Fedora EPEL 8 updates-testing report

The following Fedora EPEL 8 Security updates need testing:
 Age  URL
   6  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-5792a74fc0   advancecomp-2.5-1.el8
   6  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1d186ca718   python-rq-1.12.0-1.el8
   4  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d92a0ff759   syncthing-1.23.0-2.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

ansible-collection-community-libvirt-1.2.0-1.el8
    buildbot-3.5.0-1.el8
    cepces-0.3.5-7.el8
    distgen-1.14-2.el8
    distribution-gpg-keys-1.82-1.el8
    epel-rpm-macros-8-36
    fts-rest-client-3.12.0-3.el8
    java-latest-openjdk-19.0.2.0.7-1.rolling.el8
    koji-osbuild-11-1.el8
    mock-core-configs-38.1-1.el8
    packit-0.59.0-2.el8
    python-tabulate-0.8.10-2.el8
    qt-creator-4.12.4-11.el8
    retrace-server-1.24.2-2.el8
    stb-0-0.23.20230129git5736b15.el8

Details about builds:

================================================================================
 ansible-collection-community-libvirt-1.2.0-1.el8 (FEDORA-EPEL-2023-98b1fc46a5)
 Manages virtual machines supported by libvirt
--------------------------------------------------------------------------------
Update Information:

Current upstream release, for alignment with ansible-6.3.0.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Aug  5 2022 Paul Howarth  - 1.2.0-1
- Update to 1.2.0
  - libvirt: Add extra guest information to inventory (GH#113)
  - libvirt: Replace the calls to listDomainsID() and listDefinedDomains() with
    listAllDomains() in find_vm() (GH#117)
  - virt_net: Fix modify function, which was not idempotent, depending on
    whether the network was active (GH#107)
  - virt_pool: It crashed out if pool didn't contain a target path; fix allows
    this not to be set (GH#129)
--------------------------------------------------------------------------------

================================================================================
 buildbot-3.5.0-1.el8 (FEDORA-EPEL-2023-e384c04452)
 Build/test automation system
--------------------------------------------------------------------------------
Update Information:

Update to 3.5.0
--------------------------------------------------------------------------------
ChangeLog:

* Wed Aug 10 2022 Gwyn Ciesla  - 3.5.0-1
- 3.5.0
* Wed Jul 20 2022 Fedora Release Engineering  - 3.3.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jun 29 2022 Python Maint  - 3.3.0-5
- Rebuilt for Python 3.11
* Wed Jan 19 2022 Fedora Release Engineering  - 3.3.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 cepces-0.3.5-7.el8 (FEDORA-EPEL-2023-a4f380d7a6)
 Certificate Enrollment through CEP/CES
--------------------------------------------------------------------------------
Update Information:

Rebuild for python-3.6
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miro Hron��ok  - 0.3.5-7
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------

================================================================================
 distgen-1.14-2.el8 (FEDORA-EPEL-2023-cd8d2db436)
 Templating system/generator for distributions
--------------------------------------------------------------------------------
Update Information:

Rebuild for https://lists.fedoraproject.org/archives/list/epel-
[e-mail]/thread/RE3PG72B5AX7NTACPDSBGOWCMN7I3OQJ/
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miro Hron��ok  - 1.14-2
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------

================================================================================
 distribution-gpg-keys-1.82-1.el8 (FEDORA-EPEL-2023-60a3fd5c7c)
 GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:

mock-core-configs  - update openEuler gpg key ([e-mail]) - Branch
Fedora 38 ([e-mail]) - disable fastestmirror on almalinux
([e-mail]) - openEuler 22.03-SP1 released, so we switch to latest
repo url ([e-mail])   distribution-gpg-keys  - move symlink of
fedora-rawhide to fedora-39 - add openEuler new key - update copr keys - add
fedora 40 gpg key
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miroslav Such��  1.82-1
- move symlink of fedora-rawhide to fedora-39
- add openEuler new key
- update copr keys
- add fedora 40 gpg key
--------------------------------------------------------------------------------

================================================================================
 epel-rpm-macros-8-36 (FEDORA-EPEL-2023-81dca3079b)
 Extra Packages for Enterprise Linux RPM macros
--------------------------------------------------------------------------------
Update Information:

Add perl-generators to epel macros (
https://fedoraproject.org/wiki/Changes/Perl_replace_MODULE_COMPAT_by_generat... )
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 23 2023 Jitka Plesnikova  - 8-36
- Add perl-generators-epel to the buildroot
--------------------------------------------------------------------------------

================================================================================
 fts-rest-client-3.12.0-3.el8 (FEDORA-EPEL-2023-af9eebfee0)
 File Transfer Service (FTS) -- Python3 Client and CLI
--------------------------------------------------------------------------------
Update Information:

Rebuild for EPEL8 Python3 shebang fix
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 31 2023 Miro Hron��ok  - 3.12.0-3
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
* Thu Jan 19 2023 Fedora Release Engineering  - 3.12.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 java-latest-openjdk-19.0.2.0.7-1.rolling.el8 (FEDORA-EPEL-2023-52e0512741)
 OpenJDK 19 Runtime Environment
--------------------------------------------------------------------------------
Update Information:

New in release OpenJDK 19.0.2 (2023-01-17) ============= CVEs Fixed
----------------------------------    * CVE-2023-21835    * CVE-2023-21843
Security Fixes ----------------------------------     * JDK-8286070: Improve
UTF8 representation     * JDK-8286496: Improve Thread labels     * JDK-8287411:
Enhance DTLS performance     * JDK-8288516: Enhance font creation     *
JDK-8293554: Enhanced DH Key Exchanges     * JDK-8293598: Enhance InetAddress
address handling     * JDK-8293717: Objective view of ObjectView     *
JDK-8293734: Improve BMP image handling     * JDK-8293742: Better Banking of
Sounds     * JDK-8295687: Better BMP bounds  Major Changes =============
JDK-8295687: Better BMP bounds ---------------------------------- Loading a
linked ICC profile within a BMP image is now disabled by default. To re-enable
it, set the new system property sun.imageio.bmp.enabledLinkedProfiles to true.
This new property replaces the old property,
sun.imageio.plugins.bmp.disableLinkedProfiles.  JDK-8293742: Better Banking of
Sounds ------------------------------------------------------- Previously, the
SoundbankReader implementation, com.sun.media.sound.JARSoundbankReader, would
download a JAR soundbank from a URL. This behaviour is now disabled by default.
To re-enable it, set the new system property jdk.sound.jarsoundbank to true.
JDK-8287411: Enhance DTLS performance
-------------------------------------------------------------  The JDK now
exchanges DTLS cookies for all handshakes, new and resumed. The previous
behaviour can be re-enabled by setting the new system property
jdk.tls.enableDtlsResumeCookie to false.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 26 2023 Andrew Hughes  - 1:19.0.2.0.7-1.rolling
- Update to jdk-19.0.2 release
- Update release notes to 19.0.2
- Drop JDK-8293834 (CLDR update for Kyiv) which is now upstream
- Drop JDK-8294357 (tzdata2022d), JDK-8295173 (tzdata2022e) & JDK-8296108 (tzdata2022f) local patches which are now upstream
- Drop JDK-8296715 (CLDR update for 2022f) which is now upstream
- Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
- Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
* Thu Jan 19 2023 Fedora Release Engineering  - 1:19.0.1.0.10-3.rolling.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Dec 16 2022 Andrew Hughes  - 1:19.0.1.0.10-3.rolling
- Update in-tree tzdata & CLDR to 2022g with JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
* Wed Dec  7 2022 Stephan Bergmann  - 1:19.0.1.0.10-3.rolling
- Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
* Wed Oct 26 2022 Andrew Hughes  - 1:19.0.1.0.10-2.rolling
- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
--------------------------------------------------------------------------------

================================================================================
 koji-osbuild-11-1.el8 (FEDORA-EPEL-2023-a89d8f6a76)
 Koji integration for osbuild composer
--------------------------------------------------------------------------------
Update Information:

This project provides osbuild integration with Koji. It makes it possible to
build images and other OS artifacts via osbuild-composer through koji,
--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 21 2022 Packit  - 11-1
Changes with 11
----------------
  * Print more log messages to enable tracking of SLIs (#110)
  * Various fixes (#108)

Contributions from: Simon Steinbeiss, Thomas Lavocat, Tom���� Hozza

��� Somewhere on the Internet, 2022-11-21
* Fri Sep  2 2022 Packit  - 10-1
Changes with 10
----------------
  * Hub: support `image_type` being an array for backwards compatibility (#107)
  * packit: Enable Bodhi updates workflow (#106)
Contributions from: Tomas Hozza
��� Somewhere on the Internet, 2022-09-02
* Wed Aug 31 2022 Packit  - 9-1
Changes with 9
----------------
  * Support specifying upload options for image builds (#104)
  * Various enhancements (#105)
  * builder: add retries to composer API calls (#103)
Contributions from: Ond��ej Budai, Tomas Hozza
��� Somewhere on the Internet, 2022-08-31
* Thu Jul 21 2022 Fedora Release Engineering  - 8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jun 30 2022 Packit  - 8-1
Changes with 8
----------------
  * builder: always refresh OAuth token after getting 401 (#102)
Contributions from: Ond��ej Budai
��� Somewhere on the Internet, 2022-06-30
* Wed Jun 29 2022 Packit  - 7-1
Changes with 7
----------------
  * builder: set OAuth token creation time before we fetch it (#101)
  * packit: Enable Koji build integration (#99)
  * spec: set the default release to 1 (#98)
Contributions from: Jakub Rusz, Ond��ej Budai, Simon Steinbeiss
��� Somewhere on the Internet, 2022-06-29
* Mon Jun 13 2022 Python Maint  - 6-1
- Rebuilt for Python 3.11
* Tue May  3 2022 Packit  - 6-0
Changes with 6
----------------
  * builder: add support for proxying requests to composer  (#96)
  * devcontainer: remove trailing comma from JSON (#95)
  * plugins: add support for customizations (#97)
  * workflows/trigger-gitlab: run Gitlab CI in new image-builder project (#94)
Contributions from: Christian Kellner, Jakub Rusz, Ond��ej Budai
��� Somewhere on the Internet, 2022-05-03
* Mon Mar 28 2022 Packit Service  - 5-0
CHANGES WITH 5:
----------------
  * builder: rename gpg_key field to gpgkey for repos (#91)
  * builder: fix type annotations (#92)
  * Add GitHub Action to create upstream tag (#90)
  * docs: fix error in hacking.md (#85)
  * build(deps): bump actions/checkout from 2 to 3 (#86)
  * spec: don't push tests into Fedora (#89)
  * test/builder: drop misleading quotes from config (#88)
  * builder: use correct secret when fetching token (#87)
  * packit: Push directly to dist-git (#84)
Contributions from: Christian Kellner, Ond��ej Budai, Simon Steinbeiss, Stephen Coady, dependabot[bot]
��� Somewhere on the Internet, 2022-03-28
* Tue Feb 15 2022 Packit Service  - 4-0
CHANGES WITH 4:
----------------
  * plugins: support for repo package sets (#82)
  * Lower task weight (#60)
  * Add upstream release bot and enable packit (#81)
  * plugins: support for ostree specific options (#80)
  * builder: use cloud api (#73)
  * README: contributing (#74)
  * README.md,HACKING.md: update for SSO/OAuth2 (#79)
  * Support for oauth2 authentication (#69)
  * ci: switch from rhel 8.4 to 8.5 (#78)
  * ci: integration tests now adapt to the host (#77)
  * schutzbot: update osbuild to 46 (#75)
  * cli: do not use translation helper (#72)
  * `builder`: fixes for the command line argument parsing (#71)
  * Fix command line argument names (#70)
  * devcontainer: add initial support (#68)
  * schutzbot: remove ssh keys of team member that left us (#67)
  * CI: Fix failure in Coverity Scan (#66)
  * ci: Enable Coverity Scan (#65)
  * Adjust variable names (#64)
  * build(deps): bump ludeeus/action-shellcheck from 0.5.0 to 1.1.0 (#63)
  * test: use importlib instead of imp (#62)
  * Enable Dependabot (#61)
  * plugin/cli: remove type annotation (#59)
  * Migrate to GitLab CI (#58)
  * Test and CI maintenance (#57)
  * Fetch and attach the manifests (#56)
  * Test housekeeping (#55)
  * assorted CI fixes/improvements (#54)
  * Add Fedora 33 to Schutzbot & fix the name of repo (#52)
  * test/integration.sh: bump nightly (#53)
  * test: replace docker.io with fedora's registry (#50)
  * mockbuild: make more consistent with other osbuild projects (#49)
  * Update osbuild-composer dependency to 25 (#48)
Contributions from: Alexander Todorov, Chloe Kaubisch, Christian Kellner, Lars Karlitski, Ond��ej Budai, Simon Steinbeiss, Tomas Kopecek
��� V��cklabruck, 2022-02-15
* Thu Jan 20 2022 Fedora Release Engineering  - 2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering  - 2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun  4 2021 Python Maint  - 2-2
- Rebuilt for Python 3.10
* Tue Jan 26 2021 Fedora Release Engineering  - 2-1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Nov  3 2020 Christian Kellner  - 2-0
- Upstream release 2
- Add python3-jsonschema dependency for builder sub-package.
* Wed Sep 30 2020 Christian Kellner  - 1-0
- Initial import.
--------------------------------------------------------------------------------

================================================================================
 mock-core-configs-38.1-1.el8 (FEDORA-EPEL-2023-60a3fd5c7c)
 Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:

mock-core-configs  - update openEuler gpg key ([e-mail]) - Branch
Fedora 38 ([e-mail]) - disable fastestmirror on almalinux
([e-mail]) - openEuler 22.03-SP1 released, so we switch to latest
repo url ([e-mail])   distribution-gpg-keys  - move symlink of
fedora-rawhide to fedora-39 - add openEuler new key - update copr keys - add
fedora 40 gpg key
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 31 2023 Pavel Raiskup  38.1-1
- update openEuler gpg key ([e-mail])
- Branch Fedora 38 ([e-mail])
- disable fastestmirror on almalinux ([e-mail])
- openEuler 22.03-SP1 released, use the latest repo url ([e-mail])
--------------------------------------------------------------------------------

================================================================================
 packit-0.59.0-2.el8 (FEDORA-EPEL-2023-8a7608f056)
 A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:

Automatic update for packit-0.59.0-2.el8.  ##### **Changelog for packit**  ``` *
Mon Jan 30 2023 Miro Hron��ok  - 0.59.0-2 - Rebuilt to
change Python shebangs to /usr/bin/python3.6 on EPEL 8  ```
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miro Hron��ok  - 0.59.0-2
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------

================================================================================
 python-tabulate-0.8.10-2.el8 (FEDORA-EPEL-2023-c3ec423db2)
 Pretty-print tabular data in Python, a library and a command-line utility
--------------------------------------------------------------------------------
Update Information:

Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miro Hron��ok  - 0.8.10-2
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------

================================================================================
 qt-creator-4.12.4-11.el8 (FEDORA-EPEL-2023-17a998b519)
 Cross-platform IDE for Qt
--------------------------------------------------------------------------------
Update Information:

Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miro Hron��ok  - 4.12.4-11
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------

================================================================================
 retrace-server-1.24.2-2.el8 (FEDORA-EPEL-2023-2e848aa63d)
 Application for remote coredump analysis
--------------------------------------------------------------------------------
Update Information:

Rebuilt to change Python shebangs, see the related [epel-devel
thread](https://lists.fedoraproject.org/archives/list/epel-
[e-mail]/thread/RE3PG72B5AX7NTACPDSBGOWCMN7I3OQJ/)
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 30 2023 Miro Hron��ok  - 1.24.2-2
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
--------------------------------------------------------------------------------

================================================================================
 stb-0-0.23.20230129git5736b15.el8 (FEDORA-EPEL-2023-c9bc73540c)
 Single-file public domain libraries for C/C++
--------------------------------------------------------------------------------
Update Information:

Updates `stb_image` to 0.28. Several security patches that were carried in EPEL8
are now merged upstream, and the release includes a few other bug-fixes.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 31 2023 Benjamin A. Beasley  - 0-0.23.20230129git5736b15
- Update to 5736b1 (version history and README updates)
* Tue Jan 31 2023 Benjamin A. Beasley  - 0-0.22.20230129git6199bf7
- Update License to SPDX
* Tue Jan 31 2023 Benjamin A. Beasley  - 0-0.21.20230129git6199bf7
- Update to 6199bf7 (stb_image 2.28)
- Security-related patches for stb_image have been merged upstream, and
  there are other bugfixes.
* Tue Jan 31 2023 Benjamin A. Beasley  - 0-0.20.20220908git8b5f1f3
- Patch in a candidate fix for ossfuzz issue 24232
- Improves handling of certain invalid PNGs by stb_image
--------------------------------------------------------------------------------