May 2021 - epel-devel - Fedora Mailing-Lists

by updates＠fedoraproject.org

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-86c73cc3af prosody-0.11.9-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58bc048b1a upx-3.96-9.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a20d7c1ddd rxvt-unicode-9.26-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bdd3e1ab81 opendmarc-1.4.1-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6c72c1c9a5 gromacs-2019.6-2.el8 kokkos-3.0.00-2.el8 slurm-20.11.7-2.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0e0c1a76c6 slurm-20.11.7-3.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c734316809 chromium-90.0.4430.212-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bb6ec0e942 singularity-3.7.4-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing iotop-c-1.17-1.el8 perl-DateTime-Format-Flexible-0.33-1.el8 smem-1.5-6.el8 supybot-koji-0.3-1.el8 supybot-meetbot-0.2-1.el8 supybot-notify-0.3-1.el8 Details about builds: ================================================================================ iotop-c-1.17-1.el8 (FEDORA-EPEL-2021-d0c38690f2) Simple top-like I/O monitor (implemented in C) -------------------------------------------------------------------------------- Update Information: Update to latest ver 1.17 -------------------------------------------------------------------------------- ChangeLog: * Sat Feb 6 2021 Boian Bonev <bbonev(a)ipacct.com> - 1.17-1 - Update to latest ver 1.17 * Thu Jan 28 2021 Boian Bonev <bbonev(a)ipacct.com> - 1.16-1 - Update to latest ver 1.16 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ perl-DateTime-Format-Flexible-0.33-1.el8 (FEDORA-EPEL-2021-3b4b94d5c0) Flexibly parse strings and turn them into DateTime objects -------------------------------------------------------------------------------- Update Information: This release fixes a memory leak. -------------------------------------------------------------------------------- ChangeLog: * Thu May 27 2021 Petr Pisar <ppisar(a)redhat.com> - 0.33-1 - 0.33 bump - Package the tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965188 - perl-DateTime-Format-Flexible-0.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965188 -------------------------------------------------------------------------------- ================================================================================ smem-1.5-6.el8 (FEDORA-EPEL-2021-f6c90301d8) Report application memory usage in a meaningful way -------------------------------------------------------------------------------- Update Information: Initial package for epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1807276 - smem package missing from EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1807276 -------------------------------------------------------------------------------- ================================================================================ supybot-koji-0.3-1.el8 (FEDORA-EPEL-2021-6d3adfc3c4) Plugin for Supybot to interact with Koji instances -------------------------------------------------------------------------------- Update Information: Initial EPEL8 Release of supybot-koji -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ supybot-meetbot-0.2-1.el8 (FEDORA-EPEL-2021-3963979922) Plugin for Supybot for handling IRC meetings -------------------------------------------------------------------------------- Update Information: Initial Release of supybot-meetbot for EPEL8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ supybot-notify-0.3-1.el8 (FEDORA-EPEL-2021-c98b5faf88) Notification plugin for Supybot -------------------------------------------------------------------------------- Update Information: Initial version of supybot-notify for EPEL8 -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

3 years

1
0
0 / 0

Fedora EPEL 7 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 7 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c44d955770 prosody-0.11.9-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-113abf45ca composer-1.10.22-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ab96a9920 wordpress-5.1.10-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4b7c1b59f8 upx-3.96-9.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6cc996cdc4 opendmarc-1.4.1-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-969456590e rxvt-unicode-9.21-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0fec8057df python3-lxml-4.2.5-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-17f170d38c caribou0-0.4.21-26.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7e9a7ecfb4 slurm-20.11.7-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0402b44d82 chromium-90.0.4430.212-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-15abda18e1 singularity-3.7.4-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing audacious-plugins-4.0.5-4.el7 fluidsynth-2.1.8-4.el7 iotop-c-1.17-1.el7 netdata-1.31.0-1.el7 nginx-1.20.1-1.el7 openjpeg2-2.3.1-11.el7 perl-DateTime-Format-Flexible-0.33-1.el7 Details about builds: ================================================================================ audacious-plugins-4.0.5-4.el7 (FEDORA-EPEL-2021-9eaea6f65c) Plugins for the Audacious audio player -------------------------------------------------------------------------------- Update Information: Approved soname bump of fluidsynth-libs in epel7: https://meetbot.fedoraproject.org/fedora- meeting/2021-05-26/epel.2021-05-26-20.01.html -------------------------------------------------------------------------------- ChangeLog: * Fri May 7 2021 Carl George <carl(a)george.computer> - 4.0.5-4 - Rebuilt for fluidsynth soname bump rhbz#1958007 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1949538 - CVE-2021-28421 fluidsynth: use after free in sfloader/fluid_sffile.c could result in arbitrary code execution or a denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1949538 [ 2 ] Bug #1955613 - CVE-2021-21417 fluidsynth: A use after free via invalid SoundFont file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1955613 [ 3 ] Bug #1958007 - fluidsynth-libs: incompatible upgrade from libfluidsynth.so.1 to libfluidsynth.so.2 (EPEL7) https://bugzilla.redhat.com/show_bug.cgi?id=1958007 -------------------------------------------------------------------------------- ================================================================================ fluidsynth-2.1.8-4.el7 (FEDORA-EPEL-2021-9eaea6f65c) Real-time software synthesizer -------------------------------------------------------------------------------- Update Information: Approved soname bump of fluidsynth-libs in epel7: https://meetbot.fedoraproject.org/fedora- meeting/2021-05-26/epel.2021-05-26-20.01.html -------------------------------------------------------------------------------- ChangeLog: * Tue May 4 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-4 - Makes EPEL 7 build working * Fri Apr 16 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-3 - Cleanup cmake * Fri Apr 16 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-2 - Resolves: rhbz #1921265 * Sat Apr 10 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-1 - Update to 2.1.8 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Aug 3 2020 Erich Eickmeyer <erich(a)ericheickmeyer.com> - 2.1.1-4 - Rebuild with fixes for Fedora 33 - Resolves: rhbz #1863571 * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Feb 17 2020 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 2.1.1-1 - Update to 2.1.1 * Sun Feb 16 2020 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 2.1.0-1 - Update to 2.1.0 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.11-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.11-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.1.11-5 - Rebuild for readline 8.0 * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.11-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Tue Sep 18 2018 Owen Taylor <otaylor(a)redhat.com> - 1.1.11-3 - Disable hack for Flatpak builds - JACK isn't useful inside a sandbox, since there won't be enough privileges. * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sun May 6 2018 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.11-1 - Update to 1.1.11 * Sun Feb 25 2018 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.10-1 - Update to 1.1.10 - Drop upstreamed patches - Drop ldconfig calls in post and postun * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Sat Jan 6 2018 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.9-1 - Update to 1.1.9 - Fix startup issue when an invalid soundfont file name is given as a command line argument RHBZ#1399896 * Mon Aug 14 2017 Pete Walter <pwalter(a)fedoraproject.org> - 1.1.6-12 - Disable lash support * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Jan 12 2017 Igor Gnatenko <ignatenko(a)redhat.com> - 1.1.6-8 - Rebuild for readline 7.x -------------------------------------------------------------------------------- References: [ 1 ] Bug #1949538 - CVE-2021-28421 fluidsynth: use after free in sfloader/fluid_sffile.c could result in arbitrary code execution or a denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1949538 [ 2 ] Bug #1955613 - CVE-2021-21417 fluidsynth: A use after free via invalid SoundFont file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1955613 [ 3 ] Bug #1958007 - fluidsynth-libs: incompatible upgrade from libfluidsynth.so.1 to libfluidsynth.so.2 (EPEL7) https://bugzilla.redhat.com/show_bug.cgi?id=1958007 -------------------------------------------------------------------------------- ================================================================================ iotop-c-1.17-1.el7 (FEDORA-EPEL-2021-4e7b20ca48) Simple top-like I/O monitor (implemented in C) -------------------------------------------------------------------------------- Update Information: Update to latest ver 1.17 -------------------------------------------------------------------------------- ChangeLog: * Sat Feb 6 2021 Boian Bonev <bbonev(a)ipacct.com> - 1.17-1 - Update to latest ver 1.17 * Thu Jan 28 2021 Boian Bonev <bbonev(a)ipacct.com> - 1.16-1 - Update to latest ver 1.16 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ netdata-1.31.0-1.el7 (FEDORA-EPEL-2021-682a674ca9) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update from upstream -------------------------------------------------------------------------------- ChangeLog: * Wed May 19 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.31.0-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1962419 - netdata-1.31.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1962419 -------------------------------------------------------------------------------- ================================================================================ nginx-1.20.1-1.el7 (FEDORA-EPEL-2021-c64b965c33) A high performance web server and reverse proxy server -------------------------------------------------------------------------------- Update Information: # nginx 1.20.1 for EPEL 7 ## Changes ### Log file ownership (potential user impact) **Note** that the ownership of log files has changed to `root:root` and the mode changed to `700` (from `770`) to address CVE-2016-1247. This should not affect general operation, as this is the default for log directories and also what httpd uses but if you use external tools to process the log files you may want to check continued operation after this update. ### OpenSSL 1.1 nginx in EPEL 7 is now built against OpenSSL 1.1 to allow the use of TLSv1.3. ### Default Config changes Dropped `default_server` and `location /` directives so that it can be overridden in `conf.d` without needing to touch the default config. Note that the first `server` (as defined in the default config) and `root` will continue to serve the default `index.html` as long as no other `server` is defined. ### Logrotate nginx now handles creation of new log files to ensure correct permissions. ### Installation nginx no longer requires `nginx-all-modules` to allow for a leaner install. ### Service start The systemd unit will now wait for the `network-online.target`. Previously, start up could fail if DNS names were used for some config options (such as `proxy_pass`) and these names were not resolvable at service start time. ### Service reload The systemd unit now uses `nginx -s` to only reload the service if the configuration is valid. In previous versions an invalid configuration could take down nginx upon reload. Please consult http://nginx.org/en/CHANGES-1.20 for all changes to nginx since the current EPEL 7 release of 1.16.1. -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 1:1.20.1-1 - update to 1.20.1 (fixes CVE-2021-23017) * Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:1.20.0-4 - Perl 5.34 rebuild * Fri Apr 30 2021 Lubos Uhliarik <luhliari(a)redhat.com> - 1:1.20.0-3 - Related: #1636235 - centralizing default index.html on nginx * Wed Apr 21 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 1:1.20.0-2 - sync rawhide and EPEL7 spec files again - systemd service reload now checks config file (rhbz#1565377) - drop nginx requirement on nginx-all-modules (rhbz#1708799) - let nginx handle log creation on logrotate (rhbz#1683388) - have log directory owned by root (rhbz#1390183, CVE-2016-1247) - remove obsolete --with-ipv6 (src PR#8) - correction: pcre2 is actually not supported by nginx, reintroduce pcre * Wed Apr 21 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 1:1.20.0-1 - update to 1.20.0 - sync with mainline spec file - order configure options alphabetically for easier comparinggit - add --with-compat option (rhbz#1834452) - add patch to fix PIDFile race condition (rhbz#1869026) - use pcre2 instead of pcre (rhbz#1938984) - add Wants=network-online.target to systemd unit (rhbz#1943779) * Mon Feb 22 2021 Lubos Uhliarik <luhliari(a)redhat.com> - 1:1.18.0-5 - Resolves: #1931402 - drop gperftools module * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:1.18.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1964821 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1964821 -------------------------------------------------------------------------------- ================================================================================ openjpeg2-2.3.1-11.el7 (FEDORA-EPEL-2021-1f259a45ef) C-Library for JPEG 2000 -------------------------------------------------------------------------------- Update Information: Backport multiple security fixes from Fedora 33 branch. -------------------------------------------------------------------------------- ChangeLog: * Thu May 27 2021 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-11 - Apply proposed patches for CVE-2021-29338 and a heap buffer overflow (#1957616) * Thu Dec 17 2020 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-10 - Backport patches for CVE-2020-27841, CVE-2020-27842, CVE-2020-27843, CVE-2020-27845 * Thu Dec 10 2020 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-9 - Backport patches for CVE-2020-27824 and CVE-2020-27823 * Sat Nov 28 2020 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-8 - Backport patch for CVE-2020-27814 * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Feb 13 2020 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-6 - Backport patch for CVE 2020-8112 * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jan 17 2020 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-4 - Backport patch for CVE 2020-6851 * Wed Oct 2 2019 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-3 - Fix unbundling 3rd party libraries (#1757822) * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1790515 - CVE-2020-6851 openjpeg2: openjpeg: a heap-based buffer overflow in opj_t1_clbl_decode_processor in libopenjp2.so [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1790515 [ 2 ] Bug #1800537 - CVE-2020-8112 openjpeg2: openjpeg: heap based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1800537 [ 3 ] Bug #1852870 - CVE-2020-15389 openjpeg2: openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1852870 [ 4 ] Bug #1901999 - CVE-2020-27814 openjpeg2: openjpeg: Heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1901999 [ 5 ] Bug #1905726 - CVE-2020-27824 openjpeg2: openjpeg: global-buffer-overflow read in lib-openjp2 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1905726 [ 6 ] Bug #1906219 - CVE-2020-27823 openjpeg2: openjpeg: Heap-buffer-overflow write in lib-openjp2 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1906219 [ 7 ] Bug #1907672 - CVE-2020-27841 openjpeg2: openjpeg: heap-based buffer overflows in lib/openjp2/pi.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1907672 [ 8 ] Bug #1907679 - CVE-2020-27842 openjpeg2: openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1907679 [ 9 ] Bug #1907685 - CVE-2020-27843 openjpeg2: openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1907685 [ 10 ] Bug #1907695 - CVE-2020-27844 openjpeg2: openjpeg: heap-based buffer overflow in opj_t2_encode_packet function in openjp2/t2.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1907695 [ 11 ] Bug #1907700 - CVE-2020-27845 openjpeg2: openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1907700 [ 12 ] Bug #1950102 - CVE-2021-29338 openjpeg2: out-of-bounds write due to an integer overflow in opj_compress.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1950102 [ 13 ] Bug #1957619 - openjpeg2: openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1957619 -------------------------------------------------------------------------------- ================================================================================ perl-DateTime-Format-Flexible-0.33-1.el7 (FEDORA-EPEL-2021-0b3e9518f1) Flexibly parse strings and turn them into DateTime objects -------------------------------------------------------------------------------- Update Information: This release fixes a memory leak. -------------------------------------------------------------------------------- ChangeLog: * Thu May 27 2021 Petr Pisar <ppisar(a)redhat.com> - 0.33-1 - 0.33 bump - Package the tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965188 - perl-DateTime-Format-Flexible-0.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965188 --------------------------------------------------------------------------------

3 years

1
0
0 / 0

EPEL build target in COPR

by Leon Fauster

Dear all, the EPEL build target in COPR build packages based on CentOS Linux 8. What happens at EOL of CentOS Linux 8? Any clues? BTW, I assume that EPEL stuff are build on RHEL. RHEL8.4 is out now and new EPEL builds would be done on EL8.4 while COPR is bounded to CL8.3 ... mmh? -- Leon

3 years

3
3
0 / 0

[Heads-up] nginx 1.20.1 to replace 1.16.1 in EPEL 7, changes to log file permissions

by Felix Kaechele

Note: This affects EPEL 7 only. Nginx is not delivered through EPEL for EL8. Greetings, This is a friendly heads-up that nginx will see a major version upgrade in EPEL 7 soon. Due to existing CVEs (most recently, CVE-2021-23017) affecting the unmaintained 1.16 version stream I am replacing nginx 1.16.1 currently in EPEL 7 with version 1.20.1. To fix another CVE (CVE-2016-1247) the permissions on the log folder /var/log/nginx have changed to root:root and mode 700. While my testing showed that this will not break nginx logging, it may affect applications other than nginx that access nginx log files. So please plan accordingly if this use case applies to you. No breaking config changes should have occurred between these versions, but I am obviously unable to test every use case out there. So please use the next 14 days the update will sit in epel-testing to do some testing in your environment. Furthermore this update is built against OpenSSL 1.1, so TLSv1.3 is now available in nginx on EL7. I have provided a relatively comprehensive change log in the Bodhi update: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c64b965c33 I appreciate your testing efforts and any feedback you can provide. Thanks and regards, Felix

3 years

1
0
0 / 0

IRC Announcement

by Nick Bebout

Since its beginnings, the Fedora Project has used the freenode IRC network for our project communications. Due to a variety of recent changes to that network, the Fedora Project is moving our IRC communications to Libera.Chat. If you are a current IRC user, please go and register your nick(s) on Libera.Chat ( https://libera.chat/guides/registration#registering ) and rejoin the #fedora related channels you wish to. You can take this opportunity to choose a new secure password and make sure you are connecting via SSL. There is good documentation about choosing an IRC client at https://libera.chat/guides/clients If you are a Matrix user, we ask for your patience as we get bridges setup on the new network. If you were joined to rooms via the generic freenode bridge, you will need to leave them and rejoin the fedora rooms in matrix (which will be plumbed with the Libera channels) As of 2021-05-28 our official IRC presence is on irc.libera.chat. Many Fedora channels have moved over and are ready on Libera.Chat. However, less-used channels have not be automatically setup. If you need a specific #fedora-* IRC channel setup, please file a ticket at http://pagure.io/irc requesting the channel. New channels should have the same name as they did on freenode. For example: #fedora, #fedora-admin, #fedora-devel, and #fedora-join. If you would like a fedora IRC ‘cloak’ you can request it at: https://fedoraproject.org/wiki/LiberaCloaks (an IRC cloak obfuscates your client host address and shows ‘fedora’ instead). Please note that cloaks are not foolproof, there are ways for people to still get your IP, but they do make it more difficult for people to obtain your IP. Also, look for upcoming exciting announcements around Fedora’s Matrix presence. nb

3 years

1
0
0 / 0

Fedora EPEL 7 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 7 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c44d955770 prosody-0.11.9-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-113abf45ca composer-1.10.22-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ab96a9920 wordpress-5.1.10-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4b7c1b59f8 upx-3.96-9.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6cc996cdc4 opendmarc-1.4.1-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-969456590e rxvt-unicode-9.21-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0fec8057df python3-lxml-4.2.5-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-17f170d38c caribou0-0.4.21-26.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7e9a7ecfb4 slurm-20.11.7-3.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0402b44d82 chromium-90.0.4430.212-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing oval-graph-1.2.7-1.el7 perl-Net-NBName-0.26-41.el7 singularity-3.7.4-1.el7 Details about builds: ================================================================================ oval-graph-1.2.7-1.el7 (FEDORA-EPEL-2021-5786ea89b1) Tool for visualization of SCAP rule evaluation results -------------------------------------------------------------------------------- Update Information: 1.2.7 (Jan Rodak) -------------------------------------------------------------------------------- ChangeLog: * Wed May 26 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> - 1.2.7-1 - 1.2.7 (Jan Rodak) - Adds tag template to packit config (Jan Rodak) -------------------------------------------------------------------------------- ================================================================================ perl-Net-NBName-0.26-41.el7 (FEDORA-EPEL-2021-2c5040831f) NetBIOS Name Service Requests -------------------------------------------------------------------------------- Update Information: This package contains the Perl module Net::NBName, which is a class that allows you to perform simple NetBIOS Name Service Requests in your Perl code. It performs these NetBIOS operations over TCP/IP using Perl's built-in socket support. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1950382 - please build perl-Net-NBName for epel https://bugzilla.redhat.com/show_bug.cgi?id=1950382 [ 2 ] Bug #1951495 - Review Request: perl-Net-NBName - NetBIOS Name Service Requests https://bugzilla.redhat.com/show_bug.cgi?id=1951495 -------------------------------------------------------------------------------- ================================================================================ singularity-3.7.4-1.el7 (FEDORA-EPEL-2021-15abda18e1) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to upstream security release 3.7.4 -------------------------------------------------------------------------------- ChangeLog: * Wed May 26 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.7.4-1 - Upgrade to upstream security release 3.7.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965066 - singularity-3.7.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965066 --------------------------------------------------------------------------------

3 years

1
0
0 / 0

Fedora EPEL 8 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f3c561cd8 radare2-5.2.1-2.el8 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-86c73cc3af prosody-0.11.9-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58bc048b1a upx-3.96-9.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a20d7c1ddd rxvt-unicode-9.26-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bdd3e1ab81 opendmarc-1.4.1-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6c72c1c9a5 gromacs-2019.6-2.el8 kokkos-3.0.00-2.el8 slurm-20.11.7-2.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0e0c1a76c6 slurm-20.11.7-3.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c734316809 chromium-90.0.4430.212-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing appx-util-0.4-1.el8 libccd-2.1-4.el8 octomap-1.9.7-1.el8 oval-graph-1.2.7-1.el8 singularity-3.7.4-1.el8 Details about builds: ================================================================================ appx-util-0.4-1.el8 (FEDORA-EPEL-2021-bfcf3b6160) Utility to create Microsoft .appx packages -------------------------------------------------------------------------------- Update Information: More licensing documentation -------------------------------------------------------------------------------- ChangeLog: * Wed May 26 2021 Neal Gompa <ngompa13(a)gmail.com> - 0.4-1 - Update to 0.4 -------------------------------------------------------------------------------- ================================================================================ libccd-2.1-4.el8 (FEDORA-EPEL-2021-91db122dc1) Library for collision detection between convex shapes -------------------------------------------------------------------------------- Update Information: Introducing libccd package to epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1964544 - Please build libccd for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1964544 -------------------------------------------------------------------------------- ================================================================================ octomap-1.9.7-1.el8 (FEDORA-EPEL-2021-e7fa283e9d) Efficient Probabilistic 3D Mapping Framework Based on Octrees -------------------------------------------------------------------------------- Update Information: Introducing octomap package to epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1964585 - Please build octomap for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1964585 -------------------------------------------------------------------------------- ================================================================================ oval-graph-1.2.7-1.el8 (FEDORA-EPEL-2021-4574bbe9ae) Tool for visualization of SCAP rule evaluation results -------------------------------------------------------------------------------- Update Information: 1.2.7 (Jan Rodak) -------------------------------------------------------------------------------- ChangeLog: * Wed May 26 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> - 1.2.7-1 - 1.2.7 (Jan Rodak) - Adds tag template to packit config (Jan Rodak) -------------------------------------------------------------------------------- ================================================================================ singularity-3.7.4-1.el8 (FEDORA-EPEL-2021-bb6ec0e942) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to upstream security release 3.7.4 -------------------------------------------------------------------------------- ChangeLog: * Wed May 26 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.7.4-1 - Upgrade to upstream security release 3.7.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965066 - singularity-3.7.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965066 --------------------------------------------------------------------------------

3 years

1
0
0 / 0

KDE roadmap for EPEL8

by Troy Dawson

- The last KDE Plasma Desktop update in EPEL8 was a year ago, when RHEL 8.2 was released and they bumped qt5 to qt5-5.12. - If you look at CentOS Stream 8, you will notice that it now has qt5-5.15. I have verified that qt5-5.15 is supposed to come out with RHEL 8.5. That is six months from now. - EPEL8-next is also almost out. It will be built off CentOS Stream 8. With those three things in mind, here is my proposed roadmap for KDE Plasma Desktop. RHEL 8.4 (EPEL8) - No planned updates CentOS Stream 8 (EPEL8-next) - Update to the current Fedora 34 KDE Plasma Desktop packages. RHEL 8.5 (EPEL8) - Update to the packages that are in EPEL8-next. RHEL 8.6 (EPEL8) - No planned updates Comments welcome. Troy

3 years

1
0
0 / 0

anyone knows why perl in epel8 give me a lot of "security" errors ?

by Sérgio Basto

Hi, fedpkg clone debhelper cd debhelper fedpkg srpm && mock -r epel-8-x86_64 --no-clean --rebuild debhelper- 13.3.4-1.fc35.src.rpm I can build the package in _all_ others branches but in epel8 ends with "Initialization of state variables in list context currently forbidden at /builddir/build/BUILD/debhelper- 13.3.4/lib/Debian/Debhelper/Dh_Lib.pm line 2021, near");" " If I try build version 13 (.0), I can. But 13.1 I can't because it have some "modern" Perl syntax and builds also ends with others strange messages like https://stackoverflow.com/questions/13517270/error-bareword-params-not-al... Any clue ? Thank you -- Sérgio M. B.

3 years

2
3
0 / 0

Fedora EPEL 7 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 7 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-352a65d3bc djvulibre-3.5.25.3-23.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c44d955770 prosody-0.11.9-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-113abf45ca composer-1.10.22-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ab96a9920 wordpress-5.1.10-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4b7c1b59f8 upx-3.96-9.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6cc996cdc4 opendmarc-1.4.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-969456590e rxvt-unicode-9.21-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0fec8057df python3-lxml-4.2.5-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-17f170d38c caribou0-0.4.21-26.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing centpkg-0.6.5-1.el7 chromium-90.0.4430.212-1.el7 exfatprogs-1.1.2-1.el7 libretls-3.3.3p1-1.el7 openhantek-3.2.3-1.el7 php-composer-semver3-3.2.5-1.el7 python-enlighten-1.10.1-1.el7 python-wcwidth-0.2.5-1.el7 slurm-20.11.7-3.el7 Details about builds: ================================================================================ centpkg-0.6.5-1.el7 (FEDORA-EPEL-2021-9b0bccf6e7) CentOS utility for working with dist-git -------------------------------------------------------------------------------- Update Information: Latest upstream 0.6.5 -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Carl George <carl(a)george.computer> - 0.6.5-1 - Latest upstream -------------------------------------------------------------------------------- ================================================================================ chromium-90.0.4430.212-1.el7 (FEDORA-EPEL-2021-0402b44d82) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 90.0.4430.212. Fixes: CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021-30515 CVE-2021-30516 CVE-2021-30517 CVE-2021-30518 CVE-2021-30519 CVE-2021-30520 -------------------------------------------------------------------------------- ChangeLog: * Tue May 18 2021 Tom Callaway <spot(a)fedoraproject.org> - 90.0.4430.212-1 - update to 90.0.4430.212 -------------------------------------------------------------------------------- ================================================================================ exfatprogs-1.1.2-1.el7 (FEDORA-EPEL-2021-aa58c16483) Userspace utilities for exFAT filesystems -------------------------------------------------------------------------------- Update Information: Update to bugfix release 1.1.2. -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Simone Caronni <negativo17(a)gmail.com> - 1.1.2-1 - Update to 1.1.2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1962822 - exfatprogs-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1962822 -------------------------------------------------------------------------------- ================================================================================ libretls-3.3.3p1-1.el7 (FEDORA-EPEL-2021-945622f956) Port of libtls from LibreSSL to OpenSSL -------------------------------------------------------------------------------- Update Information: - Upgrade to 3.3.3p1 (#1964579) -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Robert Scheck <robert(a)fedoraproject.org> 3.3.3p1-1 - Upgrade to 3.3.3p1 (#1964579) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1964579 - libretls-3.3.3p1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1964579 -------------------------------------------------------------------------------- ================================================================================ openhantek-3.2.3-1.el7 (FEDORA-EPEL-2021-c20149394e) Hantek and compatible USB digital signal oscilloscope -------------------------------------------------------------------------------- Update Information: Update to 3.2.3. -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Vasiliy Glazov <vascom2(a)gmail.com> - 3.2.3-1 - Update to 3.2.3 -------------------------------------------------------------------------------- ================================================================================ php-composer-semver3-3.2.5-1.el7 (FEDORA-EPEL-2021-af7f1990a3) Semver library version 3 -------------------------------------------------------------------------------- Update Information: **Version 3.2.5** 2021-05-24 * Fixed: issue comparing disjunctive MultiConstraints to conjunctive ones (#127) * Fixed: added complete type information using phpstan annotations -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Remi Collet <remi(a)remirepo.net> - 3.2.5-1 - update to 3.2.5 -------------------------------------------------------------------------------- ================================================================================ python-enlighten-1.10.1-1.el7 (FEDORA-EPEL-2021-ec743e1094) Enlighten Progress Bar -------------------------------------------------------------------------------- Update Information: Update to 1.10.1 -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.10.1-1 - Update to 1.10.1 - Drop EL6 - Fix dependencies -------------------------------------------------------------------------------- ================================================================================ python-wcwidth-0.2.5-1.el7 (FEDORA-EPEL-2021-5de056f174) Measures number of Terminal column cells of wide-character codes -------------------------------------------------------------------------------- Update Information: Update to 0.2.5 -------------------------------------------------------------------------------- ChangeLog: * Tue May 25 2021 Avram Lubkin <aviso(a)rockhopper.net> - 0.2.5-1 - Update to 0.2.5 * Sat Jun 20 2020 Avram Lubkin <aviso(a)rockhopper.net> - 0.2.4-1 - Update to 0.2.4 -------------------------------------------------------------------------------- ================================================================================ slurm-20.11.7-3.el7 (FEDORA-EPEL-2021-7e9a7ecfb4) Simple Linux Utility for Resource Management -------------------------------------------------------------------------------- Update Information: Move auth_jwt.so plugin to base package ---- - Update to 20.11.7 - Closes security issue CVE-2021-31215 -------------------------------------------------------------------------------- ChangeLog: * Mon May 24 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.7-3 - Move auth_jwt.so plugin to base package (#1947878) * Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 20.11.7-2 - Perl 5.34 rebuild * Sat May 15 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.7-1 - Update to 20.11.7 - Closes security issue CVE-2021-31215 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1961071 - CVE-2021-31215 slurm: environment mishandling in PrologSlurmctld or EpilogSlurmctld script may allow remote code execution https://bugzilla.redhat.com/show_bug.cgi?id=1961071 --------------------------------------------------------------------------------

3 years

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel May 2021