[SECURITY] Fedora EPEL 7 Update: python-pip-epel-8.1.2-14.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-49c5f31e92
2020-09-18 15:30:18.026280
--------------------------------------------------------------------------------
Name : python-pip-epel
Product : Fedora EPEL 7
Version : 8.1.2
Release : 14.el7
URL : http://www.pip-installer.org
Summary : A tool for installing and managing Python packages
Description :
Pip is a replacement for easy_install. It uses mostly the
same techniques for finding packages, so packages that were made
easy_installable should be pip-installable as well.
--------------------------------------------------------------------------------
Update Information:
Patch for pip install <url> allow directory traversal, leading to arbitrary file
write
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 2 2020 Tomas Orsava <torsava(a)redhat.com> - 8.1.2-14
- Patch for pip install <url> allow directory traversal, leading to arbitrary file write
Resolves: rhbz#1868137
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.1.2-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1868137 - CVE-2019-20916 python-pip-epel: python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1868137
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pip-epel' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 7 Update: python3-ldap-3.1.0-12.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-26e9c42034
2020-09-18 15:30:18.026269
--------------------------------------------------------------------------------
Name : python3-ldap
Product : Fedora EPEL 7
Version : 3.1.0
Release : 12.el7
URL : http://python-ldap.org/
Summary : An object-oriented API to access LDAP directory servers
Description :
python-ldap provides an object-oriented API for working with LDAP within
Python programs. It allows access to LDAP directory servers by wrapping the
OpenLDAP 2.x libraries, and contains modules for other LDAP-related tasks
(including processing LDIF, LDAPURLs, LDAPv3 schema, etc.).
--------------------------------------------------------------------------------
Update Information:
First epel7 release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1872669 - Review Request: python3-ldap - API to access LDAP directory servers
https://bugzilla.redhat.com/show_bug.cgi?id=1872669
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-ldap' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 7 Update: lua-rpm-macros-1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-f54c46aaf2
2020-09-18 15:30:18.026259
--------------------------------------------------------------------------------
Name : lua-rpm-macros
Product : Fedora EPEL 7
Version : 1
Release : 2.el7
URL : None
Summary : The common Lua RPM macros
Description :
This package contains Lua RPM macros.
You should not need to install this package manually as lua-devel requires it.
--------------------------------------------------------------------------------
Update Information:
Refactored Lua RPM macros out of lua-devel
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1873676 - Review Request: lua-rpm-macros - The common Lua RPM macros
https://bugzilla.redhat.com/show_bug.cgi?id=1873676
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lua-rpm-macros' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 7 Update: ufdbGuard-1.34.6-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-e8f9012731
2020-09-18 15:30:18.026248
--------------------------------------------------------------------------------
Name : ufdbGuard
Product : Fedora EPEL 7
Version : 1.34.6
Release : 3.el7
URL : https://www.urlfilterdb.com/
Summary : A URL filter for squid
Description :
ufdbGuard is a free URL filter for Squid with additional features like
SafeSearch enforcement for a large number of search engines, safer HTTPS
visits and dynamic detection of proxies (URL filter circumventors).
ufdbGuard supports free and commercial URL databases that can be
downloaded from various sites and vendors.
You can also make your own URL database for ufdbGuard.
--------------------------------------------------------------------------------
Update Information:
Fix logrotate config.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 2 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.34.6-3
- Correct logrotate configure.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1874819 - Ufdbguard duplicates logs after rotation
https://bugzilla.redhat.com/show_bug.cgi?id=1874819
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ufdbGuard' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 7 Update: nodejs-packaging-25-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-0f5a71c54f
2020-09-18 15:30:18.026223
--------------------------------------------------------------------------------
Name : nodejs-packaging
Product : Fedora EPEL 7
Version : 25
Release : 1.el7
URL : https://fedoraproject.org/wiki/Node.js/Packagers
Summary : RPM Macros and Utilities for Node.js Packaging
Description :
This package contains RPM macros and other utilities useful for packaging
Node.js modules and applications in RPM-based distributions.
--------------------------------------------------------------------------------
Update Information:
Fix incorrect bundled library detection for Requires ---- Add support for
checking `node_modules_prod` for bundled dependencies.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 2 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 25-1
- Fix incorrect bundled library detection for Requires
* Tue Sep 1 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 24-1
- Check node_modules_prod for bundled dependencies
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 23-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jun 3 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 23-3
- Drop Requires: nodejs(engine)
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 23-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 31 2019 Tom Hughes <tom(a)compton.nu> - 23-1
- Ensure nodejs(engine) is required for packages with no dependencies
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 22-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Jul 2 2019 Tom Hughes <tom(a)compton.nu> - 22-1
- Refactor nodejs.req in more idiomatic Python
- Treat only external dependency links as un-bundled
* Mon Jun 10 2019 Tom Hughes <tom(a)compton.nu> - 21-1
- Refactor nodejs.prov in more idiomatic Python
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 20-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jan 5 2019 Tom Hughes <tom(a)compton.nu> - 20-1
- Fix handling of ^ dependencies for multiversion modules
* Thu Jan 3 2019 Tom Hughes <tom(a)compton.nu> - 18-1
- Handle =, >= and <= dependencies for multiversion modules
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 17-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu May 3 2018 Tom Hughes <tom(a)compton.nu> - 17-1
- Fix version comparators with a space after the operator
* Tue May 1 2018 Tom Hughes <tom(a)compton.nu> - 16-1
- Rewrite nodejs.req to better match npm versioning rules
- Add tests for nodejs.req and nodejs.prov
* Mon Apr 30 2018 Tom Hughes <tom(a)compton.nu> - 15-1
- Fix caret dependency ranges
* Thu Apr 12 2018 Tom Hughes <tom(a)compton.nu> - 14-1
- Only match top level modules for requires and provides generation
* Wed Feb 28 2018 Tom Hughes <tom(a)compton.nu> - 13-1
- Add %nodejs_setversion macro
* Fri Feb 23 2018 Tom Hughes <tom(a)compton.nu> - 12-1
- Port to python 3
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Jan 13 2018 Tom Hughes <tom(a)compton.nu> - 11-1
- nodesjs.req: use boolean with for range dependencies
* Tue Sep 12 2017 Stephen Gallagher <sgallagh(a)redhat.com> - 10-1
- Release v10
- Automatically generate Provides for bundled npm dependencies
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 9-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Feb 21 2017 Tom Hughes <tom(a)compton.nu> - 9-3
- switch source URL to pagure
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Tue Feb 2 2016 Tom Hughes <tom(a)compton.nu> - 9-1
- nodejs-fixdep: stop --move erroring on missing dependency types
* Sun Jan 31 2016 Tom Hughes <tom(a)compton.nu> - 8-1
- nodejs-fixdep: add --move option
- nodejs-symlink-deps: add --optional option
- req: generate suggests for optional dependencies
* Mon Nov 16 2015 Tom Hughes <tom(a)compton.nu> - 7-5
- nodejs-symlink-deps: handle caret in versions
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Wed Mar 4 2015 Ville Skytt�� <ville.skytta(a)iki.fi> - 7-3
- Install macros in %{_rpmconfidir}/macros.d where available (#1074279)
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-packaging' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 7 Update: nss-mdns-0.14.1-9.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-21311a703e
2020-09-18 15:30:18.026147
--------------------------------------------------------------------------------
Name : nss-mdns
Product : Fedora EPEL 7
Version : 0.14.1
Release : 9.el7
URL : https://github.com/lathiat/nss-mdns
Summary : glibc plugin for .local name resolution
Description :
nss-mdns is a plugin for the GNU Name Service Switch (NSS) functionality of
the GNU C Library (glibc) providing host name resolution via Multicast DNS
(aka Zeroconf, aka Apple Rendezvous, aka Apple Bonjour), effectively allowing
name resolution by common Unix/Linux programs in the ad-hoc mDNS domain .local.
nss-mdns provides client functionality only, which means that you have to
run a mDNS responder daemon separately from nss-mdns if you want to register
the local host name via mDNS (e.g. Avahi).
--------------------------------------------------------------------------------
Update Information:
Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf.
This improves compatibility with systemd-resolved.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 2 2020 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.14.1-9
- Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf,
so that it ends up before 'resolve' (#1867830)
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.14.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1867830 - can't connect using mDNS addressing when systemd-resolved is running
https://bugzilla.redhat.com/show_bug.cgi?id=1867830
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nss-mdns' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 8 Update: lv2-1.18.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-003d4d6b2b
2020-09-18 15:26:56.531460
--------------------------------------------------------------------------------
Name : lv2
Product : Fedora EPEL 8
Version : 1.18.0
Release : 1.el8
URL : http://lv2plug.in
Summary : Audio Plugin Standard
Description :
LV2 is a standard for plugins and matching host applications, mainly
targeted at audio processing and generation.
There are a large number of open source and free software synthesis
packages in use or development at this time. This API ('LV2') attempts
to give programmers the ability to write simple 'plugin' audio
processors in C/C++ and link them dynamically ('plug') into a range of
these packages ('hosts'). It should be possible for any host and any
plugin to communicate completely through this interface.
LV2 is a successor to LADSPA, created to address the limitations of
LADSPA which many hosts have outgrown.
--------------------------------------------------------------------------------
Update Information:
Update to 1.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 26 2020 Guido Aulisi <guido.aulisi(a)gmail.com> - 1.18.0-1
- Update to 1.18.0
- Add missing BR
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.16.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.16.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lv2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 8 Update: python-connect-box-0.2.8-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-665cd615d3
2020-09-18 15:26:56.531451
--------------------------------------------------------------------------------
Name : python-connect-box
Product : Fedora EPEL 8
Version : 0.2.8
Release : 1.el8
URL : https://github.com/home-assistant-ecosystem/python-connect-box
Summary : Python client for interacting with Compal CH7465LG devices
Description :
connect-box is a Python Client for interacting with the cable modem/router
Compal CH7465LG which is provided under different names by various ISP in
Europe.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.2.8 (rhbz#1874641) ---- Initial package
for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1874641 - Review Request: python-connect-box - Python client for interacting with Compal CH7465LG devices
https://bugzilla.redhat.com/show_bug.cgi?id=1874641
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-connect-box' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora EPEL 8 Update: oval-graph-1.2.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-1e17344ba6
2020-09-18 15:26:56.531442
--------------------------------------------------------------------------------
Name : oval-graph
Product : Fedora EPEL 8
Version : 1.2.0
Release : 1.el8
URL : https://pypi.org/project/oval-graph/
Summary : Tool for visualization of SCAP rule evaluation results
Description :
Oval_graph is a tool that displays the results of evaluating SCAP rules.
In the form of a tree according to the OVAL standard. Using the
`arf-to-graph` command, you can simply view the result of rule.
Use `arf-to-json` to generate a rule result in json. Using the
`json-to-graph` command, you can view the results of rules from json file.
--------------------------------------------------------------------------------
Update Information:
new upstream release: 1.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 3 2020 rebase-helper <rebase-helper(a)localhost.local> - 1.2.0-1
- new upstream release: 1.2.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update oval-graph' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months