epel-package-announce October 2022

epel-package-announce@lists.fedoraproject.org

1 participants
616 discussions

[SECURITY] Fedora EPEL 7 Update: php-Smarty-3.1.47-1.el7
by updates＠fedoraproject.org 23 Oct '22

23 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-576e858e93 2022-10-23 08:27:03.146904 -------------------------------------------------------------------------------- Name : php-Smarty Product : Fedora EPEL 7 Version : 3.1.47 Release : 1.el7 URL : http://www.smarty.net Summary : Smarty - the compiling PHP template engine Description : Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. This implies that PHP code is application logic, and is separated from the presentation. Autoloader: /usr/share/php/Smarty/autoload.php -------------------------------------------------------------------------------- Update Information: ## [3.1.47] - 2022-09-14 ### Security - Applied appropriate javascript and html escaping in mailto plugin to counter injection attacks [#454](https://github.com/smarty-php/smarty/issues/454) ### Fixed - Fixed use of `rand()` without a parameter in math function [#794](https://github.com/smarty-php/smarty/issues/794) - Fixed unselected year/month/day not working in html_select_date [#395](https://github.com/smarty- php/smarty/issues/395) ## [3.1.46] - 2022-08-01 ### Fixed - Fixed problems with smarty_mb_str_replace [#549](https://github.com/smarty- php/smarty/issues/549) - Fixed second parameter of unescape modifier not working [#777](https://github.com/smarty-php/smarty/issues/777) ## [3.1.45] - 2022-05-17 ### Security - Prevent PHP injection through malicious block name or include file name. This addresses CVE-2022-29221 ### Fixed - Math equation `max(x, y)` didn't work anymore [#721](https://github.com/smarty- php/smarty/issues/721) ## [3.1.44] - 2022-01-18 ### Fixed - Fixed illegal characters bug in math function security check [#702](https://github.com/smarty- php/smarty/issues/702) ## [3.1.43] - 2022-01-10 ### Security - Prevent evasion of the `static_classes` security policy. This addresses CVE-2021-21408 ## [3.1.42] - 2022-01-10 ### Security - Prevent arbitrary PHP code execution through maliciously crafted expression for the math function. This addresses CVE-2021-29454 ## [3.1.41] - 2022-01-09 ### Security - Rewrote the mailto function to not use `eval` when encoding with javascript ## [3.1.40] - 2021-10-13 ### Changed - modifier escape now triggers a E_USER_NOTICE when an unsupported escape type is used https://github.com/smarty-php/smarty/pull/649 ### Security - More advanced javascript escaping to handle https://html.spec.whatwg.org/multipage/scripting.html#restrictions-for-cont… of-script-elements thanks to m-haritonov ## [3.1.39] - 2021-02-17 ### Security - Prevent access to `$smarty.template_object` in sandbox mode. This addresses CVE-2021-26119. - Fixed code injection vulnerability by using illegal function names in `{function name='blah'}{/function}`. This addresses CVE-2021-26120. ## [3.1.38] - 2021-01-08 ### Fixed - Smarty::SMARTY_VERSION wasn't updated https://github.com/smarty-php/smarty/issues/628 ## [3.1.37] - 2021-01-07 ### Changed - Changed error handlers and handling of undefined constants for php8-compatibility (set $errcontext argument optional) https://github.com/smarty-php/smarty/issues/605 - Changed expected error levels in unit tests for php8-compatibility - Travis unit tests now run for all php versions >= 5.3, including php8 - Travis runs on Xenial where possible ### Fixed - PHP5.3 compatibility fixes - Brought lexer source functionally up-to- date with compiled version ## [3.1.36] - 2020-04-14 ### Fixed - Smarty::SMARTY_VERSION wasn't updated in v3.1.35 https://github.com/smarty- php/smarty/issues/584 ## [3.1.35] - 2020-04-14 - remove whitespaces after comments https://github.com/smarty-php/smarty/issues/447 - fix foreachelse on arrayiterators https://github.com/smarty-php/smarty/issues/506 - fix files contained in git export archive for package maintainers https://github.com/smarty-php/smarty/issues/325 - throw SmartyException when setting caching attributes for cacheable plugin https://github.com/smarty- php/smarty/issues/457 - fix errors that occured where isset was replaced with null check such as https://github.com/smarty-php/smarty/issues/453 - unit tests are now in the repository ## 3.1.34 release - 05.11.2019 13.01.2020 - fix typo in exception message (JercSi) - fix typehint warning with callable (bets4breakfast) - add travis badge and compatability info to readme (matks) - fix stdClass cast when compiling foreach (carpii) - fix wrong set/get methods for memcached (IT-Experte) - fix pborm assigning value to object variables in smarty_internal_compile_assign (Hunman) - exclude error_reporting.ini from git export (glensc) ## 3.1.34-dev-6 - 30.10.2018 - bugfix a nested subblock in an inheritance child template was not replace by outer level block with same name in same child template https://github.com/smarty-php/smarty/issues/500 29.10.2018 - bugfix Smarty::$php_handling == PHP_PASSTHRU (default) did eat the "\n" (newline) character if it did directly followed a PHP tag like "?>" or other https://github.com/smarty-php/smarty/issues/501 14.10.2018 - bugfix autoloader exit shortcut https://github.com/smarty-php/smarty/issues/467 11.10.2018 - bugfix {insert} not works when caching is enabled and included template is present https://github.com/smarty-php/smarty/issues/496 - bugfix in date-format modifier; NULL at date string or default_date did not produce correct output https://github.com/smarty-php/smarty/pull/458 09.10.2018 - bugfix fix of 26.8.2017 https://github.com/smarty-php/smarty/issues/327 modifier is applied to sum expression https://github.com/smarty- php/smarty/issues/491 - bugfix indexed arrays could not be defined "array(...)"" 18.09.2018 - bugfix large plain text template sections without a Smarty tag > 700kB could could fail in version 3.1.32 and 3.1.33 because PHP preg_match() restrictions https://github.com/smarty- php/smarty/issues/488 -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 14 2022 Shawn Iwinski <shawn(a)iwin.ski> - 3.1.47-1 - Update to 3.1.47 - CVE-2022-29221 (RHBZ #2088250, 2088251) - CVE-2021-29454 (RHBZ #2044970, 2044971) - CVE-2021-21408 (RHBZ #2043595, 2043596) - Security update (RHBZ #2126854, 2126855, 2126856) * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.33-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2043595 - CVE-2021-21408 php-Smarty: template authors could run restricted static php methods [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2043595 [ 2 ] Bug #2043596 - CVE-2021-21408 php-Smarty: template authors could run restricted static php methods [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2043596 [ 3 ] Bug #2044970 - CVE-2021-29454 php-Smarty: template authors could run arbitrary PHP code by crafting a malicious math string [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2044970 [ 4 ] Bug #2044971 - CVE-2021-29454 php-Smarty: template authors could run arbitrary PHP code by crafting a malicious math string [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2044971 [ 5 ] Bug #2088250 - CVE-2022-29221 php-Smarty: php injection via malicious block name or include file name [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2088250 [ 6 ] Bug #2088251 - CVE-2022-29221 php-Smarty: php injection via malicious block name or include file name [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2088251 [ 7 ] Bug #2126855 - php-Smarty: javascript injection in mailto function [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2126855 [ 8 ] Bug #2126856 - php-Smarty: javascript injection in mailto function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2126856 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-Smarty' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: ckeditor-4.20.0-1.el7
by updates＠fedoraproject.org 23 Oct '22

23 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-473e5052db 2022-10-23 08:27:03.146892 -------------------------------------------------------------------------------- Name : ckeditor Product : Fedora EPEL 7 Version : 4.20.0 Release : 1.el7 URL : http://ckeditor.com/ Summary : WYSIWYG text editor to be used inside web pages Description : CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft Word and OpenOffice. -------------------------------------------------------------------------------- Update Information: ## CKEditor 4.20 New Features: * [#5084](https://github.com/ckeditor/ckeditor4/issues/5084): Added the [`config.t abletools_scopedHeaders`](https://ckeditor.com/docs/ckeditor4/latest/api/CK… R_config.html#cfg-tabletools_scopedHeaders) configuration option controlling the behaviour of table headers with and without the `[scope]` attribute. * [#5219](https://github.com/ckeditor/ckeditor4/issues/5219): Added the [`config.i mage2_defaultLockRatio`](https://ckeditor.com/docs/ckeditor4/latest/api/CKE… _config.html#cfg-image2_defaultLockRatio) configuration option allowing to set the default value of the "Lock ratio" option in the [Enhanced Image](https://ckeditor.com/cke4/addon/image2) dialog. * [#2008](https://github.com/ckeditor/ckeditor-dev/pull/2008): Extended the [Mentions](https://ckeditor.com/cke4/addon/mentions) and [Emoji](https://ckeditor.com/cke4/addon/emoji) plugins with a feature option that adds a space after an accepted autocompletion match. See: * [`confi gDefinition.followingSpace`](https://ckeditor.com/docs/ckeditor4/latest/api… ITOR_plugins_mentions_configDefinition.html#property-followingSpace) option for the mentions plugin, and * [`config.emoji_followingSpace`](https://ckedi tor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#cfg-emoji_followingS…) option for the emoji plugin. * [#5215](https://github.com/ckeditor/ckeditor4/issues/5215): Added the [`config.c oreStyles_toggleSubSup`](https://ckeditor.com/docs/ckeditor4/latest/api/CKE… _config.html#cfg-coreStyles_toggleSubSup) configuration option which disallows setting the subscript and superscript on the same element simultaneously using UI buttons. This option is turned off by default. Fixed Issues: * [#4889](https://github.com/ckeditor/ckeditor4/issues/4889): Fixed: Incorrect position of the [Table Resize](https://ckeditor.com/cke4/addon/tableresize) cursor after scrolling the editor horizontally. * [#5319](https://github.com/ckeditor/ckeditor4/issues/5319): Fixed: [Autolink](https://ckeditor.com/cke4/addon/autolink) [`config.autolink_urlRegex` ](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#cfg- autolink_urlRegex) option produced invalid links when configured directly using the editor instance config. Thanks to [Aigars Zeiza](https://github.com/Zuzon)! * [#4941](https://github.com/ckeditor/ckeditor4/issues/4941): Fixed: Some entities got wrongly encoded when using [`entities_processNumerical = true`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#… entities_processNumerical) configuration option. * [#4931](https://github.com/ckeditor/ckeditor4/issues/4931): Fixed: Selecting the whole editor content when there is only a list with an empty element at the end inside and deleting it did not delete all list items. API changes: * [#5122](https://github.com/ckeditor/ckeditor4/issues/5122): Added the ability to provide a list of buttons as an array to the [`config.removeButtons`](https://ck editor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#cfg-removeButtons) config variable. * [#2008](https://github.com/ckeditor/ckeditor-dev/pull/2008): Added [Autocomplete](https://ckeditor.com/cke4/addon/autocomplete) [`followingSp ace`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_plugins_autoc… te_configDefinition.html#property-followingSpace) option that finishes an accepted match with a space. ## CKEditor 4.19.1 Fixed Issues: * [#5125](https://github.com/ckeditor/ckeditor4/issues/5125): Fixed: Deleting a widget with disabled [autoParagraph](https://ckeditor.com/docs/ckeditor4/latest/ api/CKEDITOR_config.html#cfg-autoParagraph) by the keyboard `backspace` key removes the editor editable area and crashes the editor. * [#5135](https://github.com/ckeditor/ckeditor4/issues/5135): Fixed: The [`checkbo x.setValue`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_ui_dia… heckbox.html#method-setValue) and [`radio.setValue`](https://ckeditor.com/docs/c keditor4/latest/api/CKEDITOR_ui_dialog_radio.html#method-setValue) methods are not chainable as stated in the documentation. Thanks to [Jordan Bradford](https://github.com/LordPachelbel)! * [#5085](https://github.com/ckeditor/ckeditor4/issues/5085): Fixed: The [Language](https://ckeditor.com/cke4/addon/language) plugin removes the element marking the text in foreign language if said element does not have an information about the text direction. * [#4284](https://github.com/ckeditor/ckeditor4/issues/4284): Fixed: [Tableselection](https://ckeditor.com/cke4/addon/tableselection) Merging cells with a rowspan throws an unexpected error and does not create an undo step. * [#5184](https://github.com/ckeditor/ckeditor4/issues/5184): Fixed: The [Editor Placeholder](https://ckeditor.com/cke4/addon/wysiwygarea) plugin degrades typing performance. * [#5158](https://github.com/ckeditor/ckeditor4/issues/5158): Fixed: [`CKEDITOR.tools#convertToPx()`](https://ckeditor.com/docs/ckeditor4/late st/api/CKEDITOR_tools.html#method-convertToPx) gives invalid results if the helper calculator element was deleted from the DOM. * [#5234](https://github.com/ckeditor/ckeditor4/issues/5234): Fixed: [Easy Image](https://ckeditor.com/cke4/addon/easyimage) doesn't allow to upload images files using toolbar button. * [#438](https://github.com/ckeditor/ckeditor4/issues/438): Fixed: It is impossible to navigate to the [elementspath](https://ckeditor.com/cke4/addon/elementspath) from the [toolbar](https://ckeditor.com/cke4/addon/toolbar) by keyboard and vice versa. * [#4449](https://github.com/ckeditor/ckeditor4/issues/4449): Fixed: [`dialog.vali date#functions`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_di… validate.html#method-functions) incorrectly composes functions that return an optional error message, like e.g. [`dialog.validate.number`](https://ckeditor.co m/docs/ckeditor4/latest/api/CKEDITOR_dialog_validate.html#method-number) due to unnecessary return type coercion. * [#4473](https://github.com/ckeditor/ckeditor4/issues/4473): Fixed: The [dialog.v alidate](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dialog_val… .html) method does not accept parameter value. The issue originated in [dialog.v alidate.functions](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_… g_validate.html#method-functions) method that did not properly propagate parameter value to validator. Affected validators: * [`functions`](https ://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dialog_validate.html#method- functions) * [`equals`](https://ckeditor.com/docs/ckeditor4/latest/api/C KEDITOR_dialog_validate.html#method-equals) * [`notEqual`](https://ckedi tor.com/docs/ckeditor4/latest/api/CKEDITOR_dialog_validate.html#method-notE…) * [`cssLength`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dialog_v alidate.html#method-cssLength) * [`htmlLength`](https://ckeditor.com/doc s/ckeditor4/latest/api/CKEDITOR_dialog_validate.html#method-htmlLength) * [`inlineStyle`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dialog _validate.html#method-inlineStyle) * [#5147](https://github.com/ckeditor/ckeditor4/issues/5147): Fixed: The [Accessibility Help](https://ckeditor.com/cke4/addon/a11yhelp) dialog does not contain info about focus being moved back to the editing area upon leaving dialogs. * [#5144](https://github.com/ckeditor/ckeditor4/issues/5144): Fixed: [Menu buttons](https://ckeditor.com/cke4/addon/menubutton) and [panel buttons](https://ckeditor.com/cke4/addon/panelbutton) incorrectly indicate the open status of their associated pop-up menus in the browser's accessibility tree. * [#5022](https://github.com/ckeditor/ckeditor4/issues/5022): Fixed: [Find and Replace](https://ckeditor.com/cke4/addon/find) does not respond to the `Enter` key. API changes: * [#5184](https://github.com/ckeditor/ckeditor4/issues/5184): Added the [`config.e ditorplaceholder_delay`](https://ckeditor.com/docs/ckeditor4/latest/api/CKE… _config.html#cfg-editorplaceholder_delay) configuration option allowing to delay placeholder before it is toggled when changing editor content. * [#5184](https://github.com/ckeditor/ckeditor4/issues/5184): Added the [`CKEDITOR .tools#debounce()`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_tool s.html#method-debounce) function allowing to postpone a passed function execution until the given milliseconds have elapsed since the last time it was invoked. ## CKEditor 4.19.0 New features: * [#2444](https://github.com/ckeditor/ckeditor4/issues/2444): Togglable toolbar buttons are now exposed as toggle buttons in the browser's accessibility tree. * [#4641](https://github.com/ckeditor/ckeditor4/issues/4641): Added an option allowing to cancel the [Delayed Editor Creation](https://ckeditor.com/docs/ckedi tor4/latest/features/delayed_creation.html) feature as a function handle for editor creators ([`CKEDITOR.replace`](https://ckeditor.com/docs/ckeditor4/latest /api/CKEDITOR.html#method-replace), [`CKEDITOR.inline`](https://ckeditor.com/doc s/ckeditor4/latest/api/CKEDITOR.html#method-inline), [`CKEDITOR.appendTo`](https ://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR.html#method-appendTo)). * [#4986](https://github.com/ckeditor/ckeditor4/issues/4986): Added [`config.shift LineBreaks`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config… #cfg-shiftLineBreaks) allowing to preserve inline elements formatting when the `shift`+`enter` keystroke is used. * [#2445](https://github.com/ckeditor/ckeditor4/issues/2445): Added [`config.appli cationTitle`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_confi… l#cfg-applicationTitle) configuration option allowing to customize or disable the editor's application region label. This option, combined with [`config.title `](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#cfg- title), gives much better control over the editor's labels read by screen readers. Fixed Issues: * [#4543](https://github.com/ckeditor/ckeditor4/issues/4543): Fixed: Toolbar buttons toggle state is not correctly announced by screen readers lacking the information whether the feature is on or off. * [#4052](https://github.com/ckeditor/ckeditor4/issues/4052): Fixed: Editor labels are read incorrectly by screen readers due to invalid editor control type for the [Iframe Editing Area](https://ckeditor.com/cke4/addon/wysiwygarea) editors. * [#1904](https://github.com/ckeditor/ckeditor4/issues/1904): Fixed: Screen readers are not announcing the read-only editor state. * [#4904](https://github.com/ckeditor/ckeditor4/issues/4904): Fixed: Table cell selection and navigation with the `tab` key behavior is inconsistent after adding a new row. * [#3394](https://github.com/ckeditor/ckeditor4/issues/3394): Fixed: [Enhanced image](https://ckeditor.com/cke4/addon/image2) plugin dialog is not supporting URL with query string parameters. Thanks to [Simon Urli](https://github.com/surli)! * [#5049](https://github.com/ckeditor/ckeditor4/issues/5049): Fixed: The editor fails in strict mode due to not following the `use strict` directives in a core editor module. * [#5095](https://github.com/ckeditor/ckeditor4/issues/5095): Fixed: The [clipboard](https://ckeditor.com/cke4/addon/clipboard) plugin shows notification about unsupported file format when the file type is different than `jpg`, `gif`, `png`, not respecting [supported types](https://ckeditor.com/docs/ ckeditor4/latest/api/CKEDITOR_fileTools_uploadWidgetDefinition.html#property- supportedTypes) by the [Upload Widget](https://ckeditor.com/cke4/addon/uploadwidget) plugin. * [#4855](https://github.com/ckeditor/ckeditor4/issues/4855): [iOS] Fixed: Focusing toolbar buttons with an enabled VoiceOver screen reader moves the browser focus into an editable area and interrupts button functionality. API changes: * [#4641](https://github.com/ckeditor/ckeditor4/issues/4641): The [`CK EDITOR.replace`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR.ht… thod-replace), [`CKEDITOR.inline`](https://ckeditor.com/docs/ckeditor4/latest/ap i/CKEDITOR.html#method-inline), [`CKEDITOR.appendTo`](https://ckeditor.com/docs/ ckeditor4/latest/api/CKEDITOR.html#method-appendTo) functions are now returning a handle function allowing to cancel the [Delayed Editor Creation](https://ckedi tor.com/docs/ckeditor4/latest/features/delayed_creation.html) feature. * [#5095](https://github.com/ckeditor/ckeditor4/issues/5095): Added the [CKEDITOR. plugins.clipboard.addFileMatcher](https://ckeditor.com/docs/ckeditor4/lates… /CKEDITOR_plugins_clipboard.html#method-addFileMatcher) function allowing to define file formats supported by the [clipboard](https://ckeditor.com/cke4/addon/clipboard) plugin. Trying to paste unsupported files will result in a notification that a file cannot be dropped or pasted into the editor. * [#2445](https://github.com/ckeditor/ckeditor4/issues/2445): Added [`config.appli cationTitle`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_confi… l#cfg-applicationTitle) alongside [`CKEDITOR.editor#applicationTitle`](https://c keditor.com/docs/ckeditor4/latest/api/CKEDITOR_editor.html#property- applicationTitle) to allow customizing editor's application region label. ## CKEditor 4.18.0 **Security Updates:** * Fixed an XSS vulnerability in the core module reported by GitHub Security Lab team member [Kevin Backhouse](https://github.com/kevinbackhouse). Issue summary: The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing a JavaScript code. See [CVE-2022- 24728](https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-4fc4-… 6w89) for more details. * Fixed a Regular expression Denial of Service (ReDoS) vulnerability in dialog plugin discovered by the CKEditor 4 team during our regular security audit. Issue summary: The vulnerability allowed to abuse a dialog input validator regular expression, which could cause a significant performance drop resulting in a browser tab freeze. See [CVE-2022- 24729](https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-f6rf-… x2hh) for more details. You can read more details in the relevant security advisory and [contact us](security(a)cksource.com) if you have more questions. **An upgrade is highly recommended!** **Highlights:** [Web Spell Checker](https://webspellchecker.com/) ended support for WebSpellChecker Dialog on December 31st, 2021. This means the plugin is not supported any longer. Therefore, we decided to deprecate and remove the WebSpellChecker Dialog plugin from CKEditor 4 presets. We strongly encourage everyone to choose one of the other available spellchecking solutions - [Spell Check As You Type (SCAYT)](https://ckeditor.com/cke4/addon/scayt) or [WProofreader](https://ckeditor.com/cke4/addon/wproofreader). Fixed issues: * [#5097](https://github.com/ckeditor/ckeditor4/issues/5097): [Chrome] Fixed: Incorrect conversion of points to pixels while using [`CKEDITOR.tools.convertToP x()`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_tools.html#me… convertToPx). * [#5044](https://github.com/ckeditor/ckeditor4/issues/5044): Fixed: `select` elements with `multiple` attribute had incorrect styling. Thanks to [John R. D'Orazio](https://github.com/JohnRDOrazio)! Other changes: * [#5093](https://github.com/ckeditor/ckeditor4/issues/5093): Deprecated and removed WebSpellChecker Dialog from presets. * [#5127](https://github.com/ckeditor/ckeditor4/issues/5127): Deprecated the [`CKE DITOR.rnd`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR.html#pr… y-rnd) property to discourage using it in a security-sensitive context. * [#5087](https://github.com/ckeditor/ckeditor4/issues/5087): Improved the jQuery adapter by replacing a deprecated jQuery API with existing counterparts. Thanks to [Fran Boon](https://github.com/flavour)! * [#5128](https://github.com/ckeditor/ckeditor4/issues/5128): Improved the [Emoji](https://ckeditor.com/cke4/addon/emoji) definitions encoding set by the [ `config.emoji_emojiListUrl`](https://ckeditor.com/docs/ckeditor4/latest/api/CKED ITOR_config.html#cfg-emoji_emojiListUrl) configuration option. ## CKEditor 4.17.2 Fixed issues: * [#4934](https://github.com/ckeditor/ckeditor4/issues/4934): Fixed: Active focus in dialog tabs is not visible in the High Contrast mode. * [#547](https://github.com/ckeditor/ckeditor4/issues/547): Fixed: Dragging and dropping elements like images within a table is no longer available. * [#4875](https://github.com/ckeditor/ckeditor4/issues/4875): Fixed: It is not possible to delete multiple selected lists. * [#4873](https://github.com/ckeditor/ckeditor4/issues/4873): Fixed: Pasting content from MS Word and Outlook with horizontal lines prevents images from being uploaded. * [#4952](https://github.com/ckeditor/ckeditor4/issues/4952): Fixed: Dragging and dropping images within a table cell appends additional elements. * [#4761](https://github.com/ckeditor/ckeditor4/issues/4761): Fixed: Some CSS files are missing unique timestamp used to prevent browser to cache static resources between editor releases. * [#4987](https://github.com/ckeditor/ckeditor4/issues/4987): Fixed: [Find/Replace](https://ckeditor.com/cke4/addon/find) is not recognizing more than one space character. * [#5061](https://github.com/ckeditor/ckeditor4/issues/5061): Fixed: [Find/Replace](https://ckeditor.com/cke4/addon/find) plugin incorrectly handles multiple whitespace during replacing text. * [#5004](https://github.com/ckeditor/ckeditor4/issues/5004): Fixed: `MutationObserver` used in [IFrame Editing Area](https://ckeditor.com/cke4/addon/wysiwygarea) plugin causes memory leaks. * [#4994](https://github.com/ckeditor/ckeditor4/issues/4994): Fixed: [Easy Image](https://ckeditor.com/cke4/addon/easyimage) plugin caused content pasted from Word to turn into an image. API changes: * [#4918](https://github.com/ckeditor/ckeditor4/issues/4918): Explicitly set the [ `config.useComputedState`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDIT OR_config.html#cfg-useComputedState) default value to `true`. Thanks to [Shabab Karim](https://github.com/shabab477)! * [#4761](https://github.com/ckeditor/ckeditor4/issues/4761): The [`CKEDITOR.appen dTimestamp()`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR.html… od-appendTimestamp) function was added. * [#4761](https://github.com/ckeditor/ckeditor4/issues/4761): [`CKEDITOR.dom.docum ent#appendStyleSheet()`](https://ckeditor.com/docs/ckeditor4/latest/api/CKE… _dom_document.html#method-appendStyleSheet) and [`CKEDITOR.tools.buildStyleHtml( )`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_tools.html#method- buildStyleHtml) now use the newly added [`CKEDITOR.appendTimestamp()`](https://c keditor.com/docs/ckeditor4/latest/api/CKEDITOR.html#method-appendTimestamp) function to correctly handle caching of CSS files. Other changes: * [#5014](https://github.com/ckeditor/ckeditor4/issues/5014): Fixed: Toolbar configurator fails when plugin does not define a toolbar group. Thanks to [SuperPat](https://github.com/SuperPat45)! ## CKEditor 4.17.1 **Highlights:** Due to a regression in CKEeditor 4.17.0 version that was only revealed after the release and affected a limited area of operation, CSS assets loaded via relative links started to point into invalid location when loaded from external resources. We have therefore decided to immediately release CKEditor 4.17.1 that fixed this problem. If you have already upgraded to v4.17.0, make sure to upgrade to v4.17.1 to avoid this regression. Fixed issues: * [#4979](https://github.com/ckeditor/ckeditor4/issues/3757): Fixed: Added cache key in [#4761](https://github.com/ckeditor/ckeditor4/issues/4761) started to breaking relative links for external CSS resources. The fix has been reverted and will be corrected in the next editor version. ## CKEditor 4.17 **Security Updates:** * Fixed XSS vulnerability in the core module reported by [William Bowling](https://github.com/wbowling). Issue summary: The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result in executing JavaScript code. See [CVE-2021- 41165](https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7h26-… qhf2) for more details. * Fixed XSS vulnerability in the core module reported by [Maurice Dauer](https://twitter.com/laytonctf). Issue summary: The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. See [CVE-2021-41164](https://github.com/ckeditor/ckeditor4/security/advisories/G… pvmx-g8h5-cprj) for more details. You can read more details in the relevant security advisory and [contact us](security(a)cksource.com) if you have more questions. **An upgrade is highly recommended!** **Highlights:** Adobe [ended support of Flash Player](https://www.adobe.com/products/flashplayer/end-of- life.html) on December 31, 2020 and blocked Flash content from running in Flash Player beginning January 12, 2021. We have decided to deprecate and remove the [Flash](https://ckeditor.com/cke4/addon/flash) plugin from CKEditor 4 to help protect users' systems and discourage using insecure software. New Features: * [#3433](https://github.com/ckeditor/ckeditor4/issues/3433): Marked required fields in dialogs with asterisk (`*`) symbol. * [#4374](https://github.com/ckeditor/ckeditor4/issues/4374): Integrated the [Maximize](https://ckeditor.com/cke4/addon/maximize) plugin with browser's History API. * [#4461](https://github.com/ckeditor/ckeditor4/issues/4461): Introduced the possibility to delay editor initialization while it is in a detached DOM element. * [#4462](https://github.com/ckeditor/ckeditor4/issues/4462): Introduced support for reattaching editor container element to DOM. * [#4612](https://github.com/ckeditor/ckeditor4/issues/4612): Allow pasting images as Base64 from [clipboard](https://ckeditor.com/cke4/addon/clipboard) in all browsers except IE. * [#4681](https://github.com/ckeditor/ckeditor4/issues/4681): Allow drag and drop images as Base64. * [#4750](https://github.com/ckeditor/ckeditor4/issues/4750): Added notification for pasting and dropping unsupported file types into the editor. * [#4807](https://github.com/ckeditor/ckeditor4/issues/4807): [Chrome] Improved the performance of pasting large images. Thanks to [FlowIT- JIT](https://github.com/FlowIT-JIT)! * [#4850](https://github.com/ckeditor/ckeditor4/issues/4850): Added support for loading [content templates](https://ckeditor.com/cke4/addon/templates) from HTML files. Thanks to [Fynn96](https://github.com/Fynn96)! * [#4874](https://github.com/ckeditor/ckeditor4/issues/4874): Added the [`config.c lipboard_handleImages`](https://ckeditor.com/docs/ckeditor4/latest/api/CKED… config.html#cfg-clipboard_handleImages) configuration option for enabling and disabling built-in support for pasting and dropping images in the [Clipboard](https://ckeditor.com/cke4/addon/clipboard) plugin. Thanks to [FlowIT-JIT](https://github.com/FlowIT-JIT)! * [#4026](https://github.com/ckeditor/ckeditor4/issues/4026): [Preview](https://ckeditor.com/cke4/addon/preview) plugin now uses the [`editor# title`](http://localhost/ckeditor4- docs/build/docs/ckeditor4/latest/api/CKEDITOR_editor.html#property-title) property for the title of the preview window. Thanks to [Ely](https://github.com/Elyasin)! * [#4467](https://github.com/ckeditor/ckeditor4/issues/4467): Added support for inserting content next to a block [widgets](https://ckeditor.com/cke4/addon/widget) using keyboard navigation. Thanks to [bunglegrind](https://github.com/bunglegrind)! Fixed Issues: * [#3757](https://github.com/ckeditor/ckeditor4/issues/3757): [Firefox] Fixed: images pasted from [clipboard](https://ckeditor.com/cke4/addon/clipboard) are not inserted as Base64-encoded images. * [#3876](https://github.com/ckeditor/ckeditor4/issues/3876): Fixed: The [Print](https://ckeditor.com/cke4/addon/print) plugin incorrectly prints links and images. * [#4444](https://github.com/ckeditor/ckeditor4/issues/4444): [Firefox] Fixed: Print preview is incorrectly loaded from CDN. * [#4596](https://github.com/ckeditor/ckeditor4/issues/4596): Fixed: Incorrect handling of HSL/HSLA values in [`CKEDITOR.tools.color`](https://ckeditor.com/doc s/ckeditor4/latest/api/CKEDITOR_tools_color.html). * [#4597](https://github.com/ckeditor/ckeditor4/issues/4597): Fixed: Incorrect color conversion for HSL/HSLA values in [`CKEDITOR.tools.color`](https://ckedito r.com/docs/ckeditor4/latest/api/CKEDITOR_tools_color.html). * [#4604](https://github.com/ckeditor/ckeditor4/issues/4604): Fixed: [`CKEDITOR.pl ugins.clipboard.dataTransfer#getTypes()`](https://ckeditor.com/docs/ckedito… test/api/CKEDITOR_plugins_clipboard_dataTransfer.html#method-getTypes) returns no types. * [#4761](https://github.com/ckeditor/ckeditor4/issues/4761): Fixed: Not all resources loaded by the editor respect the cache key. * [#4783](https://github.com/ckeditor/ckeditor4/issues/4783): Fixed: The [Accessibility Help](https://ckeditor.com/cke4/addon/a11yhelp) dialog does not contain info about focus being moved back to the editing area upon activating a toolbar button. * [#4790](https://github.com/ckeditor/ckeditor4/issues/4790): Fixed: Printing page is invoked before the printed page is fully loaded. * [#4874](https://github.com/ckeditor/ckeditor4/issues/4874): Fixed: Built-in support for pasting and dropping images in the [Clipboard](https://ckeditor.com/cke4/addon/clipboard) plugin restricts third party plugins from handling image pasting. Thanks to [FlowIT- JIT](https://github.com/FlowIT-JIT)! * [#4888](https://github.com/ckeditor/ckeditor4/issues/4888): Fixed: The [`CKEDITO R.dialog#setState()`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDIT… alog.html#method-setState) method throws error when there is no "OK" button in the dialog. * [#4858](https://github.com/ckeditor/ckeditor4/issues/4858): Fixed: The [Autolink](https://ckeditor.com/cke4/addon/autolink) plugin incorrectly escapes the `&` characters when pasting links into the editor. * [#4892](https://github.com/ckeditor/ckeditor4/issues/4892): Fixed: Focus of buttons in dialogs is not visible enough in High Contrast mode. * [#3858](https://github.com/ckeditor/ckeditor4/issues/3858): Fixed: Pasting content in `ENTER_BR` [enter mode](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#c… enterMode) crashes the editor. * [#4891](https://github.com/ckeditor/ckeditor4/issues/4891): Fixed: The [Autogrow](https://ckeditor.com/cke4/addon/autogrow) plugin applies fixed width to the editor. API Changes: * [#4462](https://github.com/ckeditor/ckeditor4/issues/4462): [`CKEDITOR.editor#ge tSelection()`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_edit… ml#method-getSelection) now returns `null` if the editor is in recreating state. * [#4583](https://github.com/ckeditor/ckeditor4/issues/4583): Added support for new, comma-less color syntax to [`CKEDITOR.tools.color`](https://ckeditor.com/do cs/ckeditor4/latest/api/CKEDITOR_tools_color.html). * [#4604](https://github.com/ckeditor/ckeditor4/issues/4604): Added the [`CKEDITOR .plugins.clipboard.dataTransfer#isFileTransfer()`](https://ckeditor.com/docs/cke ditor4/latest/api/CKEDITOR_plugins_clipboard_dataTransfer.html#method- isFileTransfer) method. * [#4790](https://github.com/ckeditor/ckeditor4/issues/4790): Added `callback` parameter to [`CKEDITOR.plugins.preview#createPreview()`](https://ckeditor.com/d ocs/ckeditor4/latest/api/CKEDITOR_plugins_preview.html#method-createPreview) method. Other Changes: * [#4866](https://github.com/ckeditor/ckeditor4/issues/#4866): The [Flash](https://ckeditor.com/cke4/addon/flash) plugin is now deprecated and has been removed from CKEditor 4. * [#4901](https://github.com/ckeditor/ckeditor4/issues/4901): Redesigned buttons placement in the [Content templates](https://ckeditor.com/cke4/addon/templates) dialog to make it more UX friendly. Thanks to [Fynn96](https://github.com/Fynn96)! -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 14 2022 Shawn Iwinski <shawn(a)iwin.ski> - 4.20.0-1 - Update to 4.20.0 (RHBZ #2024097) - CVE-2022-24728 (RHBZ #2065297, 2065299) - CVE-2022-24729 (RHBZ #2065300, 2065301) * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2024097 - ckeditor-4.20.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2024097 [ 2 ] Bug #2065297 - CVE-2022-24728 ckeditor: Cross Site Scripting in WYSIWYG [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2065297 [ 3 ] Bug #2065299 - CVE-2022-24728 ckeditor: Cross Site Scripting in WYSIWYG [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2065299 [ 4 ] Bug #2065300 - CVE-2022-24729 ckeditor: Dialog Plugin regular expression usage causes performance drop [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2065300 [ 5 ] Bug #2065301 - CVE-2022-24729 ckeditor: Dialog Plugin regular expression usage causes performance drop [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2065301 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ckeditor' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: perl-Lua-API-0.04-1.el7
by updates＠fedoraproject.org 23 Oct '22

23 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-1eef7b5256 2022-10-23 08:27:03.146796 -------------------------------------------------------------------------------- Name : perl-Lua-API Product : Fedora EPEL 7 Version : 0.04 Release : 1.el7 URL : https://metacpan.org/release/Lua-API Summary : Interface to Lua's embedding API Description : Lua is a simple, expressive, extension programming language that is easily embeddable. Lua::API provides Perl bindings to Lua's C-based embedding API. It allows Perl routines to be called from Lua as if they were written in C, and allows Perl routines to directly manipulate the Lua interpreter and its environment. It presents a very low-level interface (essentially equivalent to the C interface), so is aimed at developers who need that sort of access. -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 14 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 0.04-1 - Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #2056210 - Review Request: perl-Lua-API - Interface to Lua's embedding API https://bugzilla.redhat.com/show_bug.cgi?id=2056210 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update perl-Lua-API' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: distribution-gpg-keys-1.78-1.el7
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-318362b0c0 2022-10-22 15:25:52.129084 -------------------------------------------------------------------------------- Name : distribution-gpg-keys Product : Fedora EPEL 7 Version : 1.78 Release : 1.el7 URL : https://github.com/xsuchy/distribution-gpg-keys Summary : GPG keys of various Linux distributions Description : GPG keys used by various Linux distributions to sign packages. -------------------------------------------------------------------------------- Update Information: updated keys -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.78-1 - update copr keys - change license to spdx * Sun Aug 28 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.77-1 - Add openEuler GPG Key - update copr keys - Add Oracle Linux 9 key - Add Fedora 10 key * Wed Aug 10 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.76-1 - add fedora 38 and 39 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2136148 - mock-core-configs install fails due to distribution-gpg-keys 1.77 dependency https://bugzilla.redhat.com/show_bug.cgi?id=2136148 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update distribution-gpg-keys' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: vcs-diff-lint-1-1.el8
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-e47a6664e7 2022-10-22 15:05:33.071410 -------------------------------------------------------------------------------- Name : vcs-diff-lint Product : Fedora EPEL 8 Version : 1 Release : 1.el8 URL : https://github.com/fedora-copr/vcs-diff-lint Summary : VCS Differential Code Analysis Tool Description : Analyze code, and print only reports related to a particular change. From within a VCS directory (only Git is supported for now) first analyze set of changed files against given changeset (origin/main by default) so we know what files need to be analyzed. Then run code analyzers (e.g. PyLint) against the old code (before changes), run analyzers against the actual code (not yet pushed changes), perform a diff (using csdiff utility), and finally print a set of added (or even fixed, as opt-in) analyzers' warnings. -------------------------------------------------------------------------------- Update Information: new package built with tito -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 29 2022 Pavel Raiskup <praiskup(a)redhat.com> 1-1 - new package built with tito -------------------------------------------------------------------------------- References: [ 1 ] Bug #2130897 - Review Request: vcs-diff-lint - VCS Differential Code Analysis Tool https://bugzilla.redhat.com/show_bug.cgi?id=2130897 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update vcs-diff-lint' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: arm-none-eabi-binutils-cs-2.39-1.el8
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-4349cdffbd 2022-10-22 15:05:33.071396 -------------------------------------------------------------------------------- Name : arm-none-eabi-binutils-cs Product : Fedora EPEL 8 Version : 2.39 Release : 1.el8 URL : http://www.codesourcery.com/sgpp/lite/arm Summary : GNU Binutils for cross-compilation for arm-none-eabi target Description : This is a cross-compilation version of GNU Binutils, which can be used to assemble and link binaries for the arm-none-eabi platform. Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). -------------------------------------------------------------------------------- Update Information: Initial epel8 build -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 31 2022 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.39-1 - updated to 2.39 * Wed Aug 24 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> - 1:2.38-3 - Fix build on EPEL 8 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon May 9 2022 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.38-1 - updated to 2.38 * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.37-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Sep 6 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.37-3 - temp. disable autoconf as 2.71 is not compatible * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.37-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jul 20 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.37-1 - updated to 2.37 * Tue May 4 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.36.1-1 - updated to 2.36.1 * Tue May 4 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.36-1 - updated to 2.36 * Mon May 3 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.35-4 - bump release for rebuild * Mon Apr 12 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.35-3 - add explicit requirement for autoconf 2.69 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.35-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Wed Nov 4 2020 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.35-1 - updated to 2.35 * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.32-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 21 2020 Jeff Law <law(a)redhat.com> - 1:2.32-4 - Fix broken configure files compromised by LTO * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.32-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.32-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Feb 4 2019 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.32-1 - updated to 2.32 * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.30-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.30-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Mar 7 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.30-2 - add gcc buildrequire * Tue Feb 6 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.30-1 - updated to 2.30 * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.28-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.28-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Thu Mar 2 2017 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.28-1 - updated to 2.28 * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.27-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sun Nov 13 2016 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.27-1 - updated to 2.27 * Tue Jun 28 2016 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.26-1 - update binutils to 2.26 * Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.25-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1:2.25-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sun May 31 2015 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.25-1 - updated to vanila 2.25 * Thu Nov 13 2014 Michal Hlavinka <mhlavink(a)redhat.com> - 2014.05.28-3 - fix CVE-2014-8738: out of bounds memory write * Wed Nov 12 2014 Michal Hlavinka <mhlavink(a)redhat.com> - 2014.05.28-2 - fix directory traversal vulnerability (#1162657) - fix CVE-2014-8501: out-of-bounds write when parsing specially crafted PE executable - fix CVE-2014-8502: heap overflow in objdump - fix CVE-2014-8503: stack overflow in objdump when parsing specially crafted ihex file - fix CVE-2014-8504: stack overflow in the SREC parser * Wed Aug 20 2014 Michal Hlavinka <mhlavink(a)redhat.com> - 2014.05.28-1 - updated to 2014.05-28 * Fri Aug 15 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2013.11.24-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2013.11.24-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Jan 13 2014 Michal Hlavinka <mhlavink(a)redhat.com> - 2013.11.24-1 - updated to 2013.11-24 * Wed Aug 21 2013 Michal Hlavinka <mhlavink(a)redhat.com> - 2013.05.23-1 - updated to 2013.05-23 * Thu Aug 8 2013 Michal Hlavinka <mhlavink(a)redhat.com> - 2012.09.63-5 - use unversioned docdir (#993677) * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2012.09.63-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Feb 20 2013 Michal Hlavinka <mhlavink(a)redhat.com> - 2012.09.63-3 - add provides, so we can combine CodeSourcery and upstream versions * Wed Feb 20 2013 Michal Hlavinka <mhlavink(a)redhat.com> - 2012.09.63-2 - make it build with new texinfo * Mon Dec 3 2012 Michal Hlavinka <mhlavink(a)redhat.com> - 2012.09.63-1 - new spec for arm-none-eabi using CodeSourcery release -------------------------------------------------------------------------------- References: [ 1 ] Bug #2121171 - Please branch and build arm-none-eabi-binutils-cs in epel8 and epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2121171 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update arm-none-eabi-binutils-cs' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: icewm-3.0.1-2.el8
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-de342b1d30 2022-10-22 15:05:33.071327 -------------------------------------------------------------------------------- Name : icewm Product : Fedora EPEL 8 Version : 3.0.1 Release : 2.el8 URL : https://ice-wm.org/ Summary : Window manager designed for speed, usability, and consistency Description : IceWM is a window manager for the X Window System (freedesktop, XFree86). The goal of IceWM is speed, simplicity, and not getting in the user's way. You can install minimal version of IceWM without all optional dependencies: -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 6 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.0.1-1 - chore(update): 3.0.1 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update icewm' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 Update: vl-gothic-fonts-20220612-2.el9
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-53dd1b5ba4 2022-10-22 14:54:09.037857 -------------------------------------------------------------------------------- Name : vl-gothic-fonts Product : Fedora EPEL 9 Version : 20220612 Release : 2.el9 URL : http://dicey.org/vlgothic Summary : Japanese TrueType font Description : VLGothic provides Japanese TrueType fonts from the Vine Linux project. Most of the glyphs are taken from the M+ and Sazanami Gothic fonts, but some have also been improved by the project. This package provides the monospace VLGothic font. -------------------------------------------------------------------------------- Update Information: New package for epel9 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 4 2022 Akira TAGOH <tagoh(a)redhat.com> - 20220612-2 - Correct the source URL. * Wed Jul 13 2022 Akira TAGOH <tagoh(a)redhat.com> - 20220612-1 - New upstream release. Resolves: rhbz#1858617 - Revise the spec file for new packaging guidelines. * Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 20141206-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20141206-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20141206-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2120194 - Please branch and build vlgothic-fonts in epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2120194 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update vl-gothic-fonts' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 Update: vcs-diff-lint-1-1.el9
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-a5b1c0d190 2022-10-22 14:54:09.037846 -------------------------------------------------------------------------------- Name : vcs-diff-lint Product : Fedora EPEL 9 Version : 1 Release : 1.el9 URL : https://github.com/fedora-copr/vcs-diff-lint Summary : VCS Differential Code Analysis Tool Description : Analyze code, and print only reports related to a particular change. From within a VCS directory (only Git is supported for now) first analyze set of changed files against given changeset (origin/main by default) so we know what files need to be analyzed. Then run code analyzers (e.g. PyLint) against the old code (before changes), run analyzers against the actual code (not yet pushed changes), perform a diff (using csdiff utility), and finally print a set of added (or even fixed, as opt-in) analyzers' warnings. -------------------------------------------------------------------------------- Update Information: new package built with tito -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 29 2022 Pavel Raiskup <praiskup(a)redhat.com> 1-1 - new package built with tito -------------------------------------------------------------------------------- References: [ 1 ] Bug #2130897 - Review Request: vcs-diff-lint - VCS Differential Code Analysis Tool https://bugzilla.redhat.com/show_bug.cgi?id=2130897 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update vcs-diff-lint' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 Update: icewm-3.0.1-1.el9
by updates＠fedoraproject.org 22 Oct '22

22 Oct '22

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-dc6e0e57a5 2022-10-22 14:54:09.037813 -------------------------------------------------------------------------------- Name : icewm Product : Fedora EPEL 9 Version : 3.0.1 Release : 1.el9 URL : https://ice-wm.org/ Summary : Window manager designed for speed, usability, and consistency Description : IceWM is a window manager for the X Window System (freedesktop, XFree86). The goal of IceWM is speed, simplicity, and not getting in the user's way. You can install minimal version of IceWM without all optional dependencies: -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 6 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.0.1-1 - chore(update): 3.0.1 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update icewm' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
...
13
14
15
16
17
18
19
...
62
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce October 2022