The following Fedora EPEL 8 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e44d8312da
rclone-1.53.3-1.el8
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-37ef75d1ce
chromium-87.0.4280.88-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c82583d07e
pngcheck-2.4.0-5.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fe42686452
mbedtls-2.16.9-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ansible-2.9.16-1.el8
knot-3.0.3-1.el8
opendkim-2.11.0-0.17.el8
python-rsa-3.4.2-16.el8
Details about builds:
================================================================================
ansible-2.9.16-1.el8 (FEDORA-EPEL-2020-e5dbceaffa)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.16 stable bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 17 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.16-1
- Update to 2.9.16
--------------------------------------------------------------------------------
================================================================================
knot-3.0.3-1.el8 (FEDORA-EPEL-2020-e3ac4d7706)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.0.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 17 2020 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.0.3-1
- Update to 3.0.3
* Wed Nov 11 2020 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.0.2-1
- Update to 3.0.2
--------------------------------------------------------------------------------
================================================================================
opendkim-2.11.0-0.17.el8 (FEDORA-EPEL-2020-d4bfeb1f04)
A DomainKeys Identified Mail (DKIM) milter to sign and/or verify mail
--------------------------------------------------------------------------------
Update Information:
Upstream 2.11.0-beta2, packaging improvements
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.11.0-0.17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jun 24 2020 Tomas Korbar <tkorbar(a)redhat.com> - 2.11.0-0.16
- Change location of tmpfiles definiton (#1736767)
* Wed Jun 24 2020 Tomas Korbar <tkorbar(a)redhat.com> - 2.11.0-0.15
- Change permissions of /var/run/opendkim directory (#1744391)
* Wed Jun 24 2020 Tomas Korbar <tkorbar(a)redhat.com> - 2.11.0-0.14
- Change ownership of the keys directory to root (#1711713)
* Wed Jun 24 2020 Tomas Korbar <tkorbar(a)redhat.com> - 2.11.0-0.13
- Change /run/opendkim permissions to group writable
- Improve the patch which adds support for lua
- Credit: mdomsch
* Mon Jun 22 2020 Tomas Korbar <tkorbar(a)redhat.com> - 2.11.0-0.12
- Rebase to 2.11.0-beta2 version
- Clean specfile and move configuration to their own files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1711713 - The ownership of the keys directory in the package disagrees with
what the scripts set
https://bugzilla.redhat.com/show_bug.cgi?id=1711713
[ 2 ] Bug #1736767 - tmpfiles location incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1736767
[ 3 ] Bug #1744391 - opendkim socket directory permissions too restrictive
https://bugzilla.redhat.com/show_bug.cgi?id=1744391
--------------------------------------------------------------------------------
================================================================================
python-rsa-3.4.2-16.el8 (FEDORA-EPEL-2020-f87c9b8bab)
Pure-Python RSA implementation
--------------------------------------------------------------------------------
Update Information:
Apply cve-2020-13757 patch.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 18 2020 Jason Montleon <jmontleo(a)redhat.com> - 3.4.2-16
- Apply Backport patch to fix CVE-2020-13757
--------------------------------------------------------------------------------