The following Fedora EPEL 8 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-934b856e97 python-django3-3.2.18-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c623c9e23d stb-0-0.24.20230129git5736b15.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

centpkg-0.7.1-1.el8 duktape-2.2.0-6.el8 fedpkg-1.44-2.el8 mrack-1.13.3-1.el8 python-vcrpy-4.1.1-6.el8 rpkg-1.66-3.el8 tkrzw-1.0.26-1.el8

Details about builds:

================================================================================ centpkg-0.7.1-1.el8 (FEDORA-EPEL-2023-4a521f4785) CentOS utility for working with dist-git -------------------------------------------------------------------------------- Update Information:

Latest upstream -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 Troy Dawson tdawson@redhat.com - 0.7.1-1 - Latest upstream * Tue Feb 28 2023 Troy Dawson tdawson@redhat.com - 0.7.0-1 - Latest upstream - adds --rhel-target feature * Wed Jan 18 2023 Fedora Release Engineering releng@fedoraproject.org - 0.6.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ duktape-2.2.0-6.el8 (FEDORA-EPEL-2023-5f230957f1) Embeddable Javascript engine -------------------------------------------------------------------------------- Update Information:

Backport upstream fix for CVE-2021-46322. -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 Carl George carl@george.computer - 2.2.0-6 - Backport upstream fix for CVE-2021-46322, resolves rhbz#2046042 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2046042 - CVE-2021-46322 duktape: SEGV via the component duk_push_tval in duktape/duk_api_stack.c [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2046042 --------------------------------------------------------------------------------

================================================================================ fedpkg-1.44-2.el8 (FEDORA-EPEL-2023-0945124d99) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:

A new release presents these changes: * https://docs.pagure.org/fedpkg/releases/1.44.html * https://docs.pagure.org/rpkg/releases/1.66.html +Patch https://bodhi.fedoraproject.org/updates/FEDORA-2023-e7db0e991f -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 Ond��ej Nosek onosek@redhat.com - 1.44-2 - Require a bumped rpkg version * Mon Feb 20 2023 Ond��ej Nosek onosek@redhat.com - 1.44-1 - Do not execute unittests for old bodhi-client (onosek) - New command `disable-monitoring` (onosek) - Set default_branch_merge to 'rawhide' (otto.liljalaakso) - `fedpkg update`: can handle $EDITOR with arguments - #492 (onosek) - Add Jenkinsfile for CI (onosek) --------------------------------------------------------------------------------

================================================================================ mrack-1.13.3-1.el8 (FEDORA-EPEL-2023-3ee6e84beb) Multicloud use-case based multihost async provisioner -------------------------------------------------------------------------------- Update Information:

Automatic update for mrack-1.13.3-1.el8. ##### **Changelog for mrack** ``` * Wed Mar 01 2023 Tibor Dudl��k tdudlak@redhat.com - 1.13.3-1 - 0f62237 fix(OpenStack): await loading limits to not break provisioning (Tibor Dudl��k) * Wed Mar 01 2023 Tibor Dudl��k tdudlak@redhat.com - 1.13.2-1 - 06f18d1 fix: Use get method when host error object is a dictionary (Tibor Dudl��k) - fd33d68 fix(Beaker): rerurn common dictionary when validation fails (Tibor Dudl��k) - b6c5ef4 fix(OpenStack): Add exception parameter when validation fails (Tibor Dudl��k) - fa2c779 fix(OpenStack): load limits properly by one method (Tibor Dudl��k) - 61e515f chore: change back mrack dist release to 1 (Tibor Dudl��k) ``` -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 Tibor Dudl��k tdudlak@redhat.com - 1.13.3-1 - 0f62237 fix(OpenStack): await loading limits to not break provisioning (Tibor Dudl��k) * Wed Mar 1 2023 Tibor Dudl��k tdudlak@redhat.com - 1.13.2-1 - 06f18d1 fix: Use get method when host error object is a dictionary (Tibor Dudl��k) - fd33d68 fix(Beaker): rerurn common dictionary when validation fails (Tibor Dudl��k) - b6c5ef4 fix(OpenStack): Add exception parameter when validation fails (Tibor Dudl��k) - fa2c779 fix(OpenStack): load limits properly by one method (Tibor Dudl��k) - 61e515f chore: change back mrack dist release to 1 (Tibor Dudl��k) --------------------------------------------------------------------------------

================================================================================ python-vcrpy-4.1.1-6.el8 (FEDORA-EPEL-2023-0c9e522b34) Automatically mock your HTTP interactions to simplify and speed up testing -------------------------------------------------------------------------------- Update Information:

Add python-vcrpy 4.1.1 to EPEL8, is basically the same version in F36 and EPEL9, but without the optional deprecated python-boto dependency -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 Diego Herrera dherrera@redhat.com - 4.1.1-6 - Remove python-boto dependency * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 4.1.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 4.1.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint python-maint@redhat.com - 4.1.1-3 - Rebuilt for Python 3.10 * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 4.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Oct 31 2020 Kevin Fenzi kevin@scrye.com - 4.1.1-1 - Update to 4.1.1. Fixes bug #1862531 - Enable at least the unit tests (integration tests do lots of network calls) * Wed Jul 29 2020 Fedora Release Engineering releng@fedoraproject.org - 4.0.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sun May 24 2020 Miro Hron��ok mhroncok@redhat.com - 4.0.2-2 - Rebuilt for Python 3.9 * Mon Mar 16 2020 Cl��ment Verna cverna@fedoraproject.org - 4.0.2-1 - Update to 4.0.2 Fixes bug 1768194 * Thu Jan 30 2020 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sun Oct 6 2019 Kevin Fenzi kevin@scrye.com - 2.1.0-1 - Update to 2.1.0. Fixes bug 1742605 - Enabled all tests in check. * Wed Sep 4 2019 Miro Hron��ok mhroncok@redhat.com - 1.13.0-5 - Subpackage python2-vcrpy has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal * Fri Aug 16 2019 Miro Hron��ok mhroncok@redhat.com - 1.13.0-4 - Rebuilt for Python 3.8 * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 1.13.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering releng@fedoraproject.org - 1.13.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Jul 25 2018 Pierre-Yves Chibon pingou@pingoured.fr - 1.13.0 - Update to 1.13.0 * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 1.11.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sun Jun 17 2018 Miro Hron��ok mhroncok@redhat.com - 1.11.1-4 - Rebuilt for Python 3.7 * Wed Feb 28 2018 Iryna Shcherbina ishcherb@redhat.com - 1.11.1-3 - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) * Fri Feb 9 2018 Fedora Release Engineering releng@fedoraproject.org - 1.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Fri Sep 15 2017 Kevin Fenzi kevin@scrye.com - 1.11.1-1 - Update to 1.11.1. Fixes bug #1447325 * Sat Aug 19 2017 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 1.10.5-4 - Python 2 binary package renamed to python2-vcrpy See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 * Thu Jul 27 2017 Fedora Release Engineering releng@fedoraproject.org - 1.10.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering releng@fedoraproject.org - 1.10.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Jan 13 2017 Kevin Fenzi kevin@scrye.com - 1.10.5-1 - Update to 1.10.5. Fixes bug #1412604 * Mon Dec 19 2016 Miro Hron��ok mhroncok@redhat.com - 1.10.4-2 - Rebuild for Python 3.6 * Fri Dec 16 2016 Ralph Bean rbean@redhat.com - 1.10.4-1 - new version * Sun Oct 2 2016 Kevin Fenzi kevin@scrye.com - 1.10.3-1 - Update to 1.10.3. Fixes bug #1381102 * Sat Sep 17 2016 Kevin Fenzi kevin@scrye.com - 1.10.2-1 - Update to 1.10.2. Fixes bug #1376311 * Mon Sep 12 2016 Kevin Fenzi kevin@scrye.com - 1.10.1-1 - Update to 1.10.1. * Fri Sep 9 2016 Kevin Fenzi kevin@scrye.com - 1.10.0-1 - Update to 1.10.0. Fixes bug #1370830 * Wed Jul 27 2016 Ralph Bean rbean@redhat.com - 1.9.0-1 - new version * Tue Jul 19 2016 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.8.0-2 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Pac... * Wed Jun 15 2016 Ralph Bean rbean@redhat.com - 1.8.0-1 - new version * Thu Feb 4 2016 Fedora Release Engineering releng@fedoraproject.org - 1.7.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Tue Nov 10 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.7.4-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 * Mon Oct 19 2015 Ralph Bean rbean@redhat.com - 1.7.4-1 - new version * Wed Sep 16 2015 Ralph Bean rbean@redhat.com - 1.7.3-1 - new version * Mon Jul 6 2015 Ralph Bean rbean@redhat.com - 1.6.0-1 - new version * Thu Jun 18 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Thu May 28 2015 Ralph Bean rbean@redhat.com - 1.5.2-2 - Move python3 deps into the python3 subpackage. * Sat May 16 2015 Ralph Bean rbean@redhat.com - 1.5.2-1 - new version * Fri May 15 2015 Ralph Bean rbean@redhat.com - 1.5.1-1 - new version * Wed May 6 2015 Ralph Bean rbean@redhat.com - 1.4.2-1 - Adjusted spec with feedback from package review. - Fix original changelog entry. - Fix directory ownership in the files section. - Latest upstream. * Sat Apr 11 2015 Ralph Bean rbean@redhat.com 1.4.0-1 - initial package for Fedora -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1815700 - python-vcrpy: epel8 branch request https://bugzilla.redhat.com/show_bug.cgi?id=1815700 --------------------------------------------------------------------------------

================================================================================ rpkg-1.66-3.el8 (FEDORA-EPEL-2023-0945124d99) Python library for interacting with rpm+git -------------------------------------------------------------------------------- Update Information:

A new release presents these changes: * https://docs.pagure.org/fedpkg/releases/1.44.html * https://docs.pagure.org/rpkg/releases/1.66.html +Patch https://bodhi.fedoraproject.org/updates/FEDORA-2023-e7db0e991f -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 Ond��ej Nosek onosek@redhat.com - 1.66-3 - Patch: Process source URLs with fragment in pre-push hook - Patch: container-build: update --signing-intent help for OSBS 2 * Tue Feb 21 2023 Ond��ej Nosek onosek@redhat.com - 1.66-2 - rebuild for unification of all branches * Mon Feb 20 2023 Ond��ej Nosek onosek@redhat.com - 1.66-1 - container-build: document --compose-ids overrides any new composes (kdreyer) - Use srpm when scratch-building from dirty repo - #652 (otto.liljalaakso) - Code cleanup in tests/test_cli.py (otto.liljalaakso) - Reduce indentation in assert_build helper (otto.liljalaakso) - Allow empty commits - 494 (msuchy) - Allow forcing download of all sources - #650 (otto.liljalaakso) - Add test case for not downloading unused sources (otto.liljalaakso) - Support 'results_dir=subdir' when building from srpm - #648 (otto.liljalaakso) - Use local branch name as release when there is no remote (otto.liljalaakso) - Allow downstreams to define a default release (otto.liljalaakso) - Switch load_branch_merge to use multiple return (otto.liljalaakso) - Unittests for 'git push' hook script (onosek) - Checking a repo configuration before 'git push' with a git hook script - 491 (onosek) - Fix skipping NVR check with autorelease (nils) - pyrpkg.spec.SpecFile: More lenient parser for Source/Patch lines (fweimer) - Fix URL in CHANGELOG.rst (tmz) - Add Jenkinsfile for CI (onosek) - mockbuild: escape rpm command under mock - rhbz#2130349 (onosek) - Fixes for exploded SRPM layouts - #633 (tdawson) - `fedpkg local` does not show rpmbuild output - rhbz#2124809 (onosek) --------------------------------------------------------------------------------

================================================================================ tkrzw-1.0.26-1.el8 (FEDORA-EPEL-2023-7015daca2e) A straightforward implementation of DBM -------------------------------------------------------------------------------- Update Information:

Version bump ---- Version bump -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 1 2023 TI_Eugene ti.eugene@gmail.com - 1.0.26-1 - Version bump * Tue Feb 28 2023 TI_Eugene ti.eugene@gmail.com - 1.0.25-1 - Version bump * Sat Jan 21 2023 Fedora Release Engineering releng@fedoraproject.org - 1.0.24-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 1.0.24-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------