The following Fedora EPEL 8 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e00c3d01e
cutter-re-2.2.0-1.el8 rizin-0.5.1-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ddupdate-0.7.1-6.el8
rpki-client-8.3-1.el8
Details about builds:
================================================================================
ddupdate-0.7.1-6.el8 (FEDORA-EPEL-2023-f1ceda603e)
Tool updating DNS data for dynamic IP addresses
--------------------------------------------------------------------------------
Update Information:
Initial epel8 build
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Aug 3 2022 Alec Leamas <leamas.alec(a)nowhere.net> - 0.7.1-5
- Added missing python3-keyring dependency, upstream bug 71.
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 0.7.1-3
- Rebuilt for Python 3.11
* Sun Apr 10 2022 Alec Leamas <leamas.alec(a)nowhere.net> - 0.7.1-2
- Add upstream patch: manpages update.
- Add upstream patch: Drop dead dtnds service.
* Wed Apr 6 2022 Alec Leamas <leamas.alec(a)nowhere.net> - 0.7.1-1
- New version
- Drop upstreamed autocompletion patch
- Add patch renaming ddupdate-netrc-to-keyring
* Thu Mar 31 2022 Alec Leamas <leamas.alec(a)nowhere.net> - 0.7.0-2
- Add new autocompletion patch
* Thu Mar 31 2022 Alec Leamas <leamas.alec(a)nowhere.net> - 0.7.0-1
- New upstream release
* Mon Feb 14 2022 Alec Leamas <leamas.alec(a)nowhere.net> - 0.6.6-1
- New upstream release
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.5-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 0.6.5-5
- Rebuilt for Python 3.10
* Thu Feb 18 2021 Ivan Mironov <mironov.ivan(a)gmail.com> - 0.6.5-4
- Add python*-requests which is required for Cloudflare plugin
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jun 12 2020 Alec Leamas <leamas.alec(a)nowhere.net> - 0.6.5-1
- New upstream version
- Some attempts to make it build on opensuse.
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.4-6
- Rebuilt for Python 3.9
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.4-4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.4-3
- Rebuilt for Python 3.8
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Jul 8 2019 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.4-1
- New upstream version
- Move systemd files: systemd/system -> systemd/user
* Mon Jun 17 2019 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.3-1
- New upstream version
- Fixes upstream #21, ipv6 config file parsing bug.
* Tue Apr 9 2019 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.2-1
- new version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.1-2
- Rebuilt for Python 3.7
* Thu Jun 14 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.1-1
- New upstream maintenance release.
* Sun Feb 18 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.0-2
- Drop redundant R: python3-straight-plugin
* Sun Feb 18 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.0-1
- New upstream version.
- Drop support for system-wide services.
- New BR pkg-config.
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
��
* Sun Jan 28 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.5.2-1
- New upstream release
* Sat Jan 13 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.2.0-1
- New upstream release.
* Mon Jan 8 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.1.0-3
- Review remarks: Use %{_unitdir}, %py3_install, skip debug_package nil
* Sun Jan 7 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.1.0-2
- Fix unpackaged document file.
* Sun Jan 7 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.1.0-1
- New upstream release
* Thu Jan 4 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.6-3
- NetworkManager support patch, from upstream
* Thu Jan 4 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.6-2
- Fix epel-7 build error
* Wed Jan 3 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.6-1
- New upstream release.
* Wed Jan 3 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.5-0.6.eb30248
- rebuilt
* Tue Jan 2 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.5-0.5.rc2
- Published on COPR.
- Fix version-release
- Fix python version references.
* Tue Jan 2 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.5rc2-0.4
- New upstream release
* Tue Jan 2 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.5rc1-0.1
- New upstream release
* Fri Dec 29 2017 Alec Leamas <leamas.alec(a)gmail.com> - 0.0.2-0.2
- New upstream release, initial install testing done.
* Tue Dec 26 2017 Alec Leamas <leamas.alec(a)gmail.com> - 0.1-0.1.95f9fd8.el8
- Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2165281 - Please branch and build ddupdate in epel8 and epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2165281
--------------------------------------------------------------------------------
================================================================================
rpki-client-8.3-1.el8 (FEDORA-EPEL-2023-4e64fcee13)
OpenBSD RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
# rpki-client 8.3 - The `expires` key in the JSON/CSV/OpenBGPD output formats
is now calculated with more accuracy. The calculation takes into account the
nextUpdate value of all intermediate CRLs in the signature path towards the
trust anchor, in addition to the expiry moment of the leaf-CRL and CAs. -
Handling of CRLs and Manifests in the face of inconsistent RRDP delta
publications has been improved. A copy of an alternative version of the
applicable CRL is kept in the staging area of the cache directory, in order to
increase the potential for establishing a complete publication point, in cases
where a single publication point update was smeared across multiple RRDP delta
files. - The OpenBGPD configuration output now includes validated Autonomous
System Provider Authorization (ASPA) payloads as an `aspa-set {}` configuration
block. - When rpki-client is invoked with increased verbosity (`-v`), the
current RRDP Serial & Session ID are shown to aid debugging. - Self-signed
X.509 certificates (such as Trust Anchor certificates) now are considered
invalid if they contain an X.509 `AuthorityInfoAccess` extension. - Signed
Objects where the CMS signing-time attribute contains a timestamp later then the
X.509 certificate's `notAfter` timestamp are considered invalid. - Manifests
where the CMS signing-time attribute contains a timestamp later then the
Manifest eContent `nextUpdate` timestamp are considered invalid. - Any objects
whose CRL Distribution Points extension contains a CRLIssuer, CRL Reasons, or
`nameRelativeToCRLIssuer` field are considered invalid in accordance with RFC
6487 section 4.8.6. - For every X.509 certificate the SHA-1 of the Subject
Public Key is calculated and compared to the Subject Key Identifier (SKI), if a
mismatch is found the certificate is not trusted. - Require the outside-TBS
signature OID for every X.509 intermediate CA certificate and CRL to be
`sha256WithRSAEncryption`. - Require the RSA key pair modulus and public
exponent parameters to strictly conform to the RFC 7935 profile. - Ensure
there is no trailing garbage present in Signed Objects beyond the self-embedded
length field. - Require RRDP Session IDs to strictly be version 4 UUIDs. -
When decoding and validating an individual RPKI file using filemode (`rpki-
client -f file`), display the signature path towards the trust anchor, and the
timestamp when the signature path will expire. - When decoding and validating
an individual RPKI file using filemode (`rpki-client -f file`), display the
optional CMS signing-time, and non-optional X.509 notBefore, and X.509 notAfter
timestamps.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 19 2023 Robert Scheck <robert(a)fedoraproject.org> 8.3-1
- Upgrade to 8.3 (#2179641)
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2179641 - rpki-client-8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2179641
--------------------------------------------------------------------------------