[SECURITY] Fedora 37 Update: GitPython-3.1.30-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-8146a727a8
2023-01-04 01:23:38.582818
--------------------------------------------------------------------------------
Name : GitPython
Product : Fedora 37
Version : 3.1.30
Release : 1.fc37
URL : https://github.com/gitpython-developers/GitPython
Summary : Python Git Library
Description :
GitPython is a python library used to interact with git repositories,
high-level like git-porcelain, or low-level like git-plumbing.
It provides abstractions of git objects for easy access of repository data, and
additionally allows you to access the git repository more directly using either
a pure python implementation, or the faster, but more resource intensive git
command implementation.
The object database implementation is optimized for handling large quantities
of objects and large datasets, which is achieved by using low-level structures
and data streaming.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release with fix for CVE-2022-24439.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 3.1.30-1
- Rebase to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151583 - CVE-2022-24439 GitPython: improper user input validation leads into a RCE
https://bugzilla.redhat.com/show_bug.cgi?id=2151583
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-8146a727a8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: dmlite-1.15.2-12.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-704e80f8c9
2023-01-04 01:23:38.582808
--------------------------------------------------------------------------------
Name : dmlite
Product : Fedora 37
Version : 1.15.2
Release : 12.fc37
URL : https://gitlab.cern.ch/lcgdm/dmlite
Summary : Lcgdm grid data management and storage framework
Description :
This package provides the dmlite framework that implements common
logic for data management and storage for the Lcg grid.
--------------------------------------------------------------------------------
Update Information:
- Improve dCache migration - Replace python distiutils with sysconfig
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 26 2022 Petr Vokac <petr.vokac(a)cern.ch> - 1.15.2-12
- Improve dCache migration
- Replace python distiutils with sysconfig
* Tue Oct 11 2022 Petr Vokac <petr.vokac(a)cern.ch> - 1.15.2-11
- Support for DPM to dCache 8.2 migration
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-704e80f8c9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: eccodes-2.27.1-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-a5522c92ac
2023-01-04 01:23:38.582793
--------------------------------------------------------------------------------
Name : eccodes
Product : Fedora 37
Version : 2.27.1
Release : 1.fc37
URL : https://confluence.ecmwf.int/display/ECC/ecCodes+Home
Summary : WMO data format decoding and encoding
Description :
ecCodes is a package developed by ECMWF which provides an application
programming interface and a set of tools for decoding and encoding messages
in the following formats:
* WMO FM-92 GRIB edition 1 and edition 2
* WMO FM-94 BUFR edition 3 and edition 4
* WMO GTS abbreviated header (only decoding).
A useful set of command line tools provide quick access to the messages. C,
and Fortran 90 interfaces provide access to the main ecCodes functionality.
ecCodes is an evolution of GRIB-API. It is designed to provide the user with
a simple set of functions to access data from several formats with a key/value
approach.
For GRIB encoding and decoding, the GRIB-API functionality is provided fully
in ecCodes with only minor interface and behaviour changes. Interfaces for C,
and Fortran 90 are all maintained as in GRIB-API. However, the
GRIB-API Fortran 77 interface is no longer available.
In addition, a new set of functions with the prefix "codes_" is provided to
operate on all the supported message formats. These functions have the same
interface and behaviour as the "grib_" functions.
A selection of GRIB-API tools has been included in ecCodes (ecCodes GRIB
tools), while new tools are available for the BUFR (ecCodes BUFR tools) and
GTS formats. The new tools have been developed to be as similar as possible
to the existing GRIB-API tools maintaining, where possible, the same options
and behaviour. A significant difference compared with GRIB-API tools is that
bufr_dump produces output in JSON format suitable for many web based
applications.
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream version 2.27.1 and SPDX migration
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 10 2022 Jos de Kloe <josdekloe(a)gmail.com> - 2.27.1-1
- Upgrade to upstream version 2.27.1 and SPDX migration
* Wed Sep 14 2022 Jos de Kloe <josdekloe(a)gmail.com> - 2.27.0-2
- fix problem with use of _sourcedir
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2150833 - eccodes-2.27.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2150833
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-a5522c92ac' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: pyproj-3.4.1-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-e1c4a0a611
2023-01-04 01:23:38.582783
--------------------------------------------------------------------------------
Name : pyproj
Product : Fedora 37
Version : 3.4.1
Release : 1.fc37
URL : https://github.com/jswhit/pyproj
Summary : Cython wrapper to provide python interfaces to Proj
Description :
Cython wrapper to provide python interfaces to Proj.
Performs cartographic transformations between geographic (Lat/Lon)
and map projection (x/y) coordinates. Can also transform directly
from one map projection coordinate system to another.
Coordinates can be given as numpy arrays, python arrays, lists or scalars.
Optimized for numpy arrays.
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 26 2022 Jos de Kloe <josdekloe(a)gmail.com> 3.4.1-1
- Update to 3.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2152771 - pyproj-3.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2152771
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-e1c4a0a611' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: gopass-jsonapi-1.15.2-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-95f93c396c
2023-01-04 01:23:38.582764
--------------------------------------------------------------------------------
Name : gopass-jsonapi
Product : Fedora 37
Version : 1.15.2
Release : 1.fc37
URL : https://github.com/gopasspw/gopass-jsonapi
Summary : Gopass Browser Bindings
Description :
Gopass Browser Bindings.
--------------------------------------------------------------------------------
Update Information:
1.15.2 / 2022-12-18 [BUGFIX] [gitconfig] Properly parse Key-Value pairs
with (#2482, #2479) [ENHANCEMENT] Add --force-regen flag to generate (#2475,
#2474) [ENHANCEMENT] Add recipients hash checking. (#2481, #2478)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 20 2022 Fabio Alessandro Locati <me(a)fale.io> 1.15.2-1
- Update to 1.5.2. Fixes rhbz#2155101
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-95f93c396c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: gopass-hibp-1.15.2-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-95f93c396c
2023-01-04 01:23:38.582764
--------------------------------------------------------------------------------
Name : gopass-hibp
Product : Fedora 37
Version : 1.15.2
Release : 1.fc37
URL : https://github.com/gopasspw/gopass-hibp
Summary : Gopass haveibeenpwnd.com integration
Description :
Gopass haveibeenpwnd.com integration.
--------------------------------------------------------------------------------
Update Information:
1.15.2 / 2022-12-18 [BUGFIX] [gitconfig] Properly parse Key-Value pairs
with (#2482, #2479) [ENHANCEMENT] Add --force-regen flag to generate (#2475,
#2474) [ENHANCEMENT] Add recipients hash checking. (#2481, #2478)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 20 2022 Fabio Alessandro Locati <me(a)fale.io> 1.15.2-1
- Update to 1.5.2. Fixes rhbz#2155103
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-95f93c396c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: ghc9.4-9.4.4-15.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-45a5f99caa
2023-01-04 01:23:38.582774
--------------------------------------------------------------------------------
Name : ghc9.4
Product : Fedora 37
Version : 9.4.4
Release : 15.fc37
URL : https://haskell.org/ghc/
Summary : Glasgow Haskell Compiler
Description :
GHC is a state-of-the-art, open source, compiler and interactive environment
for the functional language Haskell. Highlights:
- GHC supports the entire Haskell 2010 language plus a wide variety of
extensions.
- GHC has particularly good support for concurrency and parallelism,
including support for Software Transactional Memory (STM).
- GHC generates fast code, particularly for concurrent programs.
Take a look at GHC's performance on The Computer Language Benchmarks Game.
- GHC works on several platforms including Windows, Mac, Linux,
most varieties of Unix, and several different processor architectures.
- GHC has extensive optimisation capabilities, including inter-module
optimisation.
- GHC compiles Haskell code either directly to native code or using LLVM
as a back-end. GHC can also generate C code as an intermediate target for
porting to new platforms. The interactive environment compiles Haskell to
bytecode, and supports execution of mixed bytecode/compiled programs.
- Profiling is supported, both by time/allocation and various kinds of heap
profiling.
- GHC comes with several libraries, and thousands more are available on Hackage.
--------------------------------------------------------------------------------
Update Information:
- https://www.haskell.org/ghc/blog/20221224-ghc-9.4.4-released.html -
https://downloads.haskell.org/~ghc/9.4.4/docs/users_guide/9.4.4-notes.html
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 26 2022 Jens Petersen <petersen(a)redhat.com> - 9.4.4-15
- https://www.haskell.org/ghc/blog/20221224-ghc-9.4.4-released.html
- https://downloads.haskell.org/~ghc/9.4.4/docs/users_guide/9.4.4-notes.html
* Tue Nov 22 2022 Florian Weimer <fweimer(a)redhat.com> - 9.4.3-14
- Avoid implicit declaration of exit in configure check
* Wed Nov 9 2022 Jens Petersen <petersen(a)redhat.com> - 9.4.3-13
- epel9: disable hadrian for s390x (#2141054)
- epel9: disable docs on s390x with make
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156169 - ghc-9.4.4-release is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156169
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-45a5f99caa' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months
Fedora 37 Update: gopass-1.15.2-1.fc37
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-95f93c396c
2023-01-04 01:23:38.582764
--------------------------------------------------------------------------------
Name : gopass
Product : Fedora 37
Version : 1.15.2
Release : 1.fc37
URL : https://github.com/gopasspw/gopass
Summary : The slightly more awesome standard unix password manager for teams
Description :
The slightly more awesome standard unix password manager for teams.
--------------------------------------------------------------------------------
Update Information:
1.15.2 / 2022-12-18 [BUGFIX] [gitconfig] Properly parse Key-Value pairs
with (#2482, #2479) [ENHANCEMENT] Add --force-regen flag to generate (#2475,
#2474) [ENHANCEMENT] Add recipients hash checking. (#2481, #2478)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 20 2022 Fabio Alessandro Locati <me(a)fale.io> 1.15.2-1
- update to 1.15.2. Fixes rhbz#2155104
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-95f93c396c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 year, 4 months