The following Fedora EPEL 8 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-bf8500ac5b
python-slixmpp-1.7.1-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
fakeroot-1.30.1-1.el8
firejail-0.9.70-2.el8
knot-3.2.3-1.el8
libbsd-0.11.7-1.el8
resalloc-openstack-9.4-1.el8
Details about builds:
================================================================================
fakeroot-1.30.1-1.el8 (FEDORA-EPEL-2022-1a44a808f0)
Gives a fake root environment
--------------------------------------------------------------------------------
Update Information:
Update fakeroot to 1.30.1 (#2139595)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 23 2022 S��rgio Basto <sergio(a)serjux.com> - 1.30.1-1
- Update fakeroot to 1.30.1 (#2139595)
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.29-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sun May 22 2022 S��rgio Basto <sergio(a)serjux.com> - 1.29-1
- Update fakeroot to 1.29 (#2089064)
* Sun Apr 10 2022 S��rgio Basto <sergio(a)serjux.com> - 1.28-2
- Drop po4a as Debian did and renamed patches that came from Debian
* Fri Apr 8 2022 S��rgio Basto <sergio(a)serjux.com> - 1.28-1
- Update fakeroot to 1.28 (#2060992)
* Fri Jan 28 2022 S��rgio Basto <sergio(a)serjux.com> - 1.27-1
- Update fakeroot to 1.27 (#2041663)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.26-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139595 - fakeroot-1.30.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139595
--------------------------------------------------------------------------------
================================================================================
firejail-0.9.70-2.el8 (FEDORA-EPEL-2022-48019cb68c)
Linux namespaces sandbox program
--------------------------------------------------------------------------------
Update Information:
Disable D-Bus proxy support (xdg-dbus-proxy is not available in EPEL8)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 23 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 0.9.70-2
- Disable D-Bus proxy support (xdg-dbus-proxy is not available in EPEL8)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2141000 - Current release of firejail ( firejail-0.9.70-1.el8 ) requires
xdg-dbus-proxy which is not available
https://bugzilla.redhat.com/show_bug.cgi?id=2141000
--------------------------------------------------------------------------------
================================================================================
knot-3.2.3-1.el8 (FEDORA-EPEL-2022-96a3c0af7a)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Knot DNS 3.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 21 2022 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.2.3-1
- Update to 3.2.3
--------------------------------------------------------------------------------
================================================================================
libbsd-0.11.7-1.el8 (FEDORA-EPEL-2022-08012668ea)
Library providing BSD-compatible functions for portability
--------------------------------------------------------------------------------
Update Information:
# libbsd 0.11.7 - Portability fixes for the Hurd - Fix ELF support for big
endian SH - Sync the `arc4random(3)` implementation from OpenBSD - Adjust
declaration shadowing to match new glibc additions - Manual pages and
documentation cleanups - Manual page rewrite to get rid of a BSD-4-Clause
license # libbsd 0.11.6 - Build system and test suite fixes for musl -
Removal of unused OpenBSD support for `arc4random()` - LoongArch support for
`nlist()` # libbsd 0.11.5 - Build system and test suite regression fixes -
Documentation on how to build the project # libbsd 0.11.4 - Further rework
of the libmd wrapping code, to simplify it again, and make it work even when we
do not need SHA-2 functions - Fix builds with LTO - Various build system
fixes - Various portability fixes - Various documentation fixes # libbsd
0.11.3 - Rework of the libmd wrapping code to not require users to explicitly
link against libmd - Various build system fixes - Various portability fixes
# libbsd 0.11.2 - Update `<sys/queue.h>` from FreeBSD - Import some
`closefrom()` changes from sudo - Make `closefrom()` use `close_range()`
syscall on Linux when available - Update `libbsd(7)` man page with updates in
0.11.0 # libbsd 0.11.0/0.11.1 - Export `strnvisx()` function - New
`recallocarray()` and `freezero()` from OpenBSD - New pwcache module from
OpenBSD - New `timespec(3bsd)` man page alias to `timeval(3bsd)` - New
progname implementation for Windows - New `LIBBSD_VIS_OPENBSD` selection macro
- Switch from embedded hashing function implementations to use libmd - Various
man pages cleanups - Various portability fixes - Various memory leak fixes
# libbsd 0.10.0 - Several security related fixes for `nlist()` - Preliminary
and partial Windows porting - Fix for a leak in the vis family of functions
- Fix for a configure check to not unnecessarily link against librt - General
portability fixes for musl, uClibc, macOS and GNU/kFreeBSD - New architectures
support for `nlist()` - Switch the `<err.h>` `*c()` functions to be standalone
and add `err()`, `warn()`, `errx()` and `warnx()` familiy of functions in case
the system lacks them - Several man page fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Robert Scheck <robert(a)fedoraproject.org> - 0.11.7-1
- Update to 0.11.7 (#1742611)
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Sep 9 2020 Jeff Law <law(a)redhat.com> - 0.10.0-5
- Use symver attribute for symbol versioning
Fix configure test compromised by LTO
Fix nlist test compromised by LTO
Re-enable LTO
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 1 2020 Jeff Law <law(a)redhat.com> - 0.10.0-3
- Disable LTO
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Aug 22 2019 Eric Smith <brouhaha(a)fedoraproject.org> - 0.10.0-1
- Update to 0.10.1. (#1742611)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789459 - CVE-2019-20367 libbsd: Out-of-bounds read in nlist.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789459
--------------------------------------------------------------------------------
================================================================================
resalloc-openstack-9.4-1.el8 (FEDORA-EPEL-2022-15837c244e)
Resource allocator scripts for OpenStack
--------------------------------------------------------------------------------
Update Information:
new upstream release, compat fix for F37
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 23 2022 Pavel Raiskup <praiskup(a)redhat.com> - 9.4-1
- new upstream release, compat fix for F37
--------------------------------------------------------------------------------