The following Fedora EPEL 8 Security updates need testing:
Age URL
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d4406c9c75
awstats-7.8-2.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
GraphicsMagick-1.3.36-1.el8
dia-0.97.3-16.el8
libunicapgtk-0.9.8-24.el8
msoffcrypto-tool-4.11.0-1.el8
perl-Convert-UUlib-1.8-1.el8
python-TestSlide-2.6.3-2.el8
tcl-tclreadline-2.1.0-16.el8
ucview-0.33-19.el8
unicornscan-0.4.7-23.el8
youtube-dl-2020.12.31-1.el8
Details about builds:
================================================================================
GraphicsMagick-1.3.36-1.el8 (FEDORA-EPEL-2020-d244ccf5e3)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
Update to latest stable upstream release, see also
http://www.graphicsmagick.org/NEWS.html#december-26-2020
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 30 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.36-1
- 1.3.36
- fix urw font path, Requires: urw-base35-fonts-legacy (#1847187)
- bundle urw fonts on epel8+ (no urw-base3-fonts-legacy provided)
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.35-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jun 22 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.3.35-2
- Perl 5.32 rebuild
* Thu Feb 27 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.35-1
- 1.3.35
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.34-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
dia-0.97.3-16.el8 (FEDORA-EPEL-2020-001e4d949f)
Diagram drawing program
--------------------------------------------------------------------------------
Update Information:
- Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 31 2020 Robert Scheck <robert(a)fedoraproject.org> - 1:0.97.3-16
- Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.97.3-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 14 2020 Tom Stellard <tstellar(a)redhat.com> - 1:0.97.3-14
- Use make macros
-
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1778767 - CVE-2019-19451 dia: infinite loop on filenames with invalid
encoding
https://bugzilla.redhat.com/show_bug.cgi?id=1778767
--------------------------------------------------------------------------------
================================================================================
libunicapgtk-0.9.8-24.el8 (FEDORA-EPEL-2020-a0707e5495)
Library to build graphical widgets for the unicap library
--------------------------------------------------------------------------------
Update Information:
Unicap provides a uniform interface to video capture devices. It allows
applications to use any supported video capture device via a single API.
Building applications with a graphical user interface is made especially easy
with the unicapGTK widget set.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
msoffcrypto-tool-4.11.0-1.el8 (FEDORA-EPEL-2020-31c3295d5c)
Python tool for decrypting MS Office files with passwords or other keys
--------------------------------------------------------------------------------
Update Information:
msoffcrypto-tool 4.11.0 ======================= * Improve hash calculation
* Add `verify_passwd` and `verify_integrity` option * Make `_packUserEditAtom`
spec-compliant msoffcrypto-tool 4.10.2 ======================= * Update
`_makekey` in `rc4_cryptoapi` * Fix handling of optional field value in ppt97
* Add tests for `is_encrypted()` (`--test`) * Make `Doc97File.is_encrypted()`
return boolean
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 31 2020 Robert Scheck <robert(a)fedoraproject.org> 4.11.0-1
- Upgrade to 4.11.0
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.10.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 4.10.1-3
- Rebuilt for Python 3.9
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.10.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Convert-UUlib-1.8-1.el8 (FEDORA-EPEL-2020-e93a6b007c)
Perl interface to the uulib library
--------------------------------------------------------------------------------
Update Information:
Convert::UUlib 1.8 ================== - no bugfixes in this release due to
lack of known bugs, but the major changes in this release might have introduced
new bugs, so watch out - update large decoder example to disable OPT_AUTOCHK
and use Smerge -1 - some micro-optimisations - avoid costly string comparisons
by comparing hashes when inserting items, which speeds up insertion by a
constant factor - improve uulist (and other) structure layout and size -
reverse the order of file list items, which heuristically improves match speed
with large usenet file lists - use getc instead of fgetc, which makes no
difference on gnu/linux - clean up _FP symbol names toi not start with an
underscore - use feof_unlocked and ferror_unlocked - implement a faster ascii-
only strnicmp - misc very minor code improvements - remove quite a bit of pre-
posix/dos/etc. cruft - use flockfile, if available, for a potential but small
speed gain - speed up inner yenc decoder loop - kentnl said that this module
should no longer claim to be a simple interface to uulib, as the bundled copy is
now better maintained than the original upstream library
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 31 2020 Robert Scheck <robert(a)fedoraproject.org> 3:1.8-1
- Upgrade to 1.8
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:1.71-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jun 23 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 2:1.71-2
- Perl 5.32 rebuild
--------------------------------------------------------------------------------
================================================================================
python-TestSlide-2.6.3-2.el8 (FEDORA-EPEL-2020-8c51246a0b)
A Python test framework
--------------------------------------------------------------------------------
Update Information:
Build for EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
tcl-tclreadline-2.1.0-16.el8 (FEDORA-EPEL-2020-fa11f77182)
GNU Readline extension for Tcl/Tk
--------------------------------------------------------------------------------
Update Information:
The tclreadline package makes the GNU Readline library available for interactive
tcl shells. This includes history expansion and file/command completion. Command
completion for all tcl/tk commands is provided and command completion for user
defined commands can be easily added. Tclreadline can also be used for tcl
scripts which want to use a shell like input interface.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
ucview-0.33-19.el8 (FEDORA-EPEL-2020-95f14a9149)
Image and video capture application using unicap toolkit
--------------------------------------------------------------------------------
Update Information:
UCView is a video image capture application using the unicap toolkit. It
provides a simple way to parametrise the video device, can capture still images
from the video stream or record the stream as mpeg file. By using unicap, it can
access many different video capture devices like webcams, video grabber boards,
IEEE-1394 (FireWire) cameras and others.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
unicornscan-0.4.7-23.el8 (FEDORA-EPEL-2020-9732618a36)
Scalable, accurate, flexible and efficient network probing
--------------------------------------------------------------------------------
Update Information:
Unicornscan is an attempt at a user-land distributed TCP/IP stack. It is
intended to provide a researcher a superior interface for introducing a stimulus
into and measuring a response from a TCP/IP enabled device or network. Although
it currently has hundreds of individual features, a main set of abilities
include: Asynchronous stateless TCP scanning with all variations of TCP flags,
asynchronous stateless TCP banner grabbing, asynchronous protocol specific UDP
scanning (sending enough of a signature to elicit a response), active and
passive remote OS, application and component identification by analyzing
responses, PCAP file logging and filtering, relational database output, custom
module support, customized data-set views.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2020.12.31-1.el8 (FEDORA-EPEL-2020-462c9027ef)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to version 2020.12.31 ---- Update to version 2020.12.22
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 31 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.31-1
- Update to 2020.12.31
* Tue Dec 29 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.29-1
- Update to 2020.12.29
* Tue Dec 22 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.22-1
- Update to 2020.12.22
* Sun Dec 13 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.14-1
- Update to 2020.12.14
* Sat Dec 12 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.12-1
- Update to 2020.12.12
* Wed Dec 9 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.09-1
- Update to 2020.12.09
* Sun Dec 6 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.07-1
- Update to 2020.12.07
* Sun Dec 6 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.05-1
- Update to 2020.12.05
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909886 - youtube-dl-2020.12.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1909886
[ 2 ] Bug #1911740 - youtube-dl-2020.12.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1911740
--------------------------------------------------------------------------------