The following Fedora EPEL 8 Security updates need testing:
Age URL
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-b61ec76a69
mbedtls-2.16.12-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
cgit-1.2.3-8.el8
Details about builds:
================================================================================
cgit-1.2.3-8.el8 (FEDORA-EPEL-2022-eae2a0a848)
A fast web interface for git
--------------------------------------------------------------------------------
Update Information:
Build cgit for EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 2 2022 Todd Zullinger <tmz(a)pobox.com> - 1.2.3-8
- update to git-2.34.1
- use %__make to run tests in %check
* Mon Jul 26 2021 Todd Zullinger <tmz(a)pobox.com> - 1.2.3-7
- update SELinux README
- simplify install commands
- improve httpd config file creation
- explicitly list the cgit cgi-bin script
- create /var/lib/git to improve SELinux compatibility
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.3-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sat Jun 5 2021 Todd Zullinger <tmz(a)pobox.com> - 1.2.3-5
- include output of cgit.conf and git/config.mak in build logs
- explicitly disable expat, perl, python, and tcl/tk in git build
- use %{gpgverify} macro to verify tarball signature
- use %{build_cflags} and %{build_ldflags}
- preserve timestamps when running install
- clean up & improve dist conditionals
- remove %_python_bytecompile_extra
- limit *.py[co] %exclude to el7
- refresh highlight v3 patch
- use git to apply patches
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Dec 29 2020 Todd Zullinger <tmz(a)pobox.com>
- update tar/zstd patch from upstream
* Sat Aug 8 2020 Todd Zullinger <tmz(a)pobox.com>
- improve test suite's use of zstd to decode a tar file
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Apr 2 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.2.3-2
- Fix string quoting for rpm >= 4.16
* Sat Mar 14 2020 Todd Zullinger <tmz(a)pobox.com> - 1.2.3-1
- update to 1.2.3
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Jan 14 2020 Todd Zullinger <tmz(a)pobox.com> - 1.2.2-1
- update to 1.2.2
- adjust highlight requirement conditional for EL-7+
* Fri Aug 2 2019 Todd Zullinger <tmz(a)pobox.com> - 1.2.1-5
- add missing zlib-devel BuildRequires, fixes FTBFS (#1737005)
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Aug 10 2018 Todd Zullinger <tmz(a)pobox.com> - 1.2.1-2
- use git's default, collision-detecting SHA1 implementation
- verify upstream GPG signatures in %prep
* Fri Aug 3 2018 Todd Zullinger <tmz(a)pobox.com> - 1.2.1-1
- Update to 1.2.1, fixes directory traversal vulnerability
* Fri Jul 13 2018 Todd Zullinger <tmz(a)pobox.com> - 1.2-1
- Update to 1.2
- Include contrib dir in docs
- Update example cgtirc settings
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 15 2018 Todd Zullinger <tmz(a)pobox.com> - 1.1-11
- disable automatic compilation of *.py files outside of python sitelib
- use %bcond_(with|without) to toggle highlight
- use %autosetup macro
- drop crufty curl-devel conditional
- fix parallel make issues in docs
- simplify README.SELinux install
- use %bcond_(with|without) to handle httpd-filesystem
- avoid libcrypto.so requires
- run test suite in %check
* Mon Jun 4 2018 Todd Zullinger <tmz(a)pobox.com>
- make config: drop redundant DESTDIR/INSTALL, add COPYTREE
- remove env shebang's from filter scripts
* Sun Feb 18 2018 Todd Zullinger <tmz(a)pobox.com> - 1.1-10
- Use https for source URLs
- Remove el5 conditionals
- Use cgit.conf and config.mak for cgit/git build options
- Drop obsolete %{buildroot} cleanup
- Add gcc and make BuildRequires
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Sun Jul 30 2017 Florian Weimer <fweimer(a)redhat.com> - 1.1-7
- Rebuild with binutils fix for ppc64le (#1475636)
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon Jul 24 2017 Todd Zullinger <tmz(a)pobox.com> - 1.1-5
- Require webserver on all dists (#1468839)
* Mon Jul 24 2017 Kevin Fenzi <kevin(a)scrye.com> - 1.1-4
- Fix httpd requirements on epel7. Fixes bug #1468839
* Tue Mar 7 2017 Pavel Raiskup <praiskup(a)redhat.com> - 1.1-3
- suggest using correct selinux context (rhbz#1429790)
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Nov 23 2016 Kevin Fenzi <kevin(a)scrye.com> - 1.1-1
- Update to 1.1. Fixes bug #1397820
* Mon Sep 19 2016 Pavel Raiskup <praiskup(a)redhat.com> - 1.0-2
- ensure we inform about git bundling appropriately
* Tue Jun 7 2016 Kevin Fenzi <kevin(a)scrye.com> - 1.0-1
- Update to 1.0
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Sat Jan 16 2016 Kevin Fenzi <kevin(a)scrye.com> - 0.12-1
- Update to 0.12. Fixes bug #1298912
- Fixes CVE-2016-1899 CVE-2016-1900 CVE-2016-1901
* Sat Sep 5 2015 Kevin Fenzi <kevin(a)scrye.com> 0.11.2-3
- Fix up logic around webserver and httpd.
- On Fedora require webserver and httpd-filesystem
- On EPEL require httpd.
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.11.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat Mar 14 2015 Kevin Fenzi <kevin(a)scrye.com> 0.11.2-1
- Update to 0.11.2
* Tue Mar 10 2015 Kevin Fenzi <kevin(a)scrye.com> 0.11.1-1
- Update to 0.11.1
* Mon Feb 16 2015 Kevin Fenzi <kevin(a)scrye.com> 0.11.0-1
- Update to 0.11.0
* Mon Feb 9 2015 Pavel Raiskup <praiskup(a)redhat.com> - 0.10.2-5
- require "any" 'webserver' instead of concrete 'httpd'
(#1138599)
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.10.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Tue Jul 8 2014 Pavel Raiskup <praiskup(a)redhat.com> - 0.10.2-3
- currently epel-7-ppc64 does not have highlight package (#1117261)
* Tue Jul 8 2014 Pavel Raiskup <praiskup(a)redhat.com> - 0.10.2-2
- install README.SELinux documentation again (#1036123)
- generate cgit.conf for httpd >= 2.4 when needed
* Tue Jul 1 2014 Kevin Fenzi <kevin(a)scrye.com> 0.10.2-1
- Update to 0.10.2. Fixes bug #1114970
* Wed Jun 11 2014 Kevin Fenzi <kevin(a)scrye.com> 0.10.1-4
- Add patch to fix raw patch handling
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.10.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Mar 20 2014 Ville Skytt�� <ville.skytta(a)iki.fi> - 0.10.1-2
- Include highlight styles in cgit.css
* Thu Feb 27 2014 Kevin Fenzi <kevin(a)scrye.com> 0.10.1-1
- Update to 0.10.1
- Correctly enable lua filters.
* Wed Feb 19 2014 Kevin Fenzi <kevin(a)scrye.com> 0.10-1
- Update to 0.10
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon May 27 2013 Todd Zullinger <tmz(a)pobox.com> - 0.9.2-1
- Update to 0.9.2, fixes CVE-2013-2117
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Nov 21 2012 Kevin Fenzi <kevin(a)scrye.com> 0.9.1-3
- Fixed ldflags. Fixes bug 878611
* Sat Nov 17 2012 Kevin Fenzi <kevin(a)scrye.com> 0.9.1-2
- Add patch to use correct version of highlight for all branches except epel5
* Thu Nov 15 2012 Kevin Fenzi <kevin(a)scrye.com> 0.9.1-1
- Update to 0.9.1
- Fixes bug #870714 - CVE-2012-4548
- Fixes bug #820733 - CVE-2012-4465
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.0.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Jul 22 2011 Todd Zullinger <tmz(a)pobox.com> - 0.9.0.2-2
- Fix potential XSS vulnerability in rename hint
* Thu Jul 21 2011 Todd Zullinger <tmz(a)pobox.com> - 0.9.0.2-1
- Update to 0.9.0.2
* Sun Mar 6 2011 Todd Zullinger <tmz(a)pobox.com> - 0.9-1
- Update to 0.9
- Fixes: CVE-2011-1027
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1027
- Generate and install man page and html docs
- Use libcurl-devel on RHEL >= 6
- Include example filter scripts
- Update example cgitrc
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.2.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Sep 27 2010 Todd Zullinger <tmz(a)pobox.com> - 0.8.2.1-4
- Appy upstream git patch for CVE-2010-2542 (#618108)
* Fri Aug 21 2009 Tomas Mraz <tmraz(a)redhat.com> - 0.8.2.1-3
- rebuilt with new openssl
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Sun Mar 15 2009 Todd Zullinger <tmz(a)pobox.com> - 0.8.2.1-1
- Update to 0.8.2.1
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Sun Feb 1 2009 Todd Zullinger <tmz(a)pobox.com> - 0.8.2-1
- Update to 0.8.2
- Drop upstreamed Makefile patch
* Sun Jan 18 2009 Todd Zullinger <tmz(a)pobox.com> - 0.8.1-2
- Rebuild with new openssl
* Mon Jan 12 2009 Todd Zullinger <tmz(a)pobox.com> - 0.8.1-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1854292 - [RFE] cgit: EPEL 8 build request.
https://bugzilla.redhat.com/show_bug.cgi?id=1854292
--------------------------------------------------------------------------------