Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 3 articles for you...
89
security advisoryfedoraregression fixFedora 43: rust-get-size-derive2 Update 2025-312ac3e645
Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-312ac3e645 2025-11-10 00:46:08.034331+00:00 -------------------------------------------------------------------------------- Name : rust-get-size-derive2 Product : Fedora 43 Version : 0.7.1 Release : 1.fc43 URL : https://crates.io/crates/get-size-derive2 Summary : Derives the GetSize trait Description : Derives the GetSize trait. -------------------------------------------------------------------------------- Update Information: Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types. This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any. https://github.com/pydantic/pydantic/releases/tag/v2.12.4 uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details. https://github.com/astral-sh/uv/releases/tag/0.9.6 ruff 0.14.3 https://github.com/astral-sh/ruff/releases/tag/0.14.3 Update rust-get-size2/rust-get-size-derive2 to 0.7.1 (implement GetSize for RefCell). Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1. Update rust-regex to 1.12.2 and rust-regex-automata to0.4.13. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 26 2025 Benjamin A. Beasley - 0.7.1-1 - Update to version 0.7.1; Fixes RHBZ#2406420 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2403244 - rust-regex-1.12.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2403244 [ 2 ] Bug #2403245 - rust-regex-automata-0.4.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2403245 [ 3 ] Bug #2406419 - rust-get-size2-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406419 [ 4 ] Bug #2406420 - rust-get-size-derive2-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406420 [ 5 ] Bug #2411957 - python-cloudpickle-3.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411957 [ 6 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411978 [ 7 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411979 [ 8 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411980 [ 9 ] Bug #2411981 - rust-reqsign-0.18.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411981 [ 10 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411982 [ 11 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2411983 [ 12 ] Bug #2412643 - python-pydantic-2.12.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2412643 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-312ac3e645' at the command line. For moreinformation, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 10, 2025
•Informational
Fedora
89
security advisoryupdateFedoraFedora 41 python3-docs: 2025-e911f71d99 Critical segfault fix
Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while running.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e911f71d99 2025-02-09 01:17:00.288850+00:00 -------------------------------------------------------------------------------- Name : python3-docs Product : Fedora 41 Version : 3.13.2 Release : 1.fc41 URL : https://www.python.org/ Summary : Documentation for the Python 3 programming language Description : The python3-docs package contains documentation on the Python 3 programming language and interpreter. -------------------------------------------------------------------------------- Update Information: Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while running. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 6 2025 Tomáš HrnÄiar - 3.13.2-1 - Update to 3.13.2 * Sat Jan 18 2025 Fedora Release Engineering - 3.13.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2333852 - python 3.13.0 segfaults when importing modules (e.g. _datetime) after update to 3.13.1 https://bugzilla.redhat.com/show_bug.cgi?id=2333852 [ 2 ] Bug #2343274 - CVE-2025-0938 python3.13: URL parser allowed square brackets in domain names [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2343274 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e911f71d99' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fixes crash issue in python3-guide on Fedora 41, offering essential enhancements for coder efficiency.. Python Documentation, Security Updates, Fedora 41, Segfault Fixes. . Severity: Critical. LinuxSecurity.com Team
Feb 09, 2025
•Critical
Fedora
89
security advisorymoderatesecurity issueFedora 38: FEDORA-2023-52ag7b23f0 High: Python Package Update
updated to July security update 20.0.2.9 portables. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-469d0d1a18 2023-08-16 01:20:55.660826 -------------------------------------------------------------------------------- Name : java-latest-openjdk Product : Fedora 38 Version : 20.0.2.0.9 Release : 1.rolling.fc38 URL : https://openjdk.org/ Summary : OpenJDK 20 Runtime Environment Description : The OpenJDK 20 runtime environment. -------------------------------------------------------------------------------- Update Information: updated to July security update 20.0.2.9 portables -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 7 2023 Jiri Vanek - 1:20.0.2.0.9-2.rolling - updated to July security update 20.0.2.9 portables * Thu Jul 20 2023 Fedora Release Engineering - 1:20.0.1.0.9-8.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu May 11 2023 Andrew Hughes - 1:20.0.1.0.9-8.rolling - Following JDK-8005165, class data sharing can be enabled on all JIT architectures * Wed May 10 2023 Severin Gehwolf - 1:20.0.1.0.9-6.rolling - Fix packaging of CDS archives * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-6.rolling - faking build-id in libjsvml.so * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-5.rolling - returned news * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-4.rolling - now expecting the exact version in portbale filename * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-3.rolling - updated to 20.0.1.0.9 underlying portables * Wed Apr 19 2023 Jiri Vanek - 1:20.0.0.0.36-3.rolling - using icons from source package - providing full sources via src package - requiring exact version.reelase of portables - returned libsystemconf.so * Mon Apr 3 2023 Jiri Vanek - 1:20.0.0.0.36-1.rolling - bumed to jdk20 - removed no loger existing libsystemconf.so - commented out usage ifSource15 TestSecurityProperties.java test, as honoring of -- system crypto policies comes from fips aptch which is not yet adapted * Mon Jan 30 2023 Jiri Vanek - 1:19.0.2.0.7-5.rolling - Using icons whcih are now part of the portble tarball * Mon Jan 30 2023 Jiri Vanek - 1:19.0.2.0.7-4.rolling - repacked bits are now requested in exact version * Mon Jan 30 2023 Petra Alice Mikova - 1:19.0.2.0.7-3.rolling - return libfreetype.so binary to resolve requires problems - remove BuildRequires: java-latest-openjdk * Thu Jan 26 2023 Jiri Vanek - 1:19.0.2.0.7-2.rolling - repacked portables - todo icons - disabled tzdata tests - todo, resolve - left some duplicated "final tunings" - todo, lost alt java manpage.. probably already in portables - TODO conslut this clean up - javdoc, freetype and NEWS - todo, debuginfo * Thu Jan 26 2023 Andrew Hughes - 1:19.0.2.0.7-1.rolling - Update to jdk-19.0.2 release - Update release notes to 19.0.2 - Drop JDK-8293834 (CLDR update for Kyiv) which is now upstream - Drop JDK-8294357 (tzdata2022d), JDK-8295173 (tzdata2022e) & JDK-8296108 (tzdata2022f) local patches which are now upstream - Drop JDK-8296715 (CLDR update for 2022f) which is now upstream - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases * Thu Jan 19 2023 Fedora Release Engineering - 1:19.0.1.0.10-3.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Dec 16 2022 Andrew Hughes - 1:19.0.1.0.10-3.rolling - Update in-tree tzdata & CLDR to 2022g with JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone * Wed Dec 7 2022 Stephan Bergmann - 1:19.0.1.0.10-3.rolling - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat * Wed Oct 26 2022 Andrew Hughes - 1:19.0.1.0.10-2.rolling - Update in-tree tzdata to 2022ewith JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream * Thu Oct 20 2022 Andrew Hughes - 1:19.0.1.0.10-1.rolling - Update to jdk-19.0.1 release - Update release notes to 19.0.1 * Wed Sep 21 2022 Andrew Hughes - 1:19.0.0.0.36-3.rolling - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds - Remove freetype sources along with zlib sources * Tue Aug 30 2022 Andrew Hughes - 1:19.0.0.0.36-2.rolling - Switch buildjdkver back to being featurever, now java-19-openjdk is available in the buildroot * Mon Aug 29 2022 Andrew Hughes - 1:19.0.0.0.36-2.rolling - Switch to static builds, reducing system dependencies and making build more portable * Mon Aug 29 2022 Andrew Hughes - 1:19.0.0.0.36-1.rolling - Update to RC version of OpenJDK 19 - Update release notes to 19.0.0 - Rebase FIPS patches from fips-19u branch - Need to include the '.S' suffix in debuginfo checks after JDK-8284661 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Remove references to sample directory removed by JDK-8284999 * Fri Jul 22 2022 Andrew Hughes - 1:18.0.2.0.9-1.rolling - Update to jdk-18.0.2 release - Update release notes to 18.0.2 - Drop JDK-8282004 patch which is now upstreamed under JDK-8282231 - Exclude x86 where java_arches is undefined, in order to unbreak build * Fri Jul 22 2022 Jiri Vanek - 1:18.0.1.1.2-8.rolling - moved to build only on %{java_arches} -- https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs - reverted : -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild (always mess up release) -- Try to build on x86 again by creating a husk of a JDK which does not depend on itself -- Exclude x86 from builds as the bootstrap JDK is now completely broken andunusable -- Replaced binaries and .so files with bash-stubs on i686 - added ExclusiveArch: %{java_arches} -- this now excludes i686 -- this is safely backport-able to older fedoras, as the macro was backported properly (with i686 included) - https://bugzilla.redhat.com/show_bug.cgi?id=2104125 * Thu Jul 21 2022 Fedora Release Engineering - 1:18.0.1.1.2-7.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jul 19 2022 Andrew Hughes - 1:18.0.1.1.2-7.rolling - Try to build on x86 again by creating a husk of a JDK which does not depend on itself * Sun Jul 17 2022 Andrew Hughes - 1:18.0.1.1.2-6.rolling - Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable * Wed Jul 13 2022 Andrew Hughes - 1:18.0.1.1.2-5.rolling - Explicitly require crypto-policies during build and runtime for system security properties * Wed Jul 13 2022 Jiri Vanek - 1:18.0.1.1.2-4.rolling. - Replaced binaries and .so files with bash-stubs on i686 in preparation of the removal on that architecture: - https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs * Wed Jul 13 2022 Andrew Hughes - 1:18.0.1.1.2-3.rolling - Make use of the vendor version string to store our version & release rather than an upstream release date * Tue Jul 12 2022 FeRD (Frank Dana) - 1:18.0.1.1.2-2.rolling - Add javaver- and origin-specific javadoc and javadoczip alternatives. * Mon Jul 11 2022 Andrew Hughes - 1:18.0.1.1.2-1.rolling - Update to jdk-18.0.1.1 interim release - Update release notes to actually reflect OpenJDK 18 and subsequent releases 18.0.1 & 18.0.1.1 - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 * Sat Jul 9 2022 Jayashree Huttanagoudar - 1:18.0.1.0.10-8.rolling - Fix issue where CheckVendor.java test erroneously passes whenit should fail. - Add proper quoting so '&' is not treated as a special character by the shell. * Sat Jul 9 2022 Andrew Hughes - 1:18.0.1.0.10-8.rolling - Include a test in the RPM to check the build has the correct vendor information. * Fri Jul 8 2022 Andrew Hughes - 1:18.0.1.0.10-7.rolling - Fix whitespace in spec file * Fri Jul 8 2022 Andrew Hughes - 1:18.0.1.0.10-7.rolling - Sequence spec file sections as they are run by rpmbuild (build, install then test) * Fri Jul 8 2022 Andrew Hughes - 1:18.0.1.0.10-7.rolling - Turn on system security properties as part of the build's install section - Move cacerts replacement to install section and retain original of this and tzdb.dat - Run tests on the installed image, rather than the build image - Introduce variables to refer to the static library installation directories - Use relative symlinks so they work within the image - Run debug symbols check during build stage, before the install strips them * Thu Jul 7 2022 Stephan Bergmann - 1:18.0.1.0.10-6.rolling - Fix flatpak builds by exempting them from bootstrap * Thu Jun 30 2022 Francisco Ferrari Bihurriet - 1:18.0.1.0.10-5.rolling - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode * Thu Jun 30 2022 Stephan Bergmann - 1:18.0.1.0.10-4.rolling - Fix flatpak builds (catering for their uncompressed manual pages) * Fri Jun 24 2022 Andrew Hughes - 1:18.0.1.0.10-3.rolling - Update FIPS support to bring in latest changes - * RH2023467: Enable FIPS keys export - * RH2094027: SunEC runtime permission for FIPS - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage - * RH2090378: Revert to disabling system security properties and FIPS mode support together - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch - Enable system security properties in the RPM (now disabled by default in the FIPS repo) - Improve security properties test to check both enabled and disabled behaviour - Run security properties testwith property debugging on - Minor sync-ups with java-17-openjdk spec file * Wed May 25 2022 Andrew Hughes - 1:18.0.1.0.10-2.rolling - Exclude s390x from the gdb test on RHEL 7 where we see failures with the portable build * Wed Apr 27 2022 Jiri Vanek - 1:18.0.1.0.10-1.rolling. - updated to CPU jdk-18.0.1+10 sources * Wed Apr 6 2022 Jiri Vanek - 1:18.0.0.0.37-4.rolling - Remove hardcoded /usr/lib/jvm by %{_jvmdir} to make rpmlint happy * Wed Mar 23 2022 Andrew Hughes - 1:18.0.0.0.37-3.rolling - Automatically turn off building a fresh HotSpot first, if the bootstrap JDK is not the same major version as that being built * Mon Mar 21 2022 Jiri Vanek - 1:18.0.0.0.37-2.rolling - replaced tabs by sets of spaces to make rpmlint happy - set build jdk to 18 - as ga is 1, set vendor_version_string to 22.3 * Wed Mar 16 2022 Andrew Hughes - 1:18.0.0.0.37-1.rolling - Update to RC version of OpenJDK 18 - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory - Disable HotSpot-only pre-build which is incompatible with the boot JDK being a different major version to that being built - Rebase FIPS patches from fips-18u branch and simplify by using a single patch from that repository - Detect NSS at runtime for FIPS detection - Turn off build-time NSS linking and go back to an explicit Requires on NSS - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch * Wed Mar 16 2022 Petra Alice Mikova - 1:18.0.0.0.37-1.rolling - update to ea version of jdk18 - add new slave jwebserver and corresponding manpage - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch * Wed Feb 16 2022 Andrew Hughes - 1:17.0.2.0.8-5 - Reinstate JIT builds on x86_32. - Add JDK-8282004 to fix missing CALL effects on x86_32. * Mon Feb 7 2022 Severin Gehwolf - 1:17.0.2.0.8-4 - Re-enable gdb backtrace check. - ResolvesRHBZ#2041970 * Fri Feb 4 2022 Andrew Hughes - 1:17.0.2.0.8-3 - Temporarily move x86 to use Zero in order to get a working build - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK. - Explicitly list JIT architectures rather than relying on those with slowdebug builds - Disable the serviceability agent on Zero architectures even when the architecture itself is supported * Mon Jan 24 2022 Andrew Hughes - 1:17.0.2.0.8-2.rolling - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Need to support noarch for creating source RPMs for non-scratch builds. * Mon Jan 24 2022 Andrew Hughes - 1:17.0.2.0.8-1.rolling - January 2022 security update to jdk 17.0.2+8 - Extend LTS check to exclude EPEL. - Rename libsvml.so to libjsvml.so following JDK-8276025 - Remove JDK-8276572 patch which is now upstream. - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java * Mon Jan 24 2022 Severin Gehwolf - 1:17.0.2.0.8-1.rolling - Set LTS designator. * Mon Jan 24 2022 Andrew Hughes - 1:17.0.1.0.12-16.rolling - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent * Thu Jan 20 2022 Fedora Release Engineering - 1:17.0.1.0.12-15.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Jan 18 2022 Andrew Hughes - 1:17.0.1.0.12-15.rolling - Sync gdb test with java-1.8.0-openjdk and improve architecture restrictions. - Disable on x86, x86_64, ppc64le & s390x while these are broken in rawhide. * Thu Jan 13 2022 Andrew Hughes - 1:17.0.1.0.12-14.rolling - Fix FIPS issues in native code and with initialisation of java.security.Security * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-13.rolling - Storing and restoring alterntives during update manually - Fixing Bug 2001567 - update ofJDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE -- The move of alternatives creation to posttrans to fix: -- Bug 1200302 - dnf reinstall breaks alternatives -- Had caused the alternatives to be removed, and then created again, -- instead of being added, and then removing the old, and thus persisting -- the selection in family -- Thus this fix, is storing the family of manually selected master, and if -- stored, then it is restoring the family of the master * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-12.rolling - Family extracted to globals * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-11.rolling - javadoc-zip got its own provides next to plain javadoc ones * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-10.rolling - replaced tabs by sets of spaces to make rpmlint happy * Mon Nov 29 2021 Andrew Hughes - 1:17.0.1.0.12-9.rolling - Handle Fedora in distro conditionals that currently only pertain to RHEL. * Fri Nov 5 2021 Andrew Hughes - 1:17.0.1.0.12-8.rolling - Patch syslookup.c so it actually has some code to be compiled into libsyslookup - Related: rhbz#2013846 * Wed Nov 3 2021 Severin Gehwolf - 1:17.0.1.0.12-7.rolling - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy secmod.db file as part of nss * Wed Nov 3 2021 Andrew Hughes - 1:17.0.1.0.12-6.rolling - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. * Thu Oct 28 2021 Andrew Hughes - 1:17.0.1.0.12-5.rolling - Sync desktop files with upstream IcedTea release 3.15.0 using new script * Tue Oct 26 2021 Andrew Hughes - 1:17.0.1.0.12-4.rolling - Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build * Tue Oct 26 2021 Jiri Vanek - 1:17.0.1.0.12-3.rolling - Minor cosmetic improvements to make spec more comparable between variants * Thu Oct 21 2021 Andrew Hughes -1:17.0.1.0.12-2.rolling - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap-> _heaps) and @JAVA_SPEC_VER@ - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository * Wed Oct 20 2021 Petra Alice Mikova - 1:17.0.1.0.12-1.rolling - October CPU update to jdk 17.0.1+12 - dropped commented-out source line * Sun Oct 10 2021 Andrew Hughes - 1:17.0.0.0.35-5.rolling - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false * Sun Oct 10 2021 Martin Balao - 1:17.0.0.0.35-5.rolling - Add patch to allow plain key import. * Thu Sep 30 2021 Andrew Hughes - 1:17.0.0.0.35-4.rolling - Fix unused function compiler warning found in systemconf.c - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access. * Thu Sep 30 2021 Martin Balao - 1:17.0.0.0.35-4.rolling - Add patch to login to the NSS software token when in FIPS mode. * Mon Sep 27 2021 Andrew Hughes - 1:17.0.0.0.35-3.rolling - Update release notes to document the major changes between OpenJDK 11 & 17. * Thu Sep 16 2021 Martin Balao - 1:17.0.0.0.35-2.rolling - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers. * Tue Sep 14 2021 Andrew Hughes - 1:17.0.0.0.35-1.rolling - Update to jdk-17+35, also known as jdk-17-ga. - Switch to GA mode. * Wed Sep 8 2021 Andrew Hughes - 1:17.0.0.0.33-0.3.ea.rolling - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. * Wed Sep 8 2021 Martin Balao - 1:17.0.0.0.33-0.3.ea.rolling - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. * Mon Sep 6 2021 Andrew Hughes - 1:17.0.0.0.33-0.2.ea.rolling - Update RH1655466 FIPS patch with changes in OpenJDK 8 version. - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file. - Change nss.fips.cfgconfig name to "NSS-FIPS" to avoid confusion with nss.cfg. - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable. - Disable FIPS mode support unless com.redhat.fips is set to "true". - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable). - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071) * Mon Sep 6 2021 Martin Balao - 1:17.0.0.0.33-0.2.ea.rolling - Support the FIPS mode crypto policy (RH1655466) - Use appropriate keystore types when in FIPS mode (RH1818909) - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986) * Mon Aug 30 2021 Jiri Vanek - 1:17.0.0.0.33-0.1.ea.rolling - alternatives creation moved to posttrans - Thus fixing the old reisntall issue: - https://bugzilla.redhat.com/show_bug.cgi?id=1200302 - https://bugzilla.redhat.com/show_bug.cgi?id=1976053 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-469d0d1a18' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Aug 16, 2023
Fedora
89
security advisoryfedoracriticalFedora 38 - FEDORA-2023-f3824383be Critical Update: Python Requests Leak
Update to requests-2.31.0.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-f3824383be 2023-06-04 01:22:08.238926 --------------------------------------------------------------------------------Name : mingw-python-requests Product : Fedora 38 Version : 2.31.0 Release : 1.fc38 URL : https://requests.readthedocs.io/en/latest/ Summary : MinGW Windows Python requests library Description : MinGW Windows Python requests. --------------------------------------------------------------------------------Update Information: Update to requests-2.31.0. --------------------------------------------------------------------------------ChangeLog: * Thu May 25 2023 Sandro Mani - 2.31.0-1 - Update to 2.31.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #2209471 - CVE-2023-32681 mingw-python-requests: python-requests: Unintended leak of Proxy-Authorization header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2209471 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-f3824383be' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jun 04, 2023
•Critical
Fedora
89
security advisorysoftware updateFedoraUbuntu 20.04: 2021-da1a4c70bc High: ImageMagick Vulnerability Fix
- New upstream release 3.2.8a - Add patches from upstream git fixing a couple of issues which may have security implications (CVE-2021-3561). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-dab56300b1 2021-06-07 00:51:22.091384 --------------------------------------------------------------------------------Name : transfig Product : Fedora 33 Version : 3.2.8a Release : 2.fc33 URL : https://sourceforge.net/projects/mcj/ Summary : Utility for converting FIG files (made by xfig) to other formats Description : The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages. --------------------------------------------------------------------------------Update Information: - New upstream release 3.2.8a - Add patches from upstream git fixing a couple of issues which may have security implications (CVE-2021-3561) --------------------------------------------------------------------------------ChangeLog: * Sat May 29 2021 Hans de Goede - 1:3.2.8a-2 - Add patches from upstream git fixing a couple of issues which may have security implications (CVE-2021-3561) * Mon Mar 29 2021 Ondrej Dubaj - 1:3.2.8a-1 - Updated to version 3.2.8a * Wed Jan 27 2021 Fedora Release Engineering - 1:3.2.7b-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-dab56300b1' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jun 06, 2021
Fedora
89
security advisorysecurity issuesoftware updateFedora: 2020-fed59ab473 moderate: nodejs 12.18.3 Update Notification
Update to 12.18.3. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-fed59ab473 2020-08-11 13:28:44.463884 --------------------------------------------------------------------------------Name : nodejs Product : Fedora 31 Version : 12.18.3 Release : 1.fc31 URL : https://nodejs.org/en/ Summary : JavaScript runtime Description : Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. --------------------------------------------------------------------------------Update Information: Update to 12.18.3 --------------------------------------------------------------------------------ChangeLog: * Mon Aug 3 2020 Stephen Gallagher - 1:12.18.3-1 - Update to 12.18.3 * Tue Jul 7 2020 Stephen Gallagher - 1:12.18.2-1 - Update to 12.18.2 * Tue Jul 7 2020 Stephen Gallagher - 1:14.4.0-2 - Update for new packaging guidelines - Disable LTO * Thu Jun 4 2020 Zuzana Svetlikova - 1:12.18.0-1 - Security update to 12.18.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1867107 - Update to latest Node.js 12 (currently 12.18.3, includes security fixes) https://bugzilla.redhat.com/show_bug.cgi?id=1867107 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-fed59ab473' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Aug 11, 2020
Fedora
89
security advisoryFedoraPerl scriptFedora 26: Git Shell Unsafe Input Issue Resolved - Moderate Severity
These releases are about hardening `git shell` that is used on servers against an unsafe user input, which `git cvsserver` copes with poorly. From the release notes: * "git cvsserver" no longer is invoked by "git shell" by default, as it is old and largely unmaintained. * Various Perl scripts did not use safe_pipe_capture() instead of backticks, leaving them susceptible to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-9b35152c83 2017-09-28 16:42:23.950922 --------------------------------------------------------------------------------Name : git Product : Fedora 26 Version : 2.13.6 Release : 1.fc26 URL : https://git-scm.com/ Summary : Fast Version Control System Description : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages, including tools for integrating with other SCMs, install the git-all meta-package. --------------------------------------------------------------------------------Update Information: These releases are about hardening `git shell` that is used on servers against an unsafe user input, which `git cvsserver` copes with poorly. From the release notes: * "git cvsserver" no longer is invoked by "git shell" by default, as it is old and largely unmaintained. * Various Perl scripts did not use safe_pipe_capture() instead of backticks, leaving them susceptible to end-user input. They have been corrected. Credits go to joernchen for finding the unsafe constructs in "git cvsserver", and to Jeff King at GitHub for finding and fixing instances of the same issue in other scripts. References: --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade git' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 28, 2017
Fedora
98
security advisoryRed Hat Enterprise Linuxlow severityRHEL 6.5 EUS Retirement Notice: RHSA-2015:1955-01 Low Severity Notice
This is the One-Month notification for the retirement of Red Hat Enterprise Linux 6.5 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.5.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Low: Red Hat Enterprise Linux 6.5 Extended Update Support One-Month Notice Advisory ID: RHSA-2015:1955-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1955.html Issue date: 2015-10-29 ==================================================================== 1. Summary: This is the One-Month notification for the retirement of Red Hat Enterprise Linux 6.5 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.5. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server EUS (v. 6.5) - i386, ppc64, s390x, x86_64 3. Description: In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support for Red Hat Enterprise Linux 6.5 will be retired as of November 30, 2015, and support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical impact security patches or urgent priority bug fixes, for Red Hat Enterprise Linux 6.5 EUS after November 30, 2015. In addition, technical support through Red Hat's Global Support Services will be limited as described under "non-current minor releases" in the Knowledge Base article located at https://access.redhat.com/articles/64664 after this date. We encourage customers to migrate from Red Hat Enterprise Linux 6.5 to a more recent version of Red Hat Enterprise Linux. As a benefit of the Red Hat subscription model, customers can use their active subscriptions to entitle any systemon any currently supported Red Hat Enterprise Linux release. Details of the Red Hat Enterprise Linux life cycle can be found here: https://access.redhat.com/support/policy/updates/errata/ 4. Solution: This erratum contains an updated redhat-release-server package that provides a copy of this retirement notice in the "/usr/share/doc/" directory. 5. Package List: Red Hat Enterprise Linux Server EUS (v. 6.5): Source: redhat-release-server-6Server-6.5.0.3.el6_5.1.src.rpm i386: redhat-release-server-6Server-6.5.0.3.el6_5.1.i686.rpm ppc64: redhat-release-server-6Server-6.5.0.3.el6_5.1.ppc64.rpm s390x: redhat-release-server-6Server-6.5.0.3.el6_5.1.s390x.rpm x86_64: redhat-release-server-6Server-6.5.0.3.el6_5.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 6. References: https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/articles/64664 https://access.redhat.com/support/policy/updates/errata/ 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFWMna1XlSAg2UNWIIRAhNPAJ9sLKzUENe//uWrrbfTiFV9QA4/SwCghAzl vkDua94UeQXkoq/17euDzWU=cPUq -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Oct 29, 2015
•Low
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!