The following Fedora EPEL 7 Security updates need testing:
Age URL
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad zarafa-7.1.14-4.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a650134f4f exim-4.94-2.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b1d43d7b48 atasm-1.09-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a1ab6f9c4e libmediainfo-21.03-1.el7 libzen-0.4.39-1.el7 mediainfo-21.03-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d0a9c2bf03 chromium-89.0.4389.90-3.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-857a9f7853 openssl11-1.1.1g-3.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7a4a5e372d seamonkey-2.53.7-2.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-dda757d4a5 libopenmpt-0.5.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
paternoster-3.3.0-4.el7
perl-Net-CIDR-Lite-0.22-1.el7
unrealircd-5.0.9.1-1.el7
Details about builds:
================================================================================
paternoster-3.3.0-4.el7 (FEDORA-EPEL-2021-07931ff59e)
Allows to run ansible playbooks like ordinary python or bash scripts
--------------------------------------------------------------------------------
Update Information:
Initial upload to epel.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-Net-CIDR-Lite-0.22-1.el7 (FEDORA-EPEL-2021-93d78fa1a6)
Perl extension for merging IPv4 or IPv6 CIDR addresses
--------------------------------------------------------------------------------
Update Information:
This update disallows use of IP addresses with leading zeroes in the octet
values, which could have been interpreted ambiguously as either octal or decimal
values.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 5 2021 Paul Howarth <paul(a)city-fan.org> - 0.22-1
- Update to 0.22
- Security: IPv4 octets with leading zeroes are no longer allowed
https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
* Tue Oct 8 2019 Paul Howarth <paul(a)city-fan.org> - 0.21-26
- Spec tidy-up
- Use author-independent source URL
- Fix permissions verbosely
* Wed Oct 14 2015 Paul Howarth <paul(a)city-fan.org> - 0.21-14
- Classify buildreqs by usage
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot
- Don't use macros for commands
- Make %files list more explicit
--------------------------------------------------------------------------------
================================================================================
unrealircd-5.0.9.1-1.el7 (FEDORA-EPEL-2021-de8b5d6cfb)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
UnrealIRCd 5.0.9.1 ================== * Build improvements on *NIX
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 26 2021 Robert Scheck <robert(a)fedoraproject.org> 5.0.9.1-1
- Upgrade to 5.0.9.1 (#1943492)
* Sun Mar 21 2021 Robert Scheck <robert(a)fedoraproject.org> 5.0.9-1
- Upgrade to 5.0.9 (#1938404)
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 5.0.8-3
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943492 - unrealircd-5.0.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1943492
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-eb1a7d918d atasm-1.09-1.el8
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9222415f70 exim-4.94-2.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b26bce013a chromium-89.0.4389.90-3.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58127424cd perl-Net-Netmask-2.0001-1.el8
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9df73b5aa4 seamonkey-2.53.7-2.el8
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ceb7b7897 libopenmpt-0.5.7-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
libkdumpfile-0.4.0-2.el8
paternoster-3.3.0-3.el8
perl-Net-CIDR-Lite-0.22-1.el8
python-cytoolz-0.11.0-1.el8
python-pytest-smartcov-0.3-1.el8
python-slixmpp-1.7.0-2.el8
rcs-5.10.0-3.el8
unrealircd-5.0.9.1-1.el8
Details about builds:
================================================================================
libkdumpfile-0.4.0-2.el8 (FEDORA-EPEL-2021-5dc35d48dd)
Kernel coredump file access
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945909 - Review Request: libkdumpfile - Kernel coredump file access
https://bugzilla.redhat.com/show_bug.cgi?id=1945909
--------------------------------------------------------------------------------
================================================================================
paternoster-3.3.0-3.el8 (FEDORA-EPEL-2021-bee93eb9d8)
Allows to run ansible playbooks like ordinary python or bash scripts
--------------------------------------------------------------------------------
Update Information:
New package for el8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-Net-CIDR-Lite-0.22-1.el8 (FEDORA-EPEL-2021-125be1ea97)
Perl extension for merging IPv4 or IPv6 CIDR addresses
--------------------------------------------------------------------------------
Update Information:
This update disallows use of IP addresses with leading zeroes in the octet
values, which could have been interpreted ambiguously as either octal or decimal
values.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 5 2021 Paul Howarth <paul(a)city-fan.org> - 0.22-1
- Update to 0.22
- Security: IPv4 octets with leading zeroes are no longer allowed
https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
--------------------------------------------------------------------------------
================================================================================
python-cytoolz-0.11.0-1.el8 (FEDORA-EPEL-2021-68dcecfbe9)
Cython implementation of the toolz package
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-pytest-smartcov-0.3-1.el8 (FEDORA-EPEL-2021-67ea86a5a6)
Smart coverage plugin for pytest
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945954 - Review Request: python-pytest-smartcov - Smart coverage plugin for pytest
https://bugzilla.redhat.com/show_bug.cgi?id=1945954
--------------------------------------------------------------------------------
================================================================================
python-slixmpp-1.7.0-2.el8 (FEDORA-EPEL-2021-557b398911)
Slixmpp is an XMPP library for Python 3.5+
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 5 2021 Matthieu Saulnier <fantom(a)fedoraproject.org> - 1.7.0-2
- python3-sphinx-autodoc-typehints has broken dep in epel8 because of
Sphinx version. Removing doc subpackage.
* Tue Mar 30 2021 Matthieu Saulnier <fantom(a)fedoraproject.org> - 1.7.0-1
- Update to 1.7.0
- Add new BuildRequires for sphinx documentation
* Sun Feb 14 2021 Matthieu Saulnier <fantom(a)fedoraproject.org> - 1.5.2-4
- Replace glob with %{python3_version} in %files section
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1911883 - python-slixmpp-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1911883
--------------------------------------------------------------------------------
================================================================================
rcs-5.10.0-3.el8 (FEDORA-EPEL-2021-dab7ddee9d)
Revision Control System (RCS) file version management tools
--------------------------------------------------------------------------------
Update Information:
This update prepares for the SIGSTKSZ change. (Problem was found by the
upcoming autoconf-2.71, but is unrelated.)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 4 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 5.10.0-3
- patch SIGSTKSZ
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.10.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
unrealircd-5.0.9.1-1.el8 (FEDORA-EPEL-2021-d7467aff71)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
UnrealIRCd 5.0.9.1 ================== * Build improvements on *NIX
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 26 2021 Robert Scheck <robert(a)fedoraproject.org> 5.0.9.1-1
- Upgrade to 5.0.9.1 (#1943492)
* Sun Mar 21 2021 Robert Scheck <robert(a)fedoraproject.org> 5.0.9-1
- Upgrade to 5.0.9 (#1938404)
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 5.0.8-3
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943492 - unrealircd-5.0.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1943492
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad zarafa-7.1.14-4.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a650134f4f exim-4.94-2.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b1d43d7b48 atasm-1.09-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a1ab6f9c4e libmediainfo-21.03-1.el7 libzen-0.4.39-1.el7 mediainfo-21.03-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d0a9c2bf03 chromium-89.0.4389.90-3.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-857a9f7853 openssl11-1.1.1g-3.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7a4a5e372d seamonkey-2.53.7-2.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-dda757d4a5 libopenmpt-0.5.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fedpkg-1.40-6.el7
python-oletools-0.56.1-1.el7
Details about builds:
================================================================================
fedpkg-1.40-6.el7 (FEDORA-EPEL-2021-8a8569d74f)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Patch: Add support for epel*-next branches https://pagure.io/fedpkg/pull-
request/429
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 3 2021 Ond��ej Nosek <onosek(a)redhat.com> - 1.40-6
- Patch: Add support for epel*-next branches
--------------------------------------------------------------------------------
================================================================================
python-oletools-0.56.1-1.el7 (FEDORA-EPEL-2021-8f6566a68a)
Tools to analyze Microsoft OLE2 files
--------------------------------------------------------------------------------
Update Information:
oletools 0.56.1 =============== * olevba: * fixed bug when parsing some
malformed files * oleobj: * fixed bug preventing detection of links
`externalReference`, `frame`, `hyperlink` * setup: * avoid installing
msoffcrypto-tool when platform is PyPy+Windows * PyPI version is now a wheel
package to improve installation and avoid antivirus false positives due to test
files
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 3 2021 Robert Scheck <robert(a)fedoraproject.org> - 0.56.1-1
- Upgrade to 0.56.1 (#1945976)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945976 - python-oletools-0.56.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945976
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-eb1a7d918d atasm-1.09-1.el8
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9222415f70 exim-4.94-2.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b26bce013a chromium-89.0.4389.90-3.el8
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58127424cd perl-Net-Netmask-2.0001-1.el8
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9df73b5aa4 seamonkey-2.53.7-2.el8
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ceb7b7897 libopenmpt-0.5.7-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
dmtcp-2.6.1~rc1-0.1.el8
fedpkg-1.40-6.el8
python-oletools-0.56.1-1.el8
Details about builds:
================================================================================
dmtcp-2.6.1~rc1-0.1.el8 (FEDORA-EPEL-2021-0716a3d8c4)
Checkpoint/Restart functionality for Linux processes
--------------------------------------------------------------------------------
Update Information:
Preparing for upstream release 2.3.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.40-6.el8 (FEDORA-EPEL-2021-6e76512075)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Patch: Add support for epel*-next branches https://pagure.io/fedpkg/pull-
request/429
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 3 2021 Ond��ej Nosek <onosek(a)redhat.com> - 1.40-6
- Patch: Add support for epel*-next branches
--------------------------------------------------------------------------------
================================================================================
python-oletools-0.56.1-1.el8 (FEDORA-EPEL-2021-3e9db85d8f)
Tools to analyze Microsoft OLE2 files
--------------------------------------------------------------------------------
Update Information:
oletools 0.56.1 =============== * olevba: * fixed bug when parsing some
malformed files * oleobj: * fixed bug preventing detection of links
`externalReference`, `frame`, `hyperlink` * setup: * avoid installing
msoffcrypto-tool when platform is PyPy+Windows * PyPI version is now a wheel
package to improve installation and avoid antivirus false positives due to test
files
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 3 2021 Robert Scheck <robert(a)fedoraproject.org> - 0.56.1-1
- Upgrade to 0.56.1 (#1945976)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945976 - python-oletools-0.56.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945976
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f980da66e tor-0.3.5.14-1.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad zarafa-7.1.14-4.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a650134f4f exim-4.94-2.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b1d43d7b48 atasm-1.09-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a1ab6f9c4e libmediainfo-21.03-1.el7 libzen-0.4.39-1.el7 mediainfo-21.03-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d0a9c2bf03 chromium-89.0.4389.90-3.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-857a9f7853 openssl11-1.1.1g-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
libopenmpt-0.5.7-1.el7
python-enlighten-1.9.0-2.el7
seamonkey-2.53.7-2.el7
Details about builds:
================================================================================
libopenmpt-0.5.7-1.el7 (FEDORA-EPEL-2021-dda757d4a5)
C/C++ library to decode tracker music module (MOD) files
--------------------------------------------------------------------------------
Update Information:
libopenmpt 0.5.7 (2021-03-20) ============================= * [Sec] Possible
null-pointer dereference read caused by a sequence of `openmpt::module::read`,
`openmpt::module::set_position_seconds` with a position past the song end, and
another `openmpt::module::read` call. (r14363) * IT: Instrument / sample
panning was reset on note-off / fade commands. * IMF: Set Finetune is now
implemented correctly. * Fixed excessive memory consumption with malformed
files in various formats.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 2 2021 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.5.7-1
- update to 0.5.7 (security release for the 0.5 series)
* Thu Feb 18 2021 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.5.5-1
- update to 0.5.5
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-enlighten-1.9.0-2.el7 (FEDORA-EPEL-2021-9eda934be5)
Enlighten Progress Bar
--------------------------------------------------------------------------------
Update Information:
Update EL7 patch
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 2 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.9.0-2
- Update EL7 patch
* Mon Mar 29 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.9.0-1
- Update to 1.9.0
* Wed Feb 24 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.8.0-1
- Update to 1.8.0
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jan 18 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.7.2-1
- Update to 1.7.2
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.53.7-2.el7 (FEDORA-EPEL-2021-7a4a5e372d)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Fix updating and support of legacy javascript extensions. ---- Update to
2.53.7 Enable support for module scripts. (To turn it off, toggle
"dom.moduleScripts.enabled" in about:config). For sending mail, now
"Thunderbird" is advertised in User-Agent header instead of "Firefox" (if any).
Some performance fixes, including from upcoming releases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 2 2021 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.7-2
- fix obsoleting "for each" javascript statements support
- no need to provide own dictionaries (system are used anyway)
* Tue Mar 30 2021 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.7-1
- update to 2.53.7
- fix keyboard input with gtk3 >= 3.24.26 (mozbz #1701288)
- backport some refresh driver improvements from upcoming 2.53.8
- avoid spurious update of intersection observers in a case
of throbber animation
- restore traditional security-button background (to match the location bar
highlighting, revert mozbz #1593550)
- for new installs add about:addons to the initial pages and
don't enable inspector and calendar there by default
- enable upcoming module scripts support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1944532 - seamonkey-2.53.7.source is available
https://bugzilla.redhat.com/show_bug.cgi?id=1944532
--------------------------------------------------------------------------------