[SECURITY] Fedora EPEL 6 Update: singularity-3.1.1-1.1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-c1577dae55
2019-05-30 13:18:58.543172
--------------------------------------------------------------------------------
Name : singularity
Product : Fedora EPEL 6
Version : 3.1.1
Release : 1.1.el6
URL : https://www.sylabs.io/singularity/
Summary : Application and environment virtualization
Description :
Singularity provides functionality to make portable
containers that can be used across host environments.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-11328
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1710315 - CVE-2019-11328 singularity: manipulation of file within run/singularity/instances/sing/<user>/<instance> leads to privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1710315
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update singularity' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 6 Update: libAfterImage-1.20-21.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-6389c91fe6
2019-05-30 13:18:58.543088
--------------------------------------------------------------------------------
Name : libAfterImage
Product : Fedora EPEL 6
Version : 1.20
Release : 21.el6
URL : http://www.afterstep.org/afterimage/index.php
Summary : A generic image manipulation library
Description :
libAfterImage is a generic image manipulation library. It was initially
implemented to address AfterStep Window Manager's needs for image handling,
but it evolved into extremely powerful and flexible software, suitable for
virtually any project that has needs for loading, manipulating, displaying
images, as well as writing images in files. Most of the popular image formats
are supported using standard libraries, with XCF, XPM, PPM/PNM, BMP, ICO and
TGA being supported internally.
GIF, PNG, JPEG, TIFF and SVG formats are supported via standard libraries.
Powerful text rendering capabilities included, providing support for
TrueType fonts using FreeType library, and anti-aliasing of standard fonts
from X window system.
--------------------------------------------------------------------------------
Update Information:
- Fix FTBFS (rhbz#1604550, rhbz#1675256) - Add build requires on gcc - Change
build requires from libungif-devel to giflib-devel (the libungif compat
library is no longer available since Fedora 28) - Port to giflib version 5 and
allow unbundling of giflib - Link the shared library with its dependencies and
adjust afterimage-libs and afterimage-config --libs to not list the
dependencies - Add build requires on librsvg2-devel and build the package with
SVG support - Create an -apps subpackage containing the sample programs (used to
be part of the -devel subpackage) - Do not enable the GLX extension - it
causes problems on newer Fedora releases (rhbz#1708922, rhbz#1615383 [aterm],
rhbz#1704691 [root]) - Update the license file with new FSF address
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704691 - ROOT gui is not working
https://bugzilla.redhat.com/show_bug.cgi?id=1704691
[ 2 ] Bug #1615383 - aterm won't start BadValue integer parameter out of range for operation
https://bugzilla.redhat.com/show_bug.cgi?id=1615383
[ 3 ] Bug #1604550 - libAfterImage: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1604550
[ 4 ] Bug #1708922 - The GLX extension causes problems on recent releases
https://bugzilla.redhat.com/show_bug.cgi?id=1708922
[ 5 ] Bug #1675256 - libAfterImage: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675256
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libAfterImage' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
[SECURITY] Fedora EPEL 7 Update: singularity-3.1.1-1.1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-04c7455f6a
2019-05-30 12:50:10.227273
--------------------------------------------------------------------------------
Name : singularity
Product : Fedora EPEL 7
Version : 3.1.1
Release : 1.1.el7
URL : https://www.sylabs.io/singularity/
Summary : Application and environment virtualization
Description :
Singularity provides functionality to make portable
containers that can be used across host environments.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-11328
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1710315 - CVE-2019-11328 singularity: manipulation of file within run/singularity/instances/sing/<user>/<instance> leads to privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1710315
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update singularity' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: brotli-1.0.7-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-58692af96d
2019-05-30 12:50:10.227256
--------------------------------------------------------------------------------
Name : brotli
Product : Fedora EPEL 7
Version : 1.0.7
Release : 5.el7
URL : https://github.com/google/brotli
Summary : Lossless compression algorithm
Description :
Brotli is a generic-purpose lossless compression algorithm that compresses
data using a combination of a modern variant of the LZ77 algorithm, Huffman
coding and 2nd order context modeling, with a compression ratio comparable
to the best currently available general-purpose compression methods.
It is similar in speed with deflate but offers more dense compression.
--------------------------------------------------------------------------------
Update Information:
Initial EPEL 7 package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611831 - Make brotli build on EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1611831
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update brotli' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: libAfterImage-1.20-21.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-6a28a7fe8d
2019-05-30 12:50:10.227172
--------------------------------------------------------------------------------
Name : libAfterImage
Product : Fedora EPEL 7
Version : 1.20
Release : 21.el7
URL : http://www.afterstep.org/afterimage/index.php
Summary : A generic image manipulation library
Description :
libAfterImage is a generic image manipulation library. It was initially
implemented to address AfterStep Window Manager's needs for image handling,
but it evolved into extremely powerful and flexible software, suitable for
virtually any project that has needs for loading, manipulating, displaying
images, as well as writing images in files. Most of the popular image formats
are supported using standard libraries, with XCF, XPM, PPM/PNM, BMP, ICO and
TGA being supported internally.
GIF, PNG, JPEG, TIFF and SVG formats are supported via standard libraries.
Powerful text rendering capabilities included, providing support for
TrueType fonts using FreeType library, and anti-aliasing of standard fonts
from X window system.
--------------------------------------------------------------------------------
Update Information:
- Fix FTBFS (rhbz#1604550, rhbz#1675256) - Add build requires on gcc - Change
build requires from libungif-devel to giflib-devel (the libungif compat
library is no longer available since Fedora 28) - Port to giflib version 5 and
allow unbundling of giflib - Link the shared library with its dependencies and
adjust afterimage-libs and afterimage-config --libs to not list the
dependencies - Add build requires on librsvg2-devel and build the package with
SVG support - Create an -apps subpackage containing the sample programs (used to
be part of the -devel subpackage) - Do not enable the GLX extension - it
causes problems on newer Fedora releases (rhbz#1708922, rhbz#1615383 [aterm],
rhbz#1704691 [root]) - Update the license file with new FSF address
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704691 - ROOT gui is not working
https://bugzilla.redhat.com/show_bug.cgi?id=1704691
[ 2 ] Bug #1615383 - aterm won't start BadValue integer parameter out of range for operation
https://bugzilla.redhat.com/show_bug.cgi?id=1615383
[ 3 ] Bug #1604550 - libAfterImage: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1604550
[ 4 ] Bug #1708922 - The GLX extension causes problems on recent releases
https://bugzilla.redhat.com/show_bug.cgi?id=1708922
[ 5 ] Bug #1675256 - libAfterImage: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675256
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libAfterImage' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 6 Update: libfullock-1.0.36-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-ac6ef059e8
2019-05-29 02:34:00.139776
--------------------------------------------------------------------------------
Name : libfullock
Product : Fedora EPEL 6
Version : 1.0.36
Release : 1.el6
URL : https://github.com/yahoojapan/fullock
Summary : Fast User Level LOCK (FULLOCK) library for C/C++
Description :
fullock is an open-source software for user level lock library sup-
ported by Yahoo! JAPAN. It runs on user level and provides two types
lock. One is a shared reader/writer lock which has the same function-
ality with pthread_rwlock. Another is a shared mutex lock which also
has the same functionality with pthread_mutex.
Here is primary fullock features:
1. fullock is a thread safety library which can be used for multi-
processing as well as for multi-threading.
2. fullock releases a mutex lock safely even if a lock owner
process exit with 0 in which case OS doesn't release the lock.
3. fullock provides a shared reader/writer lock. A lock owner
thread can get another lock again without deadlock.
Please visit our website and get more details at:
https://github.com/yahoojapan/fullock
--------------------------------------------------------------------------------
Update Information:
Fast User Level LOCK (FULLOCK) library for C/C++
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562526 - Review Request: libfullock - A Fast User Level LOCK (FULLOCK) library for C and C++
https://bugzilla.redhat.com/show_bug.cgi?id=1562526
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libfullock' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 6 Update: python-collectd_cvmfs-1.1.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-e572607828
2019-05-29 02:34:00.139714
--------------------------------------------------------------------------------
Name : python-collectd_cvmfs
Product : Fedora EPEL 6
Version : 1.1.0
Release : 1.el6
URL : https://github.com/cvmfs/collectd-cvmfs
Summary : Collectd plugin to monitor CvmFS Clients
Description :
Collectd module for CvmFS clients
--------------------------------------------------------------------------------
Update Information:
Latest release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-collectd_cvmfs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: libfullock-1.0.36-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-107267b624
2019-05-29 01:58:49.546337
--------------------------------------------------------------------------------
Name : libfullock
Product : Fedora EPEL 7
Version : 1.0.36
Release : 1.el7
URL : https://github.com/yahoojapan/fullock
Summary : Fast User Level LOCK (FULLOCK) library for C/C++
Description :
fullock is an open-source software for user level lock library sup-
ported by Yahoo! JAPAN. It runs on user level and provides two types
lock. One is a shared reader/writer lock which has the same function-
ality with pthread_rwlock. Another is a shared mutex lock which also
has the same functionality with pthread_mutex.
Here is primary fullock features:
1. fullock is a thread safety library which can be used for multi-
processing as well as for multi-threading.
2. fullock releases a mutex lock safely even if a lock owner
process exit with 0 in which case OS doesn't release the lock.
3. fullock provides a shared reader/writer lock. A lock owner
thread can get another lock again without deadlock.
Please visit our website and get more details at:
https://github.com/yahoojapan/fullock
--------------------------------------------------------------------------------
Update Information:
Fast User Level LOCK (FULLOCK) library for C/C++
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libfullock' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: moodle-3.1.18-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-d82b807532
2019-05-29 01:58:49.546327
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 7
Version : 3.1.18
Release : 1.el7
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
3.6.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1709073 - moodle-3.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1709073
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: python-collectd_cvmfs-1.1.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-daa89f9d15
2019-05-29 01:58:49.546315
--------------------------------------------------------------------------------
Name : python-collectd_cvmfs
Product : Fedora EPEL 7
Version : 1.1.0
Release : 1.el7
URL : https://github.com/cvmfs/collectd-cvmfs
Summary : Collectd plugin to monitor CvmFS Clients
Description :
Collectd module for CvmFS clients
--------------------------------------------------------------------------------
Update Information:
Latest release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-collectd_cvmfs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months