Fedora EPEL 8 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 8 Security updates need testing:
Age URL
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-3a6675bd1a chromium-102.0.5005.115-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-59cdfb46c4 glances-3.2.5-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-ac75a8517c exim-4.95-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
copr-cli-1.101-1.el8
copr-messaging-0.6-1.el8
golang-x-net-0-0.60.20200807gitab34263.el8
golang-x-text-0.3.7-1.el8
kiwi-9.24.44-1.el8
python-copr-1.120-1.el8
python-rosdep-0.22.1-1.el8
rebase-helper-0.27.0-1.el8
strongswan-5.9.6-1.el8
testcloud-0.8.0-1.el8
Details about builds:
================================================================================
copr-cli-1.101-1.el8 (FEDORA-EPEL-2022-6fe6d98425)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
copr-cli - removed a depraceted build method `copr-cli buildfedpkg' python-
copr - disable network in Python API by default, this mimics what is done in
copr-cli for a long time
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.101-1
- Remove depraceted method `copr-cli buildfedpkg'
--------------------------------------------------------------------------------
================================================================================
copr-messaging-0.6-1.el8 (FEDORA-EPEL-2022-dbf2a63e55)
Abstraction for Copr messaging listeners/publishers
--------------------------------------------------------------------------------
Update Information:
copr-backend - Consolidate the two hitcounter scripts - Dump Resalloc ticket ID
and hostname to backend.log - Automatically restart services in %%post - Don't
count RPMs downloaded from Mock - Attempt to sign multiple times - Try multiple
attempts of creating GPG keys copr-dist-git - Don't setgid(apache) while
importing ("uploading") - More obvious "locking" importer proctitle copr-
frontend - Start logging important events - Change logging formatter to show
also flask.g.user - APIv3 support for chroot_denylist - Restrict the CoprDir
names to <copr>:custom:<suffix> - Don't require trailing slash in APIv3
/package/list - Don't hide CoprDir buttons in Builds web-ui - New command 'copr-
frontend chroots-template' - More understandable Pagure badges - Detect
ClientDisconnected errors copr-messaging - Adapt to the changed stomppy API
copr-rpmbuild - Fix make_srpm with new git - Define copr-specific macros also
for SRPM builds - SCM method to clone recursively python-copr-common - Allow
SafeRequest's timeout to be specified
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.6-1
- Adapt to the changed stomppy API
--------------------------------------------------------------------------------
================================================================================
golang-x-net-0-0.60.20200807gitab34263.el8 (FEDORA-EPEL-2022-46b9d78e30)
Go supplementary network libraries
--------------------------------------------------------------------------------
Update Information:
## golang-x-text - Update to 0.3.7. Fixes rhbz#1945761. - Mitigate
CVE-2021-38561 (rhbz#2100495). ## golang-x-net - Rebuild to mitigate
CVE-2021-38561 (rhbz#2100495).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2022 Maxwell G <gotmax(a)e.email> - 0-0.60.20200807gitab34263
- Rebuild to mitigate CVE-2021-38561 (rhbz#2100495).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2100495 - CVE-2021-38561 golang: out-of-bounds read in golang.org/x/text/language leads to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=2100495
--------------------------------------------------------------------------------
================================================================================
golang-x-text-0.3.7-1.el8 (FEDORA-EPEL-2022-46b9d78e30)
Go text processing support
--------------------------------------------------------------------------------
Update Information:
## golang-x-text - Update to 0.3.7. Fixes rhbz#1945761. - Mitigate
CVE-2021-38561 (rhbz#2100495). ## golang-x-net - Rebuild to mitigate
CVE-2021-38561 (rhbz#2100495).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2022 Maxwell G <gotmax(a)e.email> - 0.3.7-1
- Update to 0.3.7. Fixes rhbz#1945761.
- Mitigate CVE-2021-38561 (rhbz#2100495).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2100495 - CVE-2021-38561 golang: out-of-bounds read in golang.org/x/text/language leads to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=2100495
--------------------------------------------------------------------------------
================================================================================
kiwi-9.24.44-1.el8 (FEDORA-EPEL-2022-176fbe523e)
Flexible operating system image builder
--------------------------------------------------------------------------------
Update Information:
This update fixes the following issues: * Building CentOS/RHEL 8 images on
CentOS/RHEL 9 hosts didn't work due to a missing `rpm --rebuilddb` between
bootstrap and image install phases. * Configuring the SELinux policy for
CentOS/RHEL 7 images stopped working due to adaptations to correctly apply
labels, a workaround is now implemented. * The DNF versionlock plugin is
forcefully disabled to prevent issues at bootstrap phase.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 9.24.44-1
- Update to 9.24.44 (RH#2100806)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2100806 - kiwi-9.24.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2100806
--------------------------------------------------------------------------------
================================================================================
python-copr-1.120-1.el8 (FEDORA-EPEL-2022-6fe6d98425)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
copr-cli - removed a depraceted build method `copr-cli buildfedpkg' python-
copr - disable network in Python API by default, this mimics what is done in
copr-cli for a long time
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.120-1
- Disable network on builders by default
--------------------------------------------------------------------------------
================================================================================
python-rosdep-0.22.1-1.el8 (FEDORA-EPEL-2022-f2d393459d)
ROS System Dependency Installer
--------------------------------------------------------------------------------
Update Information:
Update to `rosdep` 0.22.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2022 Scott K Logan <logans(a)cottsay.net> - 0.22.1-1
- Update to 0.22.1 (rhbz#2100935)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2100935 - python-rosdep-0.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2100935
--------------------------------------------------------------------------------
================================================================================
rebase-helper-0.27.0-1.el8 (FEDORA-EPEL-2022-c5428b38a6)
The tool that helps you to rebase your package to the latest version
--------------------------------------------------------------------------------
Update Information:
**News in version 0.27.0:** - Added support for `rpmuncompress` being used by
`rpm` >= 4.18 - Replaced hardcoded references to *master* branch - Fixed typos
in `%preun`, `%postun` and `%generate_buildrequires` section names - Fixed
parsing of macros with multiline bodies in `%dump` output - Fixed parsing issue
in **rpmdiff** checker - **rebase-helper** now removes any existing submodule
configuration from upstream tarballs before rebasing to avoid errors due to
submodules not being checked out - **rebase-helper** now warns about a potential
rename that can't be handled automatically, such as `README` to `README.md` -
**rebase-helper** is now able to handle unexpected `git rebase` errors
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2022 Packit <hello(a)packit.dev> - 0.27.0-1
News in version 0.27.0:
- Added support for `rpmuncompress` being used by `rpm` >= 4.18
- Replaced hardcoded references to *master* branch
- Fixed typos in `%preun`, `%postun` and `%generate_buildrequires` section names
- Fixed parsing of macros with multiline bodies in `` output
- Fixed parsing issue in **rpmdiff** checker
- **rebase-helper** now removes any existing submodule configuration from upstream tarballs before rebasing to avoid errors due to submodules not being checked out
- **rebase-helper** now warns about a potential rename that can't be handled automatically, such as `README` to `README.md`
- **rebase-helper** is now able to handle unexpected `git rebase` errors
--------------------------------------------------------------------------------
================================================================================
strongswan-5.9.6-1.el8 (FEDORA-EPEL-2022-3ae7eab0c3)
An OpenSource IPsec-based VPN and TNC solution
--------------------------------------------------------------------------------
Update Information:
- [Changelog](https://github.com/strongswan/strongswan/releases/tag/5.9.6)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2022 Arne Reiter <redhat(a)arnereiter.de> - 5.9.6-1
- Resolves rhbz#2080070 strongswan-5.9.6 is available
- Fixed missing format string in enum_flags_to_string()
* Fri Feb 25 2022 Arne Reiter <redhat(a)arnereiter.de> - 5.9.5-3
- Resolves: rhbz#2048108 - segfault at 18 ip 00007f4c7c0d841c sp 00007ffe49f61b70 error 4 in libc.so.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2080070 - strongswan-5.9.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2080070
--------------------------------------------------------------------------------
================================================================================
testcloud-0.8.0-1.el8 (FEDORA-EPEL-2022-10ec3d1b92)
Tool for running cloud images locally
--------------------------------------------------------------------------------
Update Information:
- Bump CentOS Stream versions - Build seed image with genisoimage (mpitt) -
Reduce libvirt dependencies (mpitt) - Drop libguestfs from Requires to Suggests
(mpitt) - util: except also requests.exceptions.JSONDecodeError -
_needs_legacy_net: try to guess based on image name with missing guestfs - add
coreos aarch64 support (lnie) - Allow to configure download progress verbosity
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2022 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.8.0-1
- Bump CentOS Stream versions
- Build seed image with genisoimage (mpitt)
- Reduce libvirt dependencies (mpitt)
- Drop libguestfs from Requires to Suggests (mpitt)
- util: except also requests.exceptions.JSONDecodeError
- _needs_legacy_net: try to guess based on image name with missing guestfs
- add coreos aarch64 support (lnie)
- Allow to configure download progress verbosity
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 0.7.1-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2093717 - Please lower or drop python3-libguestfs dependency
https://bugzilla.redhat.com/show_bug.cgi?id=2093717
--------------------------------------------------------------------------------