epel-devel March 2021

epel-devel@lists.fedoraproject.org

6 participants
73 discussions

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 30 Mar '21

30 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-eb1a7d918d atasm-1.09-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9222415f70 exim-4.94-2.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing assimp-5.0.1-3.el8 bitstream-1.5-4.el8 chromium-89.0.4389.90-3.el8 dvblast-3.4-6.el8 kiwi-9.23.22-1.el8 Details about builds: ================================================================================ assimp-5.0.1-3.el8 (FEDORA-EPEL-2021-fd1b923c69) Library to import various 3D model formats into applications -------------------------------------------------------------------------------- Update Information: Fix library install dir specification (rhbz#1943862). This should correct errors with CMake packages building against assimp on 64-bit architectures. ---- Add an upstream patch to fix imported library locations, resolving issues when finding assimp in CMake projects. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 29 2021 Rich Mattes <richmattes(a)gmail.com> - 5.0.1-3 - Fix library install dir specification (rhbz#1943862) - Remove un-needed build dependency on ILUT * Tue Mar 23 2021 Scott K Logan <logans(a)cottsay.net> - 5.0.1-2 - Add an upstream patch to fix imported library locations -------------------------------------------------------------------------------- References: [ 1 ] Bug #1943862 - Invalid ASSIMP_LIBRARY_DIRS reported from CMake https://bugzilla.redhat.com/show_bug.cgi?id=1943862 -------------------------------------------------------------------------------- ================================================================================ bitstream-1.5-4.el8 (FEDORA-EPEL-2021-3d5e67ff72) Simpler access to binary structures such as specified by MPEG, DVB, IETF -------------------------------------------------------------------------------- Update Information: Introduce dvblast. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ chromium-89.0.4389.90-3.el8 (FEDORA-EPEL-2021-b26bce013a) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Fix issue where chromium would crash upon accessing components/cast_*. Thanks to Gentoo for the patch. It also fixes some security issues, because why not: CVE-2021-21191 CVE-2021-21192 CVE-2021-21193 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.90-3 - apply upstream fix for newer system libva * Wed Mar 24 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.90-2 - fix crashes with components/cast_* * Thu Mar 18 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.90-1 - update to 89.0.4389.90 - disable auto-download of widevine binary only blob * Mon Mar 15 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.82-2 - add support for futex_time64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1939460 - CVE-2021-21191 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1939460 [ 2 ] Bug #1939461 - CVE-2021-21192 chromium-browser: Heap buffer overflow in tab groups https://bugzilla.redhat.com/show_bug.cgi?id=1939461 [ 3 ] Bug #1939462 - CVE-2021-21193 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1939462 -------------------------------------------------------------------------------- ================================================================================ dvblast-3.4-6.el8 (FEDORA-EPEL-2021-3d5e67ff72) Simple and powerful streaming application -------------------------------------------------------------------------------- Update Information: Introduce dvblast. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ kiwi-9.23.22-1.el8 (FEDORA-EPEL-2021-fa909bb47f) Flexible operating system image builder -------------------------------------------------------------------------------- Update Information: Update to 9.23.22 to fix `yum` redirecting to `dnf` properly in image descriptions. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 29 2021 Neal Gompa <ngompa13(a)gmail.com> - 9.23.22-1 - Update to 9.23.22 (RH#1941503) * Wed Mar 17 2021 Neal Gompa <ngompa13(a)gmail.com> - 9.23.20-3 - Update kiwi-schema provides to match the current schema version - Sync systemdeps dependencies from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1941503 - kiwi-9.23.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1941503 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 28 Mar '21

28 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-eb1a7d918d atasm-1.09-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9222415f70 exim-4.94-2.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing R-qtl-1.48.1-1.el8 eggdrop-1.9.0-1.el8 golang-github-prometheus-2.24.1-4.el8 golang-github-prometheus-node-exporter-1.1.1-2.el8 libmediainfo-21.03-1.el8 libzen-0.4.39-1.el8 mediaconch-18.03.2-17.el8 mediainfo-21.03-1.el8 mlt-6.24.0-4.el8 pmount-0.9.23-19.el8 Details about builds: ================================================================================ R-qtl-1.48.1-1.el8 (FEDORA-EPEL-2021-4c36e06148) Tools for analyzing QTL experiments -------------------------------------------------------------------------------- Update Information: qtl 1.48-1 -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.48.1-1 - Update to 1.48-1 -------------------------------------------------------------------------------- ================================================================================ eggdrop-1.9.0-1.el8 (FEDORA-EPEL-2021-3608015f66) The world's most popular Open Source IRC bot -------------------------------------------------------------------------------- Update Information: Eggdrop v1.9.0 ============== General changes --------------- - Added `CAP` support, allowing Eggdrop to extend IRC server capabilities - Added support for SASL authentication - Added a BETA threaded DNS capability, enabled with the `--enable-tdns` configure flag. This allows asynchronus DNS requests similar to the what the current DNS module offers, but using host system capability instead of rewriting it from scratch. Using this means you no longer have to use the DNS module. - Eggdrop can listen on multiple IPs (and ports) now by using multiple instances of the `listen` command - Added Twitch support - Added support for users that change hosts mid-session, usually associated with authenticating with services (396 raw code and `CHGHOST` capability). - Added support for the users that change their realname value mid-session (`SETNAME` capability) - Added the ability for Eggdrop to internally track the away status of an individual, with some limitations. - Added the `make sslsilent` option that creates an SSL certificate keypair non-interactively, to assist in scripted/automated installs - Differentiate between scripted and server `WHOX` calls, preventing mangling of channel userlists - The `-n` flag is no longer required to run Eggdrop in terminal mode; just `-t` or `-c` are fine by themselves - Added some checks to flags added via `.chattr` and `.botattr` to clearly identify what happens when you add flags that can't co-exist together Botnet changes -------------- - Removed automatic upgrade to TLS-protected botnet links with STARTTLS. Based on user feedback, protecting a botnet link is now at the discretion of the user. Prefixing a port with a `+` will require a TLS connection, otherwise the connection will be in plaintext. A port not prefixed with a `+` can still be upgraded with STARTTLS, allowing 1.8 bots and scripts to initiate a secure connection, but 1.9.0 bots will not attempt the upgrade. - Added granular userfile sharing flags (bcejnu). Adding these flags can limit userfile sharing to a combination of bans, invites, exempts, channels, users, and ignores (or still the s flag for all these). - No longer try port+1,2,3 when connecting to a botnet port doesn't work the first time Tcl API changes --------------- - Added the RAWT bind, which will (eventually) phase out the RAW bind. Implementing the IRCv3 message-tags capability requires a new way to handle basic IRC messages, and RAWT was added in a way so that a) RAW binds in old scripts still work and b) the RAWT bind can handle messages that either do or do not have message-tags attached - Added the INVT bind, allowing Eggdrop to react to a standard invitation, or the new IRCv3 invite- notify capability - Added the AWY3 bind, allowing Eggdrop to react to the new IRCv3 away-notify capability. - Added the refreshchan command, which refreshes without removing existing channel status information tracked by Eggdrop for users on a channel. - Added the isaway command, which returns if a user is listed by the server as away or not, if using the IRCv3 away-notify capability. If away-notify is not enabled, this command can still be used effectively in conjunction with `refreshchan w`, described above. - Added the hand2nicks command, an alternative to the hand2nick command. hand2nicks returns ALL nicks matching a handle, not just the first one. - Aded the socklist command, an update to the dcclist command. Returns similar info as a Tcl dict, and adds the IP to the information. - Use the system's strftime formatting instead of Eggdrop-provided GNU version/extensions. This could cause formatting differences or errors between systems. To ensure fully portable code, developers should only rely on POSIX-compliant formatting specifiers. - The dcclist command now returns port information and whether or not TLS is in use for that port. This change could affect field-based parsers depending on this command - Added the addserver and delserver command, to *gasp* add and delete aserver from Eggdrop's server list - Modified the listen command to accept an optional IP argument. This allows Eggdrop to listen on multiple addresses by using multiple listen commands in the config file or Tcl script. If no IP is specified, 0.0.0.0 is used as default. As a result of this change, the listen-addr command is no longer needed and removed from the config file - Added an optional -channel flag to the end of the is* commands (isban, isexempt, etc). This flag prevents the is* command from checking the global list and returning a '1' when there is no channel-specific case - Added several Tcl commands and binds to enable better interaction with the Twitch gaming service. Because these commands only work with a Twitch server, they are not included in `tcl-commands.doc` but rather `twitch-tcl-commands.doc`, located in the `doc/` directory. - Limited the expiration for new bans, ignores and exempts to 2000 days. Module changes -------------- - Added the PBKDF2 module, which allows Eggdrop to hash passwords using the PBKDF2 algorithm. This module is a stepping stone to future, more adaptable hashing and encryption implementation. IMPORTANT: PLEASE read `doc/PBKDF2` for more information on how to properly use it, you could accidentally render old passwords useless! - Added the twitch module, which allows Eggdrop to connect to the Twitch gaming service. As Twitch offers only a limited subset of standard IRC functionality, be prepared for some commands or scripts to work differently than on a normal IRC server. Please read `doc/TWITCH` for more information. - Added the ident module, which can automatically interact with a running oidentd service or allow Eggdrop to serve as its own ident server to respond to ident requests during the server connection process. Eggdrop config file changes --------------------------- - Added additional net-types for freenode, Quakenet, and Rizon (`net-type`) - Added ability to choose specific SSL/TLS protocols to use (`ssl-protocols`) - Added ability to allow bots to remain linked if userfile sharing fails (`sharefail-unlink`) - Changed the method Eggdrop uses to add servers from a `{}` list to the new addserver command - Removed the `listen-addr` command. See above; the `listen` command now accepts an optional IP argument in lieu of using `listen-addr` - Added the `show-uname` setting, which allows you to disable the display of uname info for the host system in things like `.status` -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Robert Scheck <robert(a)fedoraproject.org> 1.9.0-1 - Upgrade to 1.9.0 (#1933540) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1933540 - eggdrop-1.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1933540 -------------------------------------------------------------------------------- ================================================================================ golang-github-prometheus-2.24.1-4.el8 (FEDORA-EPEL-2021-e61d872142) Prometheus monitoring system and time series database -------------------------------------------------------------------------------- Update Information: Add ExecReload to service file -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.24.1-4 - Add ExecReload to service file -------------------------------------------------------------------------------- ================================================================================ golang-github-prometheus-node-exporter-1.1.1-2.el8 (FEDORA-EPEL-2021-1541bcb20a) Exporter for machine metrics -------------------------------------------------------------------------------- Update Information: Fix binary location -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.1.1-2 - Fix binary location -------------------------------------------------------------------------------- ================================================================================ libmediainfo-21.03-1.el8 (FEDORA-EPEL-2021-668f089f78) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 21.03-1 - Update to 21.03 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.09-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Nov 7 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.09-1 - Update to 20.09 -------------------------------------------------------------------------------- ================================================================================ libzen-0.4.39-1.el8 (FEDORA-EPEL-2021-668f089f78) Shared library for libmediainfo and medianfo* -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 0.4.39-1 - Update to 0.4.39 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.38-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.38-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mediaconch-18.03.2-17.el8 (FEDORA-EPEL-2021-668f089f78) Most relevant technical and tag data for video and audio files (CLI) -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 18.03.2-17 - Rebuild with new mediainfo 21.03 * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 18.03.2-16 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 18.03.2-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Sep 29 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 18.03.2-14 - Rebuild for libevent soname change * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 18.03.2-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mediainfo-21.03-1.el8 (FEDORA-EPEL-2021-668f089f78) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 21.03-1 - Update to 21.03 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.09-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Nov 7 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.09-1 - Update to 20.09 -------------------------------------------------------------------------------- ================================================================================ mlt-6.24.0-4.el8 (FEDORA-EPEL-2021-6163624e96) Toolkit for broadcasters, video editors, media players, transcoders -------------------------------------------------------------------------------- Update Information: Renable php and ruby plugins on epel8 -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 S��rgio Basto <sergio(a)serjux.com> - 6.24.0-4 - Renable php and ruby plugins on epel8 -------------------------------------------------------------------------------- ================================================================================ pmount-0.9.23-19.el8 (FEDORA-EPEL-2021-22ea715f11) Enable normal user mount -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1941159 - plans for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1941159 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 28 Mar '21

28 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f38c5da36 lib3mf-2.0.1-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f980da66e tor-0.3.5.14-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad zarafa-7.1.14-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a650134f4f exim-4.94-2.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b1d43d7b48 atasm-1.09-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-qtl-1.48.1-1.el7 dmtcp-2.6.1~rc1-0.1.el7 eggdrop-1.9.0-1.el7 golang-github-prometheus-2.24.1-4.el7 golang-github-prometheus-node-exporter-1.1.1-2.el7 libmediainfo-21.03-1.el7 libzen-0.4.39-1.el7 mediainfo-21.03-1.el7 Details about builds: ================================================================================ R-qtl-1.48.1-1.el7 (FEDORA-EPEL-2021-733a895881) Tools for analyzing QTL experiments -------------------------------------------------------------------------------- Update Information: qtl 1.48-1 -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.48.1-1 - Update to 1.48-1 -------------------------------------------------------------------------------- ================================================================================ dmtcp-2.6.1~rc1-0.1.el7 (FEDORA-EPEL-2021-9f254448f3) Checkpoint/Restart functionality for Linux processes -------------------------------------------------------------------------------- Update Information: Preparing for upstream release 2.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 17 2019 Gene Cooperman <gene(a)ccs.neu.edu> - 2.6.1~rc1-0.1 - Preparing for upstream release 2.3. -------------------------------------------------------------------------------- ================================================================================ eggdrop-1.9.0-1.el7 (FEDORA-EPEL-2021-9aea68c7c2) The world's most popular Open Source IRC bot -------------------------------------------------------------------------------- Update Information: Eggdrop v1.9.0 ============== General changes --------------- - Added `CAP` support, allowing Eggdrop to extend IRC server capabilities - Added support for SASL authentication - Added a BETA threaded DNS capability, enabled with the `--enable-tdns` configure flag. This allows asynchronus DNS requests similar to the what the current DNS module offers, but using host system capability instead of rewriting it from scratch. Using this means you no longer have to use the DNS module. - Eggdrop can listen on multiple IPs (and ports) now by using multiple instances of the `listen` command - Added Twitch support - Added support for users that change hosts mid-session, usually associated with authenticating with services (396 raw code and `CHGHOST` capability). - Added support for the users that change their realname value mid-session (`SETNAME` capability) - Added the ability for Eggdrop to internally track the away status of an individual, with some limitations. - Added the `make sslsilent` option that creates an SSL certificate keypair non-interactively, to assist in scripted/automated installs - Differentiate between scripted and server `WHOX` calls, preventing mangling of channel userlists - The `-n` flag is no longer required to run Eggdrop in terminal mode; just `-t` or `-c` are fine by themselves - Added some checks to flags added via `.chattr` and `.botattr` to clearly identify what happens when you add flags that can't co-exist together Botnet changes -------------- - Removed automatic upgrade to TLS-protected botnet links with STARTTLS. Based on user feedback, protecting a botnet link is now at the discretion of the user. Prefixing a port with a `+` will require a TLS connection, otherwise the connection will be in plaintext. A port not prefixed with a `+` can still be upgraded with STARTTLS, allowing 1.8 bots and scripts to initiate a secure connection, but 1.9.0 bots will not attempt the upgrade. - Added granular userfile sharing flags (bcejnu). Adding these flags can limit userfile sharing to a combination of bans, invites, exempts, channels, users, and ignores (or still the s flag for all these). - No longer try port+1,2,3 when connecting to a botnet port doesn't work the first time Tcl API changes --------------- - Added the RAWT bind, which will (eventually) phase out the RAW bind. Implementing the IRCv3 message-tags capability requires a new way to handle basic IRC messages, and RAWT was added in a way so that a) RAW binds in old scripts still work and b) the RAWT bind can handle messages that either do or do not have message-tags attached - Added the INVT bind, allowing Eggdrop to react to a standard invitation, or the new IRCv3 invite- notify capability - Added the AWY3 bind, allowing Eggdrop to react to the new IRCv3 away-notify capability. - Added the refreshchan command, which refreshes without removing existing channel status information tracked by Eggdrop for users on a channel. - Added the isaway command, which returns if a user is listed by the server as away or not, if using the IRCv3 away-notify capability. If away-notify is not enabled, this command can still be used effectively in conjunction with `refreshchan w`, described above. - Added the hand2nicks command, an alternative to the hand2nick command. hand2nicks returns ALL nicks matching a handle, not just the first one. - Aded the socklist command, an update to the dcclist command. Returns similar info as a Tcl dict, and adds the IP to the information. - Use the system's strftime formatting instead of Eggdrop-provided GNU version/extensions. This could cause formatting differences or errors between systems. To ensure fully portable code, developers should only rely on POSIX-compliant formatting specifiers. - The dcclist command now returns port information and whether or not TLS is in use for that port. This change could affect field-based parsers depending on this command - Added the addserver and delserver command, to *gasp* add and delete aserver from Eggdrop's server list - Modified the listen command to accept an optional IP argument. This allows Eggdrop to listen on multiple addresses by using multiple listen commands in the config file or Tcl script. If no IP is specified, 0.0.0.0 is used as default. As a result of this change, the listen-addr command is no longer needed and removed from the config file - Added an optional -channel flag to the end of the is* commands (isban, isexempt, etc). This flag prevents the is* command from checking the global list and returning a '1' when there is no channel-specific case - Added several Tcl commands and binds to enable better interaction with the Twitch gaming service. Because these commands only work with a Twitch server, they are not included in `tcl-commands.doc` but rather `twitch-tcl-commands.doc`, located in the `doc/` directory. - Limited the expiration for new bans, ignores and exempts to 2000 days. Module changes -------------- - Added the PBKDF2 module, which allows Eggdrop to hash passwords using the PBKDF2 algorithm. This module is a stepping stone to future, more adaptable hashing and encryption implementation. IMPORTANT: PLEASE read `doc/PBKDF2` for more information on how to properly use it, you could accidentally render old passwords useless! - Added the twitch module, which allows Eggdrop to connect to the Twitch gaming service. As Twitch offers only a limited subset of standard IRC functionality, be prepared for some commands or scripts to work differently than on a normal IRC server. Please read `doc/TWITCH` for more information. - Added the ident module, which can automatically interact with a running oidentd service or allow Eggdrop to serve as its own ident server to respond to ident requests during the server connection process. Eggdrop config file changes --------------------------- - Added additional net-types for freenode, Quakenet, and Rizon (`net-type`) - Added ability to choose specific SSL/TLS protocols to use (`ssl-protocols`) - Added ability to allow bots to remain linked if userfile sharing fails (`sharefail-unlink`) - Changed the method Eggdrop uses to add servers from a `{}` list to the new addserver command - Removed the `listen-addr` command. See above; the `listen` command now accepts an optional IP argument in lieu of using `listen-addr` - Added the `show-uname` setting, which allows you to disable the display of uname info for the host system in things like `.status` -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Robert Scheck <robert(a)fedoraproject.org> 1.9.0-1 - Upgrade to 1.9.0 (#1933540) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1933540 - eggdrop-1.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1933540 -------------------------------------------------------------------------------- ================================================================================ golang-github-prometheus-2.24.1-4.el7 (FEDORA-EPEL-2021-5c8b42e206) Prometheus monitoring system and time series database -------------------------------------------------------------------------------- Update Information: Add ExecReload to service file -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.24.1-4 - Add ExecReload to service file -------------------------------------------------------------------------------- ================================================================================ golang-github-prometheus-node-exporter-1.1.1-2.el7 (FEDORA-EPEL-2021-2574a70c0f) Exporter for machine metrics -------------------------------------------------------------------------------- Update Information: Fix binary location -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.1.1-2 - Fix binary location -------------------------------------------------------------------------------- ================================================================================ libmediainfo-21.03-1.el7 (FEDORA-EPEL-2021-a1ab6f9c4e) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 21.03-1 - Update to 21.03 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.09-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Nov 7 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.09-1 - Update to 20.09 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852958 - CVE-2020-15395 mediainfo: Buffer overflow vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1852958 [ 2 ] Bug #1940985 - CVE-2020-26797 mediainfo: heap-based buffer overflow via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1940985 [ 3 ] Bug #1940987 - CVE-2020-26797 libmediainfo: mediainfo: heap-based buffer overflow via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1940987 -------------------------------------------------------------------------------- ================================================================================ libzen-0.4.39-1.el7 (FEDORA-EPEL-2021-a1ab6f9c4e) Shared library for libmediainfo and medianfo* -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 0.4.39-1 - Update to 0.4.39 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.38-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.38-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852958 - CVE-2020-15395 mediainfo: Buffer overflow vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1852958 [ 2 ] Bug #1940985 - CVE-2020-26797 mediainfo: heap-based buffer overflow via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1940985 [ 3 ] Bug #1940987 - CVE-2020-26797 libmediainfo: mediainfo: heap-based buffer overflow via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1940987 -------------------------------------------------------------------------------- ================================================================================ mediainfo-21.03-1.el7 (FEDORA-EPEL-2021-a1ab6f9c4e) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Update mediainfo. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> - 21.03-1 - Update to 21.03 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.09-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Nov 7 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.09-1 - Update to 20.09 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852958 - CVE-2020-15395 mediainfo: Buffer overflow vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1852958 [ 2 ] Bug #1940985 - CVE-2020-26797 mediainfo: heap-based buffer overflow via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1940985 [ 3 ] Bug #1940987 - CVE-2020-26797 libmediainfo: mediainfo: heap-based buffer overflow via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1940987 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 27 Mar '21

27 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-eb1a7d918d atasm-1.09-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9222415f70 exim-4.94-2.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing git-extras-6.2.0-1.el8 hedley-15-3.el8 js-jquery-ui-1.12.1-2.el8 python-bloom-0.10.3-1.el8 Details about builds: ================================================================================ git-extras-6.2.0-1.el8 (FEDORA-EPEL-2021-027a0cf0db) Little git extras -------------------------------------------------------------------------------- Update Information: Update to 6.2.0 (#1943577) -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 6.2.0-1 - Update to 6.2.0 (#1943577) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Sep 28 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 6.1.0-1 - Update to 6.1.0 * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jun 22 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 6.0.0-1 - Update to 6.0.0 (#1849487) * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1943577 - git-extras-6.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1943577 -------------------------------------------------------------------------------- ================================================================================ hedley-15-3.el8 (FEDORA-EPEL-2021-3c310d651a) A C/C++ header to help move #ifdefs out of your code -------------------------------------------------------------------------------- Update Information: Provide both arched and unarched versions of hedley-static ---- Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1930441 - Review Request: hedley - A C/C++ header to help move #ifdefs out of your code https://bugzilla.redhat.com/show_bug.cgi?id=1930441 -------------------------------------------------------------------------------- ================================================================================ js-jquery-ui-1.12.1-2.el8 (FEDORA-EPEL-2021-540f79b41f) jQuery user interface -------------------------------------------------------------------------------- Update Information: Provide a compressed version of the cascading style sheet -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 27 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.12.1-2 - Provide a compressed version of the cascading style sheet -------------------------------------------------------------------------------- ================================================================================ python-bloom-0.10.3-1.el8 (FEDORA-EPEL-2021-3846f6727b) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information: Update to the latest Bloom release -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 27 2021 Scott K Logan <logans(a)cottsay.net> - 0.10.3-1 - Update to 0.10.3 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 27 Mar '21

27 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f38c5da36 lib3mf-2.0.1-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f980da66e tor-0.3.5.14-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad zarafa-7.1.14-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a650134f4f exim-4.94-2.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b1d43d7b48 atasm-1.09-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing dmlite-1.14.2-6.el7 js-jquery-ui-1.12.1-2.el7 python-bloom-0.10.3-1.el7 Details about builds: ================================================================================ dmlite-1.14.2-6.el7 (FEDORA-EPEL-2021-a09f0b6eaf) Lcgdm grid data management and storage framework -------------------------------------------------------------------------------- Update Information: * bugfixes LCGDM-2958, LCGDM-2961, LCGDM-2963, LCGDM-2964, OOB reads * improvements LCGDM-2943, LCGDM-2959, LCGDM-2962, davs speed ---- * bugfix update for LCGDM-2953 * dropped update for IAM group normalization LCGDM-2950 ---- * bugfixes LCGDM-2948, LCGDM-2949, LCGDM-2950, LCGDM-2954, LCGDM-2955, LCGDM-2957 ---- * bugfixes LCGDM-2940, LCGDM-2941, LCGDM-2945, LCGDM-2946, LCGDM-2951 * xrootd plugin library versions configuration cleanup (requires xrootd config file update / puppet run) -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 27 2021 Petr Vokac <petr.vokac(a)cern.ch> - 1.14.2-4 - bugfixes LCGDM-2958, LCGDM-2961, LCGDM-2963, LCGDM-2964, OOB reads - improvements LCGDM-2943, LCGDM-2959, LCGDM-2962, davs speed * Sun Dec 27 2020 Petr Vokac <petr.vokac(a)cern.ch> - 1.14.2-4 - bugfixes LCGDM-2953 * Sun Dec 13 2020 Petr Vokac <petr.vokac(a)cern.ch> - 1.14.2-3 - bugfixes LCGDM-2948, LCGDM-2949, LCGDM-2950, LCGDM-2954, LCGDM-2955, LCGDM-2957 * Sun Dec 6 2020 Petr Vokac <petr.vokac(a)cern.ch> - 1.14.2-2 - bugfixes LCGDM-2940, LCGDM-2941, LCGDM-2945, LCGDM-2946, LCGDM-2951 - xrootd plugin library versions configuration cleanup -------------------------------------------------------------------------------- ================================================================================ js-jquery-ui-1.12.1-2.el7 (FEDORA-EPEL-2021-448870acea) jQuery user interface -------------------------------------------------------------------------------- Update Information: Provide a compressed version of the cascading style sheet -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 27 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.12.1-2 - Provide a compressed version of the cascading style sheet -------------------------------------------------------------------------------- ================================================================================ python-bloom-0.10.3-1.el7 (FEDORA-EPEL-2021-bae35edfb4) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information: Update to the latest Bloom release -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 27 2021 Scott K Logan <logans(a)cottsay.net> - 0.10.3-1 - Update to 0.10.3 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 26 Mar '21

26 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-eb1a7d918d atasm-1.09-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9222415f70 exim-4.94-2.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing R-inline-0.3.17-1.el8 centpkg-0.5.1-2.el8 fctxpd-0.2-4.20210326gitc4dba7f.el8 fftw2-2.1.5-40.el8 fmf-0.15.2-1.el8 perl-PDL-2.32.0-1.el8 rpminspect-1.4-1.el8 Details about builds: ================================================================================ R-inline-0.3.17-1.el8 (FEDORA-EPEL-2021-b004a6b380) Functions to Inline C, C++, Fortran Function Calls from R -------------------------------------------------------------------------------- Update Information: R inline 0.3.17 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.17-1 - Update to version 0.3.17 * Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ centpkg-0.5.1-2.el8 (FEDORA-EPEL-2021-f8606d3e21) CentOS utility for working with dist-git -------------------------------------------------------------------------------- Update Information: Initial centpkg package. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ fctxpd-0.2-4.20210326gitc4dba7f.el8 (FEDORA-EPEL-2021-9634289d67) Fibrechannel transport daemon -------------------------------------------------------------------------------- Update Information: Added support to add change rport port_state to marginal on fpin-li -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Muneendra <muneendra.kumar(a)broadcom.com> 0.2-4.20210326gitc4dba7f - Added support to add change rport port_state to marginal on fpin-li * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.2-3.20200827gitccbaf3a - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-2.20200827gitccbaf3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ fftw2-2.1.5-40.el8 (FEDORA-EPEL-2021-22d9fd1734) Fast Fourier Transform library (version 2) -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1940400 - EPEL8 Request: fftw2 https://bugzilla.redhat.com/show_bug.cgi?id=1940400 -------------------------------------------------------------------------------- ================================================================================ fmf-0.15.2-1.el8 (FEDORA-EPEL-2021-75c3345098) Flexible Metadata Format -------------------------------------------------------------------------------- Update Information: Cache improvements, copy nodes, modify metadata... -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 0.15.2-1 - Do not use mutable objects as default arguments - A bunch of adjustments for the epel-7 build * Wed Mar 24 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 0.15-1 - Implement the new 'fmf clean' command - Functions to manipulate cache - Fetch the whole tree using utils.fetch_tree() - Raise FileException on duplicate YAML keys - Allow to set desired cache location - Adjust support for storing modified data to disk - Add support for storing modified metadata to disk - Prevent exploring tests in the tmt directory - Simplify special distro comparison examples - Store command output in run(), fetch() exceptions - Use filelock for locking, expand test coverage - Adjust locking for Tree.node() and utils.fetch() - Use locking to checkout/read tree - Enable integration testing with tmt, some cleanup - Implement a new method copy() for cloning nodes - Adjust fetch() with custom destination and env - Support calls fetch(destination, env) and run(env) - Use the origin default branch instead of master - Store commit hash if the tree is under a git repo -------------------------------------------------------------------------------- ================================================================================ perl-PDL-2.32.0-1.el8 (FEDORA-EPEL-2021-ec19eb6c90) The Perl Data Language -------------------------------------------------------------------------------- Update Information: Added requested package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890795 - EPEL8 Request: perl-PDL https://bugzilla.redhat.com/show_bug.cgi?id=1890795 -------------------------------------------------------------------------------- ================================================================================ rpminspect-1.4-1.el8 (FEDORA-EPEL-2021-2d3ec52049) Build deviation compliance tool -------------------------------------------------------------------------------- Update Information: Update to rpminspect-1.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 David Cantrell <dcantrell(a)redhat.com> - 1.4-1 - Start work on the 1.4 release - Trim git commit summary prefix from changelog lines - Report the program version number in the results (#309) - Handle compressed but otherwise empty man pages (#308) - Flake8 fixes for test_manpage.py - s/self.rpm/self.after_rpm/ in two test_manpage.py tests - Disable broken ELF heurisitic and size limit in libclamav - Modify dump_cfg() to write valid YAML to stdout (#306) - Migrate more code off hsearch and to uthash - Replace hsearch() with uthash in the kmod inspection - Update TEST_METADATA status in TODO and MISSING - Restrict style checks to specific directories - Replace hsearch() with uthash in the abidiff inspection - Change tsearch/twalk use to uthash - Correct misuse of entry with hentry variables (#321) - Normalize copyright boilerplates in source files - Use hentry->key over hentry->value in pathmigration - Adjust lib/meson.build for Fedora rawhide - Drop gate.yml and begin non-x86_64 arches in ci.yml - Add armv7, aarch64, and s390x to the other_arches job - Change init.c error reporting over to err/warn functions - Modify file triggers and matrix use in ci.yml - Split 32-bit osdeps out to post.sh scripts in osdeps/ - Split style.yml in to shellcheck.yml and python.yml - Rewrite extra-ci.yml to use the matrix strategy method for GHA - Move the emulated CI jobs to extra-ci.yml - s/pkg/pki/ for the centos jobs - Debian and Ubuntu fixes for CI - Python pip on Debian is called pip - Try to fix just debian:stable - Enable debian:testing in extra-ci.yml - Enable centos8 in extra-ci.yml again - Enable centos7 in extra-ci.yml again - Enable opensuse-leap and gentoo in extra-ci.yml again - Run each test script individually on emulated targets - Try a different syntax for the emulated matrix jobs - Install s390 glibc headers on s390x fedora systems - Detect 32-bit and musl presence in test_elf.py - Skip lost -fPIC tests if gcc lacks -m32 support - Add stretch and buster to the emulated targets list - Drop Debian buster from the emulated targets - Install gcc-multilib only on Debian x86_64 and s390x systems - libc-dev:i386 -> libc6-dev:i386 - Disable Debian targets in extra-ci temporarily - s/AUR/git/g in osdeps/arch/post.sh - In read_cfgfile(), keep track of block depth correctly (#329) - A few more yaml parsing fixes for block vs group - Recommend or Require libabigail >= 1.8.2 - Finish normalizing all the error reporting statements - Advertise of rpminspect-report in the contrib README. - Report libclamav version and CVD versions (#258) - Ensure first argument of warn(3) is a format string. - Enable werror=true and warning_level=3 in default_options - Update the translation template file - Get rid of invalid free() in get_product_release() - Add inspection_id() to librpminspect - Update the po/rpminspect.pot template - Improve mkannounce.sh to handle stable and devel releases --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 26 Mar '21

26 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f38c5da36 lib3mf-2.0.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f980da66e tor-0.3.5.14-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad zarafa-7.1.14-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a650134f4f exim-4.94-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b1d43d7b48 atasm-1.09-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-inline-0.3.17-1.el7 fctxpd-0.2-4.20210326gitc4dba7f.el7 fmf-0.15.2-1.el7 php-composer-xdebug-handler-1.4.6-1.el7 rpminspect-1.4-1.el7 rust-1.51.0-1.el7 Details about builds: ================================================================================ R-inline-0.3.17-1.el7 (FEDORA-EPEL-2021-cab158fdb9) Functions to Inline C, C++, Fortran Function Calls from R -------------------------------------------------------------------------------- Update Information: R inline 0.3.17 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.17-1 - Update to version 0.3.17 * Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ fctxpd-0.2-4.20210326gitc4dba7f.el7 (FEDORA-EPEL-2021-5ef02b5dfa) Fibrechannel transport daemon -------------------------------------------------------------------------------- Update Information: Added support to add change rport port_state to marginal on fpin-li -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Muneendra <muneendra.kumar(a)broadcom.com> 0.2-4.20210326gitc4dba7f - Added support to add change rport port_state to marginal on fpin-li * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.2-3.20200827gitccbaf3a - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-2.20200827gitccbaf3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ fmf-0.15.2-1.el7 (FEDORA-EPEL-2021-9c42ca0e2f) Flexible Metadata Format -------------------------------------------------------------------------------- Update Information: Cache improvements, copy nodes, modify metadata... -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 0.15.2-1 - Do not use mutable objects as default arguments - A bunch of adjustments for the epel-7 build * Wed Mar 24 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 0.15-1 - Implement the new 'fmf clean' command - Functions to manipulate cache - Fetch the whole tree using utils.fetch_tree() - Raise FileException on duplicate YAML keys - Allow to set desired cache location - Adjust support for storing modified data to disk - Add support for storing modified metadata to disk - Prevent exploring tests in the tmt directory - Simplify special distro comparison examples - Store command output in run(), fetch() exceptions - Use filelock for locking, expand test coverage - Adjust locking for Tree.node() and utils.fetch() - Use locking to checkout/read tree - Enable integration testing with tmt, some cleanup - Implement a new method copy() for cloning nodes - Adjust fetch() with custom destination and env - Support calls fetch(destination, env) and run(env) - Use the origin default branch instead of master - Store commit hash if the tree is under a git repo -------------------------------------------------------------------------------- ================================================================================ php-composer-xdebug-handler-1.4.6-1.el7 (FEDORA-EPEL-2021-1d7580b240) Restarts a process without Xdebug -------------------------------------------------------------------------------- Update Information: **Version 1.4.6** - 2021-03-25 * Fixed: fail restart if `proc_open` has been disabled in `disable_functions`. * Fixed: enable Windows CTRL event handling in the restarted process. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 26 2021 Remi Collet <remi(a)remirepo.net> - 1.4.6-1 - update to 1.4.6 -------------------------------------------------------------------------------- ================================================================================ rpminspect-1.4-1.el7 (FEDORA-EPEL-2021-82cac27607) Build deviation compliance tool -------------------------------------------------------------------------------- Update Information: Update to rpminspect-1.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 David Cantrell <dcantrell(a)redhat.com> - 1.4-1 - Start work on the 1.4 release - Trim git commit summary prefix from changelog lines - Report the program version number in the results (#309) - Handle compressed but otherwise empty man pages (#308) - Flake8 fixes for test_manpage.py - s/self.rpm/self.after_rpm/ in two test_manpage.py tests - Disable broken ELF heurisitic and size limit in libclamav - Modify dump_cfg() to write valid YAML to stdout (#306) - Migrate more code off hsearch and to uthash - Replace hsearch() with uthash in the kmod inspection - Update TEST_METADATA status in TODO and MISSING - Restrict style checks to specific directories - Replace hsearch() with uthash in the abidiff inspection - Change tsearch/twalk use to uthash - Correct misuse of entry with hentry variables (#321) - Normalize copyright boilerplates in source files - Use hentry->key over hentry->value in pathmigration - Adjust lib/meson.build for Fedora rawhide - Drop gate.yml and begin non-x86_64 arches in ci.yml - Add armv7, aarch64, and s390x to the other_arches job - Change init.c error reporting over to err/warn functions - Modify file triggers and matrix use in ci.yml - Split 32-bit osdeps out to post.sh scripts in osdeps/ - Split style.yml in to shellcheck.yml and python.yml - Rewrite extra-ci.yml to use the matrix strategy method for GHA - Move the emulated CI jobs to extra-ci.yml - s/pkg/pki/ for the centos jobs - Debian and Ubuntu fixes for CI - Python pip on Debian is called pip - Try to fix just debian:stable - Enable debian:testing in extra-ci.yml - Enable centos8 in extra-ci.yml again - Enable centos7 in extra-ci.yml again - Enable opensuse-leap and gentoo in extra-ci.yml again - Run each test script individually on emulated targets - Try a different syntax for the emulated matrix jobs - Install s390 glibc headers on s390x fedora systems - Detect 32-bit and musl presence in test_elf.py - Skip lost -fPIC tests if gcc lacks -m32 support - Add stretch and buster to the emulated targets list - Drop Debian buster from the emulated targets - Install gcc-multilib only on Debian x86_64 and s390x systems - libc-dev:i386 -> libc6-dev:i386 - Disable Debian targets in extra-ci temporarily - s/AUR/git/g in osdeps/arch/post.sh - In read_cfgfile(), keep track of block depth correctly (#329) - A few more yaml parsing fixes for block vs group - Recommend or Require libabigail >= 1.8.2 - Finish normalizing all the error reporting statements - Advertise of rpminspect-report in the contrib README. - Report libclamav version and CVD versions (#258) - Ensure first argument of warn(3) is a format string. - Enable werror=true and warning_level=3 in default_options - Update the translation template file - Get rid of invalid free() in get_product_release() - Add inspection_id() to librpminspect - Update the po/rpminspect.pot template - Improve mkannounce.sh to handle stable and devel releases -------------------------------------------------------------------------------- ================================================================================ rust-1.51.0-1.el7 (FEDORA-EPEL-2021-9e883f5739) The Rust Programming Language -------------------------------------------------------------------------------- Update Information: Update to Rust 1.51.0: - Const Generics MVP - `array::IntoIter` Stabilization - Cargo's New Feature Resolver - Stabilized APIs See the [blog post](https://blog.rust-lang.org/2021/03/25/Rust-1.51.0.html) and [release notes](https://github.com/rust- lang/rust/blob/master/RELEASES.md#version-1510-2021-03-25) for more details. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Josh Stone <jistone(a)redhat.com> - 1.51.0-1 - Update to 1.51.0. --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 25 Mar '21

25 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ca5d37fa8 chromium-89.0.4389.82-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing assimp-5.0.1-2.el8 atasm-1.09-1.el8 beakerlib-1.27-1.el8 dbus-broker-28-3.el8 exim-4.94-2.el8 webp-pixbuf-loader-0.0.3-1.el8 Details about builds: ================================================================================ assimp-5.0.1-2.el8 (FEDORA-EPEL-2021-398c7d5472) Library to import various 3D model formats into applications -------------------------------------------------------------------------------- Update Information: Add an upstream patch to fix imported library locations, resolving issues when finding assimp in CMake projects. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 23 2021 Scott K Logan <logans(a)cottsay.net> - 5.0.1-2 - Add an upstream patch to fix imported library locations -------------------------------------------------------------------------------- ================================================================================ atasm-1.09-1.el8 (FEDORA-EPEL-2021-eb1a7d918d) 6502 cross-assembler -------------------------------------------------------------------------------- Update Information: - update to 1.09 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1786344 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in asm.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786344 [ 2 ] Bug #1786346 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in asm.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786346 [ 3 ] Bug #1786347 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in setparse.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786347 [ 4 ] Bug #1786349 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in setparse.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786349 [ 5 ] Bug #1786605 - CVE-2019-19787 atasm: stack-based buffer overflow in get_signed_expression in setparse.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786605 [ 6 ] Bug #1786607 - CVE-2019-19787 atasm: stack-based buffer overflow in get_signed_expression in setparse.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786607 -------------------------------------------------------------------------------- ================================================================================ beakerlib-1.27-1.el8 (FEDORA-EPEL-2021-cedd83ba51) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - rlCheckRequirements is now able to check also versioned requirements -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.27-1 - rlCheckRequirements is now able to check also versions requirements -------------------------------------------------------------------------------- ================================================================================ dbus-broker-28-3.el8 (FEDORA-EPEL-2021-d2bbb08f19) Linux D-Bus Message Broker -------------------------------------------------------------------------------- Update Information: Update to newest upstream release. This includes a set of bug-fixes, improved diagnostics, and a better test infrastructure. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ exim-4.94-2.el8 (FEDORA-EPEL-2021-9222415f70) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: Fixed cname handling in TLS certificate verification -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.94-2 - Fixed cname handling in TLS certificate verification Resolves: rhbz#1942583 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1942581 - exim: CNAME handling can break TLS certificate verification https://bugzilla.redhat.com/show_bug.cgi?id=1942581 -------------------------------------------------------------------------------- ================================================================================ webp-pixbuf-loader-0.0.3-1.el8 (FEDORA-EPEL-2021-fbcf5d59ba) WebP image loader for GTK+ applications -------------------------------------------------------------------------------- Update Information: webp-pixbuf-loader for EPEL8 -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 25 Mar '21

25 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7b1c8f21d9 chromium-89.0.4389.82-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f38c5da36 lib3mf-2.0.1-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f980da66e tor-0.3.5.14-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing atasm-1.09-1.el7 beakerlib-1.27-1.el7 exim-4.94-2.el7 zarafa-7.1.14-4.el7 Details about builds: ================================================================================ atasm-1.09-1.el7 (FEDORA-EPEL-2021-b1d43d7b48) 6502 cross-assembler -------------------------------------------------------------------------------- Update Information: - update to 1.09 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Dan Hor��k <dan[at]danny.cz> - 1.09-1 - update to 1.09 - CVE-2019-19785 CVE-2019-19786 CVE-2019-19787 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.08-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Jan 21 2021 Dan Hor��k <dan[at]danny.cz> - 1.08-7 - pass correct linker flags * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.08-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 13 2020 Tom Stellard <tstellar(a)redhat.com> - 1.08-5 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.08-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.08-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.08-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jul 16 2018 Dan Hor��k <dan[at]danny.cz> - 1.08-1 - update to 1.08 * Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07d-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07d-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07d-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07d-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07d-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07d-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.07d-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Aug 15 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.07d-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.07d-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1786344 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in asm.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786344 [ 2 ] Bug #1786346 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in asm.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786346 [ 3 ] Bug #1786347 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in setparse.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786347 [ 4 ] Bug #1786349 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in setparse.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786349 [ 5 ] Bug #1786605 - CVE-2019-19787 atasm: stack-based buffer overflow in get_signed_expression in setparse.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786605 [ 6 ] Bug #1786607 - CVE-2019-19787 atasm: stack-based buffer overflow in get_signed_expression in setparse.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786607 -------------------------------------------------------------------------------- ================================================================================ beakerlib-1.27-1.el7 (FEDORA-EPEL-2021-929329df02) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - rlCheckRequirements is now able to check also versioned requirements -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.27-1 - rlCheckRequirements is now able to check also versions requirements -------------------------------------------------------------------------------- ================================================================================ exim-4.94-2.el7 (FEDORA-EPEL-2021-a650134f4f) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: Fixed cname handling in TLS certificate verification -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.94-2 - Fixed cname handling in TLS certificate verification Resolves: rhbz#1942583 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1942581 - exim: CNAME handling can break TLS certificate verification https://bugzilla.redhat.com/show_bug.cgi?id=1942581 -------------------------------------------------------------------------------- ================================================================================ zarafa-7.1.14-4.el7 (FEDORA-EPEL-2021-615589a3ad) Open Source Edition of the Zarafa Collaboration Platform -------------------------------------------------------------------------------- Update Information: - Added patch to allow building against libical 3.0.x - Added upstream patch to fix remote DoS in zarafa-ical (#1942773) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 25 2021 Robert Scheck <robert(a)fedoraproject.org> 7.1.14-4 - Added patch to allow building against libical 3.0.x - Added upstream patch to fix remote DoS in zarafa-ical (#1942773) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1942773 - zarafa: Remote DoS by memory exhaustion in zarafa-ical component https://bugzilla.redhat.com/show_bug.cgi?id=1942773 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 24 Mar '21

24 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-cd16d1b0bf upx-3.96-8.el8 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ca5d37fa8 chromium-89.0.4389.82-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing perl-Net-Amazon-S3-0.98-1.el8 Details about builds: ================================================================================ perl-Net-Amazon-S3-0.98-1.el8 (FEDORA-EPEL-2021-749ba6d62b) Use the Amazon Simple Storage Service (S3) -------------------------------------------------------------------------------- Update Information: This release fixes Net::Amazon::S3::Client::Object::exists() and compatibility with DigitalOcean Spaces. It also improves a documentation. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 24 2021 Petr Pisar <ppisar(a)redhat.com> - 0.98-1 - 0.98 bump - Package tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #1941857 - perl-Net-Amazon-S3-0.98 is available https://bugzilla.redhat.com/show_bug.cgi?id=1941857 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel March 2021