The following Fedora EPEL 8 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9be66bdb10 python-markdown2-2.4.0-1.el8 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a3a4866065 libopenmpt-0.5.8-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e8421e33b3 chromium-90.0.4430.93-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e393e03d96 screen-4.6.2-12.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80b9d6d879 python-impacket-0.9.22-3.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4f73cb65d7 cacti-1.2.17-1.el8 cacti-spine-1.2.17-1.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

debootstrap-1.0.124-1.el8 fedora-messaging-2.1.0-1.el8 mock-centos-sig-configs-0.2-1.el8 python-tkrzw-0.1.6-1.el8 radare2-5.2.1-2.el8 tkrzw-0.9.15-1.el8

Details about builds:

================================================================================ debootstrap-1.0.124-1.el8 (FEDORA-EPEL-2021-32e4ab35b5) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information:

Update debootstrap to 1.0.124 (#1953760) -------------------------------------------------------------------------------- ChangeLog:

* Wed May 12 2021 S��rgio Basto sergio@serjux.com - 1.0.124-1 - Update debootstrap to 1.0.124 (#1953760) * Fri May 22 2020 S��rgio Basto sergio@serjux.com - 1.0.123-1 - Update to 1.0.123 - Undefine mangle_shebangs (#1654765) - Remove old scriplets, %{_datadir} and /usr/share is the same and %{_sbindir} and /usr/sbin is also the same * Sat Feb 29 2020 S��rgio Basto sergio@serjux.com - 1.0.119-1 - Update to 1.0.119 (#1807970) * Fri Feb 21 2020 Fedora Release Monitoring release-monitoring@fedoraproject.org - 1.0.118-1 - Update to 1.0.118 (#1805812) * Fri Feb 21 2020 S��rgio Basto sergio@serjux.com - 1.0.117-1 - Update to 1.0.117 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1953760 - debootstrap-1.0.124 is available https://bugzilla.redhat.com/show_bug.cgi?id=1953760 --------------------------------------------------------------------------------

================================================================================ fedora-messaging-2.1.0-1.el8 (FEDORA-EPEL-2021-d3dd4e940f) Set of tools for using Fedora's messaging infrastructure -------------------------------------------------------------------------------- Update Information:

Update to 2.1.0 -------------------------------------------------------------------------------- ChangeLog:

* Wed May 12 2021 Aurelien Bompard abompard@fedoraproject.org - 2.1.0-1 - Update to 2.1.0 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 2.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ mock-centos-sig-configs-0.2-1.el8 (FEDORA-EPEL-2021-75e4007f3d) Mock configs for CentOS SIGs -------------------------------------------------------------------------------- Update Information:

Update to 0.2 -------------------------------------------------------------------------------- ChangeLog:

* Wed May 12 2021 Davide Cavalca dcavalca@fedoraproject.org - 0.2-1 - Update to 0.2 * Tue Apr 20 2021 Davide Cavalca dcavalca@fedoraproject.org - 0.1-3 - Gate out Enhances for el7 as it's not supported there --------------------------------------------------------------------------------

================================================================================ python-tkrzw-0.1.6-1.el8 (FEDORA-EPEL-2021-0aa7e80e4b) TKRZW Python bindings -------------------------------------------------------------------------------- Update Information:

Version bump -------------------------------------------------------------------------------- ChangeLog:

* Tue May 4 2021 TI_Eugene ti.eugene@gmail.com - 0.1.6-1 - Version bump --------------------------------------------------------------------------------

================================================================================ radare2-5.2.1-2.el8 (FEDORA-EPEL-2021-7f3c561cd8) The reverse engineering framework -------------------------------------------------------------------------------- Update Information:

Update to version 5.2.1 Security fix for CVE-2020-16269, CVE-2020-17487 -------------------------------------------------------------------------------- ChangeLog:

* Tue May 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-2 - patch for older version of meson used on EPEL8 - use pkgconfig where possible for BR - use ldconfig_scriptlets only on older platforms - add ExcludeArch for s390x on EPEL8 * Thu Apr 22 2021 Henrik Nordstrom henrik@henriknordstrom.net - 5.2.1-1 - Update to version 5.2.1 * Wed Apr 21 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.0-3 - avoid c99 for(int i... * Sat Apr 17 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.0-2 - fix epel build * Wed Apr 14 2021 Henrik Nordstrom henrik@henriknordstrom.net - 5.2.0-1 - Update to version 5.2.0 * Sun Feb 28 2021 Michal Ambroz <rebus at, seznam.cz> 5.1.1-2 - stop removing the r2pm binary from the package * Mon Feb 15 2021 Henrik Nordstrom henrik@henriknordstrom.net - 5.1.1-1 - Rebase to upstream version 5.1.1 * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 4.5.0-2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Oct 2 2020 Riccardo Schirone rschirone91@gmail.com - 4.5.0-2.1 - Rebuilt to make sure version is no lower than F32 * Wed Jul 29 2020 Fedora Release Engineering releng@fedoraproject.org - 4.5.0-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1864846 - CVE-2020-16269 radare2: segmentation fault in parse_typedef function in type_dwarf.c via a malformed DW_AT_name in the .debug_info section [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1864846 [ 2 ] Bug #1869627 - CVE-2020-17487 radare2: misparsing signature information in PE files could lead to DoS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1869627 --------------------------------------------------------------------------------

================================================================================ tkrzw-0.9.15-1.el8 (FEDORA-EPEL-2021-61b29c304d) A straightforward implementation of DBM -------------------------------------------------------------------------------- Update Information:

Version bump -------------------------------------------------------------------------------- ChangeLog:

* Tue May 11 2021 TI_Eugene ti.eugene@gmail.com - 0.9.15-1 - Version bump - Added gcc10 as required for el8 - x32 enabled (#1920195) - 'make check' temporary disabled --------------------------------------------------------------------------------