The following Fedora EPEL 8 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e85de73cdb
pdns-recursor-4.3.5-1.el8
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ef54b7a2d
tcpreplay-4.3.3-3.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4f4de3554d
fastd-21-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a2aa2f31cd
pngcheck-2.3.0-3.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5f50399d2e
chromium-86.0.4240.111-1.el8
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a0f02190ad
libntlm-1.6-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
cpanspec-1.78-27.el8
freeipa-fas-0.0.4-1.el8
mujs-1.0.9-1.el8
perl-Data-Stream-Bulk-0.11-23.el8
qmmp-plugin-pack-1.4.0-2.el8
tinyfugue-5.0-0.100.b8.el8
Details about builds:
================================================================================
cpanspec-1.78-27.el8 (FEDORA-EPEL-2020-daf9b662c3)
RPM spec file generation utility
--------------------------------------------------------------------------------
Update Information:
cpanspec generates spec files (and, optionally, source or even binary packages)
for Perl modules from CPAN for Fedora. The quality of the spec file is our
primary concern. It is assumed that maintainers will need to do some (hopefully
small) amount of work to clean up the generated spec file to make the package
build and to verify that all of the information contained in the spec file is
correct.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860947 - cpanspec build for epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1860947
--------------------------------------------------------------------------------
================================================================================
freeipa-fas-0.0.4-1.el8 (FEDORA-EPEL-2020-3f20306084)
Fedora Account System extension for FreeIPA
--------------------------------------------------------------------------------
Update Information:
Initial packaging of `freeipa-fas` extension for FreeIPA
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1893207 - Review Request: freeipa-fas - Fedora Account System extension for
FreeIPA
https://bugzilla.redhat.com/show_bug.cgi?id=1893207
--------------------------------------------------------------------------------
================================================================================
mujs-1.0.9-1.el8 (FEDORA-EPEL-2020-d21505685e)
An embeddable Javascript interpreter
--------------------------------------------------------------------------------
Update Information:
A new version of mujs is now available for Fedora and EPEL. Besides generic
enhancements and bugfixes, this release also fixes three tracked security
issues: CVE-2019-11411, CVE-2019-11412 and CVE-2019-11413.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 31 2020 Petr ��abata <contyk(a)redhat.com> - 1.0.9-1
- 1.0.9 bump
- Addresses CVE-2019-11411, CVE-2019-11412 and CVE-2019-11413
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1873066 - CVE-2019-11413 mujs: DoS in regexp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1873066
[ 2 ] Bug #1873067 - CVE-2019-11413 mujs: DoS in regexp.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1873067
[ 3 ] Bug #1873072 - CVE-2019-11412 mujs: DoS in jscompile.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1873072
[ 4 ] Bug #1873073 - CVE-2019-11412 mujs: DoS in jscompile.c [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1873073
[ 5 ] Bug #1873077 - CVE-2019-11411 mujs: stack-based buffer overflow in jsnumber.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1873077
[ 6 ] Bug #1873078 - CVE-2019-11411 mujs: stack-based buffer overflow in jsnumber.c
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1873078
--------------------------------------------------------------------------------
================================================================================
perl-Data-Stream-Bulk-0.11-23.el8 (FEDORA-EPEL-2020-dcd7516b43)
N at a time iteration API
--------------------------------------------------------------------------------
Update Information:
This package contains the Perl module Data::Stream::Bulk, which tries to find
middle ground between one at a time and all at once processing of data sets.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1870743 - EPEL8 Branch Request: perl-Data-Stream-Bulk
https://bugzilla.redhat.com/show_bug.cgi?id=1870743
--------------------------------------------------------------------------------
================================================================================
qmmp-plugin-pack-1.4.0-2.el8 (FEDORA-EPEL-2020-1d43f1146e)
A set of extra plugins for Qmmp
--------------------------------------------------------------------------------
Update Information:
branched for epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
tinyfugue-5.0-0.100.b8.el8 (FEDORA-EPEL-2020-ffe7ef2b08)
A MU* client
--------------------------------------------------------------------------------
Update Information:
TinyFugue is the ubiquitous MUD/MOO/MUSH/MUCK/etc client for UNIX. This client
allows you to interact with multiple worlds simultaneously, create command
macros, and create hooks and triggers for automated responses to game messages.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1755904 - Request to package tinyfugue for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1755904
--------------------------------------------------------------------------------