The following Fedora EPEL 8 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1a1caa3eb5 opensmtpd-6.6.4p1-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-47a203cb95 openfortivpn-1.12.0-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9d364c6070 cacti-1.2.10-1.el8 cacti-spine-1.2.10-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-8ce58993d7 mbedtls-2.16.5-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ansible-2.9.6-1.el8 koji-1.20.1-1.el8 vapoursynth-48-7.el8
Details about builds:
================================================================================ ansible-2.9.6-1.el8 (FEDORA-EPEL-2020-02f03affd4) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information:
Update to upstream 2.9.6 and fix for 2 CVES: CVE-2020-1737, CVE-2020-1739 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Kevin Fenzi kevin@scrye.com - 2.9.6-1 - Update to 2.9.6. Fixes bug #1810373 - fixes for CVE-2020-1737, CVE-2020-1739 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1805322 - CVE-2020-1739 ansible: svn module leaks password when specified as a parameter [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805322 [ 2 ] Bug #1810373 - ansible-2.9.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1810373 [ 3 ] Bug #1805329 - CVE-2020-1737 ansible: Extract-Zip function in win_unzip module does not check extracted path [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805329 --------------------------------------------------------------------------------
================================================================================ koji-1.20.1-1.el8 (FEDORA-EPEL-2020-c72d211254) Build system tools -------------------------------------------------------------------------------- Update Information:
Update to upstream 1.20.1 minor bugfix release. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Kevin Fenzi kevin@scrye.com - 1.20.1-1 - Update to 1.20.1 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 1.20.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ vapoursynth-48-7.el8 (FEDORA-EPEL-2020-cb2d3ef940) Video processing framework with simplicity in mind -------------------------------------------------------------------------------- Update Information:
New package. -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 7 2020 Simone Caronni negativo17@gmail.com - 48-7 - Fix broken dependency. * Sat Feb 29 2020 Simone Caronni negativo17@gmail.com - 48-6 - Make it exclusive for i686/x86_64. - Fix build on RHEL/CentOS 8. * Tue Feb 25 2020 Artem Polishchuk ego.cordatus@gmail.com - 48-5 - Add tests - Cosmetic spec file improvements * Thu Feb 20 2020 Simone Caronni negativo17@gmail.com - 48-4 - More review fixes. - Use upstream patch for Python 3.8. * Fri Feb 7 2020 Simone Caronni negativo17@gmail.com - 48-3 - Review fixes. * Sun Jan 26 2020 Simone Caronni negativo17@gmail.com - 48-2 - Move script library into main library package. - Fix build with Python 3.8. * Thu Jan 16 2020 Simone Caronni negativo17@gmail.com - 48-1 - First build. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1791588 - Review Request: vapoursynth - A video processing framework with simplicity in mind https://bugzilla.redhat.com/show_bug.cgi?id=1791588 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org