The following Fedora EPEL 8 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fc5b08c7d5
engrampa-1.26.2-1.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-829db80b8a
mbedtls-2.28.7-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-33416db1e4
python-bleach-3.3.0-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-34c7addedb
chromium-121.0.6167.160-1.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-4d3eb328e3
libmodsecurity-3.0.12-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
cmrt-1.0.6-16.el8
libva-intel-hybrid-driver-1.0.2-21.el8
lua-rpm-macros-1-13.el8
syncthing-1.27.3-1.el8
wget2-2.1.0-8.el8
Details about builds:
================================================================================
cmrt-1.0.6-16.el8 (FEDORA-EPEL-2024-f199958274)
C for Media Runtime
--------------------------------------------------------------------------------
Update Information:
Introduce libva-intel-hybrid driver for epel8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Sep 23 2019 Nicolas Chauvet <kwizart(a)gmail.com> - 1.0.6-12
- Rebuilt for libva
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jul 10 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 1.0.6-8
- Switch github url
* Sun Feb 18 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.6-7
- Add missing BR for gcc-c++
- Use new ldconfig scriplets
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Jan 15 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 1.0.6-5
- Rebuilt for libva-2.0.0
* Sat Aug 5 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.6-4
- Updated description
* Tue Jul 25 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.6-3
- Added patch to replace the obsolete AC_PROG_LIBTOOL
* Wed Jul 19 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.6-2
- Update to Fedora Packaging Guidelines specification
* Wed Jul 19 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.6-1
- First RPM release
--------------------------------------------------------------------------------
================================================================================
libva-intel-hybrid-driver-1.0.2-21.el8 (FEDORA-EPEL-2024-f199958274)
VA driver for Intel G45 & HD Graphics family
--------------------------------------------------------------------------------
Update Information:
Introduce libva-intel-hybrid driver for epel8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jan 23 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-17
- Fix compatibility with GCC��10
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-13
- Minor correction to the previous patch to find the correct library
* Wed Jun 27 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-12
- Add patch to fix #1567582
* Sun May 13 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-11
- Fix typo in License
- Fixes bug #1577586
* Wed Mar 7 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-10
- Add missing BR for gcc-c++
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 24 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 1.0.2-6
- Backport upstream patch
* Mon Jan 15 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 1.0.2-5
- Rebuilt for libva-2.0.0
* Fri Aug 18 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.2-4
- Remove unneeded /sbin/ldconfig
* Tue Jul 25 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.2-3
- Added patch to replace the obsolete AC_PROG_LIBTOOL
* Thu Jul 20 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.2-2
- Update to Fedora Packaging Guidelines specification
* Wed Jul 19 2017 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.2-1
- First RPM release
--------------------------------------------------------------------------------
================================================================================
lua-rpm-macros-1-13.el8 (FEDORA-EPEL-2024-cf4c5bcba8)
The common Lua RPM macros
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug in the %lua_requires macro which would set the locale to
"C" (and not reset it) causing unexpected behavior further on.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 12 2024 Nils Philippsen <nils(a)redhat.com> - 1-13
- Don���t set locale permanently in %lua_requires (#2263837)
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2263837 - Using %lua_requires changes locale to "C"
https://bugzilla.redhat.com/show_bug.cgi?id=2263837
--------------------------------------------------------------------------------
================================================================================
syncthing-1.27.3-1.el8 (FEDORA-EPEL-2024-10430622fd)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.27.3.
Release notes:
https://github.com/syncthing/syncthing/releases/tag/v1.27.3
This update also addresses CVE-2023-49295 in quic-go:
https://github.com/quic-
go/quic-go/security/advisories/GHSA-ppxx-5m9h-6vxf
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 12 2024 Fabio Valentini <decathorpe(a)gmail.com> - 1.27.3-1
- Update to version 1.27.3; Fixes RHBZ#2263121
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2257828 - CVE-2023-49295 syncthing: quic-go: memory exhaustion attack against
QUIC's path validation mechanism [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2257828
--------------------------------------------------------------------------------
================================================================================
wget2-2.1.0-8.el8 (FEDORA-EPEL-2024-4eeaa3e4cd)
An advanced file and recursive website downloader
--------------------------------------------------------------------------------
Update Information:
build for el8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 2.1.0-8
- Update spec for EL8 builds
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 14 2024 Neal Gompa <ngompa(a)fedoraproject.org> - 2.1.0-6
- Backport fix for wget to stdin
Resolves: rhbz#2257700
* Thu Jan 4 2024 Yaakov Selkowitz <yselkowi(a)redhat.com> - 2.1.0-5
- Drop unused autogen build dependency
* Thu Dec 21 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 2.1.0-4
- Avoid pandoc dependency on RHEL
- Fix tests on RHEL
* Sat Dec 16 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 2.1.0-3
- Enable wget2-wget for F40+ / RHEL10+
* Fri Sep 1 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 2.1.0-2
- Add gpg signature check
* Fri Sep 1 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 2.1.0-1
- New upstream version
- Add conditional for using wget2 as wget
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Mar 21 2023 Michal Ruprich <mruprich(a)redhat.com> - 2.0.0-5
- SPDX migration
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Sun Sep 26 2021 Neal Gompa <ngompa(a)fedoraproject.org> - 2.0.0-1
- Rebase to 2.0.0 final
- Split out libraries into libs subpackage
- Delete unwanted static subpackage
* Wed Apr 1 2020 Anna Khaitovich <akhaitov(a)redhat.com> - 1.99.2-1
- Initial package
--------------------------------------------------------------------------------