mupdf 1.18.0 and depending packages

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New in release OpenJDK 11.0.9 (2020-10-20):
===========================================

Full versions of these release notes can be found at :

- https://bitly.com/openjdk1109

- https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt

## Security fixes

  - JDK-8233624: Enhance JNI linkage

  - JDK-8236196: Improve string pooling

  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy     class

  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts

  - JDK-8237995, CVE-2020-14782: Enhance certificate     processing

  - JDK-8240124: Better VM Interning

  - JDK-8241114, CVE-2020-14792: Better range handling

  - JDK-8242680, CVE-2020-14796: Improved URI Support

  - JDK-8242685, CVE-2020-14797: Better Path Validation

  - JDK-8242695, CVE-2020-14798: Enhanced buffer support

  - JDK-8243302: Advanced class supports

  - JDK-8244136, CVE-2020-14803: Improved Buffer supports

  - JDK-8244479: Further constrain certificates

  - JDK-8244955: Additional Fix for JDK-8240124

  - JDK-8245407: Enhance zoning of times

  - JDK-8245412: Better class definitions

  - JDK-8245417: Improve certificate chain handling

  - JDK-8248574: Improve jpeg processing

  - JDK-8249927: Specify limits of     jdk.serialProxyInterfaceLimit

  - JDK-8253019: Enhanced JPEG decoding

## JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b

Following JDK's update to tzdata2020b, the long-obsolete files pacificnew and systemv have been removed. As a result, the 'US/Pacific-New' zone name declared in the pacificnew data file is no longer available for use.

Information regarding the update can be viewed at https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to freetype 2.10.4 which fixes security flaw CVE-2020-15999.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream release 0.3.15 (#1885156)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New in release OpenJDK 8u272 (2020-10-20):
===========================================

Full versions of these release notes can be found at :

- https://bitly.com/openjdk8u272

- https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u272.txt

## New features

  - JDK-8245468: Add TLSv1.3 implementation classes from     11.0.7

## Security fixes

  - JDK-8233624: Enhance JNI linkage

  - JDK-8236196: Improve string pooling

  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy     class

  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts

  - JDK-8237995, CVE-2020-14782: Enhance certificate     processing

  - JDK-8240124: Better VM Interning

  - JDK-8241114, CVE-2020-14792: Better range handling

  - JDK-8242680, CVE-2020-14796: Improved URI Support

  - JDK-8242685, CVE-2020-14797: Better Path Validation

  - JDK-8242695, CVE-2020-14798: Enhanced buffer support

  - JDK-8243302: Advanced class supports

  - JDK-8244136, CVE-2020-14803: Improved Buffer supports

  - JDK-8244479: Further constrain certificates

  - JDK-8244955: Additional Fix for JDK-8240124

  - JDK-8245407: Enhance zoning of times

  - JDK-8245412: Better class definitions

  - JDK-8245417: Improve certificate chain handling

  - JDK-8248574: Improve jpeg processing

  - JDK-8249927: Specify limits of     jdk.serialProxyInterfaceLimit

  - JDK-8253019: Enhanced JPEG decoding

## JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b

Following JDK's update to tzdata2020b, the long-obsolete files pacificnew and systemv have been removed. As a result, the 'US/Pacific-New' zone name declared in the pacificnew data file is no longer available for use.

Information regarding the update can be viewed at https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 1.10.9.

Addresses CVE-2020-11979

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upgrade to Ruby 2.7.2.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream bug fix and security update.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update kpmcore to 4.2.0 and rebuild all dependent packages.

This update also fixes CVE-2020-27187.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 4.3.5

Release notes:
https://docs.powerdns.com/recursor/security-advisories/powerdns-adviso ry-2020-07.html

Security Advisory:
https://docs.powerdns.com/recursor/security-advisories/powerdns-adviso ry-2020-07.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update kpmcore to 4.2.0 and rebuild all dependent packages.

This update also fixes a not yet disclosed CVE.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.0.9, fixes CVE-2020-8927

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

x86: Race condition in Xen mapping code [XSA-345] undue deferral of IOMMU TLB flushes [XSA-346] unsafe AMD IOMMU page table updates [XSA-347]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upgrade to upstream 3.6.4.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.17.7 -- https://www.claws-mail.org/news.php

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**Version 5.0.3** (2020-10-09)

  - issue #15983 Require twig ^2.9

  - issue Fix option to import files locally appearing as     not available

  - issue #16048 Fix to allow NULL as a default bit value

  - issue #16062 Fix 'htmlspecialchars() expects parameter 1     to be string, null given' on Export xml

  - issue #16078 Fix no charts in monitor when using a     decimal separator ','

  - issue #16041 Fix IN(...) clause doesn't permit multiple     values on 'Search' page

  - issue #14411 Support double tap to edit on mobile

  - issue #16043 Fix php error 'Use of undefined constant     MYSQLI_TYPE_JSON' when using the mysqlnd extension

  - issue #14611 Fix fatal JS error on index creation after     using Enter key to submit the form

  - issue #16012 Set 'axis-order' to swap lon and lat on     MySQL >= 8.1

  - issue #16104 Fixed overwriting a bookmarked query causes     a PHP fatal error

  - issue Fix typo in a condition in the Sql class

  - issue #15996 Fix local setup doc links pointing to a     wrong location

  - issue #16093 Fix error importing utf-8 with bom sql file

  - issue #16089 2FA UX enhancement: autofocus 2FA input

  - issue #16127 Fix table column description PHP error when     ['DisableIS'] = true;

  - issue #16130 Fix local documentation links display when     a PHP extension is missing

  - issue Fix some twig code deprecations for php 8

  - issue Fix ENUM and SET display when editing procedures     and functions

  - issue Keep full query state on 'auto refresh' process     list

  - issue Keep columns order on 'auto refresh' process list

  - issue Fixed editing a failed query from the error     message

  - issue #16166 Fix the alter user privileges query to make     it MySQL 8.0.11+ compatible

  - issue Fix copy table to another database when the nbr of     DBs is > $cfg['MaxDbList']

  - issue #16157 Fix relations of tables having spaces or     special chars not showing in the Designer

  - issue #16052 Fix a very rare JS error occuring on     mousemove event

  - issue #16162 Make a foreign key link clickable in a new     tab after the value was saved and replaced

  - issue #16163 Fixed a PHP notice 'Undefined index:
    column_info' on views

  - issue #14478 Fix the data stream when exporting data in     file mode

  - issue #16184 Fix templates/ directory not found error

  - issue #16184 Remove chdir logic to fix PHP fatal error     'Uncaught TypeError: chdir()'

  - issue Support for Twig 3

  - issue Allow phpmyadmin/twig-i18n-extension ^3.0

  - issue #16201 Trim spaces for integer values in table     search

  - issue #16076 Fixed cannot edit or export TIMESTAMP     column with default CURRENT_TIMESTAMP in MySQL >= 8.0.13

  - issue #16226 Fix error 500 after copying a table

  - issue #16222 Fixed can't use the search page when the     table name has special characters

  - issue #16248 Fix zoom search is not performing input     validation on INT columns

  - issue #16248 Fix JavaScript error when typing in INT     fields on zoom search page

  - issue Fix type errors when using saved searches

  - issue #16261 Fix missing headings on modals of 'User     Accounts -> Export'

  - issue #16146 Fixed sorting did not keep the selector of     number of rows

  - issue #16194 Fixed SQL query does not appear in case of     editing view where definer is not you on MySQL 8

  - issue #16255 Fix tinyint(1) shown as INT on Search page

  - issue #16256 Fix 'Warning: error_reporting() has been     disabled for security reasons' on php 7.x

  - issue #15367 Fix 'Change or reconfigure primary server'     link

  - issue #15367 Fix first replica links, start, stop,     ignore links

  - issue #16058 Add 'PMA_single_signon_HMAC_secret' for     signon auths to make special links work and udate     examples

  - issue #16269 Support ReCaptcha v2 checkbox width     '$cfg['CaptchaMethod'] = 'checkbox';'

  - issue #14644 Use Doctum instead of Sami

  - issue #16086 Fix 'Browse' headings shift when scrolling

  - issue #15328 Fix no message after import of zipped     shapefile without php-zip

  - issue #14326 Fix PHP error when exporting without     php-zip

  - issue #16318 Fix Profiling doesn't sum the number of     calls

  - issue #16319 Fixed a Russian translation mistake on     search results total text

  - issue #15634 Only use session_set_cookie_params once on     PHP >= 7.3.0 versions for single signon auth

  - issue #14698 Fixed database named as 'New' (language     variable) causes PHP fatal error

  - issue #16355 Make textareas both sides resizable

  - issue #16366 Fix column definition form not showing     default value

  - issue #16342 Fixed multi-table query     (db_multi_table_query.php) alias show the same alias for     all columns

  - issue #15109 Fixed using ST_GeomFromText + GUI on insert     throws an error

  - issue #16325 Fixed editing Geometry data throws error on     using the GUI

  - issue [security] Fix XSS vulnerability with the     transformation feature (**PMASA-2020-5,     CVE-2020-26934**)

  - issue [security] Fix SQL injection vulnerability with     search feature (**PMASA-2020-6, CVE-2020-26935**)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Nextcloud 19.0.3, fixes CVE-2020-8236, CVE-2020-8223, CVE-2020-8183, CVE-2020-8173

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- New upstream version (82.0)

  - Updated SELinux relabel setup (rhbz#1731371)

  - Fixed seeking in OpenH264 stream (rhbz#1886722)

----

  - New Firefox upstream release (82.0)

  - Wayland and OpenH264 fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fedora branched for Fedora 33 with java-11-openjdk at an early version of the upcoming release, 11.0.9. The upstream release of OpenJDK 11.0.9 isn't due to happen until the same day as Fedora 33 (2020-10-20).

We will get the final version into Fedora 33 (and earlier versions) as soon as possible after the embargo lifts and the upstream release happens, but we should get a version close enough to final as possible into Fedora 33 GA.

This update provides that update, bringing Fedora 33 in sync with the frozen public upstream tree for 11.0.9. All that is missing in comparison with the eventual final version are the embargoed security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New version 3.2.7 Security fix for CVE-2020-25862, CVE-2020-25863, CVE-2020-25866

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rebase to latest upstream version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-24972

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Nextcloud 18.0.9, fixes CVE-2020-81-39, CVE-2020-8173, CVE-2020-8183, CVE-2020-8223, CVE-2020-8154, CVE-2020-8155.

Updating the Mail & Groupfolders apps from within Nextcloud also fixes CVE-2020-8153, CVE-2020-8156

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Make dnsmasq listen in default configuration only on localhost device.
bind-dynamic is not required, because localhost should not change during the life of dnsmasq.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-2026

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2019-20907: Avoid infinite loop in the tarfile     module

  - CVE-2020-14422: Resolve hash collisions for     IPv4Interface and IPv6Interface

  - CVE-2020-26116: HTTP request method CRLF injection in     httplib

This update brings Fedora 32's python34 in sync with the EPEL7 package.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

createrepo_c 0.16.1

  - Update to 0.16.1

  - Add the section number to the manual pages

  - Parse xml snippet in smaller parts (RhBug:1859689)

  - Add module metadata support to createrepo_c     (RhBug:1795936)

librepo 1.12.1

  - Update to 1.12.1

  - Validate path read from repomd.xml (RhBug:1868639)

libdnf 0.54.2

  - Update to 0.54.2

  - history: Fix dnf history rollback when a package was     removed (RhBug:1683134)

  - Add support for HY_GT, HY_LT in query nevra_strict

  - Fix parsing empty lines in config files

  - Accept '==' as an operator in reldeps (RhBug:1847946)

  - Add log file level main config option (RhBug:1802074)

  - Add protect_running_kernel configuration option     (RhBug:1698145)

  - Context part of libdnf cannot assume zchunk is on     (RhBug:1851841,1779104)

  - Fix memory leak of resultingModuleIndex and handle     g_object refs

  - Redirect librepo logs to libdnf logs with different     source

  - Introduce changelog metadata in commit messages

  - Add hy_goal_lock

  - Update Copr targets for packit and use alias

  - Enum/String conversions for Transaction Store/Replay

  - utils: Add a method to decode URLs

  - Unify hawkey.log line format with the rest of the logs

dnf 4.4.0

  - Update to 4.4.0

  - Handle empty comps group name (RhBug:1826198)

  - Remove dead history info code (RhBug:1845800)

  - Improve command emmitter in dnf-automatic

  - Enhance --querytags and --qf help output

  - [history] add option --reverse to history list     (RhBug:1846692)

  - Add logfilelevel configuration (RhBug:1802074)

  - Don't turn off stdout/stderr logging longer than     necessary (RhBug:1843280)

  - Mention the date/time that updates were applied

  - [dnf-automatic] Wait for internet connection     (RhBug:1816308)

  - [doc] Enhance repo variables documentation     (RhBug:1848161,1848615)

  - Add librepo logger for handling messages from librepo     (RhBug:1816573)

  - [doc] Add package-name-spec to the list of possible     specs

  - [doc] Do not use <package-nevr-spec>

  - [doc] Add section to explain -n, -na and -nevra suffixes

  - Add alias 'ls' for list command

  - README: Reference Fedora Weblate instead of Zanata

  - remove log_lock.pid after reboot(Rhbug:1863006)

  - comps: Raise CompsError when removing a non-existent     group

  - Add methods for working with comps to     RPMTransactionItemWrapper

  - Implement storing and replaying a transaction

  - Log failure to access last makecache time as warning

  - [doc] Document Substitutions class

  - Dont document removed attribute ``reports`` for     get_best_selector

  - Change the debug log timestamps from UTC to local time

dnf-plugins-core 4.0.18

  - [needs-restarting] Fix plugin fail if needs-restarting.d     does not exist

  - [needs-restarting] add kernel-rt to reboot list

  - Fix debug-restore command

  - [config-manager] enable/disable comma separated pkgs     (RhBug:1830530)

  - [debug] Use standard demands.resolving for transaction     handling

  - [debug] Do not remove install-only packages     (RhBug:1844533)

  - return error when dnf download failed

  - README: Reference Fedora Weblate instead of Zanata

  - [reposync] Add latest NEVRAs per stream to download     (RhBug: 1833074)

  - copr: don't try to list runtime dependencies

dnf-plugins-extras 4.0.12

  - Update Cmake to pull translations from weblate

  - Drop Python 2 support

  - README: Add Installation, Contribution, etc

  - Add the DNF_SYSTEM_UPGRADE_NO_REBOOT env variable to     control system-upgrade reboot.

  - [system-upgrade] Upgrade groups and environments     (RhBug:1845562,1860408)

livecd-tools-27.1-8

  - Fix compatibility with dnf 4.4.0 / libdnf 0.54.2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2020-26116: HTTP request method CRLF injection in     httplib

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 1.12.1

  - Validate path read from repomd.xml (RhBug:1868639)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update contains patches for the BleedingTooth CVEs.

----

The 5.8.15 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
141909	Fedora 32 : mupdf / python-PyMuPDF / zathura-pdf-mupdf (2020-3cea1ac8f3)	Medium
141908	Fedora 33 : 1:java-11-openjdk (2020-845860fd4f)	Medium
141907	Fedora 32 : freetype (2020-6299161e89)	High
141906	Fedora 33 : python-msldap (2020-e22e9a655d)	Medium
141903	Fedora 33 : mupdf / python-PyMuPDF / zathura-pdf-mupdf (2020-972ad7c8a8)	Medium
141902	Fedora 33 : 1:java-1.8.0-openjdk (2020-5708dd5b87)	Medium
141900	Fedora 33 : ant (2020-2640aa4e19)	Medium
141899	Fedora 33 : ruby (2020-fe2a7d7390)	Medium
141896	Fedora 31 : suricata (2020-58dc592b7b)	High
141895	Fedora 32 : ant (2020-92b1d001b3)	Medium
141894	Fedora 33 : calamares / kde-partitionmanager / kpmcore (2020-73471e6414)	High
141892	Fedora 33 : pdns-recursor (2020-51ca2615fe)	High
141891	Fedora 32 : calamares / kde-partitionmanager / kpmcore (2020-da859aadde)	High
141889	Fedora 33 : brotli (2020-c76a35b209)	Medium
141887	Fedora 31 : ant (2020-3ce0f55bc5)	Medium
141885	Fedora 33 : xen (2020-97775b4234)	High
141883	Fedora 33 : singularity (2020-efff92f6c4)	High
141882	Fedora 33 : freetype (2020-768b1690f8)	High
141881	Fedora 33 : claws-mail (2020-1f60842034)	Medium
141880	Fedora 33 : phpMyAdmin (2020-43d8624421)	Medium
141879	Fedora 33 : nextcloud (2020-050aaa14f7)	Low
141877	Fedora 33 : firefox (2020-c82e86cde0)	High
141876	Fedora 32 : suricata (2020-3449b92e5f)	High
141875	Fedora 33 : 1:java-11-openjdk (2020-85fcca95a8)	High
141874	Fedora 33 : suricata (2020-140fcc96c8)	High
141873	Fedora 31 : singularity (2020-098cba75fe)	High
141871	Fedora 31 : firefox (2020-de83d27335)	High
141870	Fedora 32 : singularity (2020-0fbf0db920)	High
141869	Fedora 33 : 1:wireshark (2020-9bda6ae1cd)	Medium
141795	Fedora 32 : firefox (2020-aba1d14e9e)	High
141756	Fedora 31 : thunderbird (2020-07c5770aa1)	High
141556	Fedora 32 : kleopatra (2020-9b441d3153)	Medium
141555	Fedora 32 : phpMyAdmin (2020-4e78c86902)	Medium
141554	Fedora 31 : phpMyAdmin (2020-eadda524a8)	Medium
141550	Fedora 32 : nextcloud (2020-c9863904de)	High
141532	Fedora 31 : brotli (2020-bc9a739f0c)	Medium
141527	Fedora 32 : dnsmasq (2020-756b92a093)	High
141526	Fedora 32 : brotli (2020-9336b65f82)	Medium
141524	Fedora 31 : kata-runtime (2020-7a0b6071a4)	Medium
141522	Fedora 31 : 1:wireshark (2020-1b390bec14)	Medium
141521	Fedora 32 : python34 (2020-d30881c970)	Medium
141520	Fedora 31 : kata-proxy (2020-2f5879aeb6)	Medium
141519	Fedora 31 : kata-agent (2020-c33083813d)	Medium
141518	Fedora 32 : 1:livecd-tools / createrepo_c / dnf / dnf-plugins-core / etc (2020-5d9f0ce2b3)	High
141515	Fedora 32 : python27 (2020-887d3fa26f)	Medium
141510	Fedora 32 : 1:wireshark (2020-1bf4b97c16)	Medium
141509	Fedora 31 : librepo (2020-7906a64449)	High
141490	Fedora 31 : claws-mail (2020-90e2b01f4a)	Medium
141489	Fedora 32 : ruby (2020-02ca18c2a0)	Medium
141488	Fedora 33 : kernel (2020-ce117eff51)	High

Fedora Local Security Checks Family for Nessus