[SECURITY] Fedora EPEL 7 Update: fluidsynth-2.1.8-4.el7

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2021-9eaea6f65c 2021-06-30 03:55:34.039064 -------------------------------------------------------------------------------- Name : fluidsynth Product : Fedora EPEL 7 Version : 2.1.8 Release : 4.el7 URL : http://www.fluidsynth.org/ Summary : Real-time software synthesizer Description : FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI events from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a built-in command line shell. It can also play MIDI files (note: FluidSynth was previously called IIWU Synth). -------------------------------------------------------------------------------- Update Information: Approved soname bump of fluidsynth-libs in epel7: https://meetbot.fedoraproject.org/fedora- meeting/2021-05-26/epel.2021-05-26-20.01.html -------------------------------------------------------------------------------- ChangeLog: * Tue May 4 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-4 - Makes EPEL 7 build working * Fri Apr 16 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-3 - Cleanup cmake * Fri Apr 16 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-2 - Resolves: rhbz #1921265 * Sat Apr 10 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-1 - Update to 2.1.8 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 2.1.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Aug 3 2020 Erich Eickmeyer <erich(a)ericheickmeyer.com&gt; - 2.1.1-4 - Rebuild with fixes for Fedora 33 - Resolves: rhbz #1863571 * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 2.1.1-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Feb 17 2020 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 2.1.1-1 - Update to 2.1.1 * Sun Feb 16 2020 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 2.1.0-1 - Update to 2.1.0 * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.11-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.11-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org&gt; - 1.1.11-5 - Rebuild for readline 8.0 * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.11-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Tue Sep 18 2018 Owen Taylor <otaylor(a)redhat.com&gt; - 1.1.11-3 - Disable hack for Flatpak builds - JACK isn't useful inside a sandbox, since there won't be enough privileges. * Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sun May 6 2018 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.11-1 - Update to 1.1.11 * Sun Feb 25 2018 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.10-1 - Update to 1.1.10 - Drop upstreamed patches - Drop ldconfig calls in post and postun * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Sat Jan 6 2018 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.9-1 - Update to 1.1.9 - Fix startup issue when an invalid soundfont file name is given as a command line argument RHBZ#1399896 * Mon Aug 14 2017 Pete Walter <pwalter(a)fedoraproject.org&gt; - 1.1.6-12 - Disable lash support * Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.6-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.6-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.1.6-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Jan 12 2017 Igor Gnatenko <ignatenko(a)redhat.com&gt; - 1.1.6-8 - Rebuild for readline 7.x -------------------------------------------------------------------------------- References: [ 1 ] Bug #1949538 - CVE-2021-28421 fluidsynth: use after free in sfloader/fluid_sffile.c could result in arbitrary code execution or a denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1949538 [ 2 ] Bug #1955613 - CVE-2021-21417 fluidsynth: A use after free via invalid SoundFont file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1955613 [ 3 ] Bug #1958007 - fluidsynth-libs: incompatible upgrade from libfluidsynth.so.1 to libfluidsynth.so.2 (EPEL7) https://bugzilla.redhat.com/show_bug.cgi?id=1958007 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fluidsynth' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------