Fedora EPEL 8 Update: clamav-0.103.1-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-a847c261f5
2021-03-23 01:52:36.297425
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 8
Version : 0.103.1
Release : 3.el8
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
- clamav-freshclam.service: Standard output type syslog is obsolete (#1933977) -
Quiet proxy on stdout (#1814698) ---- ClamAV 0.103.1 patch release
https://blog.clamav.net/2021/02/clamav-01031-patch-release.html Notable changes
Added a new scan option to alert on broken media (graphics) file formats.
This feature mitigates the risk of malformed media files intended to exploit
vulnerabilities in other software. At present, media validation exists for JPEG,
TIFF, PNG and GIF files. To enable this feature, set AlertBrokenMedia yes in
clamd.conf for use with ClamD, or use the --alert-broken-media option when using
ClamScan. These options are disabled by default in this patch release but may be
enabled in a subsequent release. Application developers may enable this
scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for the heuristic scan
option bit field. Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF and
PNG typing behavior. BMP and JPEG 2000 files will continue to detect as
CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG 2000 format-
checking capabilities. Bug fixes Fixed PNG parser logic bugs that caused
an excess of parsing errors and fixed a stack exhaustion issue affecting some
systems when scanning PNG files. PNG file type detection was disabled via
signature database update for ClamAV version 0.103.0 to mitigate the effects
from these bugs. Fixed an issue where PNG and GIF files no longer work with
Target:5 graphics signatures if detected as CL_TYPE_PNG or CL_TYPE_GIF rather
than as CL_TYPE_GRAPHICS. Target types now support up to 10 possible file types
to make way for additional graphics types in future releases. Fixed
ClamOnAcc's --fdpass option. File descriptor passing (or "FD-passing") is a
mechanism by which ClamOnAcc and ClamDScan may transfer an open file to ClamD to
scan, even if ClamD is running as a non-privileged user and wouldn't otherwise
have read-access to the file. This enables ClamD to scan all files without
having to run ClamD as root. If possible, ClamD should never be run as root to
mitigate the risk in case ClamD is somehow compromised while scanning malware.
Interprocess file descriptor passing for ClamOnAcc was broken since version
0.102.0 due to a bug introduced by the switch to cURL for communicating with
ClamD. On Linux, passing file descriptors from one process to another is handled
by the kernel, so we reverted ClamOnAcc to use standard system calls for socket
communication when FD-passing is enabled. Fixed a ClamOnAcc stack
corruption issue on some systems when using an older version of libcurl. Patch
courtesy of Emilio Pozuelo Monfort. Allow ClamScan and ClamDScan scans to
proceed even if the realpath lookup failed. This alleviates an issue on Windows
scanning files hosted on file-systems that do not support the
GetMappedFileNameW() API, such as on ImDisk RAM-disks. Fixed FreshClam's
--on-update-execute=EXIT_1 temporary directory cleanup issue. ClamD's log
output and VirusEvent feature now provide the scan target's file path instead of
a file descriptor. The ClamD socket API for submitting a scan by FD-passing
doesn't include a file path. This feature works by looking up the file path by
the file descriptor. This feature works on Mac and Linux but is not yet
implemented for other UNIX operating systems. FD-passing is not available for
Windows. Fixed an issue where FreshClam database validation didn't work
correctly when run in daemon mode on Linux/Unix. Fixed scan speed
performance issues accidentally introduced in ClamAV 0.103.0 caused by hashing
file maps more than once when parsing a file as a new type, and caused by
frequent scanning of non-HTML text data with the HTML parser. Other
improvements Scanning JPEG, TIFF, PNG and GIF files will no longer return
"parse" errors when file format validation fails. Instead, the scan will alert
with the "Heuristics.Broken.Media" signature prefix and a descriptive suffix to
indicate the issue, provided that the "alert broken media" feature is enabled.
GIF format validation will no longer fail if the GIF image is missing the
trailer byte, as this appears to be a relatively common issue in otherwise
functional GIFs. Added a TIFF dynamic configuration (DCONF) option that was
missing. This will allow us to disable TIFF format validation via signature
database update in the event that it proves to be problematic. This feature
already exists for many other file types.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 7 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.1-3
- clamav-freshclam.service: Standard output type syslog is obsolete (#1933977)
- Quiet proxy on stdout (#1814698)
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.103.1-2
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Wed Feb 17 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.1-1
- Update to 0.103.1
* Wed Jan 27 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.0-3
- Add upstream patch clamonacc: Fix stack buffer overflow with old curl
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.103.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1814698 - freshclam --quiet returns proxy on stdout
https://bugzilla.redhat.com/show_bug.cgi?id=1814698
[ 2 ] Bug #1909184 - clamdscan in 0.103.0 version seems to consume too much memory
https://bugzilla.redhat.com/show_bug.cgi?id=1909184
[ 3 ] Bug #1933977 - clamav-freshclam.service "Standard output type syslog is obsolete"
https://bugzilla.redhat.com/show_bug.cgi?id=1933977
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 8 Update: mlt-6.24.0-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-899e72019f
2021-03-23 01:52:36.297344
--------------------------------------------------------------------------------
Name : mlt
Product : Fedora EPEL 8
Version : 6.24.0
Release : 3.el8
URL : http://www.mltframework.org/
Summary : Toolkit for broadcasters, video editors, media players, transcoders
Description :
MLT is an open source multimedia framework, designed and developed for
television broadcasting.
It provides a toolkit for broadcasters, video editors,media players,
transcoders, web streamers and many more types of applications. The
functionality of the system is provided via an assortment of ready to use
tools, xml authoring components, and an extendible plug-in based API.
--------------------------------------------------------------------------------
Update Information:
Add MLT and movit to epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mlt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 8 Update: movit-1.6.3-2.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-899e72019f
2021-03-23 01:52:36.297344
--------------------------------------------------------------------------------
Name : movit
Product : Fedora EPEL 8
Version : 1.6.3
Release : 2.el8
URL : https://movit.sesse.net
Summary : GPU video filter library
Description :
Movit is a library for video filters. It uses the GPU present in many
computers to accelerate computation of common filters and
transitions, facilitating real-time HD video editing.
This package contains the Movit shared library.
--------------------------------------------------------------------------------
Update Information:
Add MLT and movit to epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update movit' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 7 Update: movit-1.5.3-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-baaf4e2515
2021-03-22 00:37:17.004638
--------------------------------------------------------------------------------
Name : movit
Product : Fedora EPEL 7
Version : 1.5.3
Release : 2.el7
URL : https://movit.sesse.net
Summary : GPU video filter library
Description :
Movit is a library for video filters. It uses the GPU present in many
computers to accelerate computation of common filters and
transitions, facilitating real-time HD video editing.
This package contains the Movit shared library.
--------------------------------------------------------------------------------
Update Information:
movit with SDL1 for now and MLT 6.4.1 with movit and FTBFS fixed
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update movit' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 7 Update: mlt-6.4.1-13.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-baaf4e2515
2021-03-22 00:37:17.004638
--------------------------------------------------------------------------------
Name : mlt
Product : Fedora EPEL 7
Version : 6.4.1
Release : 13.el7
URL : http://www.mltframework.org/
Summary : Toolkit for broadcasters, video editors, media players, transcoders
Description :
MLT is an open source multimedia framework, designed and developed for
television broadcasting.
It provides a toolkit for broadcasters, video editors,media players,
transcoders, web streamers and many more types of applications. The
functionality of the system is provided via an assortment of ready to use
tools, xml authoring components, and an extendible plug-in based API.
--------------------------------------------------------------------------------
Update Information:
movit with SDL1 for now and MLT 6.4.1 with movit and FTBFS fixed
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-13
- Build with BR movit
- Enable vorbis because user can not have mlt-freeworld
* Sat Nov 3 2018 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-12
- Fix epel7 build: use old swig, not BR movit and fix build error
"Qt requires C++11 support" with CXXFLAGS="-std=c++11 -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic"
* Wed Jan 31 2018 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-11
- Rebuild (movit-1.6.0)
* Tue Jan 30 2018 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-10
- Add vid.stab support
- Enable movit support
* Mon Nov 20 2017 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-9
- Fix one crash on exit (#1497386)
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4.1-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Mar 3 2017 S��rgio Basto <sergio(a)serjux.com> - 6.4.1-6
- Rebuild (opencv)
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mlt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
[SECURITY] Fedora EPEL 7 Update: nagios-4.4.6-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-04cc5bcb08
2021-03-22 00:37:17.004626
--------------------------------------------------------------------------------
Name : nagios
Product : Fedora EPEL 7
Version : 4.4.6
Release : 4.el7
URL : https://www.nagios.org/projects/nagios-core/
Summary : Host/service/network monitoring program
Description :
Nagios is a program that will monitor hosts and services on your
network. It has the ability to send email or page alerts when a
problem arises and when a problem is resolved. Nagios is written
in C and is designed to run under Linux (and some other *NIX
variants) as a background process, intermittently running checks
on various services that you specify.
The actual service checks are performed by separate "plugin" programs
which return the status of the checks to Nagios. The plugins are
available at https://github.com/nagios-plugins/nagios-plugins
This package provides the core program, web interface, and documentation
files for Nagios. Development files are built as a separate package.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping
Update to 4.4.6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 3 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-4
- Add missing require for nagios-plugins-ping
- Fix run path
* Sat Feb 27 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-3
- Require plugins needed for localhost monitoring (#1932297)
* Tue Feb 23 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-2
- Fix systemd unit file permissions #1676334
* Sat Feb 20 2021 Guido Aulisi <guido.aulisi(a)gmail.com> - 4.4.6-1
- Update to 4.4.6
- Fix for CVE-2020-13977 #BZ1849087
- Some spec cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666209 - Nagios cannot start after system reboot because of missing directory
https://bugzilla.redhat.com/show_bug.cgi?id=1666209
[ 2 ] Bug #1829114 - nagios-4.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829114
[ 3 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1849087
[ 4 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1932297
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 7 Update: ifstat-1.1-34.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-59a93a93dd
2021-03-22 00:37:17.004612
--------------------------------------------------------------------------------
Name : ifstat
Product : Fedora EPEL 7
Version : 1.1
Release : 34.el7
URL : http://gael.roualland.free.fr/ifstat/
Summary : Interface statistics
Description :
ifstat(1) is a little tool to report interface activity like vmstat/iostat do.
In addition, ifstat can poll remote hosts through SNMP if you have the ucd-snmp
library. It will also be used for localhost if no other known method works (You
need to have snmpd running for this though).
--------------------------------------------------------------------------------
Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ifstat' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 7 Update: yad-8.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-095382d675
2021-03-22 00:37:17.004535
--------------------------------------------------------------------------------
Name : yad
Product : Fedora EPEL 7
Version : 8.0
Release : 1.el7
URL : http://sourceforge.net/projects/yad-dialog/
Summary : Display graphical dialogs from shell scripts or command line
Description :
Yad (yet another dialog) is a fork of zenity with many improvements, such as
custom buttons, additional dialogs, pop-up menu in notification icon and more.
--------------------------------------------------------------------------------
Update Information:
Update to 8.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 8.0-1
- Update to 8.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update yad' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 8 Update: perl-Net-SMTPS-0.10-4.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-5fff87ca7a
2021-03-22 00:31:04.256856
--------------------------------------------------------------------------------
Name : perl-Net-SMTPS
Product : Fedora EPEL 8
Version : 0.10
Release : 4.el8
URL : https://metacpan.org/release/Net-SMTPS
Summary : SSL/STARTTLS support for Net::SMTP
Description :
This module implements a wrapper for Net::SMTP, enabling over-SSL/STARTTLS
support. This module inherits all the methods from Net::SMTP. You may use
all the friendly options that came bundled with Net::SMTP. You can control
the SSL usage with the options of new() constructor method. 'doSSL' option
is the switch, and, If you would like to control detailed SSL settings, you
can set SSL_* options that are brought from IO::Socket::SSL. Please see the
document of IO::Socket::SSL about these options detail.
--------------------------------------------------------------------------------
Update Information:
This package contains the Perl module Net::SMTPS, which implements a wrapper for
Net::SMTP, enabling over-SSL/STARTTLS support.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933843 - Please add perl-Net-SMTPS to epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1933843
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Net-SMTPS' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora EPEL 8 Update: log4cxx-0.10.0-31.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-5a24a424b9
2021-03-22 00:31:04.256846
--------------------------------------------------------------------------------
Name : log4cxx
Product : Fedora EPEL 8
Version : 0.10.0
Release : 31.el8
URL : http://logging.apache.org/log4cxx/index.html
Summary : A port to C++ of the Log4j project
Description :
Log4cxx is a popular logging package written in C++. One of its distinctive
features is the notion of inheritance in loggers. Using a logger hierarchy it
is possible to control which log statements are output at arbitrary
granularity. This helps reduce the volume of logged output and minimize the
cost of logging.
--------------------------------------------------------------------------------
Update Information:
Initial EPEL package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1908926 - Please build log4cxx for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1908926
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update log4cxx' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month