Fedora 40 Update: golang-1.22.5-1.fc40
Fedora 40 Update: netatalk-3.2.1-1.fc40
Fedora 40 Update: rust-sequoia-openpgp-1.21.1-1.fc40
Fedora 40 Update: rust-sequoia-sq-0.37.0-3.fc40
Fedora 40 Update: rust-sequoia-keystore-0.5.1-1.fc40
Fedora 40 Update: rust-sequoia-chameleon-gnupg-0.10.0-3.fc40
Fedora 40 Update: rust-sequoia-gpg-agent-0.4.2-1.fc40
Fedora 40 Update: libnbd-1.20.2-1.fc40
Fedora 39 Update: ghostscript-10.02.1-5.fc39
Fedora 39 Update: rust-sequoia-sq-0.37.0-3.fc39
Fedora 39 Update: rust-sequoia-keystore-0.5.1-1.fc39
Fedora 39 Update: rust-sequoia-gpg-agent-0.4.2-1.fc39
Fedora 39 Update: rust-sequoia-openpgp-1.21.1-1.fc39
Fedora 39 Update: rust-sequoia-chameleon-gnupg-0.10.0-3.fc39
Fedora 40 Update: golang-1.22.5-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-96a7a68962
2024-07-09 01:53:44.501103
--------------------------------------------------------------------------------
Name : golang
Product : Fedora 40
Version : 1.22.5
Release : 1.fc40
URL : https://go.dev
Summary : The Go Programming Language
Description :
The Go Programming Language.
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2024-24791
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 7 2024 Packit [hello@packit.dev] - 1.22.5-1
- Update to 1.22.5 upstream release
- Resolves: rhbz#2295486
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-96a7a68962' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: netatalk-3.2.1-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-900475e0f7
2024-07-09 01:53:44.500984
--------------------------------------------------------------------------------
Name : netatalk
Product : Fedora 40
Version : 3.2.1
Release : 1.fc40
URL : http://netatalk.sourceforge.net
Summary : Open Source Apple Filing Protocol(AFP) File Server
Description :
Netatalk is a freely-available Open Source AFP file server. A *NIX/*BSD
system running Netatalk is capable of serving many Macintosh clients
simultaneously as an AppleShare file server (AFP).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Andrew Bauer [zonexpertconsulting@outlook.com] - 5:3.2.1-1
- 3.2.1 release, fixes CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2292817 - CVE-2024-38439 CVE-2024-38441 CVE-2024-38440 netatalk: multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=2292817
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-900475e0f7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: rust-sequoia-openpgp-1.21.1-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-12f0caa904
2024-07-09 01:53:44.500907
--------------------------------------------------------------------------------
Name : rust-sequoia-openpgp
Product : Fedora 40
Version : 1.21.1
Release : 1.fc40
URL : https://crates.io/crates/sequoia-openpgp
Summary : OpenPGP data types and associated machinery
Description :
OpenPGP data types and associated machinery.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Fabio Valentini [decathorpe@gmail.com] - 1.21.1-1
- Update to version 1.21.1; Fixes RHBZ#2294808
* Wed Jun 26 2024 Fabio Valentini [decathorpe@gmail.com] - 1.21.0-1
- Update to version 1.21.0; Fixes RHBZ#2294401
* Mon May 20 2024 Fabio Valentini [decathorpe@gmail.com] - 1.20.0-2
- Enable building the RustCrypto backend and run tests against it
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-12f0caa904' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: rust-sequoia-sq-0.37.0-3.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-12f0caa904
2024-07-09 01:53:44.500907
--------------------------------------------------------------------------------
Name : rust-sequoia-sq
Product : Fedora 40
Version : 0.37.0
Release : 3.fc40
URL : https://crates.io/crates/sequoia-sq
Summary : Command-line frontends for Sequoia
Description :
Command-line frontends for Sequoia.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Fabio Valentini [decathorpe@gmail.com] - 0.37.0-3
- Rebuild for sequoia-openpgp 1.21.1
* Wed Jun 26 2024 Fabio Valentini [decathorpe@gmail.com] - 0.37.0-2
- Rebuild for sequoia-openpgp 1.21.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-12f0caa904' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: rust-sequoia-keystore-0.5.1-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-12f0caa904
2024-07-09 01:53:44.500907
--------------------------------------------------------------------------------
Name : rust-sequoia-keystore
Product : Fedora 40
Version : 0.5.1
Release : 1.fc40
URL : https://crates.io/crates/sequoia-keystore
Summary : Sequoia's private key store server
Description :
Sequoia's private key store server.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 25 2024 Fabio Valentini [decathorpe@gmail.com] - 0.5.1-1
- Update to version 0.5.1; Fixes RHBZ#2293570
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-12f0caa904' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: rust-sequoia-chameleon-gnupg-0.10.0-3.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-12f0caa904
2024-07-09 01:53:44.500907
--------------------------------------------------------------------------------
Name : rust-sequoia-chameleon-gnupg
Product : Fedora 40
Version : 0.10.0
Release : 3.fc40
URL : https://crates.io/crates/sequoia-chameleon-gnupg
Summary : Sequoia's reimplementation of the GnuPG interface
Description :
Sequoia's reimplementation of the GnuPG interface.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Fabio Valentini [decathorpe@gmail.com] - 0.10.0-3
- Rebuild for sequoia-openpgp 1.21.1
* Wed Jun 26 2024 Fabio Valentini [decathorpe@gmail.com] - 0.10.0-2
- Rebuild for sequoia-openpgp 1.21.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-12f0caa904' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: rust-sequoia-gpg-agent-0.4.2-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-12f0caa904
2024-07-09 01:53:44.500907
--------------------------------------------------------------------------------
Name : rust-sequoia-gpg-agent
Product : Fedora 40
Version : 0.4.2
Release : 1.fc40
URL : https://crates.io/crates/sequoia-gpg-agent
Summary : Library for interacting with GnuPG's gpg-agent
Description :
A library for interacting with GnuPG's gpg-agent.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 25 2024 Fabio Valentini [decathorpe@gmail.com] - 0.4.2-1
- Update to version 0.4.2; Fixes RHBZ#2293569
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-12f0caa904' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 40 Update: libnbd-1.20.2-1.fc40
--
Fedora 39 Update: ghostscript-10.02.1-5.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-c45c747f02
2024-07-09 01:41:25.580230
--------------------------------------------------------------------------------
Name : ghostscript
Product : Fedora 39
Version : 10.02.1
Release : 5.fc39
URL : https://ghostscript.com/
Summary : Interpreter for PostScript language & PDF
Description :
This package provides useful conversion utilities based on Ghostscript software,
for converting PS, PDF and other document formats between each other.
Ghostscript is a suite of software providing an interpreter for Adobe Systems'
PostScript (PS) and Portable Document Format (PDF) page description languages.
Its primary purpose includes displaying (rasterization & rendering) and printing
of document pages, as well as conversions between different document formats.
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2024-33870, CVE-2024-29510
Fix for issues in gating
Security fix for CVE-2024-33871
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 27 2024 Zdenek Dohnal [zdohnal@redhat.com] - 10.02.1-5
- 2293951 - CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)
- 2293960 - CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
* Tue Jun 18 2024 Zdenek Dohnal [zdohnal@redhat.com] - 10.02.1-4
- backport Michael's fixes from F40
* Fri Jun 14 2024 Zdenek Dohnal [zdohnal@redhat.com] - 10.02.1-3
- 2283509 - CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2283508 - CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library
https://bugzilla.redhat.com/show_bug.cgi?id=2283508
[ 2 ] Bug #2293950 - CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)
https://bugzilla.redhat.com/show_bug.cgi?id=2293950
[ 3 ] Bug #2293959 - CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
https://bugzilla.redhat.com/show_bug.cgi?id=2293959
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-c45c747f02' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 39 Update: rust-sequoia-sq-0.37.0-3.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-029752e60b
2024-07-09 01:41:25.580220
--------------------------------------------------------------------------------
Name : rust-sequoia-sq
Product : Fedora 39
Version : 0.37.0
Release : 3.fc39
URL : https://crates.io/crates/sequoia-sq
Summary : Command-line frontends for Sequoia
Description :
Command-line frontends for Sequoia.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Fabio Valentini [decathorpe@gmail.com] - 0.37.0-3
- Rebuild for sequoia-openpgp 1.21.1
* Wed Jun 26 2024 Fabio Valentini [decathorpe@gmail.com] - 0.37.0-2
- Rebuild for sequoia-openpgp 1.21.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-029752e60b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 39 Update: rust-sequoia-keystore-0.5.1-1.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-029752e60b
2024-07-09 01:41:25.580220
--------------------------------------------------------------------------------
Name : rust-sequoia-keystore
Product : Fedora 39
Version : 0.5.1
Release : 1.fc39
URL : https://crates.io/crates/sequoia-keystore
Summary : Sequoia's private key store server
Description :
Sequoia's private key store server.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 25 2024 Fabio Valentini [decathorpe@gmail.com] - 0.5.1-1
- Update to version 0.5.1; Fixes RHBZ#2293570
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-029752e60b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 39 Update: rust-sequoia-gpg-agent-0.4.2-1.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-029752e60b
2024-07-09 01:41:25.580220
--------------------------------------------------------------------------------
Name : rust-sequoia-gpg-agent
Product : Fedora 39
Version : 0.4.2
Release : 1.fc39
URL : https://crates.io/crates/sequoia-gpg-agent
Summary : Library for interacting with GnuPG's gpg-agent
Description :
A library for interacting with GnuPG's gpg-agent.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 25 2024 Fabio Valentini [decathorpe@gmail.com] - 0.4.2-1
- Update to version 0.4.2; Fixes RHBZ#2293569
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-029752e60b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 39 Update: rust-sequoia-openpgp-1.21.1-1.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-029752e60b
2024-07-09 01:41:25.580220
--------------------------------------------------------------------------------
Name : rust-sequoia-openpgp
Product : Fedora 39
Version : 1.21.1
Release : 1.fc39
URL : https://crates.io/crates/sequoia-openpgp
Summary : OpenPGP data types and associated machinery
Description :
OpenPGP data types and associated machinery.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Fabio Valentini [decathorpe@gmail.com] - 1.21.1-1
- Update to version 1.21.1; Fixes RHBZ#2294808
* Wed Jun 26 2024 Fabio Valentini [decathorpe@gmail.com] - 1.21.0-1
- Update to version 1.21.0; Fixes RHBZ#2294401
* Mon May 20 2024 Fabio Valentini [decathorpe@gmail.com] - 1.20.0-2
- Enable building the RustCrypto backend and run tests against it
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-029752e60b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
Fedora 39 Update: rust-sequoia-chameleon-gnupg-0.10.0-3.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-029752e60b
2024-07-09 01:41:25.580220
--------------------------------------------------------------------------------
Name : rust-sequoia-chameleon-gnupg
Product : Fedora 39
Version : 0.10.0
Release : 3.fc39
URL : https://crates.io/crates/sequoia-chameleon-gnupg
Summary : Sequoia's reimplementation of the GnuPG interface
Description :
Sequoia's reimplementation of the GnuPG interface.
--------------------------------------------------------------------------------
Update Information:
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345.
Update the sequoia-keystore crate to version 0.5.1.
Update the sequoia-gpg-agent crate to version 0.4.2.
This update also includes rebuilds of all affected applications that are
affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 30 2024 Fabio Valentini [decathorpe@gmail.com] - 0.10.0-3
- Rebuild for sequoia-openpgp 1.21.1
* Wed Jun 26 2024 Fabio Valentini [decathorpe@gmail.com] - 0.10.0-2
- Rebuild for sequoia-openpgp 1.21.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-029752e60b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
