The following Fedora EPEL 8 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ca5d37fa8 chromium-89.0.4389.82-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24 tor-0.4.5.7-1.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

assimp-5.0.1-2.el8 atasm-1.09-1.el8 beakerlib-1.27-1.el8 dbus-broker-28-3.el8 exim-4.94-2.el8 webp-pixbuf-loader-0.0.3-1.el8

Details about builds:

================================================================================ assimp-5.0.1-2.el8 (FEDORA-EPEL-2021-398c7d5472) Library to import various 3D model formats into applications -------------------------------------------------------------------------------- Update Information:

Add an upstream patch to fix imported library locations, resolving issues when finding assimp in CMake projects. -------------------------------------------------------------------------------- ChangeLog:

* Tue Mar 23 2021 Scott K Logan logans@cottsay.net - 5.0.1-2 - Add an upstream patch to fix imported library locations --------------------------------------------------------------------------------

================================================================================ atasm-1.09-1.el8 (FEDORA-EPEL-2021-eb1a7d918d) 6502 cross-assembler -------------------------------------------------------------------------------- Update Information:

- update to 1.09 -------------------------------------------------------------------------------- ChangeLog:

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #1786344 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in asm.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786344 [ 2 ] Bug #1786346 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in asm.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786346 [ 3 ] Bug #1786347 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in setparse.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786347 [ 4 ] Bug #1786349 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in setparse.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786349 [ 5 ] Bug #1786605 - CVE-2019-19787 atasm: stack-based buffer overflow in get_signed_expression in setparse.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1786605 [ 6 ] Bug #1786607 - CVE-2019-19787 atasm: stack-based buffer overflow in get_signed_expression in setparse.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1786607 --------------------------------------------------------------------------------

================================================================================ beakerlib-1.27-1.el8 (FEDORA-EPEL-2021-cedd83ba51) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information:

- rlCheckRequirements is now able to check also versioned requirements -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 25 2021 Dalibor Pospisil dapospis@redhat.com - 1.27-1 - rlCheckRequirements is now able to check also versions requirements --------------------------------------------------------------------------------

================================================================================ dbus-broker-28-3.el8 (FEDORA-EPEL-2021-d2bbb08f19) Linux D-Bus Message Broker -------------------------------------------------------------------------------- Update Information:

Update to newest upstream release. This includes a set of bug-fixes, improved diagnostics, and a better test infrastructure. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ exim-4.94-2.el8 (FEDORA-EPEL-2021-9222415f70) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information:

Fixed cname handling in TLS certificate verification -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 25 2021 Jaroslav ��karvada jskarvad@redhat.com - 4.94-2 - Fixed cname handling in TLS certificate verification Resolves: rhbz#1942583 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1942581 - exim: CNAME handling can break TLS certificate verification https://bugzilla.redhat.com/show_bug.cgi?id=1942581 --------------------------------------------------------------------------------

================================================================================ webp-pixbuf-loader-0.0.3-1.el8 (FEDORA-EPEL-2021-fbcf5d59ba) WebP image loader for GTK+ applications -------------------------------------------------------------------------------- Update Information:

webp-pixbuf-loader for EPEL8 -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------