The following Fedora EPEL 8 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a0f02190ad
libntlm-1.6-1.el8
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d21505685e
mujs-1.0.9-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a4ade35d32
java-latest-openjdk-15.0.1.9-1.rolling.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d4f217c4a3
chromium-86.0.4240.183-1.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d5ec691317
seamonkey-2.53.5-1.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2aa68c5f5e
tor-0.4.3.7-1.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-317c124dc0
rpki-client-6.8p1-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
convert2rhel-0.13-1.el8
copr-cli-1.90-1.el8
pngcheck-2.4.0-2.el8
python-bugzilla-3.0.2-1.el8
python-copr-1.106-1.el8
python-mystrom-2.0.0-1.el8
python-wxpython4-4.0.7-13.el8
youtube-dl-2020.11.12-1.el8
Details about builds:
================================================================================
convert2rhel-0.13-1.el8 (FEDORA-EPEL-2020-e57c4519c9)
Automates the conversion of RHEL derivative distributions to RHEL
--------------------------------------------------------------------------------
Update Information:
Changes included in this version: * allow conversions of CentOS and Oracle
Linux 8 * fix "TypeError: execve()" py2.6-related error when calling external
commands * remove unused code related to using offline snapshot or RHEL
repositories * remove all Red Hat Network (RHN)-related code as RHN has been
shut down * set POSIX/C locale at the start of running the tool * remove python-
syspurpose dependency from spec - not available on OL 7 and 8 * not renaming the
original system repofiles anymore * replace the word blacklist with
exclude/excluded * clearing yum versionlock that could cause the conversion to
fail * printing rpm files that were modified during the conversion * minor UX
improvements and test infrastructure improvements
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.90-1.el8 (FEDORA-EPEL-2020-41f50e1f34)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- added support for custom build batches - more detailed --bootstrap
configuration options, per chroot, project, build - the --timeout option was
fixed, has an effect, default build timeout is 4 hours - added new dist-git
build method - added bash completion (when one has python3-argcomplete
installed) - the --memory option is now formally deprecated (never implemented
before)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 9 2020 Jakub Kadlcik <frostyx(a)email.cz> 1.90-1
- cli, frontend: custom build batches
- cli: propagate build --bootstrap value to API call
- cli: move the build --bootstrap option to a correct parser
- frontend, cli, python, rpmbuild: better bootstrap config
- beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap
- all: run pytest with -vv in package build
- cli: fix timeout option to allow change timeout for build
- cli: fix dist-git unit tests
- common, cli, python, rpmbuild, frontend, backend: DistGit source method
- cli: support project/chroot format for getting/editting chroots
- cli: do bash-completion when argcomplete is installed
- cli: formally deprecate --memory option
--------------------------------------------------------------------------------
================================================================================
pngcheck-2.4.0-2.el8 (FEDORA-EPEL-2020-6c93c61069)
Verifies the integrity of PNG, JNG and MNG files
--------------------------------------------------------------------------------
Update Information:
Fix buffer overflow (RHBZ #1897485) A global buffer overflow was discovered in
the check_chunk_name function via a crafted png file. ---- New upstream
version 2.4.0; the main changes are: - tweaked color definitions slightly to
work better on terminals with white/light backgrounds - added eXIf support -
fixed DHDR (pre-MNG-1.0) bug ---- Enable executable hardening (PIC/PIE) ----
Initial import (#1886858)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897485 - Private bug
https://bugzilla.redhat.com/show_bug.cgi?id=1897485
--------------------------------------------------------------------------------
================================================================================
python-bugzilla-3.0.2-1.el8 (FEDORA-EPEL-2020-5985b1acd2)
Python library for interacting with Bugzilla
--------------------------------------------------------------------------------
Update Information:
* Update to version 3.0.2 * Fix API key leaking into requests exceptions (bz
#1896791) ---- * Update to version 3.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Cole Robinson <crobinso(a)redhat.com> - 3.0.2-1
- Update to version 3.0.2
- Fix API key leaking into requests exceptions (bz #1896791)
* Sat Oct 3 2020 Cole Robinson <crobinso(a)redhat.com> - 3.0.0-1
- Update to version 3.0.0
--------------------------------------------------------------------------------
================================================================================
python-copr-1.106-1.el8 (FEDORA-EPEL-2020-41f50e1f34)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
- added support for custom build batches - more detailed --bootstrap
configuration options, per chroot, project, build - the --timeout option was
fixed, has an effect, default build timeout is 4 hours - added new dist-git
build method - added bash completion (when one has python3-argcomplete
installed) - the --memory option is now formally deprecated (never implemented
before)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 11 2020 Pavel Raiskup <praiskup(a)redhat.com> 1.106-1
- bump to non-devel version
* Mon Nov 9 2020 Jakub Kadlcik <frostyx(a)email.cz> 1.105.3.dev-1
- frontend, python: we cannot order chroots by name
- python: synchronize the docs for build options
- frontend, cli, python, rpmbuild: better bootstrap config
- beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap
- all: run pytest with -vv in package build
- common, cli, python, rpmbuild, frontend, backend: DistGit source method
- python: Don't apply bind_proxy in BaseProxy __init__()
--------------------------------------------------------------------------------
================================================================================
python-mystrom-2.0.0-1.el8 (FEDORA-EPEL-2020-ea00336c80)
Python API client for interacting with myStrom devices
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 2.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 13 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.0.0-1
- Update to latest upstream release 2.0.0
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jun 26 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.1.3-2
- Add python3-setuptools as BR
* Mon Jun 8 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.1.3-1
- Update to latest upstream release 1.1.3
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.2-2
- Rebuilt for Python 3.9
* Tue Apr 28 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.1.2-1
- Update to latest upstream release 1.1.2
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-wxpython4-4.0.7-13.el8 (FEDORA-EPEL-2020-1a5c5f1eb1)
New implementation of wxPython, a GUI toolkit for Python
--------------------------------------------------------------------------------
Update Information:
Adapt for EPEL8 (#1765573)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1765573 - Please package wxpython4 also for EPEL-8
https://bugzilla.redhat.com/show_bug.cgi?id=1765573
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2020.11.12-1.el8 (FEDORA-EPEL-2020-76c0a71d91)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to version 2020.11.12
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Peter Hazenberg <fedoraproject(a)haas-en-berg.nl> - 2020.11.12-1
- Update to 2020.11.12
- Get releases from
yt-dl.org instead of github
* Sun Sep 20 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.09.20-1
- Update to 2020.09.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1894756 - 2020.11.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1894756
[ 2 ] Bug #1897102 - youtube-dl-2020.11.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897102
--------------------------------------------------------------------------------