epel-devel November 2021

epel-devel@lists.fedoraproject.org

25 participants
89 discussions

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 11 Nov '21

11 Nov '21

The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f89c59b568 botan2-2.12.1-4.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-742db3f554 rpki-client-7.5-1.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a21f8fb6c8 java-latest-openjdk-17.0.1.0.12-3.rolling.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing FAudio-21.11-1.el8 copr-cli-1.97-1.el8 cscppc-2.1.1-1.el8 csmock-3.1.0-1.el8 fmf-1.0.0-1.el8 gcc-epel-8.5.0-5.el8 js-jquery-ui-1.13.0-1.el8 notcurses-2.4.9-2.el8 packit-0.41.0-1.el8 pdns-4.5.2-1.el8 python-copr-1.114-1.el8 python-yara-4.1.3-2.el8 spirv-headers-1.5.4-7.20210728.git449bc98.el8 strongswan-5.9.4-2.el8 vkd3d-1.2-3.el8 wine-6.0.2-1.el8 yara-4.1.3-1.el8 Details about builds: ================================================================================ FAudio-21.11-1.el8 (FEDORA-EPEL-2021-9d44f01b79) FNA is a reimplementation of the Microsoft XNA Game Studio 4.0 Refresh libraries -------------------------------------------------------------------------------- Update Information: Wine 6.0.2 update for EPEL 8 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.11-1 - Update to 21.11 * Tue Sep 7 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.09-1 - Update to 21.09 * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 21.06-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Thu Jun 3 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.06-1 - Update to 21.06 * Sat Mar 6 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.03.05-1 - Update to 21.03.05 * Mon Mar 1 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.03-1 - Update to 21.03 * Sun Feb 7 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.02-1 - Update to 21.02 * Fri Jan 29 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.01-1 - Update to 21.01 * Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Dec 1 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.12-1 - Update to 20.12 * Fri Oct 2 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.10-1 - Update to 20.10 * Wed Sep 2 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.09-1 - Update to 20.09 * Mon Aug 3 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.08-1 - Update to 20.08 - Enable GStreamer backend * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.07-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jul 15 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.07-1 - Update to 20.07 * Mon Jun 1 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.06-1 - Update to 20.06 * Thu Apr 2 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.04-1 - Update to 20.04 * Mon Mar 2 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.03-1 - Update to 20.03 * Mon Feb 3 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.02-1 - Update to 20.02 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.01-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Jan 6 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.01-1 - Update to 20.01 * Mon Dec 2 2019 Michael Cronenworth <mike(a)cchtml.com> - 19.12-1 - Update to 19.12 * Sat Nov 2 2019 Michael Cronenworth <mike(a)cchtml.com> - 19.11-1 - Update to 19.11 * Fri Sep 13 2019 Michael Cronenworth <mike(a)cchtml.com> - 19.09-1 - Update to 19.09 * Sun Aug 4 2019 Michael Cronenworth <mike(a)cchtml.com> - 19.08-1 - Update to 19.08 * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 19.03-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Mar 1 2019 Michael Cronenworth <mike(a)cchtml.com> - 19.03-1 - Update to 19.03 * Thu Feb 28 2019 Michael Cronenworth <mike(a)cchtml.com> - 19.02-1 - Initial spec file. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1988447 - FR: Update to latest Wine-stable version https://bugzilla.redhat.com/show_bug.cgi?id=1988447 -------------------------------------------------------------------------------- ================================================================================ copr-cli-1.97-1.el8 (FEDORA-EPEL-2021-eedbf1f47d) Command line interface for COPR -------------------------------------------------------------------------------- Update Information: copr-cli - More detailed "Request is not in JSON format" error - APIv3 /monitor route python-copr - Depend on setuptools for the pkg_resources - APIv3 /monitor route -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Silvie Chlupova <schlupov(a)redhat.com> 1.97-1 - More detailed "Request is not in JSON format" error - APIv3 /monitor route -------------------------------------------------------------------------------- ================================================================================ cscppc-2.1.1-1.el8 (FEDORA-EPEL-2021-ccb4c2e752) A compiler wrapper that runs cppcheck in background -------------------------------------------------------------------------------- Update Information: - update to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Kamil Dudka <kdudka(a)redhat.com> 2.1.1-1 - update to latest upstream release -------------------------------------------------------------------------------- ================================================================================ csmock-3.1.0-1.el8 (FEDORA-EPEL-2021-ccb4c2e752) A mock wrapper for Static Analysis tools -------------------------------------------------------------------------------- Update Information: - update to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Kamil Dudka <kdudka(a)redhat.com> 3.1.0-1 - update to latest upstream release -------------------------------------------------------------------------------- ================================================================================ fmf-1.0.0-1.el8 (FEDORA-EPEL-2021-3e84b04086) Flexible Metadata Format -------------------------------------------------------------------------------- Update Information: Migrate to ruamel.yaml, drop Python 2 support -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 1.0.0-1 - Migrate yaml parsing to ruamel.yaml - Drop support for Python 2 - Add extra requires and enable readthedocs config (#143) - Filter accept value with a colon - Adjust style to fix issues revealed by pre-commit - Enable pre-commit, update contribution docs - Disable integration testing with tmt for centos-7 -------------------------------------------------------------------------------- ================================================================================ gcc-epel-8.5.0-5.el8 (FEDORA-EPEL-2021-dae122c96c) Various compilers (C, C++, Objective-C, ...) -------------------------------------------------------------------------------- Update Information: - backport from 8.5.0-4: add -Wbidirectional patch (#2008391) - backport from 8.5.0-3: fix mangling of lambdas in default args (PR c++/91241, #1981822) - backport from 8.5.0-3: add a few Provides: bundled - backport from 8.5.0-2: revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701) - backport from 8.5.0-2: fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951) - backport from 8.5.0-1: update from GCC 8.5 release (#1946758) - backport from 8.5.0-1: this includes a fix for PR target/87839 (#1958295) - backport from 8.4.1-2.1: remove support for demangling GCC 2.x era mangling schemes (#1668394) - backport from 8.4.1-2: update from GCC 8.4 release (#1946758) - backport from 8.4.1-1.2: back out the PR97236 patch - backport from 8.4.1-1.1: fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632) -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Robert Scheck <robert(a)fedoraproject.org> 8.5.0-5 - disable bootstrap mode and rebuild using gcc-epel-8.5.0-4.el8 * Thu Nov 11 2021 Robert Scheck <robert(a)fedoraproject.org> 8.5.0-4 - backport from 8.5.0-4: add -Wbidirectional patch (#2008391) * Wed Nov 10 2021 Robert Scheck <robert(a)fedoraproject.org> 8.5.0-3 - backport from 8.5.0-3: fix mangling of lambdas in default args (PR c++/91241, #1981822) - backport from 8.5.0-3: add a few Provides: bundled - backport from 8.5.0-2: revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701) - backport from 8.5.0-2: fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951) - backport from 8.5.0-1: update from GCC 8.5 release (#1946758) - backport from 8.5.0-1: this includes a fix for PR target/87839 (#1958295) - backport from 8.4.1-2.1: remove support for demangling GCC 2.x era mangling schemes (#1668394) - backport from 8.4.1-2: update from GCC 8.4 release (#1946758) - backport from 8.4.1-1.2: back out the PR97236 patch - backport from 8.4.1-1.1: fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632) -------------------------------------------------------------------------------- ================================================================================ js-jquery-ui-1.13.0-1.el8 (FEDORA-EPEL-2021-8e8cdfca46) jQuery user interface -------------------------------------------------------------------------------- Update Information: jQuery UI 1.13.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.13.0-1 - Update to version 1.13.0 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2019146 - CVE-2021-41182 js-jquery-ui: jquery-ui: XSS in the altField option of the datepicker widget [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019146 [ 2 ] Bug #2019150 - CVE-2021-41183 js-jquery-ui: jquery-ui: XSS in *Text options of the datepicker widget [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019150 [ 3 ] Bug #2019155 - CVE-2021-41184 js-jquery-ui: jquery-ui: XSS in the 'of' option of the .position() util [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019155 -------------------------------------------------------------------------------- ================================================================================ notcurses-2.4.9-2.el8 (FEDORA-EPEL-2021-90a39319f2) Character graphics and TUI library -------------------------------------------------------------------------------- Update Information: https://github.com/dankamongmen/notcurses/releases/tag/v2.4.9 This is the last expected release from the 2.x.x series. The next will almost certainly be 3.0.0, an API-breaking release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Nick Black <dankamongmen(a)gmail.com> 2.4.9-2 - RPMAUTOSPEC: unresolvable merge -------------------------------------------------------------------------------- ================================================================================ packit-0.41.0-1.el8 (FEDORA-EPEL-2021-88dc1b8bf1) A tool for integrating upstream projects with Fedora operating system -------------------------------------------------------------------------------- Update Information: New upstream release 0.41.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 11 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> - 0.41.0-1 - Packit now supports `changelog-entry` action that is used when creating SRPM. The action is supposed to generate whole changelog entry (including the `-` at the start of the lines) and has a priority over any other way we modify the changelog with. (#1367) - Fixed an issue, which raised an `UnicodeEncodingError`, when working with dist-git patch files with an encoding other than UTF-8. (#1406) - Backup alias definitions now reflect the official release of Fedora Linux 35. (#1405) - We have introduced a new configuration option `merge_pr_in_ci` that allows you to disable merging of PR into the base branch before creating SRPM in service. (#1395) - Fixed an issue, where spec-files located in a sub-directory of upstream projects, were not placed in the root of the dist-git repo when proposing changes downstream. (#1402) * Wed Oct 27 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> - 0.40.0-1 - Packit will deduce the version for SRPM from the spec file, if there are no git tags or action for acquiring current version defined. (#1388) - We have introduced new options for generating SRPM packages: (#1396) - `--no-bump` that prevents changing of the release in the SRPM, which can be used for creating SRPMs on checked out tags/releases. - `--release-suffix` that allows you to customize the suffix after the release number, e.g. reference bugzilla or specific branch of the build. -------------------------------------------------------------------------------- ================================================================================ pdns-4.5.2-1.el8 (FEDORA-EPEL-2021-91827c2e27) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: - Update to 4.5.2 Release notes: https://doc.powerdns.com/authoritative/changelog/4.5.html#change-4.5.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 4.5.2-1 - Update to 4.5.2 * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 4.5.1-3 - Rebuilt with OpenSSL 3.0.0 * Sat Aug 7 2021 Jonathan Wakely <jwakely(a)redhat.com> - 4.5.1-2 - Rebuilt for Boost 1.76 -------------------------------------------------------------------------------- ================================================================================ python-copr-1.114-1.el8 (FEDORA-EPEL-2021-eedbf1f47d) Python interface for Copr -------------------------------------------------------------------------------- Update Information: copr-cli - More detailed "Request is not in JSON format" error - APIv3 /monitor route python-copr - Depend on setuptools for the pkg_resources - APIv3 /monitor route -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Silvie Chlupova <schlupov(a)redhat.com> 1.114-1 - Depend on setuptools for the pkg_resources - APIv3 /monitor route -------------------------------------------------------------------------------- ================================================================================ python-yara-4.1.3-2.el8 (FEDORA-EPEL-2021-82bb4953a6) Python binding for the YARA pattern matching tool -------------------------------------------------------------------------------- Update Information: update to bugfix release -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.3-2 - rebuild due to koji hickup * Wed Nov 10 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.3-1 - bump the python-yara as well to 4.1.3 * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 4.1.0-2 - Rebuilt for Python 3.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1963945 - yara-4.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1963945 [ 2 ] Bug #1997121 - python-yara-4.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1997121 -------------------------------------------------------------------------------- ================================================================================ spirv-headers-1.5.4-7.20210728.git449bc98.el8 (FEDORA-EPEL-2021-9d44f01b79) Header files from the SPIR-V registry -------------------------------------------------------------------------------- Update Information: Wine 6.0.2 update for EPEL 8 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 7 2021 Dave Airlie <airlied(a)redhat.com> - 1.5.4-7.20210728.git449bc98 - Update to spirv headers for 1.2.189 sdk * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.4-6.20210617.git07f259e - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jul 7 2021 Dave Airlie <airlied(a)redhat.com> - 1.5.4-5.20210617.git07f259 - Update to spirv headers for 1.2.182 sdk * Tue May 18 2021 Dave Airlie <airlied(a)redhat.com> - 1.5.4-4.20210415.gitdafead1 - Update to spirv headers for 1.2.176 sdk * Thu Jan 28 2021 Dave Airlie <airlied(a)redhat.com> - 1.5.4-3.20201128.gitf027d53 - Update to spirv headers for 1.2.162 sdk * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.4-2.20201024.git7845730 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Nov 2 2020 Dave Airlie <airlied(a)redhat.com> - 1.5.4-1 - Update to latest spirv headers * Tue Aug 4 2020 Dave Airlie <airlied(a)redhat.com> - 1.5.1-5.20200803.git3fdabd0 - Update to latest spirv headers * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.1-4.20200414.git2ad0492 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Apr 22 2020 Dave Airlie <airlied(a)redhat.com> - 1.5.1-3 - Update to latest spirv headers * Wed Jan 29 2020 Dave Airlie <airlied(a)redhat.com> - 1.5.1-2 - Update to latest spirv headers * Tue Nov 12 2019 Dave Airlie <airlied(a)redhat.com> - 1.5.1-1 - Latest git snapshot building vulkan * Thu Aug 1 2019 Dave Airlie <airlied(a)redhat.com> - 1.4.2-0.1 - Latest git snapshot for building vulkan. * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Jun 10 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4.1-1 - Release 1.4.1 * Thu Mar 7 2019 Dave Airlie <airlied(a)redhat.com> - 1.2-0.12.20190307.git03a0815 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1988447 - FR: Update to latest Wine-stable version https://bugzilla.redhat.com/show_bug.cgi?id=1988447 -------------------------------------------------------------------------------- ================================================================================ strongswan-5.9.4-2.el8 (FEDORA-EPEL-2021-3bd1d1c6ce) An OpenSource IPsec-based VPN and TNC solution -------------------------------------------------------------------------------- Update Information: Resolves rhbz#2018547 'strongswan restart' breaks ipsec started with strongswan- starter -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Paul Wouters <paul.wouters(a)aiven.io> - 5.9.4-2 - Resolves rhbz#2018547 'strongswan restart' breaks ipsec started with strongswan-starter - Return to using tmpfiles, but extend to cover strongswan-starter service too - Cleanup old patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #2018547 - 'strongswan restart' breaks ipsec started with strongswan-starter https://bugzilla.redhat.com/show_bug.cgi?id=2018547 -------------------------------------------------------------------------------- ================================================================================ vkd3d-1.2-3.el8 (FEDORA-EPEL-2021-9d44f01b79) D3D12 to Vulkan translation library -------------------------------------------------------------------------------- Update Information: Wine 6.0.2 update for EPEL 8 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Sep 22 2020 - Michael Cronenworth <mike(a)cchtml.com> - 1.2-1 - version update * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1988447 - FR: Update to latest Wine-stable version https://bugzilla.redhat.com/show_bug.cgi?id=1988447 -------------------------------------------------------------------------------- ================================================================================ wine-6.0.2-1.el8 (FEDORA-EPEL-2021-9d44f01b79) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information: Wine 6.0.2 update for EPEL 8 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Michael Cronenworth <mike(a)cchtml.com> 6.0.2-1 - version update * Thu Jan 14 2021 Michael Cronenworth <mike(a)cchtml.com> 6.0-1 - version update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1988447 - FR: Update to latest Wine-stable version https://bugzilla.redhat.com/show_bug.cgi?id=1988447 -------------------------------------------------------------------------------- ================================================================================ yara-4.1.3-1.el8 (FEDORA-EPEL-2021-82bb4953a6) Pattern matching Swiss knife for malware researchers -------------------------------------------------------------------------------- Update Information: update to bugfix release -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.3-1 - bump to 4.1.3 * Sat Nov 6 2021 Adrian Reber <adrian(a)lisas.de> - 4.1.1-5 - Rebuilt for protobuf 3.19.0 * Mon Oct 25 2021 Adrian Reber <adrian(a)lisas.de> - 4.1.1-4 - Rebuilt for protobuf 3.18.1 * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 4.1.1-3 - Rebuilt with OpenSSL 3.0.0 * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Mon May 24 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.1-1 - bump to 4.1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1963945 - yara-4.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1963945 [ 2 ] Bug #1997121 - python-yara-4.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1997121 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 10 Nov '21

10 Nov '21

The following Fedora EPEL 7 Security updates need testing: Age URL 54 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-39d32447db openssl11-1.1.1k-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-05dd12001e rpki-client-7.5-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beakerlib-1.28-1.el7 fedpkg-1.41-2.el7 perl-DBD-Firebird-1.33-1.el7 singularity-3.8.4-1.el7 Details about builds: ================================================================================ beakerlib-1.28-1.el7 (FEDORA-EPEL-2021-3fa01dac69) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - cleanup rlRun_LOG files at rlJournalEnd - close journal in rlDie - generate journal.xml at that moment - implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike - rlAssertRequired can now handle versioned dependencies - new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.28-1 - cleanup rlRun_LOG files at rlJournalEnd - close journal in rlDie - generate journal.xml at that moment - implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike - rlAssertRequired can now handle versioned dependencies - new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.41-2.el7 (FEDORA-EPEL-2021-49e14c7357) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: Allow branch requests for epel9-next. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 8 2021 Carl George <carl(a)george.computer> - 1.41-2 - Allow branch requests for epel9-next -------------------------------------------------------------------------------- ================================================================================ perl-DBD-Firebird-1.33-1.el7 (FEDORA-EPEL-2021-a0c5cdb30c) Firebird interface for perl -------------------------------------------------------------------------------- Update Information: - Upgrade to 1.33 (#2021689) -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Robert Scheck <robert(a)fedoraproject.org> 1.33-1 - Upgrade to 1.33 (#2021689) * Sat Aug 21 2021 Robert Scheck <robert(a)fedoraproject.org> 1.32-8 - Re-enabled s390x build since firebird 4.x is fixed (#1969393) * Mon Jul 26 2021 Robert Scheck <robert(a)fedoraproject.org> 1.32-7 - Disabled s390x build until firebird 4.x is fixed (#1969393) * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.32-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.32-5 - Perl 5.34 rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.32-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.32-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jun 23 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.32-2 - Perl 5.32 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021689 - perl-DBD-Firebird-1.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021689 -------------------------------------------------------------------------------- ================================================================================ singularity-3.8.4-1.el7 (FEDORA-EPEL-2021-a6457664ce) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to upstream 3.8.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.8.4-1 - Upgrade to upstream 3.8.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021707 - singularity-3.8.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021707 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 10 Nov '21

10 Nov '21

The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f89c59b568 botan2-2.12.1-4.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-742db3f554 rpki-client-7.5-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing beakerlib-1.28-1.el8 fedpkg-1.41-2.el8 java-latest-openjdk-17.0.1.0.12-3.rolling.el8 perl-DBD-Firebird-1.33-1.el8 singularity-3.8.4-1.el8 waiverdb-1.4.0-1.el8 Details about builds: ================================================================================ beakerlib-1.28-1.el8 (FEDORA-EPEL-2021-5572ddf950) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - cleanup rlRun_LOG files at rlJournalEnd - close journal in rlDie - generate journal.xml at that moment - implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike - rlAssertRequired can now handle versioned dependencies - new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.28-1 - cleanup rlRun_LOG files at rlJournalEnd - close journal in rlDie - generate journal.xml at that moment - implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike - rlAssertRequired can now handle versioned dependencies - new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.41-2.el8 (FEDORA-EPEL-2021-05b2056bdb) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: Allow branch requests for epel9-next. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 8 2021 Carl George <carl(a)george.computer> - 1.41-2 - Allow branch requests for epel9-next -------------------------------------------------------------------------------- ================================================================================ java-latest-openjdk-17.0.1.0.12-3.rolling.el8 (FEDORA-EPEL-2021-a21f8fb6c8) OpenJDK 17 Runtime Environment -------------------------------------------------------------------------------- Update Information: New in release OpenJDK 17.0.1 (2021-10-19): =========================================== Live versions of these release notes can be found at: * https://builds.shipilev.net/backports- monitor/release-notes-17.0.1.txt Security fixes - JDK-8263314: Enhance XML Dsig modes - JDK-8265167, CVE-2021-35556: Richer Text Editors - JDK-8265574: Improve handling of sheets - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit - JDK-8265776: Improve Stream handling for SSL - JDK-8266097, CVE-2021-35561: Better hashing support - JDK-8266103: Better specified spec values - JDK-8266109: More Resilient Classloading - JDK-8266115: More Manifest Jar Loading - JDK-8266137, CVE-2021-35564: Improve Keystore integrity - JDK-8266689, CVE-2021-35567: More Constrained Delegation - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic - JDK-8267712: Better LDAP reference processing - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking - JDK-8267735, CVE-2021-35586: Better BMP support - JDK-8268193: Improve requests of certificates - JDK-8268199: Correct certificate requests - JDK-8268205: Enhance DTLS client handshake - JDK-8268500: Better specified ParameterSpecs - JDK-8268506: More Manifest Digests - JDK-8269618, CVE-2021-35603: Better session identification - JDK-8269624: Enhance method selection support - JDK-8270398: Enhance canonicalization - JDK-8270404: Better canonicalization Other changes - JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021 - JDK-8243543: jtreg test security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java fails - JDK-8248899: security/infra/java/security/cert/CertPathValidator/certi fication/QuoVadisCA.java fails, Certificate has been revoked - JDK-8261088: Repeatable annotations without @Target cannot have containers that target module declarations - JDK-8262731: [macOS] Exception from "Printable.print" is swallowed during "PrinterJob.print" - JDK-8263531: Remove unused buffer int - JDK-8266182: Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java - JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type - JDK-8267666: Add option to jcmd GC.heap_dump to use existing file - JDK-8268019: C2: assert(no_dead_loop) failed: dead loop detected - JDK-8268261: C2: assert(n != __null) failed: Bad immediate dominator info. - JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance - JDK-8268963: [IR Framework] Some default regexes matching on PrintOptoAssembly in IRNode.java do not work on all platforms - JDK-8269297: Bump version numbers for JDK 17.0.1 - JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should be more resilient - JDK-8269574: C2: Avoid redundant uncommon traps in GraphKit::builtin_throw() for JVMTI exception events - JDK-8269763: The JEditorPane is blank after JDK-8265167 - JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers - JDK-8269882: stack-use-after-scope in NewObjectA - JDK-8269897: Shenandoah: Resolve UNKNOWN access strength, where possible - JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status - JDK-8269993: [Test]: java/net/httpclient/DigestEchoClientSSL.java contains redundant @run tags - JDK-8270094: Shenandoah: Provide human-readable labels for test configurations - JDK-8270096: Shenandoah: Optimize gc/shenandoah/TestRefprocSanity.java for interpreter mode - JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails with "Guard against surprises" assert - JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross- Realm Setup - JDK-8270280: security/infra/java/security/cert/CertPathValidator /certification/LetsEncryptCA.java OCSP response error - JDK-8270344: Session resumption errors - JDK-8271203: C2: assert(iff->Opcode() == Op_If || iff->Opcode() == Op_CountedLoopEnd || iff->Opcode() == Op_RangeCheck) failed: Check this code when new subtype is added - JDK-8271276: C2: Wrong JVM state used for receiver null check - JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4 - JDK-8271589: fatal error with variable shift count integer rotate operation. - JDK-8271723: Unproblemlist runtime/InvocationTests/invokevirtualTests.java - JDK-8271730: Client authentication using RSASSA-PSS fails after correct certificate requests - JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load barrier - JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon - JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj - JDK-8272326: java/util/Random/RandomTestMoments.java had two Gaussian fails - JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz after JDK-8255790 - JDK-8272472: StackGuardPages test doesn't build with glibc 2.34 - JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182 - JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used - JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848 - JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertP athValidator/certification/BuypassCA.java no longer needs ocspEnabled - JDK-8272806: [macOS] "Apple AWT Internal Exception" when input method is changed - JDK-8273358: macOS Monterey does not have the font Times needed by Serif Notes on individual issues: =========================== security- libs/java.security: JDK-8271434: Removed IdenTrust Root Certificate ---------------------------------------------------------------------- The following root certificate from IdenTrust has been removed from the `cacerts` keystore: Alias Name: identrustdstx3 [jdk] Distinguished Name: CN=DST Root CA X3, O=Digital Signature Trust Co. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 5 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.35-3.rolling - Patch syslookup.c so it actually has some code to be compiled into libsyslookup - Related: rhbz#2013846 * Wed Nov 3 2021 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:17.0.1.0.12-2.rolling - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy secmod.db file as part of nss * Wed Oct 20 2021 Petra Alice Mikova <pmikova(a)redhat.com> - 1:17.0.1.0.12-1.rolling - October CPU update to jdk 17.0.1+12 - dropped commented-out source line * Mon Oct 11 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.35-3.rolling - Update release notes to document the major changes between OpenJDK 11 & 17. * Sun Oct 10 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.35-2.rolling - Fix unused function compiler warning found in systemconf.c - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access. - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false * Sun Oct 10 2021 Martin Balao <mbalao(a)redhat.com> - 1:17.0.0.0.35-2.rolling - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers. - Add patch to login to the NSS software token when in FIPS mode. - Add patch to allow plain key import. * Tue Sep 14 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.35-1.rolling - Update to jdk-17+35, also known as jdk-17-ga. - Switch to GA mode. * Wed Sep 8 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.33-0.3.ea.rolling - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. * Wed Sep 8 2021 Martin Balao <mbalao(a)redhat.com> - 1:17.0.0.0.33-0.3.ea.rolling - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. * Mon Sep 6 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.33-0.2.ea.rolling - Update RH1655466 FIPS patch with changes in OpenJDK 8 version. - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file. - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg. - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable. - Disable FIPS mode support unless com.redhat.fips is set to "true". - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable). - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071) * Mon Sep 6 2021 Martin Balao <mbalao(a)redhat.com> - 1:17.0.0.0.33-0.2.ea.rolling - Support the FIPS mode crypto policy (RH1655466) - Use appropriate keystore types when in FIPS mode (RH1818909) - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986) * Mon Aug 30 2021 Jiri Vanek <jvanek(a)redhat.com> - 1:17.0.0.0.33-0.1.ea.rolling - alternatives creation moved to posttrans - Thus fixing the old reisntall issue: - https://bugzilla.redhat.com/show_bug.cgi?id=1200302 - https://bugzilla.redhat.com/show_bug.cgi?id=1976053 * Fri Jul 30 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.33-0.0.ea.rolling - Update to jdk-17+33, including JDWP fix and July 2021 CPU - Resolves: rhbz#1972529 * Sat Jul 24 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.26-0.4.ea.rolling - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. - Remove restriction on disabling product build, as debug packages no longer have javadoc packages. * Sat Jul 24 2021 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:17.0.0.0.26-0.2.ea.rolling - Re-enable TestSecurityProperties after inclusion of PR3695 * Sat Jul 24 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.0.0.26-0.2.ea.rolling - Add PR3695 to allow the system crypto policy to be turned off * Sat Jul 24 2021 Petra Alice Mikova <pmikova(a)redhat.com> - 1:17.0.0.0.26-0.0.ea.rolling - update sources to jdk 17.0.0+26 - set is_ga to 0, as this is early access build - change vendor_version_string - change path to the version-numbers.conf - removed rmid binary from files and from slaves - removed JAVAC_FLAGS=-g from make command, as it breaks the build since JDK-8258407 - add lib/libsyslookup.so to files - renamed lib/security/blacklisted.certs to lib/security/blocked.certs - add lib/libsvml.so for intel - skip debuginfo check for libsyslookup.so on s390x * Fri Jul 23 2021 Jiri Vanek <jvanek(a)redhat.com> - 1:16.0.2.0.7-1.rolling - bumped to security update of 16.0.2-ga * Tue Jun 29 2021 Jiri Vanek <jvanek(a)redhat.com> - 1:16.0.1.0.9-5.rolling - renamed source15 to source17 to match el8 - added fips support: - added pr3695-toggle_system_crypto_policy.patch ; missing prerequisity - removed rh1655466-global_crypto_and_fips.patch; jdk16 do not have default algorithm, it throws exception - adapted rh1655466-global_crypto_and_fips.patch - adapted rh1860986-disable_tlsv1.3_in_fips_mode.patch (?) - adapted rh1915071-always_initialise_configurator_access.patch -------------------------------------------------------------------------------- ================================================================================ perl-DBD-Firebird-1.33-1.el8 (FEDORA-EPEL-2021-57f7e7ee94) Firebird interface for perl -------------------------------------------------------------------------------- Update Information: - Upgrade to 1.33 (#2021689) -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Robert Scheck <robert(a)fedoraproject.org> 1.33-1 - Upgrade to 1.33 (#2021689) * Sat Aug 21 2021 Robert Scheck <robert(a)fedoraproject.org> 1.32-8 - Re-enabled s390x build since firebird 4.x is fixed (#1969393) * Mon Jul 26 2021 Robert Scheck <robert(a)fedoraproject.org> 1.32-7 - Disabled s390x build until firebird 4.x is fixed (#1969393) * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.32-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.32-5 - Perl 5.34 rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.32-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.32-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jun 23 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.32-2 - Perl 5.32 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021689 - perl-DBD-Firebird-1.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021689 -------------------------------------------------------------------------------- ================================================================================ singularity-3.8.4-1.el8 (FEDORA-EPEL-2021-602122542b) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to upstream 3.8.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.8.4-1 - Upgrade to upstream 3.8.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021707 - singularity-3.8.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021707 -------------------------------------------------------------------------------- ================================================================================ waiverdb-1.4.0-1.el8 (FEDORA-EPEL-2021-f1883aea50) Service for waiving results in ResultsDB -------------------------------------------------------------------------------- Update Information: On an authentication error, waiverdb-cli will now print the actual error -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Lukas Holecek <hluk(a)email.cz> - 1.4.0-1 - On an authentication error, waiverdb-cli will now print the actual error message instead of a JSONDecodeError exception. - Documentation has been updated and moved to: https://waiverdb.readthedocs.io * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.3.0-2 - Rebuilt for Python 3.10 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 09 Nov '21

09 Nov '21

The following Fedora EPEL 7 Security updates need testing: Age URL 53 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing openssl11-1.1.1k-1.el7 rpki-client-7.5-1.el7 Details about builds: ================================================================================ openssl11-1.1.1k-1.el7 (FEDORA-EPEL-2021-39d32447db) Utilities from the general purpose cryptography library with TLS implementation -------------------------------------------------------------------------------- Update Information: - backport from 1.1.1k-4: Fixes bugs in s390x AES code - backport from 1.1.1k-4: Uses the first detected address family if IPv6 is not available - backport from 1.1.1k-4: Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 and as per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. Resolves: rhbz#197821, related: rhbz#1934534 - backport from 1.1.1k-3: Cleansup the peer point formats on renegotiation. Resolves rhbz#1965362 - backport from 1.1.1k-2: Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085 - backport from 1.1.1k-2: Using safe primes for FIPS DH self-test - backport from 1.1.1k-1: Update to version 1.1.1k - backport from 1.1.1g-16: Use AI_ADDRCONFIG only when explicit host name is given - backport from 1.1.1g-16: Allow only curves defined in RFC 8446 in TLS 1.3 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Robert Scheck <robert(a)fedoraproject.org> 1.1.1k-1 - backport from 1.1.1k-4: Fixes bugs in s390x AES code - backport from 1.1.1k-4: Uses the first detected address family if IPv6 is not available - backport from 1.1.1k-4: Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. Resolves: rhbz#197821, related: rhbz#1934534 - backport from 1.1.1k-3: Cleansup the peer point formats on renegotiation. Resolves rhbz#1965362 - backport from 1.1.1k-2: Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085 - backport from 1.1.1k-2: Using safe primes for FIPS DH self-test - backport from 1.1.1k-1: Update to version 1.1.1k - backport from 1.1.1g-16: Use AI_ADDRCONFIG only when explicit host name is given - backport from 1.1.1g-16: Allow only curves defined in RFC 8446 in TLS 1.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1930310 - CVE-2021-23841 openssl: NULL pointer dereference in X509_issuer_and_serial_hash() https://bugzilla.redhat.com/show_bug.cgi?id=1930310 [ 2 ] Bug #1930324 - CVE-2021-23840 openssl: integer overflow in CipherUpdate https://bugzilla.redhat.com/show_bug.cgi?id=1930324 -------------------------------------------------------------------------------- ================================================================================ rpki-client-7.5-1.el7 (FEDORA-EPEL-2021-05dd12001e) RPKI validator to support BGP Origin Validation -------------------------------------------------------------------------------- Update Information: rpki-client 7.5 =============== * Make rpki-client more resilient regarding untrusted input: - Fail repository synchronisation after 15min runtime. - Limit the number of repositories per TAL. - Don't allow `DOCTYPE` definitions in RRDP XML files. - Fix detection of HTTP redirect loops. * Limit the number of concurrent `rsync` processes. * Fix `CRLF` in TAL files. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Robert Scheck <robert(a)fedoraproject.org> 7.5-1 - Upgrade to 7.5 (#2021523) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021523 - rpki-client-7.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021523 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 09 Nov '21

09 Nov '21

The following Fedora EPEL 8 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f89c59b568 botan2-2.12.1-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing R-4.1.2-1.el8 duplicity-0.8.21-1.el8 php-geshi-1.0.9.1-9.el8 python-pyvmomi-7.0.3-1.el8 rpki-client-7.5-1.el8 Details about builds: ================================================================================ R-4.1.2-1.el8 (FEDORA-EPEL-2021-fe3db368d2) A language for data analysis and graphics -------------------------------------------------------------------------------- Update Information: Update R to 4.1.2 on EL8, F34, F35. Fix issue where java scriptlets were no longer happening at the correct part of the transaction (thanks to I��aki ��car). -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Tom Callaway <spot(a)fedoraproject.org> - 4.1.2-1 - update to 4.1.2 * Fri Oct 29 2021 I��aki ��car <iucar(a)fedoraproject.org> - 4.1.1-2 - Move javareconf to posttrans (bz 2009974) * Sat Aug 14 2021 Tom Callaway <spot(a)fedoraproject.org> - 4.1.1-1 - update to 4.1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2019175 - R-4.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2019175 -------------------------------------------------------------------------------- ================================================================================ duplicity-0.8.21-1.el8 (FEDORA-EPEL-2021-1a46542a00) Encrypted bandwidth-efficient backup using rsync algorithm -------------------------------------------------------------------------------- Update Information: 0.8.21 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 0.8.21-1 - 0.8.21 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021588 - duplicity-0.8.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021588 -------------------------------------------------------------------------------- ================================================================================ php-geshi-1.0.9.1-9.el8 (FEDORA-EPEL-2021-4a112ea07f) Generic syntax highlighter -------------------------------------------------------------------------------- Update Information: Initial build for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #2018749 - Please build php-geshi for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=2018749 -------------------------------------------------------------------------------- ================================================================================ python-pyvmomi-7.0.3-1.el8 (FEDORA-EPEL-2021-0c229473ed) vSphere Python SDK -------------------------------------------------------------------------------- Update Information: bump to v7.0.3 (7.0U3 APIs) -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 10 2021 Raphael Groner <raphgro(a)fedoraproject.org> - 7.0.3-1 - bump to v7.0.3 (7.0U3 APIs) * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rpki-client-7.5-1.el8 (FEDORA-EPEL-2021-742db3f554) RPKI validator to support BGP Origin Validation -------------------------------------------------------------------------------- Update Information: rpki-client 7.5 =============== * Make rpki-client more resilient regarding untrusted input: - Fail repository synchronisation after 15min runtime. - Limit the number of repositories per TAL. - Don't allow `DOCTYPE` definitions in RRDP XML files. - Fix detection of HTTP redirect loops. * Limit the number of concurrent `rsync` processes. * Fix `CRLF` in TAL files. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 9 2021 Robert Scheck <robert(a)fedoraproject.org> 7.5-1 - Upgrade to 7.5 (#2021523) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2021523 - rpki-client-7.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2021523 --------------------------------------------------------------------------------

1 0

EPEL on RHEL 8.2 broken?
by Richard Shaw 09 Nov '21

09 Nov '21

I requested a CentOS 8 Stream server from IT at $DAYJOB, but it's not IT approved, so they gave me a RHEL 8.2 instance. Well fine, I don't need their support but whatever... I went to enable EPEL per the docs[1]: $ sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm $ sudo subscription-manager repos --enable "codeready-builder-for-rhel-8-$(arch)-rpms" So far so good, now I try a 'sudo dnf --refresh update' and get: $ sudo dnf --refresh update Updating Subscription Management repositories. Extra Packages for Enterprise Linux Modular 8.2 - x86_64 213 kB/s | 79 kB 00:00 Errors during downloading metadata for repository 'epel-modular': - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-modular-8.2&arch=x86_6… (IP: 67.219.144.68) - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-modular-8.2&arch=x86_6… (IP: 38.145.60.21) - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-modular-8.2&arch=x86_6… (IP: 38.145.60.20) Error: Failed to download metadata for repo 'epel-modular': Cannot prepare internal mirrorlist: Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-modular-8.2&arch=x86_6… (IP: 67.219.144.68) So I try disabling modular repos: $ sudo dnf --refresh --disablerepo=epel-modular update Updating Subscription Management repositories. Extra Packages for Enterprise Linux 8.2 - x86_64 76 kB/s | 79 kB 00:01 Errors during downloading metadata for repository 'epel': - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-8.2&arch=x86_64&infra=… (IP: 152.19.134.198) - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-8.2&arch=x86_64&infra=… (IP: 140.211.169.206) - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-8.2&arch=x86_64&infra=… (IP: 140.211.169.206) - Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-8.2&arch=x86_64&infra=… (IP: 152.19.134.142) Error: Failed to download metadata for repo 'epel': Cannot prepare internal mirrorlist: Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=epel-8.2&arch=x86_64&infra=… (IP: 152.19.134.198) What gives? Thanks, Richard

2 3

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 09 Nov '21

09 Nov '21

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2021-11-10 from 16:00:00 to 17:00:00 US/Eastern At fedora-meeting(a)irc.libera.chat The meeting will be about: This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #meetingname EPEL #topic Intros #topic Old Business #topic EPEL-7 #topic EPEL-8 #topic EPEL-9 #topic Openfloor #endmeeting Source: https://calendar.fedoraproject.org//meeting/9854/

1 0

Add me to mailing list
by mbalaen opteras 09 Nov '21

09 Nov '21

mbalaenopteras(a)gmail.com

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 08 Nov '21

08 Nov '21

The following Fedora EPEL 7 Security updates need testing: Age URL 52 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f69cb3c1f1 rust-1.56.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8f1a739899 cacti-1.2.19-1.el7 cacti-spine-1.2.19-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing NetworkManager-strongswan-1.5.2-1.el7 dkms-3.0.0-1.el7 python-resultsdb_api-2.1.4-1.el7 Details about builds: ================================================================================ NetworkManager-strongswan-1.5.2-1.el7 (FEDORA-EPEL-2021-7732dd9053) NetworkManager strongSwan IPSec VPN plug-in -------------------------------------------------------------------------------- Update Information: ## NetworkManager-strongswan-1.5.2 - Reduce height of config dialog by moving options/proposals to tabs - Migrated appdata to metainfo (renamed and moved the file) ## NetworkManager-strongswan-1.5.1 - Fixes password entry for private keys ## NetworkManager-strongswan-1.5.0 - EAP-TLS authentication - Certificate source (file, agent, smartcard) is selectable independently - Add support to configure local and remote identities - Support configuring a custom server port - Show hint regarding password storage policy - Replaced the term "gateway" with "server" - Fixes build issues due to use of deprecated GLib macros/functions - Updated Glade file to GTK 3.2 ## NetworkManager-strongswan-1.4.5 - Enables the IPv6 tab in the connection dialog ## NetworkManager-strongswan-1.4.4 - Fixed paths when building without libnm-glib - Fixed proposal tooltips and updated German translation -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 8 2021 Petr Men��k <pemensik(a)redhat.com> - 1.5.2-1 - Update to 1.5.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1662050 - feature CUSTOM:NetworkManager backend in critical plugin 'nm-backend' failed to load https://bugzilla.redhat.com/show_bug.cgi?id=1662050 -------------------------------------------------------------------------------- ================================================================================ dkms-3.0.0-1.el7 (FEDORA-EPEL-2021-c832d5601a) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Update to 3.0.0, major cleanup and refactor. Solves the issues of kernel modules disappearing if *both* an updated DKMS module package and a new kernel are in the same YUM/DNF transaction. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 8 2021 Simone Caronni <negativo17(a)gmail.com> - 3.0.0-1 - Update to 3.0.0. * Sat Oct 30 2021 Simone Caronni <negativo17(a)gmail.com> - 2.8.8-1 - Update to 2.8.8. * Fri Oct 1 2021 Simone Caronni <negativo17(a)gmail.com> - 2.8.7-1 - Update to 2.8.7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2018763 - dkms-2.8.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2018763 -------------------------------------------------------------------------------- ================================================================================ python-resultsdb_api-2.1.4-1.el7 (FEDORA-EPEL-2021-1593ae02f0) Interface api to ResultsDB -------------------------------------------------------------------------------- Update Information: - add auth class with basic http auth support -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 8 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 2.1.4-1 - add auth class with basic http auth support --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 08 Nov '21

08 Nov '21

The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-242bfc4463 cacti-1.2.19-1.el8 cacti-spine-1.2.19-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f89c59b568 botan2-2.12.1-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing NetworkManager-strongswan-1.5.2-1.el8 dkms-3.0.0-1.el8 python-resultsdb_api-2.1.4-1.el8 Details about builds: ================================================================================ NetworkManager-strongswan-1.5.2-1.el8 (FEDORA-EPEL-2021-6cb990c547) NetworkManager strongSwan IPSec VPN plug-in -------------------------------------------------------------------------------- Update Information: NetworkManager user interface for strongswan configuration. - note: It does not work well on SELinux in enforcing mode, if certificates are stored in home. Visit [bug](https://bugzilla.redhat.com/show_bug.cgi?id=1662050) for details. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ dkms-3.0.0-1.el8 (FEDORA-EPEL-2021-bdd50a8079) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Update to 3.0.0, major cleanup and refactor. Solves the issues of kernel modules disappearing if *both* an updated DKMS module package and a new kernel are in the same YUM/DNF transaction. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 8 2021 Simone Caronni <negativo17(a)gmail.com> - 3.0.0-1 - Update to 3.0.0. * Sat Oct 30 2021 Simone Caronni <negativo17(a)gmail.com> - 2.8.8-1 - Update to 2.8.8. * Fri Oct 1 2021 Simone Caronni <negativo17(a)gmail.com> - 2.8.7-1 - Update to 2.8.7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2018763 - dkms-2.8.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2018763 -------------------------------------------------------------------------------- ================================================================================ python-resultsdb_api-2.1.4-1.el8 (FEDORA-EPEL-2021-40fd5acf2f) Interface api to ResultsDB -------------------------------------------------------------------------------- Update Information: - add auth class with basic http auth support -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel November 2021