--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-02f7139d40
2023-08-31 00:32:04.250123
--------------------------------------------------------------------------------
Name : ntpsec
Product : Fedora EPEL 9
Version : 1.2.2a
Release : 1.el9
URL : https://www.ntpsec.org/
Summary : NTP daemon and utilities
Description :
NTPsec is a more secure and improved implementation of the Network Time
Protocol derived from the original NTP project.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-4012 (server crash after client request)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 3 2023 Miroslav Lichvar <mlichvar(a)redhat.com> 1.2.2a-1
- update to 1.2.2a (CVE-2023-4012)
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 1.2.2-3
- Rebuilt for Python 3.12
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 2 2023 Miroslav Lichvar <mlichvar(a)redhat.com> 1.2.2-1
- update to 1.2.2
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.2.1-8
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ntpsec' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-ed0afd252f
2023-08-31 00:32:04.250116
--------------------------------------------------------------------------------
Name : pcsc-tools
Product : Fedora EPEL 9
Version : 1.6.2
Release : 2.el9
URL : https://pcsc-tools.apdu.fr/
Summary : Tools to be used with smart cards and PC/SC
Description :
The pcsc-tools package contains some useful tools for a PC/SC user:
pcsc_scan regularly scans connected PC/SC smart card readers and
prints detected events, ATR_analysis analyzes smart card ATRs (Anwser
To Reset), and scriptor sends commands to a smart card.
--------------------------------------------------------------------------------
Update Information:
New EPEL9 package
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jan 31 2023 Jakub Jelen <jjelen(a)redhat.com> - 1.6.2-1
- New upstream release (#2165783)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 2 2023 Jakub Jelen <jjelen(a)redhat.com> - 1.6.1-1
- New upstream release (#2156953)
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jan 31 2022 Jakub Jelen <jjelen(a)redhat.com> - 1.6.0-1
- New upstream release (#2048150)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Nov 8 2021 Jakub Jelen <jjelen(a)redhat.com> - 1.5.8-1
- New upstream release and updated smartcard list (#2020954)
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pcsc-tools' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-bc059c92be
2023-08-31 00:32:04.250106
--------------------------------------------------------------------------------
Name : libcacard
Product : Fedora EPEL 9
Version : 2.8.1
Release : 6.el9
URL : https://gitlab.freedesktop.org/spice/libcacard
Summary : CAC (Common Access Card) library
Description :
This library provides emulation of smart cards to a virtual card
reader running in a guest virtual machine.
It implements DoD CAC standard with separate pki containers
(compatible coolkey), using certificates read from NSS.
--------------------------------------------------------------------------------
Update Information:
New package for EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3:2.8.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu May 18 2023 Jakub Jelen <jjelen(a)redhat.com> - 2.8.1-5
- Sort certificates by ID
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3:2.8.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3:2.8.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3:2.8.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Aug 16 2021 Jakub Jelen <jjelen(a)redhat.com> - 2.8.1-1
- New upstream release
* Mon Aug 2 2021 Marc-Andr�� Lureau <marcandre.lureau(a)redhat.com> - 3:2.8.0-5.20210801gitcf6121deb4
- Fix UNKNOWN pkg-config version, rhbz#1989031
* Sun Aug 1 2021 Marc-Andr�� Lureau <marcandre.lureau(a)redhat.com> - 3:2.8.0-4.20210801gitcf6121deb4
- Update to git snapshot v2.8.0.22
- Fix FTBFS rhbz#1987641
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3:2.8.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2233160 - Please branch and build libcacard in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2233160
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libcacard' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-dd6d05c445
2023-08-31 00:32:04.250059
--------------------------------------------------------------------------------
Name : php-pecl-mailparse
Product : Fedora EPEL 9
Version : 3.1.6
Release : 1.el9
URL : https://pecl.php.net/package/mailparse
Summary : PHP PECL package for parsing and working with email messages
Description :
Mailparse is an extension for parsing and working with email messages.
It can deal with rfc822 and rfc2045 (MIME) compliant messages.
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.6** - fix #29 Segmentation fault with ISO-2022-JP Subject header
- fix #30 Segmentation fault with UTF-8 encoded X-MS-Iris-MetaData header -
revert fix #81403 mailparse_rfc822_parse_addresses drops escaped quotes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 22 2023 Remi Collet <remi(a)remirepo.net> - 3.1.6-1
- update to 3.1.6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pecl-mailparse' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-c863cddc1c
2023-08-31 00:31:07.915710
--------------------------------------------------------------------------------
Name : lagrange
Product : Fedora EPEL 8
Version : 1.16.7
Release : 1.el8
URL : https://gmi.skyjake.fi/lagrange/
Summary : A Beautiful Gemini Client
Description :
Lagrange is a desktop GUI client for browsing Geminispace. It offers modern
conveniences familiar from web browsers, such as smooth scrolling, inline image
viewing, multiple tabs, visual themes, Unicode fonts, bookmarks, history, and
page outlines.
Like Gemini, Lagrange has been designed with minimalism in mind. It depends on a
small number of essential libraries. It is written in C and uses SDL for
hardware-accelerated graphics. OpenSSL is used for secure communications.
--------------------------------------------------------------------------------
Update Information:
- Zoomable input prompt text. - Option for silently following scheme-changing
redirects. - Tab creation and closing follows common browser conventions. -
Preferences: Moved cache/memory size settings under "Content". - Smarter page
titling for windows/tabs. - Bug fixes: incorrect tab order at launch and with
"Open in New Tabs"; handling Ctrl+L/���L when Upload dialog is open; hiding input
prompt dialog when switching tabs; unresponsive text fields; parsing
"hostname:port" in navbar; a couple of potential crashes. - (v1.16.1) Fixed
AltGr key when entering text. - (v1.16.2) Set focus to navbar URL when opening a
window. Fixed issues with shortening URLs by omitting the "gemini:" (now only
done visually, as it should be). - (v1.16.3) Bug fixes: Trim pasted URLs;
zooming vs. multiple windows; single-Emoji links not appearing; navbar URL text
selection when switching tabs; mouse scrolling unfocused windows; (macOS)
restoring correct window focus when app comes to foreground. - (v1.16.4) UI:
improved context menu popup placement; improved tab closing order; center short
titles in margin. Bug fixes: navbar URL selection; input prompt layout; input
field update when blinking cursor disabled; stuck mouse button when opening
context menu while dragging; incorrect behavior during/after window resizing.
macOS: drag getting stuck when opening a context menu, potential window freezes
while swiping. Windows: Updated SDL to 2.26.5. Linux: Updated AppImage's SDL to
2.26.5 built from source, fixing window behavior issues; the binary is still
compiled on Ubuntu 18.04. TUI: Fixed build error. - (v1.16.5) Fixed a crash in
the Flatpak build. Changed where new tabs are placed with the regular "New Tab"
command. - (v1.16.6) Bug fixes: crash related to invalid UTF-8 on a link line;
splitting long lines in input fields. - (v1.16.7) Fixed a couple of issues with
streaming responses.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 22 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 1.16.7-1
- Update to 1.16.7
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2179142 - lagrange-1.16.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2179142
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lagrange' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-5120258393
2023-08-31 00:31:07.915701
--------------------------------------------------------------------------------
Name : ImageMagick
Product : Fedora EPEL 8
Version : 6.9.12.93
Release : 1.el8
URL : https://legacy.imagemagick.org/
Summary : An X application for displaying and manipulating images
Description :
ImageMagick is an image display and manipulation tool for the X
Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,
and Photo CD image formats. It can resize, rotate, sharpen, color
reduce, or add special effects to an image, and when finished you can
either save the completed work in the original format or a different
one. ImageMagick also includes command line programs for creating
animated or transparent .gifs, creating composite images, creating
thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate
and display images. If you want to develop your own applications
which use ImageMagick code or APIs, you need to install
ImageMagick-devel as well.
--------------------------------------------------------------------------------
Update Information:
Update ImageMagick to 6.9.12.93
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 22 2023 S��rgio Basto <sergio(a)serjux.com> - 1:6.9.12.93-1
- Update ImageMagick to 6.9.12.93
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208537 - CVE-2023-2157 ImageMagick: heap overflow vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=2208537
[ 2 ] Bug #2210657 - CVE-2023-34151 ImageMagick: Undefined behaviors of casting double to size_t in svg, mvg and other coders
https://bugzilla.redhat.com/show_bug.cgi?id=2210657
[ 3 ] Bug #2210659 - CVE-2023-34152 ImageMagick: RCE (shell command injection) vulnerability in OpenBlob with --enable-pipes configured
https://bugzilla.redhat.com/show_bug.cgi?id=2210659
[ 4 ] Bug #2210660 - CVE-2023-34153 ImageMagick: Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
https://bugzilla.redhat.com/show_bug.cgi?id=2210660
[ 5 ] Bug #2214141 - CVE-2023-3195 ImageMagick: stack overflow in coders/tiff.c while parsing malicious tiff file
https://bugzilla.redhat.com/show_bug.cgi?id=2214141
[ 6 ] Bug #2214148 - CVE-2023-34474 ImageMagick: heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
https://bugzilla.redhat.com/show_bug.cgi?id=2214148
[ 7 ] Bug #2214149 - CVE-2023-34475 ImageMagick: heap use-after-free issue in ReplaceXmpValue() function in MagickCore/profile.c.
https://bugzilla.redhat.com/show_bug.cgi?id=2214149
[ 8 ] Bug #2218369 - CVE-2023-3428 ImageMagick: heap-buffer-overflow in coders/tiff.c
https://bugzilla.redhat.com/show_bug.cgi?id=2218369
[ 9 ] Bug #2230713 - CVE-2023-39978 ImageMagick: Memory leak in Magick::Draw
https://bugzilla.redhat.com/show_bug.cgi?id=2230713
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ImageMagick' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-1256bb5e7e
2023-08-30 02:42:48.607367
--------------------------------------------------------------------------------
Name : rust-difftastic
Product : Fedora EPEL 8
Version : 0.50.0
Release : 1.el8
URL : https://crates.io/crates/difftastic
Summary : Structural diff that understands syntax
Description :
A structural diff that understands syntax.
--------------------------------------------------------------------------------
Update Information:
### Conflicts Difftastic now supports parsing files with conflict markers,
enabling you to diff the two conflicting file states. ``` $ difft
file_with_conflicts.js ``` ### Parsing Updated Elixir, Erlang, Go, Kotlin and
Racket parsers. ### Display Tweaked the colours on the file header, to make
metadata less prominent. Improved styling of file rename information. Improved
syntax hightling for Java built-in types. ### Diffing Fixed an issue with
runaway memory usage when the two files input files had a large number of
differences.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 21 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.50.0-1
- Update to 0.50.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2232292 - rust-difftastic-0.50.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2232292
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-difftastic' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-0d61e63464
2023-08-30 02:42:48.607309
--------------------------------------------------------------------------------
Name : csdiff
Product : Fedora EPEL 8
Version : 3.0.4
Release : 1.el8
URL : https://github.com/csutils/csdiff
Summary : Non-interactive tools for processing code scan results in plain-text
Description :
This package contains the csdiff tool for comparing code scan defect lists in
order to find out added or fixed defects, and the csgrep utility for filtering
defect lists using various filtering predicates.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 21 2023 Kamil Dudka <kdudka(a)redhat.com> 3.0.4-1
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csdiff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2023-4d3a2d67ed
2023-08-30 02:40:08.593473
--------------------------------------------------------------------------------
Name : csdiff
Product : Fedora EPEL 7
Version : 3.0.4
Release : 1.el7
URL : https://github.com/csutils/csdiff
Summary : Non-interactive tools for processing code scan results in plain-text
Description :
This package contains the csdiff tool for comparing code scan defect lists in
order to find out added or fixed defects, and the csgrep utility for filtering
defect lists using various filtering predicates.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 21 2023 Kamil Dudka <kdudka(a)redhat.com> 3.0.4-1
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csdiff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------