The following Fedora EPEL 8 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-87e6bb3010
chromium-88.0.4324.150-1.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-610589457a
prosody-0.11.8-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bfa4482ae0
libmysofa-1.2-4.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ansible-2.9.18-1.el8
drbd-9.16.0-3.el8
libprojectM-3.1.12-1.el8
netdata-1.29.2-1.el8
python-flask-openid-1.2.5-21.el8
Details about builds:
================================================================================
ansible-2.9.18-1.el8 (FEDORA-EPEL-2021-3428ca1a34)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to security and bugfix release 2.9.18.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 20 2021 Kevin Fenzi <kevin(a)scrye.com> - 2.9.18-1
- Update to 2.9.18.
- Fixes: CVE-2021-20228 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917287 - CVE-2021-20178 ansible: user data leak in snmp_facts module
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917287
[ 2 ] Bug #1917330 - CVE-2021-20178 ansible: user data leak in snmp_facts module
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917330
[ 3 ] Bug #1917463 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917463
[ 4 ] Bug #1917465 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917465
[ 5 ] Bug #1917473 - CVE-2021-20191 ansible: multiple collections exposes secured values
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917473
[ 6 ] Bug #1917474 - CVE-2021-20191 ansible: multiple collections exposes secured values
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917474
--------------------------------------------------------------------------------
================================================================================
drbd-9.16.0-3.el8 (FEDORA-EPEL-2021-70649b45f0)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.16.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Peter Hanecak <hany(a)hany.sk> - 9.16.0-1
- Upstream release of 9.16.0
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.15.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1926718 - drbd-9.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1926718
--------------------------------------------------------------------------------
================================================================================
libprojectM-3.1.12-1.el8 (FEDORA-EPEL-2021-aef703d44c)
The libraries for the projectM music visualization plugin
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.12 (#1931164) ---- New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
3.1.12-1
- Update to 3.1.12 (#1931164)
* Sun Feb 14 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
3.1.11-1
- Update to 3.1.11 (#1928290)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928290 - libprojectM-3.1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1928290
[ 2 ] Bug #1931164 - libprojectM-3.1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1931164
--------------------------------------------------------------------------------
================================================================================
netdata-1.29.2-1.el8 (FEDORA-EPEL-2021-d1004e512d)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 19 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.2-1
- Update from upstream
* Thu Feb 11 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.1-1
- Update from upstream
* Fri Feb 5 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.0-1
- Update from upstream
- Add profile file
- Move edit-config from netdata package to netdata-conf
* Wed Dec 23 2020 Didier Fabert <didier.fabert(a)gmail.com> 1.28.0-2
- Re-enable cloud client
- Un-blundle libwebsockets (using lib from system) on fedora only
* Mon Dec 21 2020 Didier Fabert <didier.fabert(a)gmail.com> 1.28.0-1
- Update from upstream: bugfix from upstream
* Fri Dec 18 2020 Didier Fabert <didier.fabert(a)gmail.com> 1.27.0-1
- Update from upstream
* Fri Dec 11 2020 Ling Wang <LingWangNeuralEng(a)gmail.com> 1.26.0-3
- fix Bug 1906930: change /usr/share/netdata/web group to netdata
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1927059 - netdata-1.29.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1927059
--------------------------------------------------------------------------------
================================================================================
python-flask-openid-1.2.5-21.el8 (FEDORA-EPEL-2021-fe195d993a)
OpenID support for Flask
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1759130 - Branch request: python-flask-openid for epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1759130
--------------------------------------------------------------------------------