--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-7665c90006
2022-03-31 01:13:49.967892
--------------------------------------------------------------------------------
Name : python3.9
Product : Fedora 35
Version : 3.9.12
Release : 1.fc35
URL : https://www.python.org/
Summary : Version 3.9 of the Python interpreter
Description :
Python 3.9 package for developers.
This package exists to allow developers to test their code against an older
version of Python. This is not a full Python stack and if you wish to run
your applications with Python 3.9, see other distributions
that support it, such as CentOS or RHEL or older Fedora releases.
--------------------------------------------------------------------------------
Update Information:
Update to 3.9.12 ---- Update to 3.9.11
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 25 2022 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.9.12-1
- Update to 3.9.12
* Thu Mar 17 2022 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.9.11-1
- Update to 3.9.11
* Wed Mar 16 2022 Karolina Surma <ksurma(a)redhat.com> - 3.9.10-3
- Fix the test suite support for setuptools >= 60
Resolves: rhbz#2064734
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-7665c90006' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-445ec90e7c
2022-03-31 01:13:49.967881
--------------------------------------------------------------------------------
Name : cobbler
Product : Fedora 35
Version : 3.2.2
Release : 9.fc35
URL : https://cobbler.github.io/
Summary : Boot server configurator
Description :
Cobbler is a network install server. Cobbler supports PXE, ISO
virtualized installs, and re-installing existing Linux machines.
The last two modes use a helper tool, 'koan', that integrates with
cobbler. There is also a web interface 'cobbler-web'. Cobbler's
advanced features include importing distributions from DVDs and rsync
mirrors, kickstart templating, integrated yum mirroring, and built-in
DHCP/DNS Management. Cobbler has a XML-RPC API for integration with
other applications.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2022-0860
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 1 2022 Orion Poplawski <orion(a)nwra.com> - 3.2.2-9
- Apply fixes for CVE-2021-45082/3
- Remove BR on python3-coverage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2066593 - CVE-2022-0860 cobbler: Improper Authorization in cobbler [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2066593
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-445ec90e7c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-9661dce9e1
2022-03-31 01:13:49.967870
--------------------------------------------------------------------------------
Name : python-tcxreader
Product : Fedora 35
Version : 0.3.9
Release : 1.fc35
URL : https://github.com/alenrajsp/tcxreader
Summary : tcxreader is a parser/reader for Garmin's TCX file format
Description :
This is a simple TCX parser / reader which can read Garmin TCX file
extension files. The following data is currently parsed:
longitude, latitude, elevation, time, distance, hr_value, cadence,
watts, TPX_speed (extension). It also works well with missing data!
--------------------------------------------------------------------------------
Update Information:
New upstream's release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 23 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.9-1
- New release
* Sat Feb 12 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.8-7
- Update description
* Thu Jan 27 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.8-6
- Correct Source0
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.8-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Nov 1 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.8-4
- Use pytest macro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2067094 - python-tcxreader-0.3.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2067094
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-9661dce9e1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-a7b8b5ad7b
2022-03-31 01:13:49.967859
--------------------------------------------------------------------------------
Name : python-svgwrite
Product : Fedora 35
Version : 1.4.2
Release : 1.fc35
URL : https://github.com/mozman/svgwrite
Summary : Python library to create SVG drawings
Description :
Python library to create SVG drawings.
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 23 2022 Vojtech Trefny <vtrefny(a)redhat.com> - 1.4.1-2
- Update to 1.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2067024 - python-svgwrite-1.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2067024
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-a7b8b5ad7b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-7c0f6b5905
2022-03-31 01:13:49.967848
--------------------------------------------------------------------------------
Name : python-google-cloud-dataproc-metastore
Product : Fedora 35
Version : 1.5.0
Release : 1.fc35
URL : https://github.com/googleapis/python-dataproc-metastore
Summary : Python SDK for Google Cloud Dataproc Metastore
Description :
Dataproc Metastore is a fully managed, highly available, autoscaled,
autohealing, OSS-native metastore service that greatly simplifies technical
metadata management. Dataproc Metastore service is based on Apache Hive
metastore and serves as a critical component towards enterprise data lakes.
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 23 2022 Major Hayden <major(a)redhat.com> 1.5.0-1
- Update to 1.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2066863 - python-google-cloud-dataproc-metastore-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2066863
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-7c0f6b5905' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-023e464508
2022-03-31 01:13:49.967837
--------------------------------------------------------------------------------
Name : python-ogr
Product : Fedora 35
Version : 0.36.0
Release : 4.fc35
URL : https://github.com/packit/ogr
Summary : One API for multiple git forges
Description :
One Git library to Rule!
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.36.0 ---- New upstream release: 0.36.0 ---- New
upstream release: 0.36.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 23 2022 Frantisek Lachman <flachman(a)redhat.com> - 0.36.0-4
- rebuilt
* Tue Mar 22 2022 Frantisek Lachman <flachman(a)redhat.com> - 0.36.0-3
- rebuilt
* Tue Mar 22 2022 Frantisek Lachman <flachman(a)redhat.com> - 0.36.0-2
- rebuilt
* Wed Mar 16 2022 Packit Service <user-cont-team+packit-service(a)redhat.com> - 0.36.0-1
- `Release` class has been reworked and `create_release` has been made part of the API for `GitProject`. (#670)
- Factory method for acquiring project or service class from URL has been improved by checking just the hostname for determining the service. (#682)
* Tue Mar 8 2022 Frantisek Lachman <flachman(a)redhat.com> - 0.35.0-2
- rebuilt
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-023e464508' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-4d00e82869
2022-03-31 01:13:49.967826
--------------------------------------------------------------------------------
Name : retroarch
Product : Fedora 35
Version : 1.10.2
Release : 1.fc35
URL : https://www.libretro.com/
Summary : Cross-platform, sophisticated frontend for the libretro API.
Description :
libretro is an API that exposes generic audio/video/input callbacks. A frontend
for libretro (such as RetroArch) handles video output, audio output, input and
application lifecycle. A libretro core written in portable C or C++ can run
seamlessly on many platforms with very little to no porting effort.
While RetroArch is the reference frontend for libretro, several other projects
have used the libretro interface to include support for emulators and/or game
engines. libretro is completely open and free for anyone to use.
To download and install more libretro cores please read included README.Fedora
file:
$ xdg-open /usr/share/doc/retroarch/README.fedora.md
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 23 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.10.2-1
- chore(update): 1.10.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2066954 - retroarch-1.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2066954
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-4d00e82869' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-cbd7f6ead4
2022-03-31 01:13:49.967815
--------------------------------------------------------------------------------
Name : annobin
Product : Fedora 35
Version : 10.58
Release : 1.fc35
URL : None
Summary : Annotate and examine compiled binary files
Description :
This package contains the tools needed to annotate binary files created by
compilers, and also the tools needed to examine those annotations.
One of the tools is a plugin for GCC that records information about the
security options that were in effect when the binary was compiled.
Note - the plugin is automatically enabled in gcc builds via flags
provided by the redhat-rpm-macros package.
One of the tools is a plugin for Clang that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a plugin for LLVM that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a security checker which analyses the notes present in
annotated files and reports on any missing security options.
--------------------------------------------------------------------------------
Update Information:
Rebase to annobin 10.58 mostly to fix false positive results generated by
annocheck and resulting in: https://issues.redhat.com/browse/CS-1070
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 22 2022 Nick Clifton <nickc(a)redhat.com> - 10.58-1
- Rebase to 10.57:
- gcc-plugin: Do not issue warning messages for autoconf generated source files. (#2009958)
- Annocheck: Update documentation and fix typo in annocheck. (#2061291)
- Annocheck: Add option to enable/disable following symbolic links.
- Always identify Rust binaries, even if built on a host that does not know about Rust. (#2057737)
- Spec File: Use a different method to disable the annobin plugin (#2054571)
- Annocheck: Skip PIE anf PIC tests for GO binaries.
- gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin. (#2030667)
- gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
- Annocheck: Add an option to disable the use of debuginfod (if available).
- Annocheck: Add more glibc special file names.
- Annocheck: Skip some tests for BPF binaries.
- Annocheck: Add another glibc static library symbol. (#2043047)
- Annocheck: Skip property note test for GO binaries. (#204300)
- GCC Plugin: Do not fail if a section cannot be attached to a group.
- Annocheck: Improve detection of kernel modules.
- GCC Plugin: Only default to link-once when using gcc-12 or later. (#2039297)
- Annocheck: Add option to disable instrumentation test.
- GCC Plugin: Replace CLVC_BOOLEAN with CLVC_BIT_SET/CLVC_BIT_CLEAR.
- Annocheck: Add even more glibc function names. (#2037333)
- Annocheck: ARM: Do not fail tests that rely upon annobin notes.
- Annocheck: Extend list of known glibc functions. (#2037333)
- Annocheck: Ignore gaps that contain the _start symbol (for AArch64). (#1995224)
- Annocheck: Ignore more glibc special binaries. (#2037220)
- Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO. (#2034946)
- Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries. (#2033255)
- Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls. (#28705)
- Annocheck: Add special case for x86_64 RHEL-7 gaps. (#2031133)
- Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode. (#2030298)
- GCC Plugin: Do not record missing -mstackrealign in LTO mode. (#2030298)
- Tests: Fix fortify and debuginfod tests to use newly built annobin plugin.
- Tests: Fix gaps and stat tests to use newly built annobin plugin. (#2028063)
- Annocheck: Ignore gaps in binaries at least partial built by golang. (#2028583)
- Annocheck: Allow spaces in golang symbols.
- Annocheck: Initial deployment of libannocheck.
- gcc-plugin: Fix bug creating empty attachments.
- Annocheck: Change MAYB result to SKIP for DT_RPATH. (#2026300)
- Annocheck: Skip missing fortify/warning notes for ARM32.
- gcc-plugin: Try another fix for ppc64le section grouping. (#2023437)
- gcc-plugin: Revert 10.22 change. (#2023437)
- Annocheck: Add exception for /usr/sbin/ldconfig. (#2022973)
- Annocheck: Add a test for unicode characters in identifiers.
- gcc-plugin: Default to link-order grouping for PPC64LE. (#2016458)
- Annocheck: Do not fail if a --skip-<name> option does not match a known test.
- ldconfig-test: Skip the LTO check.
- Annocheck: Add more glibc function names.
- gcc-plugin: Fix attaching the .text section to the .text.group section.
- Complain about DT_RPATH for Fedora binaries.
- Better reporting of problems in object files. (#2013708)
- Add a requirement on llvm-libs for clang and llvm plugins. (#2014573)
- Fix configuring annocheck without gcc-plugin.
- Annocheck: Better reporting of debuginfod problems.
- Tests: Fix bugs in debuginfod test.
- Annocheck: Add tests based upon recent bug fixes.
- Annocheck: Another tweak to glibc detection code.
- Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found. (#20011438)
- Annocheck: Fix MAYB results for mixed GO/C files.
- Annocheck: Move some messages from VERBOSE to VERBOSE2.
- Annocheck: Scan zero-length tool notes.
- Annocheck: Fix covscan detected flaws.
- plugins: Add more required build options.
- Annocheck: Fix cf-prot test to fail if the CET notes are missing.
- Annocheck: Skip gaps in the .plt section.
- Plugins: Add -g option when building LLVM and Clang.
- Annocheck: Add more cases of glibc startup functions.
- Annocheck: Fix covscan detected problems.
- Annocheck: Add --profile=el8.
- gcc-plugin: Conditionalize generation of branch protection note.
- Annocheck: Ignore gaps containing NOP instructions.
- GCC Plugin: Fix detection of running inside the LTO compiler. (#2004917)
- Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
- Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
- Annocheck: Do not set CFLAGS/LDFLAGS when building. Take from environment instead.
- Annocheck: Fix exit code when tests PASS.
- Documentation: Add node for each hardening test.
- Documentation: Install online.
- Annocheck: Annote FAIL and MAYB results with URL to documentation
- Annocheck: Add --no-urls and --provide-urls options
- Annocheck: Add --help-<tool> option.
- Annocheck: Fix fuzzing detected failures.
- Annocheck: Add --profile option.
- Docs: Document --profile option and rpminspect.yaml.
- Annocheck: Skip GO/CET checks. Fix fuzzing detected failures.
- LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
- Annocheck: Fix memory corruption. (#1996963)
- Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
- Annocheck: Add linker generated function for ppc64le exceptions. (#1981410)
- LLVM Plugin: Allow checks to be selected from the command line.
- Annocheck: Examine DW_AT_producer for -flto.
- Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
- Annocheck: Add linker generated function for s390x exceptions. (#1981410)
- Annocheck: Generate MAYB results for gaps in notes covering the .text section. (#1991943)
- Annocheck: Close DWARF file descriptors once the debug info is no longer needed. (#1981410)
- LLVM Plugin: Update to build with Clang v13. (Thanks to: Tom Stellard <tstellar(a)redhat.com>)
* Thu Dec 2 2021 Nick Clifton <nickc(a)redhat.com> - 9.87-5
- Annocheck: Allow spaces in golang symbols.
* Wed Nov 10 2021 Nick Clifton <nickc(a)redhat.com> - 9.87-4
- Annocheck: Add test for the presence of unicode characters in identifiers.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-cbd7f6ead4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-d3daac0138
2022-03-31 01:13:49.967804
--------------------------------------------------------------------------------
Name : python-simple-salesforce
Product : Fedora 35
Version : 1.11.5
Release : 1.fc35
URL : https://github.com/simple-salesforce/simple-salesforce
Summary : Simple Salesforce is a basic Salesforce.com REST API client built for Python
Description :
Simple Salesforce is a basic Salesforce.com REST API client built for Python.
The goal is to provide a very low-level interface to the REST Resource and APEX
API, returning a dictionary of the API JSON response.
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 28 2022 Paul Wouters <paul.wouters(a)aiven.io> - 1.11.5-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2059313 - Review Request: python-simple-salesforce - Simple Salesforce is a basic Salesforce.com REST API client built for Python
https://bugzilla.redhat.com/show_bug.cgi?id=2059313
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-d3daac0138' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-cd371a3fc1
2022-03-31 01:13:49.967793
--------------------------------------------------------------------------------
Name : resalloc-aws
Product : Fedora 35
Version : 1.2
Release : 1.fc35
URL : https://github.com/praiskup/resalloc-aws
Summary : Resource allocator scripts for AWS
Description :
When allocating/removing a machine in AWS/EC2 from command-line, there are many
non-trivial options in the 'aws-cli' command. This project provides a
simplified wrapping command.
The 'resalloc-aws-new' script is able to (a) start a machine, (b) wait till SSH
is available and (c) run a specified playbook.
The 'resalloc-aws-delete' removes a machine started by 'resalloc-aws-new'
script.
These scripts are primarily designed to be used with 'resalloc-server', but they
might be used separately.
--------------------------------------------------------------------------------
Update Information:
tag also volumes assigned to the started instances
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 22 2022 Pavel Raiskup <praiskup(a)redhat.com> 1.2-1
- resalloc-aws-new: tag volumes started with new instances
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-cd371a3fc1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------