epel-devel October 2020

epel-devel@lists.fedoraproject.org

14 participants
90 discussions

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 28 Oct '20

28 Oct '20

The following Fedora EPEL 6 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2dbce134fd singularity-3.6.4-1.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b21ed088ad tcpreplay-4.3.3-3.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ca0361c919 lout-3.40-18.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing python-regex-2020.10.23-1.el6 tomcat-7.0.106-1.el6 Details about builds: ================================================================================ python-regex-2020.10.23-1.el6 (FEDORA-EPEL-2020-62b3e6fdf6) Alternative regular expression module, to replace re -------------------------------------------------------------------------------- Update Information: Update python-regex to the latest release. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 28 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.10.23-1 - Update to 2020.10.23. -------------------------------------------------------------------------------- ================================================================================ tomcat-7.0.106-1.el6 (FEDORA-EPEL-2020-2cde864460) Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API -------------------------------------------------------------------------------- Update Information: This update includes a rebase from 7.0.105 up to 7.0.106. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 28 2020 Hui Wang <huwang(a)redhat.com> - 1:7.0.106-1 - Update to 7.0.106 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 28 Oct '20

28 Oct '20

The following Fedora EPEL 7 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-01179f6b9f suricata-4.1.9-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6c7b4cbec tcpreplay-4.3.3-3.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-284f18e5de lout-3.40-18.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fd6ec50fa5 fastd-21-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing chromium-86.0.4240.111-1.el7 perl-HTML-Lint-2.32-7.el7.1 pngcheck-2.3.0-3.el7 Details about builds: ================================================================================ chromium-86.0.4240.111-1.el7 (FEDORA-EPEL-2020-3157c3d291) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream's approach disables it by default. To enable Hardware accelerated video in chromium, open this link in chromium: chrome://flags/#enable- accelerated-video-decode Be sure it is turned on. Note that not all GPUs are supported. 2. All the security fixes you expect with a major release: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15990 CVE-2020-15991 CVE-2020-15973 CVE-2020-15974 CVE-2020-15975 CVE-2020-15976 CVE-2020-6557 CVE-2020-15977 CVE-2020-15978 CVE-2020-15979 CVE-2020-15980 CVE-2020-15981 CVE-2020-15982 CVE-2020-15983 CVE-2020-15984 CVE-2020-15985 CVE-2020-15986 CVE-2020-15987 CVE-2020-15992 CVE-2020-15988 CVE-2020-15989 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 3. The EPEL-7 build no longer requires minizip, because Red Hat removed that package in RHEL 7.9. 4. Without bats acting as pollinators, agave and cacao plants would struggle. That means that bats are responsible for tequila and chocolate. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 21 2020 Tom Callaway <spot(a)fedoraproject.org> - 86.0.4240.111-1 - update to 86.0.4240.111 * Tue Oct 20 2020 Tom Callaway <spot(a)fedoraproject.org> - 86.0.4240.75-2 - use bundled zlib/minizip on el7 (thanks Red Hat. :P) * Wed Oct 14 2020 Tom Callaway <spot(a)fedoraproject.org> - 86.0.4240.75-1 - update to 86.0.4240.75 * Mon Sep 28 2020 Tom Callaway <spot(a)fedoraproject.org> - 85.0.4183.121-2 - rebuild for libevent -------------------------------------------------------------------------------- References: [ 1 ] Bug #1885883 - CVE-2020-15967 chromium-browser: Use after free in payments https://bugzilla.redhat.com/show_bug.cgi?id=1885883 [ 2 ] Bug #1885884 - CVE-2020-15968 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1885884 [ 3 ] Bug #1885885 - CVE-2020-15969 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1885885 [ 4 ] Bug #1885886 - CVE-2020-15970 chromium-browser: Use after free in NFC https://bugzilla.redhat.com/show_bug.cgi?id=1885886 [ 5 ] Bug #1885887 - CVE-2020-15971 chromium-browser: Use after free in printing https://bugzilla.redhat.com/show_bug.cgi?id=1885887 [ 6 ] Bug #1885888 - CVE-2020-15972 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1885888 [ 7 ] Bug #1885889 - CVE-2020-15990 chromium-browser: Use after free in autofill https://bugzilla.redhat.com/show_bug.cgi?id=1885889 [ 8 ] Bug #1885890 - CVE-2020-15991 chromium-browser: Use after free in password manager https://bugzilla.redhat.com/show_bug.cgi?id=1885890 [ 9 ] Bug #1885891 - CVE-2020-15973 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1885891 [ 10 ] Bug #1885892 - CVE-2020-15974 chromium-browser: Integer overflow in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1885892 [ 11 ] Bug #1885893 - CVE-2020-15975 chromium-browser: Integer overflow in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1885893 [ 12 ] Bug #1885894 - CVE-2020-15976 chromium-browser: Use after free in WebXR https://bugzilla.redhat.com/show_bug.cgi?id=1885894 [ 13 ] Bug #1885896 - CVE-2020-6557 chromium-browser: Inappropriate implementation in networking https://bugzilla.redhat.com/show_bug.cgi?id=1885896 [ 14 ] Bug #1885897 - CVE-2020-15977 chromium-browser: Insufficient data validation in dialogs https://bugzilla.redhat.com/show_bug.cgi?id=1885897 [ 15 ] Bug #1885899 - CVE-2020-15978 chromium-browser: Insufficient data validation in navigation https://bugzilla.redhat.com/show_bug.cgi?id=1885899 [ 16 ] Bug #1885901 - CVE-2020-15979 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1885901 [ 17 ] Bug #1885902 - CVE-2020-15980 chromium-browser: Insufficient policy enforcement in Intents https://bugzilla.redhat.com/show_bug.cgi?id=1885902 [ 18 ] Bug #1885903 - CVE-2020-15981 chromium-browser: Out of bounds read in audio https://bugzilla.redhat.com/show_bug.cgi?id=1885903 [ 19 ] Bug #1885904 - CVE-2020-15982 chromium-browser: Side-channel information leakage in cache https://bugzilla.redhat.com/show_bug.cgi?id=1885904 [ 20 ] Bug #1885905 - CVE-2020-15983 chromium-browser: Insufficient data validation in webUI https://bugzilla.redhat.com/show_bug.cgi?id=1885905 [ 21 ] Bug #1885906 - CVE-2020-15984 chromium-browser: Insufficient policy enforcement in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1885906 [ 22 ] Bug #1885907 - CVE-2020-15985 chromium-browser: Inappropriate implementation in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1885907 [ 23 ] Bug #1885908 - CVE-2020-15986 chromium-browser: Integer overflow in media https://bugzilla.redhat.com/show_bug.cgi?id=1885908 [ 24 ] Bug #1885909 - CVE-2020-15987 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1885909 [ 25 ] Bug #1885910 - CVE-2020-15992 chromium-browser: Insufficient policy enforcement in networking https://bugzilla.redhat.com/show_bug.cgi?id=1885910 [ 26 ] Bug #1885911 - CVE-2020-15988 chromium-browser: Insufficient policy enforcement in downloads https://bugzilla.redhat.com/show_bug.cgi?id=1885911 [ 27 ] Bug #1885912 - CVE-2020-15989 chromium-browser: Uninitialized use in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1885912 [ 28 ] Bug #1890266 - CVE-2020-16000 chromium-browser: Inappropriate implementation in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1890266 [ 29 ] Bug #1890267 - CVE-2020-16001 chromium-browser: Use after free in media https://bugzilla.redhat.com/show_bug.cgi?id=1890267 [ 30 ] Bug #1890268 - CVE-2020-16002 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1890268 [ 31 ] Bug #1890269 - CVE-2020-16003 chromium-browser: Use after free in printing https://bugzilla.redhat.com/show_bug.cgi?id=1890269 -------------------------------------------------------------------------------- ================================================================================ perl-HTML-Lint-2.32-7.el7.1 (FEDORA-EPEL-2020-6bb32711f3) HTML::Lint Perl module -------------------------------------------------------------------------------- Update Information: First EPEL 7 build -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1829997 - perl-HTML-Lint for EL7 https://bugzilla.redhat.com/show_bug.cgi?id=1829997 -------------------------------------------------------------------------------- ================================================================================ pngcheck-2.3.0-3.el7 (FEDORA-EPEL-2020-3b167ec2fa) Verifies the integrity of PNG, JNG and MNG files -------------------------------------------------------------------------------- Update Information: Enable executable hardening (PIC/PIE) ---- Initial import (#1886858) -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 28 Oct '20

28 Oct '20

The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-69c0102261 singularity-3.6.4-1.el8 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b7912a8edb suricata-5.0.4-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e85de73cdb pdns-recursor-4.3.5-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ef54b7a2d tcpreplay-4.3.3-3.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4f4de3554d fastd-21-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing chromium-86.0.4240.111-1.el8 perl-HTML-Lint-2.32-7.el8 perl-HTTP-Response-Encoding-0.06-32.el8 perl-Pod-Tests-1.20-6.el8 perl-WWW-Mechanize-1.97-1.el8.1 pngcheck-2.3.0-3.el8 python-nuheat-0.3.0-1.el8 wavemon-0.9.2-1.el8 Details about builds: ================================================================================ chromium-86.0.4240.111-1.el8 (FEDORA-EPEL-2020-5f50399d2e) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream's approach disables it by default. To enable Hardware accelerated video in chromium, open this link in chromium: chrome://flags/#enable- accelerated-video-decode Be sure it is turned on. Note that not all GPUs are supported. 2. All the security fixes you expect with a major release: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15990 CVE-2020-15991 CVE-2020-15973 CVE-2020-15974 CVE-2020-15975 CVE-2020-15976 CVE-2020-6557 CVE-2020-15977 CVE-2020-15978 CVE-2020-15979 CVE-2020-15980 CVE-2020-15981 CVE-2020-15982 CVE-2020-15983 CVE-2020-15984 CVE-2020-15985 CVE-2020-15986 CVE-2020-15987 CVE-2020-15992 CVE-2020-15988 CVE-2020-15989 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 3. The EPEL-7 build no longer requires minizip, because Red Hat removed that package in RHEL 7.9. 4. Without bats acting as pollinators, agave and cacao plants would struggle. That means that bats are responsible for tequila and chocolate. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 21 2020 Tom Callaway <spot(a)fedoraproject.org> - 86.0.4240.111-1 - update to 86.0.4240.111 * Tue Oct 20 2020 Tom Callaway <spot(a)fedoraproject.org> - 86.0.4240.75-2 - use bundled zlib/minizip on el7 (thanks Red Hat. :P) * Wed Oct 14 2020 Tom Callaway <spot(a)fedoraproject.org> - 86.0.4240.75-1 - update to 86.0.4240.75 * Mon Sep 28 2020 Tom Callaway <spot(a)fedoraproject.org> - 85.0.4183.121-2 - rebuild for libevent -------------------------------------------------------------------------------- References: [ 1 ] Bug #1885883 - CVE-2020-15967 chromium-browser: Use after free in payments https://bugzilla.redhat.com/show_bug.cgi?id=1885883 [ 2 ] Bug #1885884 - CVE-2020-15968 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1885884 [ 3 ] Bug #1885885 - CVE-2020-15969 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1885885 [ 4 ] Bug #1885886 - CVE-2020-15970 chromium-browser: Use after free in NFC https://bugzilla.redhat.com/show_bug.cgi?id=1885886 [ 5 ] Bug #1885887 - CVE-2020-15971 chromium-browser: Use after free in printing https://bugzilla.redhat.com/show_bug.cgi?id=1885887 [ 6 ] Bug #1885888 - CVE-2020-15972 chromium-browser: Use after free in audio https://bugzilla.redhat.com/show_bug.cgi?id=1885888 [ 7 ] Bug #1885889 - CVE-2020-15990 chromium-browser: Use after free in autofill https://bugzilla.redhat.com/show_bug.cgi?id=1885889 [ 8 ] Bug #1885890 - CVE-2020-15991 chromium-browser: Use after free in password manager https://bugzilla.redhat.com/show_bug.cgi?id=1885890 [ 9 ] Bug #1885891 - CVE-2020-15973 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1885891 [ 10 ] Bug #1885892 - CVE-2020-15974 chromium-browser: Integer overflow in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1885892 [ 11 ] Bug #1885893 - CVE-2020-15975 chromium-browser: Integer overflow in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1885893 [ 12 ] Bug #1885894 - CVE-2020-15976 chromium-browser: Use after free in WebXR https://bugzilla.redhat.com/show_bug.cgi?id=1885894 [ 13 ] Bug #1885896 - CVE-2020-6557 chromium-browser: Inappropriate implementation in networking https://bugzilla.redhat.com/show_bug.cgi?id=1885896 [ 14 ] Bug #1885897 - CVE-2020-15977 chromium-browser: Insufficient data validation in dialogs https://bugzilla.redhat.com/show_bug.cgi?id=1885897 [ 15 ] Bug #1885899 - CVE-2020-15978 chromium-browser: Insufficient data validation in navigation https://bugzilla.redhat.com/show_bug.cgi?id=1885899 [ 16 ] Bug #1885901 - CVE-2020-15979 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1885901 [ 17 ] Bug #1885902 - CVE-2020-15980 chromium-browser: Insufficient policy enforcement in Intents https://bugzilla.redhat.com/show_bug.cgi?id=1885902 [ 18 ] Bug #1885903 - CVE-2020-15981 chromium-browser: Out of bounds read in audio https://bugzilla.redhat.com/show_bug.cgi?id=1885903 [ 19 ] Bug #1885904 - CVE-2020-15982 chromium-browser: Side-channel information leakage in cache https://bugzilla.redhat.com/show_bug.cgi?id=1885904 [ 20 ] Bug #1885905 - CVE-2020-15983 chromium-browser: Insufficient data validation in webUI https://bugzilla.redhat.com/show_bug.cgi?id=1885905 [ 21 ] Bug #1885906 - CVE-2020-15984 chromium-browser: Insufficient policy enforcement in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1885906 [ 22 ] Bug #1885907 - CVE-2020-15985 chromium-browser: Inappropriate implementation in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1885907 [ 23 ] Bug #1885908 - CVE-2020-15986 chromium-browser: Integer overflow in media https://bugzilla.redhat.com/show_bug.cgi?id=1885908 [ 24 ] Bug #1885909 - CVE-2020-15987 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1885909 [ 25 ] Bug #1885910 - CVE-2020-15992 chromium-browser: Insufficient policy enforcement in networking https://bugzilla.redhat.com/show_bug.cgi?id=1885910 [ 26 ] Bug #1885911 - CVE-2020-15988 chromium-browser: Insufficient policy enforcement in downloads https://bugzilla.redhat.com/show_bug.cgi?id=1885911 [ 27 ] Bug #1885912 - CVE-2020-15989 chromium-browser: Uninitialized use in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1885912 [ 28 ] Bug #1890266 - CVE-2020-16000 chromium-browser: Inappropriate implementation in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1890266 [ 29 ] Bug #1890267 - CVE-2020-16001 chromium-browser: Use after free in media https://bugzilla.redhat.com/show_bug.cgi?id=1890267 [ 30 ] Bug #1890268 - CVE-2020-16002 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1890268 [ 31 ] Bug #1890269 - CVE-2020-16003 chromium-browser: Use after free in printing https://bugzilla.redhat.com/show_bug.cgi?id=1890269 -------------------------------------------------------------------------------- ================================================================================ perl-HTML-Lint-2.32-7.el8 (FEDORA-EPEL-2020-2fa5d057e8) HTML::Lint Perl module -------------------------------------------------------------------------------- Update Information: First EPEL 8 build. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1829981 - perl-HTML-Lint for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1829981 -------------------------------------------------------------------------------- ================================================================================ perl-HTTP-Response-Encoding-0.06-32.el8 (FEDORA-EPEL-2020-afec362d3d) HTTP::Response::Encoding Perl module -------------------------------------------------------------------------------- Update Information: First EPEL 8 build. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1829984 - perl-HTTP-Response-Encoding for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1829984 -------------------------------------------------------------------------------- ================================================================================ perl-Pod-Tests-1.20-6.el8 (FEDORA-EPEL-2020-308192519b) Extract embedded tests and code examples from POD -------------------------------------------------------------------------------- Update Information: First EPEL 8 build. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1829980 - perl-Pod-Tests for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1829980 -------------------------------------------------------------------------------- ================================================================================ perl-WWW-Mechanize-1.97-1.el8.1 (FEDORA-EPEL-2020-2b1e3b5a9f) Automates web page form & link interaction -------------------------------------------------------------------------------- Update Information: First EPEL 8 build -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1829982 - perl-WWW-Mechanize for EL8 https://bugzilla.redhat.com/show_bug.cgi?id=1829982 -------------------------------------------------------------------------------- ================================================================================ pngcheck-2.3.0-3.el8 (FEDORA-EPEL-2020-a2aa2f31cd) Verifies the integrity of PNG, JNG and MNG files -------------------------------------------------------------------------------- Update Information: Enable executable hardening (PIC/PIE) ---- Initial import (#1886858) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-nuheat-0.3.0-1.el8 (FEDORA-EPEL-2020-68023958de) Python library for NuHeat Signature radiant floor thermostats -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ wavemon-0.9.2-1.el8 (FEDORA-EPEL-2020-7c7bf13049) Ncurses-based monitoring application for wireless network devices -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 0.9.2 (#1891272) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 28 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.9.2-1 - Update to latest upstream release 0.9.2 (#1891272) * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 27 Oct '20

27 Oct '20

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-69c0102261 singularity-3.6.4-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b7912a8edb suricata-5.0.4-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e85de73cdb pdns-recursor-4.3.5-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ef54b7a2d tcpreplay-4.3.3-3.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4f4de3554d fastd-21-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing batctl-2020.4-1.el8 mpris-scrobbler-0.4.0.1-1.el8 python-airthings-3.2.0-1.el8 Details about builds: ================================================================================ batctl-2020.4-1.el8 (FEDORA-EPEL-2020-89a520bf93) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information: Update to 2020.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.4-1 - update to 2020.4 * Fri Sep 4 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.3-1 - update to 2020.3 * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2020.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 7 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.2-1 - update to 2020.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1891784 - batctl-2020.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1891784 -------------------------------------------------------------------------------- ================================================================================ mpris-scrobbler-0.4.0.1-1.el8 (FEDORA-EPEL-2020-d2b57ccd17) User daemon to submit currently playing song to LastFM, LibreFM, ListenBrainz -------------------------------------------------------------------------------- Update Information: Bugfix: Update to latest upstream stable release (service fails after running signon session) Set buildtype option to release for buildsystem -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2020 Justin W. Flory <jflory7(a)fedoraproject.org> - 0.4.0.1-1 - Bugfix: Update to latest upstream stable release (service fails after running signon session) - Set buildtype option to release for buildsystem * Tue Sep 29 2020 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.4.0-3 - Rebuilt for libevent 2.1.12 * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1891674 - mpris-scrobbler-0.4.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1891674 -------------------------------------------------------------------------------- ================================================================================ python-airthings-3.2.0-1.el8 (FEDORA-EPEL-2020-3f63be5234) Fetch sensor measurements from Airthings devices -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 27 Oct '20

27 Oct '20

The following Fedora EPEL 6 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2dbce134fd singularity-3.6.4-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b21ed088ad tcpreplay-4.3.3-3.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ca0361c919 lout-3.40-18.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing voms-2.0.15-1.el6 Details about builds: ================================================================================ voms-2.0.15-1.el6 (FEDORA-EPEL-2020-1fe668fb84) Virtual Organization Membership Service -------------------------------------------------------------------------------- Update Information: voms 2.0.15 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 25 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.0.15-1 - Update to version 2.0.15 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 27 Oct '20

27 Oct '20

The following Fedora EPEL 7 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-01179f6b9f suricata-4.1.9-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6c7b4cbec tcpreplay-4.3.3-3.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-284f18e5de lout-3.40-18.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fd6ec50fa5 fastd-21-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing 389-admin-1.1.46-4.el7 batctl-2020.4-1.el7 fedfind-4.4.4-1.el7 python3-mod_wsgi-4.7.1-1.el7 voms-2.0.15-1.el7 Details about builds: ================================================================================ 389-admin-1.1.46-4.el7 (FEDORA-EPEL-2020-0d461626b9) 389 Administration Server (admin) -------------------------------------------------------------------------------- Update Information: Update 389-admin spec file to match 389-ds-base package file permissions. Fixes BZ#1886024 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 Viktor Ashirov <vashirov(a)redhat.com> - 1.1.46-4 - Release 1.1.46-4 - Bug 1886024 - file /usr/lib64/dirsrv from install of 389-ds-base-libs-1.3.10.2-6.el7.x86_64 conflicts with file from package 389-admin-1.1.46-1.el7.x86_64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1886024 - file /usr/lib64/dirsrv from install of 389-ds-base-libs-1.3.10.2-6.el7.x86_64 conflicts with file from package 389-admin-1.1.46-1.el7.x86_64 https://bugzilla.redhat.com/show_bug.cgi?id=1886024 -------------------------------------------------------------------------------- ================================================================================ batctl-2020.4-1.el7 (FEDORA-EPEL-2020-2d0c1e430c) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information: Update to 2020.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.4-1 - update to 2020.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1891784 - batctl-2020.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1891784 -------------------------------------------------------------------------------- ================================================================================ fedfind-4.4.4-1.el7 (FEDORA-EPEL-2020-249b7c9ba8) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This update provides a new release of fedfind, which gets release currency metadata from a new file in the Fedora QA space that will be maintained by the QA team. The old `collections` API data and Bodhi's data have both proven problematic for this purpose, so we're rolling our own. -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 24 2020 Adam Williamson <awilliam(a)redhat.com> - 4.4.4-1 - New release 4.4.4: use bespoke release metadata instead of Bodhi -------------------------------------------------------------------------------- ================================================================================ python3-mod_wsgi-4.7.1-1.el7 (FEDORA-EPEL-2020-67c896d724) A WSGI interface for Python web applications in Apache -------------------------------------------------------------------------------- Update Information: Initial EPEL 7 package, based on Fedora mod_wsgi package. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ voms-2.0.15-1.el7 (FEDORA-EPEL-2020-58132bfdd5) Virtual Organization Membership Service -------------------------------------------------------------------------------- Update Information: voms 2.0.15 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 25 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.0.15-1 - Update to version 2.0.15 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 26 Oct '20

26 Oct '20

The following Fedora EPEL 6 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2dbce134fd singularity-3.6.4-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b21ed088ad tcpreplay-4.3.3-3.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ca0361c919 lout-3.40-18.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing mozilla-https-everywhere-2020.8.13-1.el6 Details about builds: ================================================================================ mozilla-https-everywhere-2020.8.13-1.el6 (FEDORA-EPEL-2020-34cf8678d9) HTTPS enforcement extension for Mozilla Firefox -------------------------------------------------------------------------------- Update Information: - Fix port based whitelisting issue #19291 - Update documentation - Update dependencies (NPM and Chromedriver) - Minor code fixes in JS -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 Russell Golden <niveusluna(a)fedoraproject.org> - 2020.8.13-1 - Fix port based whitelisting issue #19291 - Update documentation - Update dependencies (NPM and Chromedriver) - Minor code fixes in JS --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 26 Oct '20

26 Oct '20

The following Fedora EPEL 7 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-01179f6b9f suricata-4.1.9-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6c7b4cbec tcpreplay-4.3.3-3.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-284f18e5de lout-3.40-18.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fd6ec50fa5 fastd-21-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing composer-1.10.16-1.el7 mozilla-https-everywhere-2020.8.13-1.el7 php-composer-xdebug-handler-1.4.4-1.el7 rpminspect-1.2-2.el7 rpminspect-data-fedora-1.2-1.el7 Details about builds: ================================================================================ composer-1.10.16-1.el7 (FEDORA-EPEL-2020-adf7ad0dfc) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: **Version 1.10.16** - 2020-10-24 * Added warning to `validate` command for cases where packages provide/replace a package that they also require * Fixed JSON schema validation issue with PHPStorm * Fixed symlink handling in `archive` command ---- **Version 1.10.15** - 2020-10-13 * Fixed path repo version guessing issue ---- **Version 1.10.14** - 2020-10-13 * Fixed version guesser to look at remote branches as well as local ones * Fixed path repositories version guessing to handle edge cases where version is different from the VCS- guessed version * Fixed COMPOSER env var causing issues when combined with the `global ` command * Fixed a few issues dealing with PHP without openssl extension (not recommended at all but sometimes needed for testing) -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 25 2020 Remi Collet <remi(a)remirepo.net> - 1.10.16-1 - update to 1.10.16 * Tue Oct 13 2020 Remi Collet <remi(a)remirepo.net> - 1.10.15-1 - update to 1.10.15 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-2020.8.13-1.el7 (FEDORA-EPEL-2020-b790905b24) HTTPS enforcement extension for Mozilla Firefox -------------------------------------------------------------------------------- Update Information: - Fix port based whitelisting issue #19291 - Update documentation - Update dependencies (NPM and Chromedriver) - Minor code fixes in JS -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 Russell Golden <niveusluna(a)fedoraproject.org> - 2020.8.13-1 - Fix port based whitelisting issue #19291 - Update documentation - Update dependencies (NPM and Chromedriver) - Minor code fixes in JS -------------------------------------------------------------------------------- ================================================================================ php-composer-xdebug-handler-1.4.4-1.el7 (FEDORA-EPEL-2020-65f5f73964) Restarts a process without Xdebug -------------------------------------------------------------------------------- Update Information: **Version 1.4.4** - 2020-10-24 * Fix: exception if 'pcntl_signal' is disabled. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 25 2020 Remi Collet <remi(a)remirepo.net> - 1.4.4-1 - update to 1.4.4 -------------------------------------------------------------------------------- ================================================================================ rpminspect-1.2-2.el7 (FEDORA-EPEL-2020-ef06f3ca3c) Build deviation compliance tool -------------------------------------------------------------------------------- Update Information: Upgrade to rpminspect-1.2 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 David Cantrell <dcantrell(a)redhat.com> - 1.2-1 - For BUILDTYPE=release, generate the correct type of changelog - Minor logic error in submit-koji-builds.sh - Fix reading existing spec file in submit-koji-builds.sh - Bump development build version to 1.2 - Use is_rebase() in the 'upstream' inspection - Use rpmtdSetIndex() and rpmtdGetString() in get_header_value() - Add get_rpmtag_fileflags() to files.c and call from extract_rpm() - Use correct Version and Release values in download_build() - #include <rpm/rpmfiles.h> -> #include <rpm/rpmfi.h> - Add the 'config' inspection to librpminspect - Rephrase reporting messages in the 'config' inspection - Add the 'doc' inspection to librpminspect - Update TODO list - Minor updates to try and make gate.sh more reliable - Add config and doc to the inspections list in generic.yaml - Rename the '%files' inspection to 'files' (#194) - Modify baseclass.py to allow 'before' and 'after' NVR tuples - Use the after tuple to override the NVR in test_abidiff.py - Use the after tuple to override the NVR in test_upstream.py - Write rpminspect output to a file in the test suite - Add 28 test cases for the 'config' inspection - Fix the errors in the 'config' inspection found by the test suite - Fix Python problems in the test suite reported by black and flake8 - Add Makefile targets for black and flake8 - One more formatting issue reporting by Python black in test_config.py - More 'python black' formatting errors reported for test_config.py - https://mandoc.bsd.lv -> http://mandoc.bsd.lv - Add a -D/--dump-config option to rpminspect(1) - Use global reported variable in 'config' inspection - Fix reporting errors in the 'doc' inspection - Add test_doc.py with 'doc' inspection test cases - Ignore flake8 W291 in test_doc.py where we explicitly want whitepsace. - Add init_rebaseable() to librpminspect - Check the rebaseable list in is_rebase() in librpminspect - Update TODO list - Define a new GitHub Action using utils/gate.sh - Update the README.md file - shellcheck fixes for utils/gate.sh - Use utils/find-ninja.sh to determine what ninja-build command to use - Install fedora-packager for the gate.yml GitHub Action - Remove before and after variables from gate.sh; unused - Remove unnecessary basename() calls in inspect_upstream.c - Do not assume an or bn contain strings in is_rebase() (#196) - Adjust what things run during with GitHub Actions - Add get_rpm_header_string_array() to librpminspect - Replace init_source() with get_rpm_header_string_array() in inspect_upstream.c - free() allocated output string in inspect_changelog.c on errors - s/10240/16384/ in archive_read_open_filename() call in unpack.c - Add the 'patches' inspection to librpminspect - Add uncompress_file() to librpminspect - Add filecmp() and use that in place of zcmp/bzcmp/xzcmp - README.md updates - Restrict some GitHub Actions to source code and test suite changes. - Only enable lz4 compression if ARCHIVE_FILTER_LZ4 is defined - Go ahead and wrap the rest of the libarchive compression filters - s/class Test/class /g - Make sure uncompress_file() supports xz compression - Handle more compressed file MIME types. - Add test_changedfiles.py to the test suite. - Add test_patches.py with test cases for the 'patches' inspection - flake8 fixes in the test suite - Python format fixes for test_changedfiles.py - Python format fixes in test_patches.py - More Python format fixes for test_patches.py - Remove unnecessary 'a' in DESC_PATCHES - Better explanation as to why the EmptyLicenseTag tests are skipped. - Test suite cleanup; add rebase= and same= to TestCompareSRPM - Black formatting fixes for the test suite. - Remove unused imports in test_upstream.py - Revert black fixes for test_config.py - Fix my email address in test suite source files. - Support single package URLs for before and after builds (#190) - Handle invalid/missing RPMs in get_product_release() - Use warnx(), errx(), and err() in src/rpminspect.c - Modify submit-koji-builds.sh to pick up all pkg-git branches. - Update the rpminspect.1 man page to reflect current status. - Update translation template files in po/ - Support relative directory paths for the -w option (#188) - Implement the 'virus' inspection and add test cases for it. - Update po/ template files - Python formatting fixes for test_virus.py - Update the osdeps/*/reqs.txt files. - More osdeps updates for the clamav needs - Install 'xz' for the 'style' GitHub Action - Fix a variety of small memory leaks in librpminspect - Stop the freshclam service for the Ubuntu gate job - Support slightly older versions of libclamav in inspect_virus.c - Add the 'politics' inspection to librpminspect. - In tearDown() in the test suite, call rpmfluff clean() methods - Add test_politics.py with 'politics' inspection test cases - Python black format fixes for test_politics.py - 'it should added' -> 'it should be added' - Increase the runtime timeout for test_virus.py - Install the timeout decorator on all OSes in our GitHub Actions - Install timeout-decorator with pip, not timeout - Expand librpminspect with support for SHA-224, SHA-384, and SHA-512 - Define DEFAULT_MESSAGE_DIGEST in constants.h and use that. - Replace some fprintf()/fflush() calls with warn()/warnx() calls - Rename the 'DT_NEEDED' inspection to 'dsodeps' - Rename 'LTO' inspection to 'lto' - Update translation template and fix two incorrect error strings. - Note all valid message digests in data/politics/GENERIC - Improve reporting in the patches inspection - Only fail 'changedfiles' for VERIFY and higher results - If 'removedfiles' only reports INFO messages, pass the inspection - If 'addedfiles' only reports INFO results, pass the inspection - If 'patches' only reports INFO results, pass the inspection - No need to check value of allowed in permissions_driver() - Do not let INFO results fail the 'doc' inspection. - Do not let all INFO results in 'upstream' fail the inspection - Fix RPMFILE_FLAGS handling for %config files (#221) - Still report file changes in the 'config' inspection for rebases - Correctly check RPMFILE_DOC flags in the 'doc' inspection - Include rpm/rpmfi.h insted of rpm/rpmfiles.h - Only check regular files and symlinks in the 'doc' inspection - Remove unnecessary assert() statements in filecmp() - Remove incorrect warnx() reportings based on filecmp() return value - Exclude man pages from the 'doc' inspection - Honor the -a command line option for downloads as well as runtime (#233) - Allow optional 'commands' block in the config file - Fix assorted non-critical memory leaks - Remove unnecessary warn() after a failed stat() - Additional memory fixes for the abidiff inspection (#244) - Free ELF symbol names list in find_lto_symbols() before return - Followup to the memory fixes for read_abi() and free_abi() - Prevent invalid pointer dereferencing in invalid result in 'patches' (#245) - Avoid reusing the same abi_pkg_entry_t struct in read_abi() - Allow a set of excluded path prefixes in 'pathmigration' - Fix the YAML parsing for the pathmigration block - Document the BRANCHES variable for 'make koji' - Include the .asc file when submitting new Koji builds (#191) - Include the .asc file in the spec file * Mon Oct 26 2020 David Cantrell <dcantrell(a)redhat.com> - 1.2-1 - For BUILDTYPE=release, generate the correct type of changelog - Minor logic error in submit-koji-builds.sh - Fix reading existing spec file in submit-koji-builds.sh - Bump development build version to 1.2 - Use is_rebase() in the 'upstream' inspection - Use rpmtdSetIndex() and rpmtdGetString() in get_header_value() - Add get_rpmtag_fileflags() to files.c and call from extract_rpm() - Use correct Version and Release values in download_build() - #include <rpm/rpmfiles.h> -> #include <rpm/rpmfi.h> - Add the 'config' inspection to librpminspect - Rephrase reporting messages in the 'config' inspection - Add the 'doc' inspection to librpminspect - Update TODO list - Minor updates to try and make gate.sh more reliable - Add config and doc to the inspections list in generic.yaml - Rename the '%files' inspection to 'files' (#194) - Modify baseclass.py to allow 'before' and 'after' NVR tuples - Use the after tuple to override the NVR in test_abidiff.py - Use the after tuple to override the NVR in test_upstream.py - Write rpminspect output to a file in the test suite - Add 28 test cases for the 'config' inspection - Fix the errors in the 'config' inspection found by the test suite - Fix Python problems in the test suite reported by black and flake8 - Add Makefile targets for black and flake8 - One more formatting issue reporting by Python black in test_config.py - More 'python black' formatting errors reported for test_config.py - https://mandoc.bsd.lv -> http://mandoc.bsd.lv - Add a -D/--dump-config option to rpminspect(1) - Use global reported variable in 'config' inspection - Fix reporting errors in the 'doc' inspection - Add test_doc.py with 'doc' inspection test cases - Ignore flake8 W291 in test_doc.py where we explicitly want whitepsace. - Add init_rebaseable() to librpminspect - Check the rebaseable list in is_rebase() in librpminspect - Update TODO list - Define a new GitHub Action using utils/gate.sh - Update the README.md file - shellcheck fixes for utils/gate.sh - Use utils/find-ninja.sh to determine what ninja-build command to use - Install fedora-packager for the gate.yml GitHub Action - Remove before and after variables from gate.sh; unused - Remove unnecessary basename() calls in inspect_upstream.c - Do not assume an or bn contain strings in is_rebase() (#196) - Adjust what things run during with GitHub Actions - Add get_rpm_header_string_array() to librpminspect - Replace init_source() with get_rpm_header_string_array() in inspect_upstream.c - free() allocated output string in inspect_changelog.c on errors - s/10240/16384/ in archive_read_open_filename() call in unpack.c - Add the 'patches' inspection to librpminspect - Add uncompress_file() to librpminspect - Add filecmp() and use that in place of zcmp/bzcmp/xzcmp - README.md updates - Restrict some GitHub Actions to source code and test suite changes. - Only enable lz4 compression if ARCHIVE_FILTER_LZ4 is defined - Go ahead and wrap the rest of the libarchive compression filters - s/class Test/class /g - Make sure uncompress_file() supports xz compression - Handle more compressed file MIME types. - Add test_changedfiles.py to the test suite. - Add test_patches.py with test cases for the 'patches' inspection - flake8 fixes in the test suite - Python format fixes for test_changedfiles.py - Python format fixes in test_patches.py - More Python format fixes for test_patches.py - Remove unnecessary 'a' in DESC_PATCHES - Better explanation as to why the EmptyLicenseTag tests are skipped. - Test suite cleanup; add rebase= and same= to TestCompareSRPM - Black formatting fixes for the test suite. - Remove unused imports in test_upstream.py - Revert black fixes for test_config.py - Fix my email address in test suite source files. - Support single package URLs for before and after builds (#190) - Handle invalid/missing RPMs in get_product_release() - Use warnx(), errx(), and err() in src/rpminspect.c - Modify submit-koji-builds.sh to pick up all pkg-git branches. - Update the rpminspect.1 man page to reflect current status. - Update translation template files in po/ - Support relative directory paths for the -w option (#188) - Implement the 'virus' inspection and add test cases for it. - Update po/ template files - Python formatting fixes for test_virus.py - Update the osdeps/*/reqs.txt files. - More osdeps updates for the clamav needs - Install 'xz' for the 'style' GitHub Action - Fix a variety of small memory leaks in librpminspect - Stop the freshclam service for the Ubuntu gate job - Support slightly older versions of libclamav in inspect_virus.c - Add the 'politics' inspection to librpminspect. - In tearDown() in the test suite, call rpmfluff clean() methods - Add test_politics.py with 'politics' inspection test cases - Python black format fixes for test_politics.py - 'it should added' -> 'it should be added' - Increase the runtime timeout for test_virus.py - Install the timeout decorator on all OSes in our GitHub Actions - Install timeout-decorator with pip, not timeout - Expand librpminspect with support for SHA-224, SHA-384, and SHA-512 - Define DEFAULT_MESSAGE_DIGEST in constants.h and use that. - Replace some fprintf()/fflush() calls with warn()/warnx() calls - Rename the 'DT_NEEDED' inspection to 'dsodeps' - Rename 'LTO' inspection to 'lto' - Update translation template and fix two incorrect error strings. - Note all valid message digests in data/politics/GENERIC - Improve reporting in the patches inspection - Only fail 'changedfiles' for VERIFY and higher results - If 'removedfiles' only reports INFO messages, pass the inspection - If 'addedfiles' only reports INFO results, pass the inspection - If 'patches' only reports INFO results, pass the inspection - No need to check value of allowed in permissions_driver() - Do not let INFO results fail the 'doc' inspection. - Do not let all INFO results in 'upstream' fail the inspection - Fix RPMFILE_FLAGS handling for %config files (#221) - Still report file changes in the 'config' inspection for rebases - Correctly check RPMFILE_DOC flags in the 'doc' inspection - Include rpm/rpmfi.h insted of rpm/rpmfiles.h - Only check regular files and symlinks in the 'doc' inspection - Remove unnecessary assert() statements in filecmp() - Remove incorrect warnx() reportings based on filecmp() return value - Exclude man pages from the 'doc' inspection - Honor the -a command line option for downloads as well as runtime (#233) - Allow optional 'commands' block in the config file - Fix assorted non-critical memory leaks - Remove unnecessary warn() after a failed stat() - Additional memory fixes for the abidiff inspection (#244) - Free ELF symbol names list in find_lto_symbols() before return - Followup to the memory fixes for read_abi() and free_abi() - Prevent invalid pointer dereferencing in invalid result in 'patches' (#245) - Avoid reusing the same abi_pkg_entry_t struct in read_abi() - Allow a set of excluded path prefixes in 'pathmigration' - Fix the YAML parsing for the pathmigration block - Document the BRANCHES variable for 'make koji' - Include the .asc file when submitting new Koji builds (#191) - Include the .asc file in the spec file -------------------------------------------------------------------------------- ================================================================================ rpminspect-data-fedora-1.2-1.el7 (FEDORA-EPEL-2020-1e1f8c28d4) Build deviation compliance tool data files -------------------------------------------------------------------------------- Update Information: Upgrade to rpminspect-1.2 ---- Require external programs used by some rpminspect inspections (e.g., abidiff) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 David Cantrell <dcantrell(a)redhat.com> - 1.2-1 - More fixes for submit-koji-builds.sh - Increment development work version to 1.2 - Rename '%files' to 'files'; add 'config' and 'doc' to inspections - Remove the politics/ subdirectory and the files in it. - Add 'politics' and 'virus' to the fedora.yaml config file. - s/DT_NEEDED/dsodeps/g in fedora.yaml - Require optional packages used by enabled inspections. - Add excluded_paths block to the pathmigration block - Adjust the pathmigration block to have 'migrated_paths' - Update rpminspect-data-fedora.spec.in - Updates to the 'make koji' process * Mon Oct 12 2020 David Cantrell <dcantrell(a)redhat.com> - 1.1-2 - Add explicit Requires for packages needed for inspections (#1887426) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1887426 - rpminspect-data-fedora is missing a dependency on libabigail https://bugzilla.redhat.com/show_bug.cgi?id=1887426 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 26 Oct '20

26 Oct '20

The following Fedora EPEL 8 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-69c0102261 singularity-3.6.4-1.el8 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b7912a8edb suricata-5.0.4-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e85de73cdb pdns-recursor-4.3.5-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ef54b7a2d tcpreplay-4.3.3-3.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4f4de3554d fastd-21-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing kitty-0.19.1-1.el8 mozilla-https-everywhere-2020.8.13-1.el8 perl-AnyEvent-BDB-1.1-34.el8 perl-Color-ANSI-Util-0.164-2.el8 perl-Color-RGB-Util-0.601-2.el8 perl-ColorThemeBase-Static-0.008-2.el8 perl-Convert-UU-0.5201-27.el8 perl-ExtUtils-F77-1.24-4.el8 perl-Graphics-ColorNamesLite-WWW-1.14.000-2.el8 perl-Inline-Files-0.71-6.el8 perl-JSON-Color-0.130-3.el8 perl-Module-Compile-0.38-4.el8 perl-Module-Load-Util-0.003-2.el8 perl-MooseX-Object-Pluggable-0.0014-18.el8 perl-Regexp-Pattern-Perl-0.004-1.el8 perl-Test-Base-0.89-9.el8 perl-Test-RandomResult-0.001-2.el8 perl-YAML-PP-0.026-1.el8 python-aiohttp-sse-client-0.2.0-1.el8 python-mongomock-3.20.0-1.el8 python-pysqueezebox-0.5.0-1.el8 python-pywizlight-0.3.4-1.el8 python-tasmotadevicecontroller-0.0.8-1.el8 python-volkszaehler-0.2.0-1.el8 python-volvooncall-0.8.12-2.el8 python-zm-0.5.2-1.el8 redshift-1.12-1.el8 rpminspect-1.2-2.el8 rpminspect-data-fedora-1.2-1.el8 znc-clientbuffer-0-0.17.20190129git9766a4a.el8 Details about builds: ================================================================================ kitty-0.19.1-1.el8 (FEDORA-EPEL-2020-b671b4c3da) Cross-platform, fast, feature full, GPU based terminal emulator -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.19.1-1 - build(update): 0.19.1 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-2020.8.13-1.el8 (FEDORA-EPEL-2020-1f9e7448da) HTTPS enforcement extension for Mozilla Firefox -------------------------------------------------------------------------------- Update Information: - Fix port based whitelisting issue #19291 - Update documentation - Update dependencies (NPM and Chromedriver) - Minor code fixes in JS -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 Russell Golden <niveusluna(a)fedoraproject.org> - 2020.8.13-1 - Fix port based whitelisting issue #19291 - Update documentation - Update dependencies (NPM and Chromedriver) - Minor code fixes in JS -------------------------------------------------------------------------------- ================================================================================ perl-AnyEvent-BDB-1.1-34.el8 (FEDORA-EPEL-2020-e1f70536fe) Truly asynchronous Berkeley DB access -------------------------------------------------------------------------------- Update Information: This update provides a new perl-AnyEvent-BDB package which provides an assynchronous access to Berkeley database from Perl. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890586 - EPEL8 Request: perl-AnyEvent-BDB https://bugzilla.redhat.com/show_bug.cgi?id=1890586 -------------------------------------------------------------------------------- ================================================================================ perl-Color-ANSI-Util-0.164-2.el8 (FEDORA-EPEL-2020-b381c67da7) Routines for dealing with ANSI colors -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890962 - Add perl-Color-ANSI-Util to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890962 -------------------------------------------------------------------------------- ================================================================================ perl-Color-RGB-Util-0.601-2.el8 (FEDORA-EPEL-2020-f5b207908d) Utilities related to RGB colors -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890960 - Add perl-Color-RGB-Util to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890960 -------------------------------------------------------------------------------- ================================================================================ perl-ColorThemeBase-Static-0.008-2.el8 (FEDORA-EPEL-2020-97fdbfbd0a) Base class for color theme modules with static list of items -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890966 - Add perl-ColorThemeBase-Static to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890966 -------------------------------------------------------------------------------- ================================================================================ perl-Convert-UU-0.5201-27.el8 (FEDORA-EPEL-2020-ca15be4cce) Perl module for uuencode and uudecode -------------------------------------------------------------------------------- Update Information: Added the package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890918 - Add perl-Convert-UU to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890918 -------------------------------------------------------------------------------- ================================================================================ perl-ExtUtils-F77-1.24-4.el8 (FEDORA-EPEL-2020-95ab379d0f) Simple interface to F77 libs -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890894 - Add perl-ExtUtils-F77 to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890894 -------------------------------------------------------------------------------- ================================================================================ perl-Graphics-ColorNamesLite-WWW-1.14.000-2.el8 (FEDORA-EPEL-2020-37085c0534) WWW color names and equivalent RGB values -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890944 - Add perl-Graphics-ColorNamesLite-WWW To EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890944 -------------------------------------------------------------------------------- ================================================================================ perl-Inline-Files-0.71-6.el8 (FEDORA-EPEL-2020-67c52494cc) Allows for multiple inline files in a single Perl file -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890935 - Add perl-Inline-Files to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890935 -------------------------------------------------------------------------------- ================================================================================ perl-JSON-Color-0.130-3.el8 (FEDORA-EPEL-2020-7cdeec79ad) Encode to colored JSON -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ perl-Module-Compile-0.38-4.el8 (FEDORA-EPEL-2020-d0250c45c2) Perl Module Compilation -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890922 - Add perl-Module-Compile to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890922 -------------------------------------------------------------------------------- ================================================================================ perl-Module-Load-Util-0.003-2.el8 (FEDORA-EPEL-2020-5f93cc1366) Some utility routines related to module loading -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890949 - Add perl-Module-Load-Util to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890949 -------------------------------------------------------------------------------- ================================================================================ perl-MooseX-Object-Pluggable-0.0014-18.el8 (FEDORA-EPEL-2020-1f81b5e41e) Make your Moose classes pluggable -------------------------------------------------------------------------------- Update Information: This update provides a new perl-MooseX-Object-Pluggable package which adds a support for the plugins into Moose classes. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890794 - EPEL8 Request: perl-MooseX-Object-Pluggable https://bugzilla.redhat.com/show_bug.cgi?id=1890794 -------------------------------------------------------------------------------- ================================================================================ perl-Regexp-Pattern-Perl-0.004-1.el8 (FEDORA-EPEL-2020-712a97eeec) Regexp patterns related to Perl -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890946 - Add perl-Regexp-Pattern-Perl to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890946 -------------------------------------------------------------------------------- ================================================================================ perl-Test-Base-0.89-9.el8 (FEDORA-EPEL-2020-a2502c10e8) Data Driven Testing Framework -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890925 - Add perl-Test-Base to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890925 -------------------------------------------------------------------------------- ================================================================================ perl-Test-RandomResult-0.001-2.el8 (FEDORA-EPEL-2020-481ae731f6) Test that results of a running code look random -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890956 - Add perl-Test-RandomResult to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890956 -------------------------------------------------------------------------------- ================================================================================ perl-YAML-PP-0.026-1.el8 (FEDORA-EPEL-2020-26a8045ebb) YAML 1.2 processor -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1890941 - Add perl-YAML-PP to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1890941 -------------------------------------------------------------------------------- ================================================================================ python-aiohttp-sse-client-0.2.0-1.el8 (FEDORA-EPEL-2020-9e825c0995) Server-Sent Event Python client -------------------------------------------------------------------------------- Update Information: Fix license (#1885501) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-mongomock-3.20.0-1.el8 (FEDORA-EPEL-2020-65a21578e0) Module for testing MongoDB-dependent code -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-pysqueezebox-0.5.0-1.el8 (FEDORA-EPEL-2020-9d242da0bf) Python library to control Logitech Media Server -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-pywizlight-0.3.4-1.el8 (FEDORA-EPEL-2020-a2102724d3) Python connector for WiZ light devices -------------------------------------------------------------------------------- Update Information: Update to new upstream version 0.3.4 (#1884993) ---- Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-tasmotadevicecontroller-0.0.8-1.el8 (FEDORA-EPEL-2020-ceab275384) Control Tasmota devices via their web API -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-volkszaehler-0.2.0-1.el8 (FEDORA-EPEL-2020-1f4f7719d9) Python Client for interacting with the Volkszahler API -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 0.2.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.2.0-1 - Update to latest upstream release 0.2.0 * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sun Jul 12 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.1.3-1 - Update to latest upstream release 0.1.3 * Fri Jun 26 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.1.2-8 - Add python3-setuptools as BR * Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.2-7 - Rebuilt for Python 3.9 * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-volvooncall-0.8.12-2.el8 (FEDORA-EPEL-2020-177c6633e6) Communicate with Volvo On Call -------------------------------------------------------------------------------- Update Information: Remove shebang (#1888351) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-zm-0.5.2-1.el8 (FEDORA-EPEL-2020-7b9c07c4d4) Python wrapper around the ZoneMinder REST API -------------------------------------------------------------------------------- Update Information: Permission issue was fixed upstream -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ redshift-1.12-1.el8 (FEDORA-EPEL-2020-e0160be8cd) Adjusts the color temperature of your screen according to time of day -------------------------------------------------------------------------------- Update Information: Update to 1.12 (#1581005) -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1833106 - [RHEL8] Please build redshift for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1833106 -------------------------------------------------------------------------------- ================================================================================ rpminspect-1.2-2.el8 (FEDORA-EPEL-2020-6ad7eba780) Build deviation compliance tool -------------------------------------------------------------------------------- Update Information: Upgrade to rpminspect-1.2 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 David Cantrell <dcantrell(a)redhat.com> - 1.2-1 - For BUILDTYPE=release, generate the correct type of changelog - Minor logic error in submit-koji-builds.sh - Fix reading existing spec file in submit-koji-builds.sh - Bump development build version to 1.2 - Use is_rebase() in the 'upstream' inspection - Use rpmtdSetIndex() and rpmtdGetString() in get_header_value() - Add get_rpmtag_fileflags() to files.c and call from extract_rpm() - Use correct Version and Release values in download_build() - #include <rpm/rpmfiles.h> -> #include <rpm/rpmfi.h> - Add the 'config' inspection to librpminspect - Rephrase reporting messages in the 'config' inspection - Add the 'doc' inspection to librpminspect - Update TODO list - Minor updates to try and make gate.sh more reliable - Add config and doc to the inspections list in generic.yaml - Rename the '%files' inspection to 'files' (#194) - Modify baseclass.py to allow 'before' and 'after' NVR tuples - Use the after tuple to override the NVR in test_abidiff.py - Use the after tuple to override the NVR in test_upstream.py - Write rpminspect output to a file in the test suite - Add 28 test cases for the 'config' inspection - Fix the errors in the 'config' inspection found by the test suite - Fix Python problems in the test suite reported by black and flake8 - Add Makefile targets for black and flake8 - One more formatting issue reporting by Python black in test_config.py - More 'python black' formatting errors reported for test_config.py - https://mandoc.bsd.lv -> http://mandoc.bsd.lv - Add a -D/--dump-config option to rpminspect(1) - Use global reported variable in 'config' inspection - Fix reporting errors in the 'doc' inspection - Add test_doc.py with 'doc' inspection test cases - Ignore flake8 W291 in test_doc.py where we explicitly want whitepsace. - Add init_rebaseable() to librpminspect - Check the rebaseable list in is_rebase() in librpminspect - Update TODO list - Define a new GitHub Action using utils/gate.sh - Update the README.md file - shellcheck fixes for utils/gate.sh - Use utils/find-ninja.sh to determine what ninja-build command to use - Install fedora-packager for the gate.yml GitHub Action - Remove before and after variables from gate.sh; unused - Remove unnecessary basename() calls in inspect_upstream.c - Do not assume an or bn contain strings in is_rebase() (#196) - Adjust what things run during with GitHub Actions - Add get_rpm_header_string_array() to librpminspect - Replace init_source() with get_rpm_header_string_array() in inspect_upstream.c - free() allocated output string in inspect_changelog.c on errors - s/10240/16384/ in archive_read_open_filename() call in unpack.c - Add the 'patches' inspection to librpminspect - Add uncompress_file() to librpminspect - Add filecmp() and use that in place of zcmp/bzcmp/xzcmp - README.md updates - Restrict some GitHub Actions to source code and test suite changes. - Only enable lz4 compression if ARCHIVE_FILTER_LZ4 is defined - Go ahead and wrap the rest of the libarchive compression filters - s/class Test/class /g - Make sure uncompress_file() supports xz compression - Handle more compressed file MIME types. - Add test_changedfiles.py to the test suite. - Add test_patches.py with test cases for the 'patches' inspection - flake8 fixes in the test suite - Python format fixes for test_changedfiles.py - Python format fixes in test_patches.py - More Python format fixes for test_patches.py - Remove unnecessary 'a' in DESC_PATCHES - Better explanation as to why the EmptyLicenseTag tests are skipped. - Test suite cleanup; add rebase= and same= to TestCompareSRPM - Black formatting fixes for the test suite. - Remove unused imports in test_upstream.py - Revert black fixes for test_config.py - Fix my email address in test suite source files. - Support single package URLs for before and after builds (#190) - Handle invalid/missing RPMs in get_product_release() - Use warnx(), errx(), and err() in src/rpminspect.c - Modify submit-koji-builds.sh to pick up all pkg-git branches. - Update the rpminspect.1 man page to reflect current status. - Update translation template files in po/ - Support relative directory paths for the -w option (#188) - Implement the 'virus' inspection and add test cases for it. - Update po/ template files - Python formatting fixes for test_virus.py - Update the osdeps/*/reqs.txt files. - More osdeps updates for the clamav needs - Install 'xz' for the 'style' GitHub Action - Fix a variety of small memory leaks in librpminspect - Stop the freshclam service for the Ubuntu gate job - Support slightly older versions of libclamav in inspect_virus.c - Add the 'politics' inspection to librpminspect. - In tearDown() in the test suite, call rpmfluff clean() methods - Add test_politics.py with 'politics' inspection test cases - Python black format fixes for test_politics.py - 'it should added' -> 'it should be added' - Increase the runtime timeout for test_virus.py - Install the timeout decorator on all OSes in our GitHub Actions - Install timeout-decorator with pip, not timeout - Expand librpminspect with support for SHA-224, SHA-384, and SHA-512 - Define DEFAULT_MESSAGE_DIGEST in constants.h and use that. - Replace some fprintf()/fflush() calls with warn()/warnx() calls - Rename the 'DT_NEEDED' inspection to 'dsodeps' - Rename 'LTO' inspection to 'lto' - Update translation template and fix two incorrect error strings. - Note all valid message digests in data/politics/GENERIC - Improve reporting in the patches inspection - Only fail 'changedfiles' for VERIFY and higher results - If 'removedfiles' only reports INFO messages, pass the inspection - If 'addedfiles' only reports INFO results, pass the inspection - If 'patches' only reports INFO results, pass the inspection - No need to check value of allowed in permissions_driver() - Do not let INFO results fail the 'doc' inspection. - Do not let all INFO results in 'upstream' fail the inspection - Fix RPMFILE_FLAGS handling for %config files (#221) - Still report file changes in the 'config' inspection for rebases - Correctly check RPMFILE_DOC flags in the 'doc' inspection - Include rpm/rpmfi.h insted of rpm/rpmfiles.h - Only check regular files and symlinks in the 'doc' inspection - Remove unnecessary assert() statements in filecmp() - Remove incorrect warnx() reportings based on filecmp() return value - Exclude man pages from the 'doc' inspection - Honor the -a command line option for downloads as well as runtime (#233) - Allow optional 'commands' block in the config file - Fix assorted non-critical memory leaks - Remove unnecessary warn() after a failed stat() - Additional memory fixes for the abidiff inspection (#244) - Free ELF symbol names list in find_lto_symbols() before return - Followup to the memory fixes for read_abi() and free_abi() - Prevent invalid pointer dereferencing in invalid result in 'patches' (#245) - Avoid reusing the same abi_pkg_entry_t struct in read_abi() - Allow a set of excluded path prefixes in 'pathmigration' - Fix the YAML parsing for the pathmigration block - Document the BRANCHES variable for 'make koji' - Include the .asc file when submitting new Koji builds (#191) - Include the .asc file in the spec file * Mon Oct 26 2020 David Cantrell <dcantrell(a)redhat.com> - 1.2-1 - For BUILDTYPE=release, generate the correct type of changelog - Minor logic error in submit-koji-builds.sh - Fix reading existing spec file in submit-koji-builds.sh - Bump development build version to 1.2 - Use is_rebase() in the 'upstream' inspection - Use rpmtdSetIndex() and rpmtdGetString() in get_header_value() - Add get_rpmtag_fileflags() to files.c and call from extract_rpm() - Use correct Version and Release values in download_build() - #include <rpm/rpmfiles.h> -> #include <rpm/rpmfi.h> - Add the 'config' inspection to librpminspect - Rephrase reporting messages in the 'config' inspection - Add the 'doc' inspection to librpminspect - Update TODO list - Minor updates to try and make gate.sh more reliable - Add config and doc to the inspections list in generic.yaml - Rename the '%files' inspection to 'files' (#194) - Modify baseclass.py to allow 'before' and 'after' NVR tuples - Use the after tuple to override the NVR in test_abidiff.py - Use the after tuple to override the NVR in test_upstream.py - Write rpminspect output to a file in the test suite - Add 28 test cases for the 'config' inspection - Fix the errors in the 'config' inspection found by the test suite - Fix Python problems in the test suite reported by black and flake8 - Add Makefile targets for black and flake8 - One more formatting issue reporting by Python black in test_config.py - More 'python black' formatting errors reported for test_config.py - https://mandoc.bsd.lv -> http://mandoc.bsd.lv - Add a -D/--dump-config option to rpminspect(1) - Use global reported variable in 'config' inspection - Fix reporting errors in the 'doc' inspection - Add test_doc.py with 'doc' inspection test cases - Ignore flake8 W291 in test_doc.py where we explicitly want whitepsace. - Add init_rebaseable() to librpminspect - Check the rebaseable list in is_rebase() in librpminspect - Update TODO list - Define a new GitHub Action using utils/gate.sh - Update the README.md file - shellcheck fixes for utils/gate.sh - Use utils/find-ninja.sh to determine what ninja-build command to use - Install fedora-packager for the gate.yml GitHub Action - Remove before and after variables from gate.sh; unused - Remove unnecessary basename() calls in inspect_upstream.c - Do not assume an or bn contain strings in is_rebase() (#196) - Adjust what things run during with GitHub Actions - Add get_rpm_header_string_array() to librpminspect - Replace init_source() with get_rpm_header_string_array() in inspect_upstream.c - free() allocated output string in inspect_changelog.c on errors - s/10240/16384/ in archive_read_open_filename() call in unpack.c - Add the 'patches' inspection to librpminspect - Add uncompress_file() to librpminspect - Add filecmp() and use that in place of zcmp/bzcmp/xzcmp - README.md updates - Restrict some GitHub Actions to source code and test suite changes. - Only enable lz4 compression if ARCHIVE_FILTER_LZ4 is defined - Go ahead and wrap the rest of the libarchive compression filters - s/class Test/class /g - Make sure uncompress_file() supports xz compression - Handle more compressed file MIME types. - Add test_changedfiles.py to the test suite. - Add test_patches.py with test cases for the 'patches' inspection - flake8 fixes in the test suite - Python format fixes for test_changedfiles.py - Python format fixes in test_patches.py - More Python format fixes for test_patches.py - Remove unnecessary 'a' in DESC_PATCHES - Better explanation as to why the EmptyLicenseTag tests are skipped. - Test suite cleanup; add rebase= and same= to TestCompareSRPM - Black formatting fixes for the test suite. - Remove unused imports in test_upstream.py - Revert black fixes for test_config.py - Fix my email address in test suite source files. - Support single package URLs for before and after builds (#190) - Handle invalid/missing RPMs in get_product_release() - Use warnx(), errx(), and err() in src/rpminspect.c - Modify submit-koji-builds.sh to pick up all pkg-git branches. - Update the rpminspect.1 man page to reflect current status. - Update translation template files in po/ - Support relative directory paths for the -w option (#188) - Implement the 'virus' inspection and add test cases for it. - Update po/ template files - Python formatting fixes for test_virus.py - Update the osdeps/*/reqs.txt files. - More osdeps updates for the clamav needs - Install 'xz' for the 'style' GitHub Action - Fix a variety of small memory leaks in librpminspect - Stop the freshclam service for the Ubuntu gate job - Support slightly older versions of libclamav in inspect_virus.c - Add the 'politics' inspection to librpminspect. - In tearDown() in the test suite, call rpmfluff clean() methods - Add test_politics.py with 'politics' inspection test cases - Python black format fixes for test_politics.py - 'it should added' -> 'it should be added' - Increase the runtime timeout for test_virus.py - Install the timeout decorator on all OSes in our GitHub Actions - Install timeout-decorator with pip, not timeout - Expand librpminspect with support for SHA-224, SHA-384, and SHA-512 - Define DEFAULT_MESSAGE_DIGEST in constants.h and use that. - Replace some fprintf()/fflush() calls with warn()/warnx() calls - Rename the 'DT_NEEDED' inspection to 'dsodeps' - Rename 'LTO' inspection to 'lto' - Update translation template and fix two incorrect error strings. - Note all valid message digests in data/politics/GENERIC - Improve reporting in the patches inspection - Only fail 'changedfiles' for VERIFY and higher results - If 'removedfiles' only reports INFO messages, pass the inspection - If 'addedfiles' only reports INFO results, pass the inspection - If 'patches' only reports INFO results, pass the inspection - No need to check value of allowed in permissions_driver() - Do not let INFO results fail the 'doc' inspection. - Do not let all INFO results in 'upstream' fail the inspection - Fix RPMFILE_FLAGS handling for %config files (#221) - Still report file changes in the 'config' inspection for rebases - Correctly check RPMFILE_DOC flags in the 'doc' inspection - Include rpm/rpmfi.h insted of rpm/rpmfiles.h - Only check regular files and symlinks in the 'doc' inspection - Remove unnecessary assert() statements in filecmp() - Remove incorrect warnx() reportings based on filecmp() return value - Exclude man pages from the 'doc' inspection - Honor the -a command line option for downloads as well as runtime (#233) - Allow optional 'commands' block in the config file - Fix assorted non-critical memory leaks - Remove unnecessary warn() after a failed stat() - Additional memory fixes for the abidiff inspection (#244) - Free ELF symbol names list in find_lto_symbols() before return - Followup to the memory fixes for read_abi() and free_abi() - Prevent invalid pointer dereferencing in invalid result in 'patches' (#245) - Avoid reusing the same abi_pkg_entry_t struct in read_abi() - Allow a set of excluded path prefixes in 'pathmigration' - Fix the YAML parsing for the pathmigration block - Document the BRANCHES variable for 'make koji' - Include the .asc file when submitting new Koji builds (#191) - Include the .asc file in the spec file -------------------------------------------------------------------------------- ================================================================================ rpminspect-data-fedora-1.2-1.el8 (FEDORA-EPEL-2020-29de770d20) Build deviation compliance tool data files -------------------------------------------------------------------------------- Update Information: Upgrade to rpminspect-1.2 ---- Require external programs used by some rpminspect inspections (e.g., abidiff) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2020 David Cantrell <dcantrell(a)redhat.com> - 1.2-1 - More fixes for submit-koji-builds.sh - Increment development work version to 1.2 - Rename '%files' to 'files'; add 'config' and 'doc' to inspections - Remove the politics/ subdirectory and the files in it. - Add 'politics' and 'virus' to the fedora.yaml config file. - s/DT_NEEDED/dsodeps/g in fedora.yaml - Require optional packages used by enabled inspections. - Add excluded_paths block to the pathmigration block - Adjust the pathmigration block to have 'migrated_paths' - Update rpminspect-data-fedora.spec.in - Updates to the 'make koji' process * Mon Oct 12 2020 David Cantrell <dcantrell(a)redhat.com> - 1.1-2 - Add explicit Requires for packages needed for inspections (#1887426) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1887426 - rpminspect-data-fedora is missing a dependency on libabigail https://bugzilla.redhat.com/show_bug.cgi?id=1887426 -------------------------------------------------------------------------------- ================================================================================ znc-clientbuffer-0-0.17.20190129git9766a4a.el8 (FEDORA-EPEL-2020-a6eec317e9) ZNC module for client specific buffers -------------------------------------------------------------------------------- Update Information: Rebuild for znc-1.8.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 25 Oct '20

25 Oct '20

The following Fedora EPEL 8 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-69c0102261 singularity-3.6.4-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b7912a8edb suricata-5.0.4-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e85de73cdb pdns-recursor-4.3.5-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ef54b7a2d tcpreplay-4.3.3-3.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing fastd-21-1.el8 python-markdown2-2.3.10-1.el8 Details about builds: ================================================================================ fastd-21-1.el8 (FEDORA-EPEL-2020-4f4de3554d) Fast and secure tunneling daemon -------------------------------------------------------------------------------- Update Information: Fix for CVE-2020-27638 ---- Update to version 20 -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 23 2020 Felix Kaechele <felix(a)kaechele.ca> - 21-1 - update to 21 - fixes CVE-2020-27638 * Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-3 - add conditional for sphinx on EL < 8 * Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-2 - fix build on non x86 architectures * Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-1 - update to 20 - build system switched from cmake to meson - drop OpenSSL patch (upstreamed) * Thu Aug 13 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 19-4 - update cmake macros * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sat May 23 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 19-1 - update to v19 - change upstream and source URLs to GitHub - enable LTO - add OpenSSL linker fix patch * Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 18-15 - Rebuild (json-c) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1887118 - fastd-21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1887118 [ 2 ] Bug #1890968 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1890968 [ 3 ] Bug #1890969 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1890969 [ 4 ] Bug #1890970 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=1890970 -------------------------------------------------------------------------------- ================================================================================ python-markdown2-2.3.10-1.el8 (FEDORA-EPEL-2020-6af75158dc) A fast and complete Python implementation of Markdown -------------------------------------------------------------------------------- Update Information: #### python-markdown2 2.3.10 #### * [pull #356] Don't merge sequential quotes into a single blockquote * [pull #357] use style=text-align for table alignment * [pull #360] introduce underline extra * [pull #368] Support for structured and nested values in metadata * [pull #371] add noopener to external links -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 25 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.3.10-1 - Update to 2.3.10. --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel October 2020