epel-devel March 2021

epel-devel@lists.fedoraproject.org

6 participants
73 discussions

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 10 Mar '21

10 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a2e8a7475f chromium-88.0.4324.182-2.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing fedora-repo-zdicts-2103.1-2.el8 gaupol-1.9-3.el8 python-absl-py-0.12.0-2.el8 retrace-server-1.23.0-1.el8 xrootd-5.1.1-1.el8 Details about builds: ================================================================================ fedora-repo-zdicts-2103.1-2.el8 (FEDORA-EPEL-2021-4df8dbbe9d) Zstd dictionaries for Fedora repository metadata -------------------------------------------------------------------------------- Update Information: Update with F34 dictionaries -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Jonathan Dieter <jdieter(a)gmail.com> - 2103.1-2 - Update with F34 dictionaries - Fix changelog entry * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2010.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Oct 8 2020 Jonathan Dieter <jdieter(a)gmail.com> - 2010.1-1 - Update with F33 dictionaries * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2004.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ gaupol-1.9-3.el8 (FEDORA-EPEL-2021-33be4ad9d3) Editor for text-based subtitle files -------------------------------------------------------------------------------- Update Information: Localize summary and description of main package where translations are available upstream -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 9 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.9-3 - Localize summary and description of main package where translations are available upstream -------------------------------------------------------------------------------- ================================================================================ python-absl-py-0.12.0-2.el8 (FEDORA-EPEL-2021-9f4a637cd7) Abseil Python Common Libraries -------------------------------------------------------------------------------- Update Information: ## 0.12.0 (2021-03-08) ### Added * (flags) Made `EnumClassSerializer` and `EnumClassListSerializer` public. * (flags) Added a `required: Optional[bool] = False` parameter to `DEFINE_*` functions. * (testing) flagsaver overrides can now be specified in terms of FlagHolder. * (testing) `parameterized.product`: Allows testing a method over cartesian product of parameters values, specified as a sequences of values for each parameter or as kwargs-like dicts of parameter values. * (testing) Added public flag holders for `--test_srcdir` and `--test_tmpdir`. Users should use `absltest.TEST_SRCDIR.value` and `absltest.TEST_TMPDIR.value` instead of `FLAGS.test_srcdir` and `FLAGS.test_tmpdir`. ### Fixed * (flags) Made `CsvListSerializer` respect its delimiter argument. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.0-2 - Add CHANGELOG.md, from absl/, to documentation * Wed Mar 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.0-1 - Update to 0.12.0 - Drop python-absl-py-0.11.0-python-3.10.patch, now upstreamed * Wed Mar 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.11.0-3 - Move BR��s back to top-level package - Fix bogus changelog versions -------------------------------------------------------------------------------- References: [ 1 ] Bug #1937186 - python-absl-py-0.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1937186 -------------------------------------------------------------------------------- ================================================================================ retrace-server-1.23.0-1.el8 (FEDORA-EPEL-2021-721c2aaf86) Application for remote coredump analysis -------------------------------------------------------------------------------- Update Information: New upstream release 1.23.0 - Add Fedora 34 to version list for stats - Be more careful when reading task status - Add backtrace to log when a task fails with error (plambri(a)redhat.com) - Fix "file not found" when archive contains directories (plambri(a)redhat.com) - Add timeout to Podman commands - Fix stripping of epoch number - Improve regexes for parsing problem data - Make path to Podman executable configurable at build time - Warn if config directory does not exist - Repair test and add a Meson script for testing - Update build prerequisites for tests in spec file - Recommend logrotate in spec file - Code style improvements - Update translations -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> - 1.23.0-1 - Release version 1.23.0-1 (Mat��j Grabovsk��) - fedora: Add Fedora 34 to version list (Mat��j Grabovsk��) - retrace: Be more careful when reading task status (Mat��j Grabovsk��) - retrace_worker: Add backtrace to log when a task fails with error (Pierguido Lambri) - retrace: Fix "file not found" when the archive contains directories (Pierguido Lambri) - r-s-cleanup: Improve regex (Mat��j Grabovsk��) - r-s-cleanup: Use a constant instead of signal number (Mat��j Grabovsk��) - retrace: Add timeout to Podman commands (Mat��j Grabovsk��) - retrace: Check if directory exists before iterating (Mat��j Grabovsk��) - r-s-cleanup: Replace loop with list comprehension (Mat��j Grabovsk��) - r-s-cleanup: Pretty-print elapsed process time (Mat��j Grabovsk��) - retrace: Work with elapsed process time in seconds (Mat��j Grabovsk��) - retrace: Shorten regex for matching workers (Mat��j Grabovsk��) - retrace: Replace loop with generator (Mat��j Grabovsk��) - util: Pythonic way to check for suffix (Mat��j Grabovsk��) - retrace: Minor code style improvements (Mat��j Grabovsk��) - retrace: Correct stripping of epoch number (Mat��j Grabovsk��) - util: Repair parsing regexes (Mat��j Grabovsk��) - test: Prepend to PATH in Meson script (Mat��j Grabovsk��) - test: Factor out paths to executables (Mat��j Grabovsk��) - test: Repair test script (Mat��j Grabovsk��) - test: Code style fixes and cleanup (Mat��j Grabovsk��) - test: Add Meson script for testing (Mat��j Grabovsk��) - spec: Update build prerequisites for tests (Mat��j Grabovsk��) - retrace: Factor out path to Podman executable (Mat��j Grabovsk��) - hooks: Warn if config directory does not exist (Mat��j Grabovsk��) - r-s-worker: Don't check user in testing mode (Mat��j Grabovsk��) - util: Improve regexes for parsing problem data (Mat��j Grabovsk��) - Update translations (Jenkins Automation Server) - spec: Recommend logrotate (Michal ��idek) - Update translations (Jenkins Automation Server) -------------------------------------------------------------------------------- ================================================================================ xrootd-5.1.1-1.el8 (FEDORA-EPEL-2021-9fbd9db005) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: XRootD 5.1.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.1-1 - Update to version 5.1.1 - Drop patches (accepted upstream) * Fri Feb 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.0-2 - Remove debug output * Tue Feb 23 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.0-1 - Update to version 5.1.0 - Add scitokens plugin package - Packages xrootd-ceph and xrdcl-http are now built as part of xrootd replacing the packages built from separate source rpms - Drop patches (accepted upstream or previously backported) - Fix broken library dependency in XrdCeph cmake file - Fix format error on 32 bit architectures * Sat Feb 13 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-5 - Drop workaround for false positive warning from gcc 11 * Tue Jan 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-4 - Workaround false positive warning from gcc 11 (Fedora 34+) * Tue Dec 8 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-3 - Fix array length calculation (gcc 11 error) - Fix uninitialized variable error --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 09 Mar '21

09 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-71d1af6aca isync-1.4.1-1.el8 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a2e8a7475f chromium-88.0.4324.182-2.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing beakerlib-1.26-1.el8 charliecloud-0.21-2.el8 holland-1.2.3-1.el8 playonlinux-4.4-2.el8 Details about builds: ================================================================================ beakerlib-1.26-1.el8 (FEDORA-EPEL-2021-d36e2e1470) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - fixed rlServiceDisable if called without rlServiceEnable beforehand - few internal fixes -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 9 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.26-1 - fixed rlServiceDisable if called without rlServiceEnable beforehand - few internal fixes -------------------------------------------------------------------------------- ================================================================================ charliecloud-0.21-2.el8 (FEDORA-EPEL-2021-b483843106) Lightweight user-defined software stacks for high-performance computing -------------------------------------------------------------------------------- Update Information: Fix source0 path. Make man7 available in the base package. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 3 2021 <jogas(a)lanl.gov> - 0.21-2 - Fix lib64.patch path for ch-image * Tue Jan 5 2021 <loveshack(a)fedoraproject.org> <jogas(a)lanl.gov> - 0.21-1 - New version - Ship charlicloud.7 - Require fakeroot - Install fakeroot.py - Always ship patch1 - Get python3_sitelib defined - Move examples to -test and require sphinx_rtd_theme - Include __pycache__ on el7 - Use %python3_pkgversion - BR python3, not /usr/bin/python3 - Fix comment capitalization and spacing * Tue Sep 22 2020 <jogas(a)lanl.gov> - 0.19-1 - Package build.py and misc.py - Remove unnecessary patch - New release * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Apr 16 2020 <jogas(a)lanl.gov> - 0.15-1 - Add test suite package - Update spec for autoconf - New release * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Sep 4 2019 <jogas(a)lanl.gov> - 0.10-1 - Patch doc-src/conf.py for epel - Fix doc-src/dev.rst - Fix libexec and doc install path for 0.10 changes - Tidy comments - New release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1927476 - charliecloud.7 seems misplaced https://bugzilla.redhat.com/show_bug.cgi?id=1927476 [ 2 ] Bug #1934036 - invalid source0 https://bugzilla.redhat.com/show_bug.cgi?id=1934036 -------------------------------------------------------------------------------- ================================================================================ holland-1.2.3-1.el8 (FEDORA-EPEL-2021-eaa082a2bf) Pluggable Backup Framework -------------------------------------------------------------------------------- Update Information: Latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 4 2021 Sam P <survient(a)fedoraproject.org> - 1.2.3-1 - Updated to latest upstream release. -------------------------------------------------------------------------------- ================================================================================ playonlinux-4.4-2.el8 (FEDORA-EPEL-2021-450431ab2b) Graphical front-end for Wine -------------------------------------------------------------------------------- Update Information: New users can often find Wine to be intimidating and difficult to use. PlayOnLinux is a graphical front-end for Wine which allows to easily install and use numerous games and applications designed to run with Microsoft Windows. PlayOnLinux has the database of Windows applications from which the user can install desired application with a few clicks. It will automatically setup the Wine prefix and download any required Windows libraries. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1913737 - Review Request: playonlinux - Graphical front-end for Wine https://bugzilla.redhat.com/show_bug.cgi?id=1913737 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 09 Mar '21

09 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beakerlib-1.26-1.el7 cabextract-1.9-7.el7 charliecloud-0.22-2.el7 python3-pillow-6.2.2-2.el7 Details about builds: ================================================================================ beakerlib-1.26-1.el7 (FEDORA-EPEL-2021-420574d469) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - fixed rlServiceDisable if called without rlServiceEnable beforehand - few internal fixes -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 9 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.26-1 - fixed rlServiceDisable if called without rlServiceEnable beforehand - few internal fixes -------------------------------------------------------------------------------- ================================================================================ cabextract-1.9-7.el7 (FEDORA-EPEL-2021-780cd884ad) Utility for extracting cabinet (.cab) archives -------------------------------------------------------------------------------- Update Information: cabextract 1.9 ============== * Fixed invisible bad extraction when using `cabextract -F` (broken in 1.8) * Fixed configure `--with-external-libmspack` which was broken in 1.8 * `configure --with-external-libmspack` will now use `pkg-config`. To configure it manually, set environment variables `libmspack_CFLAGS` and `libmspack_LIBS` before running `configure`. * Now includes the test suite (`make check`) cabextract 1.8 ============== * `cabextract -f` now extracts even more badly damaged files than before cabextract 1.7 ============== * `cabextract` now supports an `--encoding` parameter, to specify the character encoding of CAB filenames if they are not ASCII or UTF8 * `cabextract -L` now lowercases non-ASCII characters cabextract 1.6 ============== * `cabextract` now prevents archive files giving themselves absolute path access using badly UTF-8 encoded slashes. * Because Cygwin allows both `/` and `\` as path separators, cabextract now removes both leading `/`s and `\`s and changes both `../` and `..\` in CAB filenames to `xx`. You can no longer have a CAB filename called e.g. `\/t` (file `t` in the directory `\`). If you need this, create a CAB file where the filename is `./\/t` instead. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 7 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 1.9-7 - use bundled libmspack on epel * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Tue Nov 6 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.9-1 - 1.9 * Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.8-1 - 1.8 * Wed Jul 25 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.7-1 - 1.7 (#1186186) * Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Thu Apr 9 2015 Juan Orti Alcaine <jorti(a)fedoraproject.org> - 1.5-2 - Use license macro -------------------------------------------------------------------------------- References: [ 1 ] Bug #1644222 - CVE-2018-18584 CVE-2018-18585 cabextract: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1644222 -------------------------------------------------------------------------------- ================================================================================ charliecloud-0.22-2.el7 (FEDORA-EPEL-2021-0007e8c188) Lightweight user-defined software stacks for high-performance computing -------------------------------------------------------------------------------- Update Information: Fix source0 path. Make man7 available in the base package. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Dave Love <loveshack(a)fedoraproject.org> <jogas(a)lanl.gov> - 0.22-2 - Fix source0 path - Put man7 in base package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1927476 - charliecloud.7 seems misplaced https://bugzilla.redhat.com/show_bug.cgi?id=1927476 [ 2 ] Bug #1934036 - invalid source0 https://bugzilla.redhat.com/show_bug.cgi?id=1934036 -------------------------------------------------------------------------------- ================================================================================ python3-pillow-6.2.2-2.el7 (FEDORA-EPEL-2021-32d4f4a583) Python image processing library -------------------------------------------------------------------------------- Update Information: Backport CVE fixes for CVE-2020-35655, CVE-2020-35654, CVE-2021-25289 (bz#1934684), CVE-2021-25290 (bz#1934689), CVE-2021-25291 (bz#1934696), CVE-2020-35655, CVE-2021-25293 (bz#1934709), CVE-2021-25292 (bz#1934703), CVE-2021-27921 (bz#1935387), CVE-2021-27922 (bz#1935400), CVE-2021-27923 (bz#1935404) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 4 2021 Orion Poplawski <orion(a)nwra.com> - 6.2.2-2 - Backport CVE fixes for CVE-2020-35655, CVE-2020-35654, CVE-2021-25289 (bz#1934684), CVE-2021-25290 (bz#1934689), CVE-2021-25291 (bz#1934696), CVE-2020-35655, CVE-2021-25293 (bz#1934709), CVE-2021-25292 (bz#1934703), CVE-2021-27921 (bz#1935387), CVE-2021-27922 (bz#1935400), CVE-2021-27923 (bz#1935404) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1934684 - CVE-2021-25289 python3-pillow: python-pillow: insufficent fix for CVE-2020-35654 due to incorrect error checking in TiffDecode.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1934684 [ 2 ] Bug #1934689 - CVE-2021-25290 python3-pillow: python-pillow: negative-offset memcpy with an invalid size in TiffDecode.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1934689 [ 3 ] Bug #1934696 - CVE-2021-25291 python3-pillow: python-pillow: out-of-bounds read in TiffReadRGBATile in TiffDecode.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1934696 [ 4 ] Bug #1934703 - CVE-2021-25292 python3-pillow: python-pillow: backtracking regex in PDF parser could be used as a DOS attack [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1934703 [ 5 ] Bug #1934709 - CVE-2021-25293 python3-pillow: python-pillow: out-of-bounds read in SGIRleDecode.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1934709 [ 6 ] Bug #1935387 - CVE-2021-27921 python3-pillow: python-pillow: reported size of a contained image is not properly checked for a BLP container [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1935387 [ 7 ] Bug #1935400 - CVE-2021-27922 python3-pillow: python-pillow: reported size of a contained image is not properly checked for an ICNS container [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1935400 [ 8 ] Bug #1935404 - CVE-2021-27923 python3-pillow: python-pillow: reported size of a contained image is not properly checked for an ICO container [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1935404 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 08 Mar '21

08 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing clamav-0.103.1-3.el7 fetch-crl-3.0.21-1.el7 uberftp-2.8-4.el7 Details about builds: ================================================================================ clamav-0.103.1-3.el7 (FEDORA-EPEL-2021-7265da6992) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: - clamav-freshclam.service: Standard output type syslog is obsolete (#1933977) - Quiet proxy on stdout (#1814698) ---- ClamAV 0.103.1 patch release ( https://blog.clamav.net/2021/02/clamav-01031-patch-release.html ) Notable changes Added a new scan option to alert on broken media (graphics) file formats. This feature mitigates the risk of malformed media files intended to exploit vulnerabilities in other software. At present, media validation exists for JPEG, TIFF, PNG and GIF files. To enable this feature, set AlertBrokenMedia yes in clamd.conf for use with ClamD, or use the --alert- broken-media option when using ClamScan. These options are disabled by default in this patch release but may be enabled in a subsequent release. Application developers may enable this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for the heuristic scan option bit field. Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF and PNG typing behavior. BMP and JPEG 2000 files will continue to detect as CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG 2000 format-checking capabilities. Bug fixes Fixed PNG parser logic bugs that caused an excess of parsing errors and fixed a stack exhaustion issue affecting some systems when scanning PNG files. PNG file type detection was disabled via signature database update for ClamAV version 0.103.0 to mitigate the effects from these bugs. Fixed an issue where PNG and GIF files no longer work with Target:5 graphics signatures if detected as CL_TYPE_PNG or CL_TYPE_GIF rather than as CL_TYPE_GRAPHICS. Target types now support up to 10 possible file types to make way for additional graphics types in future releases. Fixed ClamOnAcc's --fdpass option. File descriptor passing (or "FD-passing") is a mechanism by which ClamOnAcc and ClamDScan may transfer an open file to ClamD to scan, even if ClamD is running as a non- privileged user and wouldn't otherwise have read-access to the file. This enables ClamD to scan all files without having to run ClamD as root. If possible, ClamD should never be run as root to mitigate the risk in case ClamD is somehow compromised while scanning malware. Interprocess file descriptor passing for ClamOnAcc was broken since version 0.102.0 due to a bug introduced by the switch to cURL for communicating with ClamD. On Linux, passing file descriptors from one process to another is handled by the kernel, so we reverted ClamOnAcc to use standard system calls for socket communication when FD-passing is enabled. Fixed a ClamOnAcc stack corruption issue on some systems when using an older version of libcurl. Patch courtesy of Emilio Pozuelo Monfort. Allow ClamScan and ClamDScan scans to proceed even if the realpath lookup failed. This alleviates an issue on Windows scanning files hosted on file- systems that do not support the GetMappedFileNameW() API, such as on ImDisk RAM- disks. Fixed FreshClam's --on-update-execute=EXIT_1 temporary directory cleanup issue. ClamD's log output and VirusEvent feature now provide the scan target's file path instead of a file descriptor. The ClamD socket API for submitting a scan by FD-passing doesn't include a file path. This feature works by looking up the file path by the file descriptor. This feature works on Mac and Linux but is not yet implemented for other UNIX operating systems. FD- passing is not available for Windows. Fixed an issue where FreshClam database validation didn't work correctly when run in daemon mode on Linux/Unix. Fixed scan speed performance issues accidentally introduced in ClamAV 0.103.0 caused by hashing file maps more than once when parsing a file as a new type, and caused by frequent scanning of non-HTML text data with the HTML parser. Other improvements Scanning JPEG, TIFF, PNG and GIF files will no longer return "parse" errors when file format validation fails. Instead, the scan will alert with the "Heuristics.Broken.Media" signature prefix and a descriptive suffix to indicate the issue, provided that the "alert broken media" feature is enabled. GIF format validation will no longer fail if the GIF image is missing the trailer byte, as this appears to be a relatively common issue in otherwise functional GIFs. Added a TIFF dynamic configuration (DCONF) option that was missing. This will allow us to disable TIFF format validation via signature database update in the event that it proves to be problematic. This feature already exists for many other file types. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 7 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.1-3 - clamav-freshclam.service: Standard output type syslog is obsolete (#1933977) - Quiet proxy on stdout (#1814698) * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.103.1-2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Wed Feb 17 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.1-1 - Update to 0.103.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1814698 - freshclam --quiet returns proxy on stdout https://bugzilla.redhat.com/show_bug.cgi?id=1814698 [ 2 ] Bug #1909184 - clamdscan in 0.103.0 version seems to consume too much memory https://bugzilla.redhat.com/show_bug.cgi?id=1909184 [ 3 ] Bug #1933977 - clamav-freshclam.service "Standard output type syslog is obsolete" https://bugzilla.redhat.com/show_bug.cgi?id=1933977 -------------------------------------------------------------------------------- ================================================================================ fetch-crl-3.0.21-1.el7 (FEDORA-EPEL-2021-96ee2ab417) Downloads Certificate Revocation Lists -------------------------------------------------------------------------------- Update Information: Update to 3.0.21 and extra build reqires for https URLs. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Steve Traylen <steve.traylen(a)cern.ch> - 3.0.21-1 - Update version extra perl R for https -------------------------------------------------------------------------------- References: [ 1 ] Bug #1901879 - Missing dependency https://bugzilla.redhat.com/show_bug.cgi?id=1901879 -------------------------------------------------------------------------------- ================================================================================ uberftp-2.8-4.el7 (FEDORA-EPEL-2021-25ccb72575) GridFTP-enabled ftp client -------------------------------------------------------------------------------- Update Information: https://github.com/JasonAlt/UberFTP has been archived and uberftp is now maintained https://github.com/gridcf/UberFTP -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Steve Traylen <steve.traylen(a)cern.ch> - 2.8-4 - Upstream is now GridCF project https://mailman.egi.eu/pipermail/discuss/2019-March/000273.html --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 08 Mar '21

08 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-71d1af6aca isync-1.4.1-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a2e8a7475f chromium-88.0.4324.182-2.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing assimp-5.0.1-1.el8 clamav-0.103.1-3.el8 fetch-crl-3.0.21-1.el8 mlt-6.24.0-3.el8 movit-1.6.3-2.el8 rclone-1.54.0-1.el8 uberftp-2.8-13.el8 xbg-0.0.2-1.el8 Details about builds: ================================================================================ assimp-5.0.1-1.el8 (FEDORA-EPEL-2021-5e7146d746) Library to import various 3D model formats into applications -------------------------------------------------------------------------------- Update Information: New package: assimp-5.0.1-1 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929567 - Please build assimp for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1929567 -------------------------------------------------------------------------------- ================================================================================ clamav-0.103.1-3.el8 (FEDORA-EPEL-2021-a847c261f5) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: - clamav-freshclam.service: Standard output type syslog is obsolete (#1933977) - Quiet proxy on stdout (#1814698) ---- ClamAV 0.103.1 patch release https://blog.clamav.net/2021/02/clamav-01031-patch-release.html Notable changes Added a new scan option to alert on broken media (graphics) file formats. This feature mitigates the risk of malformed media files intended to exploit vulnerabilities in other software. At present, media validation exists for JPEG, TIFF, PNG and GIF files. To enable this feature, set AlertBrokenMedia yes in clamd.conf for use with ClamD, or use the --alert-broken-media option when using ClamScan. These options are disabled by default in this patch release but may be enabled in a subsequent release. Application developers may enable this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for the heuristic scan option bit field. Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF and PNG typing behavior. BMP and JPEG 2000 files will continue to detect as CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG 2000 format- checking capabilities. Bug fixes Fixed PNG parser logic bugs that caused an excess of parsing errors and fixed a stack exhaustion issue affecting some systems when scanning PNG files. PNG file type detection was disabled via signature database update for ClamAV version 0.103.0 to mitigate the effects from these bugs. Fixed an issue where PNG and GIF files no longer work with Target:5 graphics signatures if detected as CL_TYPE_PNG or CL_TYPE_GIF rather than as CL_TYPE_GRAPHICS. Target types now support up to 10 possible file types to make way for additional graphics types in future releases. Fixed ClamOnAcc's --fdpass option. File descriptor passing (or "FD-passing") is a mechanism by which ClamOnAcc and ClamDScan may transfer an open file to ClamD to scan, even if ClamD is running as a non-privileged user and wouldn't otherwise have read-access to the file. This enables ClamD to scan all files without having to run ClamD as root. If possible, ClamD should never be run as root to mitigate the risk in case ClamD is somehow compromised while scanning malware. Interprocess file descriptor passing for ClamOnAcc was broken since version 0.102.0 due to a bug introduced by the switch to cURL for communicating with ClamD. On Linux, passing file descriptors from one process to another is handled by the kernel, so we reverted ClamOnAcc to use standard system calls for socket communication when FD-passing is enabled. Fixed a ClamOnAcc stack corruption issue on some systems when using an older version of libcurl. Patch courtesy of Emilio Pozuelo Monfort. Allow ClamScan and ClamDScan scans to proceed even if the realpath lookup failed. This alleviates an issue on Windows scanning files hosted on file-systems that do not support the GetMappedFileNameW() API, such as on ImDisk RAM-disks. Fixed FreshClam's --on-update-execute=EXIT_1 temporary directory cleanup issue. ClamD's log output and VirusEvent feature now provide the scan target's file path instead of a file descriptor. The ClamD socket API for submitting a scan by FD-passing doesn't include a file path. This feature works by looking up the file path by the file descriptor. This feature works on Mac and Linux but is not yet implemented for other UNIX operating systems. FD-passing is not available for Windows. Fixed an issue where FreshClam database validation didn't work correctly when run in daemon mode on Linux/Unix. Fixed scan speed performance issues accidentally introduced in ClamAV 0.103.0 caused by hashing file maps more than once when parsing a file as a new type, and caused by frequent scanning of non-HTML text data with the HTML parser. Other improvements Scanning JPEG, TIFF, PNG and GIF files will no longer return "parse" errors when file format validation fails. Instead, the scan will alert with the "Heuristics.Broken.Media" signature prefix and a descriptive suffix to indicate the issue, provided that the "alert broken media" feature is enabled. GIF format validation will no longer fail if the GIF image is missing the trailer byte, as this appears to be a relatively common issue in otherwise functional GIFs. Added a TIFF dynamic configuration (DCONF) option that was missing. This will allow us to disable TIFF format validation via signature database update in the event that it proves to be problematic. This feature already exists for many other file types. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 7 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.1-3 - clamav-freshclam.service: Standard output type syslog is obsolete (#1933977) - Quiet proxy on stdout (#1814698) * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.103.1-2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Wed Feb 17 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.1-1 - Update to 0.103.1 * Wed Jan 27 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.0-3 - Add upstream patch clamonacc: Fix stack buffer overflow with old curl * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.103.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1814698 - freshclam --quiet returns proxy on stdout https://bugzilla.redhat.com/show_bug.cgi?id=1814698 [ 2 ] Bug #1909184 - clamdscan in 0.103.0 version seems to consume too much memory https://bugzilla.redhat.com/show_bug.cgi?id=1909184 [ 3 ] Bug #1933977 - clamav-freshclam.service "Standard output type syslog is obsolete" https://bugzilla.redhat.com/show_bug.cgi?id=1933977 -------------------------------------------------------------------------------- ================================================================================ fetch-crl-3.0.21-1.el8 (FEDORA-EPEL-2021-6cc4d91dbf) Downloads Certificate Revocation Lists -------------------------------------------------------------------------------- Update Information: Update to 3.0.21 and extra build reqires for https URLs. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Steve Traylen <steve.traylen(a)cern.ch> - 3.0.21-1 - Update version extra perl R for https -------------------------------------------------------------------------------- References: [ 1 ] Bug #1901879 - Missing dependency https://bugzilla.redhat.com/show_bug.cgi?id=1901879 -------------------------------------------------------------------------------- ================================================================================ mlt-6.24.0-3.el8 (FEDORA-EPEL-2021-899e72019f) Toolkit for broadcasters, video editors, media players, transcoders -------------------------------------------------------------------------------- Update Information: Add MLT and movit to epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ movit-1.6.3-2.el8 (FEDORA-EPEL-2021-899e72019f) GPU video filter library -------------------------------------------------------------------------------- Update Information: Add MLT and movit to epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ rclone-1.54.0-1.el8 (FEDORA-EPEL-2021-035e01ef74) Rsync for cloud storage -------------------------------------------------------------------------------- Update Information: Update to 1.54.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.54.0-1 - Update to 1.54.0 - Close: rhbz#1918543 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1918543 - rclone-1.54.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1918543 -------------------------------------------------------------------------------- ================================================================================ uberftp-2.8-13.el8 (FEDORA-EPEL-2021-20bb8f246e) GridFTP-enabled ftp client -------------------------------------------------------------------------------- Update Information: https://github.com/JasonAlt/UberFTP has been archived and uberftp is now maintained https://github.com/gridcf/UberFTP -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Steve Traylen <steve.traylen(a)cern.ch> - 2.8-13 - Upstream is now GridCF project https://mailman.egi.eu/pipermail/discuss/2019-March/000273.html -------------------------------------------------------------------------------- ================================================================================ xbg-0.0.2-1.el8 (FEDORA-EPEL-2021-c8a929affd) Tiny XCB root window color setter -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1919712 - Review Request: xbg - Tiny XCB root window color setter https://bugzilla.redhat.com/show_bug.cgi?id=1919712 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Mar '21

07 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ec8ceb857 ansible-2.9.18-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing mlt-6.4.1-13.el7 movit-1.5.3-2.el7 perl-Gtk3-0.029-1.el7 Details about builds: ================================================================================ mlt-6.4.1-13.el7 (FEDORA-EPEL-2021-baaf4e2515) Toolkit for broadcasters, video editors, media players, transcoders -------------------------------------------------------------------------------- Update Information: movit with SDL1 for now and MLT 6.4.1 with movit and FTBFS fixed -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 5 2021 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-13 - Build with BR movit - Enable vorbis because user can not have mlt-freeworld * Sat Nov 3 2018 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-12 - Fix epel7 build: use old swig, not BR movit and fix build error "Qt requires C++11 support" with CXXFLAGS="-std=c++11 -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic" * Wed Jan 31 2018 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-11 - Rebuild (movit-1.6.0) * Tue Jan 30 2018 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-10 - Add vid.stab support - Enable movit support * Mon Nov 20 2017 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-9 - Fix one crash on exit (#1497386) * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Mar 3 2017 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-6 - Rebuild (opencv) * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ movit-1.5.3-2.el7 (FEDORA-EPEL-2021-baaf4e2515) GPU video filter library -------------------------------------------------------------------------------- Update Information: movit with SDL1 for now and MLT 6.4.1 with movit and FTBFS fixed -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ perl-Gtk3-0.029-1.el7 (FEDORA-EPEL-2021-c2bdb4b101) Perl interface to the 3.x series of the GTK+ toolkit -------------------------------------------------------------------------------- Update Information: Update perl-Gtk3 to 0.029 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 3 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.029-1 - 0.029 bump * Mon May 16 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.026-3 - Perl 5.24 rebuild * Thu May 5 2016 Petr Pisar <ppisar(a)redhat.com> - 0.026-2 - Adjust tests to gtk3-3.21.1 (bug #1332962) * Fri Apr 1 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.026-1 - 0.026 bump * Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.025-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Tue Nov 24 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.025-1 - 0.025 bump * Fri Sep 4 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.023-1 - 0.023 bump * Mon Jul 13 2015 Petr Pisar <ppisar(a)redhat.com> - 0.022-1 - 0.022 bump * Wed Jun 17 2015 Daniel P. Berrange <berrange(a)redhat.com> - 0.021-1 - Update to 0.021 release * Mon Jun 8 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.019-2 - Perl 5.22 rebuild * Wed Dec 3 2014 Petr Pisar <ppisar(a)redhat.com> - 0.019-1 - 0.019 bump --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 07 Mar '21

07 Mar '21

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 07 Mar '21

07 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-71d1af6aca isync-1.4.1-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a2e8a7475f chromium-88.0.4324.182-2.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing ifstat-1.1-34.el8 nagios-4.4.6-4.el8 python-moksha-hub-1.5.17-10.el8 Details about builds: ================================================================================ ifstat-1.1-34.el8 (FEDORA-EPEL-2021-f270ded6e7) Interface statistics -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ nagios-4.4.6-4.el8 (FEDORA-EPEL-2021-e9c2beec98) Host/service/network monitoring program -------------------------------------------------------------------------------- Update Information: Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping Update to 4.4.6 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 3 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-4 - Add missing require for nagios-plugins-ping - Fix run path * Sat Feb 27 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-3 - Require plugins needed for localhost monitoring (#1932297) * Tue Feb 23 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-2 - Fix systemd unit file permissions #1676334 * Sat Feb 20 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-1 - Update to 4.4.6 - Fix for CVE-2020-13977 #BZ1849087 - Some spec cleanup * Tue Feb 18 2020 Stephen Smoogen <smooge(a)fedoraproject.org> - 4.4.5-3 - Add change to allow for problems found in mass rebuild and gcc10. - Fix BZ#1793909 * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1666209 - Nagios cannot start after system reboot because of missing directory https://bugzilla.redhat.com/show_bug.cgi?id=1666209 [ 2 ] Bug #1829114 - nagios-4.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1829114 [ 3 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1849087 [ 4 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency https://bugzilla.redhat.com/show_bug.cgi?id=1932297 -------------------------------------------------------------------------------- ================================================================================ python-moksha-hub-1.5.17-10.el8 (FEDORA-EPEL-2021-ddc7e63a10) Hub components for Moksha -------------------------------------------------------------------------------- Update Information: Initial version for epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1815701 - Please branch and build python-moksha-hub for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1815701 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Mar '21

07 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ec8ceb857 ansible-2.9.18-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing ifstat-1.1-34.el7 nagios-4.4.6-4.el7 Details about builds: ================================================================================ ifstat-1.1-34.el7 (FEDORA-EPEL-2021-59a93a93dd) Interface statistics -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ nagios-4.4.6-4.el7 (FEDORA-EPEL-2021-04cc5bcb08) Host/service/network monitoring program -------------------------------------------------------------------------------- Update Information: Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping Update to 4.4.6 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 3 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-4 - Add missing require for nagios-plugins-ping - Fix run path * Sat Feb 27 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-3 - Require plugins needed for localhost monitoring (#1932297) * Tue Feb 23 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-2 - Fix systemd unit file permissions #1676334 * Sat Feb 20 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-1 - Update to 4.4.6 - Fix for CVE-2020-13977 #BZ1849087 - Some spec cleanup -------------------------------------------------------------------------------- References: [ 1 ] Bug #1666209 - Nagios cannot start after system reboot because of missing directory https://bugzilla.redhat.com/show_bug.cgi?id=1666209 [ 2 ] Bug #1829114 - nagios-4.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1829114 [ 3 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1849087 [ 4 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency https://bugzilla.redhat.com/show_bug.cgi?id=1932297 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Mar '21

07 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ec8ceb857 ansible-2.9.18-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing dh-make-2.202003-2.el7 yad-8.0-1.el7 Details about builds: ================================================================================ dh-make-2.202003-2.el7 (FEDORA-EPEL-2021-f63d747375) Tool that converts source archives into Debian package source -------------------------------------------------------------------------------- Update Information: Update to 2.202003 (#1869057) -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.202003-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Dec 1 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 2.202003-1 - Update to 2.202003 (#1869057) * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.202001-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sat Feb 29 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 2.202001-1 - Update to 2.202001 (#1808626) * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.201903-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Nov 11 2019 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 2.201903-1 - Update to 2.201903 (#1771187) * Sun Oct 13 2019 S��rgio Basto <sergio(a)serjux.com> - 2.201902-1 - Update to dh-make-2.201902 (#1742709) * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.201801-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.201801-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1869057 - dh-make-2.202003 is available https://bugzilla.redhat.com/show_bug.cgi?id=1869057 -------------------------------------------------------------------------------- ================================================================================ yad-8.0-1.el7 (FEDORA-EPEL-2021-095382d675) Display graphical dialogs from shell scripts or command line -------------------------------------------------------------------------------- Update Information: Update to 8.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 6 2021 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 8.0-1 - Update to 8.0 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel March 2021