--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-f6a8bbe365
2023-12-31 00:55:02.285688
--------------------------------------------------------------------------------
Name : xerces-c
Product : Fedora EPEL 8
Version : 3.2.5
Release : 1.el8
URL : http://xml.apache.org/xerces-c/
Summary : Validating XML Parser
Description :
Xerces-C is a validating XML parser written in a portable
subset of C++. Xerces-C makes it easy to give your application the
ability to read and write XML data. A shared library is provided for
parsing, generating, manipulating, and validating XML
documents. Xerces-C is faithful to the XML 1.0 recommendation and
associated standards: XML 1.0 (Third Edition), XML 1.1 (First
Edition), DOM Level 1, 2, 3 Core, DOM Level 2.0 Traversal and Range,
DOM Level 3.0 Load and Save, SAX 1.0 and SAX 2.0, Namespaces in XML,
Namespaces in XML 1.1, XML Schema, XML Inclusions).
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Kalev Lember <klember(a)redhat.com> - 3.2.5-1
- Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1788472 - CVE-2018-1311 xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs
https://bugzilla.redhat.com/show_bug.cgi?id=1788472
[ 2 ] Bug #2243426 - CVE-2023-37536 xerces-c: An integer overflow issue that allows remote attackers to cause out-of-bound access via HTTP request
https://bugzilla.redhat.com/show_bug.cgi?id=2243426
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xerces-c' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-6d54874bdd
2023-12-31 00:55:02.285632
--------------------------------------------------------------------------------
Name : python3.11-markupsafe-epel
Product : Fedora EPEL 8
Version : 2.1.3
Release : 1.el8
URL : https://palletsprojects.com/p/markupsafe/
Summary : Implements a XML/HTML/XHTML Markup safe string for Python
Description :
MarkupSafe implements a text object that escapes characters so it is
safe to use in HTML and XML. Characters that have special meanings are
replaced so that they display as the actual characters. This mitigates
injection attacks, meaning untrusted user input can safely be displayed
on a page.
--------------------------------------------------------------------------------
Update Information:
Build for EPEL with Python 3.11
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Orion Poplawski <orion(a)nwra.com> - 2.1.3-1
- Build for EPEL with Python 3.11
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3.11-markupsafe-epel' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-1034121ba6
2023-12-31 00:55:02.285676
--------------------------------------------------------------------------------
Name : fedora-license-data
Product : Fedora EPEL 8
Version : 1.37
Release : 1.el8
URL : https://gitlab.com/fedora/legal/fedora-license-data
Summary : Fedora Linux license data
Description :
This project contains information about licenses used in the Fedora
Linux project. Licenses are categorized by their approval or
non-approval and may include additional notes. The data files provide
mappings between the SPDX license expressions and the older Fedora
license legacy-abbreviations.
The project also intends to publish the combined license information
in a number of data file formats and provide a package in Fedora for
other projects to reference, such as package building tools and
package checking tools.
The Fedora Legal team is responsible for this project.
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.37-1.el8. ##### **Changelog for
fedora-license-data** ``` * Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com>
1.37-1 - add license HPND-Kevlin-Henney - add license FSFAP-no-warranty-
disclaimer - add not allowed license LicenseRef-Nikto - add LicenseRef-Fedora-
Firmware * Thu Dec 07 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.36-1 - new
license: TCP-wrappers - new license: LicenseRef-Not-Copyrightable - new license:
SAX-PD-2.0 - new license: radvd ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.37-1
- add license HPND-Kevlin-Henney
- add license FSFAP-no-warranty-disclaimer
- add not allowed license LicenseRef-Nikto
- add LicenseRef-Fedora-Firmware
* Thu Dec 7 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.36-1
- new license: TCP-wrappers
- new license: LicenseRef-Not-Copyrightable
- new license: SAX-PD-2.0
- new license: radvd
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fedora-license-data' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-6d54874bdd
2023-12-31 00:55:02.285632
--------------------------------------------------------------------------------
Name : python3.11-jinja2-epel
Product : Fedora EPEL 8
Version : 3.1.2
Release : 1.el8
URL : https://palletsprojects.com/p/jinja/
Summary : General purpose template engine
Description :
Jinja2 is a template engine written in pure Python. It provides a
Django inspired non-XML syntax but supports inline expressions and an
optional sandboxed environment.
If you have any exposure to other text-based template languages, such
as Smarty or Django, you should feel right at home with Jinja2. It's
both designer and developer friendly by sticking to Python's
principles and adding functionality useful for templating
environments.
--------------------------------------------------------------------------------
Update Information:
Build for EPEL with Python 3.11
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Orion Poplawski <orion(a)nwra.com> - 3.1.2-1
- Build for EPEL with Python 3.11
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3.11-jinja2-epel' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-7784daefca
2023-12-31 00:36:11.571989
--------------------------------------------------------------------------------
Name : rust-libbpf-cargo
Product : Fedora EPEL 9
Version : 0.22.0
Release : 2.el9
URL : https://crates.io/crates/libbpf-cargo
Summary : Cargo plugin to build bpf programs
Description :
Cargo plugin to build bpf programs.
--------------------------------------------------------------------------------
Update Information:
- Update `libbpf-{rs,cargo}` to `0.22.0` - Provide compatibility crates for
`0.21` - Migrate to `rust2rpm.toml`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.22.0-2
- Fix license breakdown for libbpf-cargo subpackage
* Fri Dec 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.22.0-1
- Update to 0.22.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2253314 - rust-libbpf-cargo-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253314
[ 2 ] Bug #2253315 - rust-libbpf-rs-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253315
[ 3 ] Bug #2256157 - Review Request: rust-libbpf-cargo0.21 - Cargo plugin to build bpf programs
https://bugzilla.redhat.com/show_bug.cgi?id=2256157
[ 4 ] Bug #2256159 - Review Request: rust-libbpf-rs0.21 - Safe, idiomatic, and opinionated wrapper around libbpf-sys
https://bugzilla.redhat.com/show_bug.cgi?id=2256159
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-libbpf-cargo' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-7784daefca
2023-12-31 00:36:11.571989
--------------------------------------------------------------------------------
Name : rust-libbpf-rs
Product : Fedora EPEL 9
Version : 0.22.0
Release : 1.el9
URL : https://crates.io/crates/libbpf-rs
Summary : Safe, idiomatic, and opinionated wrapper around libbpf-sys
Description :
Libbpf-rs is a safe, idiomatic, and opinionated wrapper around libbpf-
sys.
--------------------------------------------------------------------------------
Update Information:
- Update `libbpf-{rs,cargo}` to `0.22.0` - Provide compatibility crates for
`0.21` - Migrate to `rust2rpm.toml`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.22.0-1
- Update to 0.22.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2253314 - rust-libbpf-cargo-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253314
[ 2 ] Bug #2253315 - rust-libbpf-rs-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253315
[ 3 ] Bug #2256157 - Review Request: rust-libbpf-cargo0.21 - Cargo plugin to build bpf programs
https://bugzilla.redhat.com/show_bug.cgi?id=2256157
[ 4 ] Bug #2256159 - Review Request: rust-libbpf-rs0.21 - Safe, idiomatic, and opinionated wrapper around libbpf-sys
https://bugzilla.redhat.com/show_bug.cgi?id=2256159
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-libbpf-rs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-7784daefca
2023-12-31 00:36:11.571989
--------------------------------------------------------------------------------
Name : rust-libbpf-rs0.21
Product : Fedora EPEL 9
Version : 0.21.2
Release : 1.el9
URL : https://crates.io/crates/libbpf-rs
Summary : Safe, idiomatic, and opinionated wrapper around libbpf-sys
Description :
Libbpf-rs is a safe, idiomatic, and opinionated wrapper around libbpf-
sys.
--------------------------------------------------------------------------------
Update Information:
- Update `libbpf-{rs,cargo}` to `0.22.0` - Provide compatibility crates for
`0.21` - Migrate to `rust2rpm.toml`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.21.2-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2253314 - rust-libbpf-cargo-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253314
[ 2 ] Bug #2253315 - rust-libbpf-rs-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253315
[ 3 ] Bug #2256157 - Review Request: rust-libbpf-cargo0.21 - Cargo plugin to build bpf programs
https://bugzilla.redhat.com/show_bug.cgi?id=2256157
[ 4 ] Bug #2256159 - Review Request: rust-libbpf-rs0.21 - Safe, idiomatic, and opinionated wrapper around libbpf-sys
https://bugzilla.redhat.com/show_bug.cgi?id=2256159
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-libbpf-rs0.21' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-7784daefca
2023-12-31 00:36:11.571989
--------------------------------------------------------------------------------
Name : rust-libbpf-cargo0.21
Product : Fedora EPEL 9
Version : 0.21.2
Release : 2.el9
URL : https://crates.io/crates/libbpf-cargo
Summary : Cargo plugin to build bpf programs
Description :
Cargo plugin to build bpf programs.
--------------------------------------------------------------------------------
Update Information:
- Update `libbpf-{rs,cargo}` to `0.22.0` - Provide compatibility crates for
`0.21` - Migrate to `rust2rpm.toml`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.21.2-2
- Disable bin, this is a compat crate
* Fri Dec 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.21.2-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2253314 - rust-libbpf-cargo-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253314
[ 2 ] Bug #2253315 - rust-libbpf-rs-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253315
[ 3 ] Bug #2256157 - Review Request: rust-libbpf-cargo0.21 - Cargo plugin to build bpf programs
https://bugzilla.redhat.com/show_bug.cgi?id=2256157
[ 4 ] Bug #2256159 - Review Request: rust-libbpf-rs0.21 - Safe, idiomatic, and opinionated wrapper around libbpf-sys
https://bugzilla.redhat.com/show_bug.cgi?id=2256159
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-libbpf-cargo0.21' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-4bf4c2a304
2023-12-31 00:36:11.571980
--------------------------------------------------------------------------------
Name : lemonldap-ng
Product : Fedora EPEL 9
Version : 2.18.1
Release : 1.el9
URL : https://lemonldap-ng.org
Summary : Web Single Sign On (SSO) and Access Management
Description :
LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It
simplifies the build of a protected area with a few changes in the
application. It manages both authentication and authorization and provides
headers for accounting.
So you can have a full AAA protection for your web space as described below.
--------------------------------------------------------------------------------
Update Information:
Upstream changelog: - https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.1 - https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.1-1
- Update to 2.18.1
* Wed Dec 20 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.0-1
- Update to 2.18.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lemonldap-ng' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-2ef7551bee
2023-12-31 00:36:11.571972
--------------------------------------------------------------------------------
Name : cobbler3.2
Product : Fedora EPEL 9
Version : 3.2.2
Release : 15.el9
URL : https://cobbler.github.io/
Summary : Boot server configurator
Description :
Cobbler is a network install server. Cobbler supports PXE, ISO
virtualized installs, and re-installing existing Linux machines.
The last two modes use a helper tool, 'koan', that integrates with
cobbler. There is also a web interface 'cobbler-web'. Cobbler's
advanced features include importing distributions from DVDs and rsync
mirrors, kickstart templating, integrated yum mirroring, and built-in
DHCP/DNS Management. Cobbler has a XML-RPC API for integration with
other applications.
--------------------------------------------------------------------------------
Update Information:
Build for EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 5 2023 Orion Poplawski <orion(a)nwra.com> - 3.2.2-15
- Fix requires for cobbler-web/tests
* Sun Apr 2 2023 Orion Poplawski <orion(a)nwra.com> - 3.2.2-14
- Add upstream patches for EL8 and EL9 support
* Wed Aug 10 2022 Robby Callicotte <rcallicotte(a)fedoraproject.org> - 3.2.2-13
- Add upstream patch for reposync errors (bz#2117750)
* Fri Apr 22 2022 Xavier Bachelot <xavier(a)bachelot.org> - 3.2.2-12
- Add patch7:
- fix ldap anonymous bind
- sync distro signatures
- support older anaconda boot line options
* Wed Mar 23 2022 Orion Poplawski <orion(a)nwra.com> - 3.2.2-11
- Add upstream patch for CVE-2022-0860 (bz#2066592)
* Wed Mar 2 2022 Orion Poplawski <orion(a)nwra.com> - 3.2.2-10
- More complete fix for CVE-2021-45083 - enforce permissions in %post
* Tue Mar 1 2022 Orion Poplawski <orion(a)nwra.com> - 3.2.2-9
- Apply fixes for CVE-2021-45082/3
- Remove BR on python3-coverage
* Mon Jan 24 2022 Orion Poplawski <orion(a)nwra.com> - 3.2.2-8
- Fix posttrans script
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.2-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Dec 23 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.2-6
- Fix path to settings.yaml in scriptlet
* Thu Dec 9 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.2-5
- Remove defunct get-loaders command
* Mon Nov 22 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.2-4
- Add new keys to settings.yaml on migration or if missing
- Save original settings to settings.rpmorig
* Fri Oct 8 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.2-3
- Fix dependencies (bz#2010567)
* Thu Sep 23 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.2-2
- Migrate settings to settings.yaml
- Migrate pre-cobbler 3 data if needed
- Fix autoinstall_templates -> templates
* Thu Sep 23 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.2-1
- Update to 3.2.2
- bz#2006840: CVE-2021-40323: Arbitrary file disclosure/Template Injection
- bz#2006897: CVE-2021-40324: Arbitrary file write via upload_log_data XMLRPC function
- bz#2006904: CVE-2021-40325: Authorization bypass allows modifying settings
* Wed Sep 22 2021 Orion Poplawski <orion(a)nwra.com> - 3.2.1-1
- Update to 3.2.1
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 3.2.0-5
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cobbler3.2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------