The following Fedora EPEL 8 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a6e2c9bc8c
radare2-5.3.1-1.el8
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0209079fce
aom-3.1.1-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
dmlite-1.15.0-2.el8
golang-github-prometheus-2.24.1-5.el8
lua-readline-3.0-1.el8
python-absl-py-0.13.0-1.el8
python-blessed-1.18.1-1.el8
python-googleapis-common-protos-1.53.0-2.el8
singularity-3.8.0-1.el8
socnetv-2.9-1.el8
tini-0.19.0-1.el8
unrealircd-5.2.0-1.el8
Details about builds:
================================================================================
dmlite-1.15.0-2.el8 (FEDORA-EPEL-2021-70cf735b0d)
Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:
Add fix for puppet TokenId configuration
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-2.24.1-5.el8 (FEDORA-EPEL-2021-a35ef212a9)
Prometheus monitoring system and time series database
--------------------------------------------------------------------------------
Update Information:
Add systemd-sysusers as Requires
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.24.1-5
- Add systemd-sysusers as Requires
- Fix: rhbz#1972026
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1972026 - does not depend on `Requires(pre): /usr/bin/systemctl`
https://bugzilla.redhat.com/show_bug.cgi?id=1972026
--------------------------------------------------------------------------------
================================================================================
lua-readline-3.0-1.el8 (FEDORA-EPEL-2021-1f216a9019)
Lua interface to the readline and history libraries
--------------------------------------------------------------------------------
Update Information:
- Update to 3.0 (#1950886)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 16 2021 Robert Scheck <robert(a)fedoraproject.org> - 3.0-1
- Update to 3.0 (#1950886)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950886 - lua-readline-3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1950886
--------------------------------------------------------------------------------
================================================================================
python-absl-py-0.13.0-1.el8 (FEDORA-EPEL-2021-ff297f3193)
Abseil Python Common Libraries
--------------------------------------------------------------------------------
Update Information:
*New upstream release 0.13.0* ## 0.13.0 (2021-06-14) ### Added * (app) Type
annotations for public `app` interfaces. * (testing) Added new decorator
`(a)absltest.skipThisClass` to indicate a class contains shared functionality
to be used as a base class for other TestCases, and therefore should be
skipped. ### Changed * (app) Annotated the `flag_parser` paramteter of `run`
as keyword-only. This keyword-only constraint will be enforced at runtime in
a future release. * (app, flags) Flag validations now include all errors from
disjoint flag sets, instead of fail fast upon first error from all
validators. Multiple validators on the same flag still fails fast.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.13.0-1
- Update to 0.13.0; closes RHBZ#1972146
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1972146 - python-absl-py-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1972146
--------------------------------------------------------------------------------
================================================================================
python-blessed-1.18.1-1.el8 (FEDORA-EPEL-2021-28e6d2744f)
A thin, practical wrapper around terminal capabilities in Python
--------------------------------------------------------------------------------
Update Information:
Update to 1.18.1 (#1932716)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2021 Fedora Release Monitoring <aviso(a)rockhopper.net> - 1.18.1-1
- Update to 1.18.1 (#1932716)
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.17.12-3
- Rebuilt for Python 3.10
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Jan 17 2021 Avram Lubkin <aviso(a)rockhopper.net> - 1.17.12-1
- Updated to 1.17.12
--------------------------------------------------------------------------------
================================================================================
python-googleapis-common-protos-1.53.0-2.el8 (FEDORA-EPEL-2021-2c39dce1ef)
Common protobufs used in Google APIs
--------------------------------------------------------------------------------
Update Information:
First EPEL 8 package. ����
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965826 - Please build python-googleapis-common-protos for EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1965826
--------------------------------------------------------------------------------
================================================================================
singularity-3.8.0-1.el8 (FEDORA-EPEL-2021-85157f15df)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream 3.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.8.0-1
- Upgrade to upstream 3.8.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1963667 - singularity-3.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1963667
--------------------------------------------------------------------------------
================================================================================
socnetv-2.9-1.el8 (FEDORA-EPEL-2021-ee08b955db)
A Social Networks Analyser and Visualiser
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2021 TI_Eugene <ti.eugene(a)gmail.com> 2.9-1
- Version bump
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tini-0.19.0-1.el8 (FEDORA-EPEL-2021-b5abacf758)
A tiny but valid init for containers
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1971386 - Review Request: tini - A tiny but valid init for containers
https://bugzilla.redhat.com/show_bug.cgi?id=1971386
--------------------------------------------------------------------------------
================================================================================
unrealircd-5.2.0-1.el8 (FEDORA-EPEL-2021-99f99b8862)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
UnrealIRCd 5.2.0 ================ This is UnrealIRCd 5.2.0, a release with lots
of new features. The two main new features are: an improved and more flexible
anti-flood block and channel history which can now be stored encrypted on disk
and allows clients to fetch hundreds/thousands of lines. Notice from upstream:
UnrealIRCd 5.2.0 is the direct successor to 5.0.9/5.0.9.1. There will be no
further 5.0.x releases, in particular there will be no 5.0.10. The only
configuration change is in the `set::anti-flood` block (as explained further
down under "Enhancements"). When starting UnrealIRCd will give clear
instructions if anything needs to be changed (and what). This process is really
minor, the server will usually tell to just delete a few old lines from the
configuration file. Enhancements ------------ * The `set::anti-flood` block
has been redone so you can have different limits for `unknown-users` and `known-
users`. * As a reminder, by default, `known-users` are users who are
identified to services OR are on an IP that has been connected for over 2 hours
in the past X days. The exact definition of "known-users" is in the security-
group block. * See
https://www.unrealircd.org/docs/Anti-flood_settings for
more information on the layout of the new set::anti-flood block. * All
violations of `target-flood`, `nick-flood`, `join-flood`, `away-flood`, `invite-
flood`, `knock-flood`, `max-concurrent-conversations` are now reported to opers
with the snomask `f` (flood). * Add support for database encryption. The way
this works is that you define an encryption password in a `secret { }` block.
Then from the various modules you can refer to this secret block, from
`set::reputation::db-secret`, `set::tkldb::db-secret` and `set::channeldb::db-
secret`. This way you can encrypt the reputation, TKL and channel database for
increased privacy. * Add optional support for persistent channel history:
* This stores channel history on disk for channels that have both `+H` and `+P`
set. * If you enable this then we ALWAYS require you to set an encryption
password, as we do not allow storing of channel history in plain text. * If
you enable the option, then the history is stored in `data/history/` in
individual .db files. No channel names are visible in the filenames for optimal
privacy. * See
https://www.unrealircd.org/docs/Set_block#Persistent_channel_history on how to
enable this. By default it is off. * Add support for IRCv3 draft/chathistory:
https://ircv3.net/specs/extensions/chathistory * The maximums for channel mode
`+H` have been raised and are now different for `+r` (registered) and `-r`
channels. For unregistered channels the limit is now 200 lines / 31 days. For
registered channels the limit is 5000 lines / 31 days. The old limit for both
was 200 lines / 7 days. These maximums can be changed in the now slightly
different `set::history::channel::max-storage-per-channel` block. * Add c-ares
and libsodium version output to boot screen and `/VERSION`. * `WHOX` now
supports displaying the reputation score. If you are an IRCOp then you can use
e.g. `WHO * %cuhsnfmdaRr`. * Add ability to spamfilter message tags via the
new `T` target. Right now it would be unusual to use this, but some day when we
have more message tags it may come in handy. * Support `+draft/reply` IRCv3
client tag. Can be used by bots (and others) to indicate to what message people
are replying to. This module, reply-tag, is loaded by default. * Send
`draft/bot` IRCv3 message tag if the user has mode `+B` set. * Websockets: add
support for clients to negotiate an explicit type via `Sec-WebSocket-Protocol`,
instead of only the default type from `listen::websocket::type`. This is based
on an IRCv3 websocket draft specification. Note that UnrealIRCd refuses type
text if your configuration allows non-UTF8 characters in channel or nick names
because it would lead to security and compatibility issues. * `set::restrict-
commands`: new option `exempt-tls` which allows SSL/TLS users to bypass a
restriction. Fixes ----- * Server squiting the wrong side. Often harmless,
but when (re)connecting rapidly to multiple servers with autoconnect this could
cause the network to fall apart. * Forbid using extended server bans in
`ZLINE`/`GZLINE` since they won't work there. * Extended server ban
`~a:accname` was not working for shun, and only partially working for
`KLINE`/`GLINE`. * More accurate `/ELINE` error message. Changed ------- *
Channel mode `+H` always showed time in minutes (`m`) until now. From now on it
will show it in minutes (`m`), hours (`h`) or days (`d`) depending on the actual
value. E.g. `+H 50:7d`. * If you have zero log blocks then we already
automatically logged errors to `ircd.log`. From now on we will log everything
(not only errors) to that file.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2021 Robert Scheck <robert(a)fedoraproject.org> 5.2.0-1
- Upgrade to 5.2.0 (#1967860)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1967860 - unrealircd-5.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1967860
--------------------------------------------------------------------------------