[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-21:08.freebsd-update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

=============================================================================
FreeBSD-EN-21:08.freebsd-update Errata Notice
The FreeBSD Project

Topic: freebsd-update passwd regeneration

Category: core
Module: freebsd-update
Announced: 2021-02-24
Affects: All supported versions of FreeBSD.
Corrected: 2020-12-27 20:50:53 UTC (stable/12, 12.2-STABLE)
2021-02-24 01:43:52 UTC (releng/12.2, 12.2-RELEASE-p4)
2020-12-27 20:52:37 UTC (stable/11, 11.4-STABLE)
2021-02-24 01:41:49 UTC (releng/11.4, 11.4-RELEASE-p8)

For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.

I. Background

freebsd-update provides binary updates for supported releases of FreeBSD on
amd64 and i386.

II. Problem Description

The existing logic to try and avoid regenerating passwd/login.conf files
relies on timestamp comparisons between old and new files, with the caveat
that it's comparing the installed with a timestamp that has been clobbered to
do the comparison.

III. Impact

User and login.conf changes coming in from a binary update may not properly
regenerate the databases for the changes to take effect.

IV. Workaround

To workaround this issue, one may regenerate databases manually with
pwd_mkdb(8) and cap_mkdb(1), e.g.,

pwd_mkdb -p /etc/master.passwd
cap_mkdb /etc/login.conf

V. Solution

Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date. No reboot is required.

Perform one of the following:

1) To update your system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:

# freebsd-update fetch
# freebsd-update install

2) To update your system via a source code patch:

The following patches have been verified to apply to the applicable
FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch https://security.FreeBSD.org/patches/EN-21:08/freebsd-update.patch
# fetch https://security.FreeBSD.org/patches/EN-21:08/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc

b) Apply the patch. Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch

c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.

VI. Correction details

The following list contains the correction revision numbers for each
affected branch.

Branch/path Revision
- -------------------------------------------------------------------------
stable/12/ r368873
releng/12.2/ r369356
stable/11/ r368824
releng/11.4/ r369349
- -------------------------------------------------------------------------

To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:

# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

VII. References

The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-21:08.freebsd-update.asc>
-----BEGIN PGP SIGNATURE-----
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=C5YV
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-announce@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-21:07.caroot

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

=============================================================================
FreeBSD-EN-21:07.caroot Errata Notice
The FreeBSD Project

Topic: Root certificate bundle update

Category: core
Module: caroot
Announced: 2021-02-24
Affects: FreeBSD 12.2
Corrected: 2020-12-15 21:50:05 UTC (stable/12, 12.2-STABLE)
2021-02-24 01:43:56 UTC (releng/12.2, 12.2-RELEASE-p4)

For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.

I. Background

The root certificate bundle is the trust store that is used by OpenSSL
programs and libraries to aide in determining whether it should trust
a given SSL certificate.

II. Problem Description

Several certificates were removed from the bundle after the latest release
of FreeBSD 12.2.

III. Impact

Certificates are often removed from the root bundle due to a failure to
meet the standards established by Mozilla for being considered a trusted
Certificate Authority.

IV. Workaround

No workaround is available. Software that uses an internal trust store
is not affected.

V. Solution

Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.

Perform one of the following:

1) To update your system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:

# freebsd-update fetch
# freebsd-update install

2) To update your system via a source code patch:

The following patches have been verified to apply to the applicable
FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch https://security.FreeBSD.org/patches/EN-21:07/caroot.patch
# fetch https://security.FreeBSD.org/patches/EN-21:07/caroot.patch.asc
# gpg --verify caroot.patch.asc

b) Apply the patch. Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch

c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.

Restart all applications that may be using OpenSSL, or reboot the system.

VI. Correction details

The following list contains the correction revision numbers for each
affected branch.

Branch/path Revision
- -------------------------------------------------------------------------
stable/12/ r368678
releng/12.2/ r369357
- -------------------------------------------------------------------------

To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:

# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

VII. References

The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-21:07.caroot.asc>
-----BEGIN PGP SIGNATURE-----
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=LVRY
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-announce@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-21:06.microcode

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

=============================================================================
FreeBSD-EN-21:06.microcode Errata Notice
The FreeBSD Project

Topic: Boot-time microcode loading causes a boot hang

Category: core
Module: x86
Announced: 2021-02-24
Affects: FreeBSD 12.2
Corrected: 2021-02-19 20:57:34 UTC (stable/12, 12.2-STABLE)
2021-02-24 01:43:50 UTC (releng/12.2, 12.2-RELEASE-p4)

For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.

I. Background

CPU microcode updates may include security fixes or mitigations. The
boot-time microcode loader applies CPU microcode as early in the boot process
as possible, minimizing the amount of code executed without updated
microcode.

Microcode updates for many different CPU types are concatenated into one file
and loaded by the boot loader. After the kernel has determined the correct
update to apply, it frees the memory containing unused microcode updates,
keeping only the update for the CPU on which the kernel is running.

II. Problem Description

An interaction between the code which frees the unused portions of the
microcode file and the rest of the system can cause boot hangs.

III. Impact

The kernel may hang during boot if boot-time microcode updates are configured.

IV. Workaround

Systems not configured to load microcode at boot-time are unaffected.
Boot-time microcode loading is currently only supported with Intel CPUs.

On systems that are configured to load microcode at boot-time, setting the
"debug.ucode.release" loader tunable to 0 will prevent the microcode update
file from being freed, working around the problem.

V. Solution

Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.

Perform one of the following:

1) To update your system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:

# freebsd-update fetch
# freebsd-update install

2) To update your system via a source code patch:

The following patches have been verified to apply to the applicable
FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch https://security.FreeBSD.org/patches/EN-21:06/microcode.patch
# fetch https://security.FreeBSD.org/patches/EN-21:06/microcode.patch.asc
# gpg --verify microcode.patch.asc

b) Apply the patch. Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch

c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.

VI. Correction details

The following list contains the correction revision numbers for each
affected branch.

Branch/path Revision
- -------------------------------------------------------------------------
stable/12/ r369310
releng/12.2/ r369355
- -------------------------------------------------------------------------

To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:

# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

VII. References

The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-21:06.microcode.asc>
-----BEGIN PGP SIGNATURE-----
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=j/+s
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-announce@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"

[USN-4745-1] OpenSSL vulnerabilities

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEElnO/d49FoUPK9fwytGdj0GOh2+wFAmA1awIACgkQtGdj0GOh
2+z3FAf+MBckdO7ssc5tED/5iyJhemYPG4UeqEBaIlen7Ye5PYMr3XAAAqbEWHpS
UeUJwLYt0Zy7Q2d6PdvgUrfJeBx0d/ZIanWvDyMgDcmFd72UNWFs6ya2q3GaNAFu
ORMwaBZf/hrNKU9VUFGtTD1C8gb1JnmzgxgPeYZ0ReMiu5Y/4ZsmNwpcKlL2wTRM
sBu9YWGGypJZqTaz1tMepPBg0ImDmGqpobZlGnYbaqHKZvQw5vO0SXkEERiiBBCt
mgtRlkaUN4TW26be3p6zluvGwIxOCPZ1LnJyBYV9n/VKv0izdEtBTf0CPy1WB0UE
BxSoKBAuT0/13rBW18VO34BquOnlEw==
=WfBQ
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-4745-1
February 23, 2021

openssl vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM
- Ubuntu 12.04 ESM

Summary:

Several security issues were fixed in OpenSSL.

Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

David Benjamin discovered that OpenSSL incorrectly handled comparing
certificates containing a EDIPartyName name type. A remote attacker could
possibly use this issue to cause OpenSSL to crash, resulting in a denial of
service. (CVE-2020-1971)

Tavis Ormandy discovered that OpenSSL incorrectly handled parsing issuer
fields. A remote attacker could possibly use this issue to cause OpenSSL to
crash, resulting in a denial of service. (CVE-2021-23841)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
libssl1.0.0 1.0.1f-1ubuntu2.27+esm2

Ubuntu 12.04 ESM:
libssl1.0.0 1.0.1-4ubuntu5.45

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://usn.ubuntu.com/4745-1
CVE-2020-1971, CVE-2021-23841

Fedora 34 Bodhi updates-testing Activation and Beta Freeze

Hi all,

Today's an important day on the Fedora 34 schedule[1], with several
significant cut-offs. First of all today is the Bodhi updates-testing
activation point [2]. That means that from now all Fedora 34 packages
must be submitted to updates-testing and pass the relevant
requirements[3] before they will be marked as 'stable' and moved to
the fedora repository.

Today is also the Beta freeze[4]. This means that only packages which
fix accepted blocker or freeze exception bugs[5][6] will be marked as
'stable' and included in the Beta composes. Other builds will remain
in updates-testing until the Beta release is approved, at which point
the Beta freeze is lifted and packages can move to 'stable' as usual
until the Final freeze.

Today is also the Software String freeze[7], which means that strings
marked for translation in Fedora-translated projects should not now be
changed for Fedora 34.

Finally, today is the 'completion deadline' Change Checkpoint[8],
meaning that Fedora 34 Changes must now be 'feature complete or close
enough to completion that a majority of its functionality can be
tested'. All tracking bugs should be on ON_QA state or later to
reflect this.

Regards
Mohan Boddu

[1] https://fedorapeople.org/groups/schedule/f-34/f-34-key-tasks.html
[2] https://fedoraproject.org/wiki/Updates_Policy#Bodhi_enabling
[3] https://fedoraproject.org/wiki/Updates_Policy#Branched_release
[4] https://fedoraproject.org/wiki/Milestone_freezes
[5] https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process
[6] https://fedoraproject.org/wiki/QA:SOP_freeze_exception_bug_process
[7] https://fedoraproject.org/wiki/ReleaseEngineering/StringFreezePolicy
[8] https://fedoraproject.org/wiki/Changes/Policy
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[FreeBSD-Announce] CORE Team Office Hours

-----BEGIN PGP SIGNATURE-----
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=eQnL
-----END PGP SIGNATURE-----
Hi,

Following on from the effort in 2019, The FreeBSD team is arranging another Community Survey to help shape the future of The FreeBSD Project. The purpose of this survey is to collect quantitative data from the public in order to help guide the project's priorities and efforts. Similar surveys have been conducted twice by the FreeBSD Project and we are preparing for our third.

Before publishing the next survey the Core Team welcomes you to attend for a Virtual Town Hall meeting to share some of the insights of the 2020 Community Survey, and seek advice on how the next survey should be conducted. The virtual Town Hall will take place on the 17th of March 2021, at 18:00 hours GMT/UTC. See https://wiki.freebsd.org/OfficeHours for details on how to join either a live stream to watch, or an interactive meeting to participate.

If time permits the Core Team may be able to answer questions related to the survey process.. If you have any specific questions that you would like answered during the session you can send an email to core@ ahead of the meeting which the Core Team will try to address.

Thanks! We look forward to meeting you.

Regards,
Moin (bofh), with core-secretary@ hat on

[USN-4467-3] QEMU regression

==========================================================================
Ubuntu Security Notice USN-4467-3
February 22, 2021

qemu regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

USN-4467-1 introduced a regression in QEMU.

Software Description:
- qemu: Machine emulator and virtualizer

Details:

USN-4467-1 fixed vulnerabilities in QEMU. The fix for CVE-2020-13754
introduced a regression in certain environments. This update fixes the
problem.

We apologize for the inconvenience.

Original advisory details:

Ren Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko
discovered that the QEMU incorrectly handled certain msi-x mmio operations.
An attacker inside a guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. (CVE-2020-13754)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
qemu 1:5.0-5ubuntu9.6
qemu-system 1:5.0-5ubuntu9.6
qemu-system-arm 1:5.0-5ubuntu9.6
qemu-system-mips 1:5.0-5ubuntu9.6
qemu-system-misc 1:5.0-5ubuntu9.6
qemu-system-ppc 1:5.0-5ubuntu9.6
qemu-system-s390x 1:5.0-5ubuntu9.6
qemu-system-sparc 1:5.0-5ubuntu9.6
qemu-system-x86 1:5.0-5ubuntu9.6
qemu-system-x86-microvm 1:5.0-5ubuntu9.6
qemu-system-x86-xen 1:5.0-5ubuntu9.6

Ubuntu 20.04 LTS:
qemu 1:4.2-3ubuntu6.14
qemu-system 1:4.2-3ubuntu6.14
qemu-system-arm 1:4.2-3ubuntu6.14
qemu-system-mips 1:4.2-3ubuntu6.14
qemu-system-misc 1:4.2-3ubuntu6.14
qemu-system-ppc 1:4.2-3ubuntu6.14
qemu-system-s390x 1:4.2-3ubuntu6.14
qemu-system-sparc 1:4.2-3ubuntu6.14
qemu-system-x86 1:4.2-3ubuntu6.14
qemu-system-x86-microvm 1:4.2-3ubuntu6.14
qemu-system-x86-xen 1:4.2-3ubuntu6.14

Ubuntu 18.04 LTS:
qemu 1:2.11+dfsg-1ubuntu7.36
qemu-system 1:2.11+dfsg-1ubuntu7.36
qemu-system-arm 1:2.11+dfsg-1ubuntu7.36
qemu-system-mips 1:2.11+dfsg-1ubuntu7.36
qemu-system-misc 1:2.11+dfsg-1ubuntu7.36
qemu-system-ppc 1:2.11+dfsg-1ubuntu7.36
qemu-system-s390x 1:2.11+dfsg-1ubuntu7.36
qemu-system-sparc 1:2.11+dfsg-1ubuntu7.36
qemu-system-x86 1:2.11+dfsg-1ubuntu7.36

Ubuntu 16.04 LTS:
qemu 1:2.5+dfsg-5ubuntu10.51
qemu-system 1:2.5+dfsg-5ubuntu10.51
qemu-system-aarch64 1:2.5+dfsg-5ubuntu10.51
qemu-system-arm 1:2.5+dfsg-5ubuntu10.51
qemu-system-mips 1:2.5+dfsg-5ubuntu10.51
qemu-system-misc 1:2.5+dfsg-5ubuntu10.51
qemu-system-ppc 1:2.5+dfsg-5ubuntu10.51
qemu-system-s390x 1:2.5+dfsg-5ubuntu10.51
qemu-system-sparc 1:2.5+dfsg-5ubuntu10.51
qemu-system-x86 1:2.5+dfsg-5ubuntu10.51

After a standard system update you need to restart all QEMU virtual
machines to make all the necessary changes.

References:
https://usn.ubuntu.com/4467-3
https://usn.ubuntu.com/4467-1
https://launchpad.net/bugs/1914883

Package Information:
https://launchpad.net/ubuntu/+source/qemu/1:5.0-5ubuntu9.6
https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.14
https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.36
https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.51

[USN-4743-1] GDK-PixBuf vulnerability

==========================================================================
Ubuntu Security Notice USN-4743-1
February 22, 2021

gdk-pixbuf vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.10
- Ubuntu 20.04 LTS

Summary:

GDK-PixBuf could be made to crash if it opened a specially crafted file.

Software Description:
- gdk-pixbuf: GDK Pixbuf library

Details:

It was discovered that the GDK-PixBuf library did not properly handle
certain GIF images. If an user or automated system were tricked into
opening a specially crafted GIF file, a remote attacker could use this flaw
to cause GDK-PixBuf to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
libgdk-pixbuf2.0-0 2.40.0+dfsg-5ubuntu0.2

Ubuntu 20.04 LTS:
libgdk-pixbuf2.0-0 2.40.0+dfsg-3ubuntu0.2

After a standard system update you need to restart your session to make all
the necessary changes.

References:
https://usn.ubuntu.com/4743-1
CVE-2021-20240

Package Information:
https://launchpad.net/ubuntu/+source/gdk-pixbuf/2.40.0+dfsg-5ubuntu0.2
https://launchpad.net/ubuntu/+source/gdk-pixbuf/2.40.0+dfsg-3ubuntu0.2

[USN-4744-1] OpenLDAP vulnerability

==========================================================================
Ubuntu Security Notice USN-4744-1
February 22, 2021

openldap vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

OpenLDAP could be made to crash if it received specially crafted network
traffic.

Software Description:
- openldap: Lightweight Directory Access Protocol

Details:

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short
timestamps. A remote attacker could possibly use this issue to cause
OpenLDAP to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
slapd 2.4.53+dfsg-1ubuntu1.4

Ubuntu 20.04 LTS:
slapd 2.4.49+dfsg-2ubuntu1.7

Ubuntu 18.04 LTS:
slapd 2.4.45+dfsg-1ubuntu1.10

Ubuntu 16.04 LTS:
slapd 2.4.42+dfsg-2ubuntu3.13

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4744-1
CVE-2021-27212

Package Information:
https://launchpad.net/ubuntu/+source/openldap/2.4.53+dfsg-1ubuntu1.4
https://launchpad.net/ubuntu/+source/openldap/2.4.49+dfsg-2ubuntu1.7
https://launchpad.net/ubuntu/+source/openldap/2.4.45+dfsg-1ubuntu1.10
https://launchpad.net/ubuntu/+source/openldap/2.4.42+dfsg-2ubuntu3.13

[USN-4742-1] Django vulnerability

==========================================================================
Ubuntu Security Notice USN-4742-1
February 22, 2021

python-django vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

Django could allow unintended access to network services.

Software Description:
- python-django: High-level Python web development framework

Details:

It was discovered that Django incorrectly accepted semicolons as query
parameters. A remote attacker could possibly use this issue to perform a
Web Cache Poisoning attack.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
python3-django 2:2.2.16-1ubuntu0.2

Ubuntu 20.04 LTS:
python3-django 2:2.2.12-1ubuntu0.4

Ubuntu 18.04 LTS:
python-django 1:1.11.11-1ubuntu1.11
python3-django 1:1.11.11-1ubuntu1.11

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4742-1
CVE-2021-23336

Package Information:
https://launchpad.net/ubuntu/+source/python-django/2:2.2.16-1ubuntu0.2
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.4
https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.11

Orphaned packages looking for new maintainers

The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will fail to install and/or build when the affected package gets retired.

Request package ownership via the *Take* button in he left column on
https://src.fedoraproject.org/rpms/<pkgname>

Full report available at:
https://churchyard.fedorapeople.org/orphans-2021-02-22.txt
grep it for your FAS username and follow the dependency chain.

For human readable dependency chains,
see https://packager-dashboard.fedoraproject.org/
For all orphaned packages,
see https://packager-dashboard.fedoraproject.org/orphan

Package (co)maintainers Status Change
================================================================================
adf-accanthis-fonts orphan 0 weeks ago
arduino-builder orphan 1 weeks ago
arp-scan moceap, orphan, xmrbrz 0 weeks ago
balance lbazan, orphan 0 weeks ago
bareftp chreide, orphan 0 weeks ago
bind-to-tinydns orphan, timj 0 weeks ago
bucardo lbazan, orphan 0 weeks ago
bugzilla eseyman, orphan 0 weeks ago
cri-tools dwalsh, fkluknav, lsm5, 0 weeks ago
orphan, umohnani
ctorrent orphan 0 weeks ago
dianara orphan 0 weeks ago
drehatlas-warender-bibliothek- orphan 0 weeks ago
fonts
drehatlas-widelands-fonts orphan 0 weeks ago
drehatlas-xaporho-fonts orphan 0 weeks ago
eclipse-cdt akurtakov, eclipse-sig, 4 weeks ago
jjohnstn, kdaniel, orphan,
rgrunber
eclipse-pydev eclipse-sig, jjohnstn, orphan 3 weeks ago
eclipse-remote eclipse-sig, orphan 5 weeks ago
ez-ipupdate abo, jlayton, orphan 0 weeks ago
felix-bundlerepository mizdebsk, orphan 2 weeks ago
geronimo-jcdi-1.1-api orphan 2 weeks ago
geronimo-validation orphan 2 weeks ago
git-up orphan 2 weeks ago
glom orphan 1 weeks ago
golang-gvisor eclipseo, elmarco, orphan 3 weeks ago
goocanvasmm orphan 1 weeks ago
goocanvasmm2 orphan 1 weeks ago
gstreamermm orphan 1 weeks ago
httpunit fnasser, mizdebsk, orphan 0 weeks ago
ifstat orphan 0 weeks ago
jfsutils fcami, orphan 0 weeks ago
jmdns mizdebsk, orphan 1 weeks ago
jnr-enxio jjohnstn, orphan, rgrunber 5 weeks ago
jnr-unixsocket jjohnstn, orphan, rgrunber 5 weeks ago
jomolhari-fonts orphan, pnemade 0 weeks ago
jython akurtakov, dmalcolm, 3 weeks ago
jmatthews, lkundrak, orphan,
pmackinn
kanjistrokeorders-fonts orphan 0 weeks ago
knemo nucleo, orphan, rdieter, 0 weeks ago
tuxbrewr
krb5-auth-dialog alexl, caolanm, gnome-sig, 0 weeks ago
mbarnes, orphan, rhughes,
rstrode, simo, ssp
lcm dcallagh, mrunge, nmarques, 3 weeks ago
orphan
libglademm24 orphan 1 weeks ago
libinfinity orphan 1 weeks ago
libmirage orphan 0 weeks ago
libmypaint2 orphan 5 weeks ago
libnotifymm orphan 1 weeks ago
libss7 jsmith, orphan 0 weeks ago
mydns orphan 0 weeks ago
netty mizdebsk, orphan 3 weeks ago
nload cicku, fab, fale, orphan 0 weeks ago
ocaml-merlin orphan 2 weeks ago
opendbx orphan 0 weeks ago
opendmarc orphan 0 weeks ago
os-maven-plugin mizdebsk, orphan 3 weeks ago
pen cicku, danniel, orphan 0 weeks ago
perl-DBIx-Safe orphan 0 weeks ago
perl-pgsql_perl5 orphan 0 weeks ago
pg_activity orphan 0 weeks ago
pg_top orphan 0 weeks ago
php-pecl-ssh2 orphan, remi 0 weeks ago
pidgin-logviewer orphan 2 weeks ago
plotmm orphan 1 weeks ago
pokerth orphan 0 weeks ago
puppetlabs-stdlib gchamoul, orphan 3 weeks ago
python-django-registration orphan 2 weeks ago
python-fastapi orphan 0 weeks ago
python-flask-assets orphan, pjp, sundaram 2 weeks ago
python-flask-babelex devrim, orphan 0 weeks ago
python-flask-gravatar devrim, orphan 0 weeks ago
python-flask-htmlmin devrim, orphan 0 weeks ago
python-flask-mail devrim, orphan 0 weeks ago
python-flask-migrate jkaluza, orphan, ralph 0 weeks ago
python-flask-oauth orphan, pjp, sundaram 2 weeks ago
python-flask-paranoid devrim, orphan 0 weeks ago
python-flask-pymongo orphan 0 weeks ago
python-flask-security devrim, orphan 0 weeks ago
python-flask-sphinx-themes devrim, orphan 0 weeks ago
python-jose orphan 0 weeks ago
python-pg8000 fab, orphan 0 weeks ago
python-pgspecial orphan 0 weeks ago
python-ryu orphan, slaweq 5 weeks ago
python-setuptools_hg orphan 2 weeks ago
python-shadowsocks orphan 1 weeks ago
python-sshtunnel orphan 0 weeks ago
python-starlette orphan 0 weeks ago
python-vcversioner fab, orphan 0 weeks ago
python-webassets dcallagh, orphan, pjp, 2 weeks ago
sundaram
qroneko orphan 2 weeks ago
redir orphan 0 weeks ago
reiserfs-utils cicku, orphan 0 weeks ago
ripmime orphan, xavierb 0 weeks ago
rubygem-fog-aws orphan 4 weeks ago
rubygem-oauth mmorsi, orphan 4 weeks ago
simple-jndi orphan 2 weeks ago
sofia-sip orphan 0 weeks ago
squirrelmail orphan 4 weeks ago
sumwars orphan 0 weeks ago
swt-chart orphan 4 weeks ago
sylpheed cicku, cwickert, orphan, 0 weeks ago
sharkcz
tibetan-machine-uni-fonts orphan 0 weeks ago
tlomt-junction-fonts orphan 0 weeks ago
tmw-music orphan 2 weeks ago
tomcat-taglibs-parent orphan 5 weeks ago
trac-batchmodify-plugin orphan 3 weeks ago
trac-navadd-plugin orphan 3 weeks ago
trac-themeengine-plugin orphan 3 weeks ago
trac-tocmacro-plugin orphan 3 weeks ago
trac-vatar-plugin orphan 3 weeks ago
trac-workflowadmin-plugin orphan 3 weeks ago
transmission-remote-gtk orphan, tingping 2 weeks ago
ttyd orphan 0 weeks ago
ubuntu-title-fonts orphan 0 weeks ago
usbview orphan 0 weeks ago
vollkorn-fonts orphan 0 weeks ago
wput orphan 0 weeks ago
xmlrpc kdaniel, mizdebsk, orphan 3 weeks ago
xmonad-log-applet dcallagh, orphan 3 weeks ago
yanone-tagesschrift-fonts orphan 0 weeks ago
ytnef orphan, sheltren 0 weeks ago

The following packages require above mentioned packages:
Report too long, see the full version at
https://churchyard.fedorapeople.org/orphans-2021-02-22.txt

See dependency chains of your packages at
https://packager-dashboard.fedoraproject.org/
See all orphaned packages at https://packager-dashboard.fedoraproject.org/orphan

Affected (co)maintainers (either directly or via packages' dependencies):
aarem: sylpheed
abbra: tomcat-taglibs-parent
abo: ez-ipupdate
ajax: jomolhari-fonts
akien: tomcat-taglibs-parent
akurtakov: netty, eclipse-cdt, tomcat-taglibs-parent, jython, eclipse-remote,
os-maven-plugin
alexl: jomolhari-fonts, krb5-auth-dialog, ytnef
alexlan: perl-pgsql_perl5, tomcat-taglibs-parent
almac: jython, netty, os-maven-plugin
andymenderunix: drehatlas-widelands-fonts
arobinso: jython, netty, os-maven-plugin
asn: ytnef
asrob: php-pecl-ssh2
atim: gstreamermm
avsej: tomcat-taglibs-parent
berrange: jomolhari-fonts
besser82: jomolhari-fonts
bkabrda: python-flask-migrate
breilly: python-flask-migrate
brouhaha: tomcat-taglibs-parent
bruno: gstreamermm, tomcat-taglibs-parent
caillon: jomolhari-fonts, ytnef
caniszczyk: jython, netty, os-maven-plugin
caolanm: jomolhari-fonts, krb5-auth-dialog, ytnef
cfu: tomcat-taglibs-parent
cheese: tomcat-taglibs-parent
chreide: bareftp
churchyard: netty, jmdns, arduino-builder, jython, os-maven-plugin
cicku: sylpheed, reiserfs-utils, tomcat-taglibs-parent, nload, pen
cipherboy: tomcat-taglibs-parent
clumens: tomcat-taglibs-parent
coolsvap: tomcat-taglibs-parent
cqi: python-flask-migrate, python-jose
csutherl: tomcat-taglibs-parent
cverna: python-flask-migrate
cwickert: sylpheed, libglademm24, ytnef
cycloptivity: php-pecl-ssh2
danniel: pen
dbhole: jython, netty, os-maven-plugin
dcallagh: lcm, xmonad-log-applet, python-webassets
dciabrin: tomcat-taglibs-parent
deamn: jython, netty, os-maven-plugin
deji: tomcat-taglibs-parent
devrim: python-flask-sphinx-themes, python-flask-gravatar,
python-flask-paranoid, python-flask-security, python-flask-babelex,
perl-pgsql_perl5, python-flask-htmlmin, python-flask-mail
dmalcolm: jython, netty, os-maven-plugin
dmoluguw: tomcat-taglibs-parent
dominik: tomcat-taglibs-parent
dwalsh: cri-tools
dwmw2: opendmarc, ytnef
dwrobel: tomcat-taglibs-parent
ebaron: jython, netty, os-maven-plugin
eclipse-sig: netty, eclipse-cdt, xmlrpc, eclipse-pydev, jython, eclipse-remote,
os-maven-plugin
eclipseo: golang-gvisor, tomcat-taglibs-parent
edewata: tomcat-taglibs-parent
elmarco: golang-gvisor
elxreno: netty, jmdns, arduino-builder, jython, os-maven-plugin
eseyman: bugzilla, jomolhari-fonts
evgenyz: jomolhari-fonts
fab: tomcat-taglibs-parent, nload, python-pg8000, python-vcversioner,
perl-pgsql_perl5
fale: nload
fcami: jfsutils, tomcat-taglibs-parent
filabrazilska: jomolhari-fonts
filiperosset: jython, netty, os-maven-plugin
fivaldi: python-flask-migrate
fkluknav: cri-tools
fnasser: httpunit
fsimonce: tomcat-taglibs-parent
fujiwara: tomcat-taglibs-parent
galileo: jython, netty, os-maven-plugin
gchamoul: puppetlabs-stdlib
gil: tomcat-taglibs-parent
gnaponie: python-flask-migrate
gnome-sig: jomolhari-fonts, krb5-auth-dialog
greghellings: tomcat-taglibs-parent
helloworld1: tomcat-taglibs-parent
hhorak: tomcat-taglibs-parent
huwang: tomcat-taglibs-parent
hvad: jomolhari-fonts
infra-sig: jomolhari-fonts
ipa-maint: tomcat-taglibs-parent
jcerny: jomolhari-fonts
jerboaa: jython, netty, tomcat-taglibs-parent, os-maven-plugin
jfearn: tomcat-taglibs-parent
jfilak: jnr-unixsocket, jnr-enxio
jhrozek: tomcat-taglibs-parent
jjelen: tomcat-taglibs-parent
jjohnstn: netty, eclipse-cdt, xmlrpc, eclipse-pydev, jnr-enxio, jython,
jnr-unixsocket, eclipse-remote, os-maven-plugin
jkaluza: python-flask-migrate
jkang: jython, netty, os-maven-plugin
jlayton: ez-ipupdate
jmatthews: jython, netty, os-maven-plugin
jmlich: perl-pgsql_perl5
jorton: tomcat-taglibs-parent
jplesnik: jomolhari-fonts
jpokorny: tomcat-taglibs-parent
jreznik: kanjistrokeorders-fonts
jskarvad: opendmarc
jsmith: php-pecl-ssh2, libss7
jvanek: jython, netty, os-maven-plugin
jwrdegoede: drehatlas-widelands-fonts, tomcat-taglibs-parent
kalev: python-flask-migrate
kdaniel: netty, eclipse-cdt, xmlrpc, tomcat-taglibs-parent, jython,
eclipse-remote, os-maven-plugin
kde-sig: kanjistrokeorders-fonts
kevin: jomolhari-fonts
kwenning: tomcat-taglibs-parent
kwright: tomcat-taglibs-parent
laxathom: tomcat-taglibs-parent
lbazan: perl-DBIx-Safe, balance, bucardo
lef: jython, netty, tomcat-taglibs-parent, os-maven-plugin
lennart: libglademm24
lholecek: python-flask-migrate
liangsuilong: jomolhari-fonts, tomcat-taglibs-parent
limb: tomcat-taglibs-parent
linkdupont: tomcat-taglibs-parent
lkundrak: netty, tomcat-taglibs-parent, jython, jomolhari-fonts, os-maven-plugin
lon: tomcat-taglibs-parent
lsedlar: python-flask-migrate
lsm5: cri-tools
lucarval: python-flask-migrate
lucilanga: ytnef
matyc: jomolhari-fonts
maxamillion: perl-pgsql_perl5, python-flask-migrate
mayorga: perl-pgsql_perl5
mbarabas: jomolhari-fonts
mbarnes: jomolhari-fonts, krb5-auth-dialog, ytnef
mbayer: tomcat-taglibs-parent
mbooth: jython, netty, os-maven-plugin
mcrha: ytnef
mdomsch: opendbx
meeuw: python-pgspecial
mharmsen: tomcat-taglibs-parent
mikem: python-flask-migrate
mizdebsk: netty, jmdns, xmlrpc, tomcat-taglibs-parent, httpunit,
felix-bundlerepository, os-maven-plugin, jython
mkosek: tomcat-taglibs-parent
mlichvar: tomcat-taglibs-parent
mlysonek: jomolhari-fonts
mmarhefk: jomolhari-fonts
mmorsi: rubygem-oauth
moceap: tomcat-taglibs-parent, arp-scan
mprahl: python-flask-migrate
mrunge: lcm
mschorm: tomcat-taglibs-parent
mschwendt: ytnef
mskalick: tomcat-taglibs-parent
nmarques: lcm
nphilipp: drehatlas-widelands-fonts, tomcat-taglibs-parent
nucleo: knemo
oget: jython, netty, os-maven-plugin
oliver: jython, netty, os-maven-plugin
omajid: tomcat-taglibs-parent
otaylor: python-flask-migrate
panovotn: tomcat-taglibs-parent
patches: netty, jmdns, arduino-builder, jython, os-maven-plugin
pcpa: python-flask-sphinx-themes, tomcat-taglibs-parent
perl-maint-sig: jomolhari-fonts
peter: jython, netty, tomcat-taglibs-parent, os-maven-plugin
pfrields: php-pecl-ssh2
pingou: jomolhari-fonts
pjp: python-flask-assets, python-flask-oauth, python-webassets
pkubat: perl-pgsql_perl5
pmackinn: jython, netty, os-maven-plugin
pnemade: jomolhari-fonts
ppisar: jomolhari-fonts
praiskup: perl-pgsql_perl5
pvoborni: tomcat-taglibs-parent
pvrabec: jomolhari-fonts
pwalter: tomcat-taglibs-parent
pwu: tomcat-taglibs-parent
qwan: python-flask-migrate
ralph: python-flask-migrate, jomolhari-fonts
rathann: gstreamermm
rcritten: tomcat-taglibs-parent
rdieter: kanjistrokeorders-fonts, knemo
remi: php-pecl-ssh2
rgrunber: netty, eclipse-cdt, jnr-enxio, jython, jnr-unixsocket, eclipse-remote,
os-maven-plugin
rhughes: jomolhari-fonts, krb5-auth-dialog, ytnef
richardfearn: jython, netty, os-maven-plugin
rjones: jomolhari-fonts, tomcat-taglibs-parent
rlandmann: tomcat-taglibs-parent
rmattes: libglademm24, tomcat-taglibs-parent
robmv: jomolhari-fonts
rstrode: jomolhari-fonts, krb5-auth-dialog, ytnef
russellb: libss7
s4504kr: tomcat-taglibs-parent
sagitter: tomcat-taglibs-parent
salimma: ytnef
sasiddiq: jython, netty, os-maven-plugin
scenek: jomolhari-fonts
sdodson: php-pecl-ssh2
sergiomb: jomolhari-fonts
sharkcz: sylpheed
sheltren: ytnef
simo: krb5-auth-dialog, tomcat-taglibs-parent
siwinski: php-pecl-ssh2
slaweq: python-ryu
smani: perl-pgsql_perl5, tomcat-taglibs-parent
spike: tomcat-taglibs-parent
spot: netty, jmdns, tomcat-taglibs-parent, arduino-builder, jython,
jomolhari-fonts, os-maven-plugin
ssp: jomolhari-fonts, krb5-auth-dialog, ytnef
sundaram: python-flask-assets, python-flask-oauth, python-webassets
suve: tomcat-taglibs-parent
tagoh: jomolhari-fonts
terjeros: jython, netty, os-maven-plugin
teuf: tomcat-taglibs-parent
than: kanjistrokeorders-fonts
thm: ytnef
thofmann: libglademm24
thozza: netty, jmdns, arduino-builder, jython, os-maven-plugin
timj: bind-to-tinydns
timn: libglademm24, tomcat-taglibs-parent
tingping: transmission-remote-gtk
tkorbar: opendbx
tomh: perl-pgsql_perl5, tomcat-taglibs-parent
tpopela: ytnef
ttomecek: python-flask-migrate
ttorling: tomcat-taglibs-parent
tuxbrewr: knemo
twaugh: python-flask-migrate
twoerner: tomcat-taglibs-parent
umohnani: cri-tools
vakwetu: tomcat-taglibs-parent
van: tomcat-taglibs-parent
vascom: netty, jmdns, arduino-builder, jython, os-maven-plugin
verdurin: tomcat-taglibs-parent
vmaljulin: python-flask-migrate
volter: perl-pgsql_perl5
vrutkovs: python-flask-migrate
wsato: jomolhari-fonts
xavierb: ripmime, jomolhari-fonts
xmrbrz: arp-scan

--
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its pagure instance:
https://pagure.io/releng/
The sources of this script can be found at:
https://pagure.io/releng/blob/main/f/scripts/find_unblocked_orphans.py
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[arch-announce] Moving to Zstandard images by default on mkinitcpio

As linux-lts moved to the 5.10 version, all official kernels of Arch Linux now support zstd compressed
initramfs images, so mkinitcpio is switching to zstd compressed images by default with version 30,
which is currently on [testing].

If, for any reason, you are using a kernel version prior to 5.9, make sure to change mkinitcpio.conf
COMPRESSION to use one of the compressors supported, like gzip, otherwise you **will not** be able to
boot images generated by mkinitcpio.

URL: https://www.archlinux.org/news/moving-to-zstandard-images-by-default-on-mkinitcpio/
_______________________________________________
arch-announce mailing list
arch-announce@lists.archlinux.org
https://lists.archlinux.org/listinfo/arch-announce