[EPEL-devel] Fedora EPEL 7 updates-testing report

2023-04-12 Thread updates 
The following Fedora EPEL 7 Security updates need testing:
 Age  URL
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4821639cb4   
chromium-112.0.5615.49-1.el7


The following builds have been pushed to Fedora EPEL 7 updates-testing

HepMC3-3.2.6-1.el7
libyang-2.0.164-2.el7

Details about builds:



 HepMC3-3.2.6-1.el7 (FEDORA-EPEL-2023-aeea6c4a15)
 C++ Event Record for Monte Carlo Generators

Update Information:

HepMC3 3.2.6

ChangeLog:

* Wed Apr 12 2023 Mattias Ellert  - 3.2.6-1
- Update to version 3.2.6
- Update license tag for license change (GPLv3 to LGPLv3)
- New protobuf IO subpackage
- Soname bump for libHepMC3search in HepMC3-search subpackage
- Drop patches accepted upstream or previously backported
* Tue Mar 21 2023 Mattias Ellert  - 3.2.5-7
- Rebuild for root 6.28
- Fix Python 3.12 build
* Wed Jan 18 2023 Fedora Release Engineering  - 
3.2.5-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jul 20 2022 Fedora Release Engineering  - 
3.2.5-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint  - 3.2.5-4
- Rebuilt for Python 3.11
* Tue Apr  5 2022 Mattias Ellert  - 3.2.5-3
- Rebuild for root 6.26




 libyang-2.0.164-2.el7 (FEDORA-EPEL-2023-fca191b57e)
 YANG data modeling language library

Update Information:

Fix CVE-2023-26916

ChangeLog:

* Tue Apr 11 2023 Tomas Korbar  - 2.0.164-2
- Fix CVE-2023-26916
- Resolves: rhbz#2184383

References:

  [ 1 ] Bug #2184383 - CVE-2023-26916 libyang: NULL pointer dereference via the 
function lys_parse_mem at lys_parse_mem.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2184383


___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

[EPEL-devel] Fedora EPEL 8 updates-testing report

2023-04-12 Thread updates 
The following Fedora EPEL 8 Security updates need testing:
 Age  URL
  27  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e00c3d01e   
cutter-re-2.2.0-1.el8 rizin-0.5.1-1.el8
   6  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b06600ebc7   
bzip3-1.3.0-1.el8


The following builds have been pushed to Fedora EPEL 8 updates-testing

HepMC3-3.2.6-1.el8
chromium-112.0.5615.49-1.el8
gtk-layer-shell-0.8.1-1.el8
indent-2.2.13-2.el8
livesys-scripts-0.4.3-1.el8
python-twisted-19.10.0-4.el8
rednotebook-2.29.4-1.el8
texlive-extension-20180414-11.el8

Details about builds:



 HepMC3-3.2.6-1.el8 (FEDORA-EPEL-2023-7b2a8f010c)
 C++ Event Record for Monte Carlo Generators

Update Information:

HepMC3 3.2.6

ChangeLog:

* Wed Apr 12 2023 Mattias Ellert  - 3.2.6-1
- Update to version 3.2.6
- Update license tag for license change (GPLv3 to LGPLv3)
- New protobuf IO subpackage
- Soname bump for libHepMC3search in HepMC3-search subpackage
- Drop patches accepted upstream or previously backported




 chromium-112.0.5615.49-1.el8 (FEDORA-EPEL-2023-8c1df52e87)
 A WebKit (Blink) powered web browser that Google doesn't want you to use

Update Information:

update to 112.0.5615.49. Fixes the following security issues:  CVE-2023-1528
CVE-2023-1529 CVE-2023-1530 CVE-2023-1531 CVE-2023-1532 CVE-2023-1533
CVE-2023-1534, CVE-2023-25193

ChangeLog:

* Wed Apr  5 2023 Than Ngo  - 112.0.5615.49-1
- update to 112.0.5615.49
- fix #2184142, Small fonts in menus

References:

  [ 1 ] Bug #2173489 - CVE-2023-25193 chromium: harfbuzz: allows attackers to 
trigger O(n^2) growth via consecutive marks [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2173489
  [ 2 ] Bug #2184710 - CVE-2023-1810 CVE-2023-1811 CVE-2023-1812 CVE-2023-1813 
CVE-2023-1814 CVE-2023-1815 CVE-2023-1816 CVE-2023-1817 CVE-2023-1818 
CVE-2023-1819 CVE-2023-1820 CVE-2023-1821 CVE-2023-1822 CVE-2023-1823 chromium: 
various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2184710




 gtk-layer-shell-0.8.1-1.el8 (FEDORA-EPEL-2023-1aaf80d094)
 Library to create components for Wayland using the Layer Shell

Update Information:

Update to latest version

ChangeLog:

* Wed Apr 12 2023 Artem Polishchuk  - 0.8.1-1
- chore: Update to 0.8.1
* Thu Jan 19 2023 Fedora Release Engineering  - 
0.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild




 indent-2.2.13-2.el8 (FEDORA-EPEL-2023-0147b726cb)
 A GNU program for formatting C code

Update Information:

This release fixes few buffer oveflows and uses after free. It also updates
Catalan, Croatian, French, Galician, German, Greek, Hungarian, Indonesian,
Italian, Romanian, Serbian, Spanish, Turkish, and Ukrainian translations. It
adds Portuguese translation.

ChangeLog:

* Wed Apr 12 2023 Petr Pisar  - 2.2.13-2
- Check for setlocale() at configure time
* Tue Mar 21 2023 Petr Pisar  - 2.2.13-1
- 2.2.13 bump

References:

  [ 1 ] Bug #2180115 - indent-2.2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2180115




 livesys-scripts-0.4.3-1.el8 (FEDORA-EPEL-2023-c333940461)
 Scripts for auto-configuring live media during boot

Update Information:

Another fix for making the desktop icon for the installer work in Xfce  
This update fixes the anaconda (installer) icon displaying a warning when
clicked on Xfce live images.

[EPEL-devel] Re: dnf failing to pull from epel - HTTP 404

2023-04-12 Thread Laura Flores 
Thank you, Todd!

On Wed, Apr 12, 2023 at 12:54 PM Todd Zullinger  wrote:

> Laura Flores wrote:
> > Link to the thread:
> >
> https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/SN2KUYRQRVPN5YD25LQRCRTOXGH2TUDH/
>
> I think https://pagure.io/fedora-infrastructure/issue/11233
> is tracking this.  It looks like the problematic system
> should be out of the mirror lists, which I suspect should
> prevent the issue from reaching end-users.
>
> That would take effect after the downstream mirrors sync
> after the change to remove ib01.
>
> (I'm not directly involved, so I could be misinterpreting
> the status.)
>
> --
> Todd
> ___
> epel-devel mailing list -- epel-devel@lists.fedoraproject.org
> To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>


-- 

Laura Flores

She/Her/Hers

Software Engineer, Ceph Storage 

Chicago, IL

lflo...@ibm.com | lflo...@redhat.com 
M: +17087388804
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

[EPEL-devel] Re: dnf failing to pull from epel - HTTP 404

2023-04-12 Thread Todd Zullinger 
Laura Flores wrote:
> Link to the thread:
> https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/SN2KUYRQRVPN5YD25LQRCRTOXGH2TUDH/

I think https://pagure.io/fedora-infrastructure/issue/11233
is tracking this.  It looks like the problematic system
should be out of the mirror lists, which I suspect should
prevent the issue from reaching end-users.

That would take effect after the downstream mirrors sync
after the change to remove ib01.

(I'm not directly involved, so I could be misinterpreting
the status.)

-- 
Todd


signature.asc
Description: PGP signature
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

[EPEL-devel] Re: dnf failing to pull from epel - HTTP 404

2023-04-12 Thread Laura Flores 
Link to the thread:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/SN2KUYRQRVPN5YD25LQRCRTOXGH2TUDH/

On Wed, Apr 12, 2023 at 12:05 PM Laura Flores  wrote:

> Hello, does anyone have updates on this thread?
>
> Thanks,
> Laura
>
> --
>
> Laura Flores
>
> She/Her/Hers
>
> Software Engineer, Ceph Storage 
>
> Chicago, IL
>
> lflo...@ibm.com | lflo...@redhat.com 
> M: +17087388804
>
>
>

-- 

Laura Flores

She/Her/Hers

Software Engineer, Ceph Storage 

Chicago, IL

lflo...@ibm.com | lflo...@redhat.com 
M: +17087388804
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

[EPEL-devel] Re: dnf failing to pull from epel - HTTP 404

2023-04-12 Thread Laura Flores 
Hello, does anyone have updates on this thread?

Thanks,
Laura

-- 

Laura Flores

She/Her/Hers

Software Engineer, Ceph Storage 

Chicago, IL

lflo...@ibm.com | lflo...@redhat.com 
M: +17087388804
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue