The following Fedora EPEL 6 Security updates need testing:
Age URL
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2dbce134fd
singularity-3.6.4-1.el6
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b21ed088ad
tcpreplay-4.3.3-3.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
bitlbee-facebook-1.2.1-1.el6
lout-3.40-18.el6
nwchem-7.0.2-1.el6
Details about builds:
================================================================================
bitlbee-facebook-1.2.1-1.el6 (FEDORA-EPEL-2020-7c5e8ae1fa)
Facebook protocol plugin for BitlBee
--------------------------------------------------------------------------------
Update Information:
bitlbee-facebook 1.2.1 ====================== * Fix "Parse error: unexpected
identifier 'taNewMessage'" * Fix "Failed to read thrift:
facebook-api.c:1929
fb_api_cb_publish_pt: assertion 'fb_thrift_read_stop(thft)' failed"
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 22 2020 Robert Scheck <robert(a)fedoraproject.org> 1.2.1-1
- Upgrade to 1.2.1 (#1889850)
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889850 - bitlbee-facebook-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889850
--------------------------------------------------------------------------------
================================================================================
lout-3.40-18.el6 (FEDORA-EPEL-2020-ca0361c919)
A document formatting system
--------------------------------------------------------------------------------
Update Information:
Add lout-3.40-cve.patch from
https://lists.nongnu.org/archive/html/lout-
users/2020-10/msg00013.html fixing rhbz#1787383 and rhbz#1787386
(CVE-2019-19918 and CVE-2019-19917), two buffer overflows.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 23 2020 Mat��j Cepl <mcepl(a)cepl.eu> - 3.40-18
- Add lout-3.40-cve.patch from
https://lists.nongnu.org/archive/html/lout-users/2020-10/msg00013.html
fixing rhbz#1787383 and rhbz#1787386 (CVE-2019-19918 and
CVE-2019-19917), two buffer overflows.
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-12
- Fix rpmlint issues.
* Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-11
- Add BuildRequires gcc per new PG.
- Fix FSF addresses (actually, remove them as the upstream does).
* Thu Feb 8 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-10
- Remove Group, it has been unnecessary since RHEL-6.
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1787384 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1787384
[ 2 ] Bug #1787385 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1787385
[ 3 ] Bug #1787386 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1787386
[ 4 ] Bug #1787389 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1787389
[ 5 ] Bug #1787390 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1787390
[ 6 ] Bug #1787391 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1787391
--------------------------------------------------------------------------------
================================================================================
nwchem-7.0.2-1.el6 (FEDORA-EPEL-2020-3c3317262f)
Delivering High-Performance Computational Chemistry to Science
--------------------------------------------------------------------------------
Update Information:
Set OMP_NUM_THREADS=1
https://github.com/edoapra/fedpkg/issues/10#issuecomment-699276160
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 19 2020 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 7.0.2-2
- Set OMP_NUM_THREADS=1
https://github.com/edoapra/fedpkg/issues/10#issuecomment-699276160
- Fix hostname br for el6
* Thu Oct 15 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.2-1
- new 7.0.2 release
* Fri Aug 28 2020 I��aki ��car <iucar(a)fedoraproject.org> - 7.0.0-11
-
https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 7.0.0-9
- Rebuilt for Python 3.9
* Thu Apr 2 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 7.0.0-8
- Fix string quoting for rpm >= 4.16
* Sat Mar 28 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.0-7
- nproc=1 for mpich/ppc64le
* Sun Mar 22 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.0-6
- fix to get rid of HYDRA_DEBUG on mpich
- drop rhel6 support
* Wed Mar 18 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.0-5
- switch to ga 5.7-2.3
- enabled arm, aarch64 and ppc64le architectures
- removed libibverbs-devel, ncurses-devel, zlib-devel and readline-devel
- perl-File-Basename rpm needed on fedora 33
- 32bit build needed for arm
- added patch to fix solvation failures on ppc64le
* Fri Mar 6 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.0-4
- work-around for openmpi 4.0.1 segfault
- skip tests for rhel6 mpich
- fix for pspw when peigs is not available and scalapack is
- fix for mcscf when peigs is not available and scalapack is
- Using tarball from 7.0.0 official release
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Jan 21 2020 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 7.0.0-2
- new upstream snapshot release
* Fri Oct 4 2019 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 7.0.0-1
- new upstream snapshot release
* Fri Aug 30 2019 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 6.8.2-1
- new upstream snapshot release
- switch to python3 br on fedora >= 30 bug #1738065
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.8.1-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Jun 3 2019 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 6.8.1-10
- removal of tcsh br requires a patch
https://github.com/nwchemgit/nwchem/issues/120
* Mon Jun 3 2019 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 6.8.1-9
- remove br tcsh since it's orphaned in Fedora 30
* Fri May 17 2019 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 6.8.1-8
- explicit mpi related requires on epel7/epel6
* Thu Feb 14 2019 Orion Poplawski <orion(a)nwra.com> - 6.8.1-7
- Rebuild for openmpi 3.1.3
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.8.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sun Jul 15 2018 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 6.8.1-6
- protect yourself from Fedora changing rpm macros: no python_version available in f29
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.8.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------