epel-devel May 2020

epel-devel@lists.fedoraproject.org

27 participants
107 discussions

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 28 May '20

28 May '20

The following Fedora EPEL 7 Security updates need testing: Age URL 653 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 394 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 392 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 42 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239 clamav-0.102.3-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ae83e43288 log4net-2.0.8-10.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-567eda5296 exim-4.93-3.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-134c471656 json-c12-0.12.1-4.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff11142989 netdata-1.22.1-3.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e7814b7723 transmission-2.94-9.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19de895038 knot-resolver-5.1.1-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ed6bc3c8d4 golang-1.13.11-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-05b9f2eac5 sympa-6.2.56-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6f2a4db251 mbedtls-2.7.15-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c47d3538f7 cacti-1.2.12-1.el7 cacti-spine-1.2.12-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing borgbackup-1.1.11-3.el7 distribution-gpg-keys-1.39-1.el7 fedmsg-1.1.2-1.el7 jq-1.6-2.el7 libb2-0.98.1-2.el7 oniguruma-6.8.2-1.el7 php-justinrainbow-json-schema5-5.2.10-1.el7 publicsuffix-list-20190417-3.el7 rancid-3.12-1.el7 Details about builds: ================================================================================ borgbackup-1.1.11-3.el7 (FEDORA-EPEL-2020-f9ac9a4f30) A deduplicating backup program with compression and authenticated encryption -------------------------------------------------------------------------------- Update Information: - Release 0.98.1 -------------------------------------------------------------------------------- ChangeLog: * Fri May 22 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 1.1.11-3 - rebuilt due to libb2 update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1836534 - Please build libb2-0.98.1 for Fedora 31 https://bugzilla.redhat.com/show_bug.cgi?id=1836534 [ 2 ] Bug #1836535 - Please build libb2-0.98.1 for EPEL 7 https://bugzilla.redhat.com/show_bug.cgi?id=1836535 -------------------------------------------------------------------------------- ================================================================================ distribution-gpg-keys-1.39-1.el7 (FEDORA-EPEL-2020-dbd3fa1b52) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information: - update copr keys - add intel gpg key - add RosaLinux GPG keyring -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2020 Miroslav Such�� <msuchy(a)redhat.com> 1.39-1 - update copr keys - add intel gpg key - add RosaLinux GPG keyring -------------------------------------------------------------------------------- ================================================================================ fedmsg-1.1.2-1.el7 (FEDORA-EPEL-2020-57b34fde20) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: Fix for STOMP handling of non-dict JSON messages. -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2020 Ralph Bean <rbean(a)redhat.com> - 1.1.2-1 - Latest upstream. -------------------------------------------------------------------------------- ================================================================================ jq-1.6-2.el7 (FEDORA-EPEL-2020-101619ac61) Command-line JSON processor -------------------------------------------------------------------------------- Update Information: # BACKWARDS INCOMPATIBLE UPGRADE This update is required to resolve some [outstanding CVEs](https://bugzilla.redhat.com/show_bug.cgi?id=1777660). It was [approved by the EPEL steering committee](https://meetbot.fedoraproject.org/team s/epel/epel.2020-05-22-21.04.html). It changes the library soname from libonig.so.2 to libonig.so.5. The only software in EPEL 7 affected by this is jq, which has been rebuilt as part of this update. -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2020 Troy Dawson<tdawson(a)redhat.com> - 1.6-2 - Rebuilt for updated oniguruma (#1836692) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466750 - CVE-2017-9224 CVE-2017-9225 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2017-9229 oniguruma: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1466750 [ 2 ] Bug #1777660 - oniguruma: update to latest version to address CVEs https://bugzilla.redhat.com/show_bug.cgi?id=1777660 [ 3 ] Bug #1836692 - jq: rebuild for oniguruma rebase https://bugzilla.redhat.com/show_bug.cgi?id=1836692 -------------------------------------------------------------------------------- ================================================================================ libb2-0.98.1-2.el7 (FEDORA-EPEL-2020-f9ac9a4f30) C library providing BLAKE2b, BLAKE2s, BLAKE2bp, BLAKE2sp -------------------------------------------------------------------------------- Update Information: - Release 0.98.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.98.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Sep 9 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.98.1-1 - Update to latest tagged version * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.98-4.20171225git60ea749 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.98-3.20171225git60ea749 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.98-2.20171225git60ea749 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1836534 - Please build libb2-0.98.1 for Fedora 31 https://bugzilla.redhat.com/show_bug.cgi?id=1836534 [ 2 ] Bug #1836535 - Please build libb2-0.98.1 for EPEL 7 https://bugzilla.redhat.com/show_bug.cgi?id=1836535 -------------------------------------------------------------------------------- ================================================================================ oniguruma-6.8.2-1.el7 (FEDORA-EPEL-2020-101619ac61) Regular expressions library -------------------------------------------------------------------------------- Update Information: # BACKWARDS INCOMPATIBLE UPGRADE This update is required to resolve some [outstanding CVEs](https://bugzilla.redhat.com/show_bug.cgi?id=1777660). It was [approved by the EPEL steering committee](https://meetbot.fedoraproject.org/team s/epel/epel.2020-05-22-21.04.html). It changes the library soname from libonig.so.2 to libonig.so.5. The only software in EPEL 7 affected by this is jq, which has been rebuilt as part of this update. -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2020 Carl George <carl(a)george.computer> - 6.8.2-1 - Rebase to 6.8.2 rhbz#1777660 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466750 - CVE-2017-9224 CVE-2017-9225 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2017-9229 oniguruma: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1466750 [ 2 ] Bug #1777660 - oniguruma: update to latest version to address CVEs https://bugzilla.redhat.com/show_bug.cgi?id=1777660 [ 3 ] Bug #1836692 - jq: rebuild for oniguruma rebase https://bugzilla.redhat.com/show_bug.cgi?id=1836692 -------------------------------------------------------------------------------- ================================================================================ php-justinrainbow-json-schema5-5.2.10-1.el7 (FEDORA-EPEL-2020-4bcadd1bdc) A library to validate a json schema -------------------------------------------------------------------------------- Update Information: **Version 5.2.10** * 614 Use lowercase package name for test suite * 619 Fix PHP 8 deprecated warnings * 607 Repleace deprecated curved brackets [sic] * 605 Test on PHP 7.4 and HHVM (3.18 explicitly) * 606 Further travis tweaks #597 Add .gitattributes to .gitattributes -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2020 Remi Collet <remi(a)remirepo.net> - 5.2.10-1 - update to 5.2.10 -------------------------------------------------------------------------------- ================================================================================ publicsuffix-list-20190417-3.el7 (FEDORA-EPEL-2020-c4bd692fa7) Cross-vendor public domain suffix database -------------------------------------------------------------------------------- Update Information: Initial package release -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1836280 - Epel7 branch request https://bugzilla.redhat.com/show_bug.cgi?id=1836280 -------------------------------------------------------------------------------- ================================================================================ rancid-3.12-1.el7 (FEDORA-EPEL-2020-7d375fd635) Really Awesome New Cisco confIg Differ -------------------------------------------------------------------------------- Update Information: Update to 3.12 -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2020 Charles R. Anderson <cra(a)wpi.edu> - 3.12-1 - Update to 3.12 * Tue Feb 11 2020 Charles R. Anderson <cra(a)wpi.edu> - 3.11-1 - Update to 3.11 * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1816856 - Please upgrade RANCID to 3.11 in EPEL https://bugzilla.redhat.com/show_bug.cgi?id=1816856 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 28 May '20

28 May '20

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2020-05-29 from 21:00:00 to 22:00:00 UTC At freenode@fedora-meeting The meeting will be about: This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #meetingname EPEL #topic Intros #topic Old Business #topic EPEL-6 #topic EPEL-7 #topic EPEL-8 #topic Openfloor #endmeeting Source: https://apps.fedoraproject.org/calendar/meeting/9722/

1 0

Re: Soname bump of libb2 on F31/EPEL7
by Mukundan Ragavan 28 May '20

28 May '20

On 5/26/20 1:49 PM, Antonio T. sagitter wrote: > Mukundan, your package misses. > Please, rebuild `gtkhash` against `libb2-0.98.1` or let me commit > changes to it. > Hi Antonio, This is done. Please add gtkhash to your update as well. https://koji.fedoraproject.org/koji/taskinfo?taskID=45107523 Thanks, Mukundan.

2 1

Re: Soname bump of libb2 on F31/EPEL7
by Mukundan Ragavan 28 May '20

28 May '20

Scratch build of gtkhash does not appear to pull in libb2-0.98.1. Has the buildroot override expired? https://koji.fedoraproject.org/koji/taskinfo?taskID=45077601 On 5/26/20 1:49 PM, Antonio T. sagitter wrote: > Mukundan, your package misses. > Please, rebuild `gtkhash` against `libb2-0.98.1` or let me commit > changes to it. > > On 25/05/20 19:18, Elliott Sales de Andrade wrote: >> I made builds for R-argon2 last night as well, which you can >> include in your update. >> >> - R-argon2-0.2.0-7.fc31 >> >> Actually, there's no need for a _new_ update; you can just edit >> the existing one. >> >> On Mon, 25 May 2020 at 08:41, Felix Schwarz >> <fschwarz(a)fedoraproject.org> wrote: >>> >>> builds for borgbackup done (finally): - borgbackup-1.1.11-3.el7 - >>> borgbackup-1.1.11-5.fc31 >>> >>> Please add these once you submit the final update. >>> >>> Felix >>> -- GPG Key: E5C8BC67

2 2

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 28 May '20

28 May '20

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-765ceaa306 clamav-0.102.3-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-30aba92944 log4net-2.0.8-10.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2056b1c4a9 exim-4.93-3.el8 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5660594875 python-markdown2-2.3.9-1.el8 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c3fca161ee netdata-1.22.1-3.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-38309f9f6f transmission-2.94-9.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-06e970da9c knot-resolver-5.1.1-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-383149ca50 perl-Email-MIME-1.949-1.el8 perl-Email-MIME-ContentType-1.024-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing glances-3.1.4.1-5.el8 Details about builds: ================================================================================ glances-3.1.4.1-5.el8 (FEDORA-EPEL-2020-5771bf7e39) CLI curses based monitoring tool -------------------------------------------------------------------------------- Update Information: minor update, should be ok. Provides a /etc/glances/glances.conf to prevent glances checking for updated versions from pypi and not RPMs -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763319 - build of glances for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1763319 [ 2 ] Bug #1773662 - Package from distro should not suggest update method outside of distro way https://bugzilla.redhat.com/show_bug.cgi?id=1773662 [ 3 ] Bug #1817300 - glances-3.1.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1817300 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 27 May '20

27 May '20

The following Fedora EPEL 7 Security updates need testing: Age URL 652 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 394 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 392 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 41 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239 clamav-0.102.3-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ae83e43288 log4net-2.0.8-10.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-567eda5296 exim-4.93-3.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-134c471656 json-c12-0.12.1-4.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff11142989 netdata-1.22.1-3.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e7814b7723 transmission-2.94-9.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19de895038 knot-resolver-5.1.1-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ed6bc3c8d4 golang-1.13.11-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-05b9f2eac5 sympa-6.2.56-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing cacti-1.2.12-1.el7 cacti-spine-1.2.12-1.el7 gfal2-2.17.3-1.el7 mbedtls-2.7.15-1.el7 Details about builds: ================================================================================ cacti-1.2.12-1.el7 (FEDORA-EPEL-2020-c47d3538f7) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.2.12 Release notes: https://www.cacti.net/release_notes.php?version=1.2.12 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.12-1 - Update to 1.2.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1840313 - CVE-2020-13231 cacti: CSRF at admin email [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1840313 [ 2 ] Bug #1840318 - CVE-2020-13230 cacti: improper access control on disabling a user [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1840318 -------------------------------------------------------------------------------- ================================================================================ cacti-spine-1.2.12-1.el7 (FEDORA-EPEL-2020-c47d3538f7) Threaded poller for Cacti written in C -------------------------------------------------------------------------------- Update Information: - Update to 1.2.12 Release notes: https://www.cacti.net/release_notes.php?version=1.2.12 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.12-1 - Update to 1.2.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1840313 - CVE-2020-13231 cacti: CSRF at admin email [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1840313 [ 2 ] Bug #1840318 - CVE-2020-13230 cacti: improper access control on disabling a user [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1840318 -------------------------------------------------------------------------------- ================================================================================ gfal2-2.17.3-1.el7 (FEDORA-EPEL-2020-716bc4ecbc) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Upgrade to upstream release 2.17.3 -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Michal Simon <michal.simon(a)cern.ch> - 2.17.3-1 - Upgrade to upstream release 2.17.3 * Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 2.17.2-2 - Rebuild (json-c) -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.7.15-1.el7 (FEDORA-EPEL-2020-6f2a4db251) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.7.15 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.6-and-2.7.15-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2020-04 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.15-1 - Update to 2.7.15 - Security Advisory 2020-04 (CVE-2020-10932) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1838552 - CVE-2020-10932 mbedtls: side channel attack possibly leading to information disclosure [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1838552 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 27 May '20

27 May '20

The following Fedora EPEL 6 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-db3d7a1399 exim-4.92.3-2.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d5bbc97415 json-c12-0.12.1-4.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fe619e5492 golang-1.13.11-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ffaa79c364 sympa-6.2.56-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing gfal2-2.17.3-1.el6 mbedtls-2.7.15-1.el6 Details about builds: ================================================================================ gfal2-2.17.3-1.el6 (FEDORA-EPEL-2020-5a0250992c) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Upgrade to upstream release 2.17.3 -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Michal Simon <michal.simon(a)cern.ch> - 2.17.3-1 - Upgrade to upstream release 2.17.3 * Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 2.17.2-2 - Rebuild (json-c) -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.7.15-1.el6 (FEDORA-EPEL-2020-989ca5d300) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.7.15 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.6-and-2.7.15-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2020-04 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.15-1 - Update to 2.7.15 - Security Advisory 2020-04 (CVE-2020-10932) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1838550 - CVE-2020-10932 mbedtls: side channel attack possibly leading to information disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1838550 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 27 May '20

27 May '20

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-765ceaa306 clamav-0.102.3-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-30aba92944 log4net-2.0.8-10.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2056b1c4a9 exim-4.93-3.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5660594875 python-markdown2-2.3.9-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c3fca161ee netdata-1.22.1-3.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-38309f9f6f transmission-2.94-9.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-06e970da9c knot-resolver-5.1.1-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-383149ca50 perl-Email-MIME-1.949-1.el8 perl-Email-MIME-ContentType-1.024-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing python-grokmirror-1.2.0-5.el8 Details about builds: ================================================================================ python-grokmirror-1.2.0-5.el8 (FEDORA-EPEL-2020-19dbf43e6d) Framework to smartly mirror git repositories -------------------------------------------------------------------------------- Update Information: Introducing python-grokmirror to epel8 -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 26 May '20

26 May '20

The following Fedora EPEL 7 Security updates need testing: Age URL 651 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 393 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 391 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 100 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 40 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239 clamav-0.102.3-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ae83e43288 log4net-2.0.8-10.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-567eda5296 exim-4.93-3.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-134c471656 json-c12-0.12.1-4.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff11142989 netdata-1.22.1-3.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e7814b7723 transmission-2.94-9.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19de895038 knot-resolver-5.1.1-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ed6bc3c8d4 golang-1.13.11-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-05b9f2eac5 sympa-6.2.56-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing nut-2.7.4-1.el7 python-authres-1.2.0-6.el7 resalloc-3.1-1.el7 Details about builds: ================================================================================ nut-2.7.4-1.el7 (FEDORA-EPEL-2020-f76f9220f4) Network UPS Tools -------------------------------------------------------------------------------- Update Information: nut updated to 2.7.4 -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2020 Michal Hlavinka <mhlavink(a)redhat.com> - 2.7.4-1 - nut updated to 2.7.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1837120 - Update nut in EL7 https://bugzilla.redhat.com/show_bug.cgi?id=1837120 -------------------------------------------------------------------------------- ================================================================================ python-authres-1.2.0-6.el7 (FEDORA-EPEL-2020-2a493d2663) Authentication Results Header Module -------------------------------------------------------------------------------- Update Information: New package. Highly useful with python-pymilter. RFC 8601 Authentication- Results Headers generation and parsing. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1832632 - Review Request: python-authres - RFC 8601 Authentication-Results Headers generation and parsing https://bugzilla.redhat.com/show_bug.cgi?id=1832632 -------------------------------------------------------------------------------- ================================================================================ resalloc-3.1-1.el7 (FEDORA-EPEL-2020-eb679553f0) Resource allocator for expensive resources - client tooling -------------------------------------------------------------------------------- Update Information: new version v3.1, improved resource checker ---- new 3.0 version - new possibility to re-use resources, and client requests can survive server restart -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.1-1 - new version v3.1, improved resource checker * Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.0-2 - Rebuilt for Python 3.9 * Sun May 17 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.0-1 - new 3.0 version - new possibility to re-use resources, and client requests can survive server restarts * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.6-3 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.6-2 - Rebuilt for Python 3.8 * Fri Aug 2 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.6-1 - don't assign resources to closed tickets * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jun 13 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.5-1 - thread safety - don't change os.environ * Tue Jun 11 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.4-1 - fix improperly handled thread communication --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 26 May '20

26 May '20

The following Fedora EPEL 6 Security updates need testing: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d5bbc97415 json-c12-0.12.1-4.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-db3d7a1399 exim-4.92.3-2.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fe619e5492 golang-1.13.11-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ffaa79c364 sympa-6.2.56-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing zstd-1.4.5-3.el6 Details about builds: ================================================================================ zstd-1.4.5-3.el6 (FEDORA-EPEL-2020-d1a4ad6b82) Zstd compression library -------------------------------------------------------------------------------- Update Information: Build shared library with correct compiler flags -------------------------------------------------------------------------------- ChangeLog: * Mon May 25 2020 P��draig Brady <P(a)draigBrady.com> - 1.4.5-3 - Build shared library with correct compiler flags * Fri May 22 2020 P��draig Brady <P(a)draigBrady.com> - 1.4.5-1 - Latest upstream * Fri May 22 2020 Avi Kivity <avi(a)scylladb.com> - 1.4.4-3 - Added static library subpackage --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel May 2020