epel-devel May 2018

epel-devel@lists.fedoraproject.org

22 participants
67 discussions

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 26 May '18

26 May '18

The following Fedora EPEL 6 Security updates need testing: Age URL 48 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5aca1d385d remctl-3.14-1.el6 46 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd6e4a3f0b python34-3.4.8-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9bdc4006c3 gifsicle-1.91-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing youtube-dl-2018.05.18-1.el6 Details about builds: ================================================================================ youtube-dl-2018.05.18-1.el6 (FEDORA-EPEL-2018-6adaa7ebb1) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Update to the latest upstream -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Mat��j Cepl <mcepl(a)redhat.com> - 2018.05.18-1 - Update to the latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1571491 - youtube-dl-2018.05.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1571491 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 26 May '18

26 May '18

The following Fedora EPEL 7 Security updates need testing: Age URL 48 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2c81054303 remctl-3.14-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8b8dc96235 nodejs-deep-extend-0.5.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3a39b00b77 thunderbird-enigmail-2.0.4-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-860176245e gifsicle-1.91-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-48b823c3dc strongswan-5.6.2-6.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beaker-25.4-1.el7 chromium-66.0.3359.181-2.el7 iperf-2.0.11-1.el7 libqtxdg-2.0.0-12.el7 lxqt-qtplugin-0.11.1-11.el7 pdns-recursor-4.1.3-2.el7 phpMyAdmin-4.4.15.10-3.el7 purple-discord-0-18.20180515gitb895521.el7 purple-hangouts-0-58.20180419hg9d008f2.el7 purple-libsteam-1.6.1-21.20180514git4a09c08.el7 purple-skypeweb-1.5-1.20180525gitcf65095.el7 python-moksha-hub-1.5.7-1.el7 standard-test-roles-2.13-1.el7 youtube-dl-2018.05.18-1.el7 Details about builds: ================================================================================ beaker-25.4-1.el7 (FEDORA-EPEL-2018-e15951a712) Full-stack software and hardware integration testing system -------------------------------------------------------------------------------- Update Information: Upstream version 25.4 ---- Upstream version 25.2 -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Greg Hellings <greg.hellings(a)gmail.com> - 25.4-1 - Upstream version 25.4 - Fixes BZ 1579575 * Mon May 14 2018 Greg Hellings <greg.hellings(a)gmail.com> - 25.2-1 - Upstream version 25.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1579575 - beaker-25.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1579575 [ 2 ] Bug #1566043 - beaker-25.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1566043 -------------------------------------------------------------------------------- ================================================================================ chromium-66.0.3359.181-2.el7 (FEDORA-EPEL-2018-297fb7f6c0) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Update to 66.0.3359.181. Security fix for CVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102 CVE-2018-6103 CVE-2018-6104 CVE-2018-6105 CVE-2018-6106 CVE-2018-6107 CVE-2018-6108 CVE-2018-6109 CVE-2018-6110 CVE-2018-6111 CVE-2018-6112 CVE-2018-6113 CVE-2018-6114 CVE-2018-6116 CVE-2018-6117 CVE-2018-6118 CVE-2018-6120 CVE-2018-6121 CVE-2018-6122 -------------------------------------------------------------------------------- ChangeLog: * Wed May 23 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-2 - fix missing files * Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-1 - update to 66.0.3359.181 * Tue May 15 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.170-2 - only x86_64 i686 have swiftshader - fix gcc8 alignof issue on i686 * Mon May 14 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.170-1 - update to 66.0.3359.170 - include swiftshader files * Tue May 1 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.139-1 - update to 66.0.3359.139 * Wed Apr 18 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.117-1 - update to 66.0.3359.117 * Tue Apr 17 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-3 - use system fontconfig (except on epel7) * Wed Apr 4 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-2 - add explicit dependency on minizip (bz 1534282) * Wed Mar 28 2018 Tom Callaway <spot(a)fedoraproject.org> - check that there is no system 'google' module, shadowing bundled ones - conditionalize api keys (on by default) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1577115 - CVE-2018-6120 chromium-browser: Heap buffer overflow in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1577115 [ 2 ] Bug #1577114 - CVE-2018-6122 chromium-browser: Type confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1577114 [ 3 ] Bug #1577113 - CVE-2018-6121 chromium-browser: Privilege Escalation in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1577113 [ 4 ] Bug #1573856 - CVE-2018-6118 chromium-browser: Use after free in Media Cache https://bugzilla.redhat.com/show_bug.cgi?id=1573856 [ 5 ] Bug #1568797 - CVE-2018-6117 chromium-browser: Confusing autofill settings https://bugzilla.redhat.com/show_bug.cgi?id=1568797 [ 6 ] Bug #1568796 - CVE-2018-6116 chromium-browser: Incorrect low memory handling in WebAssembly https://bugzilla.redhat.com/show_bug.cgi?id=1568796 [ 7 ] Bug #1568795 - CVE-2018-6115 chromium-browser: SmartScreen bypass in downloads https://bugzilla.redhat.com/show_bug.cgi?id=1568795 [ 8 ] Bug #1568794 - CVE-2018-6114 chromium-browser: CSP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1568794 [ 9 ] Bug #1568793 - CVE-2018-6113 chromium-browser: URL spoof in Navigation https://bugzilla.redhat.com/show_bug.cgi?id=1568793 [ 10 ] Bug #1568792 - CVE-2018-6112 chromium-browser: Incorrect URL handling in DevTools https://bugzilla.redhat.com/show_bug.cgi?id=1568792 [ 11 ] Bug #1568791 - CVE-2018-6111 chromium-browser: Heap-use-after-free in DevTools https://bugzilla.redhat.com/show_bug.cgi?id=1568791 [ 12 ] Bug #1568790 - CVE-2018-6110 chromium-browser: Incorrect handling of plaintext files via file:// https://bugzilla.redhat.com/show_bug.cgi?id=1568790 [ 13 ] Bug #1568789 - CVE-2018-6109 chromium-browser: Incorrect handling of files by FileAPI https://bugzilla.redhat.com/show_bug.cgi?id=1568789 [ 14 ] Bug #1568788 - CVE-2018-6108 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568788 [ 15 ] Bug #1568787 - CVE-2018-6107 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568787 [ 16 ] Bug #1568786 - CVE-2018-6106 chromium-browser: Incorrect handling of promises in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1568786 [ 17 ] Bug #1568785 - CVE-2018-6105 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568785 [ 18 ] Bug #1568782 - CVE-2018-6104 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568782 [ 19 ] Bug #1568781 - CVE-2018-6103 chromium-browser: UI spoof in Permissions https://bugzilla.redhat.com/show_bug.cgi?id=1568781 [ 20 ] Bug #1568780 - CVE-2018-6102 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568780 [ 21 ] Bug #1568779 - CVE-2018-6101 chromium-browser: Insufficient protection of remote debugging prototol in DevTools https://bugzilla.redhat.com/show_bug.cgi?id=1568779 [ 22 ] Bug #1568778 - CVE-2018-6100 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568778 [ 23 ] Bug #1568777 - CVE-2018-6099 chromium-browser: CORS bypass in ServiceWorker https://bugzilla.redhat.com/show_bug.cgi?id=1568777 [ 24 ] Bug #1568776 - CVE-2018-6098 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1568776 [ 25 ] Bug #1568775 - CVE-2018-6097 chromium-browser: Fullscreen UI spoof https://bugzilla.redhat.com/show_bug.cgi?id=1568775 [ 26 ] Bug #1568774 - CVE-2018-6096 chromium-browser: Fullscreen UI spoof https://bugzilla.redhat.com/show_bug.cgi?id=1568774 [ 27 ] Bug #1568773 - CVE-2018-6095 chromium-browser: Lack of meaningful user interaction requirement before file upload https://bugzilla.redhat.com/show_bug.cgi?id=1568773 [ 28 ] Bug #1568771 - CVE-2018-6094 chromium-browser: Exploit hardening regression in Oilpan https://bugzilla.redhat.com/show_bug.cgi?id=1568771 [ 29 ] Bug #1568770 - CVE-2018-6093 chromium-browser: Same origin bypass in Service Worker https://bugzilla.redhat.com/show_bug.cgi?id=1568770 [ 30 ] Bug #1568769 - CVE-2018-6092 chromium-browser: Integer overflow in WebAssembly https://bugzilla.redhat.com/show_bug.cgi?id=1568769 [ 31 ] Bug #1568767 - CVE-2018-6091 chromium-browser: Incorrect handling of plug-ins by Service Worker https://bugzilla.redhat.com/show_bug.cgi?id=1568767 [ 32 ] Bug #1568766 - CVE-2018-6090 chromium-browser: Heap buffer overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1568766 [ 33 ] Bug #1568765 - CVE-2018-6089 chromium-browser: Same origin policy bypass in Service Worker https://bugzilla.redhat.com/show_bug.cgi?id=1568765 [ 34 ] Bug #1568764 - CVE-2018-6088 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1568764 [ 35 ] Bug #1568763 - CVE-2018-6087 chromium-browser: Use after free in WebAssembly https://bugzilla.redhat.com/show_bug.cgi?id=1568763 [ 36 ] Bug #1568762 - CVE-2018-6086 chromium-browser: Use after free in Disk Cache https://bugzilla.redhat.com/show_bug.cgi?id=1568762 [ 37 ] Bug #1568761 - CVE-2018-6085 chromium-browser: Use after free in Disk Cache https://bugzilla.redhat.com/show_bug.cgi?id=1568761 -------------------------------------------------------------------------------- ================================================================================ iperf-2.0.11-1.el7 (FEDORA-EPEL-2018-8b690ea247) Measurement tool for TCP/UDP bandwidth performance -------------------------------------------------------------------------------- Update Information: update to 2.0.11 (#1582496) -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Gabriel Somlo <somlo at cmu.edu> 2.0.11-1 - update to 2.0.11 (#1582496) * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1582496 - iperf-2.0.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1582496 -------------------------------------------------------------------------------- ================================================================================ libqtxdg-2.0.0-12.el7 (FEDORA-EPEL-2018-eff5a537a1) QtXdg, a Qt5 implementation of XDG standards -------------------------------------------------------------------------------- Update Information: Rebuild for EL 7.5 (Qt updated to 5.9, we rebuilt the packages using private api here) -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 7 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 2.0.0-12 - .spec cleanup, BR: gcc-c++, use %license %make_build * Wed Feb 14 2018 Jan Grulich <jgrulich(a)redhat.com> - 2.0.0-11 - rebuild (qt5) * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Dec 20 2017 Jan Grulich <jgrulich(a)redhat.com> - 2.0.0-9 - rebuild (qt5) * Sun Nov 26 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 2.0.0-8 - rebuild (qt5) * Thu Oct 19 2017 Christian Dersch <lupinix(a)mailbox.org> - 2.0.0-7 - rebuilt * Wed Oct 11 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 2.0.0-6 - BR: qt5-qtbase-private-devel * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ lxqt-qtplugin-0.11.1-11.el7 (FEDORA-EPEL-2018-eff5a537a1) Qt plugin framework for LXQt Desktop Suite -------------------------------------------------------------------------------- Update Information: Rebuild for EL 7.5 (Qt updated to 5.9, we rebuilt the packages using private api here) -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 14 2018 Jan Grulich <jgrulich(a)redhat.com> - 0.11.1-11 - rebuild (qt5) * Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Dec 20 2017 Jan Grulich <jgrulich(a)redhat.com> - 0.11.1-9 - rebuild (qt5) * Mon Nov 27 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 0.11.1-8 - rebuild (qt5) * Mon Oct 9 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 0.11.1-7 - rebuild (qt5) * Sun Aug 13 2017 Christian Dersch <lupinix(a)mailbox.org> - 0.11.1-6 - use versioned dependency for Qt * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ pdns-recursor-4.1.3-2.el7 (FEDORA-EPEL-2018-90002f509e) Modern, advanced and high performance recursing/non authoritative name server -------------------------------------------------------------------------------- Update Information: - Upstream released new version - Fix a bunch of CVE's -------------------------------------------------------------------------------- ChangeLog: * Thu May 24 2018 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 4.1.3-2 - Fix sigabort (#1578732) - Enable support for ed25519 * Thu May 24 2018 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 4.1.3-1 - New upstream release - Fixes CVE-2017-15120, CVE-2018-1000003, CVE-2017-15090, CVE-2017-15092, CVE-2017-15093 and CVE-2017-15094 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1538010 - CVE-2018-1000003 pdns: Improper validation of wildcard synthesized NSEC records [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1538010 [ 2 ] Bug #1524451 - CVE-2017-15090 CVE-2017-15092 CVE-2017-15093 CVE-2017-15094 CVE-2017-15120 pdns-recursor: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1524451 [ 3 ] Bug #1538011 - CVE-2018-1000003 pdns: Improper validation of wildcard synthesized NSEC records [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1538011 [ 4 ] Bug #1524931 - CVE-2017-15120 pdns-recursor: Crafted CNAME answer can cause a denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1524931 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.4.15.10-3.el7 (FEDORA-EPEL-2018-74ee3ae47e) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: - Added backported patch for PMASA-2018-1 (#1547748) - Backported patch to fix displaying mysql.user and mysql.db - Added patch to silence PHP warning for count() in export -------------------------------------------------------------------------------- ChangeLog: * Wed May 16 2018 Robert Scheck <robert(a)fedoraproject.org> 4.4.15.10-3 - Added backported patch for PMASA-2018-1 (#1547748) - Backported patch to fix displaying mysql.user and mysql.db - Added patch to silence PHP warning for count() in export -------------------------------------------------------------------------------- References: [ 1 ] Bug #1547748 - CVE-2018-7260 phpMyAdmin: XSS in db_central_columns.php https://bugzilla.redhat.com/show_bug.cgi?id=1547748 -------------------------------------------------------------------------------- ================================================================================ purple-discord-0-18.20180515gitb895521.el7 (FEDORA-EPEL-2018-9f195f90c4) Discord plugin for libpurple -------------------------------------------------------------------------------- Update Information: Updated plugins to latest snapshots. -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0-18.20180515gitb895521 - Updated to latest snapshot. -------------------------------------------------------------------------------- ================================================================================ purple-hangouts-0-58.20180419hg9d008f2.el7 (FEDORA-EPEL-2018-9f195f90c4) Hangouts plugin for libpurple -------------------------------------------------------------------------------- Update Information: Updated plugins to latest snapshots. -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1:0-58.20180419hg9d008f2 - Updated to latest snapshot. -------------------------------------------------------------------------------- ================================================================================ purple-libsteam-1.6.1-21.20180514git4a09c08.el7 (FEDORA-EPEL-2018-9f195f90c4) Steam plugin for Pidgin/Adium/libpurple -------------------------------------------------------------------------------- Update Information: Updated plugins to latest snapshots. -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.6.1-21.20180514git4a09c08 - Updated to latest snapshot. * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-20.20171225git7f761df - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ purple-skypeweb-1.5-1.20180525gitcf65095.el7 (FEDORA-EPEL-2018-9f195f90c4) Adds support for Skype to Pidgin -------------------------------------------------------------------------------- Update Information: Updated plugins to latest snapshots. -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.5-1.20180525gitcf65095 - Updated to version 1.5. -------------------------------------------------------------------------------- ================================================================================ python-moksha-hub-1.5.7-1.el7 (FEDORA-EPEL-2018-e1e4467f7a) Hub components for Moksha -------------------------------------------------------------------------------- Update Information: Fix memory leak. -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.7-1 - new version -------------------------------------------------------------------------------- ================================================================================ standard-test-roles-2.13-1.el7 (FEDORA-EPEL-2018-587b13b63d) Standard Test Interface Ansible roles -------------------------------------------------------------------------------- Update Information: Update to 2.13 ---- Update to 2.5 ---- Update to 2.11 -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Andrei Stepanov <astepano(a)redhat.com> - 2.13-2 - Build with the latest merged PRs. * Wed May 23 2018 Andrei Stepanov <astepano(a)redhat.com> - 2.12-1 - Build with the latest merged PRs. * Mon May 21 2018 Andrei Stepanov <astepano(a)redhat.com> - 2.11-1 - Build with the latest merged PRs. -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2018.05.18-1.el7 (FEDORA-EPEL-2018-9c4b244295) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Update to the latest upstream -------------------------------------------------------------------------------- ChangeLog: * Fri May 25 2018 Mat��j Cepl <mcepl(a)redhat.com> - 2018.05.18-1 - Update to the latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1571491 - youtube-dl-2018.05.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1571491 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 25 May '18

25 May '18

The following Fedora EPEL 7 Security updates need testing: Age URL 47 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2c81054303 remctl-3.14-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8b8dc96235 nodejs-deep-extend-0.5.1-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3a39b00b77 thunderbird-enigmail-2.0.4-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-860176245e gifsicle-1.91-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-20c3b6be2a SDL2-2.0.8-5.el7 SDL2_gfx-1.0.3-1.el7 SDL2_image-2.0.3-1.el7 SDL2_mixer-2.0.2-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing strongswan-5.6.2-6.el7 Details about builds: ================================================================================ strongswan-5.6.2-6.el7 (FEDORA-EPEL-2018-48b823c3dc) An OpenSource IPsec-based VPN and TNC solution -------------------------------------------------------------------------------- Update Information: Resolves rhbz#1581868 CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c -------------------------------------------------------------------------------- ChangeLog: * Thu May 24 2018 Paul Wouters <pwouters(a)redhat.com> - 5.6.2-6 - Resolves rhbz#1581868 CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c * Thu May 24 2018 Paul Wouters <pwouters(a)redhat.com> - 5.6.2-5 - Resolves rhbz#1574939 IKEv2 VPN connections fail to use DNS servers provided by the server - Resolves rhbz#1449875 Strongswan on epel built without the sql plugin but with the sqlite plugin * Sun May 20 2018 Mikhail Zabaluev <mikhail.zabaluev(a)gmail.com> - 5.6.2-3 - Move eap-radius, sqlite, and pkcs7 plugins out of tnc-imcvs, added package sqlite (#1579945) * Tue Mar 6 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 5.6.2-2 - Rebuilt for libjson-c.so.4 (json-c v0.13.1) * Wed Feb 21 2018 Lubomir Rintel <lkundrak(a)v3.sk> - 5.6.2-1 - Updated to 5.6.2 (Dropped libnm-glib use in charon-nm) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1581868 - CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1581868 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 24 May '18

24 May '18

The following Fedora EPEL 6 Security updates need testing: Age URL 46 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5aca1d385d remctl-3.14-1.el6 43 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd6e4a3f0b python34-3.4.8-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9bdc4006c3 gifsicle-1.91-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing R-highlight-0.4.7.2-1.el6 Details about builds: ================================================================================ R-highlight-0.4.7.2-1.el6 (FEDORA-EPEL-2018-b87e13ac78) R Syntax Highlighter -------------------------------------------------------------------------------- Update Information: 0.4.7.2 -------------------------------------------------------------------------------- ChangeLog: * Thu May 17 2018 Tom Callaway <spot(a)fedoraproject.org> - 0.4.7.2-1 - update to 0.4.7.2 * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue May 30 2017 Tom Callaway <spot(a)fedoraproject.org> - 0.4.7.1-2 - rebuild for R 3.4.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 24 May '18

24 May '18

The following Fedora EPEL 7 Security updates need testing: Age URL 46 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2c81054303 remctl-3.14-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8b8dc96235 nodejs-deep-extend-0.5.1-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3a39b00b77 thunderbird-enigmail-2.0.4-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-860176245e gifsicle-1.91-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-20c3b6be2a SDL2-2.0.8-5.el7 SDL2_gfx-1.0.3-1.el7 SDL2_image-2.0.3-1.el7 SDL2_mixer-2.0.2-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-highlight-0.4.7.2-1.el7 autowrap-0.16.0-1.el7 python-collectd_systemd-0.0.1-0.4.20180516gita7018ec.el7 python-repoze-who-testutil-1.0.1-15.el7.1 Details about builds: ================================================================================ R-highlight-0.4.7.2-1.el7 (FEDORA-EPEL-2018-7af277edae) R Syntax Highlighter -------------------------------------------------------------------------------- Update Information: 0.4.7.2 -------------------------------------------------------------------------------- ChangeLog: * Thu May 17 2018 Tom Callaway <spot(a)fedoraproject.org> - 0.4.7.2-1 - update to 0.4.7.2 * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue May 30 2017 Tom Callaway <spot(a)fedoraproject.org> - 0.4.7.1-2 - rebuild for R 3.4.0 -------------------------------------------------------------------------------- ================================================================================ autowrap-0.16.0-1.el7 (FEDORA-EPEL-2018-b799b35f2c) Generates Python Extension modules from [Cython] PXD files -------------------------------------------------------------------------------- Update Information: - Update to 0.16.0 -------------------------------------------------------------------------------- ChangeLog: * Thu May 24 2018 Antonio Trande <sagitterATfedoraproject.org> - 0.16.0-1 - Update to 0.16.0 * Wed Feb 21 2018 Antonio Trande <sagitterATfedoraproject.org> - 0.14.0-5.20170807git31dbeb - Reorganize Python2 dependencies * Wed Feb 21 2018 Antonio Trande <sagitterATfedoraproject.org> - 0.14.0-4.20170807git31dbeb - Explicit Python2 dependencies on fedora * Wed Feb 7 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.14.0-3.20170807git31dbeb - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.14.0-2.20170807git31dbeb - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-collectd_systemd-0.0.1-0.4.20180516gita7018ec.el7 (FEDORA-EPEL-2018-cdfb649e2d) Collectd plugin to monitor systemd services -------------------------------------------------------------------------------- Update Information: First release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1578847 - Review Request: python-collectd_systemd - Collectd plugin to monitor systemd services https://bugzilla.redhat.com/show_bug.cgi?id=1578847 -------------------------------------------------------------------------------- ================================================================================ python-repoze-who-testutil-1.0.1-15.el7.1 (FEDORA-EPEL-2018-6711cb41f7) Test utilities for repoze.who-powered applications -------------------------------------------------------------------------------- Update Information: Build for EPEL7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1440519 - Please build repoze-who-testutil for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1440519 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 23 May '18

23 May '18

The following Fedora EPEL 6 Security updates need testing: Age URL 45 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5aca1d385d remctl-3.14-1.el6 42 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd6e4a3f0b python34-3.4.8-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9bdc4006c3 gifsicle-1.91-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing R-Rcpp-0.12.17-1.el6 debootstrap-1.0.100-1.el6 fedpkg-1.33-2.el6 Details about builds: ================================================================================ R-Rcpp-0.12.17-1.el6 (FEDORA-EPEL-2018-00faa151b8) Seamless R and C++ Integration -------------------------------------------------------------------------------- Update Information: R-Rcoo 0.12.17. -------------------------------------------------------------------------------- ChangeLog: * Tue May 22 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.12.17-1 - Update to 0.12.17 * Fri May 18 2018 Tom Callaway <spot(a)fedoraproject.org> - 0.12.16-2.1 - actually build against R 3.5.0 * Wed May 16 2018 TOm Callaway <spot(a)fedoraproject.org> - 0.12.16-2 - rebuild for R 3.5.0 -------------------------------------------------------------------------------- ================================================================================ debootstrap-1.0.100-1.el6 (FEDORA-EPEL-2018-c663cc5059) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information: - New upstream release (#1578167) - Do not use dpkg on el, dpkg cause broken deps with man-pages-it in el6 and el7 -------------------------------------------------------------------------------- ChangeLog: * Wed May 23 2018 S��rgio Basto <sergio(a)serjux.com> - 1.0.100-1 - New upstream release (#1578167) - Do not use dpkg on el, dpkg cause broken deps with man-pages-it in el6 and el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1578167 - debootstrap-1.0.100 is available https://bugzilla.redhat.com/show_bug.cgi?id=1578167 -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.33-2.el6 (FEDORA-EPEL-2018-507e588cf1) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: - Require python2-rpkg-1.54-2 as minimum version ---- - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip-pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) -------------------------------------------------------------------------------- ChangeLog: * Mon May 21 2018 Chenxiong Qi <cqi(a)redhat.com> 1.33-2 * Require python2-rpkg-1.54-2 as minimum version * Mon May 14 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.33-1 - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip-pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) * Thu May 10 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.32-2 - Switch to Python 3 on Fedora > 28 and EL > 7 - Drop Groups - Switch to %{buildroot} - Switch to %py_build and _install --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 23 May '18

23 May '18

The following Fedora EPEL 7 Security updates need testing: Age URL 45 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2c81054303 remctl-3.14-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8b8dc96235 nodejs-deep-extend-0.5.1-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3a39b00b77 thunderbird-enigmail-2.0.4-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-860176245e gifsicle-1.91-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-Rcpp-0.12.17-1.el7 SDL2-2.0.8-5.el7 SDL2_gfx-1.0.3-1.el7 SDL2_image-2.0.3-1.el7 SDL2_mixer-2.0.2-2.el7 acme-tiny-4.0.4-1.el7 batctl-2018.1-1.el7 debootstrap-1.0.100-1.el7 fedpkg-1.33-2.el7 python-collectd_systemd-0.0.1-0.3.20180516gita7018ec.el7 standard-test-roles-2.12-1.el7 Details about builds: ================================================================================ R-Rcpp-0.12.17-1.el7 (FEDORA-EPEL-2018-93158b3ad2) Seamless R and C++ Integration -------------------------------------------------------------------------------- Update Information: R-Rcoo 0.12.17. -------------------------------------------------------------------------------- ChangeLog: * Tue May 22 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.12.17-1 - Update to 0.12.17 * Fri May 18 2018 Tom Callaway <spot(a)fedoraproject.org> - 0.12.16-2.1 - actually build against R 3.5.0 * Wed May 16 2018 TOm Callaway <spot(a)fedoraproject.org> - 0.12.16-2 - rebuild for R 3.5.0 -------------------------------------------------------------------------------- ================================================================================ SDL2-2.0.8-5.el7 (FEDORA-EPEL-2018-20c3b6be2a) Cross-platform multimedia library -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- ChangeLog: * Mon May 21 2018 Adam Jackson <ajax(a)redhat.com> - 2.0.8-5 - Backport a crash/hang fix from 2.0.9 (#1580541) * Wed Apr 11 2018 Tom Callaway <spot(a)fedoraproject.org> - 2.0.8-4 - enable video-kmsdrm * Fri Mar 30 2018 David Abdurachmanov <david.abdurachmanov(a)gmail.com> - 2.0.8-3 - Add riscv64 to SDL_config.h * Sun Mar 4 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.8-2 - Disable altivec on ppc64le (RHBZ #1551338) * Sun Mar 4 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 2.0.8-1 - Update to 2.0.8 * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jan 31 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.7-3 - Switch to %ldconfig_scriptlets * Sun Nov 5 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.7-2 - Fix IBus * Tue Oct 24 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.7-1 - Update to 2.0.7 * Thu Oct 19 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.6-4 - Fully fix last overflow * Wed Oct 11 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.6-3 - Fix potential overflow in surface allocation * Thu Oct 5 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.6-2 - Fix invalid dbus arguments * Sat Sep 23 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.6-1 - Update to 2.0.6 * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Jan 27 2017 Igor Gnatenko <ignatenko(a)redhat.com> - 2.0.5-3 - Fix NULL dereference (RHBZ #1416945) * Wed Oct 26 2016 Dan Hor��k <dan[at]danny.cz> - 2.0.5-2 - fix FTBFS on ppc64/ppc64le * Thu Oct 20 2016 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 2.0.5-1 - Update to 2.0.5 (RHBZ #1387238) * Mon Sep 5 2016 Kalev Lember <klember(a)redhat.com> - 2.0.4-9 - Backport Wayland fixes from upstream * Sun Aug 14 2016 Igor Gnatenko <ignatenko(a)redhat.com> - 2.0.4-8 - Fix whitespaces in CMake file (RHBZ #1366868) * Sun Jul 10 2016 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 2.0.4-7 - Remove useless Requirements from -devel subpkg * Sun Jul 10 2016 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 2.0.4-6 - Add ibus support * Sun Jul 10 2016 Joseph Mullally <jwmullally(a)gmail.com> - 2.0.4-5 - fix Wayland dynamic symbol loading (bz1354155) * Thu Feb 25 2016 Tom Callaway <spot(a)fedoraproject.org> - 2.0.4-4 - enable static subpackage (bz1253930) * Fri Feb 5 2016 Tom Callaway <spot(a)fedoraproject.org> - 2.0.4-3 - fix compile against latest wayland * Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Mon Jan 4 2016 Tom Callaway <spot(a)fedoraproject.org> - 2.0.4-1 - update to 2.0.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- ================================================================================ SDL2_gfx-1.0.3-1.el7 (FEDORA-EPEL-2018-20c3b6be2a) SDL2 graphics drawing primitives and other support functions -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- ================================================================================ SDL2_image-2.0.3-1.el7 (FEDORA-EPEL-2018-20c3b6be2a) Image loading library for SDL -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 4 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 2.0.3-1 - Update to 2.0.3 * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jan 31 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-3 - Switch to %ldconfig_scriptlets * Wed Nov 1 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-2 - Add Provides: bundled(nanosvg) and add zlib to License * Wed Nov 1 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-1 - Update to 2.0.2 * Wed Oct 11 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.1-8 - Fixed security vulnerability in XCF image loader * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Wed Feb 1 2017 Sandro Mani <manisandro(a)gmail.com> - 2.0.1-4 - Rebuild (libwebp) * Tue Jan 3 2017 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 2.0.1-3 - Stop requiring pkgconfig -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- ================================================================================ SDL2_mixer-2.0.2-2.el7 (FEDORA-EPEL-2018-20c3b6be2a) Simple DirectMedia Layer - Sample Mixer Library -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 10 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-2 - Enable mp3 support * Fri Nov 10 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-1 - Update to 2.0.2 * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- ================================================================================ acme-tiny-4.0.4-1.el7 (FEDORA-EPEL-2018-65660d9490) Tiny auditable script to issue, renew Let's Encrypt certificates -------------------------------------------------------------------------------- Update Information: Incorporate new upstream release. Split acme_tiny.py into acme-tiny-core subpackage for use by other frameworks. -------------------------------------------------------------------------------- ChangeLog: * Tue May 22 2018 Stuart D. Gathman <stuart(a)gathman.org> 4.0.4-1 - Official upstream release! - Move acme_tiny.py to acme-tiny-core subpackage * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-4.20170516gitaf025f5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1560531 - acme-tiny-4.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1560531 [ 2 ] Bug #1438181 - Split acme-tiny and wrapper scripts https://bugzilla.redhat.com/show_bug.cgi?id=1438181 -------------------------------------------------------------------------------- ================================================================================ batctl-2018.1-1.el7 (FEDORA-EPEL-2018-06c5edec05) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information: Upstream 2018.1 * synchronization of batman-adv netlink and packet headers * add DAT cache and multicast flags netlink support * disable translation support for non-unicast mac addresses -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 30 2018 Felix Kaechele <heffer(a)fedoraproject.org> - 2018.1-1 - update to 2018.1 -------------------------------------------------------------------------------- ================================================================================ debootstrap-1.0.100-1.el7 (FEDORA-EPEL-2018-5659ea4d5f) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information: - New upstream release (#1578167) - Do not use dpkg on el, dpkg cause broken deps with man-pages-it in el6 and el7 -------------------------------------------------------------------------------- ChangeLog: * Wed May 23 2018 S��rgio Basto <sergio(a)serjux.com> - 1.0.100-1 - New upstream release (#1578167) - Do not use dpkg on el, dpkg cause broken deps with man-pages-it in el6 and el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1578167 - debootstrap-1.0.100 is available https://bugzilla.redhat.com/show_bug.cgi?id=1578167 -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.33-2.el7 (FEDORA-EPEL-2018-941fc7359d) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: - Require python2-rpkg-1.54-2 as minimum version ---- - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip-pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) -------------------------------------------------------------------------------- ChangeLog: * Mon May 21 2018 Chenxiong Qi <cqi(a)redhat.com> 1.33-2 * Require python2-rpkg-1.54-2 as minimum version * Mon May 14 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.33-1 - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip-pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) * Thu May 10 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.32-2 - Switch to Python 3 on Fedora > 28 and EL > 7 - Drop Groups - Switch to %{buildroot} - Switch to %py_build and _install -------------------------------------------------------------------------------- ================================================================================ python-collectd_systemd-0.0.1-0.3.20180516gita7018ec.el7 (FEDORA-EPEL-2018-cdfb649e2d) Collectd plugin to monitor systemd services -------------------------------------------------------------------------------- Update Information: First release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1578847 - Review Request: python-collectd_systemd - Collectd plugin to monitor systemd services https://bugzilla.redhat.com/show_bug.cgi?id=1578847 -------------------------------------------------------------------------------- ================================================================================ standard-test-roles-2.12-1.el7 (FEDORA-EPEL-2018-11f29c1fd8) Standard Test Interface Ansible roles -------------------------------------------------------------------------------- Update Information: Update to 2.5 ---- Update to 2.11 -------------------------------------------------------------------------------- ChangeLog: * Wed May 23 2018 Andrei Stepanov <astepano(a)redhat.com> - 2.12-1 - Build with the latest merged PRs. * Mon May 21 2018 Andrei Stepanov <astepano(a)redhat.com> - 2.11-1 - Build with the latest merged PRs. --------------------------------------------------------------------------------

1 0

debootstrap, dpkg and man-pages-it
by Andrew C Aitchison 22 May '18

22 May '18

From Fedora EPEL 6 updates-testing report Tuesday, 24 April 2018: > The following Fedora EPEL 6 Security updates need testing: ... > The following builds have been pushed to Fedora EPEL 6 updates-testing > debmirror-2.29-1.el6 > debootstrap-1.0.97-1.el6 > ocserv-0.12.0-1.el6 php-symfony-psr-http-message-bridge-1.0.2-2.el6 > php-webmozart-assert-1.3.0-1.el6 When I attempt to update debootstrap with # yum update /var/cache/yum/x86_64/6.9/epel-testing/packages/debootstrap-1.0.97-1.el6.noarch.rpm I get (sumary here, full log below the line): Downloading Packages: Running rpm_check_debug Running Transaction Test Transaction Check Error: file /usr/share/man/it/man5/dpkg.cfg.5.gz from install of dpkg-1.16.18-2.el6x86_64 conflicts with file from package man-pages-it-2.80-6.el6.noarch (Parenthetically, given rpmquiery -i debootstrap Description : debootstrap is used to create a Debian base system from scratch, without requiring the availability of dpkg or apt... It seems odd that we now require dpkg. If I get to choose, could you remove the dependency rather than update the decription :-) ?) Thanks, -- Andrew C. Aitchison Cambridge, UK andrew(a)aitchison.me.uk --------------------------------------------------------------- Loaded plugins: auto-update-debuginfo, fastestmirror, refresh-packagekit, : security Setting up Update Process Examining /var/cache/yum/x86_64/6.9/epel-testing/packages/debootstrap-1.0.97-1.el6.noarch.rpm: debootstrap-1.0.97-1.el6.noarch Marking /var/cache/yum/x86_64/6.9/epel-testing/packages/debootstrap-1.0.97-1.el6.noarch.rpm as an update to debootstrap-1.0.93-1.el6.noarch Loading mirror speeds from cached hostfile * elrepo: mirrors.coreix.net * epel: mirror.netweaver.uk * epel-debuginfo: mirror.netweaver.uk * sl: ftp.scientificlinux.org * sl-debuginfo: ftp.scientificlinux.org * sl-fastbugs: ftp.scientificlinux.org * sl-security: ftp.scientificlinux.org * sl6x: ftp.scientificlinux.org * sl6x-fastbugs: ftp.scientificlinux.org * sl6x-security: ftp.scientificlinux.org Resolving Dependencies --> Running transaction check ---> Package debootstrap.noarch 0:1.0.93-1.el6 will be updated ---> Package debootstrap.noarch 0:1.0.97-1.el6 will be an update --> Processing Dependency: dpkg for package: debootstrap-1.0.97-1.el6.noarch --> Running transaction check ---> Package dpkg.x86_64 0:1.16.18-2.el6 will be installed --> Finished Dependency Resolution Dependencies Resolved =============================================================================== Package Arch Version Repository Size =============================================================================== Updating: debootstrap noarch 1.0.97-1.el6 /debootstrap-1.0.97-1.el6.noarch 278 k Installing for dependencies: dpkg x86_64 1.16.18-2.el6 epel 1.3 M Transaction Summary =============================================================================== Install 1 Package(s) Upgrade 1 Package(s) Total size: 1.6 M Downloading Packages: Running rpm_check_debug Running Transaction Test Transaction Check Error: file /usr/share/man/it/man5/dpkg.cfg.5.gz from install of dpkg-1.16.18-2.el6x86_64 conflicts with file from package man-pages-it-2.80-6.el6.noarch Error Summary -------------

2 2

php
by Sérgio Basto 22 May '18

22 May '18

Hi, Latest php 5.4 release was in 2015-Sep-04 ( php-5.4.45.tar.gz ) 3 years ago ... We will have el 7 until 2024 , more 6 years, can we update php to 5.6 on el 7 ? or PHP apps for epel have to move to remi repo ? Thanks, -- Sérgio M. B.

3 3

[Fedocal] Reminder meeting : EPEL Steering Committee
by smooge＠fedoraproject.org 22 May '18

22 May '18

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2018-05-23 from 18:00:00 to 19:00:00 GMT At fedora-meeting(a)irc.freenode.net The meeting will be about: The EPEL Steering Committee will have a weekly meeting to cover current tasks and problems needed to keep EPEL going. Source: https://apps.fedoraproject.org/calendar/meeting/8724/

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel May 2018