The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a98407e8b0 suricata-6.0.19-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-e94a7220f2 chromium-124.0.6367.201-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing aws-c-cal-0.6.12-2.el8 aws-c-compression-0.2.18-1.el8 aws-c-sdkutils-0.1.16-1.el8 aws-checksums-0.1.18-1.el8 bgpq4-1.15-1.el8 cekit-4.12.0-1.el8 debmirror-2.40-1.el8 dh-make-2.202401-1.el8 filezilla-3.55.1-1.el8 libfilezilla-0.32.0-1.el8 nordugrid-arc6-6.19.0-2.el8 nwipe-0.37-1.el8 perl-Email-MIME-1.954-1.el8 Details about builds: ================================================================================ aws-c-cal-0.6.12-2.el8 (FEDORA-EPEL-2024-0ce239d784) AWS Crypto Abstraction Layer -------------------------------------------------------------------------------- Update Information: Automatic update for aws-c-cal-0.6.12-2.el8. -------------------------------------------------------------------------------- ChangeLog: * Mon May 6 2024 Dominik Wombacher <dominik@xxxxxxxxxxxx> - 0.6.12-2 - Exclude from Arch s390x build (rhbz#2279275) * Tue Apr 30 2024 Dominik Wombacher <dominik@xxxxxxxxxxxx> - 0.6.12-1 - update to 0.6.12 * Thu Feb 24 2022 David Duncan <davdunc@xxxxxxxxxx> - 0.5.12-7 - Include check and ctest section in spec * Tue Feb 22 2022 David Duncan <davdunc@xxxxxxxxxx> - 0.5.12-6 - Updated for package review * Tue Feb 22 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.5.12-5 - Include missing devel directories * Thu Feb 3 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.5.12-4 - Move sha256_profile executable to standard package * Thu Feb 3 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.5.12-3 - Update specfile based on review feedback * Wed Feb 2 2022 David Duncan <davdunc@xxxxxxxxxx> - 0.5.12-2 - Prepare for package review * Tue Jan 18 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.5.12-1 - Initial package development -------------------------------------------------------------------------------- ================================================================================ aws-c-compression-0.2.18-1.el8 (FEDORA-EPEL-2024-3a4bc4bd63) C99 implementation of huffman encoding/decoding -------------------------------------------------------------------------------- Update Information: Automatic update for aws-c-compression-0.2.18-1.el8. -------------------------------------------------------------------------------- ChangeLog: * Wed May 1 2024 Dominik Wombacher <dominik@xxxxxxxxxxxx> 0.2.18-1 - update to 0.2.18 * Tue Sep 26 2023 Benson Muite <benson_muite@xxxxxxxxxxxxx> 0.2.17-1 - Initial packaging -------------------------------------------------------------------------------- ================================================================================ aws-c-sdkutils-0.1.16-1.el8 (FEDORA-EPEL-2024-90c9aadaa1) Utility package for AWS SDK for C -------------------------------------------------------------------------------- Update Information: Automatic update for aws-c-sdkutils-0.1.16-1.el8. -------------------------------------------------------------------------------- ChangeLog: * Wed May 1 2024 Dominik Wombacher <dominik@xxxxxxxxxxxx> - 0.1.16-1 - update to 0.1.16 * Tue Feb 22 2022 David Duncan <davdunc@xxxxxxxxxx> - 0.1.1-5 - Updated for package review * Tue Feb 22 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.1.1-4 - Include missing devel directories * Thu Feb 3 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.1.1-3 - Update specfile based on review feedback * Wed Feb 2 2022 David Duncan <davdunc@xxxxxxxxxx> - 0.1.1-2 - Prepare for package review * Tue Jan 18 2022 Kyle Knapp <kyleknap@xxxxxxxxxx> - 0.1.1-1 - Initial package development -------------------------------------------------------------------------------- ================================================================================ aws-checksums-0.1.18-1.el8 (FEDORA-EPEL-2024-14d73a737f) Efficient CRC32c and CRC32 implementations -------------------------------------------------------------------------------- Update Information: Automatic update for aws-checksums-0.1.18-1.el8. -------------------------------------------------------------------------------- ChangeLog: * Thu May 2 2024 Dominik Wombacher <dominik@xxxxxxxxxxxx> - 0.1.18-1 - update to 0.1.18 * Tue Sep 26 2023 Benson Muite <benson_muite@xxxxxxxxxxxxx> - 0.1.12-1 - Initial import -------------------------------------------------------------------------------- ================================================================================ bgpq4-1.15-1.el8 (FEDORA-EPEL-2024-df36398aef) Automate BGP filter generation based on routing database information -------------------------------------------------------------------------------- Update Information: bgpq4 1.15 Apologies, debug code slipped into the last release bgpq4 1.14 Small performance gain: set TCP_NODELAY on the socket -------------------------------------------------------------------------------- ChangeLog: * Wed May 15 2024 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.15-1 - Upgrade to 1.15 * Wed May 15 2024 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.14-1 - Upgrade to 1.14 -------------------------------------------------------------------------------- ================================================================================ cekit-4.12.0-1.el8 (FEDORA-EPEL-2024-67b133daf6) Container image creation tool -------------------------------------------------------------------------------- Update Information: CEKit 4.12.0 release -------------------------------------------------------------------------------- ChangeLog: * Thu May 16 2024 Nick Cross <ncross@xxxxxxxxxx> - 4.12.0-1 - Release 4.12.0 -------------------------------------------------------------------------------- ================================================================================ debmirror-2.40-1.el8 (FEDORA-EPEL-2024-bdf1d9ff56) Debian partial mirror script, with ftp and package pool support -------------------------------------------------------------------------------- Update Information: Automatic update for debmirror-2.40-1.el8. Changelog for debmirror * Fri May 10 2024 Packit <hello@xxxxxxxxxx> - 2.40-1 - Update to version 2.40 - Resolves: rhbz#2257545 * Wed Jan 24 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.38-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild Automatic update for debmirror-2.38-3.el8. Changelog for debmirror * Wed Jan 24 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.38-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: * Fri May 10 2024 Packit <hello@xxxxxxxxxx> - 2.40-1 - Update to version 2.40 - Resolves: rhbz#2257545 * Wed Jan 24 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.38-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2257545 - debmirror-2.40 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257545 -------------------------------------------------------------------------------- ================================================================================ dh-make-2.202401-1.el8 (FEDORA-EPEL-2024-c87a21a8d0) Tool that converts source archives into Debian package source -------------------------------------------------------------------------------- Update Information: Automatic update for dh-make-2.202401-1.el8. Changelog for dh-make * Fri May 10 2024 Packit <hello@xxxxxxxxxx> - 2.202401-1 - Update to version 2.202401 - Resolves: rhbz#2273872 -------------------------------------------------------------------------------- ChangeLog: * Fri May 10 2024 Packit <hello@xxxxxxxxxx> - 2.202401-1 - Update to version 2.202401 - Resolves: rhbz#2273872 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2273872 - dh-make-2.202401 is available https://bugzilla.redhat.com/show_bug.cgi?id=2273872 -------------------------------------------------------------------------------- ================================================================================ filezilla-3.55.1-1.el8 (FEDORA-EPEL-2024-1144beda66) FTP, FTPS and SFTP client -------------------------------------------------------------------------------- Update Information: Latest possible versions for EL-8 -------------------------------------------------------------------------------- ChangeLog: * Thu May 16 2024 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 3.55.1-1 - 3.55.1 * Fri Nov 27 2020 Richard Shaw <hobbes1069@xxxxxxxxx> - 3.49.1-4 - Rebuild for pugixml 1.11. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2280703 - New Version of Filezilla for RHEL8 in EPEL https://bugzilla.redhat.com/show_bug.cgi?id=2280703 -------------------------------------------------------------------------------- ================================================================================ libfilezilla-0.32.0-1.el8 (FEDORA-EPEL-2024-1144beda66) C++ Library for FileZilla -------------------------------------------------------------------------------- Update Information: Latest possible versions for EL-8 -------------------------------------------------------------------------------- ChangeLog: * Wed May 15 2024 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 0.32.0-1 - 0.32.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2280703 - New Version of Filezilla for RHEL8 in EPEL https://bugzilla.redhat.com/show_bug.cgi?id=2280703 -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc6-6.19.0-2.el8 (FEDORA-EPEL-2024-a9a27630ee) Advanced Resource Connector Middleware -------------------------------------------------------------------------------- Update Information: Use versioned package names in EPEL 8 and 9. -------------------------------------------------------------------------------- ChangeLog: * Tue May 14 2024 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.19.0-2 - Use versioned package names in EPEL 8 and 9 * Sun Apr 14 2024 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.19.0-1 - Update to version 6.19.0 * Wed Oct 25 2023 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.18.0-1 - Update to version 6.18.0 - Run autoreconf during build (following upstream) * Thu Nov 24 2022 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.17.0-1 - Update to version 6.17.0 * Fri Sep 23 2022 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.16.1-1 - Update to version 6.16.1 * Sat Sep 3 2022 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.16.0-1 - Update to version 6.16.0 * Mon Apr 4 2022 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.15.1-1 - Update to version 6.15.1 * Fri Mar 18 2022 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.15.0-1 - Update to version 6.15.0 * Sat Dec 4 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.14.0-1 - Update to version 6.14.0 * Thu Sep 16 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.13.0-1 - Update to version 6.13.0 * Mon Jun 7 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.12.0-1 - Update to version 6.12.0 * Sat Apr 24 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.11.0-1 - Update to version 6.11.0 * Fri Mar 12 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.10.2-2 - Revert the hash change (at upstream's request) * Wed Feb 24 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.10.2-1 - Update to version 6.10.2 * Mon Feb 15 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.10.1-1 - Update to version 6.10.1 * Wed Feb 10 2021 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.10.0-1 - Update to version 6.10.0 - Drop RHEL6 support from spec file (EOL) * Fri Dec 4 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.9.0-1 - Update to version 6.9.0 - Don't force C++14. Code now compiles with C++17. * Mon Oct 12 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.8.1-1 - Update to version 6.8.1 - Drop patch nordugrid-arc-xrootd5.patch * Fri Aug 28 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.7.0-2 - xrootd 5 compatibility * Fri Jul 3 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.7.0-1 - Update to version 6.7.0 * Mon Apr 27 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.6.0-1 - Update to version 6.6.0 - Split out package arcctl-service package from arcctl package - Split out plugins-python from main ARC python module pacakage * Tue Feb 18 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.5.0-1 - Update to version 6.5.0 - Put the arcctl tool in a separate nordugrid-arc-arcctl package - Add nordugrid-arc-community-rtes package (tech preview) - Split the nordugrid-arc-plugins-globus package into several packages - nordugrid-arc-plugins-globus-common - nordugrid-arc-plugins-gridftp - nordugrid-arc-plugins-lcas-lcmaps - nordugrid-arc-plugins-gridftpjob * Sun Dec 1 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.4.1-1 - Update to version 6.4.1 * Mon Nov 18 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.4.0-1 - Update to version 6.4.0 * Thu Oct 17 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.3.0-1 - Update to version 6.3.0 * Sun Sep 1 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.2.0-1 - Update to version 6.2.0 * Fri Jun 28 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.1.0-1 - Update to version 6.1.0 * Mon Jun 3 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 6.0.0-1 - ARC version 6 packaged for EPEL with a different package name - Based on the Fedora rawhide package - These packages declare conflicts with the ARC version 5 packages -------------------------------------------------------------------------------- ================================================================================ nwipe-0.37-1.el8 (FEDORA-EPEL-2024-09aa6467a9) Securely erase disks using a variety of recognized methods -------------------------------------------------------------------------------- Update Information: update nwipe to bugfix version 0.37, improve list of runtime dependencies -------------------------------------------------------------------------------- ChangeLog: * Wed May 15 2024 Michal Ambroz <rebus at, seznam.cz> 0.37-1 - bump to 0.37 * Sun May 5 2024 Michal Ambroz <rebus at, seznam.cz> 0.36-2 - add runtime dependencies to system tools - #2265944 * Sun Mar 10 2024 Michal Ambroz <rebus at, seznam.cz> 0.36-1 - bump to 0.36 * Thu Jan 25 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.35-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.35-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2265944 - Missing dependency for package nwipe-0.35.2.fc39.x86-64 https://bugzilla.redhat.com/show_bug.cgi?id=2265944 -------------------------------------------------------------------------------- ================================================================================ perl-Email-MIME-1.954-1.el8 (FEDORA-EPEL-2024-d3360e8898) Easy MIME message parsing -------------------------------------------------------------------------------- Update Information: This update, to the latest upstream release, addresses an excessive memory use issue (CVE-2024-4140), which can cause denial of service when parsing multi-part MIME messages; the fix is the new $MAX_PARTS configuration, which limits how many parts will be considered for parsing, defaulting to 100. -------------------------------------------------------------------------------- ChangeLog: * Thu May 16 2024 Paul Howarth <paul@xxxxxxxxxxxx> - 1.954-1 - Update to 1.954 (rhbz#2280644) - Fix for CVE-2024-4140: An excessive memory use issue (CWE-770) exists in Email-MIME before version 1.954, which can cause denial of service when parsing multipart MIME messages; the fix is the new $MAX_PARTS configuration, which limits how many parts we will consider parsing (the default $MAX_PARTS is 100) * Mon Jan 9 2023 Paul Howarth <paul@xxxxxxxxxxxx> - 1.953-1 - Update to 1.953 - As promised, this release no longer works on v5.8; in fact, due to some upstream libraries, it hasn't in some time - Documentation has been cleaned up to stop referencing long-dead other libraries or methods - Some small code changes to benefit from v5.10 and v5.12 improvements - Use SPDX-format license tag - Use %{make_build} and %{make_install} * Tue Dec 21 2021 Paul Howarth <paul@xxxxxxxxxxxx> - 1.952-1 - Update to 1.952 - When computing filename, start from raw Content-Disposition - Avoid a potentially very slow regex in parsing -------------------------------------------------------------------------------- References: [ 1 ] Bug #2280644 - Upgrade perl-Email-MIME to 1.954 https://bugzilla.redhat.com/show_bug.cgi?id=2280644 -------------------------------------------------------------------------------- -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
