The following Fedora EPEL 8 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-49fe68774a
plantuml-1.2023.11-1.el8
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9abc3565b5
chromium-117.0.5938.92-2.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
distribution-gpg-keys-1.96-1.el8
mock-5.2-1.el8
mock-core-configs-39.1-1.el8
tor-0.4.8.7-1.el8
xrdp-0.9.23.1-1.el8
Details about builds:
================================================================================
distribution-gpg-keys-1.96-1.el8 (FEDORA-EPEL-2023-45ace77fca)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
Mock / configs see release notes:
https://rpm-software-
management.github.io/mock/Release-Notes-5.2
https://rpm-software-
management.github.io/mock/Release-Notes-5.1.1
https://rpm-software-
management.github.io/mock/Release-Notes-5.1 Automatic update for distribution-
gpg-keys-1.96-1.el8. ##### **Changelog for distribution-gpg-keys** ``` * Thu
Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.96-1 - Restructure openSUSE GPG
keys * Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1 - new release
to test new release process * Thu Sep 14 2023 Miroslav Such��
<msuchy(a)redhat.com> 1.94-1 - new release because testing new release process *
Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.93-1 - Add SUSE ALP signing
keys - Add SLE 2023 signing keys ``` ---- Automatic update for distribution-
gpg-keys-1.95-1.el8. ##### **Changelog for distribution-gpg-keys** ``` * Thu
Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1 - new release to test new
release process * Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.94-1 -
new release because testing new release process * Thu Sep 14 2023 Miroslav
Such�� <msuchy(a)redhat.com> 1.93-1 - Add SUSE ALP signing keys - Add SLE 2023
signing keys ``` ---- See [full release notes](https://rpm-software-
management.github.io/mock/Release-Notes-3.3) Allow running Mock as root again.
See [full release notes](https://rpm-software-management.github.io/mock/Release-
Notes-3.2) - Fix the docker environment check for cgroupv2
(achal.velani(a)oracle.com) - mock-scm: recommend rpkg-util - don't use rpmbuild
--noclean option if not supported - do only one fork() while reading --list-
chroots configs - Error() (exceptions) code rewritten and simplified - dropped
mock SGID from /var/{lib,cache}/mock dirs - change license to spdx
(msuchy(a)redhat.com) - podman.py: don't let podman warnings taint container id
(micho(a)redhat.com) See [full release notes](https://rpm-software-
management.github.io/mock/Release-Notes-3.1) mock - let rpmbuild know that it
should not clean up after itself (msuchy(a)redhat.com) - typo in the subscription
error message - root_cache: simplify decompressing with BSD tar - switch from
/bin/gtar to /bin/tar by default mock-core-configs - add ELN local Koji repo
- sync epel-8 and epel-9 templates - Add Rocky Linux 9 Configuration and Mod RL8
(label(a)rockylinux.org) - Update Fedora ELN repo template (sgallagh(a)redhat.com) -
EuroLinux 9 chroot configs added (git(a)istiak.com) - Fedora 34 is EOL -
circlelinux+epel-8 as epel-8 alternative - Fix dist value for openSUSE Leap 15.4
(ngompa(a)opensuse.org) - Add CircleLinux 8 configs (bella(a)cclinux.org) - Add
openSUSE Leap 15.4 configs (ngompa(a)opensuse.org) - Move openSUSE Leap 15.2 to
EOL directory (ngompa(a)opensuse.org) - Use MirrorCache for openSUSE repositories
instead of MirrorBrain (ngompa(a)opensuse.org) - Add Anolis OS 7 and Anolis OS 8
templates and configs (wb-zh951434(a)alibaba-inc.com) distribution-gpg-keys -
Add Anolis OS GPG Keys - added Rocky linux - updated Copr keys
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.96-1
- Restructure openSUSE GPG keys
* Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1
- new release to test new release process
* Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.94-1
- new release because testing new release process
* Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.93-1
- Add SUSE ALP signing keys
- Add SLE 2023 signing keys
--------------------------------------------------------------------------------
================================================================================
mock-5.2-1.el8 (FEDORA-EPEL-2023-45ace77fca)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
Mock / configs see release notes:
https://rpm-software-
management.github.io/mock/Release-Notes-5.2
https://rpm-software-
management.github.io/mock/Release-Notes-5.1.1
https://rpm-software-
management.github.io/mock/Release-Notes-5.1 Automatic update for distribution-
gpg-keys-1.96-1.el8. ##### **Changelog for distribution-gpg-keys** ``` * Thu
Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.96-1 - Restructure openSUSE GPG
keys * Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1 - new release
to test new release process * Thu Sep 14 2023 Miroslav Such��
<msuchy(a)redhat.com> 1.94-1 - new release because testing new release process *
Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.93-1 - Add SUSE ALP signing
keys - Add SLE 2023 signing keys ``` ---- Automatic update for distribution-
gpg-keys-1.95-1.el8. ##### **Changelog for distribution-gpg-keys** ``` * Thu
Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1 - new release to test new
release process * Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.94-1 -
new release because testing new release process * Thu Sep 14 2023 Miroslav
Such�� <msuchy(a)redhat.com> 1.93-1 - Add SUSE ALP signing keys - Add SLE 2023
signing keys ``` ---- See [full release notes](https://rpm-software-
management.github.io/mock/Release-Notes-3.3) Allow running Mock as root again.
See [full release notes](https://rpm-software-management.github.io/mock/Release-
Notes-3.2) - Fix the docker environment check for cgroupv2
(achal.velani(a)oracle.com) - mock-scm: recommend rpkg-util - don't use rpmbuild
--noclean option if not supported - do only one fork() while reading --list-
chroots configs - Error() (exceptions) code rewritten and simplified - dropped
mock SGID from /var/{lib,cache}/mock dirs - change license to spdx
(msuchy(a)redhat.com) - podman.py: don't let podman warnings taint container id
(micho(a)redhat.com) See [full release notes](https://rpm-software-
management.github.io/mock/Release-Notes-3.1) mock - let rpmbuild know that it
should not clean up after itself (msuchy(a)redhat.com) - typo in the subscription
error message - root_cache: simplify decompressing with BSD tar - switch from
/bin/gtar to /bin/tar by default mock-core-configs - add ELN local Koji repo
- sync epel-8 and epel-9 templates - Add Rocky Linux 9 Configuration and Mod RL8
(label(a)rockylinux.org) - Update Fedora ELN repo template (sgallagh(a)redhat.com) -
EuroLinux 9 chroot configs added (git(a)istiak.com) - Fedora 34 is EOL -
circlelinux+epel-8 as epel-8 alternative - Fix dist value for openSUSE Leap 15.4
(ngompa(a)opensuse.org) - Add CircleLinux 8 configs (bella(a)cclinux.org) - Add
openSUSE Leap 15.4 configs (ngompa(a)opensuse.org) - Move openSUSE Leap 15.2 to
EOL directory (ngompa(a)opensuse.org) - Use MirrorCache for openSUSE repositories
instead of MirrorBrain (ngompa(a)opensuse.org) - Add Anolis OS 7 and Anolis OS 8
templates and configs (wb-zh951434(a)alibaba-inc.com) distribution-gpg-keys -
Add Anolis OS GPG Keys - added Rocky linux - updated Copr keys
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 27 2023 Pavel Raiskup <praiskup(a)redhat.com> 5.2-1
- Fix '~' user source expansion for --copyout
- Compatibility fix with EL 8
- Log out the command-line arguments
- Make sure that 'state' is always finished
- README.md: cleaning up
- Post-release administrivia
* Mon Sep 18 2023 Pavel Raiskup <praiskup(a)redhat.com> 5.1.1-1
- keep re-creating the root directory for each build
* Fri Sep 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 5.1-1
- new upstream release, per
https://rpm-software-management.github.io/mock/Release-Notes-5.1
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-39.1-1.el8 (FEDORA-EPEL-2023-45ace77fca)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
Mock / configs see release notes:
https://rpm-software-
management.github.io/mock/Release-Notes-5.2
https://rpm-software-
management.github.io/mock/Release-Notes-5.1.1
https://rpm-software-
management.github.io/mock/Release-Notes-5.1 Automatic update for distribution-
gpg-keys-1.96-1.el8. ##### **Changelog for distribution-gpg-keys** ``` * Thu
Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.96-1 - Restructure openSUSE GPG
keys * Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1 - new release
to test new release process * Thu Sep 14 2023 Miroslav Such��
<msuchy(a)redhat.com> 1.94-1 - new release because testing new release process *
Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.93-1 - Add SUSE ALP signing
keys - Add SLE 2023 signing keys ``` ---- Automatic update for distribution-
gpg-keys-1.95-1.el8. ##### **Changelog for distribution-gpg-keys** ``` * Thu
Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.95-1 - new release to test new
release process * Thu Sep 14 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.94-1 -
new release because testing new release process * Thu Sep 14 2023 Miroslav
Such�� <msuchy(a)redhat.com> 1.93-1 - Add SUSE ALP signing keys - Add SLE 2023
signing keys ``` ---- See [full release notes](https://rpm-software-
management.github.io/mock/Release-Notes-3.3) Allow running Mock as root again.
See [full release notes](https://rpm-software-management.github.io/mock/Release-
Notes-3.2) - Fix the docker environment check for cgroupv2
(achal.velani(a)oracle.com) - mock-scm: recommend rpkg-util - don't use rpmbuild
--noclean option if not supported - do only one fork() while reading --list-
chroots configs - Error() (exceptions) code rewritten and simplified - dropped
mock SGID from /var/{lib,cache}/mock dirs - change license to spdx
(msuchy(a)redhat.com) - podman.py: don't let podman warnings taint container id
(micho(a)redhat.com) See [full release notes](https://rpm-software-
management.github.io/mock/Release-Notes-3.1) mock - let rpmbuild know that it
should not clean up after itself (msuchy(a)redhat.com) - typo in the subscription
error message - root_cache: simplify decompressing with BSD tar - switch from
/bin/gtar to /bin/tar by default mock-core-configs - add ELN local Koji repo
- sync epel-8 and epel-9 templates - Add Rocky Linux 9 Configuration and Mod RL8
(label(a)rockylinux.org) - Update Fedora ELN repo template (sgallagh(a)redhat.com) -
EuroLinux 9 chroot configs added (git(a)istiak.com) - Fedora 34 is EOL -
circlelinux+epel-8 as epel-8 alternative - Fix dist value for openSUSE Leap 15.4
(ngompa(a)opensuse.org) - Add CircleLinux 8 configs (bella(a)cclinux.org) - Add
openSUSE Leap 15.4 configs (ngompa(a)opensuse.org) - Move openSUSE Leap 15.2 to
EOL directory (ngompa(a)opensuse.org) - Use MirrorCache for openSUSE repositories
instead of MirrorBrain (ngompa(a)opensuse.org) - Add Anolis OS 7 and Anolis OS 8
templates and configs (wb-zh951434(a)alibaba-inc.com) distribution-gpg-keys -
Add Anolis OS GPG Keys - added Rocky linux - updated Copr keys
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 39.1-1
- Add openSUSE Leap 15.5 (neal(a)gompa.dev)
- Move openSUSE Leap 15.3 to EOL (neal(a)gompa.dev)
- Mageia 9 branched, Mageia Cauldron retargeted to Mageia 10 (neal(a)gompa.dev)
--------------------------------------------------------------------------------
================================================================================
tor-0.4.8.7-1.el8 (FEDORA-EPEL-2023-6163dc79db)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to latest upstream release
https://forum.torproject.org/t/stable-
release-0-4-8-7/9398
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 27 2023 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.8.7-1
- update to latest upstream release
https://forum.torproject.org/t/stable-release-0-4-8-7/9398
* Wed Aug 30 2023 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.8.5-1
- update to latest upstream release
https://forum.torproject.org/t/stable-release-0-4-8-5/8996
* Fri Aug 25 2023 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.8.4-1
- update to latest upstream release
https://forum.torproject.org/t/stable-release-0-4-8-4/8884
* Tue Aug 1 2023 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.7.14-1
- update to latest upstream release
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.4.7.13-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Mar 25 2023 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.7.13-3
- Rebuilt to address issue bz#2180871
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.4.7.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211726 - tor-0.4.9.0-alpha-dev is available
https://bugzilla.redhat.com/show_bug.cgi?id=2211726
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.23.1-1.el8 (FEDORA-EPEL-2023-27c714a6a4)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Release notes for xrdp v0.9.23.1 (2023/09/27) This is a security fix release
for CVE-2023-42822. This update is recommended for all xrdp users. Security
fixes - CVE-2023-42822: Unchecked access to font glyph info
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 28 2023 Bojan Smojver <bojan(a)rexursive.com> - 1:0.9.23.1-1
- Update to 0.9.23.1
- CVE-2023-42822
--------------------------------------------------------------------------------