--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-31b8b3614c
2022-12-04 00:42:21.608440
--------------------------------------------------------------------------------
Name : xclock
Product : Fedora EPEL 9
Version : 1.1.1
Release : 2.el9
URL : https://www.x.org
Summary : The classic X Window System clock utility
Description :
xclock is the classic X Window System clock utility. It displays
the time in analog or digital form, continuously updated at a
frequency which may be specified by the user.
--------------------------------------------------------------------------------
Update Information:
xclock is the classic X Window System clock utility. It displays the time in
analog or digital form, continuously updated at a frequency which may be
specified by the user.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Apr 8 2022 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.1.1-1
- New upstream release 1.1.1 (rhbz#2071460)
* Tue Apr 5 2022 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.1.0-1
- New upstream release 1.1.0
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.9-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.9-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Thu Apr 8 2021 Peter Hutterer <peter.hutterer(a)redhat.com> - 1.0.9-2
- Fix Obsoletes line to actually obsolete the -30 xorg-x11-apps (#1947245)
* Tue Mar 2 2021 Peter Hutterer <peter.hutterer(a)redhat.com> 1.0.9-1
- Split xclock out from xorg-x11-apps into a separate package (#1933940)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2147368 - Please build xclock for EPEL 9
https://bugzilla.redhat.com/show_bug.cgi?id=2147368
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xclock' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-b871db6e37
2022-12-03 04:03:32.169937
--------------------------------------------------------------------------------
Name : fedora-license-data
Product : Fedora EPEL 7
Version : 1.8
Release : 1.el7
URL : https://gitlab.com/fedora/legal/fedora-license-data
Summary : Fedora Linux license data
Description :
This project contains information about licenses used in the Fedora
Linux project. Licenses are categorized by their approval or
non-approval and may include additional notes. The data files provide
mappings between the SDPX license expressions and the older Fedora
license legacy-abbreviations.
The project also intends to publish the combined license information
in a number of data file formats and provide a package in Fedora for
other projects to reference, such as package building tools and
package checking tools.
The Fedora Legal team is responsible for this project.
--------------------------------------------------------------------------------
Update Information:
- Add Public Domain license text used in libselinux - Make LicenseRef for GPLv2
with UPX exception more SPDX-confrmant - Add the equivalent LicenseRef-UPX and
LicenseRef-GPL-2.0-or-later WITH UPX
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.8-1
- Add Public Domain license text used in libselinux (plautrba(a)redhat.com)
- Make LicenseRef for GPLv2 with UPX exception more SPDX-confrmant
(rfontana(a)redhat.com)
- Add the equivalent LicenseRef-UPX and LicenseRef-GPL-2.0-or-later WITH UPX
(rfontana(a)redhat.com)
* Wed Nov 2 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.7-1
- redefine JSON format
- Also use rich-deps on EL 8 (miro(a)hroncok.cz)
- Once again, abandon the toml module, use tomllib/tomli/tomli-w instead
(miro(a)hroncok.cz)
- Fix typos in license review template (dcavalca(a)fedoraproject.org)
- rename [fedora]name to [fedora]legacy-name
- rename [fedora]abbreviation to [fedora]legacy-abbreviation
- Revise toml for GPL-2.0-or-later WITH x11vnc-openssl-exception
(rfontana(a)redhat.com)
- Add FSFULLRWD (rfontana(a)redhat.com)
- Add OFL-1.1-RFN as allowed-fonts (rfontana(a)redhat.com)
- use tomllib instead of toml
- document availablity of fedora-licenses.json artifact
* Thu Oct 13 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.6-1
- Add MS-LPL as not-allowed
- Add ISO-8879 to not-allowed with big usage exception
- Delete redundant license info from README.md
- Add LicenseRef-Glyphicons as not-allowed
- Add Spencer-99
- Add LicenseRef-UPX as not-allowed
- Add LicenseRef-STREAM as not-allowed
- Simplify overcomplicated condition to evaluate if a license is approved
- Handle licenses with only SPDX identifier in mkjson.py
* Mon Oct 3 2022 msuchy <msuchy(a)redhat.com> - 1.5-1
- 1.5 release
* Mon Sep 19 2022 msuchy <msuchy(a)redhat.com> - 1.4-1
- 1.4 release
* Mon May 2 2022 David Cantrell <dcantrell(a)redhat.com> - 1.0-1
- Initial build
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fedora-license-data' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-8108a34445
2022-12-03 02:32:39.705068
--------------------------------------------------------------------------------
Name : rr
Product : Fedora EPEL 8
Version : 5.6.0
Release : 2.el8
URL : http://rr-project.org
Summary : Tool to record and replay execution of applications
Description :
rr is a lightweight tool for recording and replaying execution
of applications (trees of processes and threads).
For more information, please visit http://rr-project.org
--------------------------------------------------------------------------------
Update Information:
Update capnproto to version 0.7.1 to address CVE-2022-46149. Dependent packages
were rebuilt for both the fix for the security issue and the capnproto SONAME
bump.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 2 2022 Fabio Valentini <decathorpe(a)gmail.com> - 5.6.0-2
- Rebuild for capnproto 0.7.1 / CVE-2022-46149
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2150075 - CVE-2022-46149 capnproto: out of bounds read when handling a list of lists. [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2150075
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rr' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-8108a34445
2022-12-03 02:32:39.705068
--------------------------------------------------------------------------------
Name : capnproto
Product : Fedora EPEL 8
Version : 0.7.1
Release : 1.el8
URL : https://capnproto.org
Summary : A data interchange format and capability-based RPC system
Description :
Cap���n Proto is an insanely fast data interchange format
and capability-based RPC system. Think JSON, except binary.
Or think Protocol Buffers, except faster. In fact, in benchmarks,
Cap���n Proto is INFINITY TIMES faster than Protocol Buffers.
This package contains the schema compiler and command-line
encoder/decoder tools.
--------------------------------------------------------------------------------
Update Information:
Update capnproto to version 0.7.1 to address CVE-2022-46149. Dependent packages
were rebuilt for both the fix for the security issue and the capnproto SONAME
bump.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 2 2022 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.1-1
- Update to version 0.7.1
- Addresses CVE-2022-46149
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2150075 - CVE-2022-46149 capnproto: out of bounds read when handling a list of lists. [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2150075
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update capnproto' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-da88fe53cf
2022-12-03 02:32:39.705059
--------------------------------------------------------------------------------
Name : advancecomp
Product : Fedora EPEL 8
Version : 2.4
Release : 1.el8
URL : https://www.advancemame.it/
Summary : Recompression utilities for .png, .mng, .zip and .gz files
Description :
AdvanceCOMP contains recompression utilities for your .zip archives,
.png images, .mng video clips and .gz files.
The official site of AdvanceCOMP is:
https://www.advancemame.it
This package contains:
advzip - Recompression and test utility for zip files
advpng - Recompression utility for png files
advmng - Recompression utility for mng files
advdef - Recompression utility for deflate streams in .png, .mng and .gz files
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016, CVE-2022-35017,
CVE-2022-35018, CVE-2022-35019, CVE-2022-35020
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 2.4-1
- Update to 2.4 (close RHBZ#2145023)
- Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016,
CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020
* Thu Nov 24 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 2.3-5
- Identify bundled 7-Zip as ���7zip��� rather than ���7z���
* Thu Nov 24 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 2.3-4
- Add a comment about upstream tests
* Thu Nov 24 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 2.3-3
- Stricter file globs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2127376 - CVE-2022-35014 advancecomp: SEGV via invalid read address
https://bugzilla.redhat.com/show_bug.cgi?id=2127376
[ 2 ] Bug #2127378 - CVE-2022-35015 advancecomp: heap-buffer-overflow in le_uint32_read() in lib/endianrw.h
https://bugzilla.redhat.com/show_bug.cgi?id=2127378
[ 3 ] Bug #2127380 - CVE-2022-35016 advancecomp: heap buffer overflow in data_dup() in data.cc
https://bugzilla.redhat.com/show_bug.cgi?id=2127380
[ 4 ] Bug #2127383 - CVE-2022-35017 advancecomp: heap-buffer-overflow in mng_delta_addition() in mng.c
https://bugzilla.redhat.com/show_bug.cgi?id=2127383
[ 5 ] Bug #2127386 - CVE-2022-35018 advancecomp: SEGV via invalid read memory access
https://bugzilla.redhat.com/show_bug.cgi?id=2127386
[ 6 ] Bug #2127389 - CVE-2022-35019 advancecomp: SEGV via invalid write memory access
https://bugzilla.redhat.com/show_bug.cgi?id=2127389
[ 7 ] Bug #2127394 - CVE-2022-35020 advancecomp: heap buffer overflow via the component inflate()
https://bugzilla.redhat.com/show_bug.cgi?id=2127394
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update advancecomp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-eab213460c
2022-12-03 02:32:39.705048
--------------------------------------------------------------------------------
Name : castxml
Product : Fedora EPEL 8
Version : 0.4.8
Release : 1.el8
URL : https://github.com/CastXML/CastXML
Summary : C-family abstract syntax tree XML output tool
Description :
Parse C-family source files and optionally write a subset of the
Abstract Syntax Tree (AST) to a representation in XML.
Source files are parsed as complete translation units using the clang
compiler. XML output is enabled by the --castxml-gccxml option and
produces a format close to that of gccxml. Future versions of castxml
may support alternative output formats.
--------------------------------------------------------------------------------
Update Information:
CastXML 0.4.8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 23 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.4.8-1
- Update to version 0.4.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2145095 - castxml-0.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2145095
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update castxml' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-3d9b9bb5a7
2022-12-03 02:32:39.705036
--------------------------------------------------------------------------------
Name : fedora-license-data
Product : Fedora EPEL 8
Version : 1.8
Release : 1.el8
URL : https://gitlab.com/fedora/legal/fedora-license-data
Summary : Fedora Linux license data
Description :
This project contains information about licenses used in the Fedora
Linux project. Licenses are categorized by their approval or
non-approval and may include additional notes. The data files provide
mappings between the SDPX license expressions and the older Fedora
license legacy-abbreviations.
The project also intends to publish the combined license information
in a number of data file formats and provide a package in Fedora for
other projects to reference, such as package building tools and
package checking tools.
The Fedora Legal team is responsible for this project.
--------------------------------------------------------------------------------
Update Information:
- Add Public Domain license text used in libselinux - Make LicenseRef for GPLv2
with UPX exception more SPDX-confrmant - Add the equivalent LicenseRef-UPX and
LicenseRef-GPL-2.0-or-later WITH UPX
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.8-1
- Add Public Domain license text used in libselinux (plautrba(a)redhat.com)
- Make LicenseRef for GPLv2 with UPX exception more SPDX-confrmant
(rfontana(a)redhat.com)
- Add the equivalent LicenseRef-UPX and LicenseRef-GPL-2.0-or-later WITH UPX
(rfontana(a)redhat.com)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fedora-license-data' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-9343c36dd7
2022-12-03 02:32:39.704988
--------------------------------------------------------------------------------
Name : icewm
Product : Fedora EPEL 8
Version : 3.2.2
Release : 2.el8
URL : https://ice-wm.org/
Summary : Window manager designed for speed, usability, and consistency
Description :
IceWM is a window manager for the X Window System (freedesktop, XFree86). The
goal of IceWM is speed, simplicity, and not getting in the user's way.
You can install minimal version of IceWM without all optional dependencies:
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 17 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.2.2-1
- chore: Update to 3.2.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update icewm' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-4b56675171
2022-12-03 02:13:15.204200
--------------------------------------------------------------------------------
Name : capnproto
Product : Fedora EPEL 9
Version : 0.10.3
Release : 1.el9
URL : https://capnproto.org
Summary : A data interchange format and capability-based RPC system
Description :
Cap���n Proto is an insanely fast data interchange format
and capability-based RPC system. Think JSON, except binary.
Or think Protocol Buffers, except faster. In fact, in benchmarks,
Cap���n Proto is INFINITY TIMES faster than Protocol Buffers.
This package contains the schema compiler and command-line
encoder/decoder tools.
--------------------------------------------------------------------------------
Update Information:
Update capnproto to version 0.10.3 to address CVE-2022-46149.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 2 2022 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.3-1
- Update to version 0.10.3
- Addresses CVE-2022-46149
* Tue Nov 29 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 0.10.2-1
- Rebase to 0.10.2
- Drop backported patch
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Dec 21 2021 Neal Gompa <ngompa(a)fedoraproject.org> - 0.9.1-1
- Rebase to 0.9.1
- Add patch to fix running tests
- Disable flaky/broken test per upstream guidance
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2149787 - capnproto-0.10.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2149787
[ 2 ] Bug #2150075 - CVE-2022-46149 capnproto: out of bounds read when handling a list of lists. [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2150075
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update capnproto' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------