[SECURITY] Fedora 30 Update: clamav-0.101.5-1.fc30
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-dcbfe89e39
2019-12-01 01:03:32.742171
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora 30
Version : 0.101.5
Release : 1.fc30
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
- Drop clamd(a)scan.service file (bz#1725810) ClamAV 0.101.5 is a security patch
release that addresses the following issues. - CVE-2019-15961:
A Denial-of-Service (DoS) vulnerability may occur when scanning a specially
crafted email file as a result of excessively long scan times. The issue is
resolved by implementing several maximums in parsing MIME messages and by
optimizing use of memory allocation. - Added the zip scanning improvements
found in v0.102.0 where it scans files using zip records from a sorted catalogue
which provides deduplication of file records resulting in faster extraction and
scan time and reducing the likelihood of alerting on non-malicious duplicate
file entries as overlapping files. - Signature load time is significantly
reduced by changing to a more efficient algorithm for loading signature patterns
and allocating the AC trie. Patch courtesy of Alberto Wu. - Introduced a new
configure option to statically link libjson-c with libclamav. Static linking
with libjson is highly recommended to prevent crashes in applications that use
libclamav alongside another JSON parsing library. - Null-dereference fix in
email parser when using the --gen-json metadata option. ---- Add
TimeoutStartSec=420 to clamd@.service to match upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 23 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.5-1
- Update to 0.101.5 (CVE-2019-15961) (bz#1775550)
* Mon Nov 18 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.4-3
- Drop clamd(a)scan.service file (bz#1725810)
- Change /var/run to /run
* Mon Nov 18 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.4-2
- Add TimeoutStartSec=420 to clamd@.service to match upstream (bz#1764835)
* Thu Aug 22 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.4-1
- Update to 0.101.4
* Wed Aug 7 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.3-1
- Update to 0.101.3
- Fix permissions on freshclam.conf (bugz#1733112)
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.101.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jun 30 2019 S��rgio Basto <sergio(a)serjux.com> - 0.101.2-2
- One year later we may remove pakages workaround of clamav-milter-systemd,
clamav-scanner-systemd and clamav-server-systemd, before I forget it was one
workaround to allow migration of service without stop it and disable it
(#1583599).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631525 - clamav: clamscan --gen-json does not output JSON
https://bugzilla.redhat.com/show_bug.cgi?id=1631525
[ 2 ] Bug #1775550 - Request to build clamav 0.101.5 for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1775550
[ 3 ] Bug #1725810 - /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated
https://bugzilla.redhat.com/show_bug.cgi?id=1725810
[ 4 ] Bug #1764835 - clamd at 100% CPU and SystemD keeps restarting clamd
https://bugzilla.redhat.com/show_bug.cgi?id=1764835
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-dcbfe89e39' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: python-partd-1.1.0-1.fc30
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-192cfee616
2019-12-01 01:03:32.742157
--------------------------------------------------------------------------------
Name : python-partd
Product : Fedora 30
Version : 1.1.0
Release : 1.fc30
URL : https://pypi.python.org/pypi/partd
Summary : Appendable key-value storage
Description :
Key-value byte store with appendable values: Partd stores key-value pairs.
Values are raw bytes. We append on old values. Partd excels at shuffling
operations.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.0-1
- Update to latest version
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.0-4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.0-3
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed Jun 26 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.0-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775806 - python-partd-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775806
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-192cfee616' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: youtube-dl-2019.11.22-1.fc30
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-e5be78c547
2019-12-01 01:03:32.742143
--------------------------------------------------------------------------------
Name : youtube-dl
Product : Fedora 30
Version : 2019.11.22
Release : 1.fc30
URL : https://yt-dl.org
Summary : A small command-line program to download online videos
Description :
Small command-line program to download videos from YouTube and other sites.
--------------------------------------------------------------------------------
Update Information:
Update to 2019.11.22
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 23 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2019.11.22-1
- Update to 2019.11.22
* Thu Oct 10 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2019.09.28-1
- Update to 2019.09.28 (#1756482)
* Wed Sep 11 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2019.09.12.1-1
- Update to 2019.09.12.1
* Wed Sep 11 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2019.09.12-2
- Add Fish shell completion
* Wed Sep 11 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2019.09.12-1
- Update to 2019.09.12
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2019.07.30-2
- Rebuilt for Python 3.8
* Tue Jul 30 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 2019.07.30-1
- 2019.07.30
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2019.06.21-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jun 23 2019 Till Maas <opensource(a)till.name> - 2019.06.21-1
- Update to new upstream release with important bugfixes
* Sun Jun 16 2019 Michael Cronenworth <mike(a)cchtml.com> - 2019.06.08-1
- Update to 2019.06.08
* Wed Apr 24 2019 Till Maas <opensource(a)till.name> - 2019.04.24-1
- Update to new upstream release with important bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762020 - youtube-dl-2019.11.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762020
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-e5be78c547' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months