epel-devel March 2021

epel-devel@lists.fedoraproject.org

6 participants
73 discussions

Intent to orphan: freeimage
by Richard Shaw 15 Mar '21

15 Mar '21

It has 3 open CVEs and I only took it when I was trying to get MythTV on EL. It's likely the CVEs can be fixed by updating to a newer version but I haven't looked. Thanks, Richard

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 14 Mar '21

14 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-cd16d1b0bf upx-3.96-8.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ca5d37fa8 chromium-89.0.4389.82-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing ansible-2.9.18-2.el8 goaccess-1.4.6-1.el8 t1lib-5.1.2-28.el8 ttf2pt1-3.4.4-32.el8 xwm-0.1.8-1.el8 Details about builds: ================================================================================ ansible-2.9.18-2.el8 (FEDORA-EPEL-2021-e6533c0f44) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Add rpm macros and generators -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 12 2021 Orion Poplawski <orion(a)nwra.com> - 2.9.18-2 - Add rpm macros and generators for collections -------------------------------------------------------------------------------- ================================================================================ goaccess-1.4.6-1.el8 (FEDORA-EPEL-2021-b789fb73bc) Real-time web log analyzer and interactive viewer -------------------------------------------------------------------------------- Update Information: Update to 1.4.6 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1933580 - goaccess-1.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1933580 -------------------------------------------------------------------------------- ================================================================================ t1lib-5.1.2-28.el8 (FEDORA-EPEL-2021-51f717630a) PostScript Type 1 font rasterizer -------------------------------------------------------------------------------- Update Information: Add package t1lib to epel8. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1891943 - Please build t1lib for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1891943 -------------------------------------------------------------------------------- ================================================================================ ttf2pt1-3.4.4-32.el8 (FEDORA-EPEL-2021-cdbfc77592) TrueType to Adobe Type 1 font converter -------------------------------------------------------------------------------- Update Information: First build for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1891660 - Please build ttf2pt1 for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1891660 -------------------------------------------------------------------------------- ================================================================================ xwm-0.1.8-1.el8 (FEDORA-EPEL-2021-f5766f5ea9) Tiny XCB floating window manager -------------------------------------------------------------------------------- Update Information: Initial package ---- Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1919701 - Review Request: xwm - Tiny XCB floating window manager https://bugzilla.redhat.com/show_bug.cgi?id=1919701 [ 2 ] Bug #1938587 - xwm-0.1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1938587 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 13 Mar '21

13 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-780cd884ad cabextract-1.9-7.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-32d4f4a583 python3-pillow-6.2.2-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7b1c8f21d9 chromium-89.0.4389.82-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d7ae32a6da upx-3.96-8.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing log4c-1.2.4-2.el7 python-shapely-1.5.17-1.el7 Details about builds: ================================================================================ log4c-1.2.4-2.el7 (FEDORA-EPEL-2021-0afde3da1b) Library for logging application messages -------------------------------------------------------------------------------- Update Information: Patch to fix library reinitialization crash -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 13 2021 Franti��ek Dvo��k <valtri(a)civ.zcu.cz> - 1.2.4-2 - Patch to fix library reinitialization (bug #1095366, #1901955) - Format patch (FTBS in F28) - Add explicitly some BR dependencies -------------------------------------------------------------------------------- References: [ 1 ] Bug #1901955 - Segment fault when call log4c_init twice. https://bugzilla.redhat.com/show_bug.cgi?id=1901955 -------------------------------------------------------------------------------- ================================================================================ python-shapely-1.5.17-1.el7 (FEDORA-EPEL-2021-bcec5dfa28) Manipulation and analysis of geometric objects in the Cartesian plane -------------------------------------------------------------------------------- Update Information: Update to latest bugfix release in 1.5.x series. 1.5.17 (2016-08-31) ------------------- - Bug fix: eliminate memory leak in geom_factory() (#408). - Bug fix: remove mention of negative distances in parallel_offset and note that vertices of right hand offset lines are reversed (#284). 1.5.16 (2016-05-26) ------------------- - Bug fix: eliminate memory leak when unpickling geometry objects (#384, #385). - Bug fix: prevent crashes when attempting to pickle a prepared geometry, raising ``PicklingError`` instead (#386). - Packaging: extension modules in the OS X wheels uploaded to PyPI link only libgeos_c.dylib now (you can verify and compare to previous releases with ``otool -L shapely/vectorized/_vectorized.so``). 1.5.15 (2016-03-29) ------------------- - Bug fix: use uintptr_t to store pointers instead of long in _geos.pxi, preventing an overflow error (#372, #373). Note that this bug fix was erroneously reported to have been made in 1.5.14, but was not. 1.5.14 (2016-03-27) ------------------- - Bug fix: use ``type()`` instead of ``isinstance()`` when evaluating geometry equality, preventing instances of base and derived classes from being mistaken for equals (#317). - Bug fix: ensure that empty geometries are created when constructors have no args (#332, #333). - Bug fix: support app "freezing" better on Windows by not relying on the ``__file__`` attribute (#342, #377). - Bug fix: ensure that empty polygons evaluate to be ``==`` (#355). - Bug fix: filter out empty geometries that can cause segfaults when creating and loading STRtrees (#345, #348). - Bug fix: no longer attempt to reuse GEOS DLLs already loaded by Rasterio or Fiona on OS X (#374, #375). 1.5.13 (2015-10-09) ------------------- - Restore setup and runtime discovery and loading of GEOS shared library to state at version 1.5.9 (#326). - On OS X we try to reuse any GEOS shared library that may have been loaded via import of Fiona or Rasterio in order to avoid a bug involving the GEOS AbstractSTRtree (#324, #327). 1.5.12 (2015-08-27) ------------------- - Remove configuration of root logger from libgeos.py (#312). - Skip test_fallbacks on Windows (#308). - Call setlocale(locale.LC_ALL, "") instead of resetlocale() on Windows when tearing down the locale test (#308). - Fix for Sphinx warnings (#309). - Addition of .cache, .idea, .pyd, .pdb to .gitignore (#310). 1.5.11 (2015-08-23) ------------------- - Remove packaging module requirement added in 1.5.10 (#305). Distutils can't parse versions using 'rc', but if we stick to 'a' and 'b' we will be fine. 1.5.10 (2015-08-22) ------------------- - Monkey patch affinity module by absolute reference (#299). - Raise TopologicalError in relate() instead of crashing (#294, #295, #303). 1.5.9 (2015-05-27) ------------------ - Fix for 64 bit speedups compatibility (#274). 1.5.8 (2015-04-29) ------------------ - Setup file encoding bug fix (#254). - Support for pyinstaller (#261). - Major prepared geometry operation fix for Windows (#268, #269). - Major fix for OS X binary wheel (#262). 1.5.7 (2015-03-16) ------------------ - Test and fix buggy error and notice handlers (#249). 1.5.6 (2015-02-02) ------------------ - Fix setup regression (#232, #234). - SVG representation improvements (#233, #237). 1.5.5 (2015-01-20) ------------------ - MANIFEST changes to restore _geox.pxi (#231). 1.5.4 (2015-01-19) ------------------ - Fixed OS X binary wheel library load path (#224). 1.5.3 (2015-01-12) ------------------ - Fixed ownership and potential memory leak in polygonize (#223). - Wider release of binary wheels for OS X. ---- Build HTML documentation and add a -doc subpackage. Properly install license file. Various packaging improvements, including the following (and others): * De-conditionalize Python 3 support * Switch to GitHub tarball * Do not use unversioned python * Use appropriate spec file macros * Ensure Cython C sources are always regenerated * Properly install _geos.pxi -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 12 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.5.17-1 - New upstream release; 1.5.17 is the last bugfix release in the 1.5.x series * Thu Mar 11 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.5.2-3 - De-conditionalize Python 3 support; this is now an EPEL7-only spec file - Add a _description macro rather than repeating the description - Build the Python 2 version as a subpackage, like the Python 3 version - Use the py_provides macro now that it is available - Update URLs - Switch to GitHub tarball - Do not use unversioned python - Use py?_build/py?_install and similar macros - Use python3_pkgversion macro - Improve BR��s - Filter compiled Python 3 extensions from Provides - Drop obsolete Group field - Ensure Cython C sources are always regenerated - Simplify file lists - Build HTML documentation and add a -doc subpackage - Properly install license file - Use python[23] -m unittest instead of deprecated python[23] setup.py test - Properly install _geos.pxi --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 13 Mar '21

13 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ca5d37fa8 chromium-89.0.4389.82-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-cd16d1b0bf upx-3.96-8.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing holland-1.2.4-1.el8 python-bracex-2.1.1-2.el8 python-wcmatch-8.1.2-3.el8 Details about builds: ================================================================================ holland-1.2.4-1.el8 (FEDORA-EPEL-2021-1738900ff3) Pluggable Backup Framework -------------------------------------------------------------------------------- Update Information: Latest upstream release ---- Latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 12 2021 Sam P <survient(a)fedoraproject.org> - 1.2.4-1 - Updated to latest upstream release. * Tue Mar 9 2021 Sam P <survient(a)fedoraproject.org> - 1.2.3-3 - Incorporated changes from pull request #7 from fab for python3-mysqlclient dependency. * Mon Mar 8 2021 Sam P <survient(a)fedoraproject.org> - 1.2.3-2 - Identified github tagging issue and reverted source URL. * Thu Mar 4 2021 Sam P <survient(a)fedoraproject.org> - 1.2.3-1 - Updated to latest upstream release. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-bracex-2.1.1-2.el8 (FEDORA-EPEL-2021-3195bd7317) Bash style brace expander -------------------------------------------------------------------------------- Update Information: Fix this package as per package review (#1929990) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-wcmatch-8.1.2-3.el8 (FEDORA-EPEL-2021-3195bd7317) Wildcard/glob file name matcher -------------------------------------------------------------------------------- Update Information: Fix this package as per package review (#1929990) -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 12 Mar '21

12 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-780cd884ad cabextract-1.9-7.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-32d4f4a583 python3-pillow-6.2.2-2.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d7ae32a6da upx-3.96-8.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing chromium-89.0.4389.82-1.el7 gnome-shell-extension-historymanager-prefix-search-12-7.el7 java-latest-openjdk-16.0.0.0.36-0.rolling.el7 python-bloom-0.10.2-1.el7 python-shapely-1.5.2-3.el7 singularity-3.7.2-1.el7 Details about builds: ================================================================================ chromium-89.0.4389.82-1.el7 (FEDORA-EPEL-2021-7b1c8f21d9) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Hi there. This is the latest release of the browser that Google doesn't want you to use. It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180 CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160 CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183 CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163 CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184 CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182 CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189 ---- Fix issue with swiftshader where symbols were not properly generated for the dlopened shared objects, preventing proper functionality. ---- Update to 88.0.4324.182. Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.82-1 - update to 89.0.4389.82 * Thu Mar 4 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.72-1 - update to 89.0.4389.72 * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 88.0.4324.182-3 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Thu Feb 25 2021 Tom Callaway <spot(a)fedoraproject.org> - 88.0.4234.182-2 - fix swiftshader symbols in libEGL/libGLESv2 with gcc * Wed Feb 17 2021 Tom Callaway <spot(a)fedoraproject.org> - 88.0.4234.182-1 - update to 88.0.4234.182 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929523 - CVE-2021-21149 chromium-browser: Stack overflow in Data Transfer https://bugzilla.redhat.com/show_bug.cgi?id=1929523 [ 2 ] Bug #1929524 - CVE-2021-21150 chromium-browser: Use after free in Downloads https://bugzilla.redhat.com/show_bug.cgi?id=1929524 [ 3 ] Bug #1929525 - CVE-2021-21151 chromium-browser: Use after free in Payments https://bugzilla.redhat.com/show_bug.cgi?id=1929525 [ 4 ] Bug #1929526 - CVE-2021-21152 chromium-browser: Heap buffer overflow in Media https://bugzilla.redhat.com/show_bug.cgi?id=1929526 [ 5 ] Bug #1929527 - CVE-2021-21153 chromium-browser: Stack overflow in GPU Process https://bugzilla.redhat.com/show_bug.cgi?id=1929527 [ 6 ] Bug #1929528 - CVE-2021-21154 chromium-browser: Heap buffer overflow in Tab Strip https://bugzilla.redhat.com/show_bug.cgi?id=1929528 [ 7 ] Bug #1929529 - CVE-2021-21155 chromium-browser: Heap buffer overflow in Tab Strip https://bugzilla.redhat.com/show_bug.cgi?id=1929529 [ 8 ] Bug #1929530 - CVE-2021-21156 chromium-browser: Heap buffer overflow in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1929530 [ 9 ] Bug #1929531 - CVE-2021-21157 chromium-browser: Use after free in Web Sockets https://bugzilla.redhat.com/show_bug.cgi?id=1929531 [ 10 ] Bug #1935934 - CVE-2021-21162 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1935934 [ 11 ] Bug #1935935 - CVE-2021-21180 chromium-browser: Use after free in tab search https://bugzilla.redhat.com/show_bug.cgi?id=1935935 [ 12 ] Bug #1935936 - CVE-2021-21164 chromium-browser: Insufficient data validation in Chrome for iOS https://bugzilla.redhat.com/show_bug.cgi?id=1935936 [ 13 ] Bug #1935937 - CVE-2021-21170 chromium-browser: Incorrect security UI in Loader https://bugzilla.redhat.com/show_bug.cgi?id=1935937 [ 14 ] Bug #1935938 - CVE-2021-21181 chromium-browser: Side-channel information leakage in autofill https://bugzilla.redhat.com/show_bug.cgi?id=1935938 [ 15 ] Bug #1935939 - CVE-2021-21166 chromium-browser: Object lifecycle issue in audio https://bugzilla.redhat.com/show_bug.cgi?id=1935939 [ 16 ] Bug #1935940 - CVE-2021-21160 chromium-browser: Heap buffer overflow in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1935940 [ 17 ] Bug #1935941 - CVE-2021-21179 chromium-browser: Use after free in Network Internals https://bugzilla.redhat.com/show_bug.cgi?id=1935941 [ 18 ] Bug #1935942 - CVE-2021-21187 chromium-browser: Insufficient data validation in URL formatting https://bugzilla.redhat.com/show_bug.cgi?id=1935942 [ 19 ] Bug #1935943 - CVE-2021-21173 chromium-browser: Side-channel information leakage in Network Internals https://bugzilla.redhat.com/show_bug.cgi?id=1935943 [ 20 ] Bug #1935944 - CVE-2021-21174 chromium-browser: Inappropriate implementation in Referrer https://bugzilla.redhat.com/show_bug.cgi?id=1935944 [ 21 ] Bug #1935945 - CVE-2021-21183 chromium-browser: Inappropriate implementation in performance APIs https://bugzilla.redhat.com/show_bug.cgi?id=1935945 [ 22 ] Bug #1935946 - CVE-2021-21161 chromium-browser: Heap buffer overflow in TabStrip https://bugzilla.redhat.com/show_bug.cgi?id=1935946 [ 23 ] Bug #1935947 - CVE-2021-21171 chromium-browser: Incorrect security UI in TabStrip and Navigation https://bugzilla.redhat.com/show_bug.cgi?id=1935947 [ 24 ] Bug #1935948 - CVE-2021-21178 chromium-browser: Inappropriate implementation in Compositing https://bugzilla.redhat.com/show_bug.cgi?id=1935948 [ 25 ] Bug #1935950 - CVE-2021-21169 chromium-browser: Out of bounds memory access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1935950 [ 26 ] Bug #1935951 - CVE-2021-21163 chromium-browser: Insufficient data validation in Reader Mode https://bugzilla.redhat.com/show_bug.cgi?id=1935951 [ 27 ] Bug #1935952 - CVE-2021-21175 chromium-browser: Inappropriate implementation in Site isolation https://bugzilla.redhat.com/show_bug.cgi?id=1935952 [ 28 ] Bug #1935953 - CVE-2021-21177 chromium-browser: Insufficient policy enforcement in Autofill https://bugzilla.redhat.com/show_bug.cgi?id=1935953 [ 29 ] Bug #1935954 - CVE-2021-21185 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1935954 [ 30 ] Bug #1935955 - CVE-2021-21190 chromium-browser: Uninitialized Use in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1935955 [ 31 ] Bug #1935956 - CVE-2021-21184 chromium-browser: Inappropriate implementation in performance APIs https://bugzilla.redhat.com/show_bug.cgi?id=1935956 [ 32 ] Bug #1935958 - CVE-2021-21168 chromium-browser: Insufficient policy enforcement in appcache https://bugzilla.redhat.com/show_bug.cgi?id=1935958 [ 33 ] Bug #1935959 - CVE-2021-21167 chromium-browser: Use after free in bookmarks https://bugzilla.redhat.com/show_bug.cgi?id=1935959 [ 34 ] Bug #1935960 - CVE-2021-21188 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1935960 [ 35 ] Bug #1935961 - CVE-2021-21172 chromium-browser: Insufficient policy enforcement in File System API https://bugzilla.redhat.com/show_bug.cgi?id=1935961 [ 36 ] Bug #1935962 - CVE-2021-21182 chromium-browser: Insufficient policy enforcement in navigations https://bugzilla.redhat.com/show_bug.cgi?id=1935962 [ 37 ] Bug #1935963 - CVE-2021-21176 chromium-browser: Inappropriate implementation in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1935963 [ 38 ] Bug #1935964 - CVE-2021-21159 chromium-browser: Heap buffer overflow in TabStrip https://bugzilla.redhat.com/show_bug.cgi?id=1935964 [ 39 ] Bug #1935965 - CVE-2021-21186 chromium-browser: Insufficient policy enforcement in QR scanning https://bugzilla.redhat.com/show_bug.cgi?id=1935965 [ 40 ] Bug #1935966 - CVE-2021-21165 chromium-browser: Object lifecycle issue in audio https://bugzilla.redhat.com/show_bug.cgi?id=1935966 [ 41 ] Bug #1935967 - CVE-2021-21189 chromium-browser: Insufficient policy enforcement in payments https://bugzilla.redhat.com/show_bug.cgi?id=1935967 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-historymanager-prefix-search-12-7.el7 (FEDORA-EPEL-2021-883b27d504) Use PageUp and PageDown to search for previous GNOME Shell commands -------------------------------------------------------------------------------- Update Information: Minor rebuild to mark HistoryManager Prefix Search as incompatible with GNOME 40. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ java-latest-openjdk-16.0.0.0.36-0.rolling.el7 (FEDORA-EPEL-2021-3bcf99274f) OpenJDK 16 Runtime Environment -------------------------------------------------------------------------------- Update Information: This update have intentionally autokarma-off butany user review highly appreciated -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 19 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:16.0.0.0.36-0.0.ea.rolling - Update to jdk-16.0.0.0+36 - Update tarball generation script to use git following OpenJDK's move to github - Update tarball generation script to use PR3823 which handles JDK-8235710 changes - Use upstream default for version-pre rather than setting it to "ea" or "" - Drop libsunec.so which is no longer generated, thanks to JDK-8235710 - Drop unnecessary compiler flags, dating back to work on GCC 6 & 10 - Adapt RH1750419 alt-java patch to still apply after some variable re-naming in the makefiles - Update filever to remove any trailing zeros, as in the OpenJDK build, and use for source filename - Use system harfbuzz now this is supported. - Pass SOURCE_DATE_EPOCH to build for reproducible builds * Fri Feb 19 2021 Stephan Bergmann <sbergman(a)redhat.com> - 1:15.0.2.0.7-1.rolling - Hardcode /usr/sbin/alternatives for Flatpak builds * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:15.0.2.0.7-0.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1936809 - java-latest-openjdk-headless-15.0.2.0.7-0.rolling.el7.x86_64 requires pcsc-lite-devel which is not in the ubi* repositories https://bugzilla.redhat.com/show_bug.cgi?id=1936809 -------------------------------------------------------------------------------- ================================================================================ python-bloom-0.10.2-1.el7 (FEDORA-EPEL-2021-ee2a375b4b) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information: Update to the latest release of `bloom` -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Scott K Logan <logans(a)cottsay.net> - 0.10.2-1 - Update to 0.10.2 -------------------------------------------------------------------------------- ================================================================================ python-shapely-1.5.2-3.el7 (FEDORA-EPEL-2021-d7f7e69cde) Manipulation and analysis of geometric objects in the Cartesian plane -------------------------------------------------------------------------------- Update Information: Build HTML documentation and add a -doc subpackage. Properly install license file. Various packaging improvements, including the following (and others): * De-conditionalize Python 3 support * Switch to GitHub tarball * Do not use unversioned python * Use appropriate spec file macros * Ensure Cython C sources are always regenerated * Properly install _geos.pxi -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.5.2-3 - De-conditionalize Python 3 support; this is now an EPEL7-only spec file - Add a _description macro rather than repeating the description - Build the Python 2 version as a subpackage, like the Python 3 version - Use the py_provides macro now that it is available - Update URLs - Switch to GitHub tarball - Do not use unversioned python - Use py?_build/py?_install and similar macros - Use python3_pkgversion macro - Improve BR��s - Filter compiled Python 3 extensions from Provides - Drop obsolete Group field - Ensure Cython C sources are always regenerated - Simplify file lists - Build HTML documentation and add a -doc subpackage - Properly install license file - Use python[23] -m unittest instead of deprecated python[23] setup.py test - Properly install _geos.pxi -------------------------------------------------------------------------------- ================================================================================ singularity-3.7.2-1.el7 (FEDORA-EPEL-2021-be86113a13) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to upstream 3.7.2. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.7.2-1 - Upgrade to upstream 3.7.2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1937530 - singularity-3.7.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1937530 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 12 Mar '21

12 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-cd16d1b0bf upx-3.96-8.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing chromium-89.0.4389.82-1.el8 gnome-shell-extension-historymanager-prefix-search-12-7.el8 gperftools-2.7-9.el8 java-latest-openjdk-16.0.0.0.36-1.rolling.el8 perl-Test-PostgreSQL-1.28-1.el8 pg_top-4.0.0-1.el8 python-bloom-0.10.2-1.el8 python-shapely-1.7.1-9.el8 singularity-3.7.2-1.el8 Details about builds: ================================================================================ chromium-89.0.4389.82-1.el8 (FEDORA-EPEL-2021-9ca5d37fa8) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Hi there. This is the latest release of the browser that Google doesn't want you to use. It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180 CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160 CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183 CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163 CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184 CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182 CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189 ---- Fix issue with swiftshader where symbols were not properly generated for the dlopened shared objects, preventing proper functionality. ---- Update to 88.0.4324.182. Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 8 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.82-1 - update to 89.0.4389.82 * Thu Mar 4 2021 Tom Callaway <spot(a)fedoraproject.org> - 89.0.4389.72-1 - update to 89.0.4389.72 * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 88.0.4324.182-3 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Thu Feb 25 2021 Tom Callaway <spot(a)fedoraproject.org> - 88.0.4234.182-2 - fix swiftshader symbols in libEGL/libGLESv2 with gcc * Wed Feb 17 2021 Tom Callaway <spot(a)fedoraproject.org> - 88.0.4234.182-1 - update to 88.0.4234.182 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929523 - CVE-2021-21149 chromium-browser: Stack overflow in Data Transfer https://bugzilla.redhat.com/show_bug.cgi?id=1929523 [ 2 ] Bug #1929524 - CVE-2021-21150 chromium-browser: Use after free in Downloads https://bugzilla.redhat.com/show_bug.cgi?id=1929524 [ 3 ] Bug #1929525 - CVE-2021-21151 chromium-browser: Use after free in Payments https://bugzilla.redhat.com/show_bug.cgi?id=1929525 [ 4 ] Bug #1929526 - CVE-2021-21152 chromium-browser: Heap buffer overflow in Media https://bugzilla.redhat.com/show_bug.cgi?id=1929526 [ 5 ] Bug #1929527 - CVE-2021-21153 chromium-browser: Stack overflow in GPU Process https://bugzilla.redhat.com/show_bug.cgi?id=1929527 [ 6 ] Bug #1929528 - CVE-2021-21154 chromium-browser: Heap buffer overflow in Tab Strip https://bugzilla.redhat.com/show_bug.cgi?id=1929528 [ 7 ] Bug #1929529 - CVE-2021-21155 chromium-browser: Heap buffer overflow in Tab Strip https://bugzilla.redhat.com/show_bug.cgi?id=1929529 [ 8 ] Bug #1929530 - CVE-2021-21156 chromium-browser: Heap buffer overflow in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1929530 [ 9 ] Bug #1929531 - CVE-2021-21157 chromium-browser: Use after free in Web Sockets https://bugzilla.redhat.com/show_bug.cgi?id=1929531 [ 10 ] Bug #1935934 - CVE-2021-21162 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1935934 [ 11 ] Bug #1935935 - CVE-2021-21180 chromium-browser: Use after free in tab search https://bugzilla.redhat.com/show_bug.cgi?id=1935935 [ 12 ] Bug #1935936 - CVE-2021-21164 chromium-browser: Insufficient data validation in Chrome for iOS https://bugzilla.redhat.com/show_bug.cgi?id=1935936 [ 13 ] Bug #1935937 - CVE-2021-21170 chromium-browser: Incorrect security UI in Loader https://bugzilla.redhat.com/show_bug.cgi?id=1935937 [ 14 ] Bug #1935938 - CVE-2021-21181 chromium-browser: Side-channel information leakage in autofill https://bugzilla.redhat.com/show_bug.cgi?id=1935938 [ 15 ] Bug #1935939 - CVE-2021-21166 chromium-browser: Object lifecycle issue in audio https://bugzilla.redhat.com/show_bug.cgi?id=1935939 [ 16 ] Bug #1935940 - CVE-2021-21160 chromium-browser: Heap buffer overflow in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1935940 [ 17 ] Bug #1935941 - CVE-2021-21179 chromium-browser: Use after free in Network Internals https://bugzilla.redhat.com/show_bug.cgi?id=1935941 [ 18 ] Bug #1935942 - CVE-2021-21187 chromium-browser: Insufficient data validation in URL formatting https://bugzilla.redhat.com/show_bug.cgi?id=1935942 [ 19 ] Bug #1935943 - CVE-2021-21173 chromium-browser: Side-channel information leakage in Network Internals https://bugzilla.redhat.com/show_bug.cgi?id=1935943 [ 20 ] Bug #1935944 - CVE-2021-21174 chromium-browser: Inappropriate implementation in Referrer https://bugzilla.redhat.com/show_bug.cgi?id=1935944 [ 21 ] Bug #1935945 - CVE-2021-21183 chromium-browser: Inappropriate implementation in performance APIs https://bugzilla.redhat.com/show_bug.cgi?id=1935945 [ 22 ] Bug #1935946 - CVE-2021-21161 chromium-browser: Heap buffer overflow in TabStrip https://bugzilla.redhat.com/show_bug.cgi?id=1935946 [ 23 ] Bug #1935947 - CVE-2021-21171 chromium-browser: Incorrect security UI in TabStrip and Navigation https://bugzilla.redhat.com/show_bug.cgi?id=1935947 [ 24 ] Bug #1935948 - CVE-2021-21178 chromium-browser: Inappropriate implementation in Compositing https://bugzilla.redhat.com/show_bug.cgi?id=1935948 [ 25 ] Bug #1935950 - CVE-2021-21169 chromium-browser: Out of bounds memory access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1935950 [ 26 ] Bug #1935951 - CVE-2021-21163 chromium-browser: Insufficient data validation in Reader Mode https://bugzilla.redhat.com/show_bug.cgi?id=1935951 [ 27 ] Bug #1935952 - CVE-2021-21175 chromium-browser: Inappropriate implementation in Site isolation https://bugzilla.redhat.com/show_bug.cgi?id=1935952 [ 28 ] Bug #1935953 - CVE-2021-21177 chromium-browser: Insufficient policy enforcement in Autofill https://bugzilla.redhat.com/show_bug.cgi?id=1935953 [ 29 ] Bug #1935954 - CVE-2021-21185 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1935954 [ 30 ] Bug #1935955 - CVE-2021-21190 chromium-browser: Uninitialized Use in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1935955 [ 31 ] Bug #1935956 - CVE-2021-21184 chromium-browser: Inappropriate implementation in performance APIs https://bugzilla.redhat.com/show_bug.cgi?id=1935956 [ 32 ] Bug #1935958 - CVE-2021-21168 chromium-browser: Insufficient policy enforcement in appcache https://bugzilla.redhat.com/show_bug.cgi?id=1935958 [ 33 ] Bug #1935959 - CVE-2021-21167 chromium-browser: Use after free in bookmarks https://bugzilla.redhat.com/show_bug.cgi?id=1935959 [ 34 ] Bug #1935960 - CVE-2021-21188 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1935960 [ 35 ] Bug #1935961 - CVE-2021-21172 chromium-browser: Insufficient policy enforcement in File System API https://bugzilla.redhat.com/show_bug.cgi?id=1935961 [ 36 ] Bug #1935962 - CVE-2021-21182 chromium-browser: Insufficient policy enforcement in navigations https://bugzilla.redhat.com/show_bug.cgi?id=1935962 [ 37 ] Bug #1935963 - CVE-2021-21176 chromium-browser: Inappropriate implementation in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1935963 [ 38 ] Bug #1935964 - CVE-2021-21159 chromium-browser: Heap buffer overflow in TabStrip https://bugzilla.redhat.com/show_bug.cgi?id=1935964 [ 39 ] Bug #1935965 - CVE-2021-21186 chromium-browser: Insufficient policy enforcement in QR scanning https://bugzilla.redhat.com/show_bug.cgi?id=1935965 [ 40 ] Bug #1935966 - CVE-2021-21165 chromium-browser: Object lifecycle issue in audio https://bugzilla.redhat.com/show_bug.cgi?id=1935966 [ 41 ] Bug #1935967 - CVE-2021-21189 chromium-browser: Insufficient policy enforcement in payments https://bugzilla.redhat.com/show_bug.cgi?id=1935967 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-historymanager-prefix-search-12-7.el8 (FEDORA-EPEL-2021-81d271101c) Use PageUp and PageDown to search for previous GNOME Shell commands -------------------------------------------------------------------------------- Update Information: Minor rebuild to mark HistoryManager Prefix Search as incompatible with GNOME 40. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ gperftools-2.7-9.el8 (FEDORA-EPEL-2021-0eda4297eb) Very fast malloc and performance analysis tools -------------------------------------------------------------------------------- Update Information: Downgrade to 2.7 with an epoch bump for epel8. This is a known-stable version for Ceph. Backport ppc64le and s390x fixes. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 12 2021 Steve Traylen <steve.traylen(a)cern.ch> - 1:2.7-9 - Correct inter package deps for epoch bump * Mon Mar 1 2021 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:2.7-8 - Backport ppc64le and s390x fixes (#1933792) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1933792 - ceph crashes with gperftools 2.8 https://bugzilla.redhat.com/show_bug.cgi?id=1933792 -------------------------------------------------------------------------------- ================================================================================ java-latest-openjdk-16.0.0.0.36-1.rolling.el8 (FEDORA-EPEL-2021-df7021d422) OpenJDK 16 Runtime Environment -------------------------------------------------------------------------------- Update Information: This update have intentionally autokarma-off butany user review highly appreciated -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 9 2021 Jiri Vanek <jvanek(a)redhat.com> - 1:16.0.0.0.36-1.rolling - fixed suggests of wrong pcsc-lite-devel(aarch-64) to correct pcsc-lite-libs(aarch-64) * Fri Feb 19 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:16.0.0.0.36-0.rolling - Update to jdk-16.0.0.0+36 - Update tarball generation script to use git following OpenJDK's move to github - Update tarball generation script to use PR3823 which handles JDK-8235710 changes - Use upstream default for version-pre rather than setting it to "ea" or "" - Drop libsunec.so which is no longer generated, thanks to JDK-8235710 - Drop unnecessary compiler flags, dating back to work on GCC 6 & 10 - Adapt RH1750419 alt-java patch to still apply after some variable re-naming in the makefiles - Update filever to remove any trailing zeros, as in the OpenJDK build, and use for source filename - Use system harfbuzz now this is supported. - Pass SOURCE_DATE_EPOCH to build for reproducible builds * Fri Feb 19 2021 Stephan Bergmann <sbergman(a)redhat.com> - 1:15.0.2.0.7-1.rolling - Hardcode /usr/sbin/alternatives for Flatpak builds * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:15.0.2.0.7-0.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Test-PostgreSQL-1.28-1.el8 (FEDORA-EPEL-2021-7333ebbdac) PostgreSQL runner for Perl tests -------------------------------------------------------------------------------- Update Information: This release randomizes a port number of the server. It also adds support for beta versions on the server. It also delivers upstream tests in a dedicated tests subpackage. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 12 2021 Petr Pisar <ppisar(a)redhat.com> - 1.28-1 - 1.28 bump - Package tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #1938172 - perl-Test-PostgreSQL-1.28 is available https://bugzilla.redhat.com/show_bug.cgi?id=1938172 -------------------------------------------------------------------------------- ================================================================================ pg_top-4.0.0-1.el8 (FEDORA-EPEL-2021-0c17af9564) 'top' for PostgreSQL process -------------------------------------------------------------------------------- Update Information: EPEL8 build -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-bloom-0.10.2-1.el8 (FEDORA-EPEL-2021-2e5cc063bc) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information: Update to the latest release of `bloom` -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Scott K Logan <logans(a)cottsay.net> - 0.10.2-1 - Update to 0.10.2 -------------------------------------------------------------------------------- ================================================================================ python-shapely-1.7.1-9.el8 (FEDORA-EPEL-2021-31c75e514c) Manipulation and analysis of geometric objects in the Cartesian plane -------------------------------------------------------------------------------- Update Information: Fix tests that failed on s390x because they assumed the host was little-endian (RHBZ#1937719, https://github.com/Toblerity/Shapely/issues/1102) Fix skipped tests for vectorized extensions. ---- Initial package for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1750791 - Request to build python-shapely for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1750791 [ 2 ] Bug #1937719 - Test failures on s390x https://bugzilla.redhat.com/show_bug.cgi?id=1937719 -------------------------------------------------------------------------------- ================================================================================ singularity-3.7.2-1.el8 (FEDORA-EPEL-2021-8cd38bc0c7) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to upstream 3.7.2. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.7.2-1 - Upgrade to upstream 3.7.2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1937530 - singularity-3.7.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1937530 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 11 Mar '21

11 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-780cd884ad cabextract-1.9-7.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-32d4f4a583 python3-pillow-6.2.2-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing js-jquery-ui-1.12.1-1.el7 js-jquery-ui-touch-punch-0.2.3-0.10.20141219git4bc0091.el7 js-jsroot-5.9.1-1.el7 nrpe-4.0.3-6.el7 upx-3.96-8.el7 Details about builds: ================================================================================ js-jquery-ui-1.12.1-1.el7 (FEDORA-EPEL-2021-a8ba75a9b4) jQuery user interface -------------------------------------------------------------------------------- Update Information: New js-jquery-ui package. (Replacing retired xstatic-jquery-ui-common.) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1933419 - Review Request: js-jquery-ui - jQuery user interface https://bugzilla.redhat.com/show_bug.cgi?id=1933419 -------------------------------------------------------------------------------- ================================================================================ js-jquery-ui-touch-punch-0.2.3-0.10.20141219git4bc0091.el7 (FEDORA-EPEL-2021-e6cd367687) Touch Event Support for jQuery UI -------------------------------------------------------------------------------- Update Information: Requires new js-jquery-ui package instead of retired xstatic-jquery-ui-common. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.2.3-0.10.20141219git4bc0091 - Change Requires to new js-jquery-ui package (also for EPEL 8) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.9.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.8.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jul 15 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.2.3-0.7.20141219git4bc0091 - Drop jquery-ui dependency for EPEL 8, package not available. * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.6.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.5.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.4.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.3.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.2.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929637 - F35FailsToInstall: js-jquery-ui-touch-punch https://bugzilla.redhat.com/show_bug.cgi?id=1929637 [ 2 ] Bug #1933032 - F34FailsToInstall: js-jquery-ui-touch-punch https://bugzilla.redhat.com/show_bug.cgi?id=1933032 -------------------------------------------------------------------------------- ================================================================================ js-jsroot-5.9.1-1.el7 (FEDORA-EPEL-2021-3b3652e53a) JavaScript ROOT - Interactive numerical data analysis graphics -------------------------------------------------------------------------------- Update Information: jsroot 5.9.1 Requires new js-jquery-ui package instead of retired xstatic- jquery-ui-common. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.9.1-1 - Update to version 5.9.1 - Change Requires to new js-jquery-ui package (also for EPEL 8) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.8.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Sep 26 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.8.0-5 - Compatibility with uglifyjs v3 (no --preamble option) * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.8.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jul 23 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.8.0-3 - Do not use closure-compiler for Fedora 33+ - it is orphaned and uninstallable with broken deps. * Wed Jul 15 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.8.0-2 - No longer bundle js-jquery, js-jquery-mousewheel and js-jquery-ui-touch-punch for EPEL 8. - Still bundle js-jquery-ui which is not available in EPEL 8. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929638 - F35FailsToInstall: js-jsroot https://bugzilla.redhat.com/show_bug.cgi?id=1929638 [ 2 ] Bug #1933033 - F34FailsToInstall: js-jsroot https://bugzilla.redhat.com/show_bug.cgi?id=1933033 -------------------------------------------------------------------------------- ================================================================================ nrpe-4.0.3-6.el7 (FEDORA-EPEL-2021-f8025180be) Host/service/network monitoring agent for Nagios -------------------------------------------------------------------------------- Update Information: Wait for network-online.target. Apply /etc/sysconfig/nrpe settings. Changed /var/run to /run. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.0.3-6 - Fix build for EPEL7. * Tue Mar 9 2021 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.0.3-5 - Wait for network-online.target (bz#1898469). - Apply /etc/sysconfig/nrpe settings (bz#1806659). - Changed /var/run to /run (bz#1870146). * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 4.0.3-4 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1806659 - /etc/sysconfig/nrpe is ignored https://bugzilla.redhat.com/show_bug.cgi?id=1806659 [ 2 ] Bug #1870146 - systemd-tmpfiles issue with /usr/lib/tmpfiles.d/nrpe.conf https://bugzilla.redhat.com/show_bug.cgi?id=1870146 [ 3 ] Bug #1898469 - NRPE not starting at boot on physical servers https://bugzilla.redhat.com/show_bug.cgi?id=1898469 -------------------------------------------------------------------------------- ================================================================================ upx-3.96-8.el7 (FEDORA-EPEL-2021-d7ae32a6da) Ultimate Packer for eXecutables -------------------------------------------------------------------------------- Update Information: Fix for CVE-2021-20285 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.96-8 - PAtch for CVE-2021-20285 * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.96-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1937789 - CVE-2021-20285 upx: Illegal memory access in canPack function in p_lx_elf.cpp [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1937789 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 11 Mar '21

11 Mar '21

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fedb6fa69d python-aiohttp-3.7.4-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fc2f1ff74c x11vnc-0.9.16-3.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1073219045 privoxy-3.0.32-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a2e8a7475f chromium-88.0.4324.182-2.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-94317ce911 suricata-5.0.6-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6b1b1f9053 python-django-2.2.19-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58f4d56777 zabbix40-4.0.29-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e9c2beec98 nagios-4.4.6-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing abseil-cpp-20200923.3-1.el8 flopgen-0.1.0-3.el8 js-jquery-ui-1.12.1-1.el8 js-jquery-ui-touch-punch-0.2.3-0.10.20141219git4bc0091.el8 js-jsroot-5.9.1-1.el8 kfc-0.1.3-1.el8 nrpe-4.0.3-6.el8 python-klein-20.6.0-2.el8 python-pyaib-2.1.0-3.el8 python-shapely-1.7.1-8.el8 python-tubes-0.2.0-2.el8 rubygem-net-ldap-0.17.0-1.el8 upx-3.96-8.el8 wyhash-final1-1.20210311gitwyhash_final.el8 xbar-0.0.1-1.el8 xwm-0.1.7-1.el8 znc-push-2.0.0-2.20210311git4243934.el8 Details about builds: ================================================================================ abseil-cpp-20200923.3-1.el8 (FEDORA-EPEL-2021-c1eb6f5af8) C++ Common Libraries -------------------------------------------------------------------------------- Update Information: Introducing the abseil-cpp package into epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1936514 - Please build abseil-cpp for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1936514 -------------------------------------------------------------------------------- ================================================================================ flopgen-0.1.0-3.el8 (FEDORA-EPEL-2021-516fcf2ad9) Tool for automatic creation of FAT-formatted floppy disk images -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1912169 - Review Request: flopgen - Tool for automatic creation of FAT-formatted floppy disk images https://bugzilla.redhat.com/show_bug.cgi?id=1912169 -------------------------------------------------------------------------------- ================================================================================ js-jquery-ui-1.12.1-1.el8 (FEDORA-EPEL-2021-6155880f1d) jQuery user interface -------------------------------------------------------------------------------- Update Information: New js-jquery-ui package. (Replacing retired xstatic-jquery-ui-common.) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1757438 - jquery-ui for EPEL 8? https://bugzilla.redhat.com/show_bug.cgi?id=1757438 [ 2 ] Bug #1933419 - Review Request: js-jquery-ui - jQuery user interface https://bugzilla.redhat.com/show_bug.cgi?id=1933419 -------------------------------------------------------------------------------- ================================================================================ js-jquery-ui-touch-punch-0.2.3-0.10.20141219git4bc0091.el8 (FEDORA-EPEL-2021-1f1b28fa71) Touch Event Support for jQuery UI -------------------------------------------------------------------------------- Update Information: Requires new js-jquery-ui package instead of retired xstatic-jquery-ui-common. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.2.3-0.10.20141219git4bc0091 - Change Requires to new js-jquery-ui package (also for EPEL 8) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.9.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.3-0.8.20141219git4bc0091 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929637 - F35FailsToInstall: js-jquery-ui-touch-punch https://bugzilla.redhat.com/show_bug.cgi?id=1929637 [ 2 ] Bug #1933032 - F34FailsToInstall: js-jquery-ui-touch-punch https://bugzilla.redhat.com/show_bug.cgi?id=1933032 -------------------------------------------------------------------------------- ================================================================================ js-jsroot-5.9.1-1.el8 (FEDORA-EPEL-2021-d228e89321) JavaScript ROOT - Interactive numerical data analysis graphics -------------------------------------------------------------------------------- Update Information: jsroot 5.9.1 Requires new js-jquery-ui package instead of retired xstatic- jquery-ui-common. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.9.1-1 - Update to version 5.9.1 - Change Requires to new js-jquery-ui package (also for EPEL 8) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.8.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Sep 26 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.8.0-5 - Compatibility with uglifyjs v3 (no --preamble option) * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.8.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jul 23 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.8.0-3 - Do not use closure-compiler for Fedora 33+ - it is orphaned and uninstallable with broken deps. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1929638 - F35FailsToInstall: js-jsroot https://bugzilla.redhat.com/show_bug.cgi?id=1929638 [ 2 ] Bug #1933033 - F34FailsToInstall: js-jsroot https://bugzilla.redhat.com/show_bug.cgi?id=1933033 -------------------------------------------------------------------------------- ================================================================================ kfc-0.1.3-1.el8 (FEDORA-EPEL-2021-d3239754af) Terminal-emulator color palette setter written in POSIX C99 -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1919710 - Review Request: kfc - Terminal-emulator color palette setter written in POSIX C99 https://bugzilla.redhat.com/show_bug.cgi?id=1919710 -------------------------------------------------------------------------------- ================================================================================ nrpe-4.0.3-6.el8 (FEDORA-EPEL-2021-52425efa64) Host/service/network monitoring agent for Nagios -------------------------------------------------------------------------------- Update Information: Wait for network-online.target. Apply /etc/sysconfig/nrpe settings. Changed /var/run to /run. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.0.3-6 - Fix build for EPEL7. * Tue Mar 9 2021 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.0.3-5 - Wait for network-online.target (bz#1898469). - Apply /etc/sysconfig/nrpe settings (bz#1806659). - Changed /var/run to /run (bz#1870146). * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 4.0.3-4 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1806659 - /etc/sysconfig/nrpe is ignored https://bugzilla.redhat.com/show_bug.cgi?id=1806659 [ 2 ] Bug #1870146 - systemd-tmpfiles issue with /usr/lib/tmpfiles.d/nrpe.conf https://bugzilla.redhat.com/show_bug.cgi?id=1870146 [ 3 ] Bug #1898469 - NRPE not starting at boot on physical servers https://bugzilla.redhat.com/show_bug.cgi?id=1898469 -------------------------------------------------------------------------------- ================================================================================ python-klein-20.6.0-2.el8 (FEDORA-EPEL-2021-5010599282) Python microframework built on werkzeug + twisted.web -------------------------------------------------------------------------------- Update Information: Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1874658 - RFE: Build python-klein for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1874658 -------------------------------------------------------------------------------- ================================================================================ python-pyaib-2.1.0-3.el8 (FEDORA-EPEL-2021-cf2acbf294) Python Framework for writing IRC Bots using gevent -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-shapely-1.7.1-8.el8 (FEDORA-EPEL-2021-07b031f188) Manipulation and analysis of geometric objects in the Cartesian plane -------------------------------------------------------------------------------- Update Information: Initial package for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1750791 - Request to build python-shapely for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1750791 -------------------------------------------------------------------------------- ================================================================================ python-tubes-0.2.0-2.el8 (FEDORA-EPEL-2021-5010599282) Flow control and backpressure for event-driven applications -------------------------------------------------------------------------------- Update Information: Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1874658 - RFE: Build python-klein for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1874658 -------------------------------------------------------------------------------- ================================================================================ rubygem-net-ldap-0.17.0-1.el8 (FEDORA-EPEL-2021-1201ffa72b) Net::LDAP for Ruby implements client access LDAP protocol -------------------------------------------------------------------------------- Update Information: First EPEL 8 package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1814384 - Requesting that rubygem-net-ldap be ported to EL8 EPEL https://bugzilla.redhat.com/show_bug.cgi?id=1814384 -------------------------------------------------------------------------------- ================================================================================ upx-3.96-8.el8 (FEDORA-EPEL-2021-cd16d1b0bf) Ultimate Packer for eXecutables -------------------------------------------------------------------------------- Update Information: Fix for CVE-2021-20285 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 11 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.96-8 - PAtch for CVE-2021-20285 * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.96-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1937789 - CVE-2021-20285 upx: Illegal memory access in canPack function in p_lx_elf.cpp [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1937789 -------------------------------------------------------------------------------- ================================================================================ wyhash-final1-1.20210311gitwyhash_final.el8 (FEDORA-EPEL-2021-7b083bc867) No hash function is perfect, but some are useful -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1936138 - Review Request: wyhash - No hash function is perfect, but some are useful https://bugzilla.redhat.com/show_bug.cgi?id=1936138 -------------------------------------------------------------------------------- ================================================================================ xbar-0.0.1-1.el8 (FEDORA-EPEL-2021-7b5ba2228a) Tiny XCB information bar -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1919702 - Review Request: xbar - Tiny XCB information bar https://bugzilla.redhat.com/show_bug.cgi?id=1919702 -------------------------------------------------------------------------------- ================================================================================ xwm-0.1.7-1.el8 (FEDORA-EPEL-2021-d959970507) Tiny XCB floating window manager -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1919701 - Review Request: xwm - Tiny XCB floating window manager https://bugzilla.redhat.com/show_bug.cgi?id=1919701 -------------------------------------------------------------------------------- ================================================================================ znc-push-2.0.0-2.20210311git4243934.el8 (FEDORA-EPEL-2021-e138e316b6) Push notification service module for ZNC -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1925606 - Review Request: znc-push - Push notification service module for ZNC https://bugzilla.redhat.com/show_bug.cgi?id=1925606 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 11 Mar '21

11 Mar '21

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2021-03-12 from 17:00:00 to 18:00:00 US/Eastern At fedora-meeting(a)irc.freenode.net The meeting will be about: This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #meetingname EPEL #topic Intros #topic Old Business #topic EPEL-7 #topic EPEL-8 #topic Openfloor #endmeeting Source: https://apps.fedoraproject.org/calendar/meeting/9854/

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 10 Mar '21

10 Mar '21

The following Fedora EPEL 7 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-580891d7f4 chromium-88.0.4324.182-2.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-780cd884ad cabextract-1.9-7.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-32d4f4a583 python3-pillow-6.2.2-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing fedora-repo-zdicts-2103.1-2.el7 python-absl-py-0.12.0-2.el7 xrootd-5.1.1-1.el7 Details about builds: ================================================================================ fedora-repo-zdicts-2103.1-2.el7 (FEDORA-EPEL-2021-91040a48e1) Zstd dictionaries for Fedora repository metadata -------------------------------------------------------------------------------- Update Information: Update with F34 dictionaries -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Jonathan Dieter <jdieter(a)gmail.com> - 2103.1-2 - Update with F34 dictionaries - Fix changelog entry * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2010.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Oct 8 2020 Jonathan Dieter <jdieter(a)gmail.com> - 2010.1-1 - Update with F33 dictionaries * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2004.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-absl-py-0.12.0-2.el7 (FEDORA-EPEL-2021-9eee06916f) Abseil Python Common Libraries -------------------------------------------------------------------------------- Update Information: ## 0.12.0 (2021-03-08) ### Added * (flags) Made `EnumClassSerializer` and `EnumClassListSerializer` public. * (flags) Added a `required: Optional[bool] = False` parameter to `DEFINE_*` functions. * (testing) flagsaver overrides can now be specified in terms of FlagHolder. * (testing) `parameterized.product`: Allows testing a method over cartesian product of parameters values, specified as a sequences of values for each parameter or as kwargs-like dicts of parameter values. * (testing) Added public flag holders for `--test_srcdir` and `--test_tmpdir`. Users should use `absltest.TEST_SRCDIR.value` and `absltest.TEST_TMPDIR.value` instead of `FLAGS.test_srcdir` and `FLAGS.test_tmpdir`. ### Fixed * (flags) Made `CsvListSerializer` respect its delimiter argument. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.0-2 - Add CHANGELOG.md, from absl/, to documentation * Wed Mar 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.0-1 - Update to 0.12.0 - Drop python-absl-py-0.11.0-python-3.10.patch, now upstreamed * Wed Mar 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.11.0-3 - Move BR��s back to top-level package - Fix bogus changelog versions -------------------------------------------------------------------------------- References: [ 1 ] Bug #1937186 - python-absl-py-0.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1937186 -------------------------------------------------------------------------------- ================================================================================ xrootd-5.1.1-1.el7 (FEDORA-EPEL-2021-b5bd723d6b) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: XRootD 5.1.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 10 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.1-1 - Update to version 5.1.1 - Drop patches (accepted upstream) * Fri Feb 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.0-2 - Remove debug output * Tue Feb 23 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.0-1 - Update to version 5.1.0 - Add scitokens plugin package - Packages xrootd-ceph and xrdcl-http are now built as part of xrootd replacing the packages built from separate source rpms - Drop patches (accepted upstream or previously backported) - Fix broken library dependency in XrdCeph cmake file - Fix format error on 32 bit architectures * Sat Feb 13 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-5 - Drop workaround for false positive warning from gcc 11 * Tue Jan 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-4 - Workaround false positive warning from gcc 11 (Fedora 34+) * Tue Dec 8 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-3 - Fix array length calculation (gcc 11 error) - Fix uninitialized variable error --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel March 2021