The following Fedora EPEL 8 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1a1caa3eb5
opensmtpd-6.6.4p1-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-47a203cb95
openfortivpn-1.12.0-1.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9d364c6070
cacti-1.2.10-1.el8 cacti-spine-1.2.10-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-8ce58993d7
mbedtls-2.16.5-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ansible-2.9.6-1.el8
koji-1.20.1-1.el8
vapoursynth-48-7.el8
Details about builds:
================================================================================
ansible-2.9.6-1.el8 (FEDORA-EPEL-2020-02f03affd4)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to upstream 2.9.6 and fix for 2 CVES: CVE-2020-1737, CVE-2020-1739
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.6-1
- Update to 2.9.6. Fixes bug #1810373
- fixes for CVE-2020-1737, CVE-2020-1739
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1805322 - CVE-2020-1739 ansible: svn module leaks password when specified as
a parameter [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1805322
[ 2 ] Bug #1810373 - ansible-2.9.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1810373
[ 3 ] Bug #1805329 - CVE-2020-1737 ansible: Extract-Zip function in win_unzip module
does not check extracted path [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1805329
--------------------------------------------------------------------------------
================================================================================
koji-1.20.1-1.el8 (FEDORA-EPEL-2020-c72d211254)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.20.1 minor bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Kevin Fenzi <kevin(a)scrye.com> - 1.20.1-1
- Update to 1.20.1
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.20.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vapoursynth-48-7.el8 (FEDORA-EPEL-2020-cb2d3ef940)
Video processing framework with simplicity in mind
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 7 2020 Simone Caronni <negativo17(a)gmail.com> - 48-7
- Fix broken dependency.
* Sat Feb 29 2020 Simone Caronni <negativo17(a)gmail.com> - 48-6
- Make it exclusive for i686/x86_64.
- Fix build on RHEL/CentOS 8.
* Tue Feb 25 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 48-5
- Add tests
- Cosmetic spec file improvements
* Thu Feb 20 2020 Simone Caronni <negativo17(a)gmail.com> - 48-4
- More review fixes.
- Use upstream patch for Python 3.8.
* Fri Feb 7 2020 Simone Caronni <negativo17(a)gmail.com> - 48-3
- Review fixes.
* Sun Jan 26 2020 Simone Caronni <negativo17(a)gmail.com> - 48-2
- Move script library into main library package.
- Fix build with Python 3.8.
* Thu Jan 16 2020 Simone Caronni <negativo17(a)gmail.com> - 48-1
- First build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1791588 - Review Request: vapoursynth - A video processing framework with
simplicity in mind
https://bugzilla.redhat.com/show_bug.cgi?id=1791588
--------------------------------------------------------------------------------