--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-1fd88e4372
2019-04-30 00:41:49.999479
--------------------------------------------------------------------------------
Name : python-catkin_lint
Product : Fedora EPEL 7
Version : 1.6.0
Release : 1.el7
URL : https://pypi.python.org/pypi/catkin_lint
Summary : Check catkin packages for common errors
Description :
catkin_lint checks package configurations for the catkin build system of ROS.
It runs a static analysis of the package.xml and CMakeLists.txt files in your
package, and it will detect and report a number of common problems.
--------------------------------------------------------------------------------
Update Information:
Introduction of EPEL 7 package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-catkin_lint' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-6ea040e59b
2019-04-30 00:41:49.999469
--------------------------------------------------------------------------------
Name : hostapd
Product : Fedora EPEL 7
Version : 2.7
Release : 1.el7
URL : http://w1.fi/hostapd
Summary : IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
Description :
hostapd is a user space daemon for access point and authentication servers. It
implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP
Authenticators and RADIUS authentication server.
hostapd is designed to be a "daemon" program that runs in the back-ground and
acts as the backend component controlling authentication. hostapd supports
separate frontend programs and an example text-based frontend, hostapd_cli, is
included with hostapd.
--------------------------------------------------------------------------------
Update Information:
Update to version 2.7 from upstream Security fix for CVE-2019-9494 (cache attack
against SAE) Security fix for CVE-2019-9495 (cache attack against EAP-pwd)
Security fix for CVE-2019-9496 (SAE confirm missing state validation in
hostapd/AP) Security fix for CVE-2019-9497 (EAP-pwd server not checking for
reflection attack) Security fix for CVE-2019-9498 (EAP-pwd server missing commit
validation for scalar/element) Security fix for CVE-2019-9499 (EAP-pwd peer
missing commit validation for scalar/element)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699141 - CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake
https://bugzilla.redhat.com/show_bug.cgi?id=1699141
[ 2 ] Bug #1699149 - CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack
https://bugzilla.redhat.com/show_bug.cgi?id=1699149
[ 3 ] Bug #1699153 - CVE-2019-9496 hostapd: SAE confirm missing state validation in hostapd/AP
https://bugzilla.redhat.com/show_bug.cgi?id=1699153
[ 4 ] Bug #1699164 - CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1699164
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update hostapd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-e3789f6015
2019-04-30 00:41:49.999459
--------------------------------------------------------------------------------
Name : rust
Product : Fedora EPEL 7
Version : 1.34.0
Release : 1.el7
URL : https://www.rust-lang.org
Summary : The Rust Programming Language
Description :
Rust is a systems programming language that runs blazingly fast, prevents
segfaults, and guarantees thread safety.
This package includes the Rust compiler and documentation generator.
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.34.0: - Alternative `cargo` registries - `?` in documentation
tests - Custom attributes accept arbitrary token streams - `TryFrom` and
`TryInto` - `fn before_exec` deprecated in favor of `unsafe fn pre_exec` -
Library stabilizations See the [blog post](https://blog.rust-
lang.org/2019/04/11/Rust-1.34.0.html) and [release
notes](https://github.com/rust-
lang/rust/blob/master/RELEASES.md#version-1340-2019-04-11) for more details.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-78ab94c0f4
2019-04-30 00:41:49.999449
--------------------------------------------------------------------------------
Name : python-requests-gssapi
Product : Fedora EPEL 7
Version : 1.0.1
Release : 1.el7
URL : https://github.com/pythongssapi/requests-gssapi
Summary : A GSSAPI/SPNEGO authentication handler for python-requests
Description :
Requests is an HTTP library, written in Python, for human beings. This
library adds optional GSSAPI authentication support and supports
mutual authentication. It includes a fully backward-compatible shim
for requests-kerberos.
--------------------------------------------------------------------------------
Update Information:
New upstream version (1.0.1)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-requests-gssapi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-3b7ba5d3ed
2019-04-30 00:41:49.999438
--------------------------------------------------------------------------------
Name : rdopkg
Product : Fedora EPEL 7
Version : 0.51.1
Release : 1.el7
URL : https://github.com/softwarefactory-project/rdopkg/
Summary : RPM packaging automation tool CLI
Description :
rdopkg is a tool for automating RPM packaging tasks such as managing patches,
updating to a new version and much more.
Although it contains several RDO-specific actions, most of rdopkg
functionality can be used for any RPM package following conventions
described in the rdopkg manual.
This package contains rdopkg executable, man pages and docs.
--------------------------------------------------------------------------------
Update Information:
- Update to 0.51.1 - Change requirement: bunch -> munch (available for both py2
and py3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695604 - rdopkg mockbuild breaks to due missing bunch import in py3
https://bugzilla.redhat.com/show_bug.cgi?id=1695604
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rdopkg' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-ea6b843f74
2019-04-30 00:41:49.999428
--------------------------------------------------------------------------------
Name : distribution-gpg-keys
Product : Fedora EPEL 7
Version : 1.30
Release : 1.el7
URL : https://github.com/xsuchy/distribution-gpg-keys
Summary : GPG keys of various Linux distributions
Description :
GPG keys used by various Linux distributions to sign packages.
--------------------------------------------------------------------------------
Update Information:
- Deleted old Copr keys and added new Copr keys - add brave key - Add remi 2019
key
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update distribution-gpg-keys' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-4780c5a01a
2019-04-30 00:41:49.999418
--------------------------------------------------------------------------------
Name : kronosnet
Product : Fedora EPEL 7
Version : 1.8
Release : 1.el7
URL : http://www.kronosnet.org
Summary : Multipoint-to-Multipoint VPN daemon
Description :
The kronosnet source
--------------------------------------------------------------------------------
Update Information:
Updated to upstream release v1.8. ---- Updated to upstream release v1.5. ----
Updated to upstream release v1.4. ---- First commit of the new kronosnet
package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507103 - Review Request: kronosnet - Multipoint-to-Multipoint network abstraction layer for High Availability applications
https://bugzilla.redhat.com/show_bug.cgi?id=1507103
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update kronosnet' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-7b88d5789a
2019-04-30 00:41:49.999408
--------------------------------------------------------------------------------
Name : texlive-extension
Product : Fedora EPEL 7
Version : 2012
Release : 56.el7
URL : http://tug.org/texlive/
Summary : TeX formatting system
Description :
texlive-extension includes many texlive extension which are dropped in RHEL
--------------------------------------------------------------------------------
Update Information:
added makecell.sty
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update texlive-extension' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-317c9a2f81
2019-04-30 00:41:49.999396
--------------------------------------------------------------------------------
Name : drupal7
Product : Fedora EPEL 7
Version : 7.65
Release : 1.el7
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/drupal/releases/7.65 -
https://www.drupal.org/SA-CORE-2019-004
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693078 - CVE-2019-6341 drupal7: cross-site scripting vulnerability in module/subsystem
https://bugzilla.redhat.com/show_bug.cgi?id=1693078
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-9c2c40e3df
2019-04-30 00:41:49.999350
--------------------------------------------------------------------------------
Name : guacamole-server
Product : Fedora EPEL 7
Version : 1.0.0
Release : 1.el7
URL : http://guac-dev.org/
Summary : Server-side native components that form the Guacamole proxy
Description :
Guacamole is an HTML5 remote desktop gateway.
Guacamole provides access to desktop environments using remote desktop protocols
like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing
access to multiple desktops through a web browser.
No browser plugins are needed, and no client software needs to be installed. The
client requires nothing more than a web browser supporting HTML5 and AJAX.
The main web application is provided by the "guacamole-client" package.
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.0, which includes fixes for CVE-2018-1340
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669122 - CVE-2018-1340 guacamole-server: guacamole: Secure flag missing from Apache Guacamole session cookie [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1669122
[ 2 ] Bug #1668502 - Please update Apache Guacamole to version 1.0
https://bugzilla.redhat.com/show_bug.cgi?id=1668502
[ 3 ] Bug #1669121 - CVE-2018-1340 guacamole-server: guacamole: Secure flag missing from Apache Guacamole session cookie [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1669121
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update guacamole-server' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------