The following Fedora EPEL 8 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-cc21ff72bd
libtpms-0.8.6-0.20210910git7a4d46a119.el8.0
The following builds have been pushed to Fedora EPEL 8 updates-testing
mock-core-configs-36-1.el8
nordugrid-arc-6.13.0-1.el8
python-ogr-0.29.0-1.el8
python-rsa-4.7.2-1.el8
python-xvfbwrapper-0.2.9-2.el8
Details about builds:
================================================================================
mock-core-configs-36-1.el8 (FEDORA-EPEL-2021-9b94fc418c)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
- Align CentOS Stream 9 with the production configuration - Disable installing
weak dependencies on RHEL rebuilds - Disable installing weak dependencies on
CentOS Stream - Validate GPG signatures for CentOS Stream 9 - Add eurolinux-8
x86_64 and i686 buildroots
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 16 2021 Miroslav Such�� <msuchy(a)redhat.com> 36-1
- config: Align CentOS Stream 9 with the production configuration
(ngompa13(a)gmail.com)
- config: Disable installing weak dependencies on RHEL rebuilds
(ngompa13(a)gmail.com)
- config: Disable installing weak dependencies on CentOS Stream
(ngompa13(a)gmail.com)
- config: Validate GPG signatures for CentOS Stream 9 (ngompa13(a)gmail.com)
- Add eurolinux-8 x86_64 and i686 buildroots (alex(a)euro-linux.com)
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.13.0-1.el8 (FEDORA-EPEL-2021-5634ab7bcb)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
NorduGrid ARC 6.13.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 15 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.13.0-1
- Update to version 6.13.0
- Fix compilation with OpenSSL 3.0
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 6.12.0-4
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.29.0-1.el8 (FEDORA-EPEL-2021-102665586d)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.29.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 16 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.29.0-1
- Please check
[
COMPATIBILITY.md](https://github.com/packit/ogr/blob/main/COMPATIBILITY.md) to see which
methods are implemented for
particular services.
- Ogr now supports reacting to a comment (issue, pull request) with a given
reaction. It's possible to obtain the reactions and delete them (only when
reaction is added by using ogr API). (#636)
--------------------------------------------------------------------------------
================================================================================
python-rsa-4.7.2-1.el8 (FEDORA-EPEL-2021-d5cf26cbeb)
Pure-Python RSA implementation
--------------------------------------------------------------------------------
Update Information:
Update to 4.7.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 15 2021 Jason Montleon <jmontleo(a)redhat.com> - 4.7.2-1
- Update to 4.7.2
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 4.6-4
- Rebuilt for Python 3.10
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1895780 - CVE-2020-25658 python-rsa: bleichenbacher timing oracle attack
against RSA decryption [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1895780
[ 2 ] Bug #1914693 - python-rsa-4.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1914693
--------------------------------------------------------------------------------
================================================================================
python-xvfbwrapper-0.2.9-2.el8 (FEDORA-EPEL-2021-45a27e5622)
run headless display inside X virtual framebuffer (Xvfb)
--------------------------------------------------------------------------------
Update Information:
add requirement to xorg-x11-server-Xvfb (rhbz#2004164)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 15 2021 Matthias Runge <mrunge(a)redhat.com> - 0.2.9-2
- add requirement to xorg-x11-server-Xvfb (rhbz#2004164)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2004164 - Missing dependency on xorg-x11-server-Xvfb
https://bugzilla.redhat.com/show_bug.cgi?id=2004164
--------------------------------------------------------------------------------