[SECURITY] Fedora EPEL 7 Update: pure-ftpd-1.0.47-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-c9c5ded31b
2020-05-22 00:44:02.889614
--------------------------------------------------------------------------------
Name : pure-ftpd
Product : Fedora EPEL 7
Version : 1.0.47
Release : 4.el7
URL : http://www.pureftpd.org
Summary : Lightweight, fast and secure FTP server
Description :
Pure-FTPd is a fast, production-quality, standard-comformant FTP server,
based upon Troll-FTPd. Unlike other popular FTP servers, it has no known
security flaw, it is really trivial to set up and it is especially designed
for modern Linux and FreeBSD kernels (setfsuid, sendfile, capabilities) .
Features include PAM support, IPv6, chroot()ed home directories, virtual
domains, built-in LS, anti-warez system, bandwidth throttling, FXP, bounded
ports for passive downloads, UL/DL ratios, native LDAP and SQL support,
Apache log files and more.
Rebuild switches:
--without ldap disable ldap support
--without mysql disable mysql support
--without pgsql disable postgresql support
--without extauth disable external authentication
--without tls disable SSL/TLS
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2020-9365 and CVE-2020-9274
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 6 2020 Ond��ej Lyson��k <olysonek(a)redhat.com> - 1.0.47-4
- Fix CVE-2020-9365 and CVE-2020-9274
- Resolves: rhbz#1828689
- Resolves: rhbz#1831060
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828687 - CVE-2020-9365 pure-ftpd: OOB read in pure_strcmp function in utils.c
https://bugzilla.redhat.com/show_bug.cgi?id=1828687
[ 2 ] Bug #1831058 - CVE-2020-9274 pure-ftpd: uninitialized pointer in the diraliases linked list leads to denial of service or information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1831058
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pure-ftpd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 7 Update: drraw-2.2-0.22.b2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-59cf8b2c42
2020-05-22 00:44:02.889599
--------------------------------------------------------------------------------
Name : drraw
Product : Fedora EPEL 7
Version : 2.2
Release : 0.22.b2.el7
URL : http://web.taranis.org/drraw/
Summary : Web based presentation front-end for RRDtool
Description :
drraw is a simple web based presentation front-end for RRDtool that allows you
to interactively build graphs of your own design. A graph definition can be
turned into a template which may be applied to many Round Robin Database files.
drraw specializes in providing an easy mean of displaying data stored with
RRDtool and does not care about how the data is collected, making it a great
complement to other RRDtool front-ends.
--------------------------------------------------------------------------------
Update Information:
First EPEL 7 build.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drraw' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 7 Update: python-fasteners-0.9.0-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-995610dbd1
2020-05-22 00:44:02.889584
--------------------------------------------------------------------------------
Name : python-fasteners
Product : Fedora EPEL 7
Version : 0.9.0
Release : 3.el7
URL : https://github.com/harlowja/fasteners
Summary : A python package that provides useful locks
Description :
A python package that provides useful locks.
--------------------------------------------------------------------------------
Update Information:
add Python 3 subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 13 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 0.9.0-3
- add Python 3 subpackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1823122 - python-fasteners: Provide python3 packages in EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1823122
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-fasteners' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
[SECURITY] Fedora EPEL 7 Update: viewvc-1.1.28-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-ec788c8a86
2020-05-22 00:44:02.889568
--------------------------------------------------------------------------------
Name : viewvc
Product : Fedora EPEL 7
Version : 1.1.28
Release : 1.el7
URL : http://www.viewvc.org/
Summary : Browser interface for CVS and SVN version control repositories
Description :
ViewVC is a browser interface for CVS and Subversion version control
repositories. It generates templatized HTML to present navigable directory,
revision, and change log listings. It can display specific versions of files
as well as diffs between those versions. Basically, ViewVC provides the bulk
of the report-like functionality you expect out of your version control tool,
but much more prettily than the average textual command-line program output.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2020-5283. ViewVC 1.1.28 ChangeLog - security fix: escape subdir
lastmod file name (#211) - fix standalone.py first request failure (#195)
ViewVC 1.1.27 ChangeLog: - suppress stack traces (with option to show) (#140)
- distinguish text/binary/image files by icons (#166, #175) - colorize
alternating file content lines (#167) - link to the instance root from the
ViewVC logo (#168) - display directory and root counts, too (#169) - fix double
fault error in standalone.py (#157) - support timezone offsets with minutes
piece (#176)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 6 2020 Bojan Smojver <bojan(a)rexursive.com> - 1.1.28-1
- bump up to 1.1.28
- CVE-2020-5283
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1831804 - CVE-2020-5283 viewvc: XSS vulnerability in CVS show_subdir_lastmod support [fedora-30]
https://bugzilla.redhat.com/show_bug.cgi?id=1831804
[ 2 ] Bug #1831805 - CVE-2020-5283 viewvc: XSS vulnerability in CVS show_subdir_lastmod support [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1831805
[ 3 ] Bug #1831806 - CVE-2020-5283 viewvc: XSS vulnerability in CVS show_subdir_lastmod support [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1831806
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update viewvc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 7 Update: composer-1.10.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-e2a446f497
2020-05-22 00:44:02.889552
--------------------------------------------------------------------------------
Name : composer
Product : Fedora EPEL 7
Version : 1.10.6
Release : 1.el7
URL : https://getcomposer.org/
Summary : Dependency Manager for PHP
Description :
Composer helps you declare, manage and install dependencies of PHP projects,
ensuring you have the right stack everywhere.
Documentation: https://getcomposer.org/doc/
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.6** - 2020-05-06 * Fixed version guessing to take composer-
runtime-api and composer-plugin-api requirements into account to avoid selecting
packages which require Composer 2 * Fixed package name validation to allow
several dashes following each other * Fixed post-status-cmd script not firing
when there were no changes to be displayed * Fixed composer-runtime-api
support on Composer 1.x, the package is now present as 1.0.0 * Fixed support
for composer show --name-only --self * Fixed detection of GitLab URLs when
handling authentication in some cases
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 6 2020 Remi Collet <remi(a)remirepo.net> - 1.10.6-1
- update to 1.10.6
- provide php-composer(composer-runtime-api)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update composer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 7 Update: nx-libs-3.5.99.23-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-907fcc3b1e
2020-05-22 00:44:02.889532
--------------------------------------------------------------------------------
Name : nx-libs
Product : Fedora EPEL 7
Version : 3.5.99.23
Release : 1.el7
URL : https://github.com/ArcticaProject/nx-libs
Summary : NX X11 protocol compression libraries
Description :
NX is a software suite which implements very efficient compression of
the X11 protocol. This increases performance when using X
applications over a network, especially a slow one.
--------------------------------------------------------------------------------
Update Information:
Update to 3.5.99.23
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 1 2020 Orion Poplawski <orion(a)nwra.com> - 3.5.99.23-1
- Update to 3.5.99.23
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.99.22-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Dec 16 2019 Orion Poplawski <orion(a)nwra.com> - 3.5.99.22-1
- Update to 3.5.99.22
* Thu Aug 15 2019 Orion Poplawski <orion(a)nwra.com> - 3.5.99.21-2
- BR libXfont2 on Fedora and RHEL 8+
* Thu Aug 15 2019 Orion Poplawski <orion(a)nwra.com> - 3.5.99.21-1
- Update to 3.5.99.21
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.99.20-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Apr 28 2019 Orion Poplawski <orion(a)nwra.com> - 3.5.99.20-1
- Update to 3.5.99.20
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.99.17-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nx-libs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 7 Update: python-collada-0.6-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-46bc32828d
2020-05-22 00:44:02.889452
--------------------------------------------------------------------------------
Name : python-collada
Product : Fedora EPEL 7
Version : 0.6
Release : 2.el7
URL : https://github.com/pycollada/pycollada
Summary : A python module for creating, editing and loading COLLADA
Description :
pycollada is a python module for creating, editing and loading COLLADA, which
is a COLLAborative Design Activity for establishing an interchange file format
for interactive 3D applications.
The library allows you to load a COLLADA file and interact with it as a python
object. In addition, it supports creating a collada python object from scratch,
as well as in-place editing.
--------------------------------------------------------------------------------
Update Information:
Rebuild for EPEL 7.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 6 2020 Orion Poplawski <orion(a)nwra.com> - 0.6-2
- Cleanup spec and rebuild to fix dependencies
* Mon Apr 8 2019 Richard Shaw <hobbes1069(a)gmail.com> - 0.6-1
- Update to 0.6.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-collada' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 8 Update: rb_libtorrent-1.2.6-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-6bd1f01be7
2020-05-22 00:39:16.055115
--------------------------------------------------------------------------------
Name : rb_libtorrent
Product : Fedora EPEL 8
Version : 1.2.6
Release : 3.el8
URL : https://www.libtorrent.org
Summary : A C++ BitTorrent library aiming to be the best alternative
Description :
rb_libtorrent is a C++ library that aims to be a good alternative to all
the other BitTorrent implementations around. It is a library and not a full
featured client, although it comes with a few working example clients.
Its main goals are to be very efficient (in terms of CPU and memory usage) as
well as being very easy to use both as a user and developer.
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rb_libtorrent' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora EPEL 8 Update: bcftools-1.9-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-1de4190a52
2020-05-22 00:39:16.055100
--------------------------------------------------------------------------------
Name : bcftools
Product : Fedora EPEL 8
Version : 1.9
Release : 3.el8
URL : https://www.htslib.org/
Summary : Tools for genomic variant calling and manipulating VCF/BCF files
Description :
BCFtools is a set of utilities that manipulate genomic variant calls in the
Variant Call Format (VCF) and its binary counterpart (BCF). All commands work
transparently with both VCFs and BCFs, both uncompressed and BGZF-compressed.
(This BCFtools includes the polysomy subcommand, which is implemented using
the GNU Scientific Library. Hence this package is licensed according to the
GNU General Public License, rather than the MIT license used when BCFtools
is built without the polysomy subcommand.)
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774741 - Review Request: bcftools - Tools for genomic variant calling and manipulating VCF/BCF files
https://bugzilla.redhat.com/show_bug.cgi?id=1774741
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bcftools' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
[SECURITY] Fedora EPEL 8 Update: pure-ftpd-1.0.49-4.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-aa8ce752c3
2020-05-22 00:39:16.055085
--------------------------------------------------------------------------------
Name : pure-ftpd
Product : Fedora EPEL 8
Version : 1.0.49
Release : 4.el8
URL : http://www.pureftpd.org
Summary : Lightweight, fast and secure FTP server
Description :
Pure-FTPd is a fast, production-quality, standard-comformant FTP server,
based upon Troll-FTPd. Unlike other popular FTP servers, it has no known
security flaw, it is really trivial to set up and it is especially designed
for modern Linux and FreeBSD kernels (setfsuid, sendfile, capabilities) .
Features include PAM support, IPv6, chroot()ed home directories, virtual
domains, built-in LS, anti-warez system, bandwidth throttling, FXP, bounded
ports for passive downloads, UL/DL ratios, native LDAP and SQL support,
Apache log files and more.
Rebuild switches:
--without ldap disable ldap support
--without mysql disable mysql support
--without pgsql disable postgresql support
--without extauth disable external authentication
--without tls disable SSL/TLS
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2020-9365 and CVE-2020-9274
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 6 2020 Ond��ej Lyson��k <olysonek(a)redhat.com> - 1.0.49-4
- Fix CVE-2020-9365 and CVE-2020-9274
- Resolves: rhbz#1828689
- Resolves: rhbz#1831060
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828687 - CVE-2020-9365 pure-ftpd: OOB read in pure_strcmp function in utils.c
https://bugzilla.redhat.com/show_bug.cgi?id=1828687
[ 2 ] Bug #1831058 - CVE-2020-9274 pure-ftpd: uninitialized pointer in the diraliases linked list leads to denial of service or information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1831058
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pure-ftpd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years