[SECURITY] Fedora EPEL 7 Update: python-pygit2-0.26.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-5ae7f0e7c7
2018-05-17 12:42:44.314094
--------------------------------------------------------------------------------
Name : python-pygit2
Product : Fedora EPEL 7
Version : 0.26.4
Release : 1.el7
URL : http://www.pygit2.org
Summary : Python bindings for libgit2
Description :
pygit2 is a set of Python bindings to the libgit2 library, which implements
the core of Git.
--------------------------------------------------------------------------------
Update Information:
Update to libgit2 0.26.3, fixing CVE-2018-8099 CVE-2018-8098. Update to python-
pygit2 0.26.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469187 - 0013533: pygit2/libgit2 incorrect results while diff'ing 2 commits
https://bugzilla.redhat.com/show_bug.cgi?id=1469187
[ 2 ] Bug #1554367 - CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1554367
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pygit2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: mock-core-configs-28.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-949d4b69db
2018-05-17 12:42:44.314122
--------------------------------------------------------------------------------
Name : mock-core-configs
Product : Fedora EPEL 7
Version : 28.4
Release : 1.el7
URL : https://github.com/rpm-software-management/mock/
Summary : Mock core config files basic chroots
Description :
Config files which allow you to create chroots for:
* Fedora
* Epel
* Mageia
* Custom chroot
--------------------------------------------------------------------------------
Update Information:
- Add initial openSUSE distribution targets - provide fedora-29 configs as
symlinks to fedora-rawhide - use correct url for local repos for s390x for F27+
[RHBZ#1553678] - add CentOS SCL repositories to EPEL 7 (aarch64 & ppc64le)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553678 - mock: Incorrect local repository for fedora-rawhide-s390x
https://bugzilla.redhat.com/show_bug.cgi?id=1553678
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mock-core-configs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
[SECURITY] Fedora EPEL 7 Update: libgit2-0.26.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-5ae7f0e7c7
2018-05-17 12:42:44.314094
--------------------------------------------------------------------------------
Name : libgit2
Product : Fedora EPEL 7
Version : 0.26.3
Release : 1.el7
URL : http://libgit2.github.com/
Summary : C implementation of the Git core methods as a library with a solid API
Description :
libgit2 is a portable, pure C implementation of the Git core methods
provided as a re-entrant linkable library with a solid API, allowing
you to write native speed custom Git applications in any language
with bindings.
--------------------------------------------------------------------------------
Update Information:
Update to libgit2 0.26.3, fixing CVE-2018-8099 CVE-2018-8098. Update to python-
pygit2 0.26.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469187 - 0013533: pygit2/libgit2 incorrect results while diff'ing 2 commits
https://bugzilla.redhat.com/show_bug.cgi?id=1469187
[ 2 ] Bug #1554367 - CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1554367
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libgit2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: python-grokmirror-1.1.0-1.1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-ccff0f95fc
2018-05-17 12:42:44.314004
--------------------------------------------------------------------------------
Name : python-grokmirror
Product : Fedora EPEL 7
Version : 1.1.0
Release : 1.1.el7
URL : https://git.kernel.org/pub/scm/utils/grokmirror/grokmirror.git
Summary : Framework to smartly mirror git repositories
Description :
Grokmirror was written to make mirroring large git repository
collections more efficient. Grokmirror uses the manifest file published
by the master mirror in order to figure out which repositories to
clone, and to track which repositories require updating. The process is
extremely lightweight and efficient both for the master and for the
mirrors.
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.1.0 that fixes interactions with newer git and
introduces minor feature improvements. ---- Update to 1.1.0 which fixes a
number of bugs and introduces minor new feature updates.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-grokmirror' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: nut-2.7.2-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-da491b2cc8
2018-05-16 13:47:41.160772
--------------------------------------------------------------------------------
Name : nut
Product : Fedora EPEL 7
Version : 2.7.2
Release : 4.el7
URL : http://www.networkupstools.org/
Summary : Network UPS Tools
Description :
These programs are part of a developing project to monitor the assortment
of UPSes that are found out there in the field. Many models have serial
ports of some kind that allow some form of state checking. This
capability has been harnessed where possible to allow for safe shutdowns,
live status tracking on web pages, and more.
--------------------------------------------------------------------------------
Update Information:
rebuilt as freeimpi dependency has changed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1570146 - nut dependency on libfreeipmi.so.13 prevents update to RHEL 7.5
https://bugzilla.redhat.com/show_bug.cgi?id=1570146
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nut' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
[SECURITY] Fedora EPEL 7 Update: quassel-0.12.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-996cb2153b
2018-05-16 13:47:41.160750
--------------------------------------------------------------------------------
Name : quassel
Product : Fedora EPEL 7
Version : 0.12.5
Release : 1.el7
URL : http://quassel-irc.org/
Summary : A modern distributed IRC system
Description :
Quassel IRC is a modern, distributed IRC client,
meaning that one (or multiple) client(s) can attach
to and detach from a central core --
much like the popular combination of screen and a
text-based IRC client such as WeeChat, but graphical
--------------------------------------------------------------------------------
Update Information:
Security update to 0.12.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1573320 - quassel: multiple vulnerabilities fixed in 0.12.5 [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1573320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update quassel' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: scapy-2.4.0-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-464dc8924c
2018-05-16 13:47:41.160729
--------------------------------------------------------------------------------
Name : scapy
Product : Fedora EPEL 7
Version : 2.4.0
Release : 2.el7
URL : http://www.secdev.org/projects/scapy/
Summary : Interactive packet manipulation tool and network scanner
Description :
Scapy is a powerful interactive packet manipulation program built on top
of the Python interpreter. It can be used to forge or decode packets of
a wide number of protocols, send them over the wire, capture them, match
requests and replies, and much more.
--------------------------------------------------------------------------------
Update Information:
Update to bugfix reease.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update scapy' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: grip-3.7.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-ef39af46e5
2018-05-16 13:47:41.160708
--------------------------------------------------------------------------------
Name : grip
Product : Fedora EPEL 7
Version : 3.7.1
Release : 1.el7
URL : https://sourceforge.net/projects/grip/
Summary : Front-end for CD rippers and Ogg Vorbis encoders
Description :
Grip is a GTK+ based front-end for CD rippers (such as cdparanoia and
cdda2wav) and Ogg Vorbis encoders. Grip allows you to rip entire tracks or
just a section of a track. Grip supports the CDDB protocol for
accessing track information on disc database servers.
--------------------------------------------------------------------------------
Update Information:
Updated to 3.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558285 - grip-3.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1558285
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update grip' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: utf8proc-1.3.1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-c812f02dc5
2018-05-16 13:47:41.160686
--------------------------------------------------------------------------------
Name : utf8proc
Product : Fedora EPEL 7
Version : 1.3.1
Release : 2.el7
URL : http://julialang.org/utf8proc/
Summary : Library for processing UTF-8 encoded Unicode strings
Description :
utf8proc is a library for processing UTF-8 encoded Unicode strings.
Some features are Unicode normalization, stripping of default ignorable
characters, case folding and detection of grapheme cluster boundaries.
A special character mapping is available, which converts for example
the characters ���Hyphen��� (U+2010), ���Minus��� (U+2212) and ���Hyphen-Minus
(U+002D, ASCII Minus) all into the ASCII minus sign, to make them
equal for comparisons.
The currently supported Unicode version is 5.0.0.
This package only contains the C library.
--------------------------------------------------------------------------------
Update Information:
Fix missing build flags (RHBZ #1573115).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1573115 - utf8proc: Partial build flags injection
https://bugzilla.redhat.com/show_bug.cgi?id=1573115
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update utf8proc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: librdkafka-0.11.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-73f51569a4
2018-05-16 13:47:41.160662
--------------------------------------------------------------------------------
Name : librdkafka
Product : Fedora EPEL 7
Version : 0.11.4
Release : 1.el7
URL : https://github.com/edenhill/librdkafka
Summary : The Apache Kafka C library
Description :
Librdkafka is a C/C++ library implementation of the Apache Kafka protocol,
containing both Producer and Consumer support.
It was designed with message delivery reliability and high performance in mind,
current figures exceed 800000 messages/second for the producer and 3 million
messages/second for the consumer.
--------------------------------------------------------------------------------
Update Information:
Maintenance release Default changes socket.max.fails changed to 1 to
provide same functionality (fail request immediately on error) now when retries
are working properly again. fetch.max.bytes (new config property) is
automatically adjusted to be >= message.max.bytes, and receive.message.max.bytes
is automatically adjusted to be > fetch.max.bytes. (#1616) New features
Message Headers support (with help from @johnistan) Java-compatible Murmur2
partitioners (#1468, @barrotsteindev) Add PKCS#12 Keystore support -
ssl.keystore.location (#1494, @AMHIT) Noteworthy fixes Formalise and fix
Producer retries and retry-ordering (#623, #1092, #1432, #1476, #1421)
Ordering is now retained despite retries if max.in.flight=1. Behaviour
is now documented Fix timeouts for retried requests and properly handle
retries for all request types (#1497) Add and use fetch.max.bytes to limit
total Fetch response size (KIP-74, #1616). Fixes "Invalid response size" issues.
Enhancements Added sasl.mechanism and compression.type configuration
property aliases for conformance with Java client. Improved Producer
performance C++: add c_ptr() to Handle,Topic,Message classes to expose
underlying librdkafka object Honour per-message partition in produce_batch()
if MSG_F_PARTITION set (@barrotsteindev, closes #1604) Added
on_request_sent() interceptor Added experimental flexible producer
queuing.strategy=fifo|lifo Broker address DNS record round-robin: try to
maintain round-robin position across resolve calls. Set system thread name
for internal librdkafka threads (@tbsaunde) Added more concise and user-
friendly 'consumer' debug context Add partitioner (string) topic
configuration property to set the builtin partitioners Generate rdkafka-
static.pc (pkg-config) for static linking Fixes Fix producer memory leak
on <0.11 brokers when compressed messageset is below copy threshold (closes
#1534) CRC32C - fix unaligned access on ARM (@Soundman32) Fix read after
free in buf_write_seek Fix broker wake up (#1667, @gduranceau) Fix
consumer hang when rebalancing during commit (closes #1605, @ChenyuanHu)
CMake fixes for Windows (@raulbocanegra) LeaveGroup was not sent on close
when doing final offset commits Fix for consumer slowdown/stall on compacted
topics where actual last offset < MsgSet.LastOffset (KAFKA-5443) Fix
global->topic conf fallthru in C++ API Fix infinite loop on LeaveGroup
failure Fix possible crash on OffsetFetch retry Incorporate compressed
message count when deciding on fetch backoff (#1623) Fix debug-only crash on
Solaris (%s NULL) (closes #1423) Drain broker ops queue on termination to
avoid hang (closes #1596) cmake: Allow build static library (#1602,
@proller) Don't store invalid offset as next one when pausing (#1453,
@mfontanini) use #if instead of #ifdef / defined() for atomics (#1592,
@vavrusa) fixed .lib paths in nuget packaging (#1587) Fixes strerror_r
crash on alpine (#1580, @skarlsson) Allow arbitrary lengthed (>255) SASL
PLAIN user/pass (#1691, #1692) Trigger ApiVersionRequest on reconnect if
broker.version.fallback supports it (closes #1694) Read Fetch MsgAttributes
as int8 (discovered by @tvoinarovskyi, closes #1689) Portability: stop using
typeof in rdkafka_transport.c (#1708, @tbsaunde) Portability: replace use of
#pragma once with header guards (#1688, @tbsaunde) mklove: add LIBS in
reverse order to maintain dependency order Fix build when python is not
available #1358 source: https://github.com/edenhill/librdkafka/releases
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539222 - librdkafka-v0.11.4-adminapi-post1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1539222
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update librdkafka' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years