The following Fedora EPEL 8 Security updates need testing: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a32cbcaa37 tcpreplay-4.3.3-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-232e4f7411 python-django-2.2.13-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
BackupPC-4.4.0-1.el8 BackupPC-XS-0.62-1.el8 BibTool-2.68-1.el8 OpenImageIO-2.1.16.0-2.el8 chromium-83.0.4103.106-1.el8 epel-rpm-macros-8-13 filelight-20.04.2-1.el8 fuse-zip-0.7.1-1.el8 kdesvn-2.1.0-1.el8 kile-2.9.93-1.el8 libharu-2.3.0-9.el8 libmp4v2-2.1.0-0.21.trunkREV507.el8 lighttpd-1.4.55-3.el8 lynis-3.0.0-1.el8 openvdb-7.0.0-7.el8 orangefs-2.9.7-8.el8 perl-DBD-Mock-1.55-2.el8 perl-Digest-MD5-File-0.08-23.el8 perl-File-Path-Tiny-0.9-9.el8 perl-HTML-Table-2.08a-32.el8 perl-HTTP-Body-1.22-16.el8 perl-Heap-0.80-33.el8 perl-Statistics-Descriptive-3.0702-6.el8 python-asysocks-0.0.4-1.el8 python-catkin_lint-1.6.9-1.el8 python-enlighten-1.6.0-1.el8 python-mysqlclient-1.4.6-2.el8 python-pluginlib-0.8.0-1.el8 python-rencode-1.0.6-10.el8 python-wcwidth-0.2.4-1.el8 rootsh-1.5.3-22.el8 rsibreak-0.12.13-1.el8 votca-csg-1.6.1-1.el8 votca-tools-1.6.1-1.el8 votca-xtp-1.6.1-1.el8 wsjtx-2.2.2-1.el8 znc-1.8.1-1.el8
Details about builds:
================================================================================ BackupPC-4.4.0-1.el8 (FEDORA-EPEL-2020-db09232601) High-performance backup system -------------------------------------------------------------------------------- Update Information:
BackupPC 4.4.0 === This release contains several new features and some bug fixes. New features include: * any full/filled backup can be marked for keeping, which prevents any expiry or deletion * any backup can be annotated with a comment (eg, "prior to upgrade of xyz") added metrics CGI (thanks to @jooola) that replaces RSS and adds Prometheus support * tar XferMethod now supports xattrs and acls * rsync XferMethod now correctly supports xattrs on directories and symlinks * nightly pool scanning now verifies the md5 digests of a configurable fraction of pool files * code runs through perltidy so format is now uniform (thanks to @jooola, with help from @shancock9 and @moisseev) * New versions of BackupPC::XS (0.62) and rsync-bpc (3.0.9.15, 3.1.2.2 or 3.1.3beta0) are required. Here are the more detailed changes: * Merged pull requests #325, #326, #329, #330, #334, #336, #337, #338, #342, #343, #344, #345, #347, #348, #349 * Filled/Full backups can now be marked as "keep", which excludes them from any expiry/deletion. Also, a backup-specific comment can be added to any backup to capture any important information about that backup (eg, "pre-upgrade of xyz"). * Added metrics CGI, which adds Prometheus support and replaces RSS, by @joola (#344, #347) * Tar XferMethod now supports xattrs and acls; xattrs sbould be compatible with rsync XferMethod, but acls are not * Sort open directories to top when browsing backup tree * Format code using perltidy, and included in pre- commit flow, by @joola (#334, #337, #342, #343, #345). Thanks to @joola and @shancock9 (perltidy author) for significant effort and support, plus improvements in perltidy, to make this happen. * Added $Conf{PoolNightlyDigestCheckPercent}, which checks the md5 digest of this fraction of the pool files each night. * $Conf{ClientShareName2Path} is saved in backups file and the share to client path mapping is now displayed when you browse a backup so you know the actual client backup path for each share, if different from the share name * configure.pl now checks the per-host config.pl in a V3 upgrade to warn the user if $Conf{RsyncClientCmd} or $Conf{RsyncClientRestoreCmd} are used for that host, so that the new settings $Conf{RsyncSshArgs} and $Conf{RsyncClientPath} can be manually updated. * Fixed host mutex handling for dhcp hosts; shifted initial mutex requests to client programs * Updated webui icon, logo and favicon, by @moisseev (#325, #326, #329, #330) * Added $Conf{RsyncRestoreArgsExtra} for host-specific restore settings * Language files are now all use utf8 charsets * Bumped required version of BackupPC::XS to 0.62 and rsync-bpc to 3.0.9.15. * Ping failure message only written to stdout only if verbose * BackupPC_backupDelete removes partial v3 backup in HOST/new; fixes #324 reported by @thalueng * BackupPC_backupDelete adds -f option to over keep, if set * BackupPC_nightly: change -f to -F when running BackupPC_refCountUpdate during fsck * Better formatting of eval cmd result in cmdSystemOrEvalLong() * Remove zero count entries in per-backup and per-host poolCnt files * Add a fake version parameter to the CSS URL to overcome caching * Fixed ALRM typo in BackupPC_dump, by @rhansen (#348) * Fixed command name in error message in BackupPC_archive, by @rhansen (#349) * lib/BackupPC/Xfer/Rsync.pm skips adding --iconv option when $conf->{ClientCharset} is utf8 or empty, to avoid a long-standing rsync bug * lib/BackupPC/Xfer/Rsync.pm provides a more informative warning when the client rsync exits with an IO error, and also includes the IO error in the xferErr count * lib/BackupPC/Xfer/Smb.pm recognizes NT_STATUS_LOGON_FAILURE error * Increase text length in config editor fields, by @moisseev (#336) * Typo fix in config.pl, by @cure (#338) * Minor documentation updates, removing old SourceForge links BackupPC-XS 0.62 released === This release has a couple of fixes: * force rewrite of attr file if xattr key fixup was applied * fixed attrib refCnt when attrib is unchanged * bpc_attrib_dirWrite() doesn't create empty attrib files -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Richard Shaw hobbes1069@gmail.com - 4.4.0-1 - Update to 4.4.0. * Wed Mar 25 2020 Jitka Plesnikova jplesnik@redhat.com - 4.3.2-3 - Add perl dependencies needed for build - Remove duplicities from run-requires * Thu Mar 12 2020 Richard Shaw hobbes1069@gmail.com - 4.3.2-2 - Add patch to allow prevention of backups being deleted. - Add apache.users config file to control permissions and update related SETUP documentation. - Fix PID file to be created in /run instead of /var/run. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849363 - BackupPC-4.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849363 [ 2 ] Bug #1849364 - BackupPC-XS-0.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849364 --------------------------------------------------------------------------------
================================================================================ BackupPC-XS-0.62-1.el8 (FEDORA-EPEL-2020-db09232601) Implementation of various BackupPC functions in a perl-callable module -------------------------------------------------------------------------------- Update Information:
BackupPC 4.4.0 === This release contains several new features and some bug fixes. New features include: * any full/filled backup can be marked for keeping, which prevents any expiry or deletion * any backup can be annotated with a comment (eg, "prior to upgrade of xyz") added metrics CGI (thanks to @jooola) that replaces RSS and adds Prometheus support * tar XferMethod now supports xattrs and acls * rsync XferMethod now correctly supports xattrs on directories and symlinks * nightly pool scanning now verifies the md5 digests of a configurable fraction of pool files * code runs through perltidy so format is now uniform (thanks to @jooola, with help from @shancock9 and @moisseev) * New versions of BackupPC::XS (0.62) and rsync-bpc (3.0.9.15, 3.1.2.2 or 3.1.3beta0) are required. Here are the more detailed changes: * Merged pull requests #325, #326, #329, #330, #334, #336, #337, #338, #342, #343, #344, #345, #347, #348, #349 * Filled/Full backups can now be marked as "keep", which excludes them from any expiry/deletion. Also, a backup-specific comment can be added to any backup to capture any important information about that backup (eg, "pre-upgrade of xyz"). * Added metrics CGI, which adds Prometheus support and replaces RSS, by @joola (#344, #347) * Tar XferMethod now supports xattrs and acls; xattrs sbould be compatible with rsync XferMethod, but acls are not * Sort open directories to top when browsing backup tree * Format code using perltidy, and included in pre- commit flow, by @joola (#334, #337, #342, #343, #345). Thanks to @joola and @shancock9 (perltidy author) for significant effort and support, plus improvements in perltidy, to make this happen. * Added $Conf{PoolNightlyDigestCheckPercent}, which checks the md5 digest of this fraction of the pool files each night. * $Conf{ClientShareName2Path} is saved in backups file and the share to client path mapping is now displayed when you browse a backup so you know the actual client backup path for each share, if different from the share name * configure.pl now checks the per-host config.pl in a V3 upgrade to warn the user if $Conf{RsyncClientCmd} or $Conf{RsyncClientRestoreCmd} are used for that host, so that the new settings $Conf{RsyncSshArgs} and $Conf{RsyncClientPath} can be manually updated. * Fixed host mutex handling for dhcp hosts; shifted initial mutex requests to client programs * Updated webui icon, logo and favicon, by @moisseev (#325, #326, #329, #330) * Added $Conf{RsyncRestoreArgsExtra} for host-specific restore settings * Language files are now all use utf8 charsets * Bumped required version of BackupPC::XS to 0.62 and rsync-bpc to 3.0.9.15. * Ping failure message only written to stdout only if verbose * BackupPC_backupDelete removes partial v3 backup in HOST/new; fixes #324 reported by @thalueng * BackupPC_backupDelete adds -f option to over keep, if set * BackupPC_nightly: change -f to -F when running BackupPC_refCountUpdate during fsck * Better formatting of eval cmd result in cmdSystemOrEvalLong() * Remove zero count entries in per-backup and per-host poolCnt files * Add a fake version parameter to the CSS URL to overcome caching * Fixed ALRM typo in BackupPC_dump, by @rhansen (#348) * Fixed command name in error message in BackupPC_archive, by @rhansen (#349) * lib/BackupPC/Xfer/Rsync.pm skips adding --iconv option when $conf->{ClientCharset} is utf8 or empty, to avoid a long-standing rsync bug * lib/BackupPC/Xfer/Rsync.pm provides a more informative warning when the client rsync exits with an IO error, and also includes the IO error in the xferErr count * lib/BackupPC/Xfer/Smb.pm recognizes NT_STATUS_LOGON_FAILURE error * Increase text length in config editor fields, by @moisseev (#336) * Typo fix in config.pl, by @cure (#338) * Minor documentation updates, removing old SourceForge links BackupPC-XS 0.62 released === This release has a couple of fixes: * force rewrite of attr file if xattr key fixup was applied * fixed attrib refCnt when attrib is unchanged * bpc_attrib_dirWrite() doesn't create empty attrib files -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Richard Shaw hobbes1069@gmail.com - 0.62-1 - Update to 0.62. * Sat May 30 2020 Richard Shaw hobbes1069@gmail.com - 0.60-1 - Update to 0.60. * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 0.59-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849363 - BackupPC-4.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849363 [ 2 ] Bug #1849364 - BackupPC-XS-0.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849364 --------------------------------------------------------------------------------
================================================================================ BibTool-2.68-1.el8 (FEDORA-EPEL-2020-db42d6c365) A Tool for manipulating BibTeX data bases -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ OpenImageIO-2.1.16.0-2.el8 (FEDORA-EPEL-2020-c1dca57fe4) Library for reading and writing images -------------------------------------------------------------------------------- Update Information:
Initial build for EL 8. ---- Initial build for EPEL 8. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 4 2020 Nicolas Chauvet kwizart@gmail.com - 2.1.16.0-2 - Rebuilt for OpenCV 4.3 * Tue Jun 2 2020 Richard Shaw hobbes1069@gmail.com - 2.1.16.0-1 - Update to 2.1.16. * Fri May 29 2020 Jonathan Wakely jwakely@redhat.com - 2.1.15.0-4 - Rebuilt for Boost 1.73 * Tue May 26 2020 Miro Hron��ok mhroncok@redhat.com - 2.1.15.0-3 - Rebuilt for Python 3.9 * Mon May 11 2020 Gwyn Ciesla gwync@protonmail.com - 2.1.15.0-2 - Rebuild for new LibRaw * Mon May 11 2020 Richard Shaw hobbes1069@gmail.com - 2.1.15.0-1 - Update to 2.1.15.0. - Adds support for libRaw 0.20, fixes RHBZ#1833450. * Sat May 2 2020 Richard Shaw hobbes1069@gmail.com - 2.1.14.0-1 - Update to 2.1.14.0. * Sun Apr 12 2020 Richard Shaw hobbes1069@gmail.com - 2.1.13.0-2 - Rebuild for funky depdendency problem in Rawhide/33. * Thu Apr 2 2020 Richard Shaw hobbes1069@gmail.com - 2.1.13.0-1 - Update to 2.1.13. * Tue Mar 3 2020 Richard Shaw hobbes1069@gmail.com - 2.1.12.0-1 - Update to 2.1.12.0. --------------------------------------------------------------------------------
================================================================================ chromium-83.0.4103.106-1.el8 (FEDORA-EPEL-2020-c6a368f21e) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information:
Black Lives Matter. Saying this does not mean that other lives do not matter. It should not be controversial to say this. If I say Chromium updates matter, it does not mean that other Fedora packages do not matter, it means that a Chromium update is needed to fix this giant pile of severe security vulnerabilities, here, today, now: CVE-2020-6463 CVE-2020-6465 CVE-2020-6466 CVE-2020-6467 CVE-2020-6468 CVE-2020-6469 CVE-2020-6470 CVE-2020-6471 CVE-2020-6472 CVE-2020-6473 CVE-2020-6474 CVE-2020-6475 CVE-2020-6476 CVE-2020-6478 CVE-2020-6479 CVE-2020-6480 CVE-2020-6481 CVE-2020-6482 CVE-2020-6483 CVE-2020-6484 CVE-2020-6485 CVE-2020-6486 CVE-2020-6487 CVE-2020-6488 CVE-2020-6489 CVE-2020-6490 CVE-2020-6491 CVE-2020-6505 CVE-2020-6506 CVE-2020-6507 In making that analogy, I do not intend to trivialize BLM. In no way do I mean to compare the lives of people to a silly web browser update. People are infinitely important than software. But since I'm here to push this software update out, I am also choosing to say clearly and unambiguously that Black Lives Matter. Open Source proves that many voices, many contributions, together can change the world. It depends on it. This is my voice. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 18 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.106-1 - update to 83.0.4103.106 - remove duplicate ServiceWorker fix - add fix to work around gcc bug on aarch64 - disable python byte compiling (we do not need it) * Tue Jun 16 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.97-5 - add ServiceWorker fix * Mon Jun 15 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.97-4 - use old cups handling on epel7 - fix skia attribute overrides with gcc * Wed Jun 10 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.97-3 - fix issue on epel7 where linux/kcmp.h does not exist * Mon Jun 8 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.97-2 - more fixes from gentoo * Sun Jun 7 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.97-1 - update to 83.0.4103.97 * Tue Jun 2 2020 Tom Callaway spot@fedoraproject.org - 83.0.4103.61-1 - update to 83.0.4103.61 - conditionalize and disable remoting -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1837877 - CVE-2020-6465 chromium-browser: Use after free in reader mode https://bugzilla.redhat.com/show_bug.cgi?id=1837877 [ 2 ] Bug #1837878 - CVE-2020-6466 chromium-browser: Use after free in media https://bugzilla.redhat.com/show_bug.cgi?id=1837878 [ 3 ] Bug #1837879 - CVE-2020-6467 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1837879 [ 4 ] Bug #1837880 - CVE-2020-6468 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1837880 [ 5 ] Bug #1837882 - CVE-2020-6470 chromium-browser: Insufficient validation of untrusted input in clipboard https://bugzilla.redhat.com/show_bug.cgi?id=1837882 [ 6 ] Bug #1837883 - CVE-2020-6471 chromium-browser: Insufficient policy enforcement in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1837883 [ 7 ] Bug #1837884 - CVE-2020-6472 chromium-browser: Insufficient policy enforcement in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1837884 [ 8 ] Bug #1837885 - CVE-2020-6473 chromium-browser: Insufficient policy enforcement in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1837885 [ 9 ] Bug #1837886 - CVE-2020-6474 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1837886 [ 10 ] Bug #1837887 - CVE-2020-6475 chromium-browser: Incorrect security UI in full screen https://bugzilla.redhat.com/show_bug.cgi?id=1837887 [ 11 ] Bug #1837888 - CVE-2020-6477 chromium-browser: Inappropriate implementation in installer https://bugzilla.redhat.com/show_bug.cgi?id=1837888 [ 12 ] Bug #1837889 - CVE-2020-6478 chromium-browser: Inappropriate implementation in full screen https://bugzilla.redhat.com/show_bug.cgi?id=1837889 [ 13 ] Bug #1837890 - CVE-2020-6480 chromium-browser: Insufficient policy enforcement in enterprise https://bugzilla.redhat.com/show_bug.cgi?id=1837890 [ 14 ] Bug #1837891 - CVE-2020-6481 chromium-browser: Insufficient policy enforcement in URL formatting https://bugzilla.redhat.com/show_bug.cgi?id=1837891 [ 15 ] Bug #1837892 - CVE-2020-6482 chromium-browser: Insufficient policy enforcement in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1837892 [ 16 ] Bug #1837893 - CVE-2020-6483 chromium-browser: Insufficient policy enforcement in payments https://bugzilla.redhat.com/show_bug.cgi?id=1837893 [ 17 ] Bug #1837894 - CVE-2020-6484 chromium-browser: Insufficient data validation in ChromeDriver https://bugzilla.redhat.com/show_bug.cgi?id=1837894 [ 18 ] Bug #1837896 - CVE-2020-6485 chromium-browser: Insufficient data validation in media router https://bugzilla.redhat.com/show_bug.cgi?id=1837896 [ 19 ] Bug #1837897 - CVE-2020-6486 chromium-browser: Insufficient policy enforcement in navigations https://bugzilla.redhat.com/show_bug.cgi?id=1837897 [ 20 ] Bug #1837898 - CVE-2020-6487 chromium-browser: Insufficient policy enforcement in downloads https://bugzilla.redhat.com/show_bug.cgi?id=1837898 [ 21 ] Bug #1837899 - CVE-2020-6488 chromium-browser: Insufficient policy enforcement in downloads https://bugzilla.redhat.com/show_bug.cgi?id=1837899 [ 22 ] Bug #1837900 - CVE-2020-6489 chromium-browser: Inappropriate implementation in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1837900 [ 23 ] Bug #1837901 - CVE-2020-6490 chromium-browser: Insufficient data validation in loader https://bugzilla.redhat.com/show_bug.cgi?id=1837901 [ 24 ] Bug #1837902 - CVE-2020-6491 chromium-browser: Incorrect security UI in site information https://bugzilla.redhat.com/show_bug.cgi?id=1837902 [ 25 ] Bug #1837907 - CVE-2020-6469 chromium-browser: Insufficient policy enforcement in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1837907 [ 26 ] Bug #1837912 - CVE-2020-6476 chromium-browser: Insufficient policy enforcement in tab strip https://bugzilla.redhat.com/show_bug.cgi?id=1837912 [ 27 ] Bug #1837927 - CVE-2020-6479 chromium-browser: Inappropriate implementation in sharing https://bugzilla.redhat.com/show_bug.cgi?id=1837927 [ 28 ] Bug #1840893 - CVE-2020-6463 chromium-browser: Use after free in ANGLE https://bugzilla.redhat.com/show_bug.cgi?id=1840893 [ 29 ] Bug #1847268 - CVE-2020-6505 chromium-browser: Use after free in speech https://bugzilla.redhat.com/show_bug.cgi?id=1847268 [ 30 ] Bug #1847269 - CVE-2020-6506 chromium-browser: Insufficient policy enforcement in WebView https://bugzilla.redhat.com/show_bug.cgi?id=1847269 [ 31 ] Bug #1847270 - CVE-2020-6507 chromium-browser: Out of bounds write in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1847270 --------------------------------------------------------------------------------
================================================================================ epel-rpm-macros-8-13 (FEDORA-EPEL-2020-790135c4fa) Extra Packages for Enterprise Linux RPM macros -------------------------------------------------------------------------------- Update Information:
Backport %%py_shebang_fix, %%pytest, %%py_provides Allow to combine %%pycached with other macros (e.g. %%exclude or %%ghost) (#1838992) Use Suggests for python36-rpm-macros -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 19 2020 Troy Dawson tdawson@redhat.com - 8-13 - Use Suggests for python36-rpm-macros * Sun Jun 7 2020 Miro Hron��ok mhroncok@redhat.com - 8-12 - Backport %py_shebang_fix, %pytest, %py_provides - Allow to combine %pycached with other macros (e.g. %exclude or %ghost) (#1838992) --------------------------------------------------------------------------------
================================================================================ filelight-20.04.2-1.el8 (FEDORA-EPEL-2020-eeab5fd591) Graphical disk usage statistics -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ fuse-zip-0.7.1-1.el8 (FEDORA-EPEL-2020-2f1f478654) Filesystem to navigate, extract, create and modify ZIP archives -------------------------------------------------------------------------------- Update Information:
Update to 0.7.1. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Vasiliy Glazov vascom2@gmail.com - 0.7.1-1 - Update to 0.7.1 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 0.7.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ kdesvn-2.1.0-1.el8 (FEDORA-EPEL-2020-d23667b555) Subversion client for KDE -------------------------------------------------------------------------------- Update Information:
Update to 2.1.0. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 20 2020 Marie Loise Nolden loise@kde.org - 2.1.0-1 - Update to 2.1.0-1 --------------------------------------------------------------------------------
================================================================================ kile-2.9.93-1.el8 (FEDORA-EPEL-2020-9147e8cba7) (La)TeX source editor and TeX shell -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ libharu-2.3.0-9.el8 (FEDORA-EPEL-2020-8d77c70006) C library for generating PDF files -------------------------------------------------------------------------------- Update Information:
Applied 157 and 187 upstream github pull requests. -------------------------------------------------------------------------------- ChangeLog:
* Mon May 11 2020 Dmitrij S. Kryzhevich kryzhev@ispms.ru - 2.3.0-9 - Update to RC3 - Apply 157 and 187 upstream github pull requests. See rhbz #1833318 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 2.3.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libmp4v2-2.1.0-0.21.trunkREV507.el8 (FEDORA-EPEL-2020-3c9503ab68) Library for working with files using the mp4 container format -------------------------------------------------------------------------------- Update Information:
Fixes for https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325 https://nvd.nist.gov/vuln/detail/CVE-2018-14054 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-0.21.trunkREV507 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sat Dec 14 2019 Jeff Law law@redhat.com - 2.1.0-0.20.trunkREV507 - Fix narrowing conversion issue caught by gcc-10 * Fri Nov 8 2019 S��rgio Basto sergio@serjux.com - 2.1.0-0.19.trunkREV507 - Fix-v3-Integer-underflow-overflow-in-MP4v2-2.0.0 * Sat Nov 2 2019 S��rgio Basto sergio@serjux.com - 2.1.0-0.18.trunkREV507 - Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446 https://nvd.nist.gov/vuln/detail/CVE-2018-14403 https://nvd.nist.gov/vuln/detail/CVE-2018-14379 https://nvd.nist.gov/vuln/detail/CVE-2018-14326 https://nvd.nist.gov/vuln/detail/CVE-2018-14325 https://nvd.nist.gov/vuln/detail/CVE-2018-14054 based on https://github.com/TechSmith/mp4v2/pull/27 and https://github.com/sergiomb2/libmp4v2/ - Update spec - Fix build on epel7 --------------------------------------------------------------------------------
================================================================================ lighttpd-1.4.55-3.el8 (FEDORA-EPEL-2020-0de6d49717) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information:
tmpfiles fix -------------------------------------------------------------------------------- ChangeLog:
* Mon Jun 22 2020 Gwyn Ciesla gwync@protonmail.com - 1.4.55-3 - Fix tmpfiles for EL-8. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849755 - LigHTTPd should include tmpfiles.d configuration to create /run/lighttpd https://bugzilla.redhat.com/show_bug.cgi?id=1849755 --------------------------------------------------------------------------------
================================================================================ lynis-3.0.0-1.el8 (FEDORA-EPEL-2020-f64e687c3f) Security and system auditing tool -------------------------------------------------------------------------------- Update Information:
Update to 3.0.0 (rhbz #1848716): Fixes CVE-2020-13882 / CVE-2019-13033 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 20 2020 Othman Madjoudj Othman Madjoudj athmane@fedoraproject.org - 3.0.0-1 - Update to 3.0.0 (rhbz #1848716) - Fixes CVE-2020-13882 / CVE-2019-13033 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 2.7.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1848716 - lynis-3.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1848716 --------------------------------------------------------------------------------
================================================================================ openvdb-7.0.0-7.el8 (FEDORA-EPEL-2020-6c546ada30) C++ library for sparse volumetric data discretized on three-dimensional grids -------------------------------------------------------------------------------- Update Information:
oidn -------- * Update to 1.2.1 openvdb -------------- * Disable jemalloc for Red Hat Enterprise 8 and its derivative Blender ------------ * Fix path for the fonts location -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Luya Tshimbalanga luya@fedoraproject.org - 7.0.0-7 - Disable jemalloc build for RHEL and its derivative * Thu May 28 2020 Jonathan Wakely jwakely@redhat.com - 7.0.0-6 - Rebuilt for Boost 1.73 * Tue May 26 2020 Miro Hron��ok mhroncok@redhat.com - 7.0.0-5 - Rebuilt for Python 3.9 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1843623 - blender-2.83.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1843623 [ 2 ] Bug #1844904 - Please Update Blender to 2.83 https://bugzilla.redhat.com/show_bug.cgi?id=1844904 [ 3 ] Bug #1847248 - oidn-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1847248 [ 4 ] Bug #1848116 - OpenVDB should not be built with concurrent malloc (jemalloc) https://bugzilla.redhat.com/show_bug.cgi?id=1848116 [ 5 ] Bug #1849429 - fonts are in the wrong folder (updates-testing) https://bugzilla.redhat.com/show_bug.cgi?id=1849429 --------------------------------------------------------------------------------
================================================================================ orangefs-2.9.7-8.el8 (FEDORA-EPEL-2020-afd1e5b457) Parallel network file system client -------------------------------------------------------------------------------- Update Information:
Provides orangefs for epel8 -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849315 - Please build orangefs for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1849315 --------------------------------------------------------------------------------
================================================================================ perl-DBD-Mock-1.55-2.el8 (FEDORA-EPEL-2020-bc4cb08600) Mock database driver for testing -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1781736 - Add perl-DBD-Mock to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1781736 --------------------------------------------------------------------------------
================================================================================ perl-Digest-MD5-File-0.08-23.el8 (FEDORA-EPEL-2020-0fb1fa9e06) Perl extension for getting MD5 sums for files and URLs -------------------------------------------------------------------------------- Update Information:
First build for EPEL-8. -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1781739 - Co-maintainer request (to maintain EPEL8 branch) https://bugzilla.redhat.com/show_bug.cgi?id=1781739 --------------------------------------------------------------------------------
================================================================================ perl-File-Path-Tiny-0.9-9.el8 (FEDORA-EPEL-2020-1bddb60fff) Recursive versions of mkdir() and rmdir() without as much overhead as File::Path -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ perl-HTML-Table-2.08a-32.el8 (FEDORA-EPEL-2020-9676178e9f) Create HTML tables using simple interface -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ perl-HTTP-Body-1.22-16.el8 (FEDORA-EPEL-2020-dc140ae027) HTTP Body Parser -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ perl-Heap-0.80-33.el8 (FEDORA-EPEL-2020-03e52da218) Perl extension for keeping data partially sorted -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ perl-Statistics-Descriptive-3.0702-6.el8 (FEDORA-EPEL-2020-dc5ea9cda0) Perl module of basic descriptive statistical functions -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ python-asysocks-0.0.4-1.el8 (FEDORA-EPEL-2020-28746ab5ad) Socks5/Socks4 client and server library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release 0.0.4 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jun 22 2020 Fabian Affolter mail@fabian-affolter.ch - 0.0.4-1 - Update to latest upstream release 0.0.4 * Mon Jun 15 2020 Fabian Affolter mail@fabian-affolter.ch - 0.0.3-1 - Update to latest upstream release 0.0.3 * Tue May 26 2020 Miro Hron��ok mhroncok@redhat.com - 0.0.2-2 - Rebuilt for Python 3.9 --------------------------------------------------------------------------------
================================================================================ python-catkin_lint-1.6.9-1.el8 (FEDORA-EPEL-2020-4a411e803d) Check catkin packages for common errors -------------------------------------------------------------------------------- Update Information:
Update to the latest `catkin_lint` release. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jun 22 2020 Scott K Logan logans@cottsay.net - 1.6.9-1 - Update to 1.6.9 (rhbz#1847827) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1847827 - python-catkin_lint-1.6.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1847827 --------------------------------------------------------------------------------
================================================================================ python-enlighten-1.6.0-1.el8 (FEDORA-EPEL-2020-695e6c7e7e) Enlighten Progress Bar -------------------------------------------------------------------------------- Update Information:
Update to 1.6.0 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 19 2020 Avram Lubkin aviso@rockhopper.net - 1.6.0-1 - Update to 1.6.0 * Tue May 26 2020 Miro Hron��ok mhroncok@redhat.com - 1.5.1-2 - Rebuilt for Python 3.9 --------------------------------------------------------------------------------
================================================================================ python-mysqlclient-1.4.6-2.el8 (FEDORA-EPEL-2020-6984cdde39) MySQL/mariaDB database connector for Python -------------------------------------------------------------------------------- Update Information:
Add tests and missing BR -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1816295 - Review Request: python-mysqlclient - MySQL/mariaDB database connector for Python https://bugzilla.redhat.com/show_bug.cgi?id=1816295 --------------------------------------------------------------------------------
================================================================================ python-pluginlib-0.8.0-1.el8 (FEDORA-EPEL-2020-180104f60f) A framework for creating and importing plugins in Python -------------------------------------------------------------------------------- Update Information:
0.8.0 Release -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 19 2020 Avram Lubkin aviso@rockhopper.net - 0.8.0-1 - 0.8.0 Release * Tue May 26 2020 Miro Hron��ok mhroncok@redhat.com - 0.7.0-2 - Rebuilt for Python 3.9 --------------------------------------------------------------------------------
================================================================================ python-rencode-1.0.6-10.el8 (FEDORA-EPEL-2020-a598d8bb7c) Web safe object pickling/unpickling -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1847744 - please add python-rencode to epel8 https://bugzilla.redhat.com/show_bug.cgi?id=1847744 --------------------------------------------------------------------------------
================================================================================ python-wcwidth-0.2.4-1.el8 (FEDORA-EPEL-2020-7865b92546) Measures number of Terminal column cells of wide-character codes -------------------------------------------------------------------------------- Update Information:
Update to 0.2.4 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 19 2020 Avram Lubkin aviso@rockhopper.net - 0.2.4-1 - Update to 0.2.4 --------------------------------------------------------------------------------
================================================================================ rootsh-1.5.3-22.el8 (FEDORA-EPEL-2020-a4f816f7a7) Shell wrapper for auditing -------------------------------------------------------------------------------- Update Information:
New build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ rsibreak-0.12.13-1.el8 (FEDORA-EPEL-2020-b2a2d313c2) A small utility which bothers you at certain intervals -------------------------------------------------------------------------------- Update Information:
Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ votca-csg-1.6.1-1.el8 (FEDORA-EPEL-2020-67e5ad9748) VOTCA coarse-graining engine -------------------------------------------------------------------------------- Update Information:
Update votca packages -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Christoph Junghans junghans@votca.org - 1.6.1-1 - Version bump to v1.6.1 * Thu May 28 2020 Jonathan Wakely jwakely@redhat.com - 1.6-2 - Rebuilt for Boost 1.73 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849435 - votca-xtp-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849435 [ 2 ] Bug #1849436 - votca-csg-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849436 [ 3 ] Bug #1849437 - votca-tools-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849437 --------------------------------------------------------------------------------
================================================================================ votca-tools-1.6.1-1.el8 (FEDORA-EPEL-2020-67e5ad9748) VOTCA tools library -------------------------------------------------------------------------------- Update Information:
Update votca packages -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Christoph Junghans junghans@votca.org - 1.6.1-1 - Version bump to v1.6.1 * Thu May 28 2020 Jonathan Wakely jwakely@redhat.com - 1.6-2 - Rebuilt for Boost 1.73 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849435 - votca-xtp-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849435 [ 2 ] Bug #1849436 - votca-csg-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849436 [ 3 ] Bug #1849437 - votca-tools-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849437 --------------------------------------------------------------------------------
================================================================================ votca-xtp-1.6.1-1.el8 (FEDORA-EPEL-2020-67e5ad9748) VOTCA excitation and charge properties module -------------------------------------------------------------------------------- Update Information:
Update votca packages -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 21 2020 Christoph Junghans junghans@votca.org - 1.6.1-1 - Version bump to v1.6.1 * Sat May 30 2020 Jonathan Wakely jwakely@redhat.com - 1.6-2 - Rebuilt for Boost 1.73 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849435 - votca-xtp-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849435 [ 2 ] Bug #1849436 - votca-csg-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849436 [ 3 ] Bug #1849437 - votca-tools-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849437 --------------------------------------------------------------------------------
================================================================================ wsjtx-2.2.2-1.el8 (FEDORA-EPEL-2020-b7eac8146c) Weak Signal communication by K1JT -------------------------------------------------------------------------------- Update Information:
Release: WSJT-X 2.2.2 June 22, 2020 --------------------- WSJT-X v2.2.2 is a bug fix release, mainly to incorporate the new RAC section PE into the FT8/FT4/MSK144 Contest Mode for Field Day. - Stations intending to operate in Field Day (FD) are urged to upgrade to this release, without it you cannot set your section to PE, and of equal importance you cannot decode contest messages from stations who are operating from PE without this upgrade. - FT8 decoder speeded up in Normal and Fast modes. This change gives a speed of decoding closer to that of v2.1.2 without compromising the number of decodes. It is particularly targeted for slower single board computer users such as the Raspberry Pi Model 3 or similar. - Thanks to our user interface language translation contributors for many improvements to the translated strings. - The DX Grid field is now cleared automatically when the DX Call field is changed. Care should be taken to complete entry of a callsign before entering a grid square. -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1849689 - wsjtx-2.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849689 --------------------------------------------------------------------------------
================================================================================ znc-1.8.1-1.el8 (FEDORA-EPEL-2020-18fb909316) An advanced IRC bouncer -------------------------------------------------------------------------------- Update Information:
Update to 1.8.1 Fix CVE-2020-13775 possible crash/NULL pointer dereference -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 19 2020 Nick Bebout nb@fedoraproject.org - 1.8.1-1 - Update to 1.8.1 - Fix CVE-2020-13775 possible crash/NULL pointer dereference * Tue May 26 2020 Miro Hron��ok mhroncok@redhat.com - 1.8.0-2 - Rebuilt for Python 3.9 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1842249 - znc-1.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1842249 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org