The following Fedora EPEL 7 Security updates need testing:
Age URL
60
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2c81054303
remctl-3.14-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-90002f509e
pdns-recursor-4.1.3-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-74ee3ae47e
phpMyAdmin-4.4.15.10-3.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-65614e9fc9
thunderbird-enigmail-2.0.6-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bbdc0ecf38
cobbler-2.8.3-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-297fb7f6c0
chromium-66.0.3359.181-3.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7155fb2e51
prosody-0.10.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
dnsdist-1.3.0-2.el7
libsmbios-cpp-2.3.3-1.el7
nbdkit-1.2.3-1.el7
odcs-0.2.5-2.el7
openssl-pkcs11-0.4.7-7.el7
python-regex-2018.06.06-1.el7
singularity-2.5.1-1.el7
strongswan-5.6.3-1.el7
Details about builds:
================================================================================
dnsdist-1.3.0-2.el7 (FEDORA-EPEL-2018-3224d1271b)
Highly DNS-, DoS- and abuse-aware loadbalancer
--------------------------------------------------------------------------------
Update Information:
Fix sigabrt on tcp query (
https://github.com/PowerDNS/pdns/issues/6712) ----
Upstream released new version. See
https://blog.powerdns.com/2018/03/30/dnsdist-1-3-0-released/ for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 6 2018 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 1.3.0-2
- Fix sigabrt on TCP query (
https://github.com/PowerDNS/pdns/issues/6712)
* Thu May 31 2018 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 1.3.0-1
- Upstream released new version
- Enable DNS over TLS
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409154 - dnsdist-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1409154
--------------------------------------------------------------------------------
================================================================================
libsmbios-cpp-2.3.3-1.el7 (FEDORA-EPEL-2018-b03a9eeb2f)
Libsmbios C++ shared libraries
--------------------------------------------------------------------------------
Update Information:
- Initial package based on libsmbios spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1581831 - Review Request: libsmbios-cpp - Libsmbios C++ shared libraries
https://bugzilla.redhat.com/show_bug.cgi?id=1581831
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.2.3-1.el7 (FEDORA-EPEL-2018-cc12d9c7f3)
NBD server
--------------------------------------------------------------------------------
Update Information:
New stable version 1.2.3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 6 2018 Richard W.M. Jones <rjones(a)redhat.com> - 1.2.3-1
- New stable version 1.2.3.
--------------------------------------------------------------------------------
================================================================================
odcs-0.2.5-2.el7 (FEDORA-EPEL-2018-65fa7a72ba)
The On Demand Compose Service
--------------------------------------------------------------------------------
Update Information:
Add python-requests-kerberos as a dep. ---- Update to new version 0.2.5.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 7 2018 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.5-2
- Add dep on python-requests-kerberos.
* Thu Jun 7 2018 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.5-1
- updated to new version 0.2.5.
--------------------------------------------------------------------------------
================================================================================
openssl-pkcs11-0.4.7-7.el7 (FEDORA-EPEL-2018-5fe3722630)
A PKCS#11 engine for use with OpenSSL
--------------------------------------------------------------------------------
Update Information:
Reintroduce libp11-devel subpackage to Fedora (#1583719)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 6 2018 Anderson Sasaki <ansasaki(a)redhat.com> - 0.4.7-7
- Reintroduce libp11-devel subpackage to Fedora (#1583719)
--------------------------------------------------------------------------------
================================================================================
python-regex-2018.06.06-1.el7 (FEDORA-EPEL-2018-26d9f22b99)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update to the latest released version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 6 2018 Thomas Moschny <thomas.moschny(a)gmx.de> - 2018.06.06-1
- Update to 2018.06.06.
--------------------------------------------------------------------------------
================================================================================
singularity-2.5.1-1.el7 (FEDORA-EPEL-2018-e14afdfcb2)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
This rebases singularity from 2.2.1 to 2.5.1, which should include all
corresponding updates (n.b. a request for rebase permission has been put into
FESCo; hence auto-push has been disabled until they approve). Please test for
functionality and backward compatibility issues, particularly around the runtime
components.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.1-1
- Update to upstream version 2.5.1
* Fri Apr 27 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.0-1
- Update to upstream version 2.5.0
* Mon Apr 16 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.4.6-1
- Update to upstream version 2.4.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585620 - singularity: Multiple security vulnerabilities fixed in 2.5.0
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1585620
[ 2 ] Bug #1585619 - singularity: Multiple security vulnerabilities fixed in 2.5.0
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1585619
[ 3 ] Bug #1452572 - singularity: Switch to Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1452572
[ 4 ] Bug #1457856 - singularity-2.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1457856
--------------------------------------------------------------------------------
================================================================================
strongswan-5.6.3-1.el7 (FEDORA-EPEL-2018-86538d58b1)
An OpenSource IPsec-based VPN and TNC solution
--------------------------------------------------------------------------------
Update Information:
New version 5.6.3 Security fix for CVE-2018-10811 ---- Resolves rhbz#1581868
CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 29 2018 Mikhail Zabaluev <mikhail.zabaluev(a)gmail.com> - 5.6.3-1
- New version 5.6.3
* Thu May 24 2018 Paul Wouters <pwouters(a)redhat.com> - 5.6.2-6
- Resolves rhbz#1581868 CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c
* Thu May 24 2018 Paul Wouters <pwouters(a)redhat.com> - 5.6.2-5
- Resolves rhbz#1574939 IKEv2 VPN connections fail to use DNS servers provided by the
server
- Resolves rhbz#1449875 Strongswan on epel built without the sql plugin but with the
sqlite plugin
* Sun May 20 2018 Mikhail Zabaluev <mikhail.zabaluev(a)gmail.com> - 5.6.2-3
- Move eap-radius, sqlite, and pkcs7 plugins out of tnc-imcvs, added package
sqlite (#1579945)
* Tue Mar 6 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 5.6.2-2
- Rebuilt for libjson-c.so.4 (json-c v0.13.1)
* Wed Feb 21 2018 Lubomir Rintel <lkundrak(a)v3.sk> - 5.6.2-1
- Updated to 5.6.2 (Dropped libnm-glib use in charon-nm)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585969 - CVE-2018-10811 strongswan: Missing initialization of a variable in
IKEv2 key derivation allows denial of service [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1585969
[ 2 ] Bug #1581868 - CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1581868
--------------------------------------------------------------------------------