop-portal-gtk 1.2.0 * Translation
updates * file chooser: Support setting current filter
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 28 2019 David King <amigadave(a)amigadave.com> - 1.2.0-1
- Update to 1.2.0
- Enable installed tests and add to tests subpackage
* Fri Dec 14 2018 David King <amigadave(a)amigadave.com> - 1.0.6-4
- Fix OCI download progress reporting
* Fri Nov 30 2018 fedora-toolbox <otaylor(a)redhat.com> - 1.0.6-3
- Add a patch to fix OCI system remotes
- Add patch fixing permissions on icons downloaded from an OCI registry
* Fri Nov 16 2018 Kalev Lember <klember(a)redhat.com> - 1.0.6-1
- Update to 1.0.6
* Mon Nov 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.5-2
- Recommend p11-kit-server instead of just p11-kit (#1649049)
* Mon Nov 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.5-1
- Update to 1.0.5
* Fri Oct 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.4-1
- Update to 1.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669554 - xdg-desktop-portal-gtk-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669554
[ 2 ] Bug #1669552 - xdg-desktop-portal-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1669552
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-67c2f827b4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
[SECURITY] Fedora 29 Update: lua-5.3.5-3.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-ee57bda7ae
2019-01-30 02:06:12.445800
--------------------------------------------------------------------------------
Name : lua
Product : Fedora 29
Version : 5.3.5
Release : 3.fc29
URL : http://www.lua.org/
Summary : Powerful light-weight programming language
Description :
Lua is a powerful light-weight programming language designed for
extending applications. Lua is also frequently used as a
general-purpose, stand-alone language. Lua is free software.
Lua combines simple procedural syntax with powerful data description
constructs based on associative arrays and extensible semantics. Lua
is dynamically typed, interpreted from bytecodes, and has automatic
memory management with garbage collection, making it ideal for
configuration, scripting, and rapid prototyping.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-6706.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 28 2019 Tom Callaway <spot(a)fedoraproject.org> - 5.3.5-3
- apply fix for CVE-2019-6706 (bz1670020)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1670019 - CVE-2019-6706 lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1670019
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-ee57bda7ae' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
[SECURITY] Fedora 29 Update: radvd-2.17-17.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-9790f1867a
2019-01-30 02:06:12.445789
--------------------------------------------------------------------------------
Name : radvd
Product : Fedora 29
Version : 2.17
Release : 17.fc29
URL : http://www.litech.org/radvd/
Summary : A Router Advertisement daemon
Description :
radvd is the router advertisement daemon for IPv6. It listens to router
solicitations and sends router advertisements as described in "Neighbor
Discovery for IP Version 6 (IPv6)" (RFC 2461). With these advertisements
hosts can automatically configure their addresses and some other
parameters. They also can choose a default router based on these
advertisements.
Install radvd if you are setting up IPv6 network and/or Mobile IPv6
services.
--------------------------------------------------------------------------------
Update Information:
Fix double-free in InterfaceList
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 27 2019 Pavel Zhukov <pzhukov(a)redhat.com> - 2.17-17
- Fix double-free in InterfaceList
* Tue Nov 27 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 2.17-16
- Depends on network-online target (#1652459)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669297 - radvd: Use After Free in case of misconfiguration
https://bugzilla.redhat.com/show_bug.cgi?id=1669297
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-9790f1867a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 29 Update: filezilla-3.40.0-1.fc29
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-4d42825ffa
2019-01-30 02:06:12.445778
--------------------------------------------------------------------------------
Name : filezilla
Product : Fedora 29
Version : 3.40.0
Release : 1.fc29
URL : http://filezilla-project.org/
Summary : FTP, FTPS and SFTP client
Description :
FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features.
- Supports FTP, FTP over SSL/TLS (FTPS) and SSH File Transfer Protocol (SFTP)
- Cross-platform
- Available in many languages
- Supports resume and transfer of large files >4GB
- Easy to use Site Manager and transfer queue
- Drag & drop support
- Speed limits
- Filename filters
- Network configuration wizard
--------------------------------------------------------------------------------
Update Information:
3.40.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 25 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 3.40.0-1
- 3.40.0 final.
* Tue Jan 22 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 3.40.0-0.rc2
- 3.40.0 rc2
* Fri Nov 30 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.39.0-1
- 3.39.0 final.
* Mon Nov 26 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.39.0-0.rc1
- 3.39.0-rc1
* Sun Oct 28 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.38.1-1
- 3.38.1
* Fri Oct 26 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.38.0-1
- 3.38.0
* Fri Oct 19 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.38.0-0.rc1
- 3.38.0-rc1
* Fri Oct 5 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.37.4-1
- 3.37.4
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-4d42825ffa' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months