The following Fedora EPEL 8 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9be66bdb10
python-markdown2-2.4.0-1.el8
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a3a4866065
libopenmpt-0.5.8-1.el8
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e8421e33b3
chromium-90.0.4430.93-1.el8
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-e393e03d96
screen-4.6.2-12.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80b9d6d879
python-impacket-0.9.22-3.el8
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4f73cb65d7
cacti-1.2.17-1.el8 cacti-spine-1.2.17-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
debootstrap-1.0.124-1.el8
fedora-messaging-2.1.0-1.el8
mock-centos-sig-configs-0.2-1.el8
python-tkrzw-0.1.6-1.el8
radare2-5.2.1-2.el8
tkrzw-0.9.15-1.el8
Details about builds:
================================================================================
debootstrap-1.0.124-1.el8 (FEDORA-EPEL-2021-32e4ab35b5)
Debian GNU/Linux bootstrapper
--------------------------------------------------------------------------------
Update Information:
Update debootstrap to 1.0.124 (#1953760)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 12 2021 S��rgio Basto <sergio(a)serjux.com> - 1.0.124-1
- Update debootstrap to 1.0.124 (#1953760)
* Fri May 22 2020 S��rgio Basto <sergio(a)serjux.com> - 1.0.123-1
- Update to 1.0.123
- Undefine mangle_shebangs (#1654765)
- Remove old scriplets, %{_datadir} and /usr/share is the same
and %{_sbindir} and /usr/sbin is also the same
* Sat Feb 29 2020 S��rgio Basto <sergio(a)serjux.com> - 1.0.119-1
- Update to 1.0.119 (#1807970)
* Fri Feb 21 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1.0.118-1
- Update to 1.0.118 (#1805812)
* Fri Feb 21 2020 S��rgio Basto <sergio(a)serjux.com> - 1.0.117-1
- Update to 1.0.117
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953760 - debootstrap-1.0.124 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1953760
--------------------------------------------------------------------------------
================================================================================
fedora-messaging-2.1.0-1.el8 (FEDORA-EPEL-2021-d3dd4e940f)
Set of tools for using Fedora's messaging infrastructure
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 12 2021 Aurelien Bompard <abompard(a)fedoraproject.org> - 2.1.0-1
- Update to 2.1.0
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mock-centos-sig-configs-0.2-1.el8 (FEDORA-EPEL-2021-75e4007f3d)
Mock configs for CentOS SIGs
--------------------------------------------------------------------------------
Update Information:
Update to 0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 12 2021 Davide Cavalca <dcavalca(a)fedoraproject.org> - 0.2-1
- Update to 0.2
* Tue Apr 20 2021 Davide Cavalca <dcavalca(a)fedoraproject.org> - 0.1-3
- Gate out Enhances for el7 as it's not supported there
--------------------------------------------------------------------------------
================================================================================
python-tkrzw-0.1.6-1.el8 (FEDORA-EPEL-2021-0aa7e80e4b)
TKRZW Python bindings
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 TI_Eugene <ti.eugene(a)gmail.com> - 0.1.6-1
- Version bump
--------------------------------------------------------------------------------
================================================================================
radare2-5.2.1-2.el8 (FEDORA-EPEL-2021-7f3c561cd8)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
Update to version 5.2.1 Security fix for CVE-2020-16269, CVE-2020-17487
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-2
- patch for older version of meson used on EPEL8
- use pkgconfig where possible for BR
- use ldconfig_scriptlets only on older platforms
- add ExcludeArch for s390x on EPEL8
* Thu Apr 22 2021 Henrik Nordstrom <henrik(a)henriknordstrom.net> - 5.2.1-1
- Update to version 5.2.1
* Wed Apr 21 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.0-3
- avoid c99 for(int i...
* Sat Apr 17 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.0-2
- fix epel build
* Wed Apr 14 2021 Henrik Nordstrom <henrik(a)henriknordstrom.net> - 5.2.0-1
- Update to version 5.2.0
* Sun Feb 28 2021 Michal Ambroz <rebus at, seznam.cz> 5.1.1-2
- stop removing the r2pm binary from the package
* Mon Feb 15 2021 Henrik Nordstrom <henrik(a)henriknordstrom.net> - 5.1.1-1
- Rebase to upstream version 5.1.1
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.0-2.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Oct 2 2020 Riccardo Schirone <rschirone91(a)gmail.com> - 4.5.0-2.1
- Rebuilt to make sure version is no lower than F32
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.0-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1864846 - CVE-2020-16269 radare2: segmentation fault in parse_typedef
function in type_dwarf.c via a malformed DW_AT_name in the .debug_info section [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1864846
[ 2 ] Bug #1869627 - CVE-2020-17487 radare2: misparsing signature information in PE
files could lead to DoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1869627
--------------------------------------------------------------------------------
================================================================================
tkrzw-0.9.15-1.el8 (FEDORA-EPEL-2021-61b29c304d)
A straightforward implementation of DBM
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 11 2021 TI_Eugene <ti.eugene(a)gmail.com> - 0.9.15-1
- Version bump
- Added gcc10 as required for el8
- x32 enabled (#1920195)
- 'make check' temporary disabled
--------------------------------------------------------------------------------