[SECURITY] Fedora EPEL 7 Update: slurm-20.11.7-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-7e9a7ecfb4
2021-06-09 02:20:56.152069
--------------------------------------------------------------------------------
Name : slurm
Product : Fedora EPEL 7
Version : 20.11.7
Release : 3.el7
URL : https://slurm.schedmd.com/
Summary : Simple Linux Utility for Resource Management
Description :
Slurm is an open source, fault-tolerant, and highly scalable
cluster management and job scheduling system for Linux clusters.
Components include machine status, partition management,
job management, scheduling and accounting modules.
--------------------------------------------------------------------------------
Update Information:
Move auth_jwt.so plugin to base package ---- - Update to 20.11.7 - Closes
security issue CVE-2021-31215
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 24 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.7-3
- Move auth_jwt.so plugin to base package (#1947878)
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 20.11.7-2
- Perl 5.34 rebuild
* Sat May 15 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.7-1
- Update to 20.11.7
- Closes security issue CVE-2021-31215
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961071 - CVE-2021-31215 slurm: environment mishandling in PrologSlurmctld or EpilogSlurmctld script may allow remote code execution
https://bugzilla.redhat.com/show_bug.cgi?id=1961071
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update slurm' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
[SECURITY] Fedora EPEL 7 Update: python3-lxml-4.2.5-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-0fec8057df
2021-06-09 02:20:56.152059
--------------------------------------------------------------------------------
Name : python3-lxml
Product : Fedora EPEL 7
Version : 4.2.5
Release : 4.el7
URL : http://lxml.de
Summary : XML processing library combining libxml2/libxslt with the ElementTree API
Description :
lxml is a Pythonic, mature binding for the libxml2 and libxslt libraries. It
provides safe and convenient access to these libraries using the ElementTree It
extends the ElementTree API significantly to offer support for XPath, RelaxNG,
XML Schema, XSLT, C14N and much more. To contact the project, go to the project
home page < or see our bug tracker at case you want to use the current ...
--------------------------------------------------------------------------------
Update Information:
- Add patch to fix mXSS due to the use of improper parser (#1901633) - Add
patch to fix missing input sanitization for formaction HTML5 attributes that may
lead to XSS (#1941534)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 24 2021 Robert Scheck <robert(a)fedoraproject.org> - 4.2.5-4
- Add patch to fix mXSS due to the use of improper parser (#1901633)
- Add patch to fix missing input sanitization for formaction HTML5
attributes that may lead to XSS (#1941534)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1901633 - CVE-2020-27783 python-lxml: mXSS due to the use of improper parser
https://bugzilla.redhat.com/show_bug.cgi?id=1901633
[ 2 ] Bug #1941534 - CVE-2021-28957 python-lxml: missing input sanitization for formaction HTML5 attributes may lead to XSS
https://bugzilla.redhat.com/show_bug.cgi?id=1941534
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-lxml' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
[SECURITY] Fedora EPEL 7 Update: caribou0-0.4.21-26.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-17f170d38c
2021-06-09 02:20:56.152049
--------------------------------------------------------------------------------
Name : caribou0
Product : Fedora EPEL 7
Version : 0.4.21
Release : 26.el7
URL : https://wiki.gnome.org/Projects/Caribou
Summary : A simplified in-place on-screen keyboard
Description :
Caribou is a text entry application that currently manifests itself as
a simplified in-place on-screen keyboard.
--------------------------------------------------------------------------------
Update Information:
caribou: configurable on screen keyboard crashes with scanning mod
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 24 2021 Pat Riehecky <riehecky(a)fnal.gov> - 0.4.21-26
- Patch to fix crash (rhbz 1962836)
- sync up with Fedora sources
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1962836 - CVE-2021-3567 caribou: segfault on pressing �� since Xorg CVE-2020-25712 fix
https://bugzilla.redhat.com/show_bug.cgi?id=1962836
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update caribou0' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
Fedora EPEL 7 Update: python-productmd-1.33-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-ec03eabb69
2021-06-09 02:20:56.152037
--------------------------------------------------------------------------------
Name : python-productmd
Product : Fedora EPEL 7
Version : 1.33
Release : 1.el7
URL : https://github.com/release-engineering/productmd
Summary : Library providing parsers for metadata related to OS installation
Description :
Python library providing parsers for metadata related to composes
and installation media.
--------------------------------------------------------------------------------
Update Information:
New upstream release with support for setting main variant in multivariant
treeinfo files.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 24 2021 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.33-1
- New upstream release 1.33
* Fri Apr 16 2021 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.32-1
- New upstream release
* Mon Feb 8 2021 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.31-1
- New upstream release
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.30-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-productmd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
Fedora EPEL 7 Update: nnn-4.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-1384af4049
2021-06-09 02:20:56.151984
--------------------------------------------------------------------------------
Name : nnn
Product : Fedora EPEL 7
Version : 4.0
Release : 1.el7
URL : https://github.com/jarun/nnn
Summary : The missing terminal file browser for X
Description :
nnn is probably the fastest and most resource-sensitive (with all
its capabilities) file browser you have ever used. It's extremely flexible
too - integrates with your DE and favourite GUI utilities, works with
the desktop opener, supports bookmarks, has smart navigation shortcuts,
navigate-as-you-type mode, disk usage analyzer mode, comprehensive file
details and much more. nnn was initially forked from noice but is
significantly different today.
Cool things you can do with nnn:
- open any file in the default desktop application or a custom one
- navigate-as-you-type (search-as-you-type enabled even on directory switch)
- check disk usage with number of files in current directory tree
- run desktop search utility (gnome-search-tool or catfish) in any directory
- copy absolute file paths to clipboard, spawn a terminal and use the paths
- navigate instantly using shortcuts like ~, -, & or handy bookmarks
- use cd ..... at chdir prompt to go to a parent directory
- detailed file stats, media info, list and extract archives
- pin a directory you may need to revisit and jump to it anytime
- lock the current terminal after a specified idle time
- change directory on exit
--------------------------------------------------------------------------------
Update Information:
Update to 4.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 24 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 4.0-1
- Update to 4.0
- Close: rhbz#1949285
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1949285 - nnn-4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1949285
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nnn' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
Fedora EPEL 8 Update: gdal-3.0.4-8.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-c350944578
2021-06-09 02:14:01.602636
--------------------------------------------------------------------------------
Name : gdal
Product : Fedora EPEL 8
Version : 3.0.4
Release : 8.el8
URL : http://www.gdal.org
Summary : GIS file format library
Description :
Geospatial Data Abstraction Library (GDAL/OGR) is a cross platform
C++ translator library for raster and vector geospatial data formats.
As a library, it presents a single abstract data model to the calling
application for all supported formats. It also comes with a variety of
useful commandline utilities for data translation and processing.
It provides the primary data access engine for many applications.
GDAL/OGR is the most widely used geospatial data access library.
--------------------------------------------------------------------------------
Update Information:
Rebuild for poppler (EL8.4)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 4 2021 Orion Poplawski <orion(a)nwra.com> - 3.0.4-8
- Rebuild for poppler 20.11 (EL 8.4) (bz#1962667)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950024 - Rebuild for Centos Stream and RHEL 8.4
https://bugzilla.redhat.com/show_bug.cgi?id=1950024
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gdal' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
Fedora EPEL 8 Update: libretls-3.3.3p1-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-7f7a0370ba
2021-06-09 02:14:01.602624
--------------------------------------------------------------------------------
Name : libretls
Product : Fedora EPEL 8
Version : 3.3.3p1
Release : 1.el8
URL : https://git.causal.agency/libretls/about/
Summary : Port of libtls from LibreSSL to OpenSSL
Description :
LibreTLS is a port of libtls from LibreSSL to OpenSSL. OpenBSD's libtls is a
new TLS library, designed to make it easier to write foolproof applications.
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.3.3p1 (#1964579)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Robert Scheck <robert(a)fedoraproject.org> 3.3.3p1-1
- Upgrade to 3.3.3p1 (#1964579)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964579 - libretls-3.3.3p1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1964579
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libretls' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
Fedora EPEL 8 Update: python-enlighten-1.10.1-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-1427c9aa45
2021-06-09 02:14:01.602613
--------------------------------------------------------------------------------
Name : python-enlighten
Product : Fedora EPEL 8
Version : 1.10.1
Release : 1.el8
URL : https://github.com/Rockhopper-Technologies/enlighten
Summary : Enlighten Progress Bar
Description :
Enlighten Progress Bar is console progress bar module for Python.
The main advantage of Enlighten is it allows writing to stdout and stderr
without any redirection.
--------------------------------------------------------------------------------
Update Information:
Update to 1.10.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.10.1-1
- Update to 1.10.1
- Drop EL6
- Fix dependencies
* Fri Apr 2 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.9.0-2
- Update EL7 patch
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-enlighten' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
[SECURITY] Fedora EPEL 8 Update: chromium-90.0.4430.212-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-c734316809
2021-06-09 02:14:01.602594
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora EPEL 8
Version : 90.0.4430.212
Release : 1.el8
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
Update to 90.0.4430.212. Fixes: CVE-2021-30506 CVE-2021-30507 CVE-2021-30508
CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513
CVE-2021-30514 CVE-2021-30515 CVE-2021-30516 CVE-2021-30517 CVE-2021-30518
CVE-2021-30519 CVE-2021-30520
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2021 Tom Callaway <spot(a)fedoraproject.org> - 90.0.4430.212-1
- update to 90.0.4430.212
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update chromium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months
Fedora EPEL 8 Update: python-wcwidth-0.2.5-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-92d4546bfc
2021-06-09 02:14:01.602583
--------------------------------------------------------------------------------
Name : python-wcwidth
Product : Fedora EPEL 8
Version : 0.2.5
Release : 3.el8
URL : https://github.com/jquast/wcwidth
Summary : Measures number of Terminal column cells of wide-character codes
Description :
This API is mainly for Terminal Emulator implementors, or those writing programs
that expect to interpreted by a terminal emulator and wish to determine the
printable width of a string on a Terminal.
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.5
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 1 2020 Charalampos Stratakis <cstratak(a)redhat.com> - 0.2.5-1
- Update to 0.2.5 (#1850238)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-wcwidth' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 11 months