epel-devel January 2018

epel-devel@lists.fedoraproject.org

18 participants
62 discussions

Adding devtoolset to EPEL
by Stephen John Smoogen 06 Mar '18

06 Mar '18

Several meetings ago, the EPEL Steering Committee took up the following points: 1. Peter Robinson's DTS enablement request A. What packages require it (chromium etc) B. Is there a version in CentOS? i. If not is it possible for it to exist in CentOS? ii. If not what work would a CentOS version take and how long? iii. If not and not possible does this make EPEL non-workable/closed source on it? C. What problems are known for getting it into Koji i. Does it cause problems with normal packages ii. Do users need to have any bits from it to work? [old yacc/bison problem] iii. Does koji have problems with this as another channel to work with? iv. Does Fedora have the ability to get this channel or need to use a different one (aka CentOS one if it exists)? == At that time, EPSCO agreed that we are ok with this for just the development toolkit. We are still needing to work out the following items: 1. How do we do this with mock so that people who rebuild with CentOS can do so. 2. How do we get Koji to do this 3. What are the packaging guidelines that need to be put into EPEL packaging guidelines as the SCL guidelines were never finalized and the devtoolset is an scl that we would be building against. -- Stephen J Smoogen.

6 17

Dummy python2 packages submitted
by Jason L Tibbitts III 02 Feb '18

02 Feb '18

(This is mostly a duplicate of a post I sent to devel@. I wanted to alert epel-devel@ but didn't want to crosspost.) Following my proposal in https://fedoraproject.org/wiki/User:Tibbs/EPELPythonStubPackages which met with favor from a number of folks here, I went ahead and set up four dummy packages: python2-setuptools (in EPEL6) python2-sphinx (EPEL7) python2-pytest (EPEL7) python2-six (EPEL7) I'll do EPEL6 versions of the latter tomorrow. (I forgot that I can only request one branch with the initial repo request. Oops. In my defense, that's a really odd restriction.) These should, once actually pushed to stable, allow you to avoid having to add conditionals to depend on setuptools/sphinx/pytest/six in EPEL. If this works out for folks, I (or anyone else) can potentially add similar dummy packages for every package which needs one. Anything to cut down on those conditionals. Please check my work, test and give karma as appropriate. They seem to work fine for me when I set up a local repo and do some mock builds, but I only have access to Centos so I guess anything is possible. - J<

2 3

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

The following Fedora EPEL 6 Security updates need testing: Age URL 932 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 822 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 793 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 404 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 133 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 53 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 34 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6e4ce19598 monit-5.25.1-1.el6 25 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 19 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2ba6bfc5d8 wordpress-4.9.2-1.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1049ca4872 GraphicsMagick-1.3.28-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-369a48191f clamav-0.99.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing fedpkg-1.31-1.el6 spectre-meltdown-checker-0.33-1.el6 Details about builds: ================================================================================ fedpkg-1.31-1.el6 (FEDORA-EPEL-2018-13590bc29c) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: - Include missing conf file in test (cqi) - Add more document to request-repo and request-branch (cqi) - Stop allowing EPEL branches on official EL packages (mprahl) - Port fedrepo-req and fedrepo-req-branch to fedpkg (mprahl) - Fix test for unsupported Bodhi version (lsedlar) - Work with Bodhi 3 - rhbz#1507410 (lsedlar) - Allow any parameters in construct_build_url (cqi) - Fix the anongiturl (patrick) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507410 - fedpkg update fails with: "This system has bodhi v3, which is unsupported" https://bugzilla.redhat.com/show_bug.cgi?id=1507410 -------------------------------------------------------------------------------- ================================================================================ spectre-meltdown-checker-0.33-1.el6 (FEDORA-EPEL-2018-58192634a4) Spectre & Meltdown vulnerability/mitigation checker for Linux -------------------------------------------------------------------------------- Update Information: Initial package --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1059 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 822 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 404 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 301 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 133 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 71 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 34 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b monit-5.25.1-1.el7 20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73feedd767 wordpress-4.9.2-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ce6223e559 GraphicsMagick-1.3.28-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9eb18da891 moodle-3.1.10-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0d5d190b0 transmission-2.92-12.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7 konversation-1.5.1-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fb68becde7 w3m-0.5.3-36.git20180125.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beanstalkd-1.10-2.el7 cmrt-1.0.6-4.el7 dspam-3.10.2-12.el7 fedpkg-1.31-1.el7 kabi-dw-0-0.5.20180130git545535a.el7 libva-1.8.3-0.1.el7 libva-intel-hybrid-driver-1.0.2-4.el7.1 libva-utils-1.8.3-4.el7 libva-vdpau-driver-0.7.4-19.el7 libvdpau-va-gl-0.4.2-6.el7 spectre-meltdown-checker-0.33-1.el7 transtats-cli-0.1.1-4.el7 Details about builds: ================================================================================ beanstalkd-1.10-2.el7 (FEDORA-EPEL-2018-e65f5edd12) A simple, fast work-queue service -------------------------------------------------------------------------------- Update Information: Removed systemd-units Requires and BuildRequires -------------------------------------------------------------------------------- ================================================================================ cmrt-1.0.6-4.el7 (FEDORA-EPEL-2018-2363152420) C for Media Runtime -------------------------------------------------------------------------------- Update Information: Rebase libva to 1.8-branch This prepare the libva introduction from epel to rhel (scheduled for 7.5) Please verify to fetch packages from rpmfusion testing (specially libva-intel-backend as needed). ffmpeg, vlc and xine have been rebuilt along this new version. -------------------------------------------------------------------------------- ================================================================================ dspam-3.10.2-12.el7 (FEDORA-EPEL-2018-e65f5edd12) A library and Mail Delivery Agent for Bayesian SPAM filtering -------------------------------------------------------------------------------- Update Information: Removed systemd-units Requires and BuildRequires -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.31-1.el7 (FEDORA-EPEL-2018-214099fae8) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: - Include missing conf file in test (cqi) - Add more document to request-repo and request-branch (cqi) - Stop allowing EPEL branches on official EL packages (mprahl) - Port fedrepo-req and fedrepo-req-branch to fedpkg (mprahl) - Fix test for unsupported Bodhi version (lsedlar) - Work with Bodhi 3 - rhbz#1507410 (lsedlar) - Allow any parameters in construct_build_url (cqi) - Fix the anongiturl (patrick) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507410 - fedpkg update fails with: "This system has bodhi v3, which is unsupported" https://bugzilla.redhat.com/show_bug.cgi?id=1507410 -------------------------------------------------------------------------------- ================================================================================ kabi-dw-0-0.5.20180130git545535a.el7 (FEDORA-EPEL-2018-ce3d54fb66) Detect changes in the ABI between kernel builds -------------------------------------------------------------------------------- Update Information: Update to upstream 545535ab2d5ea093074f5df5723901756d22f298 -------------------------------------------------------------------------------- ================================================================================ libva-1.8.3-0.1.el7 (FEDORA-EPEL-2018-2363152420) Video Acceleration (VA) API for Linux -------------------------------------------------------------------------------- Update Information: Rebase libva to 1.8-branch This prepare the libva introduction from epel to rhel (scheduled for 7.5) Please verify to fetch packages from rpmfusion testing (specially libva-intel-backend as needed). ffmpeg, vlc and xine have been rebuilt along this new version. -------------------------------------------------------------------------------- ================================================================================ libva-intel-hybrid-driver-1.0.2-4.el7.1 (FEDORA-EPEL-2018-2363152420) VA driver for Intel G45 & HD Graphics family -------------------------------------------------------------------------------- Update Information: Rebase libva to 1.8-branch This prepare the libva introduction from epel to rhel (scheduled for 7.5) Please verify to fetch packages from rpmfusion testing (specially libva-intel-backend as needed). ffmpeg, vlc and xine have been rebuilt along this new version. -------------------------------------------------------------------------------- ================================================================================ libva-utils-1.8.3-4.el7 (FEDORA-EPEL-2018-2363152420) Tools for VAAPI (including vainfo) -------------------------------------------------------------------------------- Update Information: Rebase libva to 1.8-branch This prepare the libva introduction from epel to rhel (scheduled for 7.5) Please verify to fetch packages from rpmfusion testing (specially libva-intel-backend as needed). ffmpeg, vlc and xine have been rebuilt along this new version. -------------------------------------------------------------------------------- ================================================================================ libva-vdpau-driver-0.7.4-19.el7 (FEDORA-EPEL-2018-2363152420) HW video decode support for VDPAU platforms -------------------------------------------------------------------------------- Update Information: Rebase libva to 1.8-branch This prepare the libva introduction from epel to rhel (scheduled for 7.5) Please verify to fetch packages from rpmfusion testing (specially libva-intel-backend as needed). ffmpeg, vlc and xine have been rebuilt along this new version. -------------------------------------------------------------------------------- ================================================================================ libvdpau-va-gl-0.4.2-6.el7 (FEDORA-EPEL-2018-2363152420) VDPAU driver with OpenGL/VAAPI back-end -------------------------------------------------------------------------------- Update Information: Rebase libva to 1.8-branch This prepare the libva introduction from epel to rhel (scheduled for 7.5) Please verify to fetch packages from rpmfusion testing (specially libva-intel-backend as needed). ffmpeg, vlc and xine have been rebuilt along this new version. -------------------------------------------------------------------------------- ================================================================================ spectre-meltdown-checker-0.33-1.el7 (FEDORA-EPEL-2018-ecb8a491af) Spectre & Meltdown vulnerability/mitigation checker for Linux -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ================================================================================ transtats-cli-0.1.1-4.el7 (FEDORA-EPEL-2018-e414ec4872) Transtats command line interface to query transtats server -------------------------------------------------------------------------------- Update Information: Fix of python3-transtats-cli requires both Python 2 and Python 3 (rhbz#1531568) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531568 - transtats-cli: python3-transtats-cli requires both Python 2 and Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1531568 --------------------------------------------------------------------------------

1 0

Keeping old packages
by Avi Kivity 31 Jan '18

31 Jan '18

Recently, I ran into breakage due to yaml-cpp-0.5.3 breaking yaml-cpp-0.5.1's ABI. The breakage was due to upstream not maintaining ABI compatibility (something that's very hard with some C++ libraries), but recovering from it was pretty hard, due to EPEL not keeping old packages around. If old packages were kept around, we could just tell people to run "yum downgrade yaml-cpp-0.5.1" and then pin that package, until the ABI issue was resolved. As it was, we had to refer them to the package from koji, which means that new installs become harder. Can we change the policy to keep old packages in the repository, to prevent this in the future?

2 2

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 30 Jan '18

30 Jan '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1058 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 821 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 403 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 300 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 132 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 70 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b monit-5.25.1-1.el7 19 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73feedd767 wordpress-4.9.2-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ce6223e559 GraphicsMagick-1.3.28-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9eb18da891 moodle-3.1.10-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0d5d190b0 transmission-2.92-12.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7 konversation-1.5.1-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fb68becde7 w3m-0.5.3-36.git20180125.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing epel-rpm-macros-7-14 f3-7.0-1.el7 freshmaker-0.0.10-2.el7 mongodb-2.6.12-6.el7 ncdu-1.13-1.el7 pdns-3.4.11-3.el7 python-adal-0.5.0-1.el7 python-msrest-0.4.25-1.el7 python-msrestazure-0.4.21-1.el7 yaml-cpp-0.5.1-1.el7.2 Details about builds: ================================================================================ epel-rpm-macros-7-14 (FEDORA-EPEL-2018-c5ae067f71) Extra Packages for Enterprise Linux RPM macros -------------------------------------------------------------------------------- Update Information: Add macros.ldconfig * `%ldconfig_scriptlets` * `%ldconfig_post` * `%ldconfig_postun` * `%ldconfig` https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets -------------------------------------------------------------------------------- ================================================================================ f3-7.0-1.el7 (FEDORA-EPEL-2018-1792115838) Utility to test for fake flash drives and cards -------------------------------------------------------------------------------- Update Information: Version 7.0 adds useful commands f3probe, f3brew, f3fix. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539368 - Please update f3 to version 7 and include Linux extra binaries https://bugzilla.redhat.com/show_bug.cgi?id=1539368 -------------------------------------------------------------------------------- ================================================================================ freshmaker-0.0.10-2.el7 (FEDORA-EPEL-2018-7448c0db98) Freshmaker is a service scheduling rebuilds of artifacts as new content becomes available. -------------------------------------------------------------------------------- Update Information: Fix the DB migration issue caused by duplicate ODCS compose ids in old database. -------------------------------------------------------------------------------- ================================================================================ mongodb-2.6.12-6.el7 (FEDORA-EPEL-2018-adb6af896b) High-performance, schema-free document-oriented database -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- ================================================================================ ncdu-1.13-1.el7 (FEDORA-EPEL-2018-0498d7be60) Text-based disk usage viewer -------------------------------------------------------------------------------- Update Information: Update to 1.13. Changes in this version: * Add "extended information" mode and `-e` flag * Add file mode, modification time and uid/gid to info window with `-e` * Add experimental color support and `--color` flag * Add `-rr` option to disable shell spawning * Remove directory nesting limit on file import * Fix handling of interrupts during file import * Fix undefined behavior that triggered crash on OS X -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539676 - ncdu-1.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=1539676 -------------------------------------------------------------------------------- ================================================================================ pdns-3.4.11-3.el7 (FEDORA-EPEL-2018-adb6af896b) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- ================================================================================ python-adal-0.5.0-1.el7 (FEDORA-EPEL-2018-ded09c462c) ADAL for Python -------------------------------------------------------------------------------- Update Information: # python-adal ## 0.5.0 * Enhancement: Add a new parameter in the `AuthenticationContext` to pass requests (connect,read) timeout parameters. ([#112](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/112)) * Adjustment: By default, no Personally Identifiable Information (PII) will be logged by ADAL Python. ([#111](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/111)) * Adjustment: Surfaces the `requests.HTTPError` so that app developer can deal with the `Retry-After` info from HTTP 429 error, if desired. ([#117](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/117)) #python-msrest ##0.4.25 * Add LROPoller class. This is a customizable LRO engine. This is the poller engine of Autorest.Python 3.0, and is not used by code generated by previous Autorest version. ##0.4.24 ###Bugfixes * Date parsing is not compliant with Autorest / Swagger 2.0 specification (less lenient) ###Internal optimisation * Call that does not return a streamable object are now executed in requests stream mode False (was True whatever the type of the call). This should reduce the number of leaked opened session and allow urllib3 to manage connection pooling more efficiently. Only clients generated with Autorest.Python >= 2.1.31 (not impacted otherwise, fully backward compatible) ##0.4.23 ###Bugfixes * Accept to deserialize enum of different type if content string match [#75](https://github.com/Azure/msrest-for- python/issues/75) * Stop failing on deserialization if enum string is unkwon. Return the string instead. ###Features * Model now accept kwargs in constructor for future kwargs models ##0.4.22 ###Bugfixes * Do not validate additional_properties [#73](https://github.com/Azure/msrest-for- python/issues/73) * Improve validation error if expected type is dict, but actual type is not [#73](https://github.com/Azure/msrest-for-python/issues/73) ##0.4.21 ###Bugfixes * Fix additional_properties if Swagger was flatten [#72](https://github.com/Azure/msrest-for-python/issues/72) ##0.4.20 ###Features * Add support for additional_properties * By default, all additional_properties are kept. * Additional properties are sent to the server only if it was specified in the Swagger, or if "enable_additional_properties_sending" is called on the model we want it. This is a class method that enables it for all instance of this model. ##0.4.19 ###Features * The interpretation of Swagger 2.0 "discriminator" is now lenient. This means for these two scenarios: * Discriminator value is missing from the received payload * Discriminator value is not defined in the Swagger Instead of failing with an exception, this now returns the base type for this "discriminator". Note that this is not a contradiction of the Swagger 2.0 spec, that specifies "validation SHOULD fail [...] there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course." This cannot be configured for now and is the new default behavior, but can be in the future if needed. ###Bugfixes * Optional formdata parameters were raising an exception ([#65](https://github.com/Azure/msrest-for- python/issues/65)) * "application/x-www-form-urlencoded" form was sent using "multipart/form-data". This causes problems if the server does not support "multipart/form-data" ([#66](https://github.com/Azure/msrest-for- python/issues/66)) #python-msrestazure ## 0.4.21 * Update allowed ADAL dependency to 0.5.x ## 0.4.20 ###Features * CloudError now includes the ��innererror�� attribute to match OData v4 [#73](https://github.com/Azure /msrestazure-for-python/issues/73) * Introduces ARMPolling implementation of Azure Resource Management LRO. Requires msrest 0.4.25 (new dependency). This is used by code generated with Autorest.Python 3.0, and is not used by code generated by previous Autorest version. * Change msrest dependency to ��>=0.4.25,<2.0.0�� to allow (future) msrest 1.0.0 as compatible dependency. Thank you to demyanenko for his contribution. ##0.4.19 ###Feature * Improve MSIAuthentication to support User Assigned Identity [#70](https://github.com/Azure/msrestazure-for-python/issues/70) ###Bugfixes * Fix session obj for cloudmetadata endpoint [#67](https://github.com/Azure /msrestazure-for-python/issues/67) * Fix authentication resource node for AzureSatck [#65](https://github.com/Azure/msrestazure-for-python/issues/65) * Better detection of AppService with MSIAuthentication [#70](https://github.com/Azure/msrestazure-for-python/issues/70) ##0.4.18 ###Bugfixes * get_cloud_from_metadata_endpoint incorrect on AzureStack [#62](https://github.com/Azure/msrestazure-for-python/issues/62) * get_cloud_from_metadata_endpoint certificate issue [#61](https://github.com/Azure/msrestazure-for-python/issues/61) ##0.4.17 ###Bugfixes * Fix AttributeError if error JSON from ARM does not follow ODatav4 (as it should) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1516286 - python-msrest-v0.4.25 is available https://bugzilla.redhat.com/show_bug.cgi?id=1516286 -------------------------------------------------------------------------------- ================================================================================ python-msrest-0.4.25-1.el7 (FEDORA-EPEL-2018-ded09c462c) AutoRest swagger generator Python client runtime -------------------------------------------------------------------------------- Update Information: # python-adal ## 0.5.0 * Enhancement: Add a new parameter in the `AuthenticationContext` to pass requests (connect,read) timeout parameters. ([#112](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/112)) * Adjustment: By default, no Personally Identifiable Information (PII) will be logged by ADAL Python. ([#111](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/111)) * Adjustment: Surfaces the `requests.HTTPError` so that app developer can deal with the `Retry-After` info from HTTP 429 error, if desired. ([#117](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/117)) #python-msrest ##0.4.25 * Add LROPoller class. This is a customizable LRO engine. This is the poller engine of Autorest.Python 3.0, and is not used by code generated by previous Autorest version. ##0.4.24 ###Bugfixes * Date parsing is not compliant with Autorest / Swagger 2.0 specification (less lenient) ###Internal optimisation * Call that does not return a streamable object are now executed in requests stream mode False (was True whatever the type of the call). This should reduce the number of leaked opened session and allow urllib3 to manage connection pooling more efficiently. Only clients generated with Autorest.Python >= 2.1.31 (not impacted otherwise, fully backward compatible) ##0.4.23 ###Bugfixes * Accept to deserialize enum of different type if content string match [#75](https://github.com/Azure/msrest-for- python/issues/75) * Stop failing on deserialization if enum string is unkwon. Return the string instead. ###Features * Model now accept kwargs in constructor for future kwargs models ##0.4.22 ###Bugfixes * Do not validate additional_properties [#73](https://github.com/Azure/msrest-for- python/issues/73) * Improve validation error if expected type is dict, but actual type is not [#73](https://github.com/Azure/msrest-for-python/issues/73) ##0.4.21 ###Bugfixes * Fix additional_properties if Swagger was flatten [#72](https://github.com/Azure/msrest-for-python/issues/72) ##0.4.20 ###Features * Add support for additional_properties * By default, all additional_properties are kept. * Additional properties are sent to the server only if it was specified in the Swagger, or if "enable_additional_properties_sending" is called on the model we want it. This is a class method that enables it for all instance of this model. ##0.4.19 ###Features * The interpretation of Swagger 2.0 "discriminator" is now lenient. This means for these two scenarios: * Discriminator value is missing from the received payload * Discriminator value is not defined in the Swagger Instead of failing with an exception, this now returns the base type for this "discriminator". Note that this is not a contradiction of the Swagger 2.0 spec, that specifies "validation SHOULD fail [...] there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course." This cannot be configured for now and is the new default behavior, but can be in the future if needed. ###Bugfixes * Optional formdata parameters were raising an exception ([#65](https://github.com/Azure/msrest-for- python/issues/65)) * "application/x-www-form-urlencoded" form was sent using "multipart/form-data". This causes problems if the server does not support "multipart/form-data" ([#66](https://github.com/Azure/msrest-for- python/issues/66)) #python-msrestazure ## 0.4.21 * Update allowed ADAL dependency to 0.5.x ## 0.4.20 ###Features * CloudError now includes the ��innererror�� attribute to match OData v4 [#73](https://github.com/Azure /msrestazure-for-python/issues/73) * Introduces ARMPolling implementation of Azure Resource Management LRO. Requires msrest 0.4.25 (new dependency). This is used by code generated with Autorest.Python 3.0, and is not used by code generated by previous Autorest version. * Change msrest dependency to ��>=0.4.25,<2.0.0�� to allow (future) msrest 1.0.0 as compatible dependency. Thank you to demyanenko for his contribution. ##0.4.19 ###Feature * Improve MSIAuthentication to support User Assigned Identity [#70](https://github.com/Azure/msrestazure-for-python/issues/70) ###Bugfixes * Fix session obj for cloudmetadata endpoint [#67](https://github.com/Azure /msrestazure-for-python/issues/67) * Fix authentication resource node for AzureSatck [#65](https://github.com/Azure/msrestazure-for-python/issues/65) * Better detection of AppService with MSIAuthentication [#70](https://github.com/Azure/msrestazure-for-python/issues/70) ##0.4.18 ###Bugfixes * get_cloud_from_metadata_endpoint incorrect on AzureStack [#62](https://github.com/Azure/msrestazure-for-python/issues/62) * get_cloud_from_metadata_endpoint certificate issue [#61](https://github.com/Azure/msrestazure-for-python/issues/61) ##0.4.17 ###Bugfixes * Fix AttributeError if error JSON from ARM does not follow ODatav4 (as it should) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1516286 - python-msrest-v0.4.25 is available https://bugzilla.redhat.com/show_bug.cgi?id=1516286 -------------------------------------------------------------------------------- ================================================================================ python-msrestazure-0.4.21-1.el7 (FEDORA-EPEL-2018-ded09c462c) AutoRest swagger generator Python client runtime (Azure-specific module) -------------------------------------------------------------------------------- Update Information: # python-adal ## 0.5.0 * Enhancement: Add a new parameter in the `AuthenticationContext` to pass requests (connect,read) timeout parameters. ([#112](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/112)) * Adjustment: By default, no Personally Identifiable Information (PII) will be logged by ADAL Python. ([#111](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/111)) * Adjustment: Surfaces the `requests.HTTPError` so that app developer can deal with the `Retry-After` info from HTTP 429 error, if desired. ([#117](https://github.com/AzureAD/azure-activedirectory-library-for- python/pull/117)) #python-msrest ##0.4.25 * Add LROPoller class. This is a customizable LRO engine. This is the poller engine of Autorest.Python 3.0, and is not used by code generated by previous Autorest version. ##0.4.24 ###Bugfixes * Date parsing is not compliant with Autorest / Swagger 2.0 specification (less lenient) ###Internal optimisation * Call that does not return a streamable object are now executed in requests stream mode False (was True whatever the type of the call). This should reduce the number of leaked opened session and allow urllib3 to manage connection pooling more efficiently. Only clients generated with Autorest.Python >= 2.1.31 (not impacted otherwise, fully backward compatible) ##0.4.23 ###Bugfixes * Accept to deserialize enum of different type if content string match [#75](https://github.com/Azure/msrest-for- python/issues/75) * Stop failing on deserialization if enum string is unkwon. Return the string instead. ###Features * Model now accept kwargs in constructor for future kwargs models ##0.4.22 ###Bugfixes * Do not validate additional_properties [#73](https://github.com/Azure/msrest-for- python/issues/73) * Improve validation error if expected type is dict, but actual type is not [#73](https://github.com/Azure/msrest-for-python/issues/73) ##0.4.21 ###Bugfixes * Fix additional_properties if Swagger was flatten [#72](https://github.com/Azure/msrest-for-python/issues/72) ##0.4.20 ###Features * Add support for additional_properties * By default, all additional_properties are kept. * Additional properties are sent to the server only if it was specified in the Swagger, or if "enable_additional_properties_sending" is called on the model we want it. This is a class method that enables it for all instance of this model. ##0.4.19 ###Features * The interpretation of Swagger 2.0 "discriminator" is now lenient. This means for these two scenarios: * Discriminator value is missing from the received payload * Discriminator value is not defined in the Swagger Instead of failing with an exception, this now returns the base type for this "discriminator". Note that this is not a contradiction of the Swagger 2.0 spec, that specifies "validation SHOULD fail [...] there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course." This cannot be configured for now and is the new default behavior, but can be in the future if needed. ###Bugfixes * Optional formdata parameters were raising an exception ([#65](https://github.com/Azure/msrest-for- python/issues/65)) * "application/x-www-form-urlencoded" form was sent using "multipart/form-data". This causes problems if the server does not support "multipart/form-data" ([#66](https://github.com/Azure/msrest-for- python/issues/66)) #python-msrestazure ## 0.4.21 * Update allowed ADAL dependency to 0.5.x ## 0.4.20 ###Features * CloudError now includes the ��innererror�� attribute to match OData v4 [#73](https://github.com/Azure /msrestazure-for-python/issues/73) * Introduces ARMPolling implementation of Azure Resource Management LRO. Requires msrest 0.4.25 (new dependency). This is used by code generated with Autorest.Python 3.0, and is not used by code generated by previous Autorest version. * Change msrest dependency to ��>=0.4.25,<2.0.0�� to allow (future) msrest 1.0.0 as compatible dependency. Thank you to demyanenko for his contribution. ##0.4.19 ###Feature * Improve MSIAuthentication to support User Assigned Identity [#70](https://github.com/Azure/msrestazure-for-python/issues/70) ###Bugfixes * Fix session obj for cloudmetadata endpoint [#67](https://github.com/Azure /msrestazure-for-python/issues/67) * Fix authentication resource node for AzureSatck [#65](https://github.com/Azure/msrestazure-for-python/issues/65) * Better detection of AppService with MSIAuthentication [#70](https://github.com/Azure/msrestazure-for-python/issues/70) ##0.4.18 ###Bugfixes * get_cloud_from_metadata_endpoint incorrect on AzureStack [#62](https://github.com/Azure/msrestazure-for-python/issues/62) * get_cloud_from_metadata_endpoint certificate issue [#61](https://github.com/Azure/msrestazure-for-python/issues/61) ##0.4.17 ###Bugfixes * Fix AttributeError if error JSON from ARM does not follow ODatav4 (as it should) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1516286 - python-msrest-v0.4.25 is available https://bugzilla.redhat.com/show_bug.cgi?id=1516286 -------------------------------------------------------------------------------- ================================================================================ yaml-cpp-0.5.1-1.el7.2 (FEDORA-EPEL-2018-adb6af896b) A YAML parser and emitter for C++ -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 30 Jan '18

30 Jan '18

The following Fedora EPEL 6 Security updates need testing: Age URL 931 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 821 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 792 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 403 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 132 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 52 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6e4ce19598 monit-5.25.1-1.el6 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2ba6bfc5d8 wordpress-4.9.2-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1049ca4872 GraphicsMagick-1.3.28-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-369a48191f clamav-0.99.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing epel-rpm-macros-6-17 ncdu-1.13-1.el6 Details about builds: ================================================================================ epel-rpm-macros-6-17 (FEDORA-EPEL-2018-580a31cb75) Extra Packages for Enterprise Linux RPM macros -------------------------------------------------------------------------------- Update Information: Add macros.ldconfig * `%ldconfig_scriptlets` * `%ldconfig_post` * `%ldconfig_postun` * `%ldconfig` https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets -------------------------------------------------------------------------------- ================================================================================ ncdu-1.13-1.el6 (FEDORA-EPEL-2018-b96ae423cd) Text-based disk usage viewer -------------------------------------------------------------------------------- Update Information: Update to 1.13. Changes in this version: * Add "extended information" mode and `-e` flag * Add file mode, modification time and uid/gid to info window with `-e` * Add experimental color support and `--color` flag * Add `-rr` option to disable shell spawning * Remove directory nesting limit on file import * Fix handling of interrupts during file import * Fix undefined behavior that triggered crash on OS X -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539676 - ncdu-1.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=1539676 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by smooge＠fedoraproject.org 30 Jan '18

30 Jan '18

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2018-01-31 from 18:00:00 to 19:00:00 GMT At fedora-meeting(a)irc.freenode.net The meeting will be about: The EPEL Steering Committee will have a weekly meeting to cover current tasks and problems needed to keep EPEL going. Source: https://apps.fedoraproject.org/calendar/meeting/8724/

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 29 Jan '18

29 Jan '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1057 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 820 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 402 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 299 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 131 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 68 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 32 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b monit-5.25.1-1.el7 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73feedd767 wordpress-4.9.2-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ce6223e559 GraphicsMagick-1.3.28-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9eb18da891 moodle-3.1.10-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0d5d190b0 transmission-2.92-12.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7 konversation-1.5.1-4.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing fuse-encfs-1.9.4-1.el7 mongodb-2.6.12-6.el7 pdns-3.4.11-3.el7 python-socksipychain-2.0.15-1.el7 timeshift-18.1.1-4.el7 w3m-0.5.3-36.git20180125.el7 yaml-cpp-0.5.1-1.el7.1 Details about builds: ================================================================================ fuse-encfs-1.9.4-1.el7 (FEDORA-EPEL-2018-64ebf1c9ea) Encrypted pass-thru filesystem in userspace -------------------------------------------------------------------------------- Update Information: Update to 1.9.4. -------------------------------------------------------------------------------- ================================================================================ mongodb-2.6.12-6.el7 (FEDORA-EPEL-2018-adb6af896b) High-performance, schema-free document-oriented database -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- ================================================================================ pdns-3.4.11-3.el7 (FEDORA-EPEL-2018-adb6af896b) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- ================================================================================ python-socksipychain-2.0.15-1.el7 (FEDORA-EPEL-2018-2cf21e719f) A Python SOCKS/HTTP Proxy module -------------------------------------------------------------------------------- Update Information: New dependency from Fedora and EPEL6 for pagekite. -------------------------------------------------------------------------------- References: [ 1 ] Bug #910146 - Review Request: python-socksipychain - Python SOCKS/HTTP Proxy module https://bugzilla.redhat.com/show_bug.cgi?id=910146 -------------------------------------------------------------------------------- ================================================================================ timeshift-18.1.1-4.el7 (FEDORA-EPEL-2018-2034535a48) System restore tool for Linux -------------------------------------------------------------------------------- Update Information: - Properly apply system LDFLAGS and thus enable full hardening - Generate useful -debugsource package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1534446 - Review Request: timeshift - System restore tool for Linux https://bugzilla.redhat.com/show_bug.cgi?id=1534446 -------------------------------------------------------------------------------- ================================================================================ w3m-0.5.3-36.git20180125.el7 (FEDORA-EPEL-2018-fb68becde7) A pager with Web browsing abilities -------------------------------------------------------------------------------- Update Information: Rebase to latest upstream gitrev 20180125 and Security fix for CVE-2018-6196, CVE-2018-6197, CVE-2018-6198 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539157 - CVE-2018-6196 w3m: Infinite recursion in HTMLlineproc0 https://bugzilla.redhat.com/show_bug.cgi?id=1539157 [ 2 ] Bug #1539151 - CVE-2018-6197 w3m: Null pointer dereference in formUpdateBuffer in form.c https://bugzilla.redhat.com/show_bug.cgi?id=1539151 [ 3 ] Bug #1539127 - CVE-2018-6198 w3m: insecure temporary files creation when ~/.w3m is unwritable https://bugzilla.redhat.com/show_bug.cgi?id=1539127 -------------------------------------------------------------------------------- ================================================================================ yaml-cpp-0.5.1-1.el7.1 (FEDORA-EPEL-2018-adb6af896b) A YAML parser and emitter for C++ -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 28 Jan '18

28 Jan '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1056 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 819 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 401 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 299 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 130 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 68 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 31 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b monit-5.25.1-1.el7 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73feedd767 wordpress-4.9.2-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ce6223e559 GraphicsMagick-1.3.28-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9eb18da891 moodle-3.1.10-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0d5d190b0 transmission-2.92-12.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7 konversation-1.5.1-4.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-Rcpp-0.12.15-1.el7 beakerlib-1.17-7.el7 clamav-0.99.3-1.el7 icecast-2.4.3-1.el7 lammps-20180117-1.el7 opensmtpd-6.0.3p1-1.el7 paho-c-1.2.0-10.el7 python-fedmsg-meta-fedora-infrastructure-0.23.1-1.el7 rubygem-review-2.4.0-2.el7 timeshift-18.1.1-2.el7 Details about builds: ================================================================================ R-Rcpp-0.12.15-1.el7 (FEDORA-EPEL-2018-6beee6998b) Seamless R and C++ Integration -------------------------------------------------------------------------------- Update Information: Rcpp 0.12.15. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536947 - Version 0.12.15 was released https://bugzilla.redhat.com/show_bug.cgi?id=1536947 -------------------------------------------------------------------------------- ================================================================================ beakerlib-1.17-7.el7 (FEDORA-EPEL-2018-4bf38c0ab2) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: - phase name sanitization (remove all weird characters) - allow debug message to to only to console (speeds execution up in debug) - allow to reboot inside of phase and continue there - fixed persistent data loading -------------------------------------------------------------------------------- ================================================================================ clamav-0.99.3-1.el7 (FEDORA-EPEL-2018-685990fa70) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: ClamAV 0.99.3 ============= This release is a security release and is recommended for all ClamAV users. Please see details below: 1. ClamAV UAF (use-after-free) Vulnerabilities (CVE-2017-12374) --------------------------------------------------------------- The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing operations. If successfully exploited, the ClamAV software could allow a variable pointing to the mail body which could cause a used after being free (use-after-free) instance which may lead to a disruption of services on an affected device to include a denial of service condition. * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * https://bugzilla.clamav.net/show_bug.cgi?id=11939 2. ClamAV Buffer Overflow Vulnerability (CVE-2017-12375) -------------------------------------------------------- The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing functions. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition on an affected device. * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N /A:L * https://bugzilla.clamav.net/show_bug.cgi?id=11940 3. ClamAV Buffer Overflow in handle_pdfname Vulnerability (CVE-2017-12376) -------------------------------------------------------------------------- ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause a buffer overflow when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code. * https://bugzilla.clamav.net/show_bug.cgi?id=11942 * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 4. ClamAV Mew Packet Heap Overflow Vulnerability (CVE-2017-12377) ----------------------------------------------------------------- ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in mew packet files sent to an affected device. A successful exploit could cause a heap overflow condition when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code on the affected device. * https://bugzilla.clamav.net/show_bug.cgi?id=11943 * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L /A:L 5. ClamAV Buffer Over Read Vulnerability (CVE-2017-12378) --------------------------------------------------------- ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar (Tape Archive) files sent to an affected device. A successful exploit could cause a buffer over-read condition when ClamAV scans the malicious .tar file, potentially allowing the attacker to cause a DoS condition on the affected device. * https://bugzilla.clamav.net/show_bug.cgi?id=11946 * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N /A:L 6. ClamAV Buffer Overflow in messageAddArgument Vulnerability (CVE-2017-12379) ------------------------------------------------------------------------------ ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device. * https://bugzilla.clamav.net/show_bug.cgi?id=11944 * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L /A:L 7. ClamAV Null Dereference Vulnerability (CVE-2017-12380) --------------------------------------------------------- ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition. * https://bugzilla.clamav.net/show_bug.cgi?id=11945 * CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Further fixes/changes --------------------- Also included are 2 minor fixes to properly detect openssl install locations on FreeBSD 11, and prevent false warnings about zlib 1.2.1# version numbers. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1483910 - CVE-2017-6420 clamav: use-after-free in wwunpack function https://bugzilla.redhat.com/show_bug.cgi?id=1483910 [ 2 ] Bug #1483909 - CVE-2017-6419 libmspack, clamav: heap-based buffer overflow in mspack/lzxd.c https://bugzilla.redhat.com/show_bug.cgi?id=1483909 [ 3 ] Bug #1483908 - CVE-2017-6418 clamav: out-of-bounds read in libclamav/message.c https://bugzilla.redhat.com/show_bug.cgi?id=1483908 -------------------------------------------------------------------------------- ================================================================================ icecast-2.4.3-1.el7 (FEDORA-EPEL-2018-5c5b702be4) ShoutCast compatible streaming media server -------------------------------------------------------------------------------- Update Information: - New upstream release - Add `Requires: mailcap` - Remove lots of old cruft from spec file -------------------------------------------------------------------------------- References: [ 1 ] Bug #1519830 - Missing dependency for /etc/mime.types https://bugzilla.redhat.com/show_bug.cgi?id=1519830 [ 2 ] Bug #1139975 - Please include Icecast 2.4 in EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1139975 [ 3 ] Bug #1303784 - icecast-2.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1303784 -------------------------------------------------------------------------------- ================================================================================ lammps-20180117-1.el7 (FEDORA-EPEL-2018-7cdfe2c662) Molecular Dynamics Simulator -------------------------------------------------------------------------------- Update Information: Update to v20180117 -------------------------------------------------------------------------------- ================================================================================ opensmtpd-6.0.3p1-1.el7 (FEDORA-EPEL-2018-e79327a816) Free implementation of the server-side SMTP protocol as defined by RFC 5321 -------------------------------------------------------------------------------- Update Information: Changes in this release (since 6.0.2): --- - various documentation improvements - introduce configurable sub-address delimiters - various code cleanup and simplifications - unplug filter code from the smtp engine - introduce 'authenticated' filter in smtpd.conf rules -------------------------------------------------------------------------------- References: [ 1 ] Bug #1534983 - opensmtpd-6.0.3p1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1534983 -------------------------------------------------------------------------------- ================================================================================ paho-c-1.2.0-10.el7 (FEDORA-EPEL-2018-c6252bfaca) MQTT C Client -------------------------------------------------------------------------------- Update Information: This is the initial release for the Eclipse Paho C. A MQTT client written in C. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476458 - Review Request: paho-c - MQTT client library in C https://bugzilla.redhat.com/show_bug.cgi?id=1476458 -------------------------------------------------------------------------------- ================================================================================ python-fedmsg-meta-fedora-infrastructure-0.23.1-1.el7 (FEDORA-EPEL-2018-e6583e809c) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information: Changelog is available at: https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0231 ---- 0.23.0 ------ Pull Requests - (@ralphbean) #451 Target py3.6 https://github.com/fedora-infra/fedmsg_meta_fedora_infrastructure/pull/451 - (@pypingou) #453 Add support for the new pagure messages https://github.com/fedora-infra/fedmsg_meta_fedora_infrastructure/pull/453 - (@ralphbean) #452 WaiverDB processor. https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/pull/452 - (@adamwill) #455 Substantial rewrite + extension of compose.* tests https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/pull/455 - (@ralphbean) #456 An icon for waiverdb. https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/pull/456 - (@adamwill) #457 Fix `nodoc` to exclude test class from topic list https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/pull/457 - (@ralphbean) #450 A first pass at greenwave handling. https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/pull/450 - (@adamwill) #459 Revise subtitles for compose.* messages https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/pull/459 ---- Update to 0.22.0 Changelog available at: https://github.com/fedora-infra/fedmsg_meta_fedora_infra structure/blob/dcf6ee2ea004f7106a3b851bf2e05e11de2e4d30/CHANGELOG.rst#0220 ---- Update to 0.20.0 Change log at : https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0200 ---- Update to 0.19.0 Release note at: https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0190 -------------------------------------------------------------------------------- ================================================================================ rubygem-review-2.4.0-2.el7 (FEDORA-EPEL-2018-8888e82885) Flexible document format/conversion system -------------------------------------------------------------------------------- Update Information: - Update to 2.4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466317 - rubygem-review-2.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466317 -------------------------------------------------------------------------------- ================================================================================ timeshift-18.1.1-2.el7 (FEDORA-EPEL-2018-c4a955e60b) System restore tool for Linux -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1534446 - Review Request: timeshift - System restore tool for Linux https://bugzilla.redhat.com/show_bug.cgi?id=1534446 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel January 2018