[SECURITY] Fedora EPEL 7 Update: composer-1.10.26-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-a970a526cb
2022-04-21 20:26:46.203306
--------------------------------------------------------------------------------
Name : composer
Product : Fedora EPEL 7
Version : 1.10.26
Release : 1.el7
URL : https://getcomposer.org/
Summary : Dependency Manager for PHP
Description :
Composer helps you declare, manage and install dependencies of PHP projects,
ensuring you have the right stack everywhere.
Documentation: https://getcomposer.org/doc/
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.26** - 2022-04-13 * Security: Fixed command injection
vulnerability in HgDriver/GitDriver (GHSA-x7cr-6qr6-2hh6 / CVE-2022-24828) ----
**Version 1.10.25** - 2022-01-21 * Fixed selfupdate on Windows + PHP 8.1
regression (#10446) ---- **Version 1.10.24** - 2021-12-09 * Added v1
deprecation warning when running install. Please make sure you upgrade to
Composer 2, see https://blog.packagist.com/deprecating-composer-1-support/ *
Fixed PHP 8.1 compatibility * Fixed some more Windows CLI parameter escaping
edge cases ---- **Version 1.10.23** - 2021-10-05 * Security: Fixed command
injection vulnerability on Windows (GHSA-frqg-7g38-6gcf / CVE-2021-41116)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 14 2022 Remi Collet <remi(a)remirepo.net> - 1.10.26-1
- update to 1.10.26
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update composer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 7 Update: openbgpd-7.3-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-f216f61bfd
2022-04-21 20:26:46.203295
--------------------------------------------------------------------------------
Name : openbgpd
Product : Fedora EPEL 7
Version : 7.3
Release : 1.el7
URL : https://www.openbgpd.org/
Summary : OpenBGPD Routing Daemon
Description :
OpenBGPD is a free implementation of the Border Gateway Protocol (BGP),
Version 4. It allows ordinary machines to be used as routers exchanging
routes with other systems speaking the BGP protocol.
This is the portable version and it does not have the means to influence
kernel routing tables. It is only suitable for route servers/collectors.
--------------------------------------------------------------------------------
Update Information:
# OpenBGPD 7.3 This release includes the following changes to the previous
release: * Macro expansion in the config file is improved. It is now possible
to expand `set large-community $myAS:$location:$transit`. * Add initial FIB
support for Linux. Routes can be added and removed. Nexthop tracking and dynamic
interface detection are not yet implemented. * Major refactoring in the RIB
codebase to add multipath support in an upcoming release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 13 2022 Robert Scheck <robert(a)fedoraproject.org> 7.3-1
- Upgrade to 7.3 (#2075138)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075138 - openbgpd-7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075138
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openbgpd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 7 Update: csdiff-2.4.0-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-68e1cadb32
2022-04-21 20:26:46.203281
--------------------------------------------------------------------------------
Name : csdiff
Product : Fedora EPEL 7
Version : 2.4.0
Release : 1.el7
URL : https://github.com/csutils/csdiff
Summary : Non-interactive tools for processing code scan results in plain-text
Description :
This package contains the csdiff tool for comparing code scan defect lists in
order to find out added or fixed defects, and the csgrep utility for filtering
defect lists using various filtering predicates.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release - add support for the `SARIF` data format
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 13 2022 Kamil Dudka <kdudka(a)redhat.com> 2.4.0-1
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csdiff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 7 Update: golang-github-mitchellh-mapstructure-0-0.13.gitca63d7c.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-62e17f2dc4
2022-04-21 20:26:46.203192
--------------------------------------------------------------------------------
Name : golang-github-mitchellh-mapstructure
Product : Fedora EPEL 7
Version : 0
Release : 0.13.gitca63d7c.el7
URL : https://github.com/mitchellh/mapstructure
Summary : Go library for decoding generic map values into native Go structures
Description :
mapstructure is a Go library for decoding generic map values to structures
and vice versa, while providing helpful error handling.
This library is most useful when decoding values from some data stream (JSON,
Gob, etc.) where you don't quite know the structure of the underlying data
until you read a part of it. You can therefore read a map[string]interface{}
and use this library to decode it into the proper underlying
native Go structure.
--------------------------------------------------------------------------------
Update Information:
Bump to upstream ca63d7c062ee3c9f34db231e352b60012b4fd0c1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 13 2017 Jan Chaloupka <jchaloup(a)redhat.com> - 0-0.13.gitca63d7c
- Bump to upstream ca63d7c062ee3c9f34db231e352b60012b4fd0c1
related: #1243892
* Fri Jan 13 2017 Jan Chaloupka <jchaloup(a)redhat.com> - 0-0.12.git281073e
- Polish the spec file
related: #1243892
* Thu Jul 21 2016 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0-0.11.git281073e
- https://fedoraproject.org/wiki/Changes/golang1.7
* Mon Feb 22 2016 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0-0.10.git281073e
- https://fedoraproject.org/wiki/Changes/golang1.6
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.9.git281073e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jan 13 2016 jchaloup <jchaloup(a)redhat.com> - 0-0.8.git281073e
- Update github.com/mitchellh/cli to 8102d0ed5ea2709ade1243798785888175f6e415
related: #1243892
* Wed Jan 6 2016 Fridolin Pokorny <fpokorny(a)redhat.com> - 0-0.7.git281073e
- Bump to upstream 281073eb9eb092240d33ef253c404f1cca550309
related: #1243892
* Sat Sep 12 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.6.git740c764
- Update to spec-2.1
related: #1243892
* Mon Aug 24 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.5.git740c764
- Update spec file to spec-2.0
related: #1243892
* Thu Jul 16 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.4.git740c764
- Choose the correct architecture
- Update license
- Remove runtime-dep on golang
- Add temporary devel subpackage of mitchellh-cli
resolves: #1243892
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0-0.2.git740c764
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Thu Oct 16 2014 jchaloup <jchaloup(a)redhat.com> - 0-0.1.git740c764
- First package for Fedora
resolves: #1153724
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1243892 - Tracker for golang-github-mitchellh-mapstructure
https://bugzilla.redhat.com/show_bug.cgi?id=1243892
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update golang-github-mitchellh-mapstructure' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 8 Update: darktable-3.8.1-2.el8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-4b08a454d7
2022-04-20 19:35:02.314687
--------------------------------------------------------------------------------
Name : darktable
Product : Fedora EPEL 8
Version : 3.8.1
Release : 2.el8
URL : http://www.darktable.org/
Summary : Utility to organize and develop raw images
Description :
Darktable is a virtual light-table and darkroom for photographers:
it manages your digital negatives in a database and lets you view them
through a zoom-able light-table.
It also enables you to develop raw images and enhance them.
--------------------------------------------------------------------------------
Update Information:
3.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 13 2022 Dan Hor��k <dan(a)danny.cz> - 3.8.1-2
- fixed gcc-toolset-11-toolchain for EL8
* Fri Feb 11 2022 Germano Massullo <germano.massullo(a)gmail.com> - 3.8.1-1
- 3.8.1 release
- removed 10826.patch aarch64-DT_CLONE_TARGETS.patch
* Tue Feb 1 2022 Germano Massullo <germano.massullo(a)gmail.com> - 3.8.0-7
- enabled gcc-toolset-11-toolchain for EL8
- enabled DRAWSPEED_ENABLE_LTO for EL8
* Sun Jan 9 2022 Germano Massullo <germano.massullo(a)gmail.com> - 3.8.0-6
- adds 10826.patch that fixes aarch64 and ppc64le builds
- re-enabled aarch64 on EL8
- Replaced ExclusiveArch with ExcludeArch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074700 - epel8 status
https://bugzilla.redhat.com/show_bug.cgi?id=2074700
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update darktable' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 8 Update: fennel-1.1.0-1.el8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-6bdc5fdea9
2022-04-20 19:35:02.314676
--------------------------------------------------------------------------------
Name : fennel
Product : Fedora EPEL 8
Version : 1.1.0
Release : 1.el8
URL : https://fennel-lang.org/
Summary : A Lisp that compiles to Lua
Description :
Fennel is a Lisp that compiles to Lua. It aims to be easy to use, expressive,
and has almost zero overhead compared to handwritten Lua.
* *Full Lua compatibility* - You can use any function or library from Lua.
* *Zero overhead* - Compiled code should be just as or more efficient than
hand-written Lua.
* *Compile-time macros* - Ship compiled code with no runtime dependency on
Fennel.
* *Embeddable* - Fennel is a one-file library as well as an executable. Embed it
in other programs to support runtime extensibility and interactive
development.
At https://fennel-lang.org there's a live in-browser repl you can use without
installing anything.
--------------------------------------------------------------------------------
Update Information:
# Summary of user-visible changes Changes are marked in bold which could result
in backwards-incompatibility. # 1.1.0 / 2022-04-09 ## New Forms - Add match-
try macro for chained pattern matching for steps which might fail ## New
Features - The fennel.parser function now accepts a string in addition to an
iterator - The accumulate macro can now accumulate over multiple values - The fn
special now accepts a metadata table in place of a docstring - The ,reload mod
repl command can now reload macro modules ## Bug Fixes - Fix an issue where
built-in macros would modify their AST arguments - Fix a bug where --skip-
include would mistakenly emit a warning - Remove hex string escapes to preserve
PUC Lua 5.1 compatibility - Prevent errors resolving the target of certain repl
commands from crashing - Fix a bug where disabling the compiler sandbox broke
module require scope - Fix a bug where certain specials wouldn���t short-circuit
in and/or - Fix a bug where symbols bound to nil did not show up in REPL
completion ## Changes and Removals - Deprecate the granulate and string-stream
functions in the API - Deprecate the global form in favor of using the _G table
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 12 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 1.1.0-1
- Update to 1.1.0
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Dec 9 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 1.0.0-1
- Update to 1.0.0
- Opt in to rpmautospec
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2073738 - fennel-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2073738
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fennel' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 8 Update: unrar-free-0.1.1-1.el8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-ef7cc77e0e
2022-04-20 19:35:02.314665
--------------------------------------------------------------------------------
Name : unrar-free
Product : Fedora EPEL 8
Version : 0.1.1
Release : 1.el8
URL : https://gitlab.com/bgermann/unrar-free
Summary : Free software version of the non-free unrar utility
Description :
unrar-free is a free software version of the non-free unrar utility. This
program is a simple command-line front-end to libarchive, and can list and
extract RAR archives but also other formats supported by libarchive. It does
not rival the non-free unrar in terms of features, but special care has been
taken to ensure it meets most user's needs.
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#2074312
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 12 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.1.1-1
- Initial import; Fixes: RHBZ#2074312
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074312 - Review Request: unrar-free - Free software version of the non-free unrar utility
https://bugzilla.redhat.com/show_bug.cgi?id=2074312
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update unrar-free' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
[SECURITY] Fedora EPEL 8 Update: pdns-4.6.2-1.el8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-7aca455c41
2022-04-20 19:35:02.314655
--------------------------------------------------------------------------------
Name : pdns
Product : Fedora EPEL 8
Version : 4.6.2
Release : 1.el8
URL : http://powerdns.com
Summary : A modern, advanced and high performance authoritative-only nameserver
Description :
The PowerDNS Nameserver is a modern, advanced and high performance
authoritative-only nameserver. It is written from scratch and conforms
to all relevant DNS standards documents.
Furthermore, PowerDNS interfaces with almost any database.
--------------------------------------------------------------------------------
Update Information:
- Update to 4.6.2 Release notes:
https://doc.powerdns.com/authoritative/changelog/4.6.html#change-4.6.2 ---- -
Update to 4.6.1 Release notes:
https://doc.powerdns.com/authoritative/changelog/4.6.html#change-4.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 12 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 4.6.2-1
- Update to 4.6.2
* Sun Apr 10 2022 Morten Stevens <mstevens(a)fedoraproject.org> - 4.6.1-1
- Update to 4.6.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069401 - CVE-2022-27227 pdns: pdns,pdns-recursor: Incomplete zone transfers handled as successful [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2069401
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pdns' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years
Fedora EPEL 8 Update: python-enlighten-1.10.2-1.el8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-ffca6786bb
2022-04-20 19:35:02.314634
--------------------------------------------------------------------------------
Name : python-enlighten
Product : Fedora EPEL 8
Version : 1.10.2
Release : 1.el8
URL : https://github.com/Rockhopper-Technologies/enlighten
Summary : Enlighten Progress Bar
Description :
Enlighten Progress Bar is console progress bar module for Python.
The main advantage of Enlighten is it allows writing to stdout and stderr
without any redirection.
--------------------------------------------------------------------------------
Update Information:
Update to 1.10.2 (#2031522)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 12 2022 Avram Lubkin <aviso(a)rockhopper.net> - 1.10.2-1
- Update to 1.10.2 (#2031522)
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Sep 10 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 1.10.1-4
- Remove unused Python 2.7, 3.9, 3.8 and 3.7 byte cache from examples
* Tue Jul 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.10.1-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-enlighten' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years