The following Fedora EPEL 8 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-69c0102261
singularity-3.6.4-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b7912a8edb
suricata-5.0.4-1.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e85de73cdb
pdns-recursor-4.3.5-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ef54b7a2d
tcpreplay-4.3.3-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
fastd-21-1.el8
python-markdown2-2.3.10-1.el8
Details about builds:
================================================================================
fastd-21-1.el8 (FEDORA-EPEL-2020-4f4de3554d)
Fast and secure tunneling daemon
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2020-27638 ---- Update to version 20
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 23 2020 Felix Kaechele <felix(a)kaechele.ca> - 21-1
- update to 21
- fixes CVE-2020-27638
* Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-3
- add conditional for sphinx on EL < 8
* Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-2
- fix build on non x86 architectures
* Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-1
- update to 20
- build system switched from cmake to meson
- drop OpenSSL patch (upstreamed)
* Thu Aug 13 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 19-4
- update cmake macros
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Sat May 23 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 19-1
- update to v19
- change upstream and source URLs to GitHub
- enable LTO
- add OpenSSL linker fix patch
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 18-15
- Rebuild (json-c)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1887118 - fastd-21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1887118
[ 2 ] Bug #1890968 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1890968
[ 3 ] Bug #1890969 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1890969
[ 4 ] Bug #1890970 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890970
--------------------------------------------------------------------------------
================================================================================
python-markdown2-2.3.10-1.el8 (FEDORA-EPEL-2020-6af75158dc)
A fast and complete Python implementation of Markdown
--------------------------------------------------------------------------------
Update Information:
#### python-markdown2 2.3.10 #### * [pull #356] Don't merge sequential quotes
into a single blockquote * [pull #357] use style=text-align for table alignment
* [pull #360] introduce underline extra * [pull #368] Support for structured and
nested values in metadata * [pull #371] add noopener to external links
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.3.10-1
- Update to 2.3.10.
--------------------------------------------------------------------------------