Fedora 32 Update: poetry-1.0.10-1.fc32
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-c2fb217a69
2020-08-01 00:49:35.659056
--------------------------------------------------------------------------------
Name : poetry
Product : Fedora 32
Version : 1.0.10
Release : 1.fc32
URL : https://poetry.eustace.io/
Summary : Python dependency management and packaging made easy
Description :
Poetry helps you declare, manage and install dependencies of Python
projects, ensuring you have the right stack everywhere.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.10. Release notes: https://github.com/python-
poetry/poetry/releases/tag/1.0.10
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 22 2020 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.10-1
- Update to version 1.0.10.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-c2fb217a69' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora 32 Update: metamath-0.184-1.fc32
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-bce05e01d9
2020-08-01 00:49:35.659045
--------------------------------------------------------------------------------
Name : metamath
Product : Fedora 32
Version : 0.184
Release : 1.fc32
URL : http://us.metamath.org/
Summary : Construct mathematics from basic axioms
Description :
Metamath is a tiny language that can express theorems in abstract
mathematics, accompanied by proofs that can be verified by a computer
program. Metamath lets you see mathematics developed in complete detail
from first principles, with absolute rigor.
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.184: - allow space in `TOOLS> BREAK` - correct error msg
for missing althtmldef - add checking for mathbox independence to `VERIFY
MARKUP` - add `/MATHBOX_SKIP` - update set.mm to 18 Jul 2020 version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 22 2020 Jerry James <loganjerry(a)gmail.com> - 0.184-1
- Version 0.184
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1859009 - metamath-0.184 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1859009
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-bce05e01d9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora 32 Update: sonic-visualiser-4.1-1.fc32
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-028f979217
2020-08-01 00:49:35.659035
--------------------------------------------------------------------------------
Name : sonic-visualiser
Product : Fedora 32
Version : 4.1
Release : 1.fc32
URL : https://sonicvisualiser.org/
Summary : A program for viewing and exploring audio data
Description :
Sonic Visualiser is an application for viewing and analyzing the
contents of music audio files.
The aim of Sonic Visualiser is to be the first program you reach for
when want to study a musical recording rather than simply listen to
it.
As well as a number of features designed to make exploring audio data
as revealing and fun as possible, Sonic Visualiser also has powerful
annotation capabilities to help you to describe what you find, and the
ability to run automated annotation and analysis plugins in the Vamp
analysis plugin format ��� as well as applying standard audio effects.
--------------------------------------------------------------------------------
Update Information:
Changes in Sonic Visualiser v4.1 (18 June 2020) since the previous release
4.0.1: - Support "dark mode" on Windows and Linux as well as macOS - Add
right-click (or Ctrl-click, on the Mac) context menus to the layer property
tabs, pane zoom controls, and all dial controls, providing some basic edit
and reset functions - Provide format options when exporting layers to CSV,
allowing control over column separator, header row, and timestamp format -
Permit and handle optional header row when importing from CSV - Add export of
spectrogram data to CSV formats - Support doubling escapes for quotes in
quoted CSV fields on import - Fix truncated image export when exporting from
spectrogram view that hasn't finished loading when the export is requested
- Fix failure to show parameter updates when changing the current program in
a Vamp plugin that supports programs (e.g. Melodia) - Fix inability of Windows
builds to open https:// URLs - Add references to Vamp Plugin Pack in "Find a
Transform" results for plugins that are not yet installed but are available
in pack - Improve and tidy various aspects of OSC support, and update
documentation for it - Improve performance of peak-frequency spectrogram -
Fix missing undo/redo of layer renames - Fix failure to audition effects
plugins live, while adjusting their parameters in preparation for applying
them - this worked in some cases, but not the most common ones; it should
now work everywhere
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 18 2020 Neal Gompa <ngompa13(a)gmail.com> - 4.1-1
- Update to 4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848637 - sonic-visualiser-4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1848637
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-028f979217' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
[SECURITY] Fedora 32 Update: clamav-0.102.4-1.fc32
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-6584a641ae
2020-08-01 00:49:35.658947
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora 32
Version : 0.102.4
Release : 1.fc32
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.102.4 is a bug patch release to address the following issues:
CVE-2020-3350 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3350>
Fixed a vulnerability a malicious user could exploit to replace a scan target's
directory with a symlink to another path to trick clamscan, clamdscan, or
clamonacc into removing or moving a different file (such as a critical system
file). The issue would affect users that use the --move or --remove options for
clamscan, clamdscan and clamonacc. For more information about AV quarantine
attacks using links, see RACK911 Lab's report
<https://www.rack911labs.com/research/exploiting-almost-every-antivirus-
software>. CVE-2020-3327 <https://cve.mitre.org/cgi-
bin/cvename.cgi?name=CVE-2020-3327> Fixed a vulnerability in the ARJ archive-
parsing module in ClamAV 0.102.3 that could cause a denial-of-service (DoS)
condition. Improper bounds checking resulted in an out-of-bounds read that could
cause a crash. The previous fix for this CVE in version 0.102.3 was incomplete.
This fix correctly resolves the issue. CVE-2020-3481
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3481> Fixed a
vulnerability in the EGG archive module in ClamAV 0.102.0 - 0.102.3 that could
cause a denial-of-service (DoS) condition. Improper error handling could cause a
crash due to a NULL pointer dereference. This vulnerability is mitigated for
those using the official ClamAV signature databases because the file type
signatures in daily.cvd will not enable the EGG archive parser in affected
versions.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 17 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.4-1
- Update to 0.102.4 (bz#1857867,1858262,1858263,1858265,1858266)
- Security fixes CVE-2020-3327 CVE-2020-3350 CVE-2020-3481
* Thu May 28 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.3-2
- Update clamd README file (bz#1798369)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1858261 - CVE-2020-3350 clamav: malicious user exploit to replace scan target's directory with symlink
https://bugzilla.redhat.com/show_bug.cgi?id=1858261
[ 2 ] Bug #1858264 - CVE-2020-3481 clamav: improper error handling causing crash due to NULL pointer dereference
https://bugzilla.redhat.com/show_bug.cgi?id=1858264
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-6584a641ae' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months
Fedora 32 Update: python-wikitcms-2.6.4-1.fc32
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-a03d34dfc1
2020-08-01 00:49:35.659022
--------------------------------------------------------------------------------
Name : python-wikitcms
Product : Fedora 32
Version : 2.6.4
Release : 1.fc32
URL : https://pagure.io/fedora-qa/python-wikitcms
Summary : Fedora QA wiki test management Python library
Description :
python-wikitcms is a library for interacting with Fedora's wiki-based 'test
management' system. It can:
* Create the pages for release validation test events
* Find existing release validation event pages, in various ways
* Report test results
The wiki-based test management system itself is documented at:
https://fedoraproject.org/wiki/Wikitcms
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of python-wikitcms, with one change only:
going forward, new Summary pages will be included in the relevant event
category, just like individual test type pages. This was requested in
https://pagure.io/fedora-qa/relval/issue/13 .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 22 2020 Adam Williamson <awilliam(a)redhat.com> - 2.6.4-1
- New release 2.6.4: include Summary pages in event category
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.6.3-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-a03d34dfc1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 8 months