The following Fedora EPEL 8 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-1563c1eaf3 chromium-78.0.3904.97-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d9bc350179 mingw-libidn2-2.3.0-1.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

fail2ban-0.10.4-8.el8 jhead-3.04-1.el8 milter-regex-2.6-2.el8 python-cram-0.7-4.el8 radsecproxy-1.8.0-1.el8 wine-4.0.2-2.el8

Details about builds:

================================================================================ fail2ban-0.10.4-8.el8 (FEDORA-EPEL-2019-f54efa75cb) Daemon to ban hosts that cause multiple authentication errors -------------------------------------------------------------------------------- Update Information:

- Define banaction_allports for firewalld, update banaction (bz#1775175) - Update sendmail-reject with TLSMTA & MSA port IDs (bz#1722625) - Remove config files for other distros (bz#1533113) -------------------------------------------------------------------------------- ChangeLog:

* Thu Nov 21 2019 Orion Poplawski orion@nwra.com - 0.10.4-8 - Define banaction_allports for firewalld, update banaction (bz#1775175) - Update sendmail-reject with TLSMTA & MSA port IDs (bz#1722625) * Thu Oct 31 2019 Orion Poplawski orion@nwra.com - 0.10.4-7 - Remove config files for other distros (bz#1533113) * Thu Oct 3 2019 Miro Hron��ok mhroncok@redhat.com - 0.10.4-6 - Rebuilt for Python 3.8.0rc1 (#1748018) --------------------------------------------------------------------------------

================================================================================ jhead-3.04-1.el8 (FEDORA-EPEL-2019-288e46f2d9) Tool for displaying EXIF data embedded in JPEG images -------------------------------------------------------------------------------- Update Information:

updated to 3.04 (CVE-2019-19035) -------------------------------------------------------------------------------- ChangeLog:

* Fri Nov 22 2019 Adrian Reber adrian@lisas.de - 3.04-1 - updated to 3.04 (CVE-2019-19035) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1775098 - CVE-2019-19035 jhead: heap based over-read in ReadJpegSections and process_SOFn in jpgfile.c leads to denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1775098 --------------------------------------------------------------------------------

================================================================================ milter-regex-2.6-2.el8 (FEDORA-EPEL-2019-135dbd95e5) Milter plug-in for regular expression filtering -------------------------------------------------------------------------------- Update Information:

This is the first EPEL-8 build of milter-regex. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jul 25 2019 Fedora Release Engineering releng@fedoraproject.org - 2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Apr 29 2019 Paul Howarth paul@city-fan.org - 2.6-1 - Update to 2.6 - Treat socket file name without prefix like local file - Make pid file writeable only by root * Tue Apr 23 2019 Paul Howarth paul@city-fan.org - 2.5-1 - Update to 2.5 - Add -r option to write pid file, based on FreeBSD port patches * Wed Apr 3 2019 Paul Howarth paul@city-fan.org - 2.4-1 - Update to 2.4 - Bug fix: for actions followed by multiple expressions (not just one arbitrarily complex expression), when multiple expressions become defined during the same sequence point, but with different values (e.g. one true, another false), depending on the expression order, the action might not be taken, when it should be - Add -f option to set syslog facility * Sun Mar 24 2019 Paul Howarth paul@city-fan.org - 2.2-3 - Fix ownership of /var/spool/milter-regex so that dac_override isn't needed (#1678040) * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Aug 24 2018 Paul Howarth paul@city-fan.org - 2.2-1 - Update to 2.2 - Add -U, -G, and -P options to set pipe user, group, and permissions * Fri Aug 24 2018 Paul Howarth paul@city-fan.org - 2.1-1 - Update to 2.1 - Default maximum log level to 6 (LOG_INFO), i.e. exclude LOG_DEBUG - Upstream switched from benezedrine.cx to bezendrine.ch * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 2.0-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Feb 8 2018 Fedora Release Engineering releng@fedoraproject.org - 2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Fri Jan 26 2018 Paul Howarth paul@city-fan.org - 2.0-11 - Drop dependencies on systemd-units and use %{?systemd_requires} instead - Use forward-looking conditionals - List build requirements one per line - Don't use full paths for commands in scriptlets, to improve readability - Drop legacy Group: tag * Thu Aug 3 2017 Fedora Release Engineering releng@fedoraproject.org - 2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering releng@fedoraproject.org - 2.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering releng@fedoraproject.org - 2.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Aug 5 2016 Paul Howarth paul@city-fan.org - 2.0-7 - sendmail-devel renamed to sendmail-milter-devel from Fedora 26 - Specify all build requirements * Thu Feb 4 2016 Fedora Release Engineering releng@fedoraproject.org - 2.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Mar 2 2015 Paul Howarth paul@city-fan.org - 2.0-4 - Use %license * Sun Aug 17 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Nov 25 2013 Paul Howarth paul@city-fan.org - 2.0-1 - Update to 2.0 - Add -l option to specify maximum log level - Drop upstreamed cleanup and starttls patches * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.9-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Sep 7 2012 Paul Howarth paul@city-fan.org - 1.9-5 - Drop SysV-to-systemd migration support from F-18 onwards - Use systemd scriptlet macros for preset support (#850207) * Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue Jul 17 2012 Paul Howarth paul@city-fan.org - 1.9-3 - Add support for STARTTLS macro checking (#840665) - Defer d��mon startup until network is available * Fri Jan 6 2012 Paul Howarth paul@city-fan.org - 1.9-2 - Rebuilt for gcc 4.7 * Tue Nov 22 2011 Paul Howarth paul@city-fan.org - 1.9-1 - Update to 1.9 - Add -j option to chroot - Improve building on various platforms - Fix some typos in documentation and example config - Drop upstreamed strlcat patch - Drop gcc patch, no longer needed - Build with additional warnings enabled, and add patch to fix warnings where possible (libmilter API is missing some 'const' attributes, so it's not possible to get rid of all of them) * Mon Jul 25 2011 Paul Howarth paul@city-fan.org - 1.8-4 - Requires(post): systemd-sysv for sysv-to-systemd migration * Sat Jul 16 2011 Paul Howarth paul@city-fan.org - 1.8-3 - Switch from SysV initscript to systemd unit file - Clean up for modern rpmbuild - Drop Sendmail references as the milter should work with Postfix too - Nobody else likes macros for commands * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Fri Aug 13 2010 Paul Howarth paul@city-fan.org - 1.8-1 - Update to 1.8 (log symbolic host name together with numeric IP address) - Add missing function strlcat from openbsd libc - Fix %postun to restart the milter properly on package upgrades - Use %{_initddir} rather than the deprecated %{_initrddir} where possible * Sat Jul 25 2009 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.7-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Feb 25 2009 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.7-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Feb 13 2009 Paul Howarth paul@city-fan.org - 1.7-4 - Rebuild for shared libmilter in Fedora 11 development * Mon Feb 18 2008 Paul Howarth paul@city-fan.org - 1.7-3 - Support config files with more than 507 rules (#304071) * Wed Aug 22 2007 Paul Howarth paul@city-fan.org - 1.7-2 - Rebuild for BuildID inclusion (http://fedoraproject.org/wiki/Releases/FeatureBuildId) * Mon Aug 6 2007 Paul Howarth paul@city-fan.org - 1.7-1 - Update to 1.7 (sendmail macro filtering support added) - Tarball now includes a versioned directory name - Split milter-regex.conf out from being a here document in the spec and have it as a separate source file instead - Unexpand tabs - Use the standard scriptlet for user/group creation in %pre - Use %{_initrddir} rather than %{_sysconfdir}/rc.d/init.d for initscript - Use %{__install} rather than %{__cp} in %install - Drop scriptlet dependencies on /sbin/service by calling initscript directly - LSB-ize initscript (#246983) * Wed Apr 18 2007 Paul Howarth paul@city-fan.org - 1.6-7 - Add patch for compile errors on Fedora 7 - Use sed rather than perl for quick scripted edits * Tue Aug 29 2006 Paul Howarth paul@city-fan.org - 1.6-6 - Rebuild for dynamic linking speedups (FE6) * Thu May 25 2006 Paul Howarth paul@city-fan.org - 1.6-5 - Address issues raised in review (#189611) - Add sendmail dependency - Honor %{optflags} * Fri Apr 21 2006 Paul Howarth paul@city-fan.org - 1.6-4 - Minor cosmetic changes for resubmission for Fedora Extras * Fri Nov 18 2005 Paul Howarth paul@city-fan.org - 1.6-3 - Remove redundant ver_ and rel_ macros - Don't include package name in the summary - Use macros consistently - Generate LICENSE file in %prep rather than %install - Don't strip binary, so debuginfo package is useful - Combine groupadd+useradd into a single useradd command - Use /sbin/nologin for mregex shell instead of non-existent /bin/nologin - Don't delete user+group on package removal (see http://www.redhat.com/archives/fedora-extras-commits/2005-June/msg00271.html) - Install initscript in %{_sysconfdir} rather than /etc/init.d - Don't enable service by default on installation - Add scriptlet dependencies - Add buildreq groff - Use full URL for source - Edit username in man page as well as in code - Use install rather than cp to install %{SOURCE1} and %{SOURCE2} so that permissions don't need to be set in SRPM - Ghost the socket for clean package removal - Buildreq sendmail-devel ��� 8.13.0 because of the use of SMFIF_QUARANTINE - Use dist tag * Tue Jan 25 2005 Victor Ramirez vramirez@gmail.com - 1.6-2 - Initial rpm release - Modified user and configuration file location. --------------------------------------------------------------------------------

================================================================================ python-cram-0.7-4.el8 (FEDORA-EPEL-2019-752544bfa9) Simple testing framework for command line applications -------------------------------------------------------------------------------- Update Information:

Build for EPEL8 -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 23 2019 Orion Poplawski orion@nwra.com - 0.7-4 - Fix cram shebang * Fri Nov 22 2019 Orion Poplawski orion@nwra.com - 0.7-3 - Fix license (GPLv2+) * Thu Nov 21 2019 Orion Poplawski orion@nwra.com - 0.7-2 - Run tests properly in mock * Thu Nov 21 2019 Orion Poplawski orion@nwra.com - 0.7-1 - Update to 0.7 * Thu Oct 3 2019 Miro Hron��ok mhroncok@redhat.com - 0.6-22 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 0.6-21 - Rebuilt for Python 3.8 * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 0.6-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering releng@fedoraproject.org - 0.6-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Oct 17 2018 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 0.6-18 - Subpackage python2-cram has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 0.6-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 0.6-16 - Rebuilt for Python 3.7 * Fri Feb 9 2018 Fedora Release Engineering releng@fedoraproject.org - 0.6-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering releng@fedoraproject.org - 0.6-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering releng@fedoraproject.org - 0.6-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Mon Dec 19 2016 Miro Hron��ok mhroncok@redhat.com - 0.6-12 - Rebuild for Python 3.6 * Tue Jul 19 2016 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.6-11 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Pac... * Thu Feb 4 2016 Fedora Release Engineering releng@fedoraproject.org - 0.6-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Mon Dec 7 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-9 - Use %{summary} macro in py2/py3 subpackages (thanks zbyszek@in.waw.pl) (rhbz#1179484) - Drop old py3 minimum version numbers (thanks zbyszek@in.waw.pl) (rhbz#1179484) * Mon Dec 7 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-8 - BR: python2-devel instead of python-devel (thanks zbyszek@in.waw.pl) (rhbz#1179484) - rm Group tag from py3 subpackage (thanks zbyszek@in.waw.pl) (rhbz#1179484) - Only package a single executable, /usr/bin/cram (thanks zbyszek@in.waw.pl) (rhbz#1179484) * Sun Dec 6 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-7 - Correct Summary for python3-cram subpackage (thanks zbyszek@in.waw.pl) (rhbz#1179484) - rm py3dir macro (thanks zbyszek@in.waw.pl) (rhbz#1179484) * Sun Dec 6 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-6 - Update for latest Python packaging guidelines (thanks zbyszek@in.waw.pl) (rhbz#1179484) - rm Group tag - drop support for el6 * Sat Apr 4 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-5 - Use %license macro (RHBZ #1179484) * Thu Jan 8 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-4 - Correct License tag (RHBZ #1179484) * Wed Jan 7 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-3 - Do not ship examples files in package. These are more like test files. (RHBZ #1179484) * Tue Jan 6 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-2 - Fix bad copy-and-paste for %description in python3 subpackage - Fix shebangs to satisfy rpmlint's non-executable-script errors * Tue Jan 6 2015 Ken Dreyer ktdreyer@ktdreyer.com - 0.6-1 - initial package -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1775407 - Build python-cram for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1775407 --------------------------------------------------------------------------------

================================================================================ radsecproxy-1.8.0-1.el8 (FEDORA-EPEL-2019-26808390e9) Generic RADIUS proxy with RadSec support -------------------------------------------------------------------------------- Update Information:

radsecproxy is a generic RADIUS proxy that in addition to usual RADIUS UDP transport, also supports TLS (RadSec), as well as RADIUS over TCP and DTLS. The aim is for the proxy to have sufficient features to be flexible, while at the same time to be small, efficient and easy to configure. -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 17 2019 Robert Scheck robert@fedoraproject.org 1.8.0-1 - Upgrade to 1.8.0 (#1753052) - Initial spec file for Fedora and Red Hat Enterprise Linux --------------------------------------------------------------------------------

================================================================================ wine-4.0.2-2.el8 (FEDORA-EPEL-2019-b45c7e9299) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information:

Remove capi package as isdn4k package has been dropped from RHEL 8. Kernel is also dropping ISDN support so this package will be dropped from Fedora soon, too. -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 23 2019 Michael Cronenworth mike@cchtml.com 4.0.2-2 - drop capi package (rhbz#1775582) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1775582 - Missing dependency for wine-capi (isdn4k-utils) https://bugzilla.redhat.com/show_bug.cgi?id=1775582 --------------------------------------------------------------------------------