The following Fedora EPEL 8 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-52e0512741
java-latest-openjdk-19.0.2.0.7-1.rolling.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
davix-0.8.4-1.el8
retsnoop-0.9.4-2.el8
syncthing-1.23.1-1.el8
syslog-ng-3.23.1-3.el8
Details about builds:
================================================================================
davix-0.8.4-1.el8 (FEDORA-EPEL-2023-a85967f326)
Toolkit for http based file management
--------------------------------------------------------------------------------
Update Information:
Davix 0.8.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 7 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.8.4-1
- New upstream release 0.8.4
- Drop patches accepted upstream
* Tue Jan 24 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.8.3-4
- Rebuild for gtest 1.13.0
- Don't downgrade the C++ version
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Dec 21 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.8.3-2
- Rebuild against gsoap-2.8.124 (bug #2155567)
--------------------------------------------------------------------------------
================================================================================
retsnoop-0.9.4-2.el8 (FEDORA-EPEL-2023-f8b2e6e08b)
A tool for investigating kernel error call stacks
--------------------------------------------------------------------------------
Update Information:
`retsnoop` 0.9.4: - fix IP (instruction pointer) fetching on non-x86_64
architectures on older kernels; - handle io_uring source code files better,
after Linux code reorganization; - automatically pick debugfs
(/sys/kernel/debug/tracing) or tracefs (/sys/kernel/tracing), whichever is
available; - handle very old kernels that don't support BPF global data more
gracefully.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 7 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.9.4-2
- Update vendored dependencies
- also generate bundled provides (courtesy of zincati's bundled-
provides.jq)
* Tue Feb 7 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.9.4-1
- Update to 0.9.4
* Tue Feb 7 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.9.3-2
- Explicitly require llvm
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2167831 - retsnoop-0.9.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2167831
--------------------------------------------------------------------------------
================================================================================
syncthing-1.23.1-1.el8 (FEDORA-EPEL-2023-eb9b142b95)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.23.1. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v1.23.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 7 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.23.1-1
- Update to version 1.23.1
--------------------------------------------------------------------------------
================================================================================
syslog-ng-3.23.1-3.el8 (FEDORA-EPEL-2023-31e354d8e4)
Next-generation syslog server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-38725
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 6 2023 Peter Czanik <peter(a)czanik.hu> - 3.23.1-3
- add 4110.diff to fix CVE-2022-38725
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2164618 - CVE-2022-38725 syslog-ng: integer overflow in the RFC3164 parser
can lead to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=2164618
--------------------------------------------------------------------------------