The following Fedora EPEL 7 Security updates need testing:
Age URL
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b6ffea264a perl-Image-ExifTool-12.16-3.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cfa4ffd25 java-latest-openjdk-16.0.1.0.9-1.rolling.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cf47c841c python-yara-4.1.0-1.el7 yara-4.1.0-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3f4ec3ba2a sympa-6.2.62-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-23a46d718e libopenmpt-0.5.8-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-314d2feba2 chromium-90.0.4430.93-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80d45ac7ec ansible-2.9.21-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-680600d10f python-impacket-0.9.22-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
haproxy18-1.8.27-1.el7
python-oletools-0.56.2-1.el7
Details about builds:
================================================================================
haproxy18-1.8.27-1.el7 (FEDORA-EPEL-2021-05a93f4f1f)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
- Backport from 1.8.27-2: Fix copy_argv for arguments that begin with hypen
(#1838319) - Backport from 1.8.27-1: Update to 1.8.27 (#1905663, #1838319)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 9 2021 Robert Scheck <robert(a)fedoraproject.org> 1.8.27-1
- Backport from 1.8.27-2: Fix copy_argv for arguments that begin
with hypen (#1838319)
- Backport from 1.8.27-1: Update to 1.8.27 (#1905663, #1838319)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1838319 - HAProxy fails to reload when local peer name starts with "-x"
https://bugzilla.redhat.com/show_bug.cgi?id=1838319
[ 2 ] Bug #1905663 - Rebase haproxy to >= 1.8.27
https://bugzilla.redhat.com/show_bug.cgi?id=1905663
--------------------------------------------------------------------------------
================================================================================
python-oletools-0.56.2-1.el7 (FEDORA-EPEL-2021-6472aac64c)
Tools to analyze Microsoft OLE2 files
--------------------------------------------------------------------------------
Update Information:
oletools 0.56.2 =============== * olevba: * updated plugin_biff to
v0.0.22 to fix a bug * olevba, mraptor: * added detection of
Workbook_BeforeClose * rtfobj: * fixed bug when OLE package class name
ends with null characters * oleid: * fixed bug in check_excel * clsid:
* added several CLSIDs related to MS Office click-to-run issue CVE-2021-27058
* added checks to ensure that all CLSIDs are uppercase
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 9 2021 Robert Scheck <robert(a)fedoraproject.org> - 0.56.2-1
- Upgrade to 0.56.2 (#1958528)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958528 - python-oletools-0.56.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958528
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-255f12d77d zarafa-7.1.14-5.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b6ffea264a perl-Image-ExifTool-12.16-3.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cfa4ffd25 java-latest-openjdk-16.0.1.0.9-1.rolling.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cf47c841c python-yara-4.1.0-1.el7 yara-4.1.0-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3f4ec3ba2a sympa-6.2.62-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-23a46d718e libopenmpt-0.5.8-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-314d2feba2 chromium-90.0.4430.93-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f17367545f fluidsynth-2.1.8-4.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80d45ac7ec ansible-2.9.21-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-680600d10f python-impacket-0.9.22-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
configsnap-0.20.0-3.el7
gnome-shell-extension-system-monitor-applet-38-12.20210507gitbc38ccf.el7
libretls-3.3.3-1.el7
rust-1.52.0-1.el7
Details about builds:
================================================================================
configsnap-0.20.0-3.el7 (FEDORA-EPEL-2021-6892560c81)
Record and compare system state
--------------------------------------------------------------------------------
Update Information:
Port configsnap to python3
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Nick Rhodes <nrhodes91(a)gmail.com> - 0.20.0-3
- Fix build issues in Koji
* Fri May 7 2021 Nick Rhodes <nrhodes91(a)gmail.com> - 0.20.0-1
- Port to python3 compatibility (PR 120)
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-system-monitor-applet-38-12.20210507gitbc38ccf.el7 (FEDORA-EPEL-2021-1b798a3a31)
A Gnome shell system monitor extension
--------------------------------------------------------------------------------
Update Information:
Updated to last upstream commits
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> - 1:38-12.20210507gitbc38ccf
- Updated to last upstream commits
- Added and updated translations
- Add units for network speeds over one gigabit
- Don't use version but check for function
- Fixed thermal sensor dropdown label rendering
- Prevent refreshes while the Shell is busy
- gpu_usage.sh improvements
- prefs: Remove unused Clutter reference
- Update prefs to support gnome 40 - RHBZ#1956148, RHBZ#1957479
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956148 - gnome-shell-extension-system-monitor-applet preferences bug: Error: No property border_width on GtkFrame
https://bugzilla.redhat.com/show_bug.cgi?id=1956148
[ 2 ] Bug #1957479 - gnome 40 compatibility change
https://bugzilla.redhat.com/show_bug.cgi?id=1957479
--------------------------------------------------------------------------------
================================================================================
libretls-3.3.3-1.el7 (FEDORA-EPEL-2021-25aab20f1c)
Port of libtls from LibreSSL to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.3.3 (#1958568)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Robert Scheck <robert(a)fedoraproject.org> 3.3.3-1
- Upgrade to 3.3.3 (#1958568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958568 - libretls-3.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958568
--------------------------------------------------------------------------------
================================================================================
rust-1.52.0-1.el7 (FEDORA-EPEL-2021-2931619998)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.52.0: - Separate output for `cargo clippy` and `cargo check`.
- Stabilized APIs See the [blog post](https://blog.rust-
lang.org/2021/05/06/Rust-1.52.0.html) and [release
notes](https://github.com/rust-
lang/rust/blob/master/RELEASES.md#version-1520-2021-05-06) for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 6 2021 Josh Stone <jistone(a)redhat.com> - 1.52.0-1
- Update to 1.52.0.
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3a1aaec707 pngcheck-2.4.0-8.el8
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b308580516 perl-Image-ExifTool-12.16-3.el8
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bbc31e5925 java-latest-openjdk-16.0.1.0.9-1.rolling.el8
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-33433b2f22 python-yara-4.1.0-1.el8 yara-4.1.0-1.el8
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a3a4866065 libopenmpt-0.5.8-1.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9be66bdb10 python-markdown2-2.4.0-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e8421e33b3 chromium-90.0.4430.93-1.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e393e03d96 screen-4.6.2-12.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80b9d6d879 python-impacket-0.9.22-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
configsnap-0.20.0-2.el8
gnome-shell-extension-system-monitor-applet-38-12.20210507gitbc38ccf.el8
libretls-3.3.3-1.el8
livecd-tools-28.0-2.el8
Details about builds:
================================================================================
configsnap-0.20.0-2.el8 (FEDORA-EPEL-2021-2397845783)
Record and compare system state
--------------------------------------------------------------------------------
Update Information:
Port configsnap to python3
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Nick Rhodes <nrhodes91(a)gmail.com> - 0.20.0-2
- Fix build issues in Koji
* Fri May 7 2021 Nick Rhodes <nrhodes91(a)gmail.com> - 0.20.0-1
- Port to python3 compatibility (PR 120)
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-system-monitor-applet-38-12.20210507gitbc38ccf.el8 (FEDORA-EPEL-2021-069a2a7a2e)
A Gnome shell system monitor extension
--------------------------------------------------------------------------------
Update Information:
Updated to last upstream commits
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> - 1:38-12.20210507gitbc38ccf
- Updated to last upstream commits
- Added and updated translations
- Add units for network speeds over one gigabit
- Don't use version but check for function
- Fixed thermal sensor dropdown label rendering
- Prevent refreshes while the Shell is busy
- gpu_usage.sh improvements
- prefs: Remove unused Clutter reference
- Update prefs to support gnome 40 - RHBZ#1956148, RHBZ#1957479
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956148 - gnome-shell-extension-system-monitor-applet preferences bug: Error: No property border_width on GtkFrame
https://bugzilla.redhat.com/show_bug.cgi?id=1956148
[ 2 ] Bug #1957479 - gnome 40 compatibility change
https://bugzilla.redhat.com/show_bug.cgi?id=1957479
--------------------------------------------------------------------------------
================================================================================
libretls-3.3.3-1.el8 (FEDORA-EPEL-2021-1fa6be3056)
Port of libtls from LibreSSL to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.3.3 (#1958568)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Robert Scheck <robert(a)fedoraproject.org> 3.3.3-1
- Upgrade to 3.3.3 (#1958568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958568 - libretls-3.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958568
--------------------------------------------------------------------------------
================================================================================
livecd-tools-28.0-2.el8 (FEDORA-EPEL-2021-11822cc291)
Tools for building live CDs
--------------------------------------------------------------------------------
Update Information:
Highlights of this new release: * Experimental AArch64 live ISO support * Fixes
around x86 UEFI support
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Neal Gompa <ngompa13(a)gmail.com> - 1:28.0-2
- Add missing dependencies (urlgrabber, dracut-live)
- Remove hfsplus-tools as a dependency for EL8+
* Sat May 8 2021 Neal Gompa <ngompa13(a)gmail.com> - 1:28.0-1
- Release 28.0 (ngompa13)
- HACKING: Fix URL for the Git repository (ngompa13)
- imgcreate/live: Add missing variable "_isDracut" (ngompa13)
- imgcreate/live: Use the right EFI binaries for x86 images (ngompa13)
- imgcreate/live: Add AArch64 support (ngompa13)
- imgcreate/live: Rework ISO creation to split x86 specific parts out (ngompa13)
- Add missing files to uninstall section of makefile (quanterium)
- Separate the errors for no ks specified and file not found (bcotton)
- Pass package_types to dnf base group_install as tuple, not set (awilliam)
- imgcreate: Allow more SquashFS compression options. (fgrose)
- BindChrootMount: Expand this class to include bind mounting of files. (fgrose)
- Obsolete osmin.img processing. (fgrose)
- live.py: harmonize xorrisofs arguments with lorax live/x86.tmpl (fgrose)
- imgcreate/kickstart: Use urlgrabber again instead of urllib (ngompa13)
- Make --livedir & --multi handling more robust. (fgrose)
- editliveos: Use USERNAME now instead of LOGNAME. (fgrose)
- livecd-iso-to-disk: Update test for 'gio' presence. (fgrose)
- live.py: Store EFI boot images in /images/. (fgrose)
- livecd-iso-to-disk: Use -E, --exit-if-exists option to udevadm settle. (fgrose)
- live.py: Update xorrisofs_options for x86 images. (fgrose)
- editliveos: Rework installing packages into image (khoidinhtrinh)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:27.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1911799 - livecd-creator fails after installing grub2-efi-x64-cdboot
https://bugzilla.redhat.com/show_bug.cgi?id=1911799
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a46e72f139 radare2-5.2.1-1.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-255f12d77d zarafa-7.1.14-5.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b6ffea264a perl-Image-ExifTool-12.16-3.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cfa4ffd25 java-latest-openjdk-16.0.1.0.9-1.rolling.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cf47c841c python-yara-4.1.0-1.el7 yara-4.1.0-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3f4ec3ba2a sympa-6.2.62-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-23a46d718e libopenmpt-0.5.8-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-314d2feba2 chromium-90.0.4430.93-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f17367545f fluidsynth-2.1.8-4.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80d45ac7ec ansible-2.9.21-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
annobin-9.71-1.el7
knot-resolver-5.3.2-1.el7
python-impacket-0.9.22-3.el7
Details about builds:
================================================================================
annobin-9.71-1.el7 (FEDORA-EPEL-2021-04c7d75012)
Annotate and examine compiled binary files
--------------------------------------------------------------------------------
Update Information:
Bug fixes, especially in the annocheck tool
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 5 2021 Nick Clifton <nickc(a)redhat.com> - 9.71-1
- timing: do not initialise the clock if the timing tool is disabled.
- gcc-plugin: Replace ICE messsages with verbose messages.
- Fix the testsuite so that it can be run in parallel.
- Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run. (#1950657)
- Obsolete annobin < 9.66-1 (bug #1949570)
- Annocheck: Improve detection of missing GNU-stack support.
- Correct a package rename (bug #1949570)
- Require docs subpackage by the other ones because of a license
- Build-requiring perl-interpreter is enough
- Fix bz1949570
- Fix anomolies reported by covscan.
- Move documentation into a sub-package.
- gcc-plugin: Use a fixed filename when running in LTO mode.
--------------------------------------------------------------------------------
================================================================================
knot-resolver-5.3.2-1.el7 (FEDORA-EPEL-2021-268b0d5c5e)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
new upstream release 5.3.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.3.2-1
- update to upstream version 5.3.2
--------------------------------------------------------------------------------
================================================================================
python-impacket-0.9.22-3.el7 (FEDORA-EPEL-2021-680600d10f)
Collection of Python classes providing access to network packets
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-31800 - #1957428, #1957427 - fix path traversal in
smbserver.py ---- fix dependencies for EPEL7 as of #1893859
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-3
- fix CVE-2021-31800 - #1957428, #1957427 during 0.9.22 lifecycle
* Sun May 2 2021 Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-2
- fix dependencies for EPEL7 as of #1893859
* Wed Apr 14 2021 Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-1
- Updated to new upstream release 0.9.22
- modernize specfile with bconds
- upstream patch for python39 compatibility (needed for FC34+)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.21-6
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957426 - CVE-2021-31800 python-impacket: Multiple path traversal vulnerabilities in smbserver.py
https://bugzilla.redhat.com/show_bug.cgi?id=1957426
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3a1aaec707 pngcheck-2.4.0-8.el8
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b308580516 perl-Image-ExifTool-12.16-3.el8
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bbc31e5925 java-latest-openjdk-16.0.1.0.9-1.rolling.el8
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-33433b2f22 python-yara-4.1.0-1.el8 yara-4.1.0-1.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a3a4866065 libopenmpt-0.5.8-1.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9be66bdb10 python-markdown2-2.4.0-1.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e8421e33b3 chromium-90.0.4430.93-1.el8
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e393e03d96 screen-4.6.2-12.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
audacious-plugins-4.0.5-4.el8
knot-resolver-5.3.2-1.el8
libQGLViewer-2.6.4-6.el8
python-impacket-0.9.22-3.el8
qsynth-0.9.2-2.el8
Details about builds:
================================================================================
audacious-plugins-4.0.5-4.el8 (FEDORA-EPEL-2021-53c566e0a6)
Plugins for the Audacious audio player
--------------------------------------------------------------------------------
Update Information:
Rebuilds of qsynth and audacious-plugins due to an unannounced soname bump in
fluidsynth. ---- Update to version 0.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Carl George <carl(a)george.computer> - 4.0.5-4
- Rebuilt for fluidsynth soname bump rhbz#1958008
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958008 - fluidsynth-libs: incompatible upgrade from libfluidsynth.so.1 to libfluidsynth.so.2 (EPEL8)
https://bugzilla.redhat.com/show_bug.cgi?id=1958008
--------------------------------------------------------------------------------
================================================================================
knot-resolver-5.3.2-1.el8 (FEDORA-EPEL-2021-8c1b6be34d)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
new upstream release 5.3.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.3.2-1
- update to upstream version 5.3.2
--------------------------------------------------------------------------------
================================================================================
libQGLViewer-2.6.4-6.el8 (FEDORA-EPEL-2021-9e807a3ab7)
Qt based OpenGL generic 3D viewer library
--------------------------------------------------------------------------------
Update Information:
Introduce libQGLViewer into EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-impacket-0.9.22-3.el8 (FEDORA-EPEL-2021-80b9d6d879)
Collection of Python classes providing access to network packets
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-31800 - #1957428, #1957427 - fix path traversal in
smbserver.py ---- Updated to new upstream release 0.9.22
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-3
- fix CVE-2021-31800 - #1957428, #1957427 during 0.9.22 lifecycle
* Sun May 2 2021 Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-2
- fix dependencies for EPEL7 as of #1893859
* Wed Apr 14 2021 Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-1
- Updated to new upstream release 0.9.22
- modernize specfile with bconds
- upstream patch for python39 compatibility (needed for FC34+)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.21-6
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957426 - CVE-2021-31800 python-impacket: Multiple path traversal vulnerabilities in smbserver.py
https://bugzilla.redhat.com/show_bug.cgi?id=1957426
--------------------------------------------------------------------------------
================================================================================
qsynth-0.9.2-2.el8 (FEDORA-EPEL-2021-53c566e0a6)
Qt based Fluidsynth GUI front end
--------------------------------------------------------------------------------
Update Information:
Rebuilds of qsynth and audacious-plugins due to an unannounced soname bump in
fluidsynth. ---- Update to version 0.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Carl George <carl(a)george.computer> - 0.9.2-2
- Rebuilt for fluidsynth soname bump rhbz#1958008
* Sun Mar 14 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.2-1
- Update to new version 0.9.2
* Sun Feb 7 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.1-1
- Update to new version 0.9.1
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Dec 23 2020 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.0-1
- Update to new version 0.9.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958008 - fluidsynth-libs: incompatible upgrade from libfluidsynth.so.1 to libfluidsynth.so.2 (EPEL8)
https://bugzilla.redhat.com/show_bug.cgi?id=1958008
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3c8a5a400b p7zip-16.02-20.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a46e72f139 radare2-5.2.1-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-255f12d77d zarafa-7.1.14-5.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b6ffea264a perl-Image-ExifTool-12.16-3.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cfa4ffd25 java-latest-openjdk-16.0.1.0.9-1.rolling.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9cf47c841c python-yara-4.1.0-1.el7 yara-4.1.0-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3f4ec3ba2a sympa-6.2.62-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-23a46d718e libopenmpt-0.5.8-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-314d2feba2 chromium-90.0.4430.93-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f17367545f fluidsynth-2.1.8-4.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80d45ac7ec ansible-2.9.21-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
powerman-2.3.26-1.el7
slurm-20.11.6-1.el7
snapd-2.50-1.el7
Details about builds:
================================================================================
powerman-2.3.26-1.el7 (FEDORA-EPEL-2021-a6b4bec0c8)
Centralized power control for clusters
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.26
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 21 2021 Dave Love <loveshack(a)fedoraproject.org> - 2.3.26-1
- New version
* Tue Sep 3 2019 Dave love <loveshack(a)fedoraproject.org> - 2.3.25-3
- Don't BR tcp_wrappers on Fedora
- BR gcc
--------------------------------------------------------------------------------
================================================================================
slurm-20.11.6-1.el7 (FEDORA-EPEL-2021-77115f5c43)
Simple Linux Utility for Resource Management
--------------------------------------------------------------------------------
Update Information:
Release of 20.11.6. Added subpackage slurm-slurmrestd now that libjwt is
available in EPEL.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.6-1
- Release of 20.11.6
* Mon Apr 12 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.5-2
- Add subpackage slurm-slurmrestd (Slurm REST API daemon)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1947878 - Request to package Slurmrestd for EPEL7 and EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1947878
--------------------------------------------------------------------------------
================================================================================
snapd-2.50-1.el7 (FEDORA-EPEL-2021-6900c9fed4)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Update to the 2.50 (latest) upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 5 2021 Maciek Borzecki <maciek.borzecki(a)gmail.com> - 2.50-1
- Release 2.50 to Fedora (RHBZ#1936784)
* Sat Apr 24 2021 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.50
- overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu
Core system
- o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug
- o/servicestate/servicemgr.go: add ensure loop for snap service
units
- wrappers/services.go: introduce EnsureSnapServices()
- snapstate: add "kernel-assets" to featureSet
- systemd: wait for zfs mounts
- overlord: make servicestate responsible to compute
SnapServiceOptions
- boot,tests: move where we write boot-flags one level up
- o/configstate: don't pass --root=/ when
masking/unmasking/enabling/disabling services
- cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to
/run
- gadget: be more flexible with kernel content resolving
- boot, cmd/snap: include extra cmdline args in debug boot-vars
output
- boot: support read/writing boot-flags from userspace/initramfs
- interfaces/pwm: add PWM interface
- tests/lib/prepare-restore.sh: clean out snapd changes and snaps
before purging
- systemd: enrich UnitStatus returned by systemd.Status() with
Installed flag
- tests: updated restore phase of spread tests - part 1
- gadget: add support for kernel command line provided by the gadget
- tests: Using GO111MODULE: "off" in spread.yaml
- features: add gate-auto-refresh-hook feature flag
- spread: ignore linux kernel upgrade in early stages for arch
preparation
- tests: use snaps-state commands and remove them from the snaps
helper
- o/configstate: fix panic with a sequence of config unset ops over
same path
- api: provide meaningful error message on connect/disconnect for
non-installed snap
- interfaces/u2f-devices: add HyperFIDO Pro
- tests: add simple sanity check for systemctl show
--property=UnitFileState for unknown service
- tests: use tests.session tool on interfaces-desktop-document-
portal test
- wrappers: install D-Bus service activation files for snapd session
tools on core
- many: add x-gvfs-hide option to mount units
- interfaces/builtin/gpio_test.go: actually test the generated gpio
apparmor
- spread: tentative workaround for arch failure caused by libc
upgrade and cgroups v2
- tests: add spread test for snap validate against store assertions
- tests: remove snaps which are not used in any test
- ci: set the accept-existing-contributors parameter for the cla-
check action
- daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and
some apiBaseSuite cosmetics)
- o/devicestate/devicemgr: register install-device hook, run if
present in install
- o/configstate/configcore: simple refactors in preparation for new
function
- tests: unifying the core20 nested suite with the core nested suite
- tests: uboot-unpacked-assets updated to reflect the real path used
to find the kernel
- daemon: switch api_test.go to daemon_test and various other
cleanups
- o/configstate/configcore/picfg.go: add hdmi_cvt support
- interfaces/apparmor: followup cleanups, comments and tweaks
- boot: cmd/snap-bootstrap: handle a candidate recovery system v2
- overlord/snapstate: skip catalog refresh when snappy testing is
enabled
- overlord/snapstate, overlord/ifacestate: move late security
profile removal to ifacestate
- snap-seccomp: fix seccomp test on ppc64el
- interfaces, interfaces/apparmor, overlord/snapstate: late removal
of snap-confine apparmor profiles
- cmd/snap-bootstrap/initramfs-mounts: move time forward using
assertion times
- tests: reset the system while preparing the test suite
- tests: fix snap-advise-command check for 429
- gadget: policy for gadget/kernel refreshes
- o/configstate: deal with no longer valid refresh.timer=managed
- interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
- cla-check: Use has-signed-canonical-cla GitHub Action
- tests: validation sets spread test
- tests: simplify the reset.sh logic by removing not needed command
- overlord/snapstate: make sure that snapd current symlink is not
removed during refresh
- tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20
- tests/lib/fde-setup-hook: also verify that fde-reveal-key key data
is base64
- o/devicestate: split off ensuring next boot goes to run mode into
new task
- tests: fix cgroup-tracking test
- boot: export helper for clearing tried system state, add tests
- cmd/snap: use less aggressive client timeouts in unit tests
- daemon: fix signing key validity timestamp in unit tests
- o/{device,hook}state: encode fde-setup-request key as base64
string
- packaging: drop dh-systemd from build-depends on ubuntu-16.04+
- cmd/snap/pack: unhide the compression option
- boot: extend set try recovery system unit tests
- cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use
secboot's implicit fallback
- o/configstate/configcore: add hdmi_timings to pi-config
- snapstate: reduce reRefreshRetryTimeout to 1/2 second
- interfaces/tee: add TEE/OPTEE interface
- o/snapstate: update validation sets assertions with auto-refresh
- vendor: update go-tpm2/secboot to latest version
- seed: ReadSystemEssentialAndBetterEarliestTime
- tests: replace while commands with the retry tool
- interfaces/builtin: update unit tests to use proper distro's
libexecdir
- tests: run the reset.sh helper and check test invariants while the
test is restored
- daemon: switch preexisting daemon_test tests to apiBaseSuite and
.req
- boot, o/devicestate: split makeBootable20 into two parts
- interfaces/docker-support: add autobind unix rules to docker-
support
- interfaces/apparmor: allow reading
/proc/sys/kernel/random/entropy_avail
- tests: use retry tool instead a loops
- tests/main/uc20-create-partitions: fix tests cleanup
- asserts: mode where Database only assumes cur time >= earliest
time
- daemon: validation sets/api tests cleanup
- tests: improve tests self documentation for nested test suite
- api: local assertion fallback when it's not in the store
- api: validation sets monitor mode
- tests: use fs-state tool in interfaces tests
- daemon: move out /v2/login|logout and errToResponse tests from
api_test.go
- boot: helper for inspecting the outcome of a recovery system try
- o/configstate, o/snapshotstate: fix handling of nil snap config on
snapshot restore
- tests: update documentation and checks for interfaces tests
- snap-seccomp: add new `close_range` syscall
- boot: revert #10009
- gadget: remove `device-tree{,-origin}` from gadget tests
- boot: simplify systems test setup
- image: write resolved-content from snap prepare-image
- boot: reseal the run key for all recovery systems, but recovery
keys only for the good ones
- interfaces/builtin/network-setup-{control,observe}: allow using
netplan directly
- tests: improve sections prepare and restore - part 1
- tests: update details on task.yaml files
- tests: revert os.query usage in spread.yaml
- boot: export bootAssetsMap as AssetsMap
- tests/lib/prepare: fix repacking of the UC20 kernel snap for with
ubuntu-core-initramfs 40
- client: protect against reading too much data from stdin
- tests: improve tests documentation - part 2
- boot: helper for setting up a try recover system
- tests: improve tests documentation - part 1
- tests/unit/go: use tests.session wrapper for running tests as a
user
- tests: improvements for snap-seccomp-syscalls
- gadget: simplify filterUpdate (thanks to Maciej)
- tests/lib/prepare.sh: use /etc/group and friends from the core20
snap
- tests: fix tumbleweed spread tests part 2
- tests: use new commands of os.query tool on tests
- o/snapshotstate: create snapshots directory on import
- tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list
- packaging: drop 99-snapd.conf via dpkg-maintscript-helper
- osutil: add SetTime() w/ 32-bit and 64-bit implementations
- interfaces/wayland: rm Xwayland Xauth file access from wayland
slot
- packaging/ubuntu-16.04/rules: turn modules off explicitly
- gadget,devicestate: perform kernel asset update for $kernel: style
refs
- cmd/recovery: small fix for `snap recovery` tab output
- bootloader/lkenv: add recovery systems related variables
- tests: fix new tumbleweed image
- boot: fix typo, should be systems
- o/devicestate: test that users.create.automatic is configured
early
- asserts: use Fetcher in AddSequenceToUpdate
- daemon,o/c/configcore: introduce users.create.automatic
- client, o/servicestate: expose enabled state of user daemons
- boot: helper for checking and marking tried recovery system status
from initramfs
- asserts: pool changes for validation-sets (#9930)
- daemon: move the last api_foo_test.go to daemon_test
- asserts: include the assertion timestamp in error message when
outside of signing key validity range
- ovelord/snapshotstate: keep a few of the last line tar prints
before failing
- gadget/many: rm, delay sector size + structure size checks to
runtime
- cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
- interfaces: add allegro-vcu and media-control interfaces
- interfaces: opengl: add Xilinx zocl bits
- mkversion: check that version from changelog is set before
overriding the output version
- many: fix new ineffassign warnings
- .github/workflows/labeler.yaml: try work-around to not sync
labels
- cmd/snap, boot: add debug set-boot-vars
- interfaces: allow reading the Xauthority file KDE Plasma writes
for Wayland sessions
- tests/main/snap-repair: test running repair assertion w/ fakestore
- tests: disable lxd tests for 21.04 until the lxd images are
published for the system
- tests/regression/lp-1910456: cleanup the /snap symlink when done
- daemon: move single snap querying and ops to api_snaps.go
- tests: fix for preseed and dbus tests on 21.04
- overlord/snapshotstate: include the last message printed by tar in
the error
- interfaces/system-observe: Allow reading /proc/zoneinfo
- interfaces: remove apparmor downgrade feature
- snap: fix unit tests on Go 1.16
- spread: disable Go modules support in environment
- tests: use new path to find kernel.img in uc20 for arm devices
- tests: find files before using cat command when checking broadcom-
asic-control interface
- boot: introduce good recovery systems, provide compatibility
handling
- overlord: add manager gadget refresh test
- tests/lib/fakestore: support repair assertions too
- github: temporarily disable action labeler due to issues with
labels being removed
- o/devicestate,many: introduce DeviceManager.preloadGadget for
EarlyConfig
- tests: enable ubuntu 21.04 for spread tests
- snap: provide a useful error message if gdbserver is not installed
- data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1
- tests/lib/prepare.sh: split reflash.sh into two parts
- packaging/opensuse: sync with openSUSE packaging
- packaging: disable Go modules in snapd.mk
- snap: add deprecation noticed to "snap run --gdb"
- daemon: add API for checking and installing available theme snaps
- tests: using labeler action to add automatically a label to run
nested tests
- gadget: improve error handling around resolving content sources
- asserts: repeat the authority cross-check in CheckSignature as
well
- interfaces/seccomp/template.go: allow copy_file_range
- o/snapstate/check_snap.go: add support for many subversions in
assumes snapdX..
- daemon: move postSnap and inst.dispatch tests to api_snaps_test.go
- wrappers: use proper paths for mocked mount units in tests
- snap: rename gdbserver option to `snap run --gdbserver`
- store: support validation sets with fetch-assertions action
- snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky
- packaging/fedora: sync with downstream packaging in Fedora
- many: add Delegate=true to generated systemd units for special
interfaces (master)
- boot: use a common helper for mocking boot assets in cache
- api: validate snaps against validation set assert from the store
- wrappers: don't generate an [Install] section for timer or dbus
activated services
- tests/nested/core20/boot-config-update: skip when snapd was not
built with test features
- o/configstate,o/devicestate: introduce devicestate.EarlyConfig
implemented by configstate.EarlyConfig
- cmd/snap-bootstrap/initramfs-mounts: fix typo in func name
- interfaces/builtin: mock distribution in fontconfig cache unit
tests
- tests/lib/prepare.sh: add another console= to the reflash magic
grub entry
- overlord/servicestate: expose dbus activators of a service
- desktop/notification: test against a real session bus and
notification server implementation
- cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
recover+install
- HACKING.md: explain how to run UC20 spread tests with QEMU
- asserts: introduce AtSequence
- overlord/devicestate: task for updating boot configs, spread test
- gadget: fix documentation/typos
- gadget: cleanup MountedFilesystem{Writer,Updater}
- gadget: use ResolvedSource in MountedFilesystemWriter
- snap/info.go: add doc-comment for SortServices
- interfaces: add an optional mount-host-font-cache plug attribute
to the desktop interface
- osutil: skip TestReadBuildGo inside sbuild
- o/hookstate/ctlcmd: add optional --pid and --apparmor-label
arguments to "snapctl is-connected"
- data/env/snapd: use quoting in case PATH contains spaces
- boot: do not observe successful boot assets if not in run mode
- tests: fix umount for snapd snap on fsck-on-boot testumount:
/run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount
- misc: little tweaks
- snap/info.go: ignore unknown daemons in SortSnapServices
- devicestate: keep log from install-mode on installed system
- seed: add LoadEssentialMeta to seed16 and allow all of its
implementations to be called multiple times
- cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
seeds
- tests/core/uc20-recovery: move recover mode helpers to generic
testslib script
- interfaces/fwupd: allow any distros to access fw files via fwupd
- store: method for fetching validation set assertion
- store: switch to v2/assertions api
- gadget: add new ResolvedContent and populate from LayoutVolume()
- spread: use full format when listing processes
- osutil/many: make all test pkgs osutil_test instead of "osutil"
- tests/unit/go: drop unused environment variables, skip coverage
- OpenGL interface: Support more Tegra libs
- gadget,overlord: pass kernelRoot to install.Run()
- tests: run unit tests in Focal instead of Xenial
- interfaces/browser-support: allow sched_setaffinity with browser-
sandbox: true
- daemon: move query /snaps/<name> tests to api_snaps_test.go
- cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair
runner
- systemd/systemd.go: support journald JSON messages with arrays for
values
- cmd: make string/error code more robust against errno leaking
- github, run-checks: do not collect coverage data on subsequent
test runs
- boot: boot config update & reseal
- o/snapshotstate: handle conflicts between snapshot forget, export
and import
- osutil/stat.go: add RegularFileExists
- cmd/snapd-generator: don't create mount overrides for snap-try
snaps inside lxc
- gadget/gadget.go: rename ubuntu-* to system-* in doc-comment
- tests: use 6 spread workers for centos8
- bootloader/assets: support injecting bootloader assets in testing
builds of snapd
- gadget: enable multi-volume uc20 gadgets in
LaidOutSystemVolumeFromGadget; rename too
- overlord/devicestate, sysconfig: do nothing when cloud-init is not
present
- cmd/snap-repair: filter repair assertions based on bases + modes
- snap-confine: make host /etc/ssl available for snaps on classic
* Fri Mar 26 2021 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.49.2
- interfaces/tee: add TEE/OPTEE interface
- o/configstate/configcore: add hdmi_timings to pi-config
- interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
- snap-seccomp: fix seccomp test on ppc64el
- interfaces{,/apparmor}, overlord/snapstate:
late removal of snap-confine apparmor profiles
- overlord/snapstate, wrappers: add dependency on usr-lib-
snapd.mount for services on core with snapd snap
- o/configstate: deal with no longer valid refresh.timer=managed
- overlord/snapstate: make sure that snapd current symlink is not
removed during refresh
- packaging: drop dh-systemd from build-depends on ubuntu-16.04+
- o/{device,hook}state: encode fde-setup-request key as base64
- snapstate: reduce reRefreshRetryTimeout to 1/2 second
- tests/main/uc20-create-partitions: fix tests cleanup
- o/configstate, o/snapshotstate: fix handling of nil snap config on
snapshot restore
- snap-seccomp: add new `close_range` syscall
* Mon Mar 8 2021 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.49.1
- tests: turn modules off explicitly in spread go unti test
- o/snapshotstate: create snapshots directory on import
- cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
- interfaces: add allegro-vcu and media-control interfaces
- interfaces: opengl: add Xilinx zocl bits
- many: fix new ineffassign warnings
- interfaces/seccomp/template.go: allow copy_file_range
- interfaces: allow reading the Xauthority file KDE Plasma writes
for Wayland sessions
- data/selinux: allow system dbus to watch
/var/lib/snapd/dbus-1
- Remove apparmor downgrade feature
- Support tmp and log dirs on Yocto/Poky
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.49-3
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1936784 - snapd-2.50 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936784
--------------------------------------------------------------------------------