--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-5eca570e16
2020-05-31 03:56:22.673502
--------------------------------------------------------------------------------
Name : marked
Product : Fedora 31
Version : 1.1.0
Release : 3.fc31
URL : https://github.com/markedjs/marked
Summary : A markdown parser for Node.js built for speed
Description :
Install this for command line tool and man page.
marked is a full-featured markdown compiler that can parse huge chunks of
markdown without having to worry about caching the compiled output or
blocking for an unnecessarily long time.
marked is extremely fast and frequently outperforms similar markdown parsers.
marked is very concise and still implements all markdown features, as well
as GitHub Flavored Markdown features.
marked more or less passes the official markdown test suite in its entirety.
This is important because a surprising number of markdown compilers cannot
pass more than a few tests.
--------------------------------------------------------------------------------
Update Information:
New upstream release with bug and security fixes. Also, consolidates duplicate
pakages marked and nodejs-marked. I tested upgrades from both, but may have
missed some wonky situation.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 Stuart Gathman <stuart(a)gathman.org> - 1.1.0-3
- Move web assets to js-marked
* Fri May 22 2020 Stuart Gathman <stuart(a)gathman.org> - 1.1.0-2
- Move module files to nodejs-marked
- Fix shebang no longer autofixed in /usr/lib/node_modules
* Fri May 22 2020 Stuart Gathman <stuart(a)gathman.org> - 1.1.0-1
- New upstream release
- CVE-2015-8854 ReDos fixed in 0.3.9
- bz#1529736 bz#1529738 - XSS w/ mangling disabled fixed in 0.3.9
- bz#1702320 ReDos vuln - CVE removed, problem not in marked
- CVE-2016-1000013 fixed in 0.7.0
- CVE-2017-17461 ReDos in dependency (still open)
- CVE-2017-1000427 XSS via data URI fixed in 0.3.7
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.2-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1185162 - NodeJS marked: VBScript Content Injection [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1185162
[ 2 ] Bug #1186221 - marked-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1186221
[ 3 ] Bug #1328407 - CVE-2016-1000013 marked: sanitization bypass using HTML [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1328407
[ 4 ] Bug #1328408 - CVE-2016-1000013 marked: sanitization bypass using HTML [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1328408
[ 5 ] Bug #1329535 - CVE-2015-8854 marked: regular expression denial of service [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1329535
[ 6 ] Bug #1329537 - CVE-2015-8854 marked: regular expression denial of service [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1329537
[ 7 ] Bug #1417926 - CVE-2017-1000427 marked: Cross-site scripting via Data URIs [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1417926
[ 8 ] Bug #1417927 - CVE-2017-1000427 marked: Cross-site scripting via Data URIs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1417927
[ 9 ] Bug #1417928 - CVE-2017-1000427 marked: Cross-site scripting via Data URIs [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1417928
[ 10 ] Bug #1529729 - marked: Cross-site Scripting (XSS) attacks via hexadecimal form of HTML [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1529729
[ 11 ] Bug #1529730 - marked: Cross-site Scripting (XSS) attacks via hexadecimal form of HTML [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1529730
[ 12 ] Bug #1529737 - marked: Cross-site Scripting (XSS) via autolink with mangling disabled [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1529737
[ 13 ] Bug #1529738 - marked: Cross-site Scripting (XSS) via autolink with mangling disabled [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1529738
[ 14 ] Bug #1550778 - marked: Regular expression denial of service in marked.js [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1550778
[ 15 ] Bug #1550779 - marked: Regular expression denial of service in marked.js [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1550779
[ 16 ] Bug #1702320 - marked: Regular expression denial of service in inline.text regex [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1702320
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-5eca570e16' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-e7ddac40c7
2020-05-31 03:56:22.673484
--------------------------------------------------------------------------------
Name : R-callr
Product : Fedora 31
Version : 3.4.3
Release : 1.fc31
URL : https://CRAN.R-project.org/package=callr
Summary : Call R from R
Description :
It is sometimes useful to perform a computation in a separate R process,
without affecting the current R process at all. This packages does exactly
that.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.4.3-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818450 - R-callr-3.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818450
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-e7ddac40c7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-bacd1285f8
2020-05-31 03:56:22.673377
--------------------------------------------------------------------------------
Name : R-ps
Product : Fedora 31
Version : 1.3.3
Release : 1.fc31
URL : https://CRAN.R-project.org/package=ps
Summary : List, Query, Manipulate System Processes
Description :
List, query and manipulate all system processes, on 'Windows', 'Linux' and
'macOS'.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.3.3-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1833298 - R-ps-1.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1833298
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-bacd1285f8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-413b13af6a
2020-05-31 03:56:22.673364
--------------------------------------------------------------------------------
Name : R-purrr
Product : Fedora 31
Version : 0.3.4
Release : 1.fc31
URL : https://CRAN.R-project.org/package=purrr
Summary : Functional Programming Tools
Description :
A complete and consistent functional programming toolkit for R.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.4-1
- Update to latest version
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1825309 - R-purrr-0.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1825309
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-413b13af6a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-7ea4951bef
2020-05-31 03:56:22.673351
--------------------------------------------------------------------------------
Name : R-rematch2
Product : Fedora 31
Version : 2.1.2
Release : 1.fc31
URL : https://CRAN.R-project.org/package=rematch2
Summary : Tidy Output from Regular Expression Matching
Description :
Wrappers on 'regexpr' and 'gregexpr' to return the match results in tidy
data frames.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.1.2-1
- Update to latest version
* Fri Apr 10 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.1.1-1
- Update to latest version
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818484 - R-rematch2-2.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818484
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-7ea4951bef' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-2d6604338f
2020-05-31 03:56:22.673339
--------------------------------------------------------------------------------
Name : R-pkgbuild
Product : Fedora 31
Version : 1.0.8
Release : 1.fc31
URL : https://CRAN.R-project.org/package=pkgbuild
Summary : Find Tools Needed to Build R Packages
Description :
Provides functions used to build R packages. Locates compilers needed to
build R packages on various platforms and ensures the PATH is configured
appropriately so R can use them.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.8-1
- Update to latest version
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827928 - R-pkgbuild-1.0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827928
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-2d6604338f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-784ee60e36
2020-05-31 03:56:22.673326
--------------------------------------------------------------------------------
Name : swift-lang
Product : Fedora 31
Version : 5.2.4
Release : 1.fc31
URL : https://swift.org
Summary : Apple's Swift programming language
Description :
Swift is a general-purpose programming language built using
a modern approach to safety, performance, and software design
patterns.
The goal of the Swift project is to create the best available
language for uses ranging from systems programming, to mobile
and desktop apps, scaling up to cloud services. Most
importantly, Swift is designed to make writing and maintaining
correct programs easier for the developer.
--------------------------------------------------------------------------------
Update Information:
Updated to swift-5.2.4-RELEASE
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Ron Olson <tachoknight(a)gmail.com> 5.2.4-1
- Updated to swift-5.2.4-RELEASE
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-784ee60e36' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-5561d23969
2020-05-31 03:56:22.673313
--------------------------------------------------------------------------------
Name : R-unitizer
Product : Fedora 31
Version : 1.4.10
Release : 1.fc31
URL : https://CRAN.R-project.org/package=unitizer
Summary : Interactive R Unit Tests
Description :
Simplifies regression tests by comparing objects produced by test code with
earlier versions of those same objects. If objects are unchanged the tests
pass, otherwise execution stops with error details. If in interactive mode,
tests can be reviewed through the provided interactive environment.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.4.10-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834971 - R-unitizer-1.4.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1834971
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-5561d23969' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1143a32208
2020-05-31 03:56:22.673300
--------------------------------------------------------------------------------
Name : weston
Product : Fedora 31
Version : 8.0.0
Release : 2.fc31
URL : http://wayland.freedesktop.org/
Summary : Reference compositor for Wayland
Description :
Weston is the reference wayland compositor that can run on KMS, under X11
or under another compositor.
--------------------------------------------------------------------------------
Update Information:
Update to stable release FreeRDP 2.1.1 and Remmina 1.4.4.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 Simone Caronni <negativo17(a)gmail.com> - 8.0.0-2
- Rebuild for updated FreeRDP.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1143a32208' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1143a32208
2020-05-31 03:56:22.673300
--------------------------------------------------------------------------------
Name : vinagre
Product : Fedora 31
Version : 3.22.0
Release : 18.fc31
URL : https://wiki.gnome.org/Apps/Vinagre
Summary : VNC client for GNOME
Description :
Vinagre is a VNC client for the GNOME desktop.
With Vinagre you can have several connections open simultaneously, bookmark
your servers thanks to the Favorites support, store the passwords in the
GNOME keyring, and browse the network to look for VNC servers.
Apart from the VNC protocol, vinagre supports Spice and RDP.
--------------------------------------------------------------------------------
Update Information:
Update to stable release FreeRDP 2.1.1 and Remmina 1.4.4.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 Simone Caronni <negativo17(a)gmail.com> - 3.22.0-18
- Rebuild for updated FreeRDP.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1143a32208' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------