The following Fedora EPEL 6 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d6ec1647e3
mbedtls-2.7.12-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
copr-cli-1.82-1.el6
libapreq2-2.13-2.el6
opendmarc-1.3.2-1.el6
perl-Date-Holidays-DE-2.03-1.el6
python-copr-1.98-1.el6
singularity-3.4.1-1.2.el6
Details about builds:
================================================================================
copr-cli-1.82-1.el6 (FEDORA-EPEL-2019-2bd300951e)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
copr-cli - manpage: update API token url - support multilib projects - fix
traceback when lost connection during copr-cli build - adding cheat for copr
python-copr: - packaging fixes - python: fix API for marshmallow 3+ (#934)
---- python: fix API for marshmallow 3+ (#934)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 3 2019 Pavel Raiskup <prais...@redhat.com> 1.82-1
- manpage: update API token url
- support multilib projects
- fix traceback when lost connection during copr-cli build
- adding cheat for copr
* Tue Aug 13 2019 Pavel Raiskup <prais...@redhat.com> 1.81-1
- cli: pypi package needs to depend on 'humanize'
--------------------------------------------------------------------------------
================================================================================
libapreq2-2.13-2.el6 (FEDORA-EPEL-2019-e7cdb404e5)
Apache HTTP request library
--------------------------------------------------------------------------------
Update Information:
Patch CVE-2019-12412.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Bojan Smojver <bo...@rexursive.com> - 2.13-38
- patch CVE-2019-12412
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758454 - CVE-2019-12412 libapreq2: libapreq: null pointer
dereference in create_multipart_context() [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1758454
[ 2 ] Bug #1758453 - CVE-2019-12412 libapreq2: libapreq: null pointer
dereference in create_multipart_context() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1758453
--------------------------------------------------------------------------------
================================================================================
opendmarc-1.3.2-1.el6 (FEDORA-EPEL-2019-5393542b88)
A Domain-based Message Authentication, Reporting & Conformance (DMARC) milter
and library
--------------------------------------------------------------------------------
Update Information:
This update provides the final 1.3.2 release (previously the package was 1.3.2
beta). It also includes the previously-omitted database schema directory
(resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and
rddmarc tools, and backports proposed fixes for a [crasher
bug](https://bugzilla.redhat.com/show_bug.cgi?id=1673293) and [security issue
CVE-2019-16378](https://bugzilla.redhat.com/show_bug.cgi?id=1753081) from
upstream submissions.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Adam Williamson <awill...@redhat.com> - 1.3.2-1
- Update to 1.3.2 final (belatedly)
- Drop patches merged upstream
- Backport proposed fix for upstream #227 (RHBZ #1673293)
- Backport proposed fix for CVE-2019-16378 (RHBZ #1753082 and #1753081)
- Ship database schema and rddmarc bits (#1415753)
* Thu Jul 25 2019 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.20
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.19
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobr...@fedoraproject.org> - 1.3.2-0.17
- Escape macros in %changelog
* Thu Feb 8 2018 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <rel...@fedoraproject.org> -
1.3.2-0.13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415753 - schema.mysql not in rpm
https://bugzilla.redhat.com/show_bug.cgi?id=1415753
[ 2 ] Bug #1673293 - libopendmarc crashes on certain malformed records
https://bugzilla.redhat.com/show_bug.cgi?id=1673293
[ 3 ] Bug #1753082 - CVE-2019-16378 opendmarc: Signature-bypass vulnerability
with multiple 'From' addresses [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1753082
--------------------------------------------------------------------------------
================================================================================
perl-Date-Holidays-DE-2.03-1.el6 (FEDORA-EPEL-2019-67e1c8c8d8)
Perl module to determine German holidays
--------------------------------------------------------------------------------
Update Information:
Date::Holidays::DE 2.03 ======================= * Added International
Childrens Day for Thueringen starting in 2019
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 2 2019 Jitka Plesnikova <jples...@redhat.com> - 2.03-1
- 2.03 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752411 - perl-Date-Holidays-DE-2.03 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752411
--------------------------------------------------------------------------------
================================================================================
python-copr-1.98-1.el6 (FEDORA-EPEL-2019-2bd300951e)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
copr-cli - manpage: update API token url - support multilib projects - fix
traceback when lost connection during copr-cli build - adding cheat for copr
python-copr: - packaging fixes - python: fix API for marshmallow 3+ (#934)
---- python: fix API for marshmallow 3+ (#934)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 3 2019 Pavel Raiskup <prais...@redhat.com> 1.98-1
- enable dynamic buildrequires on F31+
- drop comments after %endif
* Thu Sep 26 2019 Pavel Raiskup <prais...@redhat.com> 1.97-1
- python: fix API for marshmallow 3+ (#934)
- frontend, cli, python: support multilib projects (#1)
--------------------------------------------------------------------------------
================================================================================
singularity-3.4.1-1.2.el6 (FEDORA-EPEL-2019-64f83ca2ce)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Add PR #4522 to fix sandbox rootless builds ---- Update to upstream 3.4.0-1,
keeping only config fakeroot cli PR #4346
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 26 2019 Dave Dykstra <d...@fedoraproject.org> - 3.4.1-1.2
- Add PR #4522 to fix sandbox rootless builds
* Mon Sep 23 2019 Dave Dykstra <d...@fedoraproject.org> - 3.4.1-1.1
- Update to upstream 3.4.0-1, keeping only config fakeroot cli PR #4346
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1753387 - singularity-3.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1753387
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
