[SECURITY] Fedora EPEL 7 Update: sympa-6.2.62-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-3f4ec3ba2a
2021-05-16 02:25:42.653552
--------------------------------------------------------------------------------
Name : sympa
Product : Fedora EPEL 7
Version : 6.2.62
Release : 1.el7
URL : http://www.sympa.org
Summary : Powerful multilingual List Manager
Description :
Sympa is scalable and highly customizable mailing list manager. It
can cope with big lists (200,000 subscribers) and comes with a
complete (user and admin) Web interface. It is internationalized,
and supports the us, fr, de, es, it, fi, and chinese locales. A
scripting language allows you to extend the behavior of commands.
Sympa can be linked to an LDAP directory or an RDBMS to create
dynamic mailing lists. Sympa provides S/MIME-based authentication
and encryption.
--------------------------------------------------------------------------------
Update Information:
- Update to 6.2.62. See upstream release notes : https://github.com/sympa-
community/sympa/blob/6.2.62/NEWS.md - Fixes CVE-2020-26880.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Xavier Bachelot <xavier(a)bachelot.org> 6.2.62-1
- Update to 6.2.62
- Fixes CVE-2020-26880 (RHBZ#1886232 - RHBZ#1886233)
- Unbundle jquery-ui
- Unbundle jquery on EL8
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 6.2.60-2.1
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Wed Feb 17 2021 Xavier Bachelot <xavier(a)bachelot.org> 6.2.60-2
- Prepare for jquery-ui retirement in F34
- Remove conditionals for F31
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.60-1.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1886232 - CVE-2020-26880 sympa: local privilege escalation by modifying sympa.conf configuration file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1886232
[ 2 ] Bug #1886233 - CVE-2020-26880 sympa: local privilege escalation by modifying sympa.conf configuration file [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1886233
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update sympa' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: xrdp-0.9.16-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-59d1c3d1c6
2021-05-16 02:16:11.487989
--------------------------------------------------------------------------------
Name : xrdp
Product : Fedora EPEL 8
Version : 0.9.16
Release : 1.el8
URL : http://www.xrdp.org/
Summary : Open source remote desktop protocol (RDP) server
Description :
xrdp provides a fully functional RDP server compatible with a wide range
of RDP clients, including FreeRDP and Microsoft RDP client.
--------------------------------------------------------------------------------
Update Information:
Release notes for xrdp v0.9.15 (2020/12/28) New features - Allow token sign in
without autologon for SSO (#1667 #1668) - Norwegian keyboard support (#1675) -
Improved config support for chansrv (#1635) - Unified chansrv, sesman and
libxrdp logging (#1633 #1708 #1738) - thanks to @aquesnel - Support SUSE move to
/usr/etc (#1702) - Parameters may now be specified for user-specified shell
(#1270 #1695) - xrdp executables now allow alternative config files to be
specified with -c (#1588 #1650 #1651) - sesrun improvements (#1741) - Drive
redirection location can now be specified (#1048) - Now compiles on RISC-V
(#1761) Bug fixes - Additional buffer overflow checks (#1662) - FUSE support
now builds on 32-bit platforms (#1682) - genkeymap array size conflict fixed
(#1691) - Buffering issue with neutrinordp over a slow link fixed (#1608 1634) -
Various documentation fixes (#1704 #1741 #1755 #1759) - Prevent PAM info message
from causing authentication failure (#1727) - Cosmetic fixes for minor issues
(#1751 #1755 #1749) - Try harder to clean up socket files on session exit (#1740
#1756) - xrdp-chansrv become defunct in docker while file copy (#1658) Internal
changes - Compilation warnings with newer compilers (#1659 #1680) -
Continuation Integration checks on 32-bit platforms now include FUSE support
(#1682) - Continuation Integration builds now default to the Ubuntu Focal
platform (#1666) - FUSE type tidy-ups (#1686) - Switch from Travis CI to GitHub
Actions (#1728 #1732) - Easier to set up console logging for utilities (#1711)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 1 2021 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.16-1
- Bump up to 0.9.16
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:0.9.15-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xrdp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: lazarus-2.0.12-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-a252ab9b09
2021-05-16 02:16:11.487978
--------------------------------------------------------------------------------
Name : lazarus
Product : Fedora EPEL 8
Version : 2.0.12
Release : 1.el8
URL : http://www.lazarus-ide.org/
Summary : Lazarus Component Library and IDE for Freepascal
Description :
A free and open-source RAD tool for Free Pascal using the Lazarus
Component Library - LCL, which is also included in this package.
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.12
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 2.0.12-1
- Update to 2.0.12
- Use baserelease macro to fix the rpmdev-bumspec issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1946343 - Lazarus 2.0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1946343
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lazarus' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: genders-1.27.2-6.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-0596d03e62
2021-05-16 02:16:11.487968
--------------------------------------------------------------------------------
Name : genders
Product : Fedora EPEL 8
Version : 1.27.2
Release : 6.el8
URL : https://github.com/chaos/genders
Summary : Static cluster configuration database
Description :
Genders is a static cluster configuration database used for cluster
configuration management. It is used by a variety of tools and
scripts for management of large clusters. The genders database is
typically replicated on every node of the cluster. It describes the
layout and configuration of the cluster so that tools and scripts can
sense the variations of cluster nodes. By abstracting this information
into a plain text file, it becomes possible to change the
configuration of a cluster by modifying only one file.
--------------------------------------------------------------------------------
Update Information:
Add genders to EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update genders' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
[SECURITY] Fedora EPEL 8 Update: libopenmpt-0.5.8-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-a3a4866065
2021-05-16 02:16:11.487957
--------------------------------------------------------------------------------
Name : libopenmpt
Product : Fedora EPEL 8
Version : 0.5.8
Release : 1.el8
URL : https://lib.openmpt.org/libopenmpt/
Summary : C/C++ library to decode tracker music module (MOD) files
Description :
libopenmpt is a cross-platform C++ and C library to decode tracked music
files (modules) into a raw PCM audio stream.
libopenmpt is based on the player code of the OpenMPT project (Open
ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is
developed in the same source code repository as OpenMPT.
--------------------------------------------------------------------------------
Update Information:
libopenmpt 0.5.8 (2021-04-11) ============================= * [Sec] Possible
null-pointer dereference read caused by a sequence of `openmpt::module::read`,
`openmpt::module::set_position_order_row` pointing to an invalid pattern, and
another `openmpt::module::read` call. To trigger the crash, pattern 0 must not
exist in the file and the tick speed before the position jump must be lower than
the initial speed of the module. (r14530) * [Bug] `libopenmpt.pc` did not list
required system libraries `ole32.lib` and `rpcrt4.lib` on Windows in
`Libs.Private` field for static builds. * [Bug] libopenmpt 0.5.7 broke seeking
in some subsongs. * The built-in LFO plugin did not load the correct initial
LFO frequency. * IT command S7x (instrument control) is now supported when
seeking with sample sync enabled. * libopenmpt_ext `play_note` was cutting of
channels even when there were plenty of free channels to use. * mpg123: Update
to v1.26.5 (2021-03-22).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.5.8-1
- update to 0.5.8 (security release for the 0.5 series)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libopenmpt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: rpminspect-data-fedora-1.5-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-d4b9b0b98c
2021-05-16 02:16:11.487946
--------------------------------------------------------------------------------
Name : rpminspect-data-fedora
Product : Fedora EPEL 8
Version : 1.5
Release : 1.el8
URL : https://github.com/rpminspect/rpminspect-data-fedora
Summary : Build deviation compliance tool data files
Description :
Vendor specific configuration file for rpminspect and data files used by
the inspections provided by librpminspect.
--------------------------------------------------------------------------------
Update Information:
Upgrade to rpminspect-1.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 David Cantrell <dcantrell(a)redhat.com> - 1.5-1
- Add a 'rawhide' profile to disable a lot of inspections
- Add missing ID value to the npsl license entry
- /usr/lib/dracut and /usr/lib/udev are valid paths
- Update fedora.yaml with all current configuration file changes
- Explain size_threshold can be 'info'
* Wed Feb 24 2021 David Cantrell <dcantrell(a)redhat.com> - 1.4-1
- Increment the development tree version to 1.4.
- Document the release process and add another helper target to the
Makefile
- 'make koji' skips branches that lack Koji build targets
- Set VENDORBLD to the vendor build too in submit-koji-builds.sh
- Add NPSL
- Update fedora.yaml for the new 'badfuncs' inspection.
- The badfuncs inspection is in rpminspect >= 1.3, update spec file
- Add MIT-0 license
- Add runpath section to fedora.yaml
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rpminspect-data-fedora' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: rpminspect-1.5-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-fc6f7264e7
2021-05-16 02:16:11.487931
--------------------------------------------------------------------------------
Name : rpminspect
Product : Fedora EPEL 8
Version : 1.5
Release : 1.el8
URL : https://github.com/rpminspect/rpminspect
Summary : Build deviation compliance tool
Description :
Build deviation and compliance tool. This program runs a number of tests
against one or two builds of source RPM files. The built artifacts are
inspected and compared to report changes and validate policy compliance
against the defined parameters.
--------------------------------------------------------------------------------
Update Information:
Upgrade to rpminspect-1.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 David Cantrell <dcantrell(a)redhat.com> - 1.5-1
- Begin work on version 1.5
- Use llabs() instead of labs() in the filesize inspection
- Improve has invalid execstack flags reporting
- Use long unsigned int to report size changes in patches
- Fix some errors in the changedfiles inspection
- Update the changedfiles test cases
- Check DT_SONAME in is_elf_shared_library()
- Skip debuginfo and debugsource files in abidiff
- Make sure abidiff test cases add a DT_SONAME to the test lib
- Report INFO level for patches findings by default
- Python black fixes in test/test_abidiff.py
- Update the test/test_patches.py cases for patches changes
- Generate regular changelog in utils/srpm.h
- Skip branches without targets in submit-koji-builds.sh
- Fedora and CentOS systems in ci need diffstat
- opensuse-leap CI job requires diffstat
- Fix the Debian CI jobs in GitHub Actions
- Fix and enable the Ubuntu extra-ci job in GitHub Actions
- Use pip instead of pip3 for the Ubuntu command
- Use apt-get -y install in
- Enable the opensuse-tumbleweed GHA job again
- Make sure the Gentoo GHA job has diffstat
- Get the Arch Linux GHA job working again
- Use ubuntu:latest for the ubuntu GHA image
- Simplify the utils/determine-os.sh script
- Update license table in README.md
- Allow any number of builds specified for fetch only mode
- Handle old or broken versions of libmagic in changedfiles
- Update GitHub Action status badges in README.md
- Fix $(OS) check in the Makefile
- Fix the ubuntu GitHub Actions extra-ci job
- Make sure the centos8 job has git available before cloning
- Change strappend() to work as a variadic function
- Use json_tokener_parse_ex() to get better error reporting
- Fix reading of the javabytecode block in the config file
- Catch missing/losing -fPIC correctly on .a ELF objects (#352)
- Refactor elf_archive_tests() and its helper functions
- Followup fix for find_no_pic, find_pic, and find_all
- Install cpp-coveralls using pacman on Arch Linux
- Install cpp-coveralls using pip on Arch Linux
- Install cpp-coveralls in pre.sh on Arch Linux
- Install required Python modules in pre.sh on Arch Linux
- Do not upgrade pip on Arch Linux, go back to using pip.txt
- Drop DEBUG_PRINT from source generated by pic_bits.sh
- Do not run apt-get update as a second time on Debians systems
- The lost PIC tests need to invoke gcc with -fno-PIC
- Update the OpenSUSE Tumbleweed files, but disable it anyway
- Define inspection_ignores in struct rpminspect
- Clean up the config file section reading code
- Add add_ignore() to init.c
- Fix fetch only mode download directory
- Stub out libcurl download progress callback function
- Perform symbolic owner and group matching in ownership (#364)
- Restrict download_progress() to systems with CURLOPT_XFERINFOFUNCTION
- Read per-inspection ignore lists from the config file.
- Add commented out per-inspection ignore blocks
- Implement per-inspection path ignore support (#351)
- Report annocheck failures correctly in librpminspect.
- Note all regular expression settings use regex(7) syntax
- Allow size_threshold: info in the config file (#261)
- Check ignore list in files for path prefixes to ignore (#360)
- Support a list of expected empty RPMs in the config file (#355)
- Call mparse_reset() before mparse_readfd()
- Do not crash with the -c option specifies a non-existent file
- Update TODO list
- Make sure brp-compress is disabled in test_manpage.py
- Require/Recommend /usr/bin/annocheck
- Note size_threshold can be the keyword info
- Ensure ctxt->lastError.message is not NULL before strdup (#382)
- Handle corrupt compressed files in changedfiles (#382)
- Disable debugging output for the ignore lists in init.c
- Drop debugging output in the xml inspection
- Remove what working directories we can
- Correctly find icons for desktop files in subpackages (#367)
- Followup to the Icon= check in the desktop inspection (#367)
- BuildRequires libmandoc-devel >= 1.14.5
- Manually install mandoc on centos7 for now
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rpminspect' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: tmt-1.5.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-955d05bf7e
2021-05-16 02:16:11.487859
--------------------------------------------------------------------------------
Name : tmt
Product : Fedora EPEL 8
Version : 1.5.0
Release : 1.el8
URL : https://github.com/psss/tmt
Summary : Test Management Tool
Description :
The tmt Python module and command line tool implement the test
metadata specification (L1 and L2) and allows easy test execution.
This package contains the command line tool.
--------------------------------------------------------------------------------
Update Information:
Run progress, tmt clean, docs enhancements...
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 1.5.0-1
- Enable and document `pre-commit` and `autopep8`
- Reorganize feature stories, fix title duplication
- Prepare/install story for package development.
- Add package preparation scenarios from Fedora CI
- Prepare/install story for released packages
- Add new stories related to package preparation
- Fix login not working for cloud images
- Work around a seccomp podman issue on centos-8
- Tag multihost tests during import from Makefile
- Adjust the simple test for ansible prepare
- Remove hardcoded ansible_python_interpreter=auto
- Fix lint and use it on the tmt repo itself
- Obsolete the minute provision plugin
- Update the documentation for contributors
- Do not assert installed packages for recommend
- Show link to the full debug log in the html report
- Implement tmt clean command
- Require a newer fmf which supports storing data
- Allow to specify port in provision.connect
- Surround classes and functions with 2 blank lines
- Fix order of imports, sort them alphabetically
- Update the provision step hardware specification
- Fix tmt plan lint for multiple configurations
- Add tmt status examples section
- Add a context adjust example for the prepare step
- Adjust the git suffix stripping for known forges
- Strip git suffix from pagure/gitlab/github repos
- Enable install plans for pull request testing
- Adjust the essential attributes description
- Document the essential class attributes
- Improve the prepare step documentation
- Correctly convert relevancy with the `!=` operator
- Print note in report.html if it exists
- Add note about error for beakerlib results
- Adjust progress bar for the internal executor
- Add test progress bar to non-verbose mode
- Adjust the attribute linting for tests
- Lint attribute names for test
- Human friendly names for VMs
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tmt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 7 Update: siege-4.0.9-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-744b8555f3
2021-05-14 18:57:49.204272
--------------------------------------------------------------------------------
Name : siege
Product : Fedora EPEL 7
Version : 4.0.9
Release : 1.el7
URL : http://www.joedog.org/JoeDog/Siege
Summary : HTTP regression testing and benchmarking utility
Description :
Siege is an HTTP regression testing and benchmarking utility.
It was designed to let web developers measure the performance of their code
under duress, to see how it will stand up to load on the internet.
Siege supports basic authentication, cookies, HTTP and HTTPS protocols.
It allows the user hit a web server with a configurable number of concurrent
simulated users. Those users place the web-server "under siege."
--------------------------------------------------------------------------------
Update Information:
2021/04/17 Jeffrey Fulmer http://www.joedog.org/support/ * src/cookie.c
Added NULL checks for getters * version.c Version increment: 4.0.9
2021/04/17 Vedran Miletic https://github.com/vedranmiletic * src/main.c
Prettified json
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Denis Fateyev <denis(a)fateyev.com> - 4.0.9-1
- Update to 4.0.9 (#1950658)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950658 - siege-4.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1950658
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update siege' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years