Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.

Read More

Multiple vulnerabilities have been discovered in Apple Products, the most severe of which could allow for arbitrary code execution.

iOS is a mobile operating system for mobile devices, including the iPhone, iPad, and iPod touch.
iPadOS is the successor to iOS 12 and is a mobile operating system for iPads.
macOS Catalina is the 16th major release of macOS
macOS Big Sur is the 17th release of macOS.
macOS Monterey is the 18th and current major release of macOS.
Safari is a graphical web browser developed by Apple.
tvOS is an operating system for fourth-generation Apple TV digital media player.
watchOS is the mobile operating system for Apple Watch and is based on the iOS operating system.

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Read More

FEDORA-2022-ce08b1c643

Packages in this update:

mingw-poppler-22.01.0-6.fc36

Update description:

Backport fix for CVE-2022-27337.

Read More

FEDORA-2022-964883b2a5

Packages in this update:

giflib-5.2.1-14.fc36

Update description:

Apply proposed patch for CVE-2022-28506.

Read More

FEDORA-2022-91f353b8be

Packages in this update:

giflib-5.2.1-9.fc35
mingw-giflib-5.2.1-7.fc35

Update description:

Apply proposed patch for CVE-2022-28506.

Read More

FEDORA-2022-ced8f872b1

Packages in this update:

mingw-harfbuzz-3.3.2-2.fc36

Update description:

Backport fix for CVE-2022-33068.

Read More

FEDORA-2022-ac58de6e98

Packages in this update:

mingw-harfbuzz-2.9.1-2.fc35

Update description:

Backport fix for CVE-2022-33068.

Read More

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.

Read More

FEDORA-2022-5038c3236c

Packages in this update:

golang-github-chromedp-cdproto-0-0.9.20220719git285dfb4.fc36
golang-k8s-sample-controller-1.22.0-5.fc36
golang-mongodb-mongo-driver-1.4.5-7.fc36
golang-mvdan-sh-3-3.4.3-5.fc36
golang-mvdan-xurls-2.2.0-7.fc36
golang-rsc-pdf-0.1.1-11.fc36
golang-sigs-k8s-aws-iam-authenticator-0.5.2-8.fc36
golang-sourcegraph-appdash-0-0.10.20210113gitebfcffb.fc36
golang-starlark-0-0.8.20210113gite81fc95.fc36
golang-storj-drpc-0.0.31-3.fc36
golang-vbom-util-0-0.12.20190520gitefcd4e0.fc36
golang-x-debug-0-0.15.20210123gitc934e1b.fc36
golang-x-exp-0-0.44.20220330git053ad81.fc36
golang-x-lint-0-17.20210123git83fdc39.fc36
golang-x-mobile-0-0.13.20220719git8578da9.fc36
golang-x-mod-0.6.0~dev-4.20220330git9b9b3d8.fc36
golang-x-perf-0-0.16.20210123gitbdcc622.fc36
golang-x-text-0.3.7-4.fc36
golang-x-tools-0.1.10-3.fc36
golist-0.10.1-10.fc36
goloris-0-0.7.20200326gita59fafb.fc36
gomtree-0.4.0-12.fc36
google-guest-agent-20201217.02-5.fc36
gotags-1.4.1-9.fc36
gotun-0-0.15.gita9dbe4d.fc36
grafana-7.5.15-4.fc36
gron-0.7.1-3.fc36
grpcurl-1.8.6-4.fc36
hakrevdns-0-0.6.20201116git9fa2d59.fc36
hcloud-1.30.0-2.fc36
htmltest-0.15.0-4.fc36
httprobe-0.1.2-7.fc36
hugo-0.93.3-6.fc36
hulk-0-0.7.20200620git9670699.fc36
ignition-2.14.0-3.fc36
jid-0.7.6-10.fc36
kata-containers-2.3.3-2.fc36.2
kiln-0.3.1-4.fc36
kompose-1.17.0-10.fc36
kubernetes-1.24.1-3.fc36
manifest-tool-2.0.3-3.fc36
mass3-0-0.7.20200627gite1d5f1a.fc36
meg-0.2.4-7.fc36
meshbird-2.3-7.fc36
micro-2.0.8-6.fc36
moby-engine-20.10.17-5.fc36
mqttcli-0.2.3-3.fc36
nats-server-2.1.9-7.fc36
nebula-1.6.0-2.fc36
netscanner-0-0.6.20201116git8baab36.fc36
nex-20210330-4.fc36
oci-seccomp-bpf-hook-1.2.6-2.fc36
ohmybackup-0-0.7.20200526git50f2fce.fc36
open-policy-agent-0.31.0-7.fc36
origin-3.11.2-7.fc36
osbuild-composer-57-2.fc36
pack-0.27.0-3.fc36
podman-tui-0.5.0-2.fc36
popub-0-0.14.20171007git6ffa11c.fc36
powerline-go-1.22.1-3.fc36
reg-0.16.1-9.fc36
reposurgeon-4.32-3.fc36
restic-0.12.1-4.fc36
runc-1.1.2-3.fc36
shellz-1.5.0-8.fc36
shhgit-0.2-8.fc36
skopeo-1.9.0-4.fc36
snapd-2.56.2-4.fc36
snowcrash-0-0.8.20201119git49b99ad.fc36
source-to-image-1.3.1-5.fc36
stargz-snapshotter-0.12.0-2.fc36
subfinder-2.5.2-3.fc36
swig-4.0.2-17.fc36
syncthing-1.20.3-2.fc36
sysutil-0-0.8.20200615git15668db.fc36
terrier-0.0.2-7.fc36
tiedot-3.4-9.fc36
tmux-top-0.1.1-3.fc36
toolbox-0.0.99.3-6.fc36
vgrep-2.6.0-3.fc36
vultr-2.0.3-6.fc36
vultr-cli-2.14.2-3.fc36
webanalyze-0.3.1-7.fc36
weldr-client-35.5-3.fc36
wgctrl-0-0.12.20210811git4253848.fc36
xe-guest-utilities-latest-7.30.0-6.fc36
xq-0.0.7-5.fc36
yggdrasil-0.2.98^1.ffb580f-0.3.20220127gitffb580f.fc36
yubihsm-connector-3.0.3-4.fc36

Update description:

Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang

See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.

Update to latest commit as of 20220719

Added

Experimental: nebula clients can be configured to act as relays for other nebula clients.
Primarily useful when stubborn NATs make a direct tunnel impossible. (#678)

Configuration option to report manually specified ip:ports to lighthouses. (#650)

Windows arm64 build. (#638)

punchy and most lighthouse config options now support hot reloading. (#649)

Changed

Build against go 1.18. (#656)

Promoted routines config from experimental to supported feature. (#702)

Dependencies updated. (#664)

Fixed

Packets destined for the same host that sent it will be returned on MacOS.
This matches the default behavior of other operating systems. (#501)

unsafe_route configuration will no longer crash on Windows. (#648)

A few panics that were introduced in 1.5.x. (#657, #658, #675)

Security

You can set listen.send_recv_error to control the conditions in which
recv_error messages are sent. Sending these messages can expose the fact
that Nebula is running on a host, but it speeds up re-handshaking. (#670)

Removed

x509 config stanza support has been removed. (#685)

bump to v4.2.0-rc1

fix package dir listing

resolve build issues and list new shell completion files

Release of stargz snapshotter v0.12.0. Please see the release note for details: https://github.com/containerd/stargz-snapshotter/releases/tag/v0.12.0

Fix extracting network metric

Read More

FEDORA-2022-37aef44d1e

Packages in this update:

golang-github-morikuni-aec-1.0.0-6.fc36
golang-github-mozillazg-pinyin-0.19.0-5.fc36
golang-github-mroach-rom64-0.5.3-2.fc36
golang-github-mrunalp-fileutils-0.5.0-6.fc36
golang-github-msprev-fzf-bibtex-1.1-6.20220205gitd5df2c6.fc36
golang-github-multiformats-multibase-0.0.3-3.20220213gitf067816.fc36
golang-github-multiformats-multihash-0.1.0-3.fc36
golang-github-mvo5-uboot-0.4-11.fc36
golang-github-nats-io-nkeys-0.2.0-6.fc36
golang-github-nats-io-streaming-server-0.20.0-6.fc36
golang-github-nbutton23-zxcvbn-0.1-9.20210110gite56b841.fc36
golang-github-nicksnyder-i18n-2-2.1.2-6.fc36
golang-github-niklasfasching-org-1.6.2-3.fc36
golang-github-oklog-0.3.2-12.20190701gitca7cdf5.fc36
golang-github-oklog-ulid-2.0.2-11.fc36
golang-github-olekukonko-tablewriter-0.0.5-4.fc36
golang-github-oneofone-xxhash-1.2.8-6.fc36
golang-github-onsi-ginkgo-2-2.1.4-3.fc36
golang-github-openprinting-ipp-usb-0.9.22-2.fc36
golang-github-pact-foundation-1.5.1-7.fc36
golang-github-path-network-mmproxy-2.1-4.fc36
golang-github-pdfcpu-0.3.13-3.fc36
golang-github-pelletier-toml-1.9.4-3.fc36
golang-github-pelletier-toml-2-2.0.0~beta.8-5.fc36
golang-github-phayes-freeport-1.0.2-7.fc36
golang-github-pierrec-lz4-4.1.3-6.fc36
golang-github-pierrre-geohash-1.0.0-5.fc36
golang-github-posener-complete-1.2.3-9.fc36
golang-github-posener-complete-2-2.0.1~alpha.13-6.fc36
golang-github-pquerna-ffjson-0-0.10.20200730gitaa0246c.fc36
golang-github-pressly-goose-2.7.0-5.fc36
golang-github-projectdiscovery-chaos-client-0.2.0-3.fc36
golang-github-projectdiscovery-mapcidr-0.0.8-4.fc36
golang-github-prometheus-2.32.1-7.fc36
golang-github-prometheus-node-exporter-1.3.1-10.fc36
golang-github-prometheus-prom2json-1.3.0-9.20210811git90766c0.fc36
golang-github-prometheus-tsdb-0.10.0-9.fc36
golang-github-quay-goval-parser-0.8.6-5.fc36
golang-github-rakyll-statik-0.1.7-9.fc36
golang-github-rcrowley-metrics-0-0.29.20210110gitcf1acfc.fc36
golang-github-redteampentesting-monsoon-0.6.0-7.fc36
golang-github-rickb777-date-1.19.1-3.fc36
golang-github-rogpeppe-internal-1.8.1-3.fc36
golang-github-rubenv-sql-migrate-0-0.6.20210529gita32ed26.fc36
golang-github-rwcarlsen-goexif-0-0.10.20191017git9e8deec.fc36
golang-github-schollz-croc-9.5.2-2.fc36
golang-github-schollz-mnemonicode-1.0.1-3.fc36
golang-github-segmentio-ksuid-1.0.4-4.fc36
golang-github-shellcode33-vm-detection-0-0.7.20200715git4fd05cb.fc36
golang-github-shopify-sarama-1.27.2-6.fc36
golang-github-shopify-toxiproxy-2.1.4-11.fc36
golang-github-shulhan-bindata-3.6.1-7.fc36
golang-github-shurcool-vfsgen-0-0.12.20210113git0d455de.fc36
golang-github-skip2-qrcode-0-3.20220316gitda1b656.fc36
golang-github-skynetservices-skydns-2.5.3-23.20200802git94b2ea0.fc36
golang-github-snappy-0.0.2-7.fc36
golang-github-sophaskins-efs2tar-0-0.5.20210317git4db1b0f.fc36
golang-github-sourcegraph-syntaxhighlight-0-0.12.20180418gitbd320f5.fc36
golang-github-spyzhov-ajson-0.4.2-11.fc36
golang-github-sqshq-sampler-1.1.0-10.fc36
golang-github-task-3.14.0-3.fc36
golang-github-tdewolff-minify-2.11.10-4.fc36
golang-github-temoto-robotstxt-1.1.2-4.fc36
golang-github-theoapp-theo-agent-0.14.0-5.fc36
golang-github-theupdateframework-notary-0.7.0-7.fc36
golang-github-tinylib-msgp-1.1.5-6.fc36
golang-github-tklauser-numcpus-0.2.3-8.fc36
golang-github-tomnomnom-xtermcolor-0.1.2-9.fc36
golang-github-tscholl2-siec-0-4.20211128git9bdfc48.fc36
golang-github-twitchtv-twirp-8.1.0-5.fc36
golang-github-twpayne-waypoint-0-0.5.20210130git4f8e6bf.fc36
golang-github-uber-athenadriver-1.1.12-6.fc36
golang-github-uber-jaeger-client-2.30.0-3.fc36
golang-github-ulikunitz-xz-0.5.10-5.fc36
golang-github-u-root-iscsinl-0.1.0-5.fc36
golang-github-valyala-fasthttp-1.29.0-4.fc36
golang-github-vbatts-tar-split-0.11.1-11.fc36
golang-github-vincent-petithory-dataurl-0-0.8.20200110gitd1553a7.fc36
golang-github-xordataexchange-crypt-0.0.2-13.20190412gitb2862e3.fc36
golang-github-xo-terminfo-0-0.7.20210113gitc22d04b.fc36
golang-github-yuin-gopher-lua-0-24.20220305gitf4c35e4.fc36
golang-github-zyedidia-highlight-0-0.7.20200218git291680f.fc36
golang-gitlab-commonmark-linkify-0-0.10.20200805git64bca66.fc36
golang-google-appengine-1.6.7-6.fc36
golang-google-protobuf-1.27.1-6.fc36
golang-gopkg-neurosnap-sentences-1-1.0.6-15.fc36
golang-gopkg-square-jose-2-2.6.0-4.fc36
golang-gopkg-src-d-git-4-4.13.1-9.fc36
golang-honnef-tools-2021.1.2-3.20220304git852a31a.fc36
golang-jaytaylor-html2text-0-0.3.20220509gitbc68cce.fc36
golang-k8s-apiextensions-apiserver-1.22.0-7.fc36
golang-k8s-code-generator-1.22.0-5.fc36
golang-k8s-kube-aggregator-1.22.0-5.fc36
golang-k8s-kube-openapi-0-0.22.20210813git3c81807.fc36
golang-k8s-pod-security-admission-1.22.0-4.fc36
golang-k8s-sample-apiserver-1.22.0-6.fc36
golang-k8s-sample-cli-plugin-1.22.0-5.fc36

Update description:

Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang

See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.

enable s390x build (rhbz#1971028)

Read More