Fedora EPEL 6 Update: distribution-gpg-keys-1.30-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-60fe61f021
2019-04-30 00:39:13.173009
--------------------------------------------------------------------------------
Name : distribution-gpg-keys
Product : Fedora EPEL 6
Version : 1.30
Release : 1.el6
URL : https://github.com/xsuchy/distribution-gpg-keys
Summary : GPG keys of various Linux distributions
Description :
GPG keys used by various Linux distributions to sign packages.
--------------------------------------------------------------------------------
Update Information:
- Deleted old Copr keys and added new Copr keys - add brave key - Add remi 2019
key ---- Release together with `mock-core-configs-30.1` which has these
changes: - Added repositories for Fedora 30 (and Fedora 31 repos now points to
rawhide). - distribution-gpg-keys for rhel8beta is being installed directly
from Koji, because EPEL8 does not exist yet. - Fedora 27 config has been moved
to `eol` directory. - `gpgcheck` is enabled for testing and debuginfo now. -
Fedoras 29+ have included modular repos now. Additionally, there is now
`module_platform_id` defined in these configs, which allows you to install
modules without errors. ## Mock new features: - All mock configs are parsed
and evaluated by [Jinja2](http://jinja.pocoo.org/). Here is small example how it
can be used: ``` # define your own config variable config_opts['fedora_number']
= '30' config_opts['root'] = 'fedora-{{ fedora_number }}-x86_64'
config_opts['dist'] = 'fc{{ fedora_number }}' ``` Another - more general -
example from `site-defaults.cfg`: ``` # You can use jinja templates, e.g.: #
config_opts['foobar'] = '{{ foo }} bar' # which will result in 'bar bar' (using
value defined few lines above) # more complicated example: # config_opts['foo']
= "{{ plugin_conf['package_state_enable'] }}" # which will result in "True" ```
This feature can simplify mock's configs in the future. I intentionally did not
use it now, because it is too fresh. Please experiment with this feature on your
own and report any error or issues. If there would be none, then I will start
using it in main configs. - Use 32-bit personality for armv7*/armv8* builds. -
You can now specify decompress program for root_cache. This is new default in
`site-defaults.cfg` [GH#230](https://github.com/rpm-software-
management/mock/issues/230): ``` ## decompress_program is needed only for
bsdtar, otherwise `compress_program` with `-d` is used ## for bsdtar use
"unpigz" or "gunzip" #
config_opts['plugin_conf']['root_cache_opts']['decompress_program'] = "pigz" ```
## Bugfixes: - Added Scientific Linux on the list of RHEL clones
[GH#228](https://github.com/rpm-software-management/mock/issues/228) - Fixed
exclude pattern for BSDTar [GH#219](https://github.com/rpm-software-
management/mock/issues/219) - There used to be living part of `site-
defaults.cfg`: ``` config_opts['bootstrap_chroot_additional_packages'] = []
config_opts['bootstrap_module_enable'] = []
config_opts['bootstrap_module_install'] = [] ``` This is now commented out by
default, and the defaults are set in mock code. You can still override it in
`site-defaults.cfg`.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update distribution-gpg-keys' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
[SECURITY] Fedora EPEL 6 Update: drupal7-7.65-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-62f9745b71
2019-04-30 00:39:13.172995
--------------------------------------------------------------------------------
Name : drupal7
Product : Fedora EPEL 6
Version : 7.65
Release : 1.el6
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/drupal/releases/7.65 -
https://www.drupal.org/SA-CORE-2019-004
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693078 - CVE-2019-6341 drupal7: cross-site scripting vulnerability in module/subsystem
https://bugzilla.redhat.com/show_bug.cgi?id=1693078
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
[SECURITY] Fedora EPEL 6 Update: guacamole-server-1.0.0-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-06b243cced
2019-04-30 00:39:13.172911
--------------------------------------------------------------------------------
Name : guacamole-server
Product : Fedora EPEL 6
Version : 1.0.0
Release : 1.el6
URL : http://guac-dev.org/
Summary : Server-side native components that form the Guacamole proxy
Description :
Guacamole is an HTML5 remote desktop gateway.
Guacamole provides access to desktop environments using remote desktop protocols
like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing
access to multiple desktops through a web browser.
No browser plugins are needed, and no client software needs to be installed. The
client requires nothing more than a web browser supporting HTML5 and AJAX.
The main web application is provided by the "guacamole-client" package.
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.0, which includes fixes for CVE-2018-1340
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669122 - CVE-2018-1340 guacamole-server: guacamole: Secure flag missing from Apache Guacamole session cookie [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1669122
[ 2 ] Bug #1668502 - Please update Apache Guacamole to version 1.0
https://bugzilla.redhat.com/show_bug.cgi?id=1668502
[ 3 ] Bug #1669121 - CVE-2018-1340 guacamole-server: guacamole: Secure flag missing from Apache Guacamole session cookie [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1669121
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update guacamole-server' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
[SECURITY] Fedora EPEL 6 Update: python3-jinja2-2.8.1-2.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-9f732040bd
2019-04-29 01:30:29.061575
--------------------------------------------------------------------------------
Name : python3-jinja2
Product : Fedora EPEL 6
Version : 2.8.1
Release : 2.el6
URL : http://jinja.pocoo.org/
Summary : General purpose template engine
Description :
Jinja2 is a template engine written in pure Python. It provides a
Django inspired non-XML syntax but supports inline expressions and an
optional sandboxed environment.
If you have any exposure to other text-based template languages, such
as Smarty or Django, you should feel right at home with Jinja2. It's
both designer and developer friendly by sticking to Python's
principles and adding functionality useful for templating
environments.
--------------------------------------------------------------------------------
Update Information:
Update to 2.8.1 Security fix for CVE-2016-10745 Security fix for
CVE-2019-10906
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1698345 - CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format
https://bugzilla.redhat.com/show_bug.cgi?id=1698345
[ 2 ] Bug #1698839 - CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape
https://bugzilla.redhat.com/show_bug.cgi?id=1698839
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-jinja2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
Fedora EPEL 6 Update: python-whoosh-2.7.4-3.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-7569fe8565
2019-04-29 01:30:29.061566
--------------------------------------------------------------------------------
Name : python-whoosh
Product : Fedora EPEL 6
Version : 2.7.4
Release : 3.el6
URL : http://pythonhosted.org/Whoosh/
Summary : Fast, pure-Python full text indexing, search, and spell checking library
Description :
Whoosh is a fast, featureful full-text indexing and searching library
implemented in pure Python. Programmers can use it to easily add search
functionality to their applications and websites. Every part of how Whoosh
works can be extended or replaced to meet your needs exactly.
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.4 Build for python 3.4
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-whoosh' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
Fedora EPEL 6 Update: geolite2-20190409-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-47de3e10ff
2019-04-29 01:30:29.061556
--------------------------------------------------------------------------------
Name : geolite2
Product : Fedora EPEL 6
Version : 20190409
Release : 1.el6
URL : https://dev.maxmind.com/geoip/geoip2/geolite2/
Summary : Free IP geolocation databases
Description :
GeoLite2 databases are free IP geolocation databases comparable to, but less
accurate than, MaxMind's GeoIP2 databases. This product includes GeoLite2 data
created by MaxMind, available from http://www.maxmind.com.
--------------------------------------------------------------------------------
Update Information:
- Latest upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update geolite2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
Fedora EPEL 6 Update: gsi-openssh-5.3p1-19.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-16c4cb67aa
2019-04-29 01:30:29.061531
--------------------------------------------------------------------------------
Name : gsi-openssh
Product : Fedora EPEL 6
Version : 5.3p1
Release : 19.el6
URL : http://www.openssh.com/portable.html
Summary : An implementation of the SSH protocol with GSI authentication
Description :
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features.
This version of OpenSSH has been modified to support GSI authentication.
This package includes the core files necessary for both the gsissh
client and server. To make this package useful, you should also
install gsi-openssh-clients, gsi-openssh-server, or both.
--------------------------------------------------------------------------------
Update Information:
Sync with openssh package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gsi-openssh' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
Fedora EPEL 6 Update: ninja-build-1.7.2-3.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-76763433e3
2019-04-29 01:30:29.061500
--------------------------------------------------------------------------------
Name : ninja-build
Product : Fedora EPEL 6
Version : 1.7.2
Release : 3.el6
URL : http://martine.github.com/ninja/
Summary : A small build system with a focus on speed
Description :
Ninja is a small build system with a focus on speed. It differs from other
build systems in two major respects: it is designed to have its input files
generated by a higher-level build system, and it is designed to run builds as
fast as possible.
--------------------------------------------------------------------------------
Update Information:
Initial EL6 package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695759 - ninja-build: build for EPEL6
https://bugzilla.redhat.com/show_bug.cgi?id=1695759
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ninja-build' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
Fedora EPEL 6 Update: clamav-unofficial-sigs-5.6.2-7.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-8e3866f11c
2019-04-29 01:30:29.061450
--------------------------------------------------------------------------------
Name : clamav-unofficial-sigs
Product : Fedora EPEL 6
Version : 5.6.2
Release : 7.el6
URL : https://github.com/extremeshok/clamav-unofficial-sigs
Summary : Scripts to download unofficial clamav signatures
Description :
This package contains scripts and configuration files
that provide the capability to download, test, and
update the 3rd-party signature databases provide by
Sanesecurity, SecuriteInfo, MalwarePatrol, OITC,
INetMsg and ScamNailer.
--------------------------------------------------------------------------------
Update Information:
Add patch proposal for RHEL/CentOS 6 to use /sbin/service from Robert Scheck
<robert(a)fedoraproject.org> ---- Fix spec for el6 build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1683646 - Please build latest clamav-unofficial-sigs for EPEL 6
https://bugzilla.redhat.com/show_bug.cgi?id=1683646
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav-unofficial-sigs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months
[SECURITY] Fedora EPEL 7 Update: python3-jinja2-2.8.1-2.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-ae064347d8
2019-04-29 00:52:09.588720
--------------------------------------------------------------------------------
Name : python3-jinja2
Product : Fedora EPEL 7
Version : 2.8.1
Release : 2.el7
URL : http://jinja.pocoo.org/
Summary : General purpose template engine
Description :
Jinja2 is a template engine written in pure Python. It provides a
Django inspired non-XML syntax but supports inline expressions and an
optional sandboxed environment.
If you have any exposure to other text-based template languages, such
as Smarty or Django, you should feel right at home with Jinja2. It's
both designer and developer friendly by sticking to Python's
principles and adding functionality useful for templating
environments.
--------------------------------------------------------------------------------
Update Information:
Update to 2.8.1 Security fix for CVE-2016-10745 Security fix for
CVE-2019-10906
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1698345 - CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format
https://bugzilla.redhat.com/show_bug.cgi?id=1698345
[ 2 ] Bug #1698839 - CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape
https://bugzilla.redhat.com/show_bug.cgi?id=1698839
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-jinja2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 11 months