The following Fedora EPEL 8 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80b9d6d879
python-impacket-0.9.22-3.el8
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4f73cb65d7
cacti-1.2.17-1.el8 cacti-spine-1.2.17-1.el8
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7f3c561cd8
radare2-5.2.1-2.el8
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-86c73cc3af
prosody-0.11.9-1.el8
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-58bc048b1a
upx-3.96-9.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
cscppc-1.9.0-1.el8
csdiff-2.1.1-1.el8
csmock-2.8.0-1.el8
cswrap-1.9.2-1.el8
python-aiomqtt-0.1.2-2.20210520git8f3e7be.20210520git8f3e7be.el8
rxvt-unicode-9.26-1.el8
slurm-20.11.7-1.el8
Details about builds:
================================================================================
cscppc-1.9.0-1.el8 (FEDORA-EPEL-2021-f7483c5fb3)
A compiler wrapper that runs cppcheck in background
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2021 Kamil Dudka <kdudka(a)redhat.com> 1.9.0-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
csdiff-2.1.1-1.el8 (FEDORA-EPEL-2021-f7483c5fb3)
Non-interactive tools for processing code scan results in plain-text
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2021 Kamil Dudka <kdudka(a)redhat.com> 2.1.1-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
csmock-2.8.0-1.el8 (FEDORA-EPEL-2021-f7483c5fb3)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2021 Kamil Dudka <kdudka(a)redhat.com> 2.8.0-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
cswrap-1.9.2-1.el8 (FEDORA-EPEL-2021-f7483c5fb3)
Generic compiler wrapper
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2021 Kamil Dudka <kdudka(a)redhat.com> 1.9.2-1
- update to latest upstream
--------------------------------------------------------------------------------
================================================================================
python-aiomqtt-0.1.2-2.20210520git8f3e7be.20210520git8f3e7be.el8
(FEDORA-EPEL-2021-bf76891214)
An AsyncIO asynchronous wrapper around paho-mqtt
--------------------------------------------------------------------------------
Update Information:
Upstream version 0.1.2 adds support for newer Python versions (through 3.10).
This update also includes post-0.1.2 commit
8f3e7bef2cf86db0be286f9a3c042fa0343086be, which clarified the license and added
license text files. The package license is now corrected to ���EPL 1.0 or BSD���
(from ���EPL 1.0���).
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1899955 - python-aiomqtt fails to build with Python 3.10:
pytest.PytestDeprecationWarning: Passing arguments to pytest.fixture() as positional
arguments is deprecated - pass them as a keyword argument instead.
https://bugzilla.redhat.com/show_bug.cgi?id=1899955
[ 2 ] Bug #1923330 - python-aiomqtt: FTBFS in Fedora rawhide/f34
https://bugzilla.redhat.com/show_bug.cgi?id=1923330
[ 3 ] Bug #1962393 - License problems
https://bugzilla.redhat.com/show_bug.cgi?id=1962393
--------------------------------------------------------------------------------
================================================================================
rxvt-unicode-9.26-1.el8 (FEDORA-EPEL-2021-a20d7c1ddd)
Unicode version of rxvt
--------------------------------------------------------------------------------
Update Information:
- (el8 only) New upstream release - 9.26 - Fixes
[
CVE-2021-33477](https://nvd.nist.gov/vuln/detail/CVE-2021-33477)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2021 Robbie Harwood <rharwood(a)redhat.com> - 9.26-1
- New upstream version (9.26)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961797 - CVE-2021-33477 rxvt-unicode: possible remote code execution
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1961797
--------------------------------------------------------------------------------
================================================================================
slurm-20.11.7-1.el8 (FEDORA-EPEL-2021-b7c88515a2)
Simple Linux Utility for Resource Management
--------------------------------------------------------------------------------
Update Information:
- Update to 20.11.7 - Closes security issue CVE-2021-31215
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 15 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.7-1
- Update to 20.11.7
- Closes security issue CVE-2021-31215
--------------------------------------------------------------------------------