--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-50bfbc623e
2021-10-19 14:55:00.944099
--------------------------------------------------------------------------------
Name : python-distro
Product : Fedora EPEL 7
Version : 1.5.0
Release : 1.el7
URL : https://github.com/python-distro/distro
Summary : Linux Distribution - a Linux OS platform information API
Description :
The distro (for: Linux Distribution) package provides information about the
Linux distribution it runs on, such as a reliable machine-readable ID, or
version information.
It is a renewed alternative implementation for Python's original
platform.linux_distribution function, but it also provides much more
functionality. An alternative implementation became necessary because
Python 3.5 deprecated this function, and Python 3.7 is expected to remove it
altogether. Its predecessor function platform.dist was already deprecated since
Python 2.6 and is also expected to be removed in Python 3.7. Still, there are
many cases in which access to that information is needed. See Python issue 1322
for more information.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.5.0.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 8 2021 Orion Poplawski <orion(a)nwra.com> - 1.5.0-1
- Update to 1.5.0
- Run tests
- Cleanup spec
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-distro' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-b37bebe094
2021-10-19 14:55:00.944108
--------------------------------------------------------------------------------
Name : eccodes
Product : Fedora EPEL 7
Version : 2.23.0
Release : 1.el7
URL : https://software.ecmwf.int/wiki/display/ECC/ecCodes+Home
Summary : WMO data format decoding and encoding
Description :
ecCodes is a package developed by ECMWF which provides an application
programming interface and a set of tools for decoding and encoding messages
in the following formats:
* WMO FM-92 GRIB edition 1 and edition 2
* WMO FM-94 BUFR edition 3 and edition 4
* WMO GTS abbreviated header (only decoding).
A useful set of command line tools provide quick access to the messages. C,
and Fortran 90 interfaces provide access to the main ecCodes functionality.
ecCodes is an evolution of GRIB-API. It is designed to provide the user with
a simple set of functions to access data from several formats with a key/value
approach.
For GRIB encoding and decoding, the GRIB-API functionality is provided fully
in ecCodes with only minor interface and behaviour changes. Interfaces for C,
and Fortran 90 are all maintained as in GRIB-API. However, the
GRIB-API Fortran 77 interface is no longer available.
In addition, a new set of functions with the prefix "codes_" is provided to
operate on all the supported message formats. These functions have the same
interface and behaviour as the "grib_" functions.
A selection of GRIB-API tools has been included in ecCodes (ecCodes GRIB
tools), while new tools are available for the BUFR (ecCodes BUFR tools) and
GTS formats. The new tools have been developed to be as similar as possible
to the existing GRIB-API tools maintaining, where possible, the same options
and behaviour. A significant difference compared with GRIB-API tools is that
bufr_dump produces output in JSON format suitable for many web based
applications.
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream version 2.23.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 11 2021 Jos de Kloe <josdekloe(a)gmail.com> - 2.23.0-1
- Upgrade to upstream version 2.23.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2012783 - ECMWF requires upgrade to eccodes 2.23 by using GRIB master table version 27 as of Tue 12 Oct
https://bugzilla.redhat.com/show_bug.cgi?id=2012783
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update eccodes' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-7d9e53593a
2021-10-19 14:55:00.944088
--------------------------------------------------------------------------------
Name : pspg
Product : Fedora EPEL 7
Version : 5.4.0
Release : 1.el7
URL : https://github.com/okbob/pspg
Summary : A unix pager optimized for psql
Description :
pspg is a unix pager optimized for psql. It can freeze rows, freeze
columns, and lot of color themes are included.
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 10 2021 Pavel Raiskup <praiskup(a)redhat.com> - 5.4.0-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1992579 - pspg-5.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1992579
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pspg' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-a3fe2b021b
2021-10-19 14:55:00.944000
--------------------------------------------------------------------------------
Name : python3-pillow
Product : Fedora EPEL 7
Version : 6.2.2
Release : 3.el7
URL : http://python-pillow.github.io/
Summary : Python image processing library
Description :
Python image processing library, fork of the Python Imaging Library (PIL)
This library provides extensive file format support, an efficient
internal representation, and powerful image processing capabilities.
There are four subpackages: tk (tk interface), qt (PIL image wrapper for Qt),
devel (development) and doc (documentation).
--------------------------------------------------------------------------------
Update Information:
Backport CVE fixes for CVE-2021-23437 (bz#2001911), CVE-2021-28675 (bz#1958243),
CVE-2021-28676 (bz#1958255), CVE-2021-28677 (bz#1958260), CVE-2021-28678
(bz#1958266), CVE-2021-34552 (bz#1982382)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 9 2021 Orion Poplawski <orion(a)nwra.com> - 6.2.2-3
- Backport CVE fixes for CVE-2021-23437 (bz#2001911), CVE-2021-28675
(bz#1958243), CVE-2021-28676 (bz#1958255), CVE-2021-28677 (bz#1958260),
CVE-2021-28678 (bz#1958266), CVE-2021-34552 (bz#1982382)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958243 - CVE-2021-28675 python3-pillow: python-pillow: DoS in PsdImagePlugin [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1958243
[ 2 ] Bug #1958255 - CVE-2021-28676 python3-pillow: python-pillow: infinite loop in FliDecode.c can lead to DoS [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1958255
[ 3 ] Bug #1958260 - CVE-2021-28677 python3-pillow: python-pillow: DoS in the open phase via a malicious EPS file [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1958260
[ 4 ] Bug #1958266 - CVE-2021-28678 python3-pillow: python-pillow: improper check in BlpImagePlugin can lead to DoS [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1958266
[ 5 ] Bug #1982382 - CVE-2021-34552 python3-pillow: python-pillow: buffer overflow in Convert.c because it allow an attacker to pass controlled parameters directly into a convert function [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1982382
[ 6 ] Bug #2001911 - CVE-2021-23437 python3-pillow: python-pillow: possible ReDoS via the getrgb function [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2001911
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-pillow' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-2fd5b0e4e4
2021-10-19 01:00:04.449605
--------------------------------------------------------------------------------
Name : eccodes
Product : Fedora EPEL 8
Version : 2.23.0
Release : 1.el8
URL : https://software.ecmwf.int/wiki/display/ECC/ecCodes+Home
Summary : WMO data format decoding and encoding
Description :
ecCodes is a package developed by ECMWF which provides an application
programming interface and a set of tools for decoding and encoding messages
in the following formats:
* WMO FM-92 GRIB edition 1 and edition 2
* WMO FM-94 BUFR edition 3 and edition 4
* WMO GTS abbreviated header (only decoding).
A useful set of command line tools provide quick access to the messages. C,
and Fortran 90 interfaces provide access to the main ecCodes functionality.
ecCodes is an evolution of GRIB-API. It is designed to provide the user with
a simple set of functions to access data from several formats with a key/value
approach.
For GRIB encoding and decoding, the GRIB-API functionality is provided fully
in ecCodes with only minor interface and behaviour changes. Interfaces for C,
and Fortran 90 are all maintained as in GRIB-API. However, the
GRIB-API Fortran 77 interface is no longer available.
In addition, a new set of functions with the prefix "codes_" is provided to
operate on all the supported message formats. These functions have the same
interface and behaviour as the "grib_" functions.
A selection of GRIB-API tools has been included in ecCodes (ecCodes GRIB
tools), while new tools are available for the BUFR (ecCodes BUFR tools) and
GTS formats. The new tools have been developed to be as similar as possible
to the existing GRIB-API tools maintaining, where possible, the same options
and behaviour. A significant difference compared with GRIB-API tools is that
bufr_dump produces output in JSON format suitable for many web based
applications.
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream version 2.23.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 11 2021 Jos de Kloe <josdekloe(a)gmail.com> - 2.23.0-1
- Upgrade to upstream version 2.23.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2012783 - ECMWF requires upgrade to eccodes 2.23 by using GRIB master table version 27 as of Tue 12 Oct
https://bugzilla.redhat.com/show_bug.cgi?id=2012783
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update eccodes' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-b81b53b69f
2021-10-19 01:00:04.449596
--------------------------------------------------------------------------------
Name : lpf
Product : Fedora EPEL 8
Version : 0.3
Release : 1.el8
URL : https://github.com/sergiomb2/lpf
Summary : Local package factory - build non-redistributable rpms
Description :
lpf (Local Package Factory) is designed to handle two separate
problems:
- Packages built from sources which does not allow redistribution.
- Packages requiring user to accept EULA-like terms.
It works by downloading sources, possibly requiring a user to accept
license terms and then building and installing rpm package(s) locally.
Besides being interactive the operation is similar to akmod and dkms.
--------------------------------------------------------------------------------
Update Information:
- Bug fixing all, except notifications . - Notification still not working
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1128565 - [abrt] lpf: subprocess.py:573:check_output:CalledProcessError: Command '['/usr/share/lpf/scripts/lpf', 'state']' returned non-zero exit status -15
https://bugzilla.redhat.com/show_bug.cgi?id=1128565
[ 2 ] Bug #1297133 - useless lpf package created because lpf-setup-pkg messes up in the presence of backup files
https://bugzilla.redhat.com/show_bug.cgi?id=1297133
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lpf' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-2319d19104
2021-10-19 01:00:04.449584
--------------------------------------------------------------------------------
Name : koji
Product : Fedora EPEL 8
Version : 1.26.1
Release : 1.el8
URL : https://pagure.io/koji/
Summary : Build system tools
Description :
Koji is a system for building and tracking RPMS. The base package
contains shared libraries and the command-line interface.
--------------------------------------------------------------------------------
Update Information:
Update to upstream bugfix release 1.26.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 10 2021 Kevin Fenzi <kevin(a)scrye.com> - 1.26.1-1
- Update to 1.26.1. Fixes rhbz#2011804
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update koji' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-288eb5564f
2021-10-19 01:00:04.449522
--------------------------------------------------------------------------------
Name : pspg
Product : Fedora EPEL 8
Version : 5.4.0
Release : 1.el8
URL : https://github.com/okbob/pspg
Summary : A unix pager optimized for psql
Description :
pspg is a unix pager optimized for psql. It can freeze rows, freeze
columns, and lot of color themes are included.
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 10 2021 Pavel Raiskup <praiskup(a)redhat.com> - 5.4.0-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1992579 - pspg-5.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1992579
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pspg' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-b5d83e3953
2021-10-17 21:12:57.357183
--------------------------------------------------------------------------------
Name : dmlite
Product : Fedora EPEL 7
Version : 1.15.1
Release : 8.el7
URL : https://gitlab.cern.ch/lcgdm/dmlite
Summary : Lcgdm grid data management and storage framework
Description :
This package provides the dmlite framework that implements common
logic for data management and storage for the Lcg grid.
--------------------------------------------------------------------------------
Update Information:
- support new WLCG IAM VOMS with puppet configuration - fix dmlite-shell issue
with empty pool
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 8 2021 Petr Vokac <petr.vokac(a)cern.ch> - 1.15.1-8
- Update puppet voms module to support new WLCG IAM VOMS
- HTTP configuration to protect against slow/infinite transfers
- Fix dmlite-shell issue with empty pool
* Wed Sep 29 2021 Petr Vokac <petr.vokac(a)cern.ch> - 1.15.1-7
- Fix condition to correctly remove gfal2 SRM dependency
* Mon Sep 27 2021 Petr Vokac <petr.vokac(a)cern.ch> - 1.15.1-6
- Fix python3 shebang, fixes bug #1738911
* Mon Sep 27 2021 Petr Vokac <petr.vokac(a)cern.ch> - 1.15.1-5
- Add HTTP protection for slow transfers
- remove SRM dependencies if we don't build support for legacy DPM
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.15.1-4
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dmlite' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-1c90472b95
2021-10-17 21:12:57.357171
--------------------------------------------------------------------------------
Name : libopenmpt
Product : Fedora EPEL 7
Version : 0.5.12
Release : 1.el7
URL : https://lib.openmpt.org/libopenmpt/
Summary : C/C++ library to decode tracker music module (MOD) files
Description :
libopenmpt is a cross-platform C++ and C library to decode tracked music
files (modules) into a raw PCM audio stream.
libopenmpt is based on the player code of the OpenMPT project (Open
ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is
developed in the same source code repository as OpenMPT.
--------------------------------------------------------------------------------
Update Information:
libopenmpt 0.5.12 (2021-10-04) ============================== * [Sec]
Possible crash when loading malformed MDL files. (r15603) * [Bug] Fixed
various undefined behaviour found with ubsan. * Seeking with sample sync
sometimes didn���t compute the correct sample position with pingpong-looped
samples. * IT: Tremor command I11 erroneously behaved like I00 (use previous
parameter) unless IT Old Effects were enabled. * PTM: Panning was translated
wrong in some edge cases. * IMF / PTM: Note Slide commands were sometimes
slightly off. * OKT: Better support for fine note slides. * DBM: Echo enable
effect parameter range checks were incorrect. * XM: Sample texts in XMs made
with MadTracker are now also decoded using Windows-1252 encoding. *
in_openmpt: Song metadata is no longer reverted when viewing file info.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.5.12-1
- update to 0.5.12 (security release)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libopenmpt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------