The following Fedora EPEL 8 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9ca5d37fa8
chromium-89.0.4389.82-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ea252e0b24
tor-0.4.5.7-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
assimp-5.0.1-2.el8
atasm-1.09-1.el8
beakerlib-1.27-1.el8
dbus-broker-28-3.el8
exim-4.94-2.el8
webp-pixbuf-loader-0.0.3-1.el8
Details about builds:
================================================================================
assimp-5.0.1-2.el8 (FEDORA-EPEL-2021-398c7d5472)
Library to import various 3D model formats into applications
--------------------------------------------------------------------------------
Update Information:
Add an upstream patch to fix imported library locations, resolving issues when
finding assimp in CMake projects.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 23 2021 Scott K Logan <logans(a)cottsay.net> - 5.0.1-2
- Add an upstream patch to fix imported library locations
--------------------------------------------------------------------------------
================================================================================
atasm-1.09-1.el8 (FEDORA-EPEL-2021-eb1a7d918d)
6502 cross-assembler
--------------------------------------------------------------------------------
Update Information:
- update to 1.09
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1786344 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in
asm.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1786344
[ 2 ] Bug #1786346 - CVE-2019-19785 atasm: stack-based buffer overflow in to_comma in
asm.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1786346
[ 3 ] Bug #1786347 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in
setparse.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1786347
[ 4 ] Bug #1786349 - CVE-2019-19786 atasm: stack-based buffer overflow in parse_expr in
setparse.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1786349
[ 5 ] Bug #1786605 - CVE-2019-19787 atasm: stack-based buffer overflow in
get_signed_expression in setparse.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1786605
[ 6 ] Bug #1786607 - CVE-2019-19787 atasm: stack-based buffer overflow in
get_signed_expression in setparse.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1786607
--------------------------------------------------------------------------------
================================================================================
beakerlib-1.27-1.el8 (FEDORA-EPEL-2021-cedd83ba51)
A shell-level integration testing library
--------------------------------------------------------------------------------
Update Information:
- rlCheckRequirements is now able to check also versioned requirements
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 25 2021 Dalibor Pospisil <dapospis(a)redhat.com> - 1.27-1
- rlCheckRequirements is now able to check also versions requirements
--------------------------------------------------------------------------------
================================================================================
dbus-broker-28-3.el8 (FEDORA-EPEL-2021-d2bbb08f19)
Linux D-Bus Message Broker
--------------------------------------------------------------------------------
Update Information:
Update to newest upstream release. This includes a set of bug-fixes, improved
diagnostics, and a better test infrastructure.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
exim-4.94-2.el8 (FEDORA-EPEL-2021-9222415f70)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
Fixed cname handling in TLS certificate verification
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 25 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.94-2
- Fixed cname handling in TLS certificate verification
Resolves: rhbz#1942583
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1942581 - exim: CNAME handling can break TLS certificate verification
https://bugzilla.redhat.com/show_bug.cgi?id=1942581
--------------------------------------------------------------------------------
================================================================================
webp-pixbuf-loader-0.0.3-1.el8 (FEDORA-EPEL-2021-fbcf5d59ba)
WebP image loader for GTK+ applications
--------------------------------------------------------------------------------
Update Information:
webp-pixbuf-loader for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------