Fedora 33 Update: icewm-2.3.3-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-dbda02f4bd
2021-05-03 01:48:11.690585
--------------------------------------------------------------------------------
Name : icewm
Product : Fedora 33
Version : 2.3.3
Release : 1.fc33
URL : https://ice-wm.org/
Summary : Window manager designed for speed, usability, and consistency
Description :
IceWM is a window manager for the X Window System (freedesktop, XFree86). The
goal of IceWM is speed, simplicity, and not getting in the user's way.
You can install minimal version of IceWM without all optional dependencies:
sudo dnf install icewm-minimal-session --setopt=install_weak_deps=False
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 28 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3.3-1
- build(update): 2.3.3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-dbda02f4bd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: libnbd-1.6.4-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-6b7c3dbc99
2021-05-03 01:48:11.690569
--------------------------------------------------------------------------------
Name : libnbd
Product : Fedora 33
Version : 1.6.4
Release : 1.fc33
URL : https://github.com/libguestfs/libnbd
Summary : NBD client library in userspace
Description :
NBD ��� Network Block Device ��� is a protocol for accessing Block Devices
(hard disks and disk-like things) over a Network.
This is the NBD client library in userspace, a simple library for
writing NBD clients.
The key features are:
* Synchronous and asynchronous APIs, both for ease of use and for
writing non-blocking, multithreaded clients.
* High performance.
* Minimal dependencies for the basic library.
* Well-documented, stable API.
* Bindings in several programming languages.
--------------------------------------------------------------------------------
Update Information:
New upstream stable version 1.6.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 24 2021 Richard W.M. Jones <rjones(a)redhat.com> - 1.6.4-1
- New upstream stable version 1.6.4.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-6b7c3dbc99' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
[SECURITY] Fedora 33 Update: ansible-2.9.20-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-4a17f0225d
2021-05-03 01:48:11.690552
--------------------------------------------------------------------------------
Name : ansible
Product : Fedora 33
Version : 2.9.20
Release : 1.fc33
URL : http://ansible.com
Summary : SSH-based configuration management, deployment, and task execution system
Description :
Ansible is a radically simple model-driven configuration management,
multi-node deployment, and remote task execution system. Ansible works
over SSH and does not require any software or daemons to be installed
on remote nodes. Extension modules can be written in any language and
are transferred to managed machines automatically.
--------------------------------------------------------------------------------
Update Information:
Upgrade to 2.9.20 bugfix and security update.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 24 2021 Kevin Fenzi <kevin(a)scrye.com> - 2.9.20-1
- Update to 2.9.20.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939440 - CVE-2021-3447 ansible: multiple modules expose secured values [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1939440
[ 2 ] Bug #1939441 - CVE-2021-3447 ansible: multiple modules expose secured values [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1939441
[ 3 ] Bug #1952790 - packaging differences between Fedora/EPEL and ConfigManagementSIG/Red Hat
https://bugzilla.redhat.com/show_bug.cgi?id=1952790
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-4a17f0225d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: rkhunter-1.4.6-12.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-8d357c8b69
2021-05-03 01:48:11.690534
--------------------------------------------------------------------------------
Name : rkhunter
Product : Fedora 33
Version : 1.4.6
Release : 12.fc33
URL : http://rkhunter.sourceforge.net/
Summary : A host-based tool to scan for rootkits, backdoors and local exploits
Description :
Rootkit Hunter (RKH) is an easy-to-use tool which checks
computers running UNIX (clones) for the presence of rootkits
and other unwanted tools.
--------------------------------------------------------------------------------
Update Information:
Fix issue with detecting ssh protocol.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 7 2021 Kevin Fenzi <kevin(a)scrye.com> - 1.4.6-12
- Fix bug around ssh protocol detection ( rhbz#1597635 )
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.6-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1597635 - rkhunter is misreporting the SSH Protocol choice
https://bugzilla.redhat.com/show_bug.cgi?id=1597635
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-8d357c8b69' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: gxkb-0.9.1-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-a6d05d6240
2021-05-03 01:48:11.690512
--------------------------------------------------------------------------------
Name : gxkb
Product : Fedora 33
Version : 0.9.1
Release : 1.fc33
URL : https://github.com/zen-tools/gxkb
Summary : X11 keyboard indicator and switcher
Description :
gxkb is a tiny indicator applet which allows to quickly switch between
different keyboard layouts in X. A flag corresponding to the country of the
active layout is shown in the indicator area. The applet is written in C and
uses GTK+ library and therefore does not depend on any GNOME components.
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 24 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.9.1-1
- build(update): 0.9.1
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-a6d05d6240' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: microdnf-3.8.0-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-447fb19490
2021-05-03 01:48:11.690330
--------------------------------------------------------------------------------
Name : microdnf
Product : Fedora 33
Version : 3.8.0
Release : 1.fc33
URL : https://github.com/rpm-software-management/microdnf
Summary : Lightweight implementation of DNF in C
Description :
Micro DNF is a lightweight C implementation of DNF, designed to be used
for doing simple packaging actions when you don't need full-blown DNF and
you want the tiniest useful environments possible.
That is, you don't want any interpreter stack and you want the most
minimal environment possible so you can build up to exactly what you need.
--------------------------------------------------------------------------------
Update Information:
librepo-1.14.0-1 - Fix: memory leaks - Support multiple checksums in xattr
(RhBz:1931904) - Use macros to access extended attributes - Remove problematic
language - CMake: Set minimum version for curl to 7.52.0 microdnf-3.8.0-1 -
distrosync: Fix style issues and plugin build with Meson - Add distro-sync
subcommand - Add "makecache" command createrepo_c-0.17.2-1 - Remove empty
arrays in tests, pass NULL instead (fixes a compiler war��� - Replace 'blacklist'
with 'excludelist' - Allow taking __repr__ (__str__) of closed xmlfile and
sqlite (RhBug:1913465) libdnf-0.62.0-1 - Fix: Fully set ssl in newHandle
function - [conf] Add options for working with certificates used with proxy -
lock: Switch return-if-fail to assert to quiet gcc -fanalyzer - Modify module
NSVCA parsing - context definition (RhBug:1926771) - libdnf.h: Remove overall
extern "C" - [context] Fix: dnf_package_is_installonly (RhBug:1928056) - Fix
problematic language - Add getApplicablePackages to advisory and isApplicable to
advisorymodule - Keep isAdvisoryApplicable to preserve API - Run
ModulePackageContainerTest tests in tmpdir, merge interdependent - [context]
Support config file option "proxy_auth_method", defaults "any" - Hardening: add
signature check with rpmcliVerifySignatures (RhBug:1932079) - do not allow 1 as
installonly_limit value (RhBug:1926261) - Add a config option to check TLS
certificate revocation status (using OCSP stapling), defaults to false
(RhBug:1814383) dnf-4.7.0-1 - Improve repo config path ordering to fix a comps
merging issue (RhBug:1928181) - Keep reason when package is removed
(RhBug:1921063) - Improve mechanism for application of security filters
(RhBug:1918475) - [doc] Add description for new API - [API] Add new method for
reset of security filters - [doc] Improve documentation for Hotfix repositories
- [doc] fix: "makecache" command downloads only enabled repositories - Use
libdnf.utils.checksum_{check,value} - [doc] Add info that maximum parallel
downloads is 20 - Increase loglevel in case of invalid config options - [doc]
installonly_limit documentation follows behavior - Prevent traceback (catch
ValueError) if pkg is from cmdline - Add documentation for config option
sslverifystatus (RhBug:1814383) - Check for specific key string when verifing
signatures (RhBug:1915990) - Use rpmkeys binary to verify package signature
(RhBug:1915990) - Bugs fixed (RhBug:1916783) - Preserve file mode during log
rotation (RhBug:1910084) dnf-plugins-core-4.0.21-1 - Add missing command line
option to documentation - doc: add packages to needs-restarting conf - Set
blacklist subcommand as deprecated - Bugs fixed (RhBug:1914827,1916782) - copr:
allow only 2 arguments with copr enable command - [needs-restarting] fix -r in
nspawn containers (RhBug:1913962,1914251) - Add --gpgcheck option to reposync
(RhBug:1856818) (RhBug:1856818) - Re-introduce yum-groups-manager functionality
(RhBug:1826016) - [repomanage] Don't use cached metadata (RhBug:1899852) -
[needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939) ----
createrepo_c-0.17.1 - Update to 0.17.1 - Fix segmentation fault when taking
str() of closed file - Setting updated/issued_date to None - (RhBug:1921715) -
Drop Python 2 support - Disable drpm also for RHEL >= 9 (RhBug:1914828) - Never
leave behind .repodata lock on exit (RhBug:1906831) - Revert back to old API of
cr_compress_file_with_stat and cr_compress
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 19 2021 Nicola Sella <nsella(a)redhat.com> - 3.8.0-1
- Update to 3.8.0
- distrosync: Fix style issues and plugin build with Meson
- Add distro-sync subcommand
- Add "makecache" command
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1891785 - createrepo_c fails to build with Python 3.10: Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1891785
[ 2 ] Bug #1899852 - repomanage is broken, reports not existing packages
https://bugzilla.redhat.com/show_bug.cgi?id=1899852
[ 3 ] Bug #1910084 - hardcoded logfile permissions
https://bugzilla.redhat.com/show_bug.cgi?id=1910084
[ 4 ] Bug #1913465 - createrepo_c segfault when attempting to print PrimaryXmlFile or PrimarySqlite object after closing
https://bugzilla.redhat.com/show_bug.cgi?id=1913465
[ 5 ] Bug #1914251 - "dnf needs-restarting -r" work incorrectly inside systemd-nspawn containers
https://bugzilla.redhat.com/show_bug.cgi?id=1914251
[ 6 ] Bug #1921063 - dnf autoremove wants to remove "kernel-modules-extra" if you have a rawhide kernel installed
https://bugzilla.redhat.com/show_bug.cgi?id=1921063
[ 7 ] Bug #1928056 - [dnf-nightly copr] PackageKit crashes in dnf_context_get_installonly_pkgs
https://bugzilla.redhat.com/show_bug.cgi?id=1928056
[ 8 ] Bug #1928181 - comps from the updates repo don't override comps from the fedora repo
https://bugzilla.redhat.com/show_bug.cgi?id=1928181
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-447fb19490' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: dnf-4.7.0-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-447fb19490
2021-05-03 01:48:11.690330
--------------------------------------------------------------------------------
Name : dnf
Product : Fedora 33
Version : 4.7.0
Release : 1.fc33
URL : https://github.com/rpm-software-management/dnf
Summary : Package manager
Description :
Utility that allows users to manage packages on their systems.
It supports RPMs, modules and comps groups & environments.
--------------------------------------------------------------------------------
Update Information:
librepo-1.14.0-1 - Fix: memory leaks - Support multiple checksums in xattr
(RhBz:1931904) - Use macros to access extended attributes - Remove problematic
language - CMake: Set minimum version for curl to 7.52.0 microdnf-3.8.0-1 -
distrosync: Fix style issues and plugin build with Meson - Add distro-sync
subcommand - Add "makecache" command createrepo_c-0.17.2-1 - Remove empty
arrays in tests, pass NULL instead (fixes a compiler war��� - Replace 'blacklist'
with 'excludelist' - Allow taking __repr__ (__str__) of closed xmlfile and
sqlite (RhBug:1913465) libdnf-0.62.0-1 - Fix: Fully set ssl in newHandle
function - [conf] Add options for working with certificates used with proxy -
lock: Switch return-if-fail to assert to quiet gcc -fanalyzer - Modify module
NSVCA parsing - context definition (RhBug:1926771) - libdnf.h: Remove overall
extern "C" - [context] Fix: dnf_package_is_installonly (RhBug:1928056) - Fix
problematic language - Add getApplicablePackages to advisory and isApplicable to
advisorymodule - Keep isAdvisoryApplicable to preserve API - Run
ModulePackageContainerTest tests in tmpdir, merge interdependent - [context]
Support config file option "proxy_auth_method", defaults "any" - Hardening: add
signature check with rpmcliVerifySignatures (RhBug:1932079) - do not allow 1 as
installonly_limit value (RhBug:1926261) - Add a config option to check TLS
certificate revocation status (using OCSP stapling), defaults to false
(RhBug:1814383) dnf-4.7.0-1 - Improve repo config path ordering to fix a comps
merging issue (RhBug:1928181) - Keep reason when package is removed
(RhBug:1921063) - Improve mechanism for application of security filters
(RhBug:1918475) - [doc] Add description for new API - [API] Add new method for
reset of security filters - [doc] Improve documentation for Hotfix repositories
- [doc] fix: "makecache" command downloads only enabled repositories - Use
libdnf.utils.checksum_{check,value} - [doc] Add info that maximum parallel
downloads is 20 - Increase loglevel in case of invalid config options - [doc]
installonly_limit documentation follows behavior - Prevent traceback (catch
ValueError) if pkg is from cmdline - Add documentation for config option
sslverifystatus (RhBug:1814383) - Check for specific key string when verifing
signatures (RhBug:1915990) - Use rpmkeys binary to verify package signature
(RhBug:1915990) - Bugs fixed (RhBug:1916783) - Preserve file mode during log
rotation (RhBug:1910084) dnf-plugins-core-4.0.21-1 - Add missing command line
option to documentation - doc: add packages to needs-restarting conf - Set
blacklist subcommand as deprecated - Bugs fixed (RhBug:1914827,1916782) - copr:
allow only 2 arguments with copr enable command - [needs-restarting] fix -r in
nspawn containers (RhBug:1913962,1914251) - Add --gpgcheck option to reposync
(RhBug:1856818) (RhBug:1856818) - Re-introduce yum-groups-manager functionality
(RhBug:1826016) - [repomanage] Don't use cached metadata (RhBug:1899852) -
[needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939) ----
createrepo_c-0.17.1 - Update to 0.17.1 - Fix segmentation fault when taking
str() of closed file - Setting updated/issued_date to None - (RhBug:1921715) -
Drop Python 2 support - Disable drpm also for RHEL >= 9 (RhBug:1914828) - Never
leave behind .repodata lock on exit (RhBug:1906831) - Revert back to old API of
cr_compress_file_with_stat and cr_compress
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 15 2021 Nicola Sella <nsella(a)redhat.com> - 4.7.0-1
- Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
- Keep reason when package is removed (RhBug:1921063)
- Improve mechanism for application of security filters (RhBug:1918475)
- [doc] Add description for new API
- [API] Add new method for reset of security filters
- [doc] Improve documentation for Hotfix repositories
- [doc] fix: "makecache" command downloads only enabled repositories
- Use libdnf.utils.checksum_{check,value}
- [doc] Add info that maximum parallel downloads is 20
- Increase loglevel in case of invalid config options
- [doc] installonly_limit documentation follows behavior
- Prevent traceback (catch ValueError) if pkg is from cmdline
- Add documentation for config option sslverifystatus (RhBug:1814383)
- Check for specific key string when verifing signatures (RhBug:1915990)
- Use rpmkeys binary to verify package signature (RhBug:1915990)
- Bugs fixed (RhBug:1916783)
- Preserve file mode during log rotation (RhBug:1910084)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1891785 - createrepo_c fails to build with Python 3.10: Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1891785
[ 2 ] Bug #1899852 - repomanage is broken, reports not existing packages
https://bugzilla.redhat.com/show_bug.cgi?id=1899852
[ 3 ] Bug #1910084 - hardcoded logfile permissions
https://bugzilla.redhat.com/show_bug.cgi?id=1910084
[ 4 ] Bug #1913465 - createrepo_c segfault when attempting to print PrimaryXmlFile or PrimarySqlite object after closing
https://bugzilla.redhat.com/show_bug.cgi?id=1913465
[ 5 ] Bug #1914251 - "dnf needs-restarting -r" work incorrectly inside systemd-nspawn containers
https://bugzilla.redhat.com/show_bug.cgi?id=1914251
[ 6 ] Bug #1921063 - dnf autoremove wants to remove "kernel-modules-extra" if you have a rawhide kernel installed
https://bugzilla.redhat.com/show_bug.cgi?id=1921063
[ 7 ] Bug #1928056 - [dnf-nightly copr] PackageKit crashes in dnf_context_get_installonly_pkgs
https://bugzilla.redhat.com/show_bug.cgi?id=1928056
[ 8 ] Bug #1928181 - comps from the updates repo don't override comps from the fedora repo
https://bugzilla.redhat.com/show_bug.cgi?id=1928181
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-447fb19490' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: libdnf-0.62.0-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-447fb19490
2021-05-03 01:48:11.690330
--------------------------------------------------------------------------------
Name : libdnf
Product : Fedora 33
Version : 0.62.0
Release : 1.fc33
URL : https://github.com/rpm-software-management/libdnf
Summary : Library providing simplified C and Python API to libsolv
Description :
A Library providing simplified C and Python API to libsolv.
--------------------------------------------------------------------------------
Update Information:
librepo-1.14.0-1 - Fix: memory leaks - Support multiple checksums in xattr
(RhBz:1931904) - Use macros to access extended attributes - Remove problematic
language - CMake: Set minimum version for curl to 7.52.0 microdnf-3.8.0-1 -
distrosync: Fix style issues and plugin build with Meson - Add distro-sync
subcommand - Add "makecache" command createrepo_c-0.17.2-1 - Remove empty
arrays in tests, pass NULL instead (fixes a compiler war��� - Replace 'blacklist'
with 'excludelist' - Allow taking __repr__ (__str__) of closed xmlfile and
sqlite (RhBug:1913465) libdnf-0.62.0-1 - Fix: Fully set ssl in newHandle
function - [conf] Add options for working with certificates used with proxy -
lock: Switch return-if-fail to assert to quiet gcc -fanalyzer - Modify module
NSVCA parsing - context definition (RhBug:1926771) - libdnf.h: Remove overall
extern "C" - [context] Fix: dnf_package_is_installonly (RhBug:1928056) - Fix
problematic language - Add getApplicablePackages to advisory and isApplicable to
advisorymodule - Keep isAdvisoryApplicable to preserve API - Run
ModulePackageContainerTest tests in tmpdir, merge interdependent - [context]
Support config file option "proxy_auth_method", defaults "any" - Hardening: add
signature check with rpmcliVerifySignatures (RhBug:1932079) - do not allow 1 as
installonly_limit value (RhBug:1926261) - Add a config option to check TLS
certificate revocation status (using OCSP stapling), defaults to false
(RhBug:1814383) dnf-4.7.0-1 - Improve repo config path ordering to fix a comps
merging issue (RhBug:1928181) - Keep reason when package is removed
(RhBug:1921063) - Improve mechanism for application of security filters
(RhBug:1918475) - [doc] Add description for new API - [API] Add new method for
reset of security filters - [doc] Improve documentation for Hotfix repositories
- [doc] fix: "makecache" command downloads only enabled repositories - Use
libdnf.utils.checksum_{check,value} - [doc] Add info that maximum parallel
downloads is 20 - Increase loglevel in case of invalid config options - [doc]
installonly_limit documentation follows behavior - Prevent traceback (catch
ValueError) if pkg is from cmdline - Add documentation for config option
sslverifystatus (RhBug:1814383) - Check for specific key string when verifing
signatures (RhBug:1915990) - Use rpmkeys binary to verify package signature
(RhBug:1915990) - Bugs fixed (RhBug:1916783) - Preserve file mode during log
rotation (RhBug:1910084) dnf-plugins-core-4.0.21-1 - Add missing command line
option to documentation - doc: add packages to needs-restarting conf - Set
blacklist subcommand as deprecated - Bugs fixed (RhBug:1914827,1916782) - copr:
allow only 2 arguments with copr enable command - [needs-restarting] fix -r in
nspawn containers (RhBug:1913962,1914251) - Add --gpgcheck option to reposync
(RhBug:1856818) (RhBug:1856818) - Re-introduce yum-groups-manager functionality
(RhBug:1826016) - [repomanage] Don't use cached metadata (RhBug:1899852) -
[needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939) ----
createrepo_c-0.17.1 - Update to 0.17.1 - Fix segmentation fault when taking
str() of closed file - Setting updated/issued_date to None - (RhBug:1921715) -
Drop Python 2 support - Disable drpm also for RHEL >= 9 (RhBug:1914828) - Never
leave behind .repodata lock on exit (RhBug:1906831) - Revert back to old API of
cr_compress_file_with_stat and cr_compress
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 15 2021 Nicola Sella <nsella(a)redhat.com> - 0.62.0-1
- Fix: Fully set ssl in newHandle function
- [conf] Add options for working with certificates used with proxy
- lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
- Modify module NSVCA parsing - context definition (RhBug:1926771)
- libdnf.h: Remove overall extern "C"
- [context] Fix: dnf_package_is_installonly (RhBug:1928056)
- Fix problematic language
- Add getApplicablePackages to advisory and isApplicable to advisorymodule
- Keep isAdvisoryApplicable to preserve API
- Run ModulePackageContainerTest tests in tmpdir, merge interdependent
- [context] Support config file option "proxy_auth_method", defaults "any"
- Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
- do not allow 1 as installonly_limit value (RhBug:1926261)
- Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1891785 - createrepo_c fails to build with Python 3.10: Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1891785
[ 2 ] Bug #1899852 - repomanage is broken, reports not existing packages
https://bugzilla.redhat.com/show_bug.cgi?id=1899852
[ 3 ] Bug #1910084 - hardcoded logfile permissions
https://bugzilla.redhat.com/show_bug.cgi?id=1910084
[ 4 ] Bug #1913465 - createrepo_c segfault when attempting to print PrimaryXmlFile or PrimarySqlite object after closing
https://bugzilla.redhat.com/show_bug.cgi?id=1913465
[ 5 ] Bug #1914251 - "dnf needs-restarting -r" work incorrectly inside systemd-nspawn containers
https://bugzilla.redhat.com/show_bug.cgi?id=1914251
[ 6 ] Bug #1921063 - dnf autoremove wants to remove "kernel-modules-extra" if you have a rawhide kernel installed
https://bugzilla.redhat.com/show_bug.cgi?id=1921063
[ 7 ] Bug #1928056 - [dnf-nightly copr] PackageKit crashes in dnf_context_get_installonly_pkgs
https://bugzilla.redhat.com/show_bug.cgi?id=1928056
[ 8 ] Bug #1928181 - comps from the updates repo don't override comps from the fedora repo
https://bugzilla.redhat.com/show_bug.cgi?id=1928181
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-447fb19490' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: librepo-1.14.0-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-447fb19490
2021-05-03 01:48:11.690330
--------------------------------------------------------------------------------
Name : librepo
Product : Fedora 33
Version : 1.14.0
Release : 1.fc33
URL : https://github.com/rpm-software-management/librepo
Summary : Repodata downloading library
Description :
A library providing C and Python (libcURL like) API to downloading repository
metadata.
--------------------------------------------------------------------------------
Update Information:
librepo-1.14.0-1 - Fix: memory leaks - Support multiple checksums in xattr
(RhBz:1931904) - Use macros to access extended attributes - Remove problematic
language - CMake: Set minimum version for curl to 7.52.0 microdnf-3.8.0-1 -
distrosync: Fix style issues and plugin build with Meson - Add distro-sync
subcommand - Add "makecache" command createrepo_c-0.17.2-1 - Remove empty
arrays in tests, pass NULL instead (fixes a compiler war��� - Replace 'blacklist'
with 'excludelist' - Allow taking __repr__ (__str__) of closed xmlfile and
sqlite (RhBug:1913465) libdnf-0.62.0-1 - Fix: Fully set ssl in newHandle
function - [conf] Add options for working with certificates used with proxy -
lock: Switch return-if-fail to assert to quiet gcc -fanalyzer - Modify module
NSVCA parsing - context definition (RhBug:1926771) - libdnf.h: Remove overall
extern "C" - [context] Fix: dnf_package_is_installonly (RhBug:1928056) - Fix
problematic language - Add getApplicablePackages to advisory and isApplicable to
advisorymodule - Keep isAdvisoryApplicable to preserve API - Run
ModulePackageContainerTest tests in tmpdir, merge interdependent - [context]
Support config file option "proxy_auth_method", defaults "any" - Hardening: add
signature check with rpmcliVerifySignatures (RhBug:1932079) - do not allow 1 as
installonly_limit value (RhBug:1926261) - Add a config option to check TLS
certificate revocation status (using OCSP stapling), defaults to false
(RhBug:1814383) dnf-4.7.0-1 - Improve repo config path ordering to fix a comps
merging issue (RhBug:1928181) - Keep reason when package is removed
(RhBug:1921063) - Improve mechanism for application of security filters
(RhBug:1918475) - [doc] Add description for new API - [API] Add new method for
reset of security filters - [doc] Improve documentation for Hotfix repositories
- [doc] fix: "makecache" command downloads only enabled repositories - Use
libdnf.utils.checksum_{check,value} - [doc] Add info that maximum parallel
downloads is 20 - Increase loglevel in case of invalid config options - [doc]
installonly_limit documentation follows behavior - Prevent traceback (catch
ValueError) if pkg is from cmdline - Add documentation for config option
sslverifystatus (RhBug:1814383) - Check for specific key string when verifing
signatures (RhBug:1915990) - Use rpmkeys binary to verify package signature
(RhBug:1915990) - Bugs fixed (RhBug:1916783) - Preserve file mode during log
rotation (RhBug:1910084) dnf-plugins-core-4.0.21-1 - Add missing command line
option to documentation - doc: add packages to needs-restarting conf - Set
blacklist subcommand as deprecated - Bugs fixed (RhBug:1914827,1916782) - copr:
allow only 2 arguments with copr enable command - [needs-restarting] fix -r in
nspawn containers (RhBug:1913962,1914251) - Add --gpgcheck option to reposync
(RhBug:1856818) (RhBug:1856818) - Re-introduce yum-groups-manager functionality
(RhBug:1826016) - [repomanage] Don't use cached metadata (RhBug:1899852) -
[needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939) ----
createrepo_c-0.17.1 - Update to 0.17.1 - Fix segmentation fault when taking
str() of closed file - Setting updated/issued_date to None - (RhBug:1921715) -
Drop Python 2 support - Disable drpm also for RHEL >= 9 (RhBug:1914828) - Never
leave behind .repodata lock on exit (RhBug:1906831) - Revert back to old API of
cr_compress_file_with_stat and cr_compress
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 15 2021 Nicola Sella <nsella(a)redhat.com> - 1.14.0-1
- Update to 1.14.0
- Fix: memory leaks
- Support multiple checksums in xattr (RhBz:1931904)
- Use macros to access extended attributes
- Remove problematic language
- CMake: Set minimum version for curl to 7.52.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1891785 - createrepo_c fails to build with Python 3.10: Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1891785
[ 2 ] Bug #1899852 - repomanage is broken, reports not existing packages
https://bugzilla.redhat.com/show_bug.cgi?id=1899852
[ 3 ] Bug #1910084 - hardcoded logfile permissions
https://bugzilla.redhat.com/show_bug.cgi?id=1910084
[ 4 ] Bug #1913465 - createrepo_c segfault when attempting to print PrimaryXmlFile or PrimarySqlite object after closing
https://bugzilla.redhat.com/show_bug.cgi?id=1913465
[ 5 ] Bug #1914251 - "dnf needs-restarting -r" work incorrectly inside systemd-nspawn containers
https://bugzilla.redhat.com/show_bug.cgi?id=1914251
[ 6 ] Bug #1921063 - dnf autoremove wants to remove "kernel-modules-extra" if you have a rawhide kernel installed
https://bugzilla.redhat.com/show_bug.cgi?id=1921063
[ 7 ] Bug #1928056 - [dnf-nightly copr] PackageKit crashes in dnf_context_get_installonly_pkgs
https://bugzilla.redhat.com/show_bug.cgi?id=1928056
[ 8 ] Bug #1928181 - comps from the updates repo don't override comps from the fedora repo
https://bugzilla.redhat.com/show_bug.cgi?id=1928181
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-447fb19490' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month
Fedora 33 Update: dnf-plugins-core-4.0.21-1.fc33
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-447fb19490
2021-05-03 01:48:11.690330
--------------------------------------------------------------------------------
Name : dnf-plugins-core
Product : Fedora 33
Version : 4.0.21
Release : 1.fc33
URL : https://github.com/rpm-software-management/dnf-plugins-core
Summary : Core Plugins for DNF
Description :
Core Plugins for DNF. This package enhances DNF with builddep, config-manager,
copr, debug, debuginfo-install, download, needs-restarting, groups-manager, repoclosure,
repograph, repomanage, reposync, changelog and repodiff commands. Additionally
provides generate_completion_cache passive plugin.
--------------------------------------------------------------------------------
Update Information:
librepo-1.14.0-1 - Fix: memory leaks - Support multiple checksums in xattr
(RhBz:1931904) - Use macros to access extended attributes - Remove problematic
language - CMake: Set minimum version for curl to 7.52.0 microdnf-3.8.0-1 -
distrosync: Fix style issues and plugin build with Meson - Add distro-sync
subcommand - Add "makecache" command createrepo_c-0.17.2-1 - Remove empty
arrays in tests, pass NULL instead (fixes a compiler war��� - Replace 'blacklist'
with 'excludelist' - Allow taking __repr__ (__str__) of closed xmlfile and
sqlite (RhBug:1913465) libdnf-0.62.0-1 - Fix: Fully set ssl in newHandle
function - [conf] Add options for working with certificates used with proxy -
lock: Switch return-if-fail to assert to quiet gcc -fanalyzer - Modify module
NSVCA parsing - context definition (RhBug:1926771) - libdnf.h: Remove overall
extern "C" - [context] Fix: dnf_package_is_installonly (RhBug:1928056) - Fix
problematic language - Add getApplicablePackages to advisory and isApplicable to
advisorymodule - Keep isAdvisoryApplicable to preserve API - Run
ModulePackageContainerTest tests in tmpdir, merge interdependent - [context]
Support config file option "proxy_auth_method", defaults "any" - Hardening: add
signature check with rpmcliVerifySignatures (RhBug:1932079) - do not allow 1 as
installonly_limit value (RhBug:1926261) - Add a config option to check TLS
certificate revocation status (using OCSP stapling), defaults to false
(RhBug:1814383) dnf-4.7.0-1 - Improve repo config path ordering to fix a comps
merging issue (RhBug:1928181) - Keep reason when package is removed
(RhBug:1921063) - Improve mechanism for application of security filters
(RhBug:1918475) - [doc] Add description for new API - [API] Add new method for
reset of security filters - [doc] Improve documentation for Hotfix repositories
- [doc] fix: "makecache" command downloads only enabled repositories - Use
libdnf.utils.checksum_{check,value} - [doc] Add info that maximum parallel
downloads is 20 - Increase loglevel in case of invalid config options - [doc]
installonly_limit documentation follows behavior - Prevent traceback (catch
ValueError) if pkg is from cmdline - Add documentation for config option
sslverifystatus (RhBug:1814383) - Check for specific key string when verifing
signatures (RhBug:1915990) - Use rpmkeys binary to verify package signature
(RhBug:1915990) - Bugs fixed (RhBug:1916783) - Preserve file mode during log
rotation (RhBug:1910084) dnf-plugins-core-4.0.21-1 - Add missing command line
option to documentation - doc: add packages to needs-restarting conf - Set
blacklist subcommand as deprecated - Bugs fixed (RhBug:1914827,1916782) - copr:
allow only 2 arguments with copr enable command - [needs-restarting] fix -r in
nspawn containers (RhBug:1913962,1914251) - Add --gpgcheck option to reposync
(RhBug:1856818) (RhBug:1856818) - Re-introduce yum-groups-manager functionality
(RhBug:1826016) - [repomanage] Don't use cached metadata (RhBug:1899852) -
[needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939) ----
createrepo_c-0.17.1 - Update to 0.17.1 - Fix segmentation fault when taking
str() of closed file - Setting updated/issued_date to None - (RhBug:1921715) -
Drop Python 2 support - Disable drpm also for RHEL >= 9 (RhBug:1914828) - Never
leave behind .repodata lock on exit (RhBug:1906831) - Revert back to old API of
cr_compress_file_with_stat and cr_compress
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 16 2021 Nicola Sella <nsella(a)redhat.com> - 4.0.21-1
- Add missing command line option to documentation
- doc: add packages to needs-restarting conf
- Set blacklist subcommand as deprecated
- Bugs fixed (RhBug:1914827,1916782)
- copr: allow only 2 arguments with copr enable command
- [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
- Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
- Re-introduce yum-groups-manager functionality (RhBug:1826016)
- [repomanage] Don't use cached metadata (RhBug:1899852)
- [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1891785 - createrepo_c fails to build with Python 3.10: Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1891785
[ 2 ] Bug #1899852 - repomanage is broken, reports not existing packages
https://bugzilla.redhat.com/show_bug.cgi?id=1899852
[ 3 ] Bug #1910084 - hardcoded logfile permissions
https://bugzilla.redhat.com/show_bug.cgi?id=1910084
[ 4 ] Bug #1913465 - createrepo_c segfault when attempting to print PrimaryXmlFile or PrimarySqlite object after closing
https://bugzilla.redhat.com/show_bug.cgi?id=1913465
[ 5 ] Bug #1914251 - "dnf needs-restarting -r" work incorrectly inside systemd-nspawn containers
https://bugzilla.redhat.com/show_bug.cgi?id=1914251
[ 6 ] Bug #1921063 - dnf autoremove wants to remove "kernel-modules-extra" if you have a rawhide kernel installed
https://bugzilla.redhat.com/show_bug.cgi?id=1921063
[ 7 ] Bug #1928056 - [dnf-nightly copr] PackageKit crashes in dnf_context_get_installonly_pkgs
https://bugzilla.redhat.com/show_bug.cgi?id=1928056
[ 8 ] Bug #1928181 - comps from the updates repo don't override comps from the fedora repo
https://bugzilla.redhat.com/show_bug.cgi?id=1928181
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-447fb19490' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 1 month