Fedora EPEL 6 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 6 Security updates need testing:
Age URL
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d2ea82902e python-httplib2-0.18.1-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
putty-0.74-1.el6
Details about builds:
================================================================================
putty-0.74-1.el6 (FEDORA-EPEL-2020-b1a8a3c29a)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-14002.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.74-1
- New version
- Fixed possible information leak in the algorithm negotiation
Resolves: rhbz#1852417
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852415 - CVE-2020-14002 putty: Observable Discrepancy leading to an information leak in the algorithm negotiation
https://bugzilla.redhat.com/show_bug.cgi?id=1852415
--------------------------------------------------------------------------------
3 years, 9 months
Fedora EPEL 7 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
686 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7
428 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7
425 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7
135 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7
75 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f33a36b2c4 python-httplib2-0.18.1-3.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c438b9fb89 lynis-3.0.0-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d749373a67 znc-1.8.1-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-af9b2ac861 alpine-2.23-2.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ad4894c0c jbig2dec-0.12-5.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0078f6abc1 xpdf-3.04-10.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-af9c6001d1 ngircd-26-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5d348316dd chromium-83.0.4103.116-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
coturn-4.5.1.3-1.el7
php-composer-semver3-3.0.0-1.el7
putty-0.74-1.el7
python-ifcfg-0.21-1.el7
xrdp-0.9.13.1-1.el7
Details about builds:
================================================================================
coturn-4.5.1.3-1.el7 (FEDORA-EPEL-2020-afd5c42fd6)
TURN/STUN & ICE Server
--------------------------------------------------------------------------------
Update Information:
Coturn 4.5.1.3 ============== * merge PR #575: Fix rpm packaging * merge PR
#576: Tell tar to not include the metadata into release * merge PR #574:
Change Docker `turnserver.conf` to latest `turnserver.conf` * merge PR #566:
Remove reference to SSLv3 * merge PR #579: Ignore MD5 for BoringSSL * merge
PR #577: Build RPM from local folder instead of Git repo * Fix for
CVE-2020-4067: STUN response buffer not initialized properly (issue found and
reported #583 by Felix D��rre)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.3-1
- Update to 4.5.1.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852362 - CVE-2020-4067 coturn: STUN response buffer not initialized properly
https://bugzilla.redhat.com/show_bug.cgi?id=1852362
--------------------------------------------------------------------------------
================================================================================
php-composer-semver3-3.0.0-1.el7 (FEDORA-EPEL-2020-d8053bd3a2)
Semver library version 3
--------------------------------------------------------------------------------
Update Information:
Semver library version 3 that offers utilities, version constraint parsing and
validation. Originally written as part of composer/composer, now extracted and
made available as a stand-alone library. Autoloader:
/usr/share/php/Composer/Semver3/autoload.php
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1843516 - Review Request: php-composer-semver3 - Semver library version 3
https://bugzilla.redhat.com/show_bug.cgi?id=1843516
--------------------------------------------------------------------------------
================================================================================
putty-0.74-1.el7 (FEDORA-EPEL-2020-2f70f49092)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-14002.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.74-1
- New version
- Fixed possible information leak in the algorithm negotiation
Resolves: rhbz#1852418
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852415 - CVE-2020-14002 putty: Observable Discrepancy leading to an information leak in the algorithm negotiation
https://bugzilla.redhat.com/show_bug.cgi?id=1852415
--------------------------------------------------------------------------------
================================================================================
python-ifcfg-0.21-1.el7 (FEDORA-EPEL-2020-780bf90285)
Python cross-platform network interface discovery (ifconfig/ipconfig/ip)
--------------------------------------------------------------------------------
Update Information:
Update to the latest `python-ifcfg` release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Scott K Logan <logans(a)cottsay.net> - 0.21-1
- Update to 0.21 (rhbz#1852561)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852561 - python-ifcfg-0.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1852561
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.13.1-1.el7 (FEDORA-EPEL-2020-6949cf3502)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
This is a security fix release that includes fixes for the following local
buffer overflow vulnerability. - CVE-2022-4044: Local users can perform a
buffer overflow attack against the xrdp-sesman service and then impersonate it
This update is recommended for all xrdp users.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13.1-1
- Bump up to 0.9.13.1
- CVE-2022-4044
--------------------------------------------------------------------------------
3 years, 9 months
Fedora EPEL 8 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 8 Security updates need testing:
Age URL
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-232e4f7411 python-django-2.2.13-1.el8
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-18fb909316 znc-1.8.1-1.el8
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-3c9503ab68 libmp4v2-2.1.0-0.21.trunkREV507.el8
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f64e687c3f lynis-3.0.0-1.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c047cbdfd0 hostapd-2.9-4.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4d185f6e16 alpine-2.23-2.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-da42cd0f70 ngircd-26-3.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6e0d8564ec chromium-83.0.4103.116-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
coturn-4.5.1.3-1.el8
ghc-rpm-macros-1.9.0-1.1.el8
hstr-2.2-2.el8
micro-2.0.6-1.el8
nagios-plugins-2.3.3-4.el8
perl-DateTime-Event-ICal-0.13-14.el8
perl-DateTime-Event-Recurrence-0.19-11.el8
perl-DateTime-Format-ICal-0.09-33.el8
purple-skypeweb-1.6-1.el8
python-asysocks-0.0.5-1.el8
python-collectd_systemd-0.0.1-0.18.20181018git212cb79.el8
python-ifcfg-0.21-1.el8
rubygem-xml-simple-1.1.5-9.el8
svt-av1-0.8.4-1.el8
xrdp-0.9.13.1-1.el8
Details about builds:
================================================================================
coturn-4.5.1.3-1.el8 (FEDORA-EPEL-2020-8e909a0e81)
TURN/STUN & ICE Server
--------------------------------------------------------------------------------
Update Information:
Coturn 4.5.1.3 ============== * merge PR #575: Fix rpm packaging * merge PR
#576: Tell tar to not include the metadata into release * merge PR #574:
Change Docker `turnserver.conf` to latest `turnserver.conf` * merge PR #566:
Remove reference to SSLv3 * merge PR #579: Ignore MD5 for BoringSSL * merge
PR #577: Build RPM from local folder instead of Git repo * Fix for
CVE-2020-4067: STUN response buffer not initialized properly (issue found and
reported #583 by Felix D��rre)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.3-1
- Update to 4.5.1.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852362 - CVE-2020-4067 coturn: STUN response buffer not initialized properly
https://bugzilla.redhat.com/show_bug.cgi?id=1852362
--------------------------------------------------------------------------------
================================================================================
ghc-rpm-macros-1.9.0-1.1.el8 (FEDORA-EPEL-2020-53f4541338)
RPM macros for building Haskell packages for GHC
--------------------------------------------------------------------------------
Update Information:
GHC RPM macros
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
hstr-2.2-2.el8 (FEDORA-EPEL-2020-de7334c55d)
Suggest box like shell history completion
--------------------------------------------------------------------------------
Update Information:
- Build for epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852083 - please add hstr to epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1852083
--------------------------------------------------------------------------------
================================================================================
micro-2.0.6-1.el8 (FEDORA-EPEL-2020-1910586f66)
A modern and intuitive terminal-based text editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.6 (#1849132) ---- Update to 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.6-1
- Update to 2.0.6 (#1849132)
* Thu Jun 18 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1823042 - micro-2.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1823042
[ 2 ] Bug #1849132 - micro-2.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1849132
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.3.3-4.el8 (FEDORA-EPEL-2020-70bcfe5382)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
Reintroduce check_ssl_validity now that the dependency is in EL 8.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 19 2003 Martin Jackson <mhjacks(a)swbell.net> - 2.3.3-4
- Reintroduce check_ssl_validity now that the dependency is in EL 8.2
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Event-ICal-0.13-14.el8 (FEDORA-EPEL-2020-fa10e53bce)
Perl DateTime extension for computing rfc2445 recurrences
--------------------------------------------------------------------------------
Update Information:
Added to EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1851453 - Add perl-DateTime-Format-ICal to EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1851453
[ 2 ] Bug #1851457 - Add perl-DateTime-Event-ICal into EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1851457
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Event-Recurrence-0.19-11.el8 (FEDORA-EPEL-2020-6e5fac6fdf)
DateTime::Set extension for create basic recurrence sets
--------------------------------------------------------------------------------
Update Information:
Added new package to EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850757 - Add perl-DateTime-Event-Recurrence to EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1850757
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-ICal-0.09-33.el8 (FEDORA-EPEL-2020-fa10e53bce)
Parse and format iCal datetime and duration strings
--------------------------------------------------------------------------------
Update Information:
Added to EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1851453 - Add perl-DateTime-Format-ICal to EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1851453
[ 2 ] Bug #1851457 - Add perl-DateTime-Event-ICal into EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1851457
--------------------------------------------------------------------------------
================================================================================
purple-skypeweb-1.6-1.el8 (FEDORA-EPEL-2020-9681a87396)
Adds support for Skype to Pidgin
--------------------------------------------------------------------------------
Update Information:
Updated to version 1.6.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.6-1
- Updated to version 1.6.
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-7.20190520git5d29285
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-asysocks-0.0.5-1.el8 (FEDORA-EPEL-2020-4ecff91ec5)
Socks5/Socks4 client and server library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.0.5 ---- Update to latest upstream release
0.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 29 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.5-1
- Update to latest upstream release 0.0.5
* Mon Jun 22 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.4-1
- Update to latest upstream release 0.0.4
* Mon Jun 15 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.3-1
- Update to latest upstream release 0.0.3
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.2-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
python-collectd_systemd-0.0.1-0.18.20181018git212cb79.el8 (FEDORA-EPEL-2020-1d0abd08b2)
Collectd plugin to monitor systemd services
--------------------------------------------------------------------------------
Update Information:
Back port that a starting service is considered an okay service.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Steve Traylen <steve.traylen(a)cern.ch> - 0.0.1-0.18.20181018git212cb79
- Backport bug fix for start state of services.
--------------------------------------------------------------------------------
================================================================================
python-ifcfg-0.21-1.el8 (FEDORA-EPEL-2020-e76ff1c361)
Python cross-platform network interface discovery (ifconfig/ipconfig/ip)
--------------------------------------------------------------------------------
Update Information:
Update to the latest `python-ifcfg` release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Scott K Logan <logans(a)cottsay.net> - 0.21-1
- Update to 0.21 (rhbz#1852561)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852561 - python-ifcfg-0.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1852561
--------------------------------------------------------------------------------
================================================================================
rubygem-xml-simple-1.1.5-9.el8 (FEDORA-EPEL-2020-7e02a0a184)
A simple API for XML processing
--------------------------------------------------------------------------------
Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1793208 - Request to package rubygem-xml-simple for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1793208
--------------------------------------------------------------------------------
================================================================================
svt-av1-0.8.4-1.el8 (FEDORA-EPEL-2020-035710bdf4)
Scalable Video Technology for AV1 Encoder
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.4 (#1851799) ---- Update to 0.8.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.4-1
- Update to 0.8.4 (#1851799)
* Fri Jun 19 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.3-1
- Update to 0.8.3
* Sun Feb 2 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.1-1
- Update to 0.8.1
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1825746 - svt-av1-0.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1825746
[ 2 ] Bug #1851799 - svt-av1-0.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1851799
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.13.1-1.el8 (FEDORA-EPEL-2020-f1828228be)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
This is a security fix release that includes fixes for the following local
buffer overflow vulnerability. - CVE-2022-4044: Local users can perform a
buffer overflow attack against the xrdp-sesman service and then impersonate it
This update is recommended for all xrdp users.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13.1-1
- Bump up to 0.9.13.1
- CVE-2022-4044
--------------------------------------------------------------------------------
3 years, 9 months