epel-devel September 2020

epel-devel@lists.fedoraproject.org

24 participants
90 discussions

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 08 Sep '20

08 Sep '20

The following Fedora EPEL 8 Security updates need testing: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-96c4037065 ark-19.12.2-3.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2390c71f9c chromium-85.0.4183.83-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-371299feb7 ansible-2.9.13-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing AusweisApp2-1.20.2-1.el8 ensmallen-2.14.2-1.el8 mbedtls-2.16.8-1.el8 python-idstools-0.6.4-1.el8 python-shelly-0.2.6-1.el8 tmt-0.21-1.el8 Details about builds: ================================================================================ AusweisApp2-1.20.2-1.el8 (FEDORA-EPEL-2020-53b56dce69) Online identification with German ID card (Personalausweis) -------------------------------------------------------------------------------- Update Information: - New upstream release. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.20.2-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ ensmallen-2.14.2-1.el8 (FEDORA-EPEL-2020-0fbd859689) Header-only C++ library for efficient mathematical optimization -------------------------------------------------------------------------------- Update Information: Update to latest stable version. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Ryan Curtin <ryan(a)ratml.org> - 2.14.2-1 - Update to latest stable version. * Mon Aug 3 2020 Ryan Curtin <ryan(a)ratml.org> - 2.12.0-4 - Fix build failures for mass rebuild issues. * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.12.0-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.12.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.16.8-1.el8 (FEDORA-EPEL-2020-0214580ca4) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.16.8 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.16.8-1 - Update to 2.16.8 * Thu Aug 20 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.16.7-4 - Switch to cmake_build, cmake_install and ctest - FTBFS in Fedora rawhide/f33 (#1864124) * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16.7-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1875047 - CVE-2020-16150 mbedtls: local side channel attack on classical CBC decryption in (D)TLS https://bugzilla.redhat.com/show_bug.cgi?id=1875047 -------------------------------------------------------------------------------- ================================================================================ python-idstools-0.6.4-1.el8 (FEDORA-EPEL-2020-282989b157) Snort and Suricata Rule and Event Utilities -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 0.6.4-1 - New upstream release * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.3-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1863715 - python-idstools-0.6.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1863715 -------------------------------------------------------------------------------- ================================================================================ python-shelly-0.2.6-1.el8 (FEDORA-EPEL-2020-9d2407b06d) Library for Shelly smart home devices -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ tmt-0.21-1.el8 (FEDORA-EPEL-2020-c7f390a986) Test Management Tool -------------------------------------------------------------------------------- Update Information: Test duration, recommend libraries, retry session, manual test import... See also: https://github.com/psss/tmt/releases/tag/0.21 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Petr ��pl��chal <psplicha(a)redhat.com> - 0.21-1 - Adjust manual test case import from nitrate [#319] - Move the test convert deps into a separate package - Support importing manual test cases from Nitrate - Merge the non-zero exit codes for linting errors - Fix several test export issues [fix #337] - Adjust distro checks, remove the dry parameter - Generalized Guest.details() [fix #310] - Adjust the test coverage for tmt plan/test lint - Update documentation with virtualization tips - Make sure the duration timer is always canceled - Merge the new retry_session functionality [#328] - Exit with non-zero code if linting fails - Merge fix for the double fmf extension [#327] - Prevent koji from trying to build packages on i686 - Retry requests in case of network failure - Avoid double fmf extension when creating plans and stories - Improve the maximum test duration handling - Remove vagrant from tmt-all recommended packages - Detect beakerlib libraries from recommend as well - Simplify packit custom create archive command - Make the httpd test example a bit more interesting - Append dots to fix tmt run --help message summary - Document multiple configs and extending steps --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 07 Sep '20

07 Sep '20

The following Fedora EPEL 6 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1af9888c22 golang-1.15-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-972f57ea6d drupal7-7.72-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing php-horde-Horde-Core-2.31.16-1.el6 php-natxet-cssmin-3.0.6-5.el6 Details about builds: ================================================================================ php-horde-Horde-Core-2.31.16-1.el6 (FEDORA-EPEL-2020-ce1af8a31a) Horde Core Framework libraries -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.31.16** * [mjr] Fix regression in sending mail via ActiveSync. ---- **Horde_Core 2.31.15** * [mjr] Fix ActiveSync SmartForward handling. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Remi Collet <remi(a)remirepo.net> - 2.31.16-1 - update to 2.31.16 * Fri Aug 28 2020 Remi Collet <remi(a)remirepo.net> - 2.31.15-1 - update to 2.31.15 -------------------------------------------------------------------------------- ================================================================================ php-natxet-cssmin-3.0.6-5.el6 (FEDORA-EPEL-2020-7635e2c5a1) Configurable CSS parser and minifier -------------------------------------------------------------------------------- Update Information: RPM fixes and updates - Fix composer provides (`php-composer(natxet/cssmin)`; and still provide previous `php-composer(natxet/CssMin)`) - Fix install - `/usr/share/php/natxet/CssMin/src/*` now installed to `/usr/share/php/natxet/CssMin/` - if exists, move `/usr/share/php/natxet/CssMin/src` to `/usr/share/php/natxet/CssMin/src.rpmmoved` - symlink `/usr/share/php/natxet/CssMin/src` to `/usr/share/php/natxet/CssMin` (for previous compat) - Use Fedora Autoloader - Fix directory ownership -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2020 Shawn Iwinski <shawn(a)iwin.ski> - 3.0.6-5 - Fix composer provides (php-composer(natxet/cssmin); and still provide previous php-composer(natxet/CssMin)) - Fix install (remove "src" dir) - Use Fedora Autoloader - Fix directory ownership * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 07 Sep '20

07 Sep '20

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Sep '20

07 Sep '20

The following Fedora EPEL 7 Security updates need testing: Age URL 754 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 494 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-89ad58d02c golang-1.15-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-49c5f31e92 python-pip-epel-8.1.2-14.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-864bc6779e chromium-85.0.4183.83-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-83bdeb2965 ansible-2.9.13-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0a324e529d drupal7-7.72-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing mcabber-1.1.1-1.el7 php-horde-Horde-Core-2.31.16-1.el7 php-natxet-cssmin-3.0.6-5.el7 php-robrichards-xmlseclibs3-3.1.1-1.el7 Details about builds: ================================================================================ mcabber-1.1.1-1.el7 (FEDORA-EPEL-2020-d29296c434) Console Jabber instant messaging client -------------------------------------------------------------------------------- Update Information: Update to 1.1.1. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 1.1.1-1 - Update to 1.1.1 * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1876260 - mcabber-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1876260 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Core-2.31.16-1.el7 (FEDORA-EPEL-2020-f9cd4fc712) Horde Core Framework libraries -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.31.16** * [mjr] Fix regression in sending mail via ActiveSync. ---- **Horde_Core 2.31.15** * [mjr] Fix ActiveSync SmartForward handling. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2020 Remi Collet <remi(a)remirepo.net> - 2.31.16-1 - update to 2.31.16 * Fri Aug 28 2020 Remi Collet <remi(a)remirepo.net> - 2.31.15-1 - update to 2.31.15 -------------------------------------------------------------------------------- ================================================================================ php-natxet-cssmin-3.0.6-5.el7 (FEDORA-EPEL-2020-fc968f7e16) Configurable CSS parser and minifier -------------------------------------------------------------------------------- Update Information: RPM fixes and updates - Fix composer provides (`php-composer(natxet/cssmin)`; and still provide previous `php-composer(natxet/CssMin)`) - Fix install - `/usr/share/php/natxet/CssMin/src/*` now installed to `/usr/share/php/natxet/CssMin/` - if exists, move `/usr/share/php/natxet/CssMin/src` to `/usr/share/php/natxet/CssMin/src.rpmmoved` - symlink `/usr/share/php/natxet/CssMin/src` to `/usr/share/php/natxet/CssMin` (for previous compat) - Use Fedora Autoloader - Fix directory ownership -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2020 Shawn Iwinski <shawn(a)iwin.ski> - 3.0.6-5 - Fix composer provides (php-composer(natxet/cssmin); and still provide previous php-composer(natxet/CssMin)) - Fix install (remove "src" dir) - Use Fedora Autoloader - Fix directory ownership * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ php-robrichards-xmlseclibs3-3.1.1-1.el7 (FEDORA-EPEL-2020-9a18db25e5) A PHP library for XML Security (version 3) -------------------------------------------------------------------------------- Update Information: ## 3.1.1 (05, Sep 2020) ### Features - Support OAEP (iggyvolz) ### Bug Fixes - Fix AES128 (iggyvolz) ### Improvements - Fix tests for older PHP ## 3.1.0 (22, Apr 2020) ### Features - Support AES-GCM. Requires PHP 7.1. (Fran��ois Kooman) ### Bug Fixes - FIX missing InclusiveNamespaces PrefixList from Java + Apache WSS4J. (njake) ### Improvements - Fix Travis tests for older PHP versions. - Use DOMElement interface to fix some IDEs reporting documentation errors -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 5 2020 Shawn Iwinski <shawn(a)iwin.ski> - 3.1.1-1 - Update to 3.1.1 (RHBZ #1826916) * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1826916 - php-robrichards-xmlseclibs3-3.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1826916 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 05 Sep '20

05 Sep '20

The following Fedora EPEL 6 Security updates need testing: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1af9888c22 golang-1.15-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing drupal7-7.72-1.el6 xrootd-4.12.4-1.el6 Details about builds: ================================================================================ drupal7-7.72-1.el6 (FEDORA-EPEL-2020-972f57ea6d) An open-source content-management platform -------------------------------------------------------------------------------- Update Information: - https://www.drupal.org/project/drupal/releases/7.72 - [Drupal core - Critical - Cross Site Request Forgery - SA- CORE-2020-004](https://www.drupal.org/sa-core-2020-004) / CVE-2020-13663 - https://www.drupal.org/project/drupal/releases/7.71 - https://www.drupal.org/project/drupal/releases/7.70 - [Drupal core - Moderately critical - Cross Site Scripting - SA- CORE-2020-002](https://www.drupal.org/sa-core-2020-002) / CVE-2020-11022 / CVE-2020-11023 - [Drupal core - Moderately critical - Open Redirect - SA- CORE-2020-003](https://www.drupal.org/sa-core-2020-003) / CVE-2020-13662 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2020 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.72-1 - Update to 7.72 - SA-CORE-2020-004/CVE-2020-13663 (RHBZ #1860912, #1860913) * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.70-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sun May 31 2020 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.70-2 - rpmbuild sub-pkg: Fix auto-provides for F32+ * Fri May 22 2020 Peter Borsa <peter(a)asrob.eu> - 7.70-1 - Update to 7.70 - RHBZ #1837516 / SA-CORE-2020-003 - RHBZ #1828416 / SA-CORE-2020-002 * Fri May 22 2020 Peter Borsa <peter(a)asrob.eu> - 7.69-3 - Remove php-recode as dependency * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.69-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1828417 - CVE-2020-11022 drupal7: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1828417 [ 2 ] Bug #1850013 - CVE-2020-11023 drupal7: jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1850013 [ 3 ] Bug #1850023 - CVE-2020-11023 drupal7: jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1850023 [ 4 ] Bug #1860912 - CVE-2020-13663 drupal7: Form API does not properly handle certain form input from cross-site requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1860912 [ 5 ] Bug #1860913 - CVE-2020-13663 drupal7: Form API does not properly handle certain form input from cross-site requests [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1860913 -------------------------------------------------------------------------------- ================================================================================ xrootd-4.12.4-1.el6 (FEDORA-EPEL-2020-2d734ca8fa) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: xrootd 4.12.4 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.12.4-1 - Update to version 4.12.4 - Drop patches (accepted upstream or previously backported) * Wed Aug 26 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.12.3-5 - Use new CMake macros where available - Backport minor fixes from upstream git - Correct flag reset code for ssq monitor option - Fix typo in xrootd-config help - Prevent deadlock in Python bindings - Fix plugin path in xrootd-http.cfg for 32 bit architectures * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:4.12.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Jul 24 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.12.3-3 - Fix one definition rule (ODR) violation for LTO - Disable LTO for 32 bit architectures due to the POSIX preload code --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 05 Sep '20

05 Sep '20

The following Fedora EPEL 7 Security updates need testing: Age URL 752 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 492 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-89ad58d02c golang-1.15-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-49c5f31e92 python-pip-epel-8.1.2-14.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-864bc6779e chromium-85.0.4183.83-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing ansible-2.9.13-1.el7 batctl-2020.3-1.el7 drupal7-7.72-1.el7 Details about builds: ================================================================================ ansible-2.9.13-1.el7 (FEDORA-EPEL-2020-83bdeb2965) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to new bugfix and security update 2.9.13 ---- Update to upstream bugfix release 2.9.11. See https://github.com/ansible/ansible/blob/stable-2.9/changelog s/CHANGELOG-v2.9.rst#v2-9-11 for details. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 3 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.13-1 - Update to 2.9.13. * Tue Jul 21 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.11-1 - Update to 2.9.11. -------------------------------------------------------------------------------- ================================================================================ batctl-2020.3-1.el7 (FEDORA-EPEL-2020-ac9c73e20d) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information: Update to 2020.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.3-1 - update to 2020.3 * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2020.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 7 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.2-1 - update to 2020.2 -------------------------------------------------------------------------------- ================================================================================ drupal7-7.72-1.el7 (FEDORA-EPEL-2020-0a324e529d) An open-source content-management platform -------------------------------------------------------------------------------- Update Information: - https://www.drupal.org/project/drupal/releases/7.72 - [Drupal core - Critical - Cross Site Request Forgery - SA- CORE-2020-004](https://www.drupal.org/sa-core-2020-004) / CVE-2020-13663 - https://www.drupal.org/project/drupal/releases/7.71 - https://www.drupal.org/project/drupal/releases/7.70 - [Drupal core - Moderately critical - Cross Site Scripting - SA- CORE-2020-002](https://www.drupal.org/sa-core-2020-002) / CVE-2020-11022 / CVE-2020-11023 - [Drupal core - Moderately critical - Open Redirect - SA- CORE-2020-003](https://www.drupal.org/sa-core-2020-003) / CVE-2020-13662 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2020 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.72-1 - Update to 7.72 - SA-CORE-2020-004/CVE-2020-13663 (RHBZ #1860912, #1860913) * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.70-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sun May 31 2020 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.70-2 - rpmbuild sub-pkg: Fix auto-provides for F32+ * Fri May 22 2020 Peter Borsa <peter(a)asrob.eu> - 7.70-1 - Update to 7.70 - RHBZ #1837516 / SA-CORE-2020-003 - RHBZ #1828416 / SA-CORE-2020-002 * Fri May 22 2020 Peter Borsa <peter(a)asrob.eu> - 7.69-3 - Remove php-recode as dependency * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.69-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1828417 - CVE-2020-11022 drupal7: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1828417 [ 2 ] Bug #1850013 - CVE-2020-11023 drupal7: jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1850013 [ 3 ] Bug #1850023 - CVE-2020-11023 drupal7: jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1850023 [ 4 ] Bug #1860912 - CVE-2020-13663 drupal7: Form API does not properly handle certain form input from cross-site requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1860912 [ 5 ] Bug #1860913 - CVE-2020-13663 drupal7: Form API does not properly handle certain form input from cross-site requests [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1860913 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 05 Sep '20

05 Sep '20

The following Fedora EPEL 8 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-96c4037065 ark-19.12.2-3.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2390c71f9c chromium-85.0.4183.83-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing ansible-2.9.13-1.el8 holland-1.2.2-1.el8 kdiff3-1.8.4-1.el8 okteta-0.26.4-1.el8 Details about builds: ================================================================================ ansible-2.9.13-1.el8 (FEDORA-EPEL-2020-371299feb7) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to new bugfix and security update 2.9.13 ---- Update to 2.9.12 upstream bugfix and security update. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 3 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.13-1 - Update to 2.9.13 * Tue Aug 11 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.12-1 - Update to 2.9.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1857185 - CVE-2020-14330 ansible: masked keys for uri module are exposed into content and json output [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1857185 [ 2 ] Bug #1857817 - CVE-2020-14332 ansible: module_args does not censor properly in --check mode [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1857817 -------------------------------------------------------------------------------- ================================================================================ holland-1.2.2-1.el8 (FEDORA-EPEL-2020-a43e9eaaa5) Pluggable Backup Framework -------------------------------------------------------------------------------- Update Information: Updated to latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2020 Sam P <survient(a)fedoraproject.org> - 1.2.2-1 - Updated to latest upstream release. -------------------------------------------------------------------------------- ================================================================================ kdiff3-1.8.4-1.el8 (FEDORA-EPEL-2020-8a75267571) Compare + merge 2 or 3 files or directories -------------------------------------------------------------------------------- Update Information: Update to 1.8.4. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 5 2020 Marie Loise Nolden <loise(a)kde.org> - 1.8.4-1 - Update to 1.8.4 * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ okteta-0.26.4-1.el8 (FEDORA-EPEL-2020-67e827b0c7) Binary/hex editor -------------------------------------------------------------------------------- Update Information: Update to 0.26.4, No longer Require gccxml -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 9 2020 Marie Loise Nolden <loise(a)kde.org> - 1:0.26.4-1 - 0.26.4 * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:0.26.3-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:0.26.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sat Jun 27 2020 Marie Loise Nolden <loise(a)kde.org> - 1:0.26.3-1 - 0.26.3 and cleanup --------------------------------------------------------------------------------

1 0

EPEL-6 is End of Life in 2020-11
by Troy Dawson 04 Sep '20

04 Sep '20

EPEL 6 is End Of Life (EOL) on November 2020. EPEL 6 will be moved to archives in December 2020. Plan ahead now.

1 0

Seeking maintainer for perl-Sys-SigAction
by Mike Ely 04 Sep '20

04 Sep '20

Unfortunately this package has fallen behind a few versions in EPEL7 and is absent in EPEL8. BZ 1807857 has been open since February requesting the package for EPEL8 and it appears nobody has taken this up. I'm not in a position to be able to maintain this package outside work hours for family reasons, so I'm here to ask if anyone in this community would be willing to pick this up. Thanks!

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 04 Sep '20

04 Sep '20

The following Fedora EPEL 7 Security updates need testing: Age URL 751 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 491 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-89ad58d02c golang-1.15-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-49c5f31e92 python-pip-epel-8.1.2-14.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-864bc6779e chromium-85.0.4183.83-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing libudfread-1.1.0-2.el7 xl2tpd-1.3.15-1.el7 Details about builds: ================================================================================ libudfread-1.1.0-2.el7 (FEDORA-EPEL-2020-930f4b4e58) UDF reader library -------------------------------------------------------------------------------- Update Information: Initial Fedora package. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1875315 - Review Request: libudfread - UDF reader library https://bugzilla.redhat.com/show_bug.cgi?id=1875315 -------------------------------------------------------------------------------- ================================================================================ xl2tpd-1.3.15-1.el7 (FEDORA-EPEL-2020-c53d91e9fe) Layer 2 Tunnelling Protocol Daemon (RFC 2661) -------------------------------------------------------------------------------- Update Information: Resolves: rhbz#1761700 xl2tpd-1.3.15 is available -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 3 2020 Paul Wouters <pwouters(a)redhat.com> - 1.3.15-1 - Resolves: rhbz#1761700 xl2tpd-1.3.15 is available - Resolves: rhbz#1875262 Unsupported options 'crtscts' and 'lock' in /etc/ppp/options.xl2tpd - Resolves: rhbz#1869420 xl2tpd.service:8: PIDFile= references a path below legacy directory /var/run/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761700 - xl2tpd-1.3.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1761700 [ 2 ] Bug #1869420 - /usr/lib/systemd/system/xl2tpd.service:8: PIDFile= references a path below legacy directory /var/run/ https://bugzilla.redhat.com/show_bug.cgi?id=1869420 [ 3 ] Bug #1875262 - Unsupported options 'crtscts' and 'lock' in /etc/ppp/options.xl2tpd https://bugzilla.redhat.com/show_bug.cgi?id=1875262 --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel September 2020