[SECURITY] Fedora 35 Update: mingw-expat-2.4.9-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-c22feb71ba
2022-10-29 19:41:28.774633
--------------------------------------------------------------------------------
Name : mingw-expat
Product : Fedora 35
Version : 2.4.9
Release : 1.fc35
URL : http://www.libexpat.org/
Summary : MinGW Windows port of expat XML parser library
Description :
This is expat, the C library for parsing XML, written by James Clark. Expat
is a stream oriented XML parser. This means that you register handlers with
the parser prior to starting the parse. These handlers are called when the
parser discovers the associated structures in the document being parsed. A
start tag is an example of the kind of structures for which you may
register handlers.
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.9, fixes CVE-2022-30674.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 21 2022 Sandro Mani <manisandro(a)gmail.com> - 2.4.9-1
- Update to 2.4.9
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Apr 14 2022 Sandro Mani <manisandro(a)gmail.com> - 2.4.8-1
- Update to 2.4.8
* Fri Mar 25 2022 Sandro Mani <manisandro(a)gmail.com> - 2.4.7-2
- Rebuild with mingw-gcc-12
* Mon Mar 14 2022 Sandro Mani <manisandro(a)gmail.com> - 2.4.7-1
- Update to 2.4.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2130778 - CVE-2022-40674 mingw-expat: expat: a use-after-free in the doContent function in xmlparse.c [fedora-35]
https://bugzilla.redhat.com/show_bug.cgi?id=2130778
[ 2 ] Bug #2130781 - CVE-2022-40674 mingw-expat: expat: a use-after-free in the doContent function in xmlparse.c [fedora-36]
https://bugzilla.redhat.com/show_bug.cgi?id=2130781
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-c22feb71ba' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 35 Update: perl-Module-CoreList-5.20221020-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-3374f67fe6
2022-10-29 19:41:28.774622
--------------------------------------------------------------------------------
Name : perl-Module-CoreList
Product : Fedora 35
Version : 5.20221020
Release : 1.fc35
URL : https://metacpan.org/release/Module-CoreList
Summary : What modules are shipped with versions of perl
Description :
Module::CoreList provides information on which core and dual-life modules
are shipped with each version of perl.
--------------------------------------------------------------------------------
Update Information:
Updated for v5.37.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 21 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20221020-1
- 5.20221020 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2136614 - perl-Module-CoreList-5.20221020 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2136614
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-3374f67fe6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 35 Update: python-sport-activities-features-0.3.7.1-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-2772cff867
2022-10-29 19:41:28.774612
--------------------------------------------------------------------------------
Name : python-sport-activities-features
Product : Fedora 35
Version : 0.3.7.1
Release : 1.fc35
URL : https://github.com/firefly-cpp/sport-activities-features
Summary : A minimalistic toolbox for extracting features from sports activity files
Description :
A minimalistic toolbox for extracting features
from sport activity files written in Python. Proposed software
supports the extraction of following topographic features from
sport activity files: number of hills, average altitude of identified
hills, total distance of identified hills, climbing ratio (total distance
of identified hills vs. total distance), average ascent of hills,
total ascent, total descent and many others.
--------------------------------------------------------------------------------
Update Information:
Upgrade to 0.3.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 21 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.7.1-1
- Upgrade to 0.3.7.1
* Wed Oct 12 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.7-1
- Upgrade to 0.3.7
* Sun Aug 28 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.6-1
- Upgrade to 0.3.6
* Fri Aug 19 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.5-1
- Upgrade to 0.3.5
* Tue Aug 2 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.2-1
- Upgrade to 0.3.2
- Re-enable tests
* Mon Aug 1 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.1-1
- Upgrade to 0.3.1
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-2772cff867' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 35 Update: php-doctrine-inflector2-2.0.6-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-51f96928ec
2022-10-29 19:41:28.774601
--------------------------------------------------------------------------------
Name : php-doctrine-inflector2
Product : Fedora 35
Version : 2.0.6
Release : 1.fc35
URL : https://github.com/doctrine/inflector
Summary : Common string manipulations with regard to casing and singular/plural rules
Description :
Doctrine Inflector is a small library that can perform string manipulations
with regard to upper-/lowercase and singular/plural forms of words.
Autoloader: /usr/share/php/Doctrine/Inflector2/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.6** Bug * 208: Add irregular substitution for word "sieve"
thanks to @CreepPork
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 21 2022 Remi Collet <remi(a)remirepo.net> - 2.0.6-1
- update to 2.0.6
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-51f96928ec' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 35 Update: btrfs-progs-6.0-1.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-8bfed3d00b
2022-10-29 19:41:28.774588
--------------------------------------------------------------------------------
Name : btrfs-progs
Product : Fedora 35
Version : 6.0
Release : 1.fc35
URL : https://btrfs.wiki.kernel.org/index.php/Main_Page
Summary : Userspace programs for btrfs
Description :
The btrfs-progs package provides all the userspace programs needed to create,
check, modify and correct any inconsistencies in the btrfs filesystem.
--------------------------------------------------------------------------------
Update Information:
### Changelog * fi usage: in tabular output, print total size and slack size
* mkfs: * option -O now accepts values from -R to unify the interface (-R
will continue to work) * zone reset and discard is done in
parallel on all devices * removed option --leafsize, deprecated long time
ago * corrupt-block: recalculate checksum when changing generation *
fixes: * convert: fix reserved range detection and overlaps * mkfs:
fix creating files with reserved inode numbers with --rootdir * receive:
escape filenames in command attributes * fix extent buffer leaks after
transaction abort * experimental: * mkfs: support for block-group-tree
(kernel 6.1) * fsverity in send (protocol v3, WIP) * btrfstune -b
converts to block-group-tree * other: * cleanups, refactoring *
new and updated tests * update documentation
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 13 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 6.0-1
- Update to 6.0
* Thu Oct 13 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 5.19.1-1
- Update to 5.19.1
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.18-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 5.18-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094075 - btrfs-progs-6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2094075
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-8bfed3d00b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 35 Update: linux-firmware-20221012-141.fc35
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-f82d476e16
2022-10-29 19:41:28.774525
--------------------------------------------------------------------------------
Name : linux-firmware
Product : Fedora 35
Version : 20221012
Release : 141.fc35
URL : http://www.kernel.org/
Summary : Firmware files used by the Linux kernel
Description :
This package includes firmware files required for some devices to
operate.
--------------------------------------------------------------------------------
Update Information:
Update to upstream 20221012 release: * rtl_bt: Update RTL8852C BT USB firmware
to 0xD5B8_A40A * amdgpu: update various generations of RLC firmware * mediatek:
Update mt8195 SOF firmware to v0.4.1 * qcom: add squashed version of a530 zap
shader * rtw89: 8852c: update fw to v0.27.56.1 * mediatek: Update mt8186 SCP
firmware * Update AMD cpu microcode * mediatek: mt8195: Update scp.img to
v2.0.11956 * mediatek: Add new mt8195 SOF firmware * mediatek: Update mt8186 SOF
firmware to v0.2.1 * update firmware for mediatek bluetooth chip (MT7922) *
rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207 * update firmware for
mediatek bluetooth chip (MT7921) * update firmware for MT7921/MT7922 WiFi device
* cxgb4: Update firmware to revision 1.27.0.0 * i915: Add versionless HuC files
for current platforms * i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P * qca:
Update firmware files for BT chip WCN3991. * Removing crnv32 ---- Update to
upstream 20220913 release: * amdgpu: update yellow carp DMCUB firmware *
amdgpu: add firmware for VCN 3.1.2 IP block * amdgpu: add firmware for SDMA
5.2.6 IP block * amdgpu: add firmware for PSP 13.0.5 IP block * amdgpu: add
firmware for GC 10.3.6 IP block * amdgpu: add firmware for DCN 3.1.5 IP block *
qcom: rename Lenovo ThinkPad X13s firmware paths * rtw89: 8852c: update fw to
v0.27.42.0 * Mellanox: Add new mlxsw_spectrum firmware xx.2010.3146 * amdgpu:
update beige goby/dimgrey cavefish/navy flounder/sienna cichlid VCN firmware *
rtl_bt: Update RTL8852C BT USB firmware to 0xDFB8_5A33 * mediatek: reference the
LICENCE file for MediaTek firmwares
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 13 2022 Peter Robinson <pbrobinson(a)fedoraproject.org> - 20221012-141
- Update to upstream 20221012 release
- rtl_bt: Update RTL8852C BT USB firmware to 0xD5B8_A40A
- amdgpu: update various generations of RLC firmware
- mediatek: Update mt8195 SOF firmware to v0.4.1
- qcom: add squashed version of a530 zap shader
- rtw89: 8852c: update fw to v0.27.56.1
- mediatek: Update mt8186 SCP firmware
- Update AMD cpu microcode
- mediatek: mt8195: Update scp.img to v2.0.11956
- mediatek: Add new mt8195 SOF firmware
- mediatek: Update mt8186 SOF firmware to v0.2.1
- update firmware for mediatek bluetooth chip (MT7922)
- rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207
- update firmware for mediatek bluetooth chip (MT7921)
- update firmware for MT7921/MT7922 WiFi device
- cxgb4: Update firmware to revision 1.27.0.0
- i915: Add versionless HuC files for current platforms
- i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P
- qca: Update firmware files for BT chip WCN3991.
- Removing crnv32
* Thu Sep 29 2022 Peter Robinson <pbrobinson(a)fedoraproject.org> - 20220913-140
- Update to upstream 20220913 release
- amdgpu: update yellow carp DMCUB firmware
- amdgpu: add firmware for VCN 3.1.2 IP block
- amdgpu: add firmware for SDMA 5.2.6 IP block
- amdgpu: add firmware for PSP 13.0.5 IP block
- amdgpu: add firmware for GC 10.3.6 IP block
- amdgpu: add firmware for DCN 3.1.5 IP block
- qcom: rename Lenovo ThinkPad X13s firmware paths
- rtw89: 8852c: update fw to v0.27.42.0
- Mellanox: Add new mlxsw_spectrum firmware xx.2010.3146
- amdgpu: update beige goby/dimgrey cavefish/navy flounder/sienna cichlid VCN firmware
- rtl_bt: Update RTL8852C BT USB firmware to 0xDFB8_5A33
- mediatek: reference the LICENCE file for MediaTek firmwares
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2109622 - 20220708 linux-firmware release breaks internet for Realtek RTL 8822ce card
https://bugzilla.redhat.com/show_bug.cgi?id=2109622
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-f82d476e16' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 36 Update: kernel-headers-6.0.5-200.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-267416288f
2022-10-29 19:31:59.264280
--------------------------------------------------------------------------------
Name : kernel-headers
Product : Fedora 36
Version : 6.0.5
Release : 200.fc36
URL : http://www.kernel.org/
Summary : Header files for the Linux kernel for use by glibc
Description :
Kernel-headers includes the C header files that specify the interface
between the Linux kernel and userspace libraries and programs. The
header files define structures and constants that are needed for
building most standard programs and are also needed for rebuilding the
glibc package.
--------------------------------------------------------------------------------
Update Information:
The 6.0.5 stable kernel rebase contains new features, improved hardware support,
and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 26 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.0.5-200
- Linux v6.0.5
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-267416288f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 36 Update: kernel-tools-6.0.5-200.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-267416288f
2022-10-29 19:31:59.264280
--------------------------------------------------------------------------------
Name : kernel-tools
Product : Fedora 36
Version : 6.0.5
Release : 200.fc36
URL : http://www.kernel.org/
Summary : Assortment of tools for the Linux kernel
Description :
This package contains the tools/ directory from the kernel source
and the supporting documentation.
--------------------------------------------------------------------------------
Update Information:
The 6.0.5 stable kernel rebase contains new features, improved hardware support,
and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 26 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.0.5-200
- Linux v6.0.5
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-267416288f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 36 Update: kernel-6.0.5-200.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-267416288f
2022-10-29 19:31:59.264280
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 36
Version : 6.0.5
Release : 200.fc36
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 6.0.5 stable kernel rebase contains new features, improved hardware support,
and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 26 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.0.5-200]
- Add release targets for stable rebase (Justin M. Forbes)
- Linux v6.0.5
* Fri Oct 21 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.0.3-0]
- drm/vc4: hdmi: Fix HSM clock too low on Pi4 (maxime(a)cerno.tech)
- Config updates for new options in 6.0.3 (Justin M. Forbes)
- Revert "redhat: properly handle binary files in patches" (Justin M. Forbes)
- Linux v6.0.3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-267416288f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months
Fedora 36 Update: python-pytelegrambotapi-4.7.1-1.fc36
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-f4e3c00c56
2022-10-29 19:31:59.264269
--------------------------------------------------------------------------------
Name : python-pytelegrambotapi
Product : Fedora 36
Version : 4.7.1
Release : 1.fc36
URL : https://github.com/eternnoir/pyTelegramBotAPI
Summary : Python Telegram Bot API implementation
Description :
A simple, but extensible Python implementation for the Telegram
Bot API.
It can be used to create powerful bots for the Telegram messenger.
--------------------------------------------------------------------------------
Update Information:
Updated to version 4.7.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 22 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 4.7.1-1
- Updated to version 4.7.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2136979 - python-pytelegrambotapi-4.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2136979
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-f4e3c00c56' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 5 months