Fedora 31 Update: xrootd-4.11.3-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-f5572b133e
2020-04-01 01:54:46.133372
--------------------------------------------------------------------------------
Name : xrootd
Product : Fedora 31
Version : 4.11.3
Release : 1.fc31
URL : http://xrootd.org/
Summary : Extended ROOT file server
Description :
The Extended root file server consists of a file server called xrootd
and a cluster management server called cmsd.
The xrootd server was developed for the root analysis framework to
serve root files. However, the server is agnostic to file types and
provides POSIX-like access to any type of file.
The cmsd server is the next generation version of the olbd server,
originally developed to cluster and load balance Objectivity/DB AMS
database servers. It provides enhanced capability along with lower
latency and increased throughput.
--------------------------------------------------------------------------------
Update Information:
XrootD 4.11.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.11.3-1
- Update to version 4.11.3
- Use libc semaphores for EPEL 7 build
POSIX compliant semaphores were backported to glibc in RHEL 7.2
- Drop glibc version requirement for semaphores (backported to older version)
- Move libXrdSsi{Lib,ShMap}.so.* to client-libs package (from server-libs)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-f5572b133e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: xrdcl-http-4.11.3-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-f5572b133e
2020-04-01 01:54:46.133372
--------------------------------------------------------------------------------
Name : xrdcl-http
Product : Fedora 31
Version : 4.11.3
Release : 1.fc31
URL : https://github.com/xrootd/xrdcl-http
Summary : HTTP client plug-in for XRootD
Description :
xrdcl-http is an XRootD client plugin which allows XRootD to interact
with HTTP repositories.
--------------------------------------------------------------------------------
Update Information:
XrootD 4.11.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 4.11.3-1
- Update to version 4.11.3
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.10.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-f5572b133e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: python-doit-0.32.0-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-ac5a43cc8a
2020-04-01 01:54:46.133352
--------------------------------------------------------------------------------
Name : python-doit
Product : Fedora 31
Version : 0.32.0
Release : 1.fc31
URL : http://python-doit.sourceforge.net/
Summary : Automation Tool
Description :
python-doit is a build tool (in the same class as make, cmake, scons,
ant and others)
python-doit can be used as:
* a build tool (generic and flexible)
* home of your management scripts (it helps you organize and combine
shell scripts and python scripts)
* a functional tests runner (combine together different tools)
* a configuration management system
* manage computational pipelines
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release: - python 3.7 support - BACKWARD
INCOMPATIBLE: Changed signature of `DoitCommand` - BACKWARD INCOMPATIBLE: Fix
#254: Python actions keywords with task metadata `dependencies`, `targets` and
`changed` are a copied list - BACKWARD INCOMPATIBLE: Custom backend initializer
added parameter ``codec_cls`` - Fix #204: Accept loader command options before
command name - Fix #240: Command run: with `--pdb` drop into *pdb* on unhandled
exception on `PythonAction` - Fix #203: Allow configuration of `dodo.py` file
name with env var `DOIT_FILE` - Fix #113: `tools.config_changed` deals with
nested dictionaries. Using json instead of repr. - Fix #261: help
organize command options in sections, and improve formatting. - Fix #267: `doit
list` now has a `--sort` parameter to determine the order in which the tasks are
listed. - Make it possible to use a custom encoder when using config_changed
with a dict. - Add configuration `DOIT_CONFIG` `action_string_formatting` to
control command action formatter. - Fix `result_dep`, use result **after** its
execution - Fix #286: Support `functools.partial` on tasks' dict metadata
`task.title` - Fix #285: `clean` command, remove targets in reverse lexical
order - Deprecated `TaskLoader` in favor of `TaskLoader2`, which separates
loading doit's configuration from loading tasks. - Fix #288: Added
`doit.globals.Globals.dep_manager` to access dependency manager during all task
processing phases. - Fix #98: Support custom backend codecs so that python-
action return values which are not JSON serializable may be used. - Fix #283:
set task options from doit.cfg
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 19 2020 Jos�� Matos <jamatos(a)fedoraproject.org> - 0.32.0-1
- Update to 0.32.0
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.31.1-7
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.31.1-6
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782357 - python-doit-0.32.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1782357
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-ac5a43cc8a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: vdrift-20141020-21.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-9f8a11860e
2020-04-01 01:54:46.133330
--------------------------------------------------------------------------------
Name : vdrift
Product : Fedora 31
Version : 20141020
Release : 21.fc31
URL : http://vdrift.net
Summary : Driving/drift racing simulation
Description :
VDrift is a cross-platform, open source driving simulation made with drift
racing in mind. It's powered by the excellent Vamos physics engine. It is
released under the GNU General Public License (GPL) v2. It is currently
available for Linux, FreeBSD, Mac OS X and Windows (Cygwin).
--------------------------------------------------------------------------------
Update Information:
Fix for crash.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 2014-1020-21
- Change build options to fix crash.
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20141020-20
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-9f8a11860e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: rust-bodhi-cli-0.3.1-2.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-b8ec47ef79
2020-04-01 01:54:46.133314
--------------------------------------------------------------------------------
Name : rust-bodhi-cli
Product : Fedora 31
Version : 0.3.1
Release : 2.fc31
URL : https://crates.io/crates/bodhi-cli
Summary : Bodhi CLI client based on bodhi-rs
Description :
Bodhi CLI client based on bodhi-rs.
--------------------------------------------------------------------------------
Update Information:
Initial package for fedora.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-b8ec47ef79' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: raysession-0.8.3-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-aac56ea73b
2020-04-01 01:54:46.133300
--------------------------------------------------------------------------------
Name : raysession
Product : Fedora 31
Version : 0.8.3
Release : 1.fc31
URL : https://github.com/Houston4444/RaySession
Summary : Session manager for audio software
Description :
Ray Session is a GNU/Linux session manager for audio programs as Ardour,
Carla, QTractor, Non-Timeline, etc...
It uses the same API as Non Session Manager, so programs compatible with NSM
are also compatible with Ray Session. As Non Session Manager, the principle
is to load together audio programs, then be able to save or close all
documents together.
Ray Session offers a little more:
- Factory templates for NSM and LASH compatible applications
- Possibility to save any client as template
- Save session as template
- Name files with a prettier way
- remember if client was started or not
- Abort session almost anytime
- Change Main Folder of sessions on GUI
- Possibility to KILL client if clean exit is too long
- Open Session Folder button (open default file manager)
Ray Session is being developed by houston4444, using Python3 and Qt5.
--------------------------------------------------------------------------------
Update Information:
Initial release for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1801352 - Review Request: raysession - Ray Session is a GNU/Linux session manager for audio programs
https://bugzilla.redhat.com/show_bug.cgi?id=1801352
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-aac56ea73b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: libjcat-0.1.0-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-0ab8919294
2020-04-01 01:54:46.133285
--------------------------------------------------------------------------------
Name : libjcat
Product : Fedora 31
Version : 0.1.0
Release : 1.fc31
URL : https://github.com/hughsie/libjcat
Summary : Library for reading Jcat files
Description :
This library allows reading and writing gzip-compressed JSON catalog files,
which can be used to store GPG, PKCS-7 and SHA-256 checksums for each file.
This provides equivalent functionality to the catalog files supported in
Microsoft Windows.
--------------------------------------------------------------------------------
Update Information:
Initial release for Fedora package review
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-0ab8919294' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: fapolicyd-0.9.4-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-83e4ee8f47
2020-04-01 01:54:46.133270
--------------------------------------------------------------------------------
Name : fapolicyd
Product : Fedora 31
Version : 0.9.4
Release : 1.fc31
URL : http://people.redhat.com/sgrubb/fapolicyd
Summary : Application Whitelisting Daemon
Description :
Fapolicyd (File Access Policy Daemon) implements application whitelisting
to decide file access rights. Applications that are known via a reputation
source are allowed access while unknown applications are not. The daemon
makes use of the kernel's fanotify interface to determine file access rights.
--------------------------------------------------------------------------------
Update Information:
Rebase fapolicyd to 0.9.4 - polished the pattern detection engine
- rpm backend now drops most of the files in /usr/share/ to dramatically reduce
memory consumption and improve startup speed - the commandline utility can
now delete the lmdb trust database and manage the file trust source
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Radovan Sroka <rsroka(a)redhat.com> - 0.9.4-1
- rebase fapolicyd to 0.9.4
- polished the pattern detection engine
- rpm backend now drops most of the files in /usr/share/ to dramatically reduce
memory consumption and improve startup speed
- the commandline utility can now delete the lmdb trust database and manage
the file trust source
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-83e4ee8f47' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
Fedora 31 Update: python-jack-client-0.5.2-1.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-c06599d298
2020-04-01 01:54:46.133254
--------------------------------------------------------------------------------
Name : python-jack-client
Product : Fedora 31
Version : 0.5.2
Release : 1.fc31
URL : http://jackclient-python.rtfd.org
Summary : JACK Audio Connection Kit (JACK) Client for Python
Description :
Python module that provides bindings for the JACK library.
The module is able to create audio input and output ports,
also provides the functionality to manage MIDI ports.
This package installs the library for Python.
--------------------------------------------------------------------------------
Update Information:
Initial release for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1804307 - Review Request: python-jack-client - JACK Audio Connection Kit (JACK) Client for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1804307
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-c06599d298' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years
[SECURITY] Fedora 31 Update: coturn-4.5.1.1-3.fc31
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-305c173af8
2020-04-01 01:54:46.133239
--------------------------------------------------------------------------------
Name : coturn
Product : Fedora 31
Version : 4.5.1.1
Release : 3.fc31
URL : https://github.com/coturn/coturn/
Summary : TURN/STUN & ICE Server
Description :
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gateway.
It can be used as a general-purpose network traffic TURN server/gateway, too.
This implementation also includes some extra features. Supported RFCs:
TURN specs:
- RFC 5766 - base TURN specs
- RFC 6062 - TCP relaying TURN extension
- RFC 6156 - IPv6 extension for TURN
- Experimental DTLS support as client protocol.
STUN specs:
- RFC 3489 - "classic" STUN
- RFC 5389 - base "new" STUN specs
- RFC 5769 - test vectors for STUN protocol testing
- RFC 5780 - NAT behavior discovery support
The implementation fully supports the following client-to-TURN-server protocols:
- UDP (per RFC 5766)
- TCP (per RFC 5766 and RFC 6062)
- TLS (per RFC 5766 and RFC 6062); TLS1.0/TLS1.1/TLS1.2
- DTLS (experimental non-standard feature)
Supported relay protocols:
- UDP (per RFC 5766)
- TCP (per RFC 6062)
Supported user databases (for user repository, with passwords or keys, if
authentication is required):
- SQLite
- MySQL
- PostgreSQL
- Redis
Redis can also be used for status and statistics storage and notification.
Supported TURN authentication mechanisms:
- long-term
- TURN REST API (a modification of the long-term mechanism, for time-limited
secret-based authentication, for WebRTC applications)
The load balancing can be implemented with the following tools (either one or a
combination of them):
- network load-balancer server
- DNS-based load balancing
- built-in ALTERNATE-SERVER mechanism.
--------------------------------------------------------------------------------
Update Information:
* An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1
web server parses POST requests. A specially crafted HTTP POST request can lead
to information leaks and other misbehavior. * An exploitable denial-of-service
vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
A specially crafted HTTP POST request can lead to server crash and denial of
service.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.1-3
- Added upstream patch for CVE-2020-6061 (#1816159)
- Backported upstream patch for CVE-2020-6062 (#1816163)
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816159 - CVE-2020-6061 coturn: specially crafted HTTP POST request can lead to heap overflow which can result in information leak
https://bugzilla.redhat.com/show_bug.cgi?id=1816159
[ 2 ] Bug #1816163 - CVE-2020-6062 coturn: specially crafted HTTP POST request can lead to server crash and denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1816163
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-305c173af8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years