[SECURITY] Fedora EPEL 8 Update: pngcheck-2.4.0-5.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-c82583d07e
2020-12-30 00:31:56.375701
--------------------------------------------------------------------------------
Name : pngcheck
Product : Fedora EPEL 8
Version : 2.4.0
Release : 5.el8
URL : http://www.libpng.org/pub/png/apps/pngcheck.html
Summary : Verifies the integrity of PNG, JNG and MNG files
Description :
pngcheck verifies the integrity of PNG, JNG and MNG files (by checking the
internal 32-bit CRCs [checksums] and decompressing the image data); it can
optionally dump almost all of the chunk-level information in the image in
human-readable form. For example, it can be used to print the basic statistics
about an image (dimensions, bit depth, etc.); to list the color and
transparency info in its palette (assuming it has one); or to extract the
embedded text annotations. This is a command-line program with batch
capabilities.
The current release supports all PNG, MNG and JNG chunks, including the newly
approved sTER stereo-layout chunk. It correctly reports errors in all but two
of the images in Chris Nokleberg's brokensuite-20061204.
--------------------------------------------------------------------------------
Update Information:
Previous fix for buffer overrun printing the contents of the sPLT chunk in
certain malformed inputs (RHBZ#1905775) was incomplete; it should be properly
fixed now. ---- Security fix for multiple buffer overflows from crafted file
input (RHBZ#1902786,1902806,1902810: no CVE yet assigned), and for buffer
overrun printing the contents of the sPLT chunk in certain malformed inputs
(RHBZ#1905775: no tracking bug or CVE yet assigned) ---- Fix null pointer
dereference in pngcheck when -f is given and the sCAL chunk
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 14 2020 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.4.0-5
- Previous fix for buffer overrun printing the contents of the sPLT chunk in
certain malformed inputs (RHBZ#1905775) was incomplete; it should be properly
fixed now.
* Sun Dec 13 2020 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.4.0-4
- Bounds-check all accesses into enumerated-value name arrays; a malformed file
could have caused a buffer overrun in several of these cases. (RHBZ#1902810)
- Fix buffer overrun when print_buffer() is passed a nonpositive size, which
can occur in practice for certain malformed inputs. (RHBZ#1902810)
- In some cases, the chunk length from the file data (sz) is used to index into
the read buffer without sufficient bounds-checking, leading to a buffer
overrun. Fix this for PPLT, hIST, sCAL, FRAM, SAVE, nEED, PAST, DISC, DROP,
DBYK, ORDR, and SEEK chunks. (RHBZ#1902810)
- Fix buffer overrun printing the contents of the sPLT chunk in certain
malformed inputs. (RHBZ#1905775)
- Backport fix for off-by-one bug in check_magic() from 3.0.0
- Backport fix for zlib version warnings going to stdout from 3.0.0
- Use name macro when referencing patches.
- Add BR on make in anticipation of
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot.
- New upstream version 2.4.0
- Added new license file for main package (same MIT-style license)
- Drop format-security patch, now upstreamed
- Use upstreamed man pages; no need to generate with help2man anymore
- Add rpmlintrc rules for -extras subpackage
- Add rpmlintrc file to suppress spurious rpmlint warnings
* Mon Nov 30 2020 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.3.0-5
- Fix null pointer dereference in pngcheck when -f is given and the sCAL chunk
is missing the pixel height.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1902806 - pngcheck: Multiple buffer overflows from crafted file input
https://bugzilla.redhat.com/show_bug.cgi?id=1902806
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pngcheck' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 8 Update: argparse-manpage-1.5-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-ba752a2424
2020-12-30 00:31:56.375623
--------------------------------------------------------------------------------
Name : argparse-manpage
Product : Fedora EPEL 8
Version : 1.5
Release : 1.el8
URL : https://github.com/praiskup/argparse-manpage
Summary : Build manual page from Python ArgumentParser object
Description :
Generate manual page an automatic way from ArgumentParser object, so the
manpage 1:1 corresponds to the automatically generated --help output. The
manpage generator needs to known the location of the object, user can
specify that by (a) the module name or corresponding python filename and
(b) the object name or the function name which returns the object.
There is a limited support for (deprecated) optparse objects, too.
--------------------------------------------------------------------------------
Update Information:
epilog is dumped to COMMENTS sections
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 14 2020 Pavel Raiskup <praiskup(a)redhat.com> - 1.5-1
- new release
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.4-3
- Rebuilt for Python 3.9
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update argparse-manpage' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 7 Update: dislocker-0.7.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-412a78f451
2020-12-29 01:15:05.496570
--------------------------------------------------------------------------------
Name : dislocker
Product : Fedora EPEL 7
Version : 0.7.3
Release : 1.el7
URL : https://github.com/Aorimn/dislocker
Summary : Utility to access BitLocker encrypted volumes
Description :
Dislocker has been designed to read BitLocker encrypted partitions ("drives")
under a Linux system. The driver has the capability to read/write partitions
encrypted using Microsoft Windows Vista, 7, 8, 8.1 and 10 (AES-CBC, AES-XTS,
128 or 256 bits, with or without the Elephant diffuser, encrypted partitions);
BitLocker-To-Go encrypted partitions (USB/FAT32 partitions).
The file name where the BitLocker encrypted partition will be decrypted needs
to be given. This may take a long time, depending on the size of the encrypted
partition. But afterward, once the partition is decrypted, the access to the
NTFS partition will be faster than with FUSE. Another thing to think about is
the size of the disk (same size as the volume that is tried to be decrypted).
Nevertheless, once the partition is decrypted, the file can be mounted as any
NTFS partition and won't have any link to the original BitLocker partition.
--------------------------------------------------------------------------------
Update Information:
dislocker 0.7.3 =============== This version is only used to update dislocker's
brew file and the BitBake recipe for OSX's and BitBake's users to be able to
download v0.7.2. If you're not an OSX nor a BitBake user, you can use either
v0.7.2 or v0.7.3, this won't make any difference. dislocker 0.7.2
=============== Bugfixes -------- * Fix compilation on OSX when ruby
dependency is installed Feature improvement ------------------- * Reported
NTFS volume size is more accurate * Add ability to decrypt from a VMK file *
Add ability to read the user password from the environment variable
`DISLOCKER_PASSWORD` * Add ability to read the user password from pipes *
Decryption/encryption speed has been improved by disabling faulty threading
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Robert Scheck <robert(a)fedoraproject.org> 0.7.3-1
- Spec file cleanup
- Upgrade to 0.7.3 (#1876804, thanks to Eshin Kunishima)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1876804 - Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1876804
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dislocker' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 8 Update: lyx-2.3.6-2.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-25a8bc9338
2020-12-29 00:28:58.363249
--------------------------------------------------------------------------------
Name : lyx
Product : Fedora EPEL 8
Version : 2.3.6
Release : 2.el8
URL : https://www.lyx.org/
Summary : WYSIWYM (What You See Is What You Mean) document processor
Description :
LyX is a modern approach to writing documents which breaks with the
obsolete "typewriter paradigm" of most other document preparation
systems.
It is designed for people who want professional quality output
with a minimum of time and effort, without becoming specialists in
typesetting.
The major innovation in LyX is WYSIWYM (What You See Is What You Mean).
That is, the author focuses on content, not on the details of formatting.
This allows for greater productivity, and leaves the final typesetting
to the backends (like LaTeX) that are specifically designed for the task.
With LyX, the author can concentrate on the contents of his writing,
and let the computer take care of the rest.
--------------------------------------------------------------------------------
Update Information:
First release of LyX on EPEL-8. This is the latest stable release.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1753685 - build of lyx for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1753685
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lyx' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 8 Update: dislocker-0.7.3-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-d4a923e4c4
2020-12-29 00:28:58.363238
--------------------------------------------------------------------------------
Name : dislocker
Product : Fedora EPEL 8
Version : 0.7.3
Release : 1.el8
URL : https://github.com/Aorimn/dislocker
Summary : Utility to access BitLocker encrypted volumes
Description :
Dislocker has been designed to read BitLocker encrypted partitions ("drives")
under a Linux system. The driver has the capability to read/write partitions
encrypted using Microsoft Windows Vista, 7, 8, 8.1 and 10 (AES-CBC, AES-XTS,
128 or 256 bits, with or without the Elephant diffuser, encrypted partitions);
BitLocker-To-Go encrypted partitions (USB/FAT32 partitions).
The file name where the BitLocker encrypted partition will be decrypted needs
to be given. This may take a long time, depending on the size of the encrypted
partition. But afterward, once the partition is decrypted, the access to the
NTFS partition will be faster than with FUSE. Another thing to think about is
the size of the disk (same size as the volume that is tried to be decrypted).
Nevertheless, once the partition is decrypted, the file can be mounted as any
NTFS partition and won't have any link to the original BitLocker partition.
--------------------------------------------------------------------------------
Update Information:
dislocker 0.7.3 =============== This version is only used to update dislocker's
brew file and the BitBake recipe for OSX's and BitBake's users to be able to
download v0.7.2. If you're not an OSX nor a BitBake user, you can use either
v0.7.2 or v0.7.3, this won't make any difference. dislocker 0.7.2
=============== Bugfixes -------- * Fix compilation on OSX when ruby
dependency is installed Feature improvement ------------------- * Reported
NTFS volume size is more accurate * Add ability to decrypt from a VMK file *
Add ability to read the user password from the environment variable
`DISLOCKER_PASSWORD` * Add ability to read the user password from pipes *
Decryption/encryption speed has been improved by disabling faulty threading
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Robert Scheck <robert(a)fedoraproject.org> 0.7.3-1
- Spec file cleanup
- Upgrade to 0.7.3 (#1876804, thanks to Eshin Kunishima)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1876804 - Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1876804
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dislocker' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 8 Update: python-prometheus_client-0.9.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-c733213733
2020-12-29 00:28:58.363224
--------------------------------------------------------------------------------
Name : python-prometheus_client
Product : Fedora EPEL 8
Version : 0.9.0
Release : 1.el8
URL : https://github.com/prometheus/client_python
Summary : Python client for Prometheus
Description :
Python client for Prometheus.
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 12 2020 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 0.9.0-1
- Update to 0.9.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-prometheus_client' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 8 Update: python-rq-1.7.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-b2ad71fc30
2020-12-29 00:28:58.363148
--------------------------------------------------------------------------------
Name : python-rq
Product : Fedora EPEL 8
Version : 1.7.0
Release : 1.el8
URL : https://github.com/rq/rq
Summary : Simple, lightweight, library for creating background jobs, and processing them
Description :
RQ (Redis Queue) is a simple Python library for queueing jobs
and processing them in the background with workers.
It is backed by Redis and it is designed to have a low barrier to entry.
It should be integrated in your web stack easily.
--------------------------------------------------------------------------------
Update Information:
Update python-redis to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 12 2020 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 1.7.0-1
- Update to 1.7.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-rq' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 8 Update: python-redis-3.5.3-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-b2ad71fc30
2020-12-29 00:28:58.363148
--------------------------------------------------------------------------------
Name : python-redis
Product : Fedora EPEL 8
Version : 3.5.3
Release : 1.el8
URL : https://github.com/andymccurdy/redis-py
Summary : Python interface to the Redis key-value store
Description :
This is a Python interface to the Redis key-value store.
--------------------------------------------------------------------------------
Update Information:
Update python-redis to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 15 2020 Joel Capitao <jcapitao(a)redhat.com> - 3.5.3-1
- Update to 3.5.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-redis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 7 Update: radeontop-1.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-8fd239861a
2020-12-28 01:44:42.376013
--------------------------------------------------------------------------------
Name : radeontop
Product : Fedora EPEL 7
Version : 1.3
Release : 1.el7
URL : https://github.com/clbr/radeontop
Summary : View GPU utilization of AMD/ATI Radeon devices
Description :
RadeonTop shows the utilization of your GPU, both in general and by blocks.
Supported cards are R600 and up.
--------------------------------------------------------------------------------
Update Information:
New release for new pci ids and amdgpu driver capabilities.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 10 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 1.3-1
- Update to 1.3 (#1906240)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1906240 - radeontop-1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1906240
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update radeontop' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months
Fedora EPEL 7 Update: xalan-c-1.11.0-21.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-0ac365df43
2020-12-28 01:44:42.376001
--------------------------------------------------------------------------------
Name : xalan-c
Product : Fedora EPEL 7
Version : 1.11.0
Release : 21.el7
URL : https://xalan.apache.org/xalan-c/
Summary : Xalan XSLT processor for C/C++
Description :
The Apache Xalan-C++ Project provides a library and a command line program to
transform XML documents using a stylesheet that conforms to XSLT 1.0 standards.
Xalan is a project of the Apache Software Foundation.
--------------------------------------------------------------------------------
Update Information:
Fixes for API documentation build ---- Build API documentation with Doxygen;
update package summaries and descriptions from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 10 2020 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.11.0-21
- Fixes for API documentation build
- Ensure we compile with additional hardening flags even on EPEL
* Wed Dec 9 2020 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.11.0-20
- Build API documentation with Doxygen
- Update summaries and descriptions from upstream
- Enable at least the XPath tests
- Drop unused old tarball and patches from source RPM
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-19
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xalan-c' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 2 months