The following Fedora EPEL 8 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d521530f6a
amavis-2.13.1-1.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-ac18018db8
tcpreplay-4.4.4-5.el8
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-bf31852fe0
w3m-0.5.3-63.git20230121.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f653e0bbf9
chromium-122.0.6261.128-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
csmock-3.5.3-1.el8
edac-utils-0.18-27.el8
lcmaps-1.6.6-14.el8
Details about builds:
================================================================================
csmock-3.5.3-1.el8 (FEDORA-EPEL-2024-4f9d0665fa)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
update to latest upstream (fixes CVE-2024-2243)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 20 2024 Kamil Dudka <kdudka(a)redhat.com> 3.5.3-1
- update to latest upstream (fixes CVE-2024-2243)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2270495 - TRIAGE CVE-2024-2243 csmock: command injection vulnerability in
csmock-plugin-snyk [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2270495
[ 2 ] Bug #2270496 - TRIAGE CVE-2024-2243 csmock: command injection vulnerability in
csmock-plugin-snyk [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2270496
--------------------------------------------------------------------------------
================================================================================
edac-utils-0.18-27.el8 (FEDORA-EPEL-2024-fcc52d1445)
Userspace helper for kernel EDAC drivers
--------------------------------------------------------------------------------
Update Information:
Fully patch obsolete FSF postal address in license text
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 20 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.18-27
- Fully patch obsolete FSF postal address in license text
- Since upstream merged the PR for this, we now patch the license text file
* Wed Mar 20 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.18-24
- Slightly simplify a files list
* Wed Mar 20 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.18-23
- Fix typo in spec file comment
* Wed Mar 20 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.18-22
- Update License field to SPDX
* Wed Mar 20 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.18-21
- Fix extra newline in description
--------------------------------------------------------------------------------
================================================================================
lcmaps-1.6.6-14.el8 (FEDORA-EPEL-2024-23abec182e)
Grid (X.509) and VOMS credentials to local account mapping service
--------------------------------------------------------------------------------
Update Information:
This is the first build of LCMAPS for EPEL8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 20 2024 Mischa Sall�� <msalle(a)nikhef.nl> - 1.6.6-14
- Use https for source URL and URL
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.6.6-7
- Rebuilt with OpenSSL 3.0.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Feb 5 2019 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.6-1
- Update to version 1.6.6
* Mon Feb 4 2019 Mischa Sall�� <msalle(a)nikhef.nl> 1.6.5-11
- Update globus dependencies
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Wed Sep 17 2014 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.5-2
- Compounded the changelog entries of intermediate versions
* Wed Sep 17 2014 Mischa Salle <msalle(a)nikhef.nl> 1.6.5-1
- Do not install very old doc/INSTALL_WITH_WORKSPACE_SERVICE
- Install NEWS file
- Fix macro expansion for pkgconfig to include only rhel not fedora
- Add new interface files, Remove the unused patch
- Create empty plugin directory
- Do not remove lcmaps_plugin_example related files, as they are not installed
* Mon Nov 25 2013 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.1-7
- Patch the example DB file so it doesn't contain an
architecture-specific path. Fixes bug #1034019.
* Tue Nov 12 2013 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.1-6
- Make requirements arch-specific for devel package
* Mon Nov 11 2013 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.1-5
- put BuildRoot and clean section back in for EPEL5
- Add requirement on pkgconfig for EPEL5
- Include Provides/Obsoletes to rename interface packages
* Wed Oct 30 2013 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.1-3
- Reduced the number of development packages
* Wed Oct 23 2013 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.1-2
- Renamed the -interface packages to -devel
- Dropped buildroot and defattr
* Wed Feb 27 2013 Mischa Salle <msalle(a)nikhef.nl> 1.6.1-1
- install BUGS as doc
- updated version
* Tue Feb 26 2013 Mischa Salle <msalle(a)nikhef.nl> 1.6.0-1
- updated version
* Tue Oct 23 2012 Mischa Salle <msalle(a)nikhef.nl> 1.5.7-1
- Do not install INSTALL in doc.
- Update URL.
- updated version
* Fri Jul 6 2012 Mischa Salle <msalle(a)nikhef.nl> 1.5.6-1
- updated version
* Mon Apr 23 2012 Mischa Salle <msalle(a)nikhef.nl> 1.5.5-1
- build both with and without gsi packages in one spec file
- updated version
* Mon Mar 26 2012 Mischa Salle <msalle(a)nikhef.nl> 1.5.4-1
- updated version
* Fri Mar 16 2012 Mischa Salle <msalle(a)nikhef.nl> 1.5.3-1
- updated version
* Mon Jan 30 2012 Mischa Salle <msalle(a)nikhef.nl> 1.5.2-3
- add manpage in main package
- updated version
* Wed Dec 14 2011 Mischa Salle <msalle(a)nikhef.nl> 1.5.0-1
* Tue Sep 20 2011 Mischa Salle <msalle(a)nikhef.nl> 1.4.33-1
- updated version
- added obsoletes for lcmaps-interface
* Fri Sep 16 2011 Mischa Salle <msalle(a)nikhef.nl> 1.4.32-1
- updated version
* Tue Sep 13 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.31-5
- Repaired the unintended post macro in the changelog
* Wed Aug 10 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.31-4
- Split interface according to dependencies on globus and openssl
* Wed Jul 20 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.30-2
- Moved the .so files to the runtime package as these are dlopened
* Wed Jul 13 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.30-1
- updated version
* Mon Jul 4 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.4.29-2
- Make interface package noarch
- Remove Vendor tag
* Mon Jul 4 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.29-1
- Updated version
* Wed Mar 23 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.28-2
- removed explicit requires
* Wed Mar 9 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.28-1
- Made examples out of config files
* Tue Mar 8 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.27-2
- Disable rpath in configure
* Mon Mar 7 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.27-1
- Fixed globus dependencies
- added ldconfig to post and postun section
* Fri Mar 4 2011 Dennis van Dok <dennisvd(a)nikhef.nl> 1.4.26-3
- disabled static libraries
- added proper base package requirement for devel
- fixed license string
* Mon Feb 21 2011 Dennis van Dok <dennisvd(a)nikhef.nl>
- Initial build.
--------------------------------------------------------------------------------