The following Fedora EPEL 8 Security updates need testing: Age URL 62 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e00c3d01e cutter-re-2.2.0-1.el8 rizin-0.5.1-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1f39b04ca0 kitty-0.26.5-7.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9191f31d36 python-waitress-1.4.3-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-80ad867af8 chromium-113.0.5672.92-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-29e8ff9273 osslsigncode-2.5-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
R-qtl-1.60-1.el8 ansible-7.2.0-1.el8 ansible-collection-community-general-7.0.0-1.el8 dropbear-2019.78-5.el8 editorconfig-0.12.6-1.el8 fedora-license-data-1.21-1.el8 nickle-2.91-1.el8 python-pystemd-0.13.1-1.el8 xrdp-0.9.22-4.el8
Details about builds:
================================================================================ R-qtl-1.60-1.el8 (FEDORA-EPEL-2023-6bceedbc89) Tools for analyzing QTL experiments -------------------------------------------------------------------------------- Update Information:
R qtl 1.60 -------------------------------------------------------------------------------- ChangeLog:
* Tue May 16 2023 Mattias Ellert mattias.ellert@physics.uu.se - 1.60-1 - Update to 1.60 - Drop workaround for broken openblas on aarch64 in RHEL 8 and 9 Fixed in RHEL 8.8 and 9.2 respectively --------------------------------------------------------------------------------
================================================================================ ansible-7.2.0-1.el8 (FEDORA-EPEL-2023-ca07fe358c) Curated set of Ansible collections included in addition to ansible-core -------------------------------------------------------------------------------- Update Information:
Update to ansible 7.2.0 in EPEL 8. We're updating community.general to the latest version at the same as per https://lists.fedoraproject.org/archives/sear ch?q=A+coordinated+plan+for+ansible- collection+updates+in+EPEL%3F&page=1&mlist=epel- devel%40lists.fedoraproject.org&sort=date-asc. -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 10 2023 Maxwell G gotmax@e.email - 7.2.0-1 - Update to 7.2.0. * Thu Feb 2 2023 Maxwell G gotmax@e.email - 7.1.0-1 - Update to 7.1.0. --------------------------------------------------------------------------------
================================================================================ ansible-collection-community-general-7.0.0-1.el8 (FEDORA-EPEL-2023-ca07fe358c) Modules and plugins supported by Ansible community -------------------------------------------------------------------------------- Update Information:
Update to ansible 7.2.0 in EPEL 8. We're updating community.general to the latest version at the same as per https://lists.fedoraproject.org/archives/sear ch?q=A+coordinated+plan+for+ansible- collection+updates+in+EPEL%3F&page=1&mlist=epel- devel%40lists.fedoraproject.org&sort=date-asc. -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ dropbear-2019.78-5.el8 (FEDORA-EPEL-2023-78e9d2e031) Lightweight SSH server and client -------------------------------------------------------------------------------- Update Information:
This update is a backport of the upstream fix for CVE-2021-36369. -------------------------------------------------------------------------------- ChangeLog:
* Wed May 17 2023 Carl George carl@george.computer - 2019.78-5 - Backport fix for CVE-2021-36369, resolves rhbz#2135231 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2135231 - CVE-2021-36369 dropbear: <net-misc/dropbear-2022.82: forwarded agent abuse [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2135231 --------------------------------------------------------------------------------
================================================================================ editorconfig-0.12.6-1.el8 (FEDORA-EPEL-2023-9f9a39afa5) Parser for EditorConfig files written in C -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-0341: update to 0.12.6 (close RHBZ#2162811) -------------------------------------------------------------------------------- ChangeLog:
* Sun Jan 22 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.12.6-1 - Update to 0.12.6 (close RHBZ#2162811) - Update License to SPDX - Document and/or unbundle all bundled libraries * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.12.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.12.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 0.12.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jul 21 2021 Fedora Release Engineering releng@fedoraproject.org - 0.12.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2193152 - CVE-2023-0341 editorconfig-core-c:arbitrary stack write https://bugzilla.redhat.com/show_bug.cgi?id=2193152 --------------------------------------------------------------------------------
================================================================================ fedora-license-data-1.21-1.el8 (FEDORA-EPEL-2023-717c0c9d8c) Fedora Linux license data -------------------------------------------------------------------------------- Update Information:
- Ensure all text files end with newlines - Add GPL-2.0-only WITH libpri- OpenH323-exception as allowed - Consolidate text in public-domain-text.txt - Add LicenseRef-LDP-1 as not-allowed -------------------------------------------------------------------------------- ChangeLog:
* Wed May 17 2023 Miroslav Such�� msuchy@redhat.com 1.21-1 - Ensure all text files end with newlines - Add GPL-2.0-only WITH libpri-OpenH323-exception as allowed - Consolidate text in public-domain-text.txt - Add LicenseRef-LDP-1 as not-allowed --------------------------------------------------------------------------------
================================================================================ nickle-2.91-1.el8 (FEDORA-EPEL-2023-91f34e8867) A programming language-based prototyping environment -------------------------------------------------------------------------------- Update Information:
* Make randint produce evenly distributed values * Use asprintf in Command::edit to avoid buffer overflow. Closes: #992413. -------------------------------------------------------------------------------- ChangeLog:
* Wed May 17 2023 Michel Alexandre Salim salimma@fedoraproject.org - 2.91-1 - Update to 2.91 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2187832 - nickle-2.91 is available https://bugzilla.redhat.com/show_bug.cgi?id=2187832 --------------------------------------------------------------------------------
================================================================================ python-pystemd-0.13.1-1.el8 (FEDORA-EPEL-2023-329e3e97bd) A thin Cython-based wrapper on top of libsystemd -------------------------------------------------------------------------------- Update Information:
Update to 0.13.1; Fixes: RHBZ#2207826 -------------------------------------------------------------------------------- ChangeLog:
* Wed May 17 2023 Davide Cavalca dcavalca@fedoraproject.org - 0.13.1-1 - Update to 0.13.1; Fixes: RHBZ#2207826 - Drop some unnecessary logic from the spec -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2207826 - python-pystemd-0.13.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2207826 --------------------------------------------------------------------------------
================================================================================ xrdp-0.9.22-4.el8 (FEDORA-EPEL-2023-e2f52e4c98) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information:
Fix the breakage I caused with the latest update (i.e. -3 package), by mistakenly omitting required .so files from %_libdir/xrdp directory. Unfortunately, F36 has just gone EOL, so this will never be fixed there. Upgrade to F37 or better, F38. -------------------------------------------------------------------------------- ChangeLog:
* Wed May 17 2023 Bojan Smojver bojan@rexursive.com - 1:0.9.22-4 - Put back .so files into %libdir/xrdp directory - Bug #2207733 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2207733 - xrdp-0.9.22-3 is missing libxup.so and libvnc.so, breaking package https://bugzilla.redhat.com/show_bug.cgi?id=2207733 [ 2 ] Bug #2207769 - xrdp xrdp-0.9.22-3 missing libvnc.so https://bugzilla.redhat.com/show_bug.cgi?id=2207769 [ 3 ] Bug #2207839 - xrdp - shared lib /usr/lib64/xrdp/libvnc.so is missing https://bugzilla.redhat.com/show_bug.cgi?id=2207839 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org