The following Fedora EPEL 8 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa06066564
rubygem-rack-2.2.2-1.el8
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-21930ff650
pdns-recursor-4.2.2-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a32cbcaa37
tcpreplay-4.3.3-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
RdRand-2.1.2-2.el8
bashtop-0.9.11-1.el8
canl-c-3.0.0-8.el8
cgdb-0.6.8-14.el8
dnscrypt-proxy-2.0.44-1.el8
gfal2-2.18.0-3.el8
hashcat-6.0.0-1.el8
mmtf-cpp-1.0.0-5.el8
ocserv-1.1.0-1.el8
perl-Sereal-4.014-1.el8
perl-Sereal-Decoder-4.014-1.el8
perl-Sereal-Encoder-4.014-1.el8
perl-Test-MemoryGrowth-0.03-5.el8
python-django-2.2.13-1.el8
python-pyopengl-3.1.5-3.el8
python-vcstool-0.2.10-1.el8
socialscan-1.1.6-1.el8
vcftools-0.1.16-5.el8
Details about builds:
================================================================================
RdRand-2.1.2-2.el8 (FEDORA-EPEL-2020-df6d2bb852)
Library for generating random numbers using the RdRand instruction on Intel CPUs
--------------------------------------------------------------------------------
Update Information:
Fixed typo in rpm spec file ---- Added support for AMD CPUs
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 16 2020 Jirka Hladky <hladky.jiri(a)gmail.com> - 2.1.2-2
- Fixed typo in rpm spec file
* Tue Jun 16 2020 Jirka Hladky <hladky.jiri(a)gmail.com> - 2.1.2-1
- Added support for AMD CPUs
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bashtop-0.9.11-1.el8 (FEDORA-EPEL-2020-aedfe70c5f)
Linux resource monitor
--------------------------------------------------------------------------------
Update Information:
0.9.11 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 17 2020 Alessio <alciregi(a)fedoraproject.org> - 0.9.11-1
- 0.9.11 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1844748 - bashtop-0.9.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1844748
--------------------------------------------------------------------------------
================================================================================
canl-c-3.0.0-8.el8 (FEDORA-EPEL-2020-138ed492cc)
EMI Common Authentication library - bindings for C
--------------------------------------------------------------------------------
Update Information:
EPEL8 build
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1790965 - RFE - build a canl-c package for EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1790965
--------------------------------------------------------------------------------
================================================================================
cgdb-0.6.8-14.el8 (FEDORA-EPEL-2020-fbc0c663e9)
CGDB is a curses-based interface to the GNU Debugger (GDB)
--------------------------------------------------------------------------------
Update Information:
Initial EL8 branch release.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782803 - RFE - Please build a cgdb for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1782803
--------------------------------------------------------------------------------
================================================================================
dnscrypt-proxy-2.0.44-1.el8 (FEDORA-EPEL-2020-97b093ae5c)
Flexible DNS proxy, with support for encrypted DNS protocols
--------------------------------------------------------------------------------
Update Information:
Release 2.0.44
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 17 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.44-1
- Release 2.0.44
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1796742 - dnscrypt-proxy-2.0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1796742
--------------------------------------------------------------------------------
================================================================================
gfal2-2.18.0-3.el8 (FEDORA-EPEL-2020-48eebbd0e8)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream release 2.18.0 ---- Upgrade to upstream release 2.17.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 16 2020 Michal Simon <michal.simon(a)cern.ch> - 2.18.0-1
- Upgrade to upstream release 2.18.0
* Fri May 15 2020 Michal Simon <michal.simon(a)cern.ch> - 2.17.3-1
- Upgrade to upstream release 2.17.3
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 2.17.2-2
- Rebuild (json-c)
--------------------------------------------------------------------------------
================================================================================
hashcat-6.0.0-1.el8 (FEDORA-EPEL-2020-7386adb306)
Advanced password recovery utility
--------------------------------------------------------------------------------
Update Information:
Updated to version 6.0.0. Full release notes:
https://hashcat.net/forum/thread-9303.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 17 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 6.0.0-1
- Updated to version 6.0.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1847592 - hashcat-6.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1847592
--------------------------------------------------------------------------------
================================================================================
mmtf-cpp-1.0.0-5.el8 (FEDORA-EPEL-2020-633ca258ff)
The Macromolecular Transmission Format (MMTF) header only files
--------------------------------------------------------------------------------
Update Information:
- Add msgpack BR ---- - New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
ocserv-1.1.0-1.el8 (FEDORA-EPEL-2020-8d8d1ebf2c)
OpenConnect SSL VPN server
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.1.0 release (introduces ocserv-worker)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 16 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> - 1.1.0-1
- Update to upstream 1.1.0 release (introduces ocserv-worker)
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-4.014-1.el8 (FEDORA-EPEL-2020-7b41ac8c13)
Fast, compact, powerful binary (de-)serialization
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory leak in Sereal::Decoder::looks_like_sereal()
subroutine. It also provides a new perl-Test-MemoryGrowth package that provides
tests for checking a memory leak.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Petr Pisar <ppisar(a)redhat.com> - 4.014-1
- 4.014 bump
* Thu Jun 11 2020 Petr Pisar <ppisar(a)redhat.com> - 4.012-1
- 4.012 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252529 - Review Request: perl-Test-MemoryGrowth - Assert that code does not
cause growth in memory usage
https://bugzilla.redhat.com/show_bug.cgi?id=1252529
[ 2 ] Bug #1846147 - perl-Sereal-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846147
[ 3 ] Bug #1846148 - perl-Sereal-Decoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846148
[ 4 ] Bug #1846149 - perl-Sereal-Encoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846149
[ 5 ] Bug #1846490 - perl-Sereal-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846490
[ 6 ] Bug #1846491 - perl-Sereal-Encoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846491
[ 7 ] Bug #1846493 - perl-Sereal-Decoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846493
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Decoder-4.014-1.el8 (FEDORA-EPEL-2020-7b41ac8c13)
Perl deserialization for Sereal format
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory leak in Sereal::Decoder::looks_like_sereal()
subroutine. It also provides a new perl-Test-MemoryGrowth package that provides
tests for checking a memory leak.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Petr Pisar <ppisar(a)redhat.com> - 4.014-1
- 4.014 bump
* Thu Jun 11 2020 Petr Pisar <ppisar(a)redhat.com> - 4.012-1
- 4.012 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252529 - Review Request: perl-Test-MemoryGrowth - Assert that code does not
cause growth in memory usage
https://bugzilla.redhat.com/show_bug.cgi?id=1252529
[ 2 ] Bug #1846147 - perl-Sereal-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846147
[ 3 ] Bug #1846148 - perl-Sereal-Decoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846148
[ 4 ] Bug #1846149 - perl-Sereal-Encoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846149
[ 5 ] Bug #1846490 - perl-Sereal-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846490
[ 6 ] Bug #1846491 - perl-Sereal-Encoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846491
[ 7 ] Bug #1846493 - perl-Sereal-Decoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846493
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Encoder-4.014-1.el8 (FEDORA-EPEL-2020-7b41ac8c13)
Perl serialization into Sereal format
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory leak in Sereal::Decoder::looks_like_sereal()
subroutine. It also provides a new perl-Test-MemoryGrowth package that provides
tests for checking a memory leak.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Petr Pisar <ppisar(a)redhat.com> - 4.014-1
- 4.014 bump
* Thu Jun 11 2020 Petr Pisar <ppisar(a)redhat.com> - 4.012-1
- 4.012 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252529 - Review Request: perl-Test-MemoryGrowth - Assert that code does not
cause growth in memory usage
https://bugzilla.redhat.com/show_bug.cgi?id=1252529
[ 2 ] Bug #1846147 - perl-Sereal-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846147
[ 3 ] Bug #1846148 - perl-Sereal-Decoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846148
[ 4 ] Bug #1846149 - perl-Sereal-Encoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846149
[ 5 ] Bug #1846490 - perl-Sereal-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846490
[ 6 ] Bug #1846491 - perl-Sereal-Encoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846491
[ 7 ] Bug #1846493 - perl-Sereal-Decoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846493
--------------------------------------------------------------------------------
================================================================================
perl-Test-MemoryGrowth-0.03-5.el8 (FEDORA-EPEL-2020-7b41ac8c13)
Assert that code does not cause growth in memory usage
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory leak in Sereal::Decoder::looks_like_sereal()
subroutine. It also provides a new perl-Test-MemoryGrowth package that provides
tests for checking a memory leak.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252529 - Review Request: perl-Test-MemoryGrowth - Assert that code does not
cause growth in memory usage
https://bugzilla.redhat.com/show_bug.cgi?id=1252529
[ 2 ] Bug #1846147 - perl-Sereal-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846147
[ 3 ] Bug #1846148 - perl-Sereal-Decoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846148
[ 4 ] Bug #1846149 - perl-Sereal-Encoder-4.012 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846149
[ 5 ] Bug #1846490 - perl-Sereal-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846490
[ 6 ] Bug #1846491 - perl-Sereal-Encoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846491
[ 7 ] Bug #1846493 - perl-Sereal-Decoder-4.014 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846493
--------------------------------------------------------------------------------
================================================================================
python-django-2.2.13-1.el8 (FEDORA-EPEL-2020-232e4f7411)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.13 - Security fix for CVE-2020-7471 - Security fix for
CVE-2020-9402 - Security fix for CVE-2020-13254 - Security fix for
CVE-2020-13596
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 7 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.2.13-1
- Update to 2.2.13
- Security fix for CVE-2020-7471 (rhbz#1798519)
- Security fix for CVE-2020-9402 (rhbz#1810094)
- Security fix for CVE-2020-13254 (rhbz#1843616)
- Security fix for CVE-2020-13596 (rhbz#1843626)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1798515 - CVE-2020-7471 django: potential SQL injection via
StringAgg(delimiter)
https://bugzilla.redhat.com/show_bug.cgi?id=1798515
[ 2 ] Bug #1810088 - CVE-2020-9402 django: potential SQL injection via
"tolerance" parameter in GIS functions and aggregates on Oracle
https://bugzilla.redhat.com/show_bug.cgi?id=1810088
[ 3 ] Bug #1843614 - CVE-2020-13254 django: potential data leakage via malformed
memcached keys
https://bugzilla.redhat.com/show_bug.cgi?id=1843614
[ 4 ] Bug #1843625 - CVE-2020-13596 django: possible XSS via admin
ForeignKeyRawIdWidget
https://bugzilla.redhat.com/show_bug.cgi?id=1843625
--------------------------------------------------------------------------------
================================================================================
python-pyopengl-3.1.5-3.el8 (FEDORA-EPEL-2020-0c5c70cf1f)
Python bindings for OpenGL
--------------------------------------------------------------------------------
Update Information:
Rebuilt for Python 3.9
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1847745 - please add python-pyopengl to epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1847745
--------------------------------------------------------------------------------
================================================================================
python-vcstool-0.2.10-1.el8 (FEDORA-EPEL-2020-0953e4bd9c)
Tool to invoke vcs commands on multiple repositories
--------------------------------------------------------------------------------
Update Information:
Update to vcstool 0.2.10
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Scott K Logan <logans(a)cottsay.net> - 0.2.10-1
- Update to 0.2.10 (rhbz#1846217)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1846217 - python-vcstool-0.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1846217
--------------------------------------------------------------------------------
================================================================================
socialscan-1.1.6-1.el8 (FEDORA-EPEL-2020-0f48f85bd2)
CLI and library for usage checking of user names and email addresses
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
vcftools-0.1.16-5.el8 (FEDORA-EPEL-2020-08c0eb0069)
VCF file manipulation tools
--------------------------------------------------------------------------------
Update Information:
- Update to latest upstream release 0.1.16 for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1833324 - Build vcftools to EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1833324
--------------------------------------------------------------------------------