The following Fedora EPEL 8 Security updates need testing:
Age URL
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a32cbcaa37
tcpreplay-4.3.3-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-232e4f7411
python-django-2.2.13-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
BackupPC-4.4.0-1.el8
BackupPC-XS-0.62-1.el8
BibTool-2.68-1.el8
OpenImageIO-2.1.16.0-2.el8
chromium-83.0.4103.106-1.el8
epel-rpm-macros-8-13
filelight-20.04.2-1.el8
fuse-zip-0.7.1-1.el8
kdesvn-2.1.0-1.el8
kile-2.9.93-1.el8
libharu-2.3.0-9.el8
libmp4v2-2.1.0-0.21.trunkREV507.el8
lighttpd-1.4.55-3.el8
lynis-3.0.0-1.el8
openvdb-7.0.0-7.el8
orangefs-2.9.7-8.el8
perl-DBD-Mock-1.55-2.el8
perl-Digest-MD5-File-0.08-23.el8
perl-File-Path-Tiny-0.9-9.el8
perl-HTML-Table-2.08a-32.el8
perl-HTTP-Body-1.22-16.el8
perl-Heap-0.80-33.el8
perl-Statistics-Descriptive-3.0702-6.el8
python-asysocks-0.0.4-1.el8
python-catkin_lint-1.6.9-1.el8
python-enlighten-1.6.0-1.el8
python-mysqlclient-1.4.6-2.el8
python-pluginlib-0.8.0-1.el8
python-rencode-1.0.6-10.el8
python-wcwidth-0.2.4-1.el8
rootsh-1.5.3-22.el8
rsibreak-0.12.13-1.el8
votca-csg-1.6.1-1.el8
votca-tools-1.6.1-1.el8
votca-xtp-1.6.1-1.el8
wsjtx-2.2.2-1.el8
znc-1.8.1-1.el8
Details about builds:
================================================================================
BackupPC-4.4.0-1.el8 (FEDORA-EPEL-2020-db09232601)
High-performance backup system
--------------------------------------------------------------------------------
Update Information:
BackupPC 4.4.0 === This release contains several new features and some bug
fixes. New features include: * any full/filled backup can be marked for
keeping, which prevents any expiry or deletion * any backup can be annotated
with a comment (eg, "prior to upgrade of xyz") added metrics CGI (thanks to
@jooola) that replaces RSS and adds Prometheus support * tar XferMethod now
supports xattrs and acls * rsync XferMethod now correctly supports xattrs on
directories and symlinks * nightly pool scanning now verifies the md5 digests of
a configurable fraction of pool files * code runs through perltidy so format is
now uniform (thanks to @jooola, with help from @shancock9 and @moisseev) * New
versions of BackupPC::XS (0.62) and rsync-bpc (3.0.9.15, 3.1.2.2 or 3.1.3beta0)
are required. Here are the more detailed changes: * Merged pull requests #325,
#326, #329, #330, #334, #336, #337, #338, #342, #343, #344, #345, #347, #348,
#349 * Filled/Full backups can now be marked as "keep", which excludes them
from
any expiry/deletion. Also, a backup-specific comment can be added to any backup
to capture any important information about that backup (eg, "pre-upgrade of
xyz"). * Added metrics CGI, which adds Prometheus support and replaces RSS, by
@joola (#344, #347) * Tar XferMethod now supports xattrs and acls; xattrs sbould
be compatible with rsync XferMethod, but acls are not * Sort open directories to
top when browsing backup tree * Format code using perltidy, and included in pre-
commit flow, by @joola (#334, #337, #342, #343, #345). Thanks to @joola and
@shancock9 (perltidy author) for significant effort and support, plus
improvements in perltidy, to make this happen. * Added
$Conf{PoolNightlyDigestCheckPercent}, which checks the md5 digest of this
fraction of the pool files each night. * $Conf{ClientShareName2Path} is saved in
backups file and the share to client path mapping is now displayed when you
browse a backup so you know the actual client backup path for each share, if
different from the share name * configure.pl now checks the per-host config.pl
in a V3 upgrade to warn the user if $Conf{RsyncClientCmd} or
$Conf{RsyncClientRestoreCmd} are used for that host, so that the new settings
$Conf{RsyncSshArgs} and $Conf{RsyncClientPath} can be manually updated. * Fixed
host mutex handling for dhcp hosts; shifted initial mutex requests to client
programs * Updated webui icon, logo and favicon, by @moisseev (#325, #326, #329,
#330) * Added $Conf{RsyncRestoreArgsExtra} for host-specific restore settings *
Language files are now all use utf8 charsets * Bumped required version of
BackupPC::XS to 0.62 and rsync-bpc to 3.0.9.15. * Ping failure message only
written to stdout only if verbose * BackupPC_backupDelete removes partial v3
backup in HOST/new; fixes #324 reported by @thalueng * BackupPC_backupDelete
adds -f option to over keep, if set * BackupPC_nightly: change -f to -F when
running BackupPC_refCountUpdate during fsck * Better formatting of eval cmd
result in cmdSystemOrEvalLong() * Remove zero count entries in per-backup and
per-host poolCnt files * Add a fake version parameter to the CSS URL to overcome
caching * Fixed ALRM typo in BackupPC_dump, by @rhansen (#348) * Fixed command
name in error message in BackupPC_archive, by @rhansen (#349) *
lib/BackupPC/Xfer/Rsync.pm skips adding --iconv option when
$conf->{ClientCharset} is utf8 or empty, to avoid a long-standing rsync bug *
lib/BackupPC/Xfer/Rsync.pm provides a more informative warning when the client
rsync exits with an IO error, and also includes the IO error in the xferErr
count * lib/BackupPC/Xfer/Smb.pm recognizes NT_STATUS_LOGON_FAILURE error *
Increase text length in config editor fields, by @moisseev (#336) * Typo fix in
config.pl, by @cure (#338) * Minor documentation updates, removing old
SourceForge links BackupPC-XS 0.62 released === This release has a couple of
fixes: * force rewrite of attr file if xattr key fixup was applied * fixed
attrib refCnt when attrib is unchanged * bpc_attrib_dirWrite() doesn't create
empty attrib files
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Richard Shaw <hobbes1069(a)gmail.com> - 4.4.0-1
- Update to 4.4.0.
* Wed Mar 25 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 4.3.2-3
- Add perl dependencies needed for build
- Remove duplicities from run-requires
* Thu Mar 12 2020 Richard Shaw <hobbes1069(a)gmail.com> - 4.3.2-2
- Add patch to allow prevention of backups being deleted.
- Add apache.users config file to control permissions and update related SETUP
documentation.
- Fix PID file to be created in /run instead of /var/run.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849363 - BackupPC-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849363
[ 2 ] Bug #1849364 - BackupPC-XS-0.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849364
--------------------------------------------------------------------------------
================================================================================
BackupPC-XS-0.62-1.el8 (FEDORA-EPEL-2020-db09232601)
Implementation of various BackupPC functions in a perl-callable module
--------------------------------------------------------------------------------
Update Information:
BackupPC 4.4.0 === This release contains several new features and some bug
fixes. New features include: * any full/filled backup can be marked for
keeping, which prevents any expiry or deletion * any backup can be annotated
with a comment (eg, "prior to upgrade of xyz") added metrics CGI (thanks to
@jooola) that replaces RSS and adds Prometheus support * tar XferMethod now
supports xattrs and acls * rsync XferMethod now correctly supports xattrs on
directories and symlinks * nightly pool scanning now verifies the md5 digests of
a configurable fraction of pool files * code runs through perltidy so format is
now uniform (thanks to @jooola, with help from @shancock9 and @moisseev) * New
versions of BackupPC::XS (0.62) and rsync-bpc (3.0.9.15, 3.1.2.2 or 3.1.3beta0)
are required. Here are the more detailed changes: * Merged pull requests #325,
#326, #329, #330, #334, #336, #337, #338, #342, #343, #344, #345, #347, #348,
#349 * Filled/Full backups can now be marked as "keep", which excludes them
from
any expiry/deletion. Also, a backup-specific comment can be added to any backup
to capture any important information about that backup (eg, "pre-upgrade of
xyz"). * Added metrics CGI, which adds Prometheus support and replaces RSS, by
@joola (#344, #347) * Tar XferMethod now supports xattrs and acls; xattrs sbould
be compatible with rsync XferMethod, but acls are not * Sort open directories to
top when browsing backup tree * Format code using perltidy, and included in pre-
commit flow, by @joola (#334, #337, #342, #343, #345). Thanks to @joola and
@shancock9 (perltidy author) for significant effort and support, plus
improvements in perltidy, to make this happen. * Added
$Conf{PoolNightlyDigestCheckPercent}, which checks the md5 digest of this
fraction of the pool files each night. * $Conf{ClientShareName2Path} is saved in
backups file and the share to client path mapping is now displayed when you
browse a backup so you know the actual client backup path for each share, if
different from the share name * configure.pl now checks the per-host config.pl
in a V3 upgrade to warn the user if $Conf{RsyncClientCmd} or
$Conf{RsyncClientRestoreCmd} are used for that host, so that the new settings
$Conf{RsyncSshArgs} and $Conf{RsyncClientPath} can be manually updated. * Fixed
host mutex handling for dhcp hosts; shifted initial mutex requests to client
programs * Updated webui icon, logo and favicon, by @moisseev (#325, #326, #329,
#330) * Added $Conf{RsyncRestoreArgsExtra} for host-specific restore settings *
Language files are now all use utf8 charsets * Bumped required version of
BackupPC::XS to 0.62 and rsync-bpc to 3.0.9.15. * Ping failure message only
written to stdout only if verbose * BackupPC_backupDelete removes partial v3
backup in HOST/new; fixes #324 reported by @thalueng * BackupPC_backupDelete
adds -f option to over keep, if set * BackupPC_nightly: change -f to -F when
running BackupPC_refCountUpdate during fsck * Better formatting of eval cmd
result in cmdSystemOrEvalLong() * Remove zero count entries in per-backup and
per-host poolCnt files * Add a fake version parameter to the CSS URL to overcome
caching * Fixed ALRM typo in BackupPC_dump, by @rhansen (#348) * Fixed command
name in error message in BackupPC_archive, by @rhansen (#349) *
lib/BackupPC/Xfer/Rsync.pm skips adding --iconv option when
$conf->{ClientCharset} is utf8 or empty, to avoid a long-standing rsync bug *
lib/BackupPC/Xfer/Rsync.pm provides a more informative warning when the client
rsync exits with an IO error, and also includes the IO error in the xferErr
count * lib/BackupPC/Xfer/Smb.pm recognizes NT_STATUS_LOGON_FAILURE error *
Increase text length in config editor fields, by @moisseev (#336) * Typo fix in
config.pl, by @cure (#338) * Minor documentation updates, removing old
SourceForge links BackupPC-XS 0.62 released === This release has a couple of
fixes: * force rewrite of attr file if xattr key fixup was applied * fixed
attrib refCnt when attrib is unchanged * bpc_attrib_dirWrite() doesn't create
empty attrib files
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Richard Shaw <hobbes1069(a)gmail.com> - 0.62-1
- Update to 0.62.
* Sat May 30 2020 Richard Shaw <hobbes1069(a)gmail.com> - 0.60-1
- Update to 0.60.
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.59-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849363 - BackupPC-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849363
[ 2 ] Bug #1849364 - BackupPC-XS-0.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849364
--------------------------------------------------------------------------------
================================================================================
BibTool-2.68-1.el8 (FEDORA-EPEL-2020-db42d6c365)
A Tool for manipulating BibTeX data bases
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
OpenImageIO-2.1.16.0-2.el8 (FEDORA-EPEL-2020-c1dca57fe4)
Library for reading and writing images
--------------------------------------------------------------------------------
Update Information:
Initial build for EL 8. ---- Initial build for EPEL 8.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 4 2020 Nicolas Chauvet <kwizart(a)gmail.com> - 2.1.16.0-2
- Rebuilt for OpenCV 4.3
* Tue Jun 2 2020 Richard Shaw <hobbes1069(a)gmail.com> - 2.1.16.0-1
- Update to 2.1.16.
* Fri May 29 2020 Jonathan Wakely <jwakely(a)redhat.com> - 2.1.15.0-4
- Rebuilt for Boost 1.73
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.1.15.0-3
- Rebuilt for Python 3.9
* Mon May 11 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 2.1.15.0-2
- Rebuild for new LibRaw
* Mon May 11 2020 Richard Shaw <hobbes1069(a)gmail.com> - 2.1.15.0-1
- Update to 2.1.15.0.
- Adds support for libRaw 0.20, fixes RHBZ#1833450.
* Sat May 2 2020 Richard Shaw <hobbes1069(a)gmail.com> - 2.1.14.0-1
- Update to 2.1.14.0.
* Sun Apr 12 2020 Richard Shaw <hobbes1069(a)gmail.com> - 2.1.13.0-2
- Rebuild for funky depdendency problem in Rawhide/33.
* Thu Apr 2 2020 Richard Shaw <hobbes1069(a)gmail.com> - 2.1.13.0-1
- Update to 2.1.13.
* Tue Mar 3 2020 Richard Shaw <hobbes1069(a)gmail.com> - 2.1.12.0-1
- Update to 2.1.12.0.
--------------------------------------------------------------------------------
================================================================================
chromium-83.0.4103.106-1.el8 (FEDORA-EPEL-2020-c6a368f21e)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Black Lives Matter. Saying this does not mean that other lives do not matter. It
should not be controversial to say this. If I say Chromium updates matter, it
does not mean that other Fedora packages do not matter, it means that a Chromium
update is needed to fix this giant pile of severe security vulnerabilities,
here, today, now: CVE-2020-6463 CVE-2020-6465 CVE-2020-6466 CVE-2020-6467
CVE-2020-6468 CVE-2020-6469 CVE-2020-6470 CVE-2020-6471 CVE-2020-6472
CVE-2020-6473 CVE-2020-6474 CVE-2020-6475 CVE-2020-6476 CVE-2020-6478
CVE-2020-6479 CVE-2020-6480 CVE-2020-6481 CVE-2020-6482 CVE-2020-6483
CVE-2020-6484 CVE-2020-6485 CVE-2020-6486 CVE-2020-6487 CVE-2020-6488
CVE-2020-6489 CVE-2020-6490 CVE-2020-6491 CVE-2020-6505 CVE-2020-6506
CVE-2020-6507 In making that analogy, I do not intend to trivialize BLM. In no
way do I mean to compare the lives of people to a silly web browser update.
People are infinitely important than software. But since I'm here to push this
software update out, I am also choosing to say clearly and unambiguously that
Black Lives Matter. Open Source proves that many voices, many contributions,
together can change the world. It depends on it. This is my voice.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.106-1
- update to 83.0.4103.106
- remove duplicate ServiceWorker fix
- add fix to work around gcc bug on aarch64
- disable python byte compiling (we do not need it)
* Tue Jun 16 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.97-5
- add ServiceWorker fix
* Mon Jun 15 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.97-4
- use old cups handling on epel7
- fix skia attribute overrides with gcc
* Wed Jun 10 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.97-3
- fix issue on epel7 where linux/kcmp.h does not exist
* Mon Jun 8 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.97-2
- more fixes from gentoo
* Sun Jun 7 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.97-1
- update to 83.0.4103.97
* Tue Jun 2 2020 Tom Callaway <spot(a)fedoraproject.org> - 83.0.4103.61-1
- update to 83.0.4103.61
- conditionalize and disable remoting
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1837877 - CVE-2020-6465 chromium-browser: Use after free in reader mode
https://bugzilla.redhat.com/show_bug.cgi?id=1837877
[ 2 ] Bug #1837878 - CVE-2020-6466 chromium-browser: Use after free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1837878
[ 3 ] Bug #1837879 - CVE-2020-6467 chromium-browser: Use after free in WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1837879
[ 4 ] Bug #1837880 - CVE-2020-6468 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1837880
[ 5 ] Bug #1837882 - CVE-2020-6470 chromium-browser: Insufficient validation of
untrusted input in clipboard
https://bugzilla.redhat.com/show_bug.cgi?id=1837882
[ 6 ] Bug #1837883 - CVE-2020-6471 chromium-browser: Insufficient policy enforcement in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1837883
[ 7 ] Bug #1837884 - CVE-2020-6472 chromium-browser: Insufficient policy enforcement in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1837884
[ 8 ] Bug #1837885 - CVE-2020-6473 chromium-browser: Insufficient policy enforcement in
Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1837885
[ 9 ] Bug #1837886 - CVE-2020-6474 chromium-browser: Use after free in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1837886
[ 10 ] Bug #1837887 - CVE-2020-6475 chromium-browser: Incorrect security UI in full
screen
https://bugzilla.redhat.com/show_bug.cgi?id=1837887
[ 11 ] Bug #1837888 - CVE-2020-6477 chromium-browser: Inappropriate implementation in
installer
https://bugzilla.redhat.com/show_bug.cgi?id=1837888
[ 12 ] Bug #1837889 - CVE-2020-6478 chromium-browser: Inappropriate implementation in
full screen
https://bugzilla.redhat.com/show_bug.cgi?id=1837889
[ 13 ] Bug #1837890 - CVE-2020-6480 chromium-browser: Insufficient policy enforcement in
enterprise
https://bugzilla.redhat.com/show_bug.cgi?id=1837890
[ 14 ] Bug #1837891 - CVE-2020-6481 chromium-browser: Insufficient policy enforcement in
URL formatting
https://bugzilla.redhat.com/show_bug.cgi?id=1837891
[ 15 ] Bug #1837892 - CVE-2020-6482 chromium-browser: Insufficient policy enforcement in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1837892
[ 16 ] Bug #1837893 - CVE-2020-6483 chromium-browser: Insufficient policy enforcement in
payments
https://bugzilla.redhat.com/show_bug.cgi?id=1837893
[ 17 ] Bug #1837894 - CVE-2020-6484 chromium-browser: Insufficient data validation in
ChromeDriver
https://bugzilla.redhat.com/show_bug.cgi?id=1837894
[ 18 ] Bug #1837896 - CVE-2020-6485 chromium-browser: Insufficient data validation in
media router
https://bugzilla.redhat.com/show_bug.cgi?id=1837896
[ 19 ] Bug #1837897 - CVE-2020-6486 chromium-browser: Insufficient policy enforcement in
navigations
https://bugzilla.redhat.com/show_bug.cgi?id=1837897
[ 20 ] Bug #1837898 - CVE-2020-6487 chromium-browser: Insufficient policy enforcement in
downloads
https://bugzilla.redhat.com/show_bug.cgi?id=1837898
[ 21 ] Bug #1837899 - CVE-2020-6488 chromium-browser: Insufficient policy enforcement in
downloads
https://bugzilla.redhat.com/show_bug.cgi?id=1837899
[ 22 ] Bug #1837900 - CVE-2020-6489 chromium-browser: Inappropriate implementation in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1837900
[ 23 ] Bug #1837901 - CVE-2020-6490 chromium-browser: Insufficient data validation in
loader
https://bugzilla.redhat.com/show_bug.cgi?id=1837901
[ 24 ] Bug #1837902 - CVE-2020-6491 chromium-browser: Incorrect security UI in site
information
https://bugzilla.redhat.com/show_bug.cgi?id=1837902
[ 25 ] Bug #1837907 - CVE-2020-6469 chromium-browser: Insufficient policy enforcement in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1837907
[ 26 ] Bug #1837912 - CVE-2020-6476 chromium-browser: Insufficient policy enforcement in
tab strip
https://bugzilla.redhat.com/show_bug.cgi?id=1837912
[ 27 ] Bug #1837927 - CVE-2020-6479 chromium-browser: Inappropriate implementation in
sharing
https://bugzilla.redhat.com/show_bug.cgi?id=1837927
[ 28 ] Bug #1840893 - CVE-2020-6463 chromium-browser: Use after free in ANGLE
https://bugzilla.redhat.com/show_bug.cgi?id=1840893
[ 29 ] Bug #1847268 - CVE-2020-6505 chromium-browser: Use after free in speech
https://bugzilla.redhat.com/show_bug.cgi?id=1847268
[ 30 ] Bug #1847269 - CVE-2020-6506 chromium-browser: Insufficient policy enforcement in
WebView
https://bugzilla.redhat.com/show_bug.cgi?id=1847269
[ 31 ] Bug #1847270 - CVE-2020-6507 chromium-browser: Out of bounds write in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1847270
--------------------------------------------------------------------------------
================================================================================
epel-rpm-macros-8-13 (FEDORA-EPEL-2020-790135c4fa)
Extra Packages for Enterprise Linux RPM macros
--------------------------------------------------------------------------------
Update Information:
Backport %%py_shebang_fix, %%pytest, %%py_provides Allow to combine %%pycached
with other macros (e.g. %%exclude or %%ghost) (#1838992) Use Suggests for
python36-rpm-macros
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Troy Dawson <tdawson(a)redhat.com> - 8-13
- Use Suggests for python36-rpm-macros
* Sun Jun 7 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 8-12
- Backport %py_shebang_fix, %pytest, %py_provides
- Allow to combine %pycached with other macros (e.g. %exclude or %ghost) (#1838992)
--------------------------------------------------------------------------------
================================================================================
filelight-20.04.2-1.el8 (FEDORA-EPEL-2020-eeab5fd591)
Graphical disk usage statistics
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
fuse-zip-0.7.1-1.el8 (FEDORA-EPEL-2020-2f1f478654)
Filesystem to navigate, extract, create and modify ZIP archives
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Vasiliy Glazov <vascom2(a)gmail.com> - 0.7.1-1
- Update to 0.7.1
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kdesvn-2.1.0-1.el8 (FEDORA-EPEL-2020-d23667b555)
Subversion client for KDE
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2020 Marie Loise Nolden <loise(a)kde.org> - 2.1.0-1
- Update to 2.1.0-1
--------------------------------------------------------------------------------
================================================================================
kile-2.9.93-1.el8 (FEDORA-EPEL-2020-9147e8cba7)
(La)TeX source editor and TeX shell
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
libharu-2.3.0-9.el8 (FEDORA-EPEL-2020-8d77c70006)
C library for generating PDF files
--------------------------------------------------------------------------------
Update Information:
Applied 157 and 187 upstream github pull requests.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 11 2020 Dmitrij S. Kryzhevich <kryzhev(a)ispms.ru> - 2.3.0-9
- Update to RC3
- Apply 157 and 187 upstream github pull requests. See rhbz #1833318
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libmp4v2-2.1.0-0.21.trunkREV507.el8 (FEDORA-EPEL-2020-3c9503ab68)
Library for working with files using the mp4 container format
--------------------------------------------------------------------------------
Update Information:
Fixes for
https://nvd.nist.gov/vuln/detail/CVE-2018-14446
https://nvd.nist.gov/vuln/detail/CVE-2018-14403
https://nvd.nist.gov/vuln/detail/CVE-2018-14379
https://nvd.nist.gov/vuln/detail/CVE-2018-14326
https://nvd.nist.gov/vuln/detail/CVE-2018-14325
https://nvd.nist.gov/vuln/detail/CVE-2018-14054
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.1.0-0.21.trunkREV507
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sat Dec 14 2019 Jeff Law <law(a)redhat.com> - 2.1.0-0.20.trunkREV507
- Fix narrowing conversion issue caught by gcc-10
* Fri Nov 8 2019 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.19.trunkREV507
- Fix-v3-Integer-underflow-overflow-in-MP4v2-2.0.0
* Sat Nov 2 2019 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.18.trunkREV507
- Fix
https://nvd.nist.gov/vuln/detail/CVE-2018-14446
https://nvd.nist.gov/vuln/detail/CVE-2018-14403
https://nvd.nist.gov/vuln/detail/CVE-2018-14379
https://nvd.nist.gov/vuln/detail/CVE-2018-14326
https://nvd.nist.gov/vuln/detail/CVE-2018-14325
https://nvd.nist.gov/vuln/detail/CVE-2018-14054
based on
https://github.com/TechSmith/mp4v2/pull/27
and
https://github.com/sergiomb2/libmp4v2/
- Update spec
- Fix build on epel7
--------------------------------------------------------------------------------
================================================================================
lighttpd-1.4.55-3.el8 (FEDORA-EPEL-2020-0de6d49717)
Lightning fast webserver with light system requirements
--------------------------------------------------------------------------------
Update Information:
tmpfiles fix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 22 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.55-3
- Fix tmpfiles for EL-8.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849755 - LigHTTPd should include tmpfiles.d configuration to create
/run/lighttpd
https://bugzilla.redhat.com/show_bug.cgi?id=1849755
--------------------------------------------------------------------------------
================================================================================
lynis-3.0.0-1.el8 (FEDORA-EPEL-2020-f64e687c3f)
Security and system auditing tool
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.0 (rhbz #1848716): Fixes CVE-2020-13882 / CVE-2019-13033
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2020 Othman Madjoudj Othman Madjoudj <athmane(a)fedoraproject.org> -
3.0.0-1
- Update to 3.0.0 (rhbz #1848716)
- Fixes CVE-2020-13882 / CVE-2019-13033
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848716 - lynis-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1848716
--------------------------------------------------------------------------------
================================================================================
openvdb-7.0.0-7.el8 (FEDORA-EPEL-2020-6c546ada30)
C++ library for sparse volumetric data discretized on three-dimensional grids
--------------------------------------------------------------------------------
Update Information:
oidn -------- * Update to 1.2.1 openvdb -------------- * Disable jemalloc
for Red Hat Enterprise 8 and its derivative Blender ------------ * Fix path for
the fonts location
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Luya Tshimbalanga <luya(a)fedoraproject.org> - 7.0.0-7
- Disable jemalloc build for RHEL and its derivative
* Thu May 28 2020 Jonathan Wakely <jwakely(a)redhat.com> - 7.0.0-6
- Rebuilt for Boost 1.73
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 7.0.0-5
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1843623 - blender-2.83.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1843623
[ 2 ] Bug #1844904 - Please Update Blender to 2.83
https://bugzilla.redhat.com/show_bug.cgi?id=1844904
[ 3 ] Bug #1847248 - oidn-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1847248
[ 4 ] Bug #1848116 - OpenVDB should not be built with concurrent malloc (jemalloc)
https://bugzilla.redhat.com/show_bug.cgi?id=1848116
[ 5 ] Bug #1849429 - fonts are in the wrong folder (updates-testing)
https://bugzilla.redhat.com/show_bug.cgi?id=1849429
--------------------------------------------------------------------------------
================================================================================
orangefs-2.9.7-8.el8 (FEDORA-EPEL-2020-afd1e5b457)
Parallel network file system client
--------------------------------------------------------------------------------
Update Information:
Provides orangefs for epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849315 - Please build orangefs for EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1849315
--------------------------------------------------------------------------------
================================================================================
perl-DBD-Mock-1.55-2.el8 (FEDORA-EPEL-2020-bc4cb08600)
Mock database driver for testing
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1781736 - Add perl-DBD-Mock to EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1781736
--------------------------------------------------------------------------------
================================================================================
perl-Digest-MD5-File-0.08-23.el8 (FEDORA-EPEL-2020-0fb1fa9e06)
Perl extension for getting MD5 sums for files and URLs
--------------------------------------------------------------------------------
Update Information:
First build for EPEL-8.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1781739 - Co-maintainer request (to maintain EPEL8 branch)
https://bugzilla.redhat.com/show_bug.cgi?id=1781739
--------------------------------------------------------------------------------
================================================================================
perl-File-Path-Tiny-0.9-9.el8 (FEDORA-EPEL-2020-1bddb60fff)
Recursive versions of mkdir() and rmdir() without as much overhead as File::Path
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Table-2.08a-32.el8 (FEDORA-EPEL-2020-9676178e9f)
Create HTML tables using simple interface
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Body-1.22-16.el8 (FEDORA-EPEL-2020-dc140ae027)
HTTP Body Parser
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-Heap-0.80-33.el8 (FEDORA-EPEL-2020-03e52da218)
Perl extension for keeping data partially sorted
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-Statistics-Descriptive-3.0702-6.el8 (FEDORA-EPEL-2020-dc5ea9cda0)
Perl module of basic descriptive statistical functions
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-asysocks-0.0.4-1.el8 (FEDORA-EPEL-2020-28746ab5ad)
Socks5/Socks4 client and server library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 22 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.4-1
- Update to latest upstream release 0.0.4
* Mon Jun 15 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.3-1
- Update to latest upstream release 0.0.3
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.2-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
python-catkin_lint-1.6.9-1.el8 (FEDORA-EPEL-2020-4a411e803d)
Check catkin packages for common errors
--------------------------------------------------------------------------------
Update Information:
Update to the latest `catkin_lint` release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 22 2020 Scott K Logan <logans(a)cottsay.net> - 1.6.9-1
- Update to 1.6.9 (rhbz#1847827)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1847827 - python-catkin_lint-1.6.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1847827
--------------------------------------------------------------------------------
================================================================================
python-enlighten-1.6.0-1.el8 (FEDORA-EPEL-2020-695e6c7e7e)
Enlighten Progress Bar
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Avram Lubkin <aviso(a)rockhopper.net> - 1.6.0-1
- Update to 1.6.0
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5.1-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
python-mysqlclient-1.4.6-2.el8 (FEDORA-EPEL-2020-6984cdde39)
MySQL/mariaDB database connector for Python
--------------------------------------------------------------------------------
Update Information:
Add tests and missing BR
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816295 - Review Request: python-mysqlclient - MySQL/mariaDB database
connector for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1816295
--------------------------------------------------------------------------------
================================================================================
python-pluginlib-0.8.0-1.el8 (FEDORA-EPEL-2020-180104f60f)
A framework for creating and importing plugins in Python
--------------------------------------------------------------------------------
Update Information:
0.8.0 Release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Avram Lubkin <aviso(a)rockhopper.net> - 0.8.0-1
- 0.8.0 Release
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.7.0-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
python-rencode-1.0.6-10.el8 (FEDORA-EPEL-2020-a598d8bb7c)
Web safe object pickling/unpickling
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1847744 - please add python-rencode to epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1847744
--------------------------------------------------------------------------------
================================================================================
python-wcwidth-0.2.4-1.el8 (FEDORA-EPEL-2020-7865b92546)
Measures number of Terminal column cells of wide-character codes
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Avram Lubkin <aviso(a)rockhopper.net> - 0.2.4-1
- Update to 0.2.4
--------------------------------------------------------------------------------
================================================================================
rootsh-1.5.3-22.el8 (FEDORA-EPEL-2020-a4f816f7a7)
Shell wrapper for auditing
--------------------------------------------------------------------------------
Update Information:
New build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
rsibreak-0.12.13-1.el8 (FEDORA-EPEL-2020-b2a2d313c2)
A small utility which bothers you at certain intervals
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
votca-csg-1.6.1-1.el8 (FEDORA-EPEL-2020-67e5ad9748)
VOTCA coarse-graining engine
--------------------------------------------------------------------------------
Update Information:
Update votca packages
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Christoph Junghans <junghans(a)votca.org> - 1.6.1-1
- Version bump to v1.6.1
* Thu May 28 2020 Jonathan Wakely <jwakely(a)redhat.com> - 1.6-2
- Rebuilt for Boost 1.73
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849435 - votca-xtp-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849435
[ 2 ] Bug #1849436 - votca-csg-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849436
[ 3 ] Bug #1849437 - votca-tools-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849437
--------------------------------------------------------------------------------
================================================================================
votca-tools-1.6.1-1.el8 (FEDORA-EPEL-2020-67e5ad9748)
VOTCA tools library
--------------------------------------------------------------------------------
Update Information:
Update votca packages
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Christoph Junghans <junghans(a)votca.org> - 1.6.1-1
- Version bump to v1.6.1
* Thu May 28 2020 Jonathan Wakely <jwakely(a)redhat.com> - 1.6-2
- Rebuilt for Boost 1.73
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849435 - votca-xtp-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849435
[ 2 ] Bug #1849436 - votca-csg-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849436
[ 3 ] Bug #1849437 - votca-tools-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849437
--------------------------------------------------------------------------------
================================================================================
votca-xtp-1.6.1-1.el8 (FEDORA-EPEL-2020-67e5ad9748)
VOTCA excitation and charge properties module
--------------------------------------------------------------------------------
Update Information:
Update votca packages
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 21 2020 Christoph Junghans <junghans(a)votca.org> - 1.6.1-1
- Version bump to v1.6.1
* Sat May 30 2020 Jonathan Wakely <jwakely(a)redhat.com> - 1.6-2
- Rebuilt for Boost 1.73
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849435 - votca-xtp-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849435
[ 2 ] Bug #1849436 - votca-csg-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849436
[ 3 ] Bug #1849437 - votca-tools-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849437
--------------------------------------------------------------------------------
================================================================================
wsjtx-2.2.2-1.el8 (FEDORA-EPEL-2020-b7eac8146c)
Weak Signal communication by K1JT
--------------------------------------------------------------------------------
Update Information:
Release: WSJT-X 2.2.2 June 22, 2020
--------------------- WSJT-X v2.2.2 is a bug fix release, mainly to incorporate
the new RAC section PE into the FT8/FT4/MSK144 Contest Mode for Field Day. -
Stations intending to operate in Field Day (FD) are urged to upgrade to this
release, without it you cannot set your section to PE, and of equal
importance you cannot decode contest messages from stations who are operating
from PE without this upgrade. - FT8 decoder speeded up in Normal and Fast
modes. This change gives a speed of decoding closer to that of v2.1.2 without
compromising the number of decodes. It is particularly targeted for slower
single board computer users such as the Raspberry Pi Model 3 or similar. -
Thanks to our user interface language translation contributors for many
improvements to the translated strings. - The DX Grid field is now cleared
automatically when the DX Call field is changed. Care should be taken to
complete entry of a callsign before entering a grid square.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849689 - wsjtx-2.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849689
--------------------------------------------------------------------------------
================================================================================
znc-1.8.1-1.el8 (FEDORA-EPEL-2020-18fb909316)
An advanced IRC bouncer
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.1 Fix CVE-2020-13775 possible crash/NULL pointer dereference
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Nick Bebout <nb(a)fedoraproject.org> - 1.8.1-1
- Update to 1.8.1
- Fix CVE-2020-13775 possible crash/NULL pointer dereference
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.8.0-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1842249 - znc-1.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1842249
--------------------------------------------------------------------------------