[SECURITY] Fedora EPEL 7 Update: jbig2dec-0.12-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-6ad4894c0c
2020-07-11 00:45:01.473760
--------------------------------------------------------------------------------
Name : jbig2dec
Product : Fedora EPEL 7
Version : 0.12
Release : 5.el7
URL : http://jbig2dec.sourceforge.net/
Summary : A decoder implementation of the JBIG2 image compression format
Description :
jbig2dec is a decoder implementation of the JBIG2 image compression format.
JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit
monochrome) images at moderately high resolution, and in particular scanned
paper documents. In this domain it is very efficient, offering compression
ratios on the order of 100:1.
--------------------------------------------------------------------------------
Update Information:
fix bz 1848522
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2020 Michael J Gruber <mjg(a)fedoraproject.org> - 0.12-5
- fix bz 1848522
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848522 - CVE-2020-12268 jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1848522
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update jbig2dec' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 7 Update: resalloc-3.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-716e5d4631
2020-07-11 00:45:01.473745
--------------------------------------------------------------------------------
Name : resalloc
Product : Fedora EPEL 7
Version : 3.3
Release : 1.el7
URL : https://github.com/praiskup/resalloc
Summary : Resource allocator for expensive resources - client tooling
Description :
The resalloc project aims to help with taking care of dynamically
allocated resources, for example ephemeral virtual machines used for
the purposes of CI/CD tasks.
The resalloc package provides the client-side tooling.
--------------------------------------------------------------------------------
Update Information:
new release, mostly fixing one bug causing traceback on too-long stdout output
from cmd_alloc
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.3-1
- new release, mostly fixing one bug causing traceback on too-long stdout output
from AllocWorker script
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update resalloc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 7 Update: composer-1.10.8-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-1772048fbf
2020-07-11 00:45:01.473644
--------------------------------------------------------------------------------
Name : composer
Product : Fedora EPEL 7
Version : 1.10.8
Release : 1.el7
URL : https://getcomposer.org/
Summary : Dependency Manager for PHP
Description :
Composer helps you declare, manage and install dependencies of PHP projects,
ensuring you have the right stack everywhere.
Documentation: https://getcomposer.org/doc/
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.8** - 2020-06-24 * Fixed compatibility issue with git being
configured to show signatures by default * Fixed discarding of local changes
when updating packages to include untracked files * Several minor fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2020 Remi Collet <remi(a)remirepo.net> - 1.10.8-1
- update to 1.10.8
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update composer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 7 Update: libdigidocpp-3.14.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-4d94e9444b
2020-07-10 00:46:15.055947
--------------------------------------------------------------------------------
Name : libdigidocpp
Product : Fedora EPEL 7
Version : 3.14.3
Release : 1.el7
URL : https://github.com/open-eid/libdigidocpp
Summary : Library offers creating, signing and verification of digitally signed documents
Description :
Libdigidocpp library offers creating, signing and verification of digitally
signed documents, according to XAdES and XML-DSIG standards. Documentation
http://open-eid.github.io/libdigidocpp
--------------------------------------------------------------------------------
Update Information:
- Upstream release 3.14.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Dmitri Smirnov <dmitri(a)smirnov.ee> - 3.14.3-1
- Upstream release 3.14.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libdigidocpp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 7 Update: scitokens-cpp-0.5.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-805503deaa
2020-07-10 00:46:15.055924
--------------------------------------------------------------------------------
Name : scitokens-cpp
Product : Fedora EPEL 7
Version : 0.5.1
Release : 1.el7
URL : https://github.com/scitokens/scitokens-cpp
Summary : C++ Implementation of the SciTokens Library
Description :
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Translate WLCG's storage.modify as a write permission in SciTokens.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Derek Weitzel <dweitzel(a)unl.edu> - 0.5.1-1
- Add storage.modify as write permission
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update scitokens-cpp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
[SECURITY] Fedora EPEL 7 Update: alpine-2.23-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-af9b2ac861
2020-07-10 00:46:15.055855
--------------------------------------------------------------------------------
Name : alpine
Product : Fedora EPEL 7
Version : 2.23
Release : 2.el7
URL : http://alpine.x10host.com/
Summary : powerful, easy to use console email client
Description :
Alpine -- an Alternatively Licensed Program for Internet
News & Email -- is a tool for reading, sending, and managing
electronic messages. Alpine is the successor to Pine and was
developed by Computing & Communications at the University of
Washington.
Though originally designed for inexperienced email users,
Alpine supports many advanced features, and an ever-growing number of
configuration and personal-preference options.
Changes and enhancements over pine:
* Released under the Apache Software License, Version 2.0.
* Internationalization built around new internal Unicode support.
* Ground-up reorganization of source code around new "pith/" core
routine library.
* Ground-up reorganization of build and install procedure based on
GNU Build System's autotools.
--------------------------------------------------------------------------------
Update Information:
2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 23 2020 josef radinger <cheese(a)nosuchhost.net> - 2.23-2
- 2.23 fixes CVE-2020-14929 (#1850048) and new version (#1848786)
* Mon Jun 22 2020 josef radinger <cheese(a)nosuchhost.net> - 2.23-1
- bump version
- update patch2 alpine-2.23-gcc10.patch
* Tue Mar 24 2020 josef radinger <cheese(a)nosuchhost.net> - 2.22-1
- bump version
* Thu Feb 13 2020 Than Ngo <than(a)redhat.com> - 2.21-13
- fixed multiple definition of symbols
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jul 21 2019 Paul Wouters <pwouters(a)redhat.com> - 2.21-10
- Patch to suppress sending the user-agent per default
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon May 21 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 2.21-7
- new URL
- use %license, %make_build, %make_install
* Tue Mar 6 2018 josef radinger <cheese(a)nosuchhost.net> - 2.21-6
- add Buildrequires: gcc
https://fedoraproject.org/wiki/Packaging:C_and_C++
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850047 - CVE-2020-14929 alpine: silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH
https://bugzilla.redhat.com/show_bug.cgi?id=1850047
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update alpine' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
[SECURITY] Fedora EPEL 8 Update: hostapd-2.9-4.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-c047cbdfd0
2020-07-10 00:28:52.165414
--------------------------------------------------------------------------------
Name : hostapd
Product : Fedora EPEL 8
Version : 2.9
Release : 4.el8
URL : http://w1.fi/hostapd
Summary : IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
Description :
hostapd is a user space daemon for access point and authentication servers. It
implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP
Authenticators and RADIUS authentication server.
hostapd is designed to be a "daemon" program that runs in the back-ground and
acts as the backend component controlling authentication. hostapd supports
separate frontend programs and an example text-based frontend, hostapd_cli, is
included with hostapd.
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2020-12695 (UPnP SUBSCRIBE misbehavior in hostapd WPS AP)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Johwn W. Linville <linville(a)redhat.com> - 2.9-4
- Fix CVE-2020-12695 (UPnP SUBSCRIBE misbehavior in hostapd WPS AP)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1846006 - CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP
https://bugzilla.redhat.com/show_bug.cgi?id=1846006
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update hostapd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 8 Update: scitokens-cpp-0.5.1-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-34e9284c7a
2020-07-10 00:28:52.165403
--------------------------------------------------------------------------------
Name : scitokens-cpp
Product : Fedora EPEL 8
Version : 0.5.1
Release : 1.el8
URL : https://github.com/scitokens/scitokens-cpp
Summary : C++ Implementation of the SciTokens Library
Description :
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Translate WLCG's storage.modify as a write permission in SciTokens.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Derek Weitzel <dweitzel(a)unl.edu> - 0.5.1-1
- Add storage.modify as write permission
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update scitokens-cpp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 8 Update: kf5-knewstuff-5.68.0-1.el8.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-f21297604d
2020-07-10 00:28:52.165393
--------------------------------------------------------------------------------
Name : kf5-knewstuff
Product : Fedora EPEL 8
Version : 5.68.0
Release : 1.el8.1
URL : https://cgit.kde.org/knewstuff.git
Summary : KDE Frameworks 5 Tier 3 module for downloading application assets
Description :
KDE Frameworks 5 Tier 3 module for downloading and sharing additional
application data like plugins, themes, motives, etc.
--------------------------------------------------------------------------------
Update Information:
Page.qml, do not call QuestionAsker (#1838801)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Troy Dawson <tdawson(a)redhat.com> - 5.68.0-1.1
- Page.qml, do not call QuestionAsker (#1838801)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1838801 - Many settings pages fail to load due to Qt error
https://bugzilla.redhat.com/show_bug.cgi?id=1838801
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update kf5-knewstuff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months
Fedora EPEL 8 Update: xdotool-3.20150503.1-10.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-cf9fc12a6e
2020-07-10 00:28:52.165381
--------------------------------------------------------------------------------
Name : xdotool
Product : Fedora EPEL 8
Version : 3.20150503.1
Release : 10.el8
URL : http://www.semicomplete.com/projects/xdotool/
Summary : Fake keyboard/mouse input
Description :
This tool lets you programmatically (or manually) simulate keyboard input
and mouse activity, move and re-size windows, etc.
--------------------------------------------------------------------------------
Update Information:
Build for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774690 - xdotool build request
https://bugzilla.redhat.com/show_bug.cgi?id=1774690
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xdotool' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 10 months