epel-devel November 2019

epel-devel@lists.fedoraproject.org

21 participants
86 discussions

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 04 Nov '19

04 Nov '19

The following Fedora EPEL 6 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-244e8468f8 t1utils-1.41-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b3dc1811a1 rssh-2.3.4-15.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing pspg-2.5.2-1.el6 Details about builds: ================================================================================ pspg-2.5.2-1.el6 (FEDORA-EPEL-2019-17ecca85d5) A unix pager optimized for psql -------------------------------------------------------------------------------- Update Information: new upstream release, per release notes: - https://github.com/okbob/pspg/releases/tag/2.5.2 - https://github.com/okbob/pspg/releases/tag/2.5.0 - https://github.com/okbob/pspg/releases/tag/2.1.8 - https://github.com/okbob/pspg/releases/tag/2.1.7 -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 3 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.5.2-1 - new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/2.5.2 https://github.com/okbob/pspg/releases/tag/2.5.0 https://github.com/okbob/pspg/releases/tag/2.1.8 https://github.com/okbob/pspg/releases/tag/2.1.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1760951 - pspg-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1760951 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 03 Nov '19

03 Nov '19

The following Fedora EPEL 8 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c7b7c6aae7 java-latest-openjdk-13.0.1.9-2.rolling.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9db33fcb54 chromium-78.0.3904.70-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing eccodes-2.14.1-1.el8 libva-vdpau-driver-0.7.4-106.el8 perl-Devel-Timer-0.13-1.el8 perl-Email-Abstract-3.008-15.el8 perl-FCGI-Client-0.09-4.el8 perl-Mail-Message-3.008-6.el8 perl-Mail-Transport-3.004-3.el8 perl-Net-INET6Glue-0.603-13.el8 perl-Text-Autoformat-1.750000-1.el8 perl-Text-Table-1.133-7.el8 pspg-2.5.2-1.el8 python-pytest-timeout-1.2.1-4.el8 python-redis-3.3.8-1.el8 slowhttptest-1.8.1-1.el8 uriparser-0.9.3-2.el8 Details about builds: ================================================================================ eccodes-2.14.1-1.el8 (FEDORA-EPEL-2019-c6d93fc618) WMO data format decoding and encoding -------------------------------------------------------------------------------- Update Information: Upgrade to upstream version 2.14.1 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 27 2019 Jos de Kloe <josdekloe(a)gmail.com> - 2.14.1-1 - Upgrade to upstream version 2.14.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1742563 - eccodes-2.14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1742563 -------------------------------------------------------------------------------- ================================================================================ libva-vdpau-driver-0.7.4-106.el8 (FEDORA-EPEL-2019-27380b2637) HW video decode support for VDPAU platforms -------------------------------------------------------------------------------- Update Information: Introduce the libva-vdpau-driver bridge -------------------------------------------------------------------------------- References: [ 1 ] Bug #1768148 - libva-vdpau-driver does not exist in epel repo for el8 https://bugzilla.redhat.com/show_bug.cgi?id=1768148 -------------------------------------------------------------------------------- ================================================================================ perl-Devel-Timer-0.13-1.el8 (FEDORA-EPEL-2019-bf91e97789) Track and report execution time for parts of code -------------------------------------------------------------------------------- Update Information: 0.13 2019.10.31 MANWAR - Proposed fix for no_files_to_be_skipped from CPANTS. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Denis Fateyev <denis(a)fateyev.com> - 0.13-1 - Update to 0.13 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767613 - perl-Devel-Timer-0.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767613 -------------------------------------------------------------------------------- ================================================================================ perl-Email-Abstract-3.008-15.el8 (FEDORA-EPEL-2019-24a706d174) Unified interface to mail representations -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Mail-Message and its dependencies perl- Mail-Transport and perl-Email-Abstract. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762269 - perl-Email-Abstract for EL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1762269 [ 2 ] Bug #1762271 - perl-Mail-Message for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1762271 -------------------------------------------------------------------------------- ================================================================================ perl-FCGI-Client-0.09-4.el8 (FEDORA-EPEL-2019-d11f7ae3f0) Client library for the fastcgi protocol -------------------------------------------------------------------------------- Update Information: This package contains the Perl module FCGI::Client, a client library for fastcgi protocol. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1744709 - [RFE] EPEL8 branch of perl-FCGI-Client https://bugzilla.redhat.com/show_bug.cgi?id=1744709 -------------------------------------------------------------------------------- ================================================================================ perl-Mail-Message-3.008-6.el8 (FEDORA-EPEL-2019-24a706d174) MIME message handling -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Mail-Message and its dependencies perl- Mail-Transport and perl-Email-Abstract. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762269 - perl-Email-Abstract for EL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1762269 [ 2 ] Bug #1762271 - perl-Mail-Message for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1762271 -------------------------------------------------------------------------------- ================================================================================ perl-Mail-Transport-3.004-3.el8 (FEDORA-EPEL-2019-24a706d174) Email message exchange -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Mail-Message and its dependencies perl- Mail-Transport and perl-Email-Abstract. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762269 - perl-Email-Abstract for EL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1762269 [ 2 ] Bug #1762271 - perl-Mail-Message for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1762271 -------------------------------------------------------------------------------- ================================================================================ perl-Net-INET6Glue-0.603-13.el8 (FEDORA-EPEL-2019-c1217bb473) Make common modules IPv6 ready by hotpatching -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Net::INET6Glue, a collection of modules to make common modules IPv6 ready by hotpatching them. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1768145 - Please provide EPEL8 package https://bugzilla.redhat.com/show_bug.cgi?id=1768145 -------------------------------------------------------------------------------- ================================================================================ perl-Text-Autoformat-1.750000-1.el8 (FEDORA-EPEL-2019-00074954c3) Automatic text wrapping and reformatting -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Text::Autoformat, which provides intelligent formatting of plain text without the need for any kind of embedded mark-up. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762930 - [RFE] EPEL-8 branch for perl-Text-Autoformat https://bugzilla.redhat.com/show_bug.cgi?id=1762930 -------------------------------------------------------------------------------- ================================================================================ perl-Text-Table-1.133-7.el8 (FEDORA-EPEL-2019-f5dfb95273) Organize Data in Tables -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Text::Table, which allows you to create and maintain tables that adapt to alignment requirements as you use them. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1768131 - [RFE] EPEL7, EPEL8 branch of perl-Text-Table https://bugzilla.redhat.com/show_bug.cgi?id=1768131 -------------------------------------------------------------------------------- ================================================================================ pspg-2.5.2-1.el8 (FEDORA-EPEL-2019-3d236b9e53) A unix pager optimized for psql -------------------------------------------------------------------------------- Update Information: new upstream release, per release notes: - https://github.com/okbob/pspg/releases/tag/2.5.2 - https://github.com/okbob/pspg/releases/tag/2.5.0 - https://github.com/okbob/pspg/releases/tag/2.1.8 - https://github.com/okbob/pspg/releases/tag/2.1.7 -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 3 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.5.2-1 - new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/2.5.2 https://github.com/okbob/pspg/releases/tag/2.5.0 https://github.com/okbob/pspg/releases/tag/2.1.8 https://github.com/okbob/pspg/releases/tag/2.1.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1760951 - pspg-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1760951 -------------------------------------------------------------------------------- ================================================================================ python-pytest-timeout-1.2.1-4.el8 (FEDORA-EPEL-2019-27f437e165) py.test plugin to abort hanging tests -------------------------------------------------------------------------------- Update Information: Adapt for EPEL -------------------------------------------------------------------------------- ================================================================================ python-redis-3.3.8-1.el8 (FEDORA-EPEL-2019-f731aba1bd) Python interface to the Redis key-value store -------------------------------------------------------------------------------- Update Information: Initial version for epel8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767562 - no python3-redis in epel8 https://bugzilla.redhat.com/show_bug.cgi?id=1767562 -------------------------------------------------------------------------------- ================================================================================ slowhttptest-1.8.1-1.el8 (FEDORA-EPEL-2019-2e673a0adf) An Application Layer DoS attack simulator -------------------------------------------------------------------------------- Update Information: Version 1.8.1 - Dockerfile to build and run in a container - Fixes the version number in the package - Fixes compilation warnings - Modernized build scripts - Bug fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1768120 - slowhttptest: 1.8.1 release https://bugzilla.redhat.com/show_bug.cgi?id=1768120 -------------------------------------------------------------------------------- ================================================================================ uriparser-0.9.3-2.el8 (FEDORA-EPEL-2019-3d155bf77e) URI parsing library - RFC 3986 -------------------------------------------------------------------------------- Update Information: Build for EPEL8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763545 - Please branch and build for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1763545 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 03 Nov '19

03 Nov '19

The following Fedora EPEL 7 Security updates need testing: Age URL 446 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 188 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 185 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 122 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897 dosbox-0.74.3-2.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-821ac0b641 mingw-libidn2-2.2.0-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-19535181a5 java-latest-openjdk-13.0.1.9-2.rolling.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-458a052bdb rssh-2.3.4-15.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-0d0c37fcca hostapd-2.9-2.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-e6e7d521d9 chromium-78.0.3904.70-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing airrac-1.00.3-1.el7 eccodes-2.14.1-1.el7 libmp4v2-2.1.0-0.18.trunkREV507.el7 perl-Text-Table-1.133-7.el7 pspg-2.5.2-1.el7 python-pexpect-4.6-2.el7 python-pytest-timeout-1.2.1-4.el7 rmol-1.00.3-1.el7 slowhttptest-1.8.1-1.el7 soci-4.0.0-1.el7 stdair-1.00.8-1.el7 Details about builds: ================================================================================ airrac-1.00.3-1.el7 (FEDORA-EPEL-2019-6f7bed05c5) C++ Simulated Revenue Accounting (RAC) System Library -------------------------------------------------------------------------------- Update Information: Update to 1.00.3 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 28 2019 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.3-1 - First build for EPEL 8 -------------------------------------------------------------------------------- ================================================================================ eccodes-2.14.1-1.el7 (FEDORA-EPEL-2019-241f3d9340) WMO data format decoding and encoding -------------------------------------------------------------------------------- Update Information: Upgrade to upstream version 2.14.1 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 27 2019 Jos de Kloe <josdekloe(a)gmail.com> - 2.14.1-1 - Upgrade to upstream version 2.14.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1742563 - eccodes-2.14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1742563 -------------------------------------------------------------------------------- ================================================================================ libmp4v2-2.1.0-0.18.trunkREV507.el7 (FEDORA-EPEL-2019-ec3a3dac15) Library for working with files using the mp4 container format -------------------------------------------------------------------------------- Update Information: Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325 https://nvd.nist.gov/vuln/detail/CVE-2018-14054 based on https://github.com/TechSmith/mp4v2/pull/27 and https://github.com/sergiomb2/libmp4v2/ -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 2 2019 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.18.trunkREV507 - Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325 https://nvd.nist.gov/vuln/detail/CVE-2018-14054 based on https://github.com/TechSmith/mp4v2/pull/27 and https://github.com/sergiomb2/libmp4v2/ - Update spec - Fix build on epel7 * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.17.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue Feb 19 2019 FeRD (Frank Dana) <ferdnyc AT gmail com> - 2.1.0-0.16.trunkREV507 - Add BuildRequires for help2man, fixes manpage generation * Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.15.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sun Nov 18 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.1.0-0.14.trunkREV507 - Add BR:glibc-langpack-en See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buil… * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.13.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.12.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.11.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.10.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Mon May 15 2017 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.0-0.9.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_27_Mass_Rebuild * Wed Feb 8 2017 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.8.trunkREV507 - Add patch for GCC7 - Add new pactch 0003-Fix-out-of-tree-builds-182.patch - Rename the others patches * Mon Feb 6 2017 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.7.trunkREV507 - Fix python3 support in EPEL7 * Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-0.6.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Sun Oct 4 2015 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.5.trunkREV507 - Tidy a little more. - Added mp4v2-2.1-fixdoc2.patch : install man/man3/, BTW like in libmp4v2-1.5.0.1 and fix 30 annoying warnings "target x given more than once in the same rule". - Make api documentation and add it (doc/api/html/) into -devel package. * Fri Oct 2 2015 David King <amigadave(a)amigadave.com> - 2.1.0-0.4.trunkREV507 - Remove obsolete tags - Use license macro for COPYING - Tighten requirements on base package - Update man pages glob in files section - Tidy spec file * Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.0-0.3.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Apr 24 2015 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.2.trunkREV507 - Use trunk source, not source generated with make dist * Wed Apr 22 2015 S��rgio Basto <sergio(a)serjux.com> - 2.1.0-0.1.trunkREV507 - Update pre release 2.1.0, svn trunk version REV 507 . -------------------------------------------------------------------------------- References: [ 1 ] Bug #1601676 - CVE-2018-14326 libmp4v2: Missing check for integer overflow in mp4array.h:Resize() allows for denial of service via crafted MP4 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1601676 [ 2 ] Bug #1603225 - CVE-2018-14403 libmp4v2: Out-of-bounds read in MP4NameFirstMatches in mp4util.cpp [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1603225 [ 3 ] Bug #1603237 - CVE-2018-14379 libmp4v2: Type confusion in MP4Atom::factory in mp4atom.cpp [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1603237 [ 4 ] Bug #1603298 - CVE-2018-14054 libmp4v2: Double free in the MP4StringProperty class in mp4property.cpp [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1603298 [ 5 ] Bug #1601675 - CVE-2018-14326 libmp4v2: Missing check for integer overflow in mp4array.h:Resize() allows for denial of service via crafted MP4 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1601675 [ 6 ] Bug #1601680 - CVE-2018-14325 libmp4v2: Integer underflow in when parsing MP4Atom in mp4atom.cpp [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1601680 -------------------------------------------------------------------------------- ================================================================================ perl-Text-Table-1.133-7.el7 (FEDORA-EPEL-2019-e7e425e31a) Organize Data in Tables -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Text::Table, which allows you to create and maintain tables that adapt to alignment requirements as you use them. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1768131 - [RFE] EPEL7, EPEL8 branch of perl-Text-Table https://bugzilla.redhat.com/show_bug.cgi?id=1768131 -------------------------------------------------------------------------------- ================================================================================ pspg-2.5.2-1.el7 (FEDORA-EPEL-2019-5d20768521) A unix pager optimized for psql -------------------------------------------------------------------------------- Update Information: new upstream release, per release notes: - https://github.com/okbob/pspg/releases/tag/2.5.2 - https://github.com/okbob/pspg/releases/tag/2.5.0 - https://github.com/okbob/pspg/releases/tag/2.1.8 - https://github.com/okbob/pspg/releases/tag/2.1.7 -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 3 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.5.2-1 - new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/2.5.2 https://github.com/okbob/pspg/releases/tag/2.5.0 https://github.com/okbob/pspg/releases/tag/2.1.8 https://github.com/okbob/pspg/releases/tag/2.1.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1760951 - pspg-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1760951 -------------------------------------------------------------------------------- ================================================================================ python-pexpect-4.6-2.el7 (FEDORA-EPEL-2019-ba69cc1174) Unicode-aware Pure Python Expect-like module -------------------------------------------------------------------------------- Update Information: New packages -------------------------------------------------------------------------------- ================================================================================ python-pytest-timeout-1.2.1-4.el7 (FEDORA-EPEL-2019-ba69cc1174) py.test plugin to abort hanging tests -------------------------------------------------------------------------------- Update Information: New packages -------------------------------------------------------------------------------- ================================================================================ rmol-1.00.3-1.el7 (FEDORA-EPEL-2019-06929e4375) C++ library of Revenue Management and Optimisation classes and functions -------------------------------------------------------------------------------- Update Information: Update to 1.00.3 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 28 2019 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.3-1 - First build on EPEL 8 -------------------------------------------------------------------------------- ================================================================================ slowhttptest-1.8.1-1.el7 (FEDORA-EPEL-2019-31d63de1c6) An Application Layer DoS attack simulator -------------------------------------------------------------------------------- Update Information: Version 1.8.1 - Dockerfile to build and run in a container - Fixes the version number in the package - Fixes compilation warnings - Modernized build scripts - Bug fixes -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Denis Fateyev <denis(a)fateyev.com> - 1.8.1-1 - Update to release 1.8.1 * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Mar 15 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.7-5 - Fix FTBFS (rhbz#1556449) * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Mon Apr 3 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.7-1 - Update to latest upstream release 1.7 * Mon Apr 3 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.6-9 - Fix FTBFS (rhbz#1424451) * Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sun May 1 2016 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.6-7 - Update upstream link * Fri Feb 5 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Fri Jun 19 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 1.6-4 - Rebuilt for GCC 5 C++11 ABI change * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1768120 - slowhttptest: 1.8.1 release https://bugzilla.redhat.com/show_bug.cgi?id=1768120 -------------------------------------------------------------------------------- ================================================================================ soci-4.0.0-1.el7 (FEDORA-EPEL-2019-232d7011aa) The database access library for C++ programmers -------------------------------------------------------------------------------- Update Information: Upgrade to 4.0.0-rc1 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 26 2019 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 4.0.0-1 - Update to upstream release 4.0.0-rc1 - Slightly modernized the RPM spec file * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jan 24 2019 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-18 - Rebuilt for Boost 1.69 * Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Mon Jan 22 2018 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-15 - Rebuilt for Boost 1.66 * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue Jul 4 2017 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-12 - Rebuilt for Boost 1.64 * Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Jan 27 2017 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-10 - Rebuilt for Boost 1.63 * Fri Jan 13 2017 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 3.2.3-9 - Fixed compilation issues with C++11 (deprecation of auto_ptr) * Mon May 16 2016 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-8 - Rebuilt for linker errors in boost (#1331983) * Fri Feb 5 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Fri Jan 15 2016 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-6 - Rebuilt for Boost 1.60 * Thu Aug 27 2015 Jonathan Wakely <jwakely(a)redhat.com> - 3.2.3-5 - Rebuilt for Boost 1.59 * Wed Jul 29 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.2.3-4 - Rebuilt for https://fedoraproject.org/wiki/Changes/F23Boost159 * Wed Jul 22 2015 David Tardon <dtardon(a)redhat.com> - 3.2.3-3 - rebuild for Boost 1.58 * Fri Jun 19 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.2.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ stdair-1.00.8-1.el7 (FEDORA-EPEL-2019-3d682a15bd) C++ Standard Airline IT Object Library -------------------------------------------------------------------------------- Update Information: Update to 1.00.8 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 28 2019 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.8-1 - Update to 1.00.8 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 02 Nov '19

02 Nov '19

The following Fedora EPEL 6 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-5dfb2dbe75 proftpd-1.3.3g-11.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-244e8468f8 t1utils-1.41-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b3dc1811a1 rssh-2.3.4-15.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing R-littler-0.3.9-1.el6 openvpn-2.4.8-1.el6 python3-gssapi-1.3.0-4.el6 Details about builds: ================================================================================ R-littler-0.3.9-1.el6 (FEDORA-EPEL-2019-1f9fe69192) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: littler 0.3.9. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.9-1 - New upstream release 0.3.9 * Thu Sep 19 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.8-5 - Unify specfile * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-4 - Remove explicit dependencies provided by automatic dependency generator * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-3 - Rebuild with automatic Provides * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ openvpn-2.4.8-1.el6 (FEDORA-EPEL-2019-f3402bf0b5) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: Update to latest OpenVPN 2.4.8 release. See [Release notes](https://community.op envpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.8) for more details. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 David Sommerseth <dazo(a)eurephia.org> - 2.4.8-1 - Updating to upstream OpenVPN 2.4.8 -------------------------------------------------------------------------------- ================================================================================ python3-gssapi-1.3.0-4.el6 (FEDORA-EPEL-2019-b9d90e26c9) Python 3 Bindings for GSSAPI (RFC 2743/2744 and extensions) -------------------------------------------------------------------------------- Update Information: - Fix naming of built package to be python34-gssapi. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Robbie Harwood <rharwood(a)redhat.com> - 1.3.0-4 - Fix workaround so that we provide python34-gssapi - Resolves: #1763080 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763080 - Rename python3-gssapi rpm to python34-gssapi rpm https://bugzilla.redhat.com/show_bug.cgi?id=1763080 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 01 Nov '19

01 Nov '19

The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c7b7c6aae7 java-latest-openjdk-13.0.1.9-2.rolling.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing R-littler-0.3.9-1.el8 advancecomp-2.1-11.el8 airinv-1.00.3-1.el8 boost169-1.69.0-3.el8 catch-2.10.2-1.el8 chromium-78.0.3904.70-1.el8 cppzmq-4.4.1-1.el8 czmq-4.2.0-1.el8 gpsbabel-1.6.0-3.el8 koji-1.19.0-1.el8 libntlm-1.5-1.el8 lighttpd-1.4.54-4.el8 mock-1.4.21-1.el8 mock-core-configs-31.7-1.el8 nova-agent-2.1.21-1.el8 nsca-2.9.2-8.el8 openvpn-2.4.8-1.el8 pam_url-0.3.3-12.el8 perl-Apache-Session-Browseable-1.3.3-1.el8 perl-Apache-Session-LDAP-0.4-9.el8 perl-Apache-Session-NoSQL-0.2-13.el8 perl-Authen-Captcha-1.024-17.el8 perl-Authen-Simple-0.5-22.el8 perl-Authen-Simple-Passwd-0.6-26.el8 perl-Data-Dump-Color-0.241-4.el8 perl-Data-Serializer-0.60-14.el8 perl-Hash-Flatten-1.19-26.el8 perl-Log-Trace-1.070-30.el8 perl-MooseX-ConfigFromFile-0.14-17.el8 perl-MooseX-Getopt-0.74-6.el8 perl-MooseX-SimpleConfig-0.11-15.el8 perl-MooseX-Types-Path-Tiny-0.012-10.el8 perl-Return-Type-0.005-10.el8 perl-Test-Assertions-1.054-30.el8 perl-Test-Trap-0.3.4-4.el8 perl-Type-Tiny-1.004004-2.el8 perl-Types-Path-Tiny-0.006-7.el8 perl-Validation-Class-7.900057-11.el8 python-catkin_lint-1.6.2-1.el8 python-pycryptodomex-3.9.0-1.el8 python-pyspf-2.0.13-2.el8 simcrs-1.01.3-1.el8 standard-test-roles-4.5-1.el8 tfdocgen-20150202git-11.el8 yamllint-1.18.0-1.el8 Details about builds: ================================================================================ R-littler-0.3.9-1.el8 (FEDORA-EPEL-2019-7c32492d43) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: littler 0.3.9. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.9-1 - New upstream release 0.3.9 -------------------------------------------------------------------------------- ================================================================================ advancecomp-2.1-11.el8 (FEDORA-EPEL-2019-103ee3b49d) Recompression utilities for png, mng, zip and gz files -------------------------------------------------------------------------------- Update Information: Initial build for epel8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762483 - Please build advancecomp in normal EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1762483 -------------------------------------------------------------------------------- ================================================================================ airinv-1.00.3-1.el8 (FEDORA-EPEL-2019-85a79e2fa3) C++ Simulated Airline Inventory Management System library -------------------------------------------------------------------------------- Update Information: First build on EPL 8 -------------------------------------------------------------------------------- ================================================================================ boost169-1.69.0-3.el8 (FEDORA-EPEL-2019-6a117962ed) The free peer-reviewed portable C++ source libraries -------------------------------------------------------------------------------- Update Information: First build on EPEL 8 -------------------------------------------------------------------------------- ================================================================================ catch-2.10.2-1.el8 (FEDORA-EPEL-2019-5b49a77800) Modern, C++-native, header-only, framework for unit-tests, TDD and BDD -------------------------------------------------------------------------------- Update Information: First build on PEL 8 -------------------------------------------------------------------------------- ================================================================================ chromium-78.0.3904.70-1.el8 (FEDORA-EPEL-2019-9db33fcb54) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Chromium 78. Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762402 - CVE-2019-13682 chromium-browser: Site isolation bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762402 [ 2 ] Bug #1762401 - CVE-2019-13681 chromium-browser: Bypass on download restrictions https://bugzilla.redhat.com/show_bug.cgi?id=1762401 [ 3 ] Bug #1762400 - CVE-2019-13680 chromium-browser: IP address spoofing to servers https://bugzilla.redhat.com/show_bug.cgi?id=1762400 [ 4 ] Bug #1762399 - CVE-2019-13679 chromium-browser: User gesture needed for printing https://bugzilla.redhat.com/show_bug.cgi?id=1762399 [ 5 ] Bug #1762398 - CVE-2019-13678 chromium-browser: Download dialog spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762398 [ 6 ] Bug #1762397 - CVE-2019-13677 chromium-browser: Chrome web store origin needs to be isolated https://bugzilla.redhat.com/show_bug.cgi?id=1762397 [ 7 ] Bug #1762396 - CVE-2019-13676 chromium-browser: Google URI shown for certificate warning https://bugzilla.redhat.com/show_bug.cgi?id=1762396 [ 8 ] Bug #1762395 - CVE-2019-13675 chromium-browser: Extensions can be disabled by trailing slash https://bugzilla.redhat.com/show_bug.cgi?id=1762395 [ 9 ] Bug #1762394 - CVE-2019-13674 chromium-browser: IDN spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762394 [ 10 ] Bug #1762393 - CVE-2019-13673 chromium-browser: Cross-origin information leak using devtools https://bugzilla.redhat.com/show_bug.cgi?id=1762393 [ 11 ] Bug #1762392 - CVE-2019-13671 chromium-browser: Dialog box fails to show origin https://bugzilla.redhat.com/show_bug.cgi?id=1762392 [ 12 ] Bug #1762391 - CVE-2019-13670 chromium-browser: V8 memory corruption in regex https://bugzilla.redhat.com/show_bug.cgi?id=1762391 [ 13 ] Bug #1762390 - CVE-2019-13669 chromium-browser: HTTP authentication spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762390 [ 14 ] Bug #1762389 - CVE-2019-13668 chromium-browser: Global window leak via console https://bugzilla.redhat.com/show_bug.cgi?id=1762389 [ 15 ] Bug #1762388 - CVE-2019-13667 chromium-browser: URI bar spoof when using external app URIs https://bugzilla.redhat.com/show_bug.cgi?id=1762388 [ 16 ] Bug #1762387 - CVE-2019-13666 chromium-browser: Side channel using storage size estimate https://bugzilla.redhat.com/show_bug.cgi?id=1762387 [ 17 ] Bug #1762386 - CVE-2019-13665 chromium-browser: Multiple file download protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762386 [ 18 ] Bug #1762385 - CVE-2019-13664 chromium-browser: CSRF bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762385 [ 19 ] Bug #1762384 - CVE-2019-13663 chromium-browser: IDN spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762384 [ 20 ] Bug #1762383 - CVE-2019-13662 chromium-browser: CSP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762383 [ 21 ] Bug #1762382 - CVE-2019-13661 chromium-browser: Full screen notification spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762382 [ 22 ] Bug #1762381 - CVE-2019-13660 chromium-browser: Full screen notification overlap https://bugzilla.redhat.com/show_bug.cgi?id=1762381 [ 23 ] Bug #1762380 - CVE-2019-13659 chromium-browser: URL spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762380 [ 24 ] Bug #1762379 - CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1762379 [ 25 ] Bug #1762378 - CVE-2019-5880 chromium-browser: SameSite cookie bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762378 [ 26 ] Bug #1762377 - CVE-2019-5879 chromium-browser: Extensions can read some local files https://bugzilla.redhat.com/show_bug.cgi?id=1762377 [ 27 ] Bug #1762376 - CVE-2019-5878 chromium-browser: Use-after-free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762376 [ 28 ] Bug #1762375 - CVE-2019-5877 chromium-browser: Out-of-bounds access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762375 [ 29 ] Bug #1762374 - CVE-2019-5876 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762374 [ 30 ] Bug #1762373 - CVE-2019-13692 chromium-browser: SOP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762373 [ 31 ] Bug #1762372 - CVE-2019-13691 chromium-browser: Omnibox spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762372 [ 32 ] Bug #1762371 - CVE-2019-5875 chromium-browser: URL bar spoof via download redirect https://bugzilla.redhat.com/show_bug.cgi?id=1762371 [ 33 ] Bug #1762370 - CVE-2019-5874 chromium-browser: External URIs may trigger other browsers https://bugzilla.redhat.com/show_bug.cgi?id=1762370 [ 34 ] Bug #1762368 - CVE-2019-5872 chromium-browser: Use-after-free in Mojo https://bugzilla.redhat.com/show_bug.cgi?id=1762368 [ 35 ] Bug #1762367 - CVE-2019-5871 chromium-browser: Heap overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1762367 [ 36 ] Bug #1762366 - CVE-2019-5870 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762366 -------------------------------------------------------------------------------- ================================================================================ cppzmq-4.4.1-1.el8 (FEDORA-EPEL-2019-053c690ba5) Header-only C++ binding for libzmq -------------------------------------------------------------------------------- Update Information: First build on EPEL 8 -------------------------------------------------------------------------------- ================================================================================ czmq-4.2.0-1.el8 (FEDORA-EPEL-2019-973feddaea) High-level C binding for 0MQ (ZeroMQ) -------------------------------------------------------------------------------- Update Information: First build on EPEL 8 -------------------------------------------------------------------------------- ================================================================================ gpsbabel-1.6.0-3.el8 (FEDORA-EPEL-2019-e5b0b12642) A tool to convert between various formats used by GPS devices -------------------------------------------------------------------------------- Update Information: Initial EPEL 8 packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1741570 - Request to package gpsbabel for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1741570 -------------------------------------------------------------------------------- ================================================================================ koji-1.19.0-1.el8 (FEDORA-EPEL-2019-070b8cd703) Build system tools -------------------------------------------------------------------------------- Update Information: Upstream bugfix release 1.19.0. See https://docs.pagure.org/koji/release_notes_1.19/ for more info -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Mohan Boddu <mboddu(a)bhujji.com> - 1.19.0-1 - Rebase to 1.19.0 - Removing downstream patch 1613 * Wed Oct 9 2019 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.18.1-1 - Rebase to 1.18.1 for CVE-2019-17109 * Wed Sep 18 2019 Jiri Popelka <jpopelka(a)redhat.com> - 1.18.0-6 - Fix macro added in previous change. * Tue Sep 17 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-5 - Add provides for python3 subpackage. Fixes bug #1750391 * Sat Aug 17 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.18.0-4 - Rebuilt for Python 3.8 * Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-3 - Fix pkgsurl/topurl default mistake. * Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-2 - Fix mergerepos conditional for f30. * Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-1 - Update to 1.18.0. * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ libntlm-1.5-1.el8 (FEDORA-EPEL-2019-87f2d6e37a) NTLMv1 authentication library -------------------------------------------------------------------------------- Update Information: Initial version for epel8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1760545 - Build libntlm for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1760545 -------------------------------------------------------------------------------- ================================================================================ lighttpd-1.4.54-4.el8 (FEDORA-EPEL-2019-92a15e8ce3) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information: Requires correction. ---- Initial EL-8 build -------------------------------------------------------------------------------- References: [ 1 ] Bug #1744698 - [RFE] EPEL8 branch of lighttpd https://bugzilla.redhat.com/show_bug.cgi?id=1744698 -------------------------------------------------------------------------------- ================================================================================ mock-1.4.21-1.el8 (FEDORA-EPEL-2019-3687ce895a) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - selinuxfs, one more fix for nspawn [RHBZ#1756972] - fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 1.4.21-1 - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - mock: selinuxfs, one more fix for nspawn [RHBZ#1756972] - mock: fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1447627 - mock --installdeps or --install can't find rpm to install with --bootstrap-chroot https://bugzilla.redhat.com/show_bug.cgi?id=1447627 [ 2 ] Bug #1756972 - building Fedora 31 packages on Fedora 30 cause SELinux contexts to be unmapped https://bugzilla.redhat.com/show_bug.cgi?id=1756972 -------------------------------------------------------------------------------- ================================================================================ mock-core-configs-31.7-1.el8 (FEDORA-EPEL-2019-9db6c23b83) Mock core config files basic chroots -------------------------------------------------------------------------------- Update Information: - Add configs for epel8-playground - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 31.7-1 - Add configs for epel8-playground (mmathesi(a)redhat.com) - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764445 - Packages missing in EPEL 8 mock buildroot https://bugzilla.redhat.com/show_bug.cgi?id=1764445 -------------------------------------------------------------------------------- ================================================================================ nova-agent-2.1.21-1.el8 (FEDORA-EPEL-2019-f3c8973470) Agent for setting up clean servers on Xen -------------------------------------------------------------------------------- Update Information: Initial epel8 package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1758311 - build nova-agent for epel8 https://bugzilla.redhat.com/show_bug.cgi?id=1758311 -------------------------------------------------------------------------------- ================================================================================ nsca-2.9.2-8.el8 (FEDORA-EPEL-2019-81dcc85726) Nagios Service Check Acceptor -------------------------------------------------------------------------------- Update Information: First EPEL 8 build. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767327 - Missing from EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1767327 -------------------------------------------------------------------------------- ================================================================================ openvpn-2.4.8-1.el8 (FEDORA-EPEL-2019-6fbf108fc4) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: Update to latest OpenVPN 2.4.8 release. See [Release notes](https://community.op envpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.8) for more details. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 David Sommerseth <dazo(a)eurephia.org> - 2.4.8-1 - Updating to upstream OpenVPN 2.4.8 -------------------------------------------------------------------------------- ================================================================================ pam_url-0.3.3-12.el8 (FEDORA-EPEL-2019-0d942ae496) PAM module to authenticate with HTTP servers -------------------------------------------------------------------------------- Update Information: initial version for epel8 -------------------------------------------------------------------------------- ================================================================================ perl-Apache-Session-Browseable-1.3.3-1.el8 (FEDORA-EPEL-2019-ee89e5d6c0) Add index and search methods to Apache::Session -------------------------------------------------------------------------------- Update Information: These are the first EPEL-8 builds of the various Apache::Session::* perl modules. -------------------------------------------------------------------------------- ================================================================================ perl-Apache-Session-LDAP-0.4-9.el8 (FEDORA-EPEL-2019-ee89e5d6c0) LDAP implementation of Apache::Session -------------------------------------------------------------------------------- Update Information: These are the first EPEL-8 builds of the various Apache::Session::* perl modules. -------------------------------------------------------------------------------- ================================================================================ perl-Apache-Session-NoSQL-0.2-13.el8 (FEDORA-EPEL-2019-ee89e5d6c0) NoSQL implementation of Apache::Session -------------------------------------------------------------------------------- Update Information: These are the first EPEL-8 builds of the various Apache::Session::* perl modules. -------------------------------------------------------------------------------- ================================================================================ perl-Authen-Captcha-1.024-17.el8 (FEDORA-EPEL-2019-87a4143823) Perl extension for creating captchas -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Authen::Captcha, which provides an object oriented interface to captcha file creations. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761842 - perl-Authen-Captcha for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1761842 -------------------------------------------------------------------------------- ================================================================================ perl-Authen-Simple-0.5-22.el8 (FEDORA-EPEL-2019-4e6f29a4e2) Simple Authentication -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Authen::Simple, a simple and consistent framework for authentication. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762923 - perl-Authen-Simple for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1762923 -------------------------------------------------------------------------------- ================================================================================ perl-Authen-Simple-Passwd-0.6-26.el8 (FEDORA-EPEL-2019-51364cc98a) Simple Passwd authentication -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Authen-Simple-Passwd. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1744704 - [RFE] EPEL8 branch of perl-Authen-Simple-Passwd https://bugzilla.redhat.com/show_bug.cgi?id=1744704 -------------------------------------------------------------------------------- ================================================================================ perl-Data-Dump-Color-0.241-4.el8 (FEDORA-EPEL-2019-67c94810b1) Like Data::Dump, but with color -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Data::Dump::Color, a drop-in replacement for Data::Dump which adds colors to dumps. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764730 - [RFE] EPEL-8 branch for perl-Data-Dump-Color https://bugzilla.redhat.com/show_bug.cgi?id=1764730 -------------------------------------------------------------------------------- ================================================================================ perl-Data-Serializer-0.60-14.el8 (FEDORA-EPEL-2019-69a1e602c9) Modules that serialize data structures -------------------------------------------------------------------------------- Update Information: This package contains Data::Serializer, a Perl module that provides a unified interface to the various serializing modules currently available. It also adds the functionality of both compression and encryption. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765529 - [RFE] EPEL8 branch of perl-Data-Serializer https://bugzilla.redhat.com/show_bug.cgi?id=1765529 -------------------------------------------------------------------------------- ================================================================================ perl-Hash-Flatten-1.19-26.el8 (FEDORA-EPEL-2019-a10969b693) Flatten/unflatten complex data hashes -------------------------------------------------------------------------------- Update Information: Added the package to EPEL 8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765538 - [RFE] EPEL8 branch of perl-Hash-Flatten https://bugzilla.redhat.com/show_bug.cgi?id=1765538 -------------------------------------------------------------------------------- ================================================================================ perl-Log-Trace-1.070-30.el8 (FEDORA-EPEL-2019-7b6970e61f) A unified approach to tracing -------------------------------------------------------------------------------- Update Information: Added the package to EPEL 8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765533 - [RFE] EPEL8 branch of perl-Log-Trace https://bugzilla.redhat.com/show_bug.cgi?id=1765533 -------------------------------------------------------------------------------- ================================================================================ perl-MooseX-ConfigFromFile-0.14-17.el8 (FEDORA-EPEL-2019-43683e9891) An abstract Moose role for setting attributes from a configfile -------------------------------------------------------------------------------- Update Information: These are various Moose extensions, built for the first time for EPEL-8. -------------------------------------------------------------------------------- ================================================================================ perl-MooseX-Getopt-0.74-6.el8 (FEDORA-EPEL-2019-43683e9891) Moose role for processing command line options -------------------------------------------------------------------------------- Update Information: These are various Moose extensions, built for the first time for EPEL-8. -------------------------------------------------------------------------------- ================================================================================ perl-MooseX-SimpleConfig-0.11-15.el8 (FEDORA-EPEL-2019-43683e9891) Moose role for setting attributes from a simple configfile -------------------------------------------------------------------------------- Update Information: These are various Moose extensions, built for the first time for EPEL-8. -------------------------------------------------------------------------------- ================================================================================ perl-MooseX-Types-Path-Tiny-0.012-10.el8 (FEDORA-EPEL-2019-43683e9891) Path::Tiny types and coercions for Moose -------------------------------------------------------------------------------- Update Information: These are various Moose extensions, built for the first time for EPEL-8. -------------------------------------------------------------------------------- ================================================================================ perl-Return-Type-0.005-10.el8 (FEDORA-EPEL-2019-e5789f851c) Specify a return type for a function -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Return-Type. -------------------------------------------------------------------------------- ================================================================================ perl-Test-Assertions-1.054-30.el8 (FEDORA-EPEL-2019-ea241af3f0) Simple set of building blocks for both unit and runtime testing -------------------------------------------------------------------------------- Update Information: Added the package to EPEL 8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765535 - [RFE] EPEL8 branch of perl-Test-Assertions https://bugzilla.redhat.com/show_bug.cgi?id=1765535 -------------------------------------------------------------------------------- ================================================================================ perl-Test-Trap-0.3.4-4.el8 (FEDORA-EPEL-2019-8be628d984) Trap exit codes, exceptions, output, etc -------------------------------------------------------------------------------- Update Information: Added the package to EPEL 8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764823 - [RFE] EPEL-8 branch for perl-Test-Trap https://bugzilla.redhat.com/show_bug.cgi?id=1764823 -------------------------------------------------------------------------------- ================================================================================ perl-Type-Tiny-1.004004-2.el8 (FEDORA-EPEL-2019-105134e021) Tiny, yet Moo(se)-compatible type constraint -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Type-Tiny. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762449 - perl-Type-Tiny for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1762449 -------------------------------------------------------------------------------- ================================================================================ perl-Types-Path-Tiny-0.006-7.el8 (FEDORA-EPEL-2019-c363407b8f) Path::Tiny types and coercions for Moose and Moo -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Types-Path-Tiny. -------------------------------------------------------------------------------- ================================================================================ perl-Validation-Class-7.900057-11.el8 (FEDORA-EPEL-2019-92beda53eb) Powerful Data Validation Framework -------------------------------------------------------------------------------- Update Information: This is the first EPEL-8 build of perl-Validation-Class. -------------------------------------------------------------------------------- ================================================================================ python-catkin_lint-1.6.2-1.el8 (FEDORA-EPEL-2019-405101857f) Check catkin packages for common errors -------------------------------------------------------------------------------- Update Information: Update to 1.6.2 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Scott K Logan <logans(a)cottsay.net> - 1.6.2-1 - Update to 1.6.2 (rhbz#1767353) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767353 - python-catkin_lint-1.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767353 -------------------------------------------------------------------------------- ================================================================================ python-pycryptodomex-3.9.0-1.el8 (FEDORA-EPEL-2019-e847910d55) A self-contained cryptographic library for Python -------------------------------------------------------------------------------- Update Information: Build for EPEL8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1759732 - python-pycryptodomex: build for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1759732 -------------------------------------------------------------------------------- ================================================================================ python-pyspf-2.0.13-2.el8 (FEDORA-EPEL-2019-2927a44d43) Python module and programs for SPF (Sender Policy Framework) -------------------------------------------------------------------------------- Update Information: Add python-pyspf via provides macro ---- Update to 2.0.13 ---- Initial build for EPEL8. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765078 - Request to add python-pyspf to EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1765078 -------------------------------------------------------------------------------- ================================================================================ simcrs-1.01.3-1.el8 (FEDORA-EPEL-2019-2deed245eb) C++ Simulated Travel-Oriented Distribution System library -------------------------------------------------------------------------------- Update Information: First build on EPEL 8 -------------------------------------------------------------------------------- ================================================================================ standard-test-roles-4.5-1.el8 (FEDORA-EPEL-2019-297a5a25e9) Standard Test Interface Ansible roles -------------------------------------------------------------------------------- Update Information: Update to 4.5 -------------------------------------------------------------------------------- ================================================================================ tfdocgen-20150202git-11.el8 (FEDORA-EPEL-2019-ed0349b18f) TiLP framework documentation generator -------------------------------------------------------------------------------- Update Information: Build tfdocgen for EPEL8 -------------------------------------------------------------------------------- ================================================================================ yamllint-1.18.0-1.el8 (FEDORA-EPEL-2019-8c977a727d) A linter for YAML files -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 01 Nov '19

01 Nov '19

The following Fedora EPEL 7 Security updates need testing: Age URL 444 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 186 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 183 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 120 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897 dosbox-0.74.3-2.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-2108222740 proftpd-1.3.5e-6.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-821ac0b641 mingw-libidn2-2.2.0-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-19535181a5 java-latest-openjdk-13.0.1.9-2.rolling.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-458a052bdb rssh-2.3.4-15.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-0d0c37fcca hostapd-2.9-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-littler-0.3.9-1.el7 chromium-78.0.3904.70-1.el7 cjdns-20.4-2.el7 koji-1.19.0-1.el7 mock-1.4.21-1.el7 mock-core-configs-31.7-1.el7 openvpn-2.4.8-1.el7 php-mikey179-vfsstream-1.6.8-1.el7 phpMyAdmin-4.4.15.10-4.el7 python-catkin_lint-1.6.2-1.el7 python-colcon-cd-0.1.1-3.el7 python-colcon-cmake-0.2.16-1.el7 python-colcon-common-extensions-0.2.1-1.el7 python-colcon-core-0.4.3-1.el7 python-colcon-devtools-0.2.2-1.el7 python-colcon-package-information-0.3.0-1.el7 python-colcon-powershell-0.3.6-1.el7 Details about builds: ================================================================================ R-littler-0.3.9-1.el7 (FEDORA-EPEL-2019-ff59238030) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: littler 0.3.9. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.9-1 - New upstream release 0.3.9 * Thu Sep 19 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.8-5 - Unify specfile * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-4 - Remove explicit dependencies provided by automatic dependency generator * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-3 - Rebuild with automatic Provides * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ chromium-78.0.3904.70-1.el7 (FEDORA-EPEL-2019-e6e7d521d9) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Chromium 78. Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 23 2019 Tom Callaway <spot(a)fedoraproject.org> - 78.0.3904.80-1 - update to 78.0.3904.80 * Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-4 - upstream fix for zlib symbol exports with gcc * Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-3 - silence outdated build noise (bz1745745) * Tue Oct 15 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-2 - fix node handling for EPEL-8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762402 - CVE-2019-13682 chromium-browser: Site isolation bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762402 [ 2 ] Bug #1762401 - CVE-2019-13681 chromium-browser: Bypass on download restrictions https://bugzilla.redhat.com/show_bug.cgi?id=1762401 [ 3 ] Bug #1762400 - CVE-2019-13680 chromium-browser: IP address spoofing to servers https://bugzilla.redhat.com/show_bug.cgi?id=1762400 [ 4 ] Bug #1762399 - CVE-2019-13679 chromium-browser: User gesture needed for printing https://bugzilla.redhat.com/show_bug.cgi?id=1762399 [ 5 ] Bug #1762398 - CVE-2019-13678 chromium-browser: Download dialog spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762398 [ 6 ] Bug #1762397 - CVE-2019-13677 chromium-browser: Chrome web store origin needs to be isolated https://bugzilla.redhat.com/show_bug.cgi?id=1762397 [ 7 ] Bug #1762396 - CVE-2019-13676 chromium-browser: Google URI shown for certificate warning https://bugzilla.redhat.com/show_bug.cgi?id=1762396 [ 8 ] Bug #1762395 - CVE-2019-13675 chromium-browser: Extensions can be disabled by trailing slash https://bugzilla.redhat.com/show_bug.cgi?id=1762395 [ 9 ] Bug #1762394 - CVE-2019-13674 chromium-browser: IDN spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762394 [ 10 ] Bug #1762393 - CVE-2019-13673 chromium-browser: Cross-origin information leak using devtools https://bugzilla.redhat.com/show_bug.cgi?id=1762393 [ 11 ] Bug #1762392 - CVE-2019-13671 chromium-browser: Dialog box fails to show origin https://bugzilla.redhat.com/show_bug.cgi?id=1762392 [ 12 ] Bug #1762391 - CVE-2019-13670 chromium-browser: V8 memory corruption in regex https://bugzilla.redhat.com/show_bug.cgi?id=1762391 [ 13 ] Bug #1762390 - CVE-2019-13669 chromium-browser: HTTP authentication spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762390 [ 14 ] Bug #1762389 - CVE-2019-13668 chromium-browser: Global window leak via console https://bugzilla.redhat.com/show_bug.cgi?id=1762389 [ 15 ] Bug #1762388 - CVE-2019-13667 chromium-browser: URI bar spoof when using external app URIs https://bugzilla.redhat.com/show_bug.cgi?id=1762388 [ 16 ] Bug #1762387 - CVE-2019-13666 chromium-browser: Side channel using storage size estimate https://bugzilla.redhat.com/show_bug.cgi?id=1762387 [ 17 ] Bug #1762386 - CVE-2019-13665 chromium-browser: Multiple file download protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762386 [ 18 ] Bug #1762385 - CVE-2019-13664 chromium-browser: CSRF bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762385 [ 19 ] Bug #1762384 - CVE-2019-13663 chromium-browser: IDN spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762384 [ 20 ] Bug #1762383 - CVE-2019-13662 chromium-browser: CSP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762383 [ 21 ] Bug #1762382 - CVE-2019-13661 chromium-browser: Full screen notification spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762382 [ 22 ] Bug #1762381 - CVE-2019-13660 chromium-browser: Full screen notification overlap https://bugzilla.redhat.com/show_bug.cgi?id=1762381 [ 23 ] Bug #1762380 - CVE-2019-13659 chromium-browser: URL spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762380 [ 24 ] Bug #1762379 - CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1762379 [ 25 ] Bug #1762378 - CVE-2019-5880 chromium-browser: SameSite cookie bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762378 [ 26 ] Bug #1762377 - CVE-2019-5879 chromium-browser: Extensions can read some local files https://bugzilla.redhat.com/show_bug.cgi?id=1762377 [ 27 ] Bug #1762376 - CVE-2019-5878 chromium-browser: Use-after-free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762376 [ 28 ] Bug #1762375 - CVE-2019-5877 chromium-browser: Out-of-bounds access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762375 [ 29 ] Bug #1762374 - CVE-2019-5876 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762374 [ 30 ] Bug #1762373 - CVE-2019-13692 chromium-browser: SOP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762373 [ 31 ] Bug #1762372 - CVE-2019-13691 chromium-browser: Omnibox spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762372 [ 32 ] Bug #1762371 - CVE-2019-5875 chromium-browser: URL bar spoof via download redirect https://bugzilla.redhat.com/show_bug.cgi?id=1762371 [ 33 ] Bug #1762370 - CVE-2019-5874 chromium-browser: External URIs may trigger other browsers https://bugzilla.redhat.com/show_bug.cgi?id=1762370 [ 34 ] Bug #1762368 - CVE-2019-5872 chromium-browser: Use-after-free in Mojo https://bugzilla.redhat.com/show_bug.cgi?id=1762368 [ 35 ] Bug #1762367 - CVE-2019-5871 chromium-browser: Heap overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1762367 [ 36 ] Bug #1762366 - CVE-2019-5870 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762366 -------------------------------------------------------------------------------- ================================================================================ cjdns-20.4-2.el7 (FEDORA-EPEL-2019-3c17731682) The privacy-friendly network without borders -------------------------------------------------------------------------------- Update Information: New upstream release and python3 support for python admin API. python2-cjdns is still available to provide the py2 api library. However, the command line utils are now in python3-cjdns. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 2 2019 Stuart Gathman <stuart(a)gathman.org> - 20.4-2 - Add python3 support for python API * Tue Sep 10 2019 Stuart Gathman <stuart(a)gathman.org> - 20.4-1 - Update to 20.4 - Update bundled libuv build to use system gyp for build * Sat Aug 24 2019 Stuart Gathman <stuart(a)gathman.org> - 20.3-8 - Don't package local copy of ronn - Remove hidden files from node_modules/nthen * Thu Aug 15 2019 Stuart Gathman <stuart(a)gathman.org> - 20.3-7 - Don't audit /var/lib/sss access bz#1589395 * Tue Aug 6 2019 Stuart Gathman <stuart(a)gathman.org> - 20.3-6 - Much simpler solution to removing sysctl calls :-) * Sat Aug 3 2019 Stuart Gathman <stuart(a)gathman.org> - 20.3-5 - Remove deprecated sysctl() call in getUUID (read from /proc/.../random/uuid) - Patch a local copy of ronn to stop calling util.puts/util.debug * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ koji-1.19.0-1.el7 (FEDORA-EPEL-2019-8ecf1135bf) Build system tools -------------------------------------------------------------------------------- Update Information: Upstream bugfix release 1.19.0. See https://docs.pagure.org/koji/release_notes_1.19/ for more info -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Mohan Boddu <mboddu(a)bhujji.com> - 1.19.0-1 - Rebase to 1.19.0 - Removing downstream patch 1613 -------------------------------------------------------------------------------- ================================================================================ mock-1.4.21-1.el7 (FEDORA-EPEL-2019-0549ec172d) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - selinuxfs, one more fix for nspawn [RHBZ#1756972] - fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 1.4.21-1 - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - mock: selinuxfs, one more fix for nspawn [RHBZ#1756972] - mock: fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1447627 - mock --installdeps or --install can't find rpm to install with --bootstrap-chroot https://bugzilla.redhat.com/show_bug.cgi?id=1447627 [ 2 ] Bug #1756972 - building Fedora 31 packages on Fedora 30 cause SELinux contexts to be unmapped https://bugzilla.redhat.com/show_bug.cgi?id=1756972 -------------------------------------------------------------------------------- ================================================================================ mock-core-configs-31.7-1.el7 (FEDORA-EPEL-2019-7ecb65a185) Mock core config files basic chroots -------------------------------------------------------------------------------- Update Information: - Add configs for epel8-playground - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 31.7-1 - Add configs for epel8-playground (mmathesi(a)redhat.com) - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764445 - Packages missing in EPEL 8 mock buildroot https://bugzilla.redhat.com/show_bug.cgi?id=1764445 -------------------------------------------------------------------------------- ================================================================================ openvpn-2.4.8-1.el7 (FEDORA-EPEL-2019-6ebd6c5e5c) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: Update to latest OpenVPN 2.4.8 release. See [Release notes](https://community.op envpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.8) for more details. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 David Sommerseth <dazo(a)eurephia.org> - 2.4.8-1 - Updating to upstream OpenVPN 2.4.8 -------------------------------------------------------------------------------- ================================================================================ php-mikey179-vfsstream-1.6.8-1.el7 (FEDORA-EPEL-2019-a6ad373427) PHP stream wrapper for a virtual file system -------------------------------------------------------------------------------- Update Information: **Version 1.6.8** (2019-10-30) * Fix `StringBasedFileContent::doRead` to always return a string (#204) -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Remi Collet <remi(a)remirepo.net> - 1.6.8-1 - update to 1.6.8 - project ownership have moved to bovigo - provides both mikey179/vfsstream and mikey179/vfsStream -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.4.15.10-4.el7 (FEDORA-EPEL-2019-d4aec682df) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: * Added upstream patch for table searching with non-english locale -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Robert Scheck <robert(a)fedoraproject.org> 4.4.15.10-4 - Added upstream patch for table searching with non-english locale -------------------------------------------------------------------------------- ================================================================================ python-catkin_lint-1.6.2-1.el7 (FEDORA-EPEL-2019-80f1748ec6) Check catkin packages for common errors -------------------------------------------------------------------------------- Update Information: Update to 1.6.2 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Scott K Logan <logans(a)cottsay.net> - 1.6.2-1 - Update to 1.6.2 (rhbz#1767353) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767353 - python-catkin_lint-1.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767353 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cd-0.1.1-3.el7 (FEDORA-EPEL-2019-1b07316d0b) Extension for colcon to change the current working directory -------------------------------------------------------------------------------- Update Information: Initial release of `colcon-cd` -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767216 - Review Request: python-colcon-cd - Extension for colcon to change the current working directory https://bugzilla.redhat.com/show_bug.cgi?id=1767216 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cmake-0.2.16-1.el7 (FEDORA-EPEL-2019-ab6823fce4) Extension for colcon to support CMake packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1 - Update to 0.2.16 (rhbz#1762084) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-common-extensions-0.2.1-1.el7 (FEDORA-EPEL-2019-ab6823fce4) Meta package aggregating colcon-core and common extensions -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.1-1 - Update to 0.2.1 (rhbz#1763100) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.4.3-1.el7 (FEDORA-EPEL-2019-ab6823fce4) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1 - Update to 0.4.3 (rhbz#1762548) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-devtools-0.2.2-1.el7 (FEDORA-EPEL-2019-ab6823fce4) Extension for information about colcon extensibility -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1 - Update to 0.2.2 (rhbz#1763461) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-package-information-0.3.0-1.el7 (FEDORA-EPEL-2019-ab6823fce4) Extension for colcon to output package information -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1 - Update to 0.3.0 (rhbz#1765938) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-powershell-0.3.6-1.el7 (FEDORA-EPEL-2019-ab6823fce4) Extension for colcon to provide PowerShell scripts -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1 - Update to 0.3.6 (rhbz#1762532) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel November 2019