The following Fedora EPEL 8 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-667d59a6db
suricata-5.0.9-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ImageMagick-6.9.12.44-1.el8
converseen-0.9.8.1-2.el8
digikam-6.4.0-5.el8
dvdauthor-0.7.2-16.el8
keepassxc-2.7.1-3.el8
openhantek-3.3.0-rc1.1.el8
perl-Fsdb-3.0-1.el8
pyshp-2.3.0-1.el8
python-ogr-0.38.1-1.el8
python-typing-extensions-3.7.4.3-2.el8
Details about builds:
================================================================================
ImageMagick-6.9.12.44-1.el8 (FEDORA-EPEL-2022-62b1a9e158)
An X application for displaying and manipulating images
--------------------------------------------------------------------------------
Update Information:
ImageMagick 6.9.12.x with a bunch security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12.44-1
- New upstream release 6.9.12.44
* Wed Mar 23 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12.43-1
- New upstream release 6.9.12.43
* Tue Mar 15 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12.42-1
- New upstream release 6.9.12.42
* Thu Feb 17 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12.40-1
- New upstream release 6.9.12-40 (#2051040)
* Sat Jan 29 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12.37-1
- Update to 6.9.12.37 (#2034280)
* Mon Jan 24 2022 Timm B��der <tbaeder(a)redhat.com> - 1:6.9.12.32-3
- Disable automatic .la file removal
-
https://fedoraproject.org/wiki/Changes/RemoveLaFiles
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.9.12.32-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Dec 6 2021 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12-32
- Update to 6.9.12-32 (#2029637)
* Tue Nov 23 2021 S��rgio Basto <sergio(a)serjux.com> - 1:6.9.12-31
- Update ImageMagick to 6.9.12-31 (#2025909)
* Mon Nov 22 2021 S��rgio Basto <sergio(a)serjux.com> - 1:6.9.12-30
- Update ImageMagick to 6.9.12-30 (#2017126)
* Sun Oct 31 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1:6.9.12-28
- Update to 6.9.12-28 (resolves #2017126)
* Tue Oct 26 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1:6.9.12-27
- Update to 6.9.12-27 (#2017126)
* Mon Oct 4 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1:6.9.12-25
- Update to 6.9.12-25 (#1869912)
- New url address
- Use pkgconfig for depending packages
* Fri Aug 27 2021 V��t Ondruch <vondruch(a)redhat.com> - 1:6.9.11.27-8
- Fix segfaults on s390x with rubygem-acitvestorage test suite.
Resolves: rhbz#1993193
* Sun Aug 22 2021 Richard Shaw <hobbes1069(a)gmail.com> - 1:6.9.11.27-7
- Rebuild for OpenEXR/Imath 3.1.
* Tue Aug 10 2021 Richard Shaw <hobbes1069(a)gmail.com> - 1:6.9.11.27-6
- Rebuild for OpenEXR/Imath 3.
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.9.11.27-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:6.9.11.27-4
- Perl 5.34 rebuild
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.9.11.27-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Jan 1 2021 Richard Shaw <hobbes1069(a)gmail.com> - 1:6.9.11.27-2
- Rebuild for OpenEXR 2.5.3.
* Tue Aug 11 2020 Michael Cronenworth <mike(a)cchtml.com> - 1:6.9.11.27-1
- Update to 6.9.11.27
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.9.11.22-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 2 2020 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:6.9.11.22-2
- Backport upstream patch to make ruby rmagick test pass (bug 1844192)
* Mon Jun 29 2020 Michael Cronenworth <mike(a)cchtml.com> - 1:6.9.11.22-1
- Update to 6.9.11.22
* Sat Jun 27 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:6.9.11.21-2
- Perl 5.32 re-rebuild updated packages
* Thu Jun 25 2020 Michael Cronenworth <mike(a)cchtml.com> - 1:6.9.11.21-1
- Update to 6.9.11.21
* Mon Jun 22 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:6.9.11.16-2
- Perl 5.32 rebuild
* Wed Jun 3 2020 Michael Cronenworth <mike(a)cchtml.com> - 1:6.9.11.16-1
- Update to 6.9.11.16
- Drop extra BRs on -devel package (RHBZ#1835344)
* Mon May 11 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1:6.9.10.86-3
- Rebuild for new LibRaw
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.9.10.86-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767804 - CVE-2019-15141 ImageMagick: heap-based buffer overflow in
WriteTIFFImage in coders/tiff.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767804
[ 2 ] Bug #1767814 - CVE-2019-15139 ImageMagick: out-of-bounds read in ReadXWDImage in
coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767814
[ 3 ] Bug #1767830 - CVE-2019-15140 ImageMagick: use-after-free in ReadImage in
MagickCore/constitute.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767830
[ 4 ] Bug #1772645 - CVE-2017-11166 ImageMagick: memory leak vulnerability in
ReadXWDImage function in coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1772645
[ 5 ] Bug #1777545 - CVE-2014-8561 ImageMagick: convert +profile regression enters
infinite loop exhausting memory [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1777545
[ 6 ] Bug #1792470 - CVE-2019-19952 ImageMagick: use-after-free in MngInfoDiscardObject
in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792470
[ 7 ] Bug #1792482 - CVE-2019-19949 ImageMagick: heap-based buffer over-read in
WritePNGImage in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792482
[ 8 ] Bug #1793178 - CVE-2019-19948 ImageMagick: heap-based buffer overflow in
WriteSGIImage in coders/sgi.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1793178
[ 9 ] Bug #1801664 - CVE-2019-16709 ImageMagick: memory leak in coders/dps.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801664
[ 10 ] Bug #1801669 - CVE-2019-16708 ImageMagick: memory leak in magick/xwindow.c
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801669
[ 11 ] Bug #1801671 - CVE-2019-16710 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801671
[ 12 ] Bug #1801678 - CVE-2019-16711 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps2.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801678
[ 13 ] Bug #1801679 - CVE-2019-16712 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps3.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801679
[ 14 ] Bug #1801683 - CVE-2019-16713 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801683
[ 15 ] Bug #1820589 - CVE-2019-18853 ImageMagick: XML_PARSE_HUGE not properly restricted
in coders/svg.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1820589
[ 16 ] Bug #1890690 - CVE-2020-27560 ImageMagick: division by zero in
OptimizeLayerFrames function in MagickCore/layer.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890690
[ 17 ] Bug #1901225 - CVE-2020-25664 ImageMagick: heap-based buffer overflow in
PopShortPixel in MagickCore/quantum-private.h [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901225
[ 18 ] Bug #1901227 - CVE-2020-25665 ImageMagick: heap-based buffer overflow in
WritePALMImage in coders/palm.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901227
[ 19 ] Bug #1901229 - CVE-2020-25666 ImageMagick: outside the range of representable
values of type int and signed integer overflow in MagickCore/histogram.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901229
--------------------------------------------------------------------------------
================================================================================
converseen-0.9.8.1-2.el8 (FEDORA-EPEL-2022-62b1a9e158)
A batch image conversion tool written in C++ with Qt5 and Magick++
--------------------------------------------------------------------------------
Update Information:
ImageMagick 6.9.12.x with a bunch security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 27 2022 S��rgio Basto <sergio(a)serjux.com> - 0.9.8.1-2
- Rebuild for ImageMagick-6.9.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767804 - CVE-2019-15141 ImageMagick: heap-based buffer overflow in
WriteTIFFImage in coders/tiff.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767804
[ 2 ] Bug #1767814 - CVE-2019-15139 ImageMagick: out-of-bounds read in ReadXWDImage in
coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767814
[ 3 ] Bug #1767830 - CVE-2019-15140 ImageMagick: use-after-free in ReadImage in
MagickCore/constitute.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767830
[ 4 ] Bug #1772645 - CVE-2017-11166 ImageMagick: memory leak vulnerability in
ReadXWDImage function in coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1772645
[ 5 ] Bug #1777545 - CVE-2014-8561 ImageMagick: convert +profile regression enters
infinite loop exhausting memory [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1777545
[ 6 ] Bug #1792470 - CVE-2019-19952 ImageMagick: use-after-free in MngInfoDiscardObject
in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792470
[ 7 ] Bug #1792482 - CVE-2019-19949 ImageMagick: heap-based buffer over-read in
WritePNGImage in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792482
[ 8 ] Bug #1793178 - CVE-2019-19948 ImageMagick: heap-based buffer overflow in
WriteSGIImage in coders/sgi.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1793178
[ 9 ] Bug #1801664 - CVE-2019-16709 ImageMagick: memory leak in coders/dps.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801664
[ 10 ] Bug #1801669 - CVE-2019-16708 ImageMagick: memory leak in magick/xwindow.c
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801669
[ 11 ] Bug #1801671 - CVE-2019-16710 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801671
[ 12 ] Bug #1801678 - CVE-2019-16711 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps2.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801678
[ 13 ] Bug #1801679 - CVE-2019-16712 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps3.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801679
[ 14 ] Bug #1801683 - CVE-2019-16713 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801683
[ 15 ] Bug #1820589 - CVE-2019-18853 ImageMagick: XML_PARSE_HUGE not properly restricted
in coders/svg.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1820589
[ 16 ] Bug #1890690 - CVE-2020-27560 ImageMagick: division by zero in
OptimizeLayerFrames function in MagickCore/layer.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890690
[ 17 ] Bug #1901225 - CVE-2020-25664 ImageMagick: heap-based buffer overflow in
PopShortPixel in MagickCore/quantum-private.h [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901225
[ 18 ] Bug #1901227 - CVE-2020-25665 ImageMagick: heap-based buffer overflow in
WritePALMImage in coders/palm.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901227
[ 19 ] Bug #1901229 - CVE-2020-25666 ImageMagick: outside the range of representable
values of type int and signed integer overflow in MagickCore/histogram.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901229
--------------------------------------------------------------------------------
================================================================================
digikam-6.4.0-5.el8 (FEDORA-EPEL-2022-62b1a9e158)
A digital camera accessing & photo management application
--------------------------------------------------------------------------------
Update Information:
ImageMagick 6.9.12.x with a bunch security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2022 S��rgio Basto <sergio(a)serjux.com> - 6.4.0-5
- Rebuild for ImageMagick-6.9.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767804 - CVE-2019-15141 ImageMagick: heap-based buffer overflow in
WriteTIFFImage in coders/tiff.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767804
[ 2 ] Bug #1767814 - CVE-2019-15139 ImageMagick: out-of-bounds read in ReadXWDImage in
coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767814
[ 3 ] Bug #1767830 - CVE-2019-15140 ImageMagick: use-after-free in ReadImage in
MagickCore/constitute.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767830
[ 4 ] Bug #1772645 - CVE-2017-11166 ImageMagick: memory leak vulnerability in
ReadXWDImage function in coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1772645
[ 5 ] Bug #1777545 - CVE-2014-8561 ImageMagick: convert +profile regression enters
infinite loop exhausting memory [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1777545
[ 6 ] Bug #1792470 - CVE-2019-19952 ImageMagick: use-after-free in MngInfoDiscardObject
in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792470
[ 7 ] Bug #1792482 - CVE-2019-19949 ImageMagick: heap-based buffer over-read in
WritePNGImage in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792482
[ 8 ] Bug #1793178 - CVE-2019-19948 ImageMagick: heap-based buffer overflow in
WriteSGIImage in coders/sgi.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1793178
[ 9 ] Bug #1801664 - CVE-2019-16709 ImageMagick: memory leak in coders/dps.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801664
[ 10 ] Bug #1801669 - CVE-2019-16708 ImageMagick: memory leak in magick/xwindow.c
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801669
[ 11 ] Bug #1801671 - CVE-2019-16710 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801671
[ 12 ] Bug #1801678 - CVE-2019-16711 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps2.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801678
[ 13 ] Bug #1801679 - CVE-2019-16712 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps3.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801679
[ 14 ] Bug #1801683 - CVE-2019-16713 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801683
[ 15 ] Bug #1820589 - CVE-2019-18853 ImageMagick: XML_PARSE_HUGE not properly restricted
in coders/svg.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1820589
[ 16 ] Bug #1890690 - CVE-2020-27560 ImageMagick: division by zero in
OptimizeLayerFrames function in MagickCore/layer.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890690
[ 17 ] Bug #1901225 - CVE-2020-25664 ImageMagick: heap-based buffer overflow in
PopShortPixel in MagickCore/quantum-private.h [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901225
[ 18 ] Bug #1901227 - CVE-2020-25665 ImageMagick: heap-based buffer overflow in
WritePALMImage in coders/palm.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901227
[ 19 ] Bug #1901229 - CVE-2020-25666 ImageMagick: outside the range of representable
values of type int and signed integer overflow in MagickCore/histogram.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901229
--------------------------------------------------------------------------------
================================================================================
dvdauthor-0.7.2-16.el8 (FEDORA-EPEL-2022-62b1a9e158)
Command line DVD authoring tool
--------------------------------------------------------------------------------
Update Information:
ImageMagick 6.9.12.x with a bunch security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 17 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.7.2-16
- Rebuild against new ImageMagick
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.2-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767804 - CVE-2019-15141 ImageMagick: heap-based buffer overflow in
WriteTIFFImage in coders/tiff.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767804
[ 2 ] Bug #1767814 - CVE-2019-15139 ImageMagick: out-of-bounds read in ReadXWDImage in
coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767814
[ 3 ] Bug #1767830 - CVE-2019-15140 ImageMagick: use-after-free in ReadImage in
MagickCore/constitute.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1767830
[ 4 ] Bug #1772645 - CVE-2017-11166 ImageMagick: memory leak vulnerability in
ReadXWDImage function in coders/xwd.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1772645
[ 5 ] Bug #1777545 - CVE-2014-8561 ImageMagick: convert +profile regression enters
infinite loop exhausting memory [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1777545
[ 6 ] Bug #1792470 - CVE-2019-19952 ImageMagick: use-after-free in MngInfoDiscardObject
in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792470
[ 7 ] Bug #1792482 - CVE-2019-19949 ImageMagick: heap-based buffer over-read in
WritePNGImage in coders/png.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792482
[ 8 ] Bug #1793178 - CVE-2019-19948 ImageMagick: heap-based buffer overflow in
WriteSGIImage in coders/sgi.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1793178
[ 9 ] Bug #1801664 - CVE-2019-16709 ImageMagick: memory leak in coders/dps.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801664
[ 10 ] Bug #1801669 - CVE-2019-16708 ImageMagick: memory leak in magick/xwindow.c
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801669
[ 11 ] Bug #1801671 - CVE-2019-16710 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801671
[ 12 ] Bug #1801678 - CVE-2019-16711 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps2.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801678
[ 13 ] Bug #1801679 - CVE-2019-16712 ImageMagick: memory leak in Huffman2DEncodeImage in
coders/ps3.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801679
[ 14 ] Bug #1801683 - CVE-2019-16713 ImageMagick: memory leak in coders/dot.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1801683
[ 15 ] Bug #1820589 - CVE-2019-18853 ImageMagick: XML_PARSE_HUGE not properly restricted
in coders/svg.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1820589
[ 16 ] Bug #1890690 - CVE-2020-27560 ImageMagick: division by zero in
OptimizeLayerFrames function in MagickCore/layer.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890690
[ 17 ] Bug #1901225 - CVE-2020-25664 ImageMagick: heap-based buffer overflow in
PopShortPixel in MagickCore/quantum-private.h [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901225
[ 18 ] Bug #1901227 - CVE-2020-25665 ImageMagick: heap-based buffer overflow in
WritePALMImage in coders/palm.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901227
[ 19 ] Bug #1901229 - CVE-2020-25666 ImageMagick: outside the range of representable
values of type int and signed integer overflow in MagickCore/histogram.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1901229
--------------------------------------------------------------------------------
================================================================================
keepassxc-2.7.1-3.el8 (FEDORA-EPEL-2022-12e1163b21)
Cross-platform password manager
--------------------------------------------------------------------------------
Update Information:
rebuild against new Qt libs. Minor changes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 29 2022 Germano Massullo <germano.massullo(a)gmail.com> - 2.7.1-3
- enabled Patch0:xcb.patch for all branches
- adds gcc-toolset-11-toolchain for el8
- replaces minizip-devel with minizip1.2-devel for el8
* Mon Apr 11 2022 Germano Massullo <germano.massullo(a)gmail.com> - 2.7.1-2
- replaces BuildRequires: minizip-compat-devel with BuildRequires: minizip-devel
--------------------------------------------------------------------------------
================================================================================
openhantek-3.3.0-rc1.1.el8 (FEDORA-EPEL-2022-09d1f9246d)
Hantek and compatible USB digital signal oscilloscope
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.0-rc1.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 30 2022 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.3.0-rc1-1
- Update to 3.3.0-rc1
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Fsdb-3.0-1.el8 (FEDORA-EPEL-2022-16c72017c9)
A set of commands for manipulating flat-text databases from the shell
--------------------------------------------------------------------------------
Update Information:
See
http://www.isi.edu/~johnh/SOFTWARE/FSDB/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 4 2022 John Heidemann <johnh(a)isi.edu> 3.0-1
- See
http://www.isi.edu/~johnh/SOFTWARE/FSDB/
--------------------------------------------------------------------------------
================================================================================
pyshp-2.3.0-1.el8 (FEDORA-EPEL-2022-236ca172d3)
Pure Python read/write support for ESRI Shapefile format
--------------------------------------------------------------------------------
Update Information:
## 2.3.0 ### New Features: - Added support for pathlib and path-like shapefile
filepaths. - Allow reading individual file extensions via filepaths. ###
Improvements: - Simplified setup and deployment - Faster shape access when
missing shx file - Switch to named logger (see
[#240](https://github.com/GeospatialPython/pyshp/issues/240)) ### Bug fixes: -
More robust handling of corrupt shapefiles (fixes
[#235](https://github.com/GeospatialPython/pyshp/issues/235)) - Fix errors when
writing to individual file-handles (fixes
[#237](https://github.com/GeospatialPython/pyshp/issues/237)) - Revert previous
decision to enforce geojson output ring orientation (detailed explanation at
https://github.com/SciTools/cartopy/issues/2012) - Fix test issues in
environments without network access
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 30 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 2.3.0-1
- Update to 2.3.0 (close RHBZ#2080591)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2080591 - pyshp-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2080591
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.38.1-1.el8 (FEDORA-EPEL-2022-00465fde79)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.38.1 ---- New upstream release: 0.38.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 29 2022 Packit <hello(a)packit.dev> - 0.38.1-1
- When using Tokman as GitHub authentication mechanism, ogr will now raise
GithubAppNotInstalledError instead of failing with generic GithubAPIException when app
providing tokens is not installed on the repository.
- Use the standard library instead of setuptools for getting the version on Python 3.8+,
or a smaller package on older Pythons.
This also fixes the packaging issue with missing `pkg_resources`.
* Thu Apr 28 2022 Packit <hello(a)packit.dev> - 0.38.0-1
- ogr now correctly raises `OgrException` when given invalid URL to
`PagureService.get_project_from_url`. (#705)
- We have fixed a bug in ogr that caused `IssueTrackerDisabled` being raised
only when trying to create an issue on git project with disabled issue
tracker. Now it is also raised when getting a specific issue or
an issue list. (#703)
--------------------------------------------------------------------------------
================================================================================
python-typing-extensions-3.7.4.3-2.el8 (FEDORA-EPEL-2022-959fbaf373)
Python Typing Extensions
--------------------------------------------------------------------------------
Update Information:
Rebuild for #2069579
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 30 2022 Jonny Heggheim <hegjon(a)gmail.com> - 3.7.4.3-2
- Rebuild for #2069579
* Sun Aug 23 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 3.7.4.3-1
- Update to latest upstream release 3.7.4.3 (rhbz#1871451)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069579 - Please update to at least 3.7.4.3
https://bugzilla.redhat.com/show_bug.cgi?id=2069579
--------------------------------------------------------------------------------