The following Fedora EPEL 8 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-5b261a2216
nextcloud-client-3.1.3-1.el8
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c18d19cbdc
fluidsynth-2.1.8-3.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0754fdd085
openvpn-2.4.11-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-24ab212ee8
p7zip-16.02-20.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3a1aaec707
pngcheck-2.4.0-8.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-b308580516
perl-Image-ExifTool-12.16-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
et-6.1.7-1.el8
java-latest-openjdk-16.0.1.0.9-1.rolling.el8
mock-2.10-1.el8
mock-core-configs-34.3-1.el8
netdata-1.30.1-2.el8
python-ogr-0.24.1-1.el8
python-yara-4.1.0-1.el8
yara-4.1.0-1.el8
Details about builds:
================================================================================
et-6.1.7-1.el8 (FEDORA-EPEL-2021-7f0134a7a7)
Remote shell that survives IP roaming and disconnect
--------------------------------------------------------------------------------
Update Information:
## v6.1.7 - Fix race condition in connection test - Reduce debug object size -
Move deployment scripts to deployment branch - Do not install files from
PlatformFolders project ## v6.1.6 - Fix crash on exit - Fix ARM build ##
v6.1.5 - Fixes for various OSes - Update sentry version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 6.1.7-1
- Update to 6.1.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1942264 - et-6.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1942264
--------------------------------------------------------------------------------
================================================================================
java-latest-openjdk-16.0.1.0.9-1.rolling.el8 (FEDORA-EPEL-2021-bbc31e5925)
OpenJDK 16 Runtime Environment
--------------------------------------------------------------------------------
Update Information:
April 2021 CPU update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 25 2021 Petra Alice Mikova <pmikova(a)redhat.com> - 1:16.0.1.0.9-1.rolling
- update to 16.0.1+9 april cpu tag
- dropped jdk8259949-allow_cf-protection_on_x86.patch
* Thu Mar 11 2021 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:16.0.0.0.36-2.rolling
- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
--------------------------------------------------------------------------------
================================================================================
mock-2.10-1.el8 (FEDORA-EPEL-2021-df65033a42)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
mock - do not allocate tty for podman (msuchy(a)redhat.com) - work-around bug
setting propagation for recursive bind-mounts (david.ward(a)ll.mit.edu) - fix
handling of essential mountpoints (david.ward(a)ll.mit.edu) - pre-create the dest
directory in _copy_config mock-core-configs - Add Oracle Linux 8
(ngompa13(a)gmail.com) - Add Oracle Linux 7 (ngompa13(a)gmail.com) - Add openSUSE
Leap 15.3 (ngompa13(a)gmail.com) - openSUSE Leap 15.1 is EOL (ngompa13(a)gmail.com)
- Add openSUSE Tumbleweed s390x config (ngompa13(a)gmail.com) - Add AlmaLinux 8
configs (ngompa13(a)gmail.com) - Remove make from default ELN buildroot
(miro(a)hroncok.cz)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Pavel Raiskup <praiskup(a)redhat.com> 2.10-1
- do not allocate tty for podman (msuchy(a)redhat.com)
- work-around bug setting propagation for recursive bind-mounts (david.ward(a)ll.mit.edu)
- fix handling of essential mountpoints (david.ward(a)ll.mit.edu)
- pre-create the dest directory in _copy_config
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-34.3-1.el8 (FEDORA-EPEL-2021-df65033a42)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
mock - do not allocate tty for podman (msuchy(a)redhat.com) - work-around bug
setting propagation for recursive bind-mounts (david.ward(a)ll.mit.edu) - fix
handling of essential mountpoints (david.ward(a)ll.mit.edu) - pre-create the dest
directory in _copy_config mock-core-configs - Add Oracle Linux 8
(ngompa13(a)gmail.com) - Add Oracle Linux 7 (ngompa13(a)gmail.com) - Add openSUSE
Leap 15.3 (ngompa13(a)gmail.com) - openSUSE Leap 15.1 is EOL (ngompa13(a)gmail.com)
- Add openSUSE Tumbleweed s390x config (ngompa13(a)gmail.com) - Add AlmaLinux 8
configs (ngompa13(a)gmail.com) - Remove make from default ELN buildroot
(miro(a)hroncok.cz)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Pavel Raiskup <praiskup(a)redhat.com> 34.3-1
- Add Oracle Linux 8 (ngompa13(a)gmail.com)
- Add Oracle Linux 7 (ngompa13(a)gmail.com)
- Add openSUSE Leap 15.3 (ngompa13(a)gmail.com)
- openSUSE Leap 15.1 is EOL (ngompa13(a)gmail.com)
- Add openSUSE Tumbleweed s390x config (ngompa13(a)gmail.com)
- Add AlmaLinux 8 configs (ngompa13(a)gmail.com)
- Remove make from default ELN buildroot (miro(a)hroncok.cz)
--------------------------------------------------------------------------------
================================================================================
netdata-1.30.1-2.el8 (FEDORA-EPEL-2021-162c7feeb7)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Fix pre script ---- Update from upstream ---- Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.30.1-2
- Fix pre script, must be run before installing netdata-data package
* Wed Apr 14 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.30.1-1
- Update from upstream
* Thu Apr 1 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.30.0-1
- Update from upstream
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.29.3-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1918443 - Web UI says, "Access to file is not permitted:
/usr/share/netdata/web/index.html"
https://bugzilla.redhat.com/show_bug.cgi?id=1918443
[ 2 ] Bug #1945409 - netdata-1.30.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945409
[ 3 ] Bug #1948880 - netdata-1.30.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1948880
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.24.1-1.el8 (FEDORA-EPEL-2021-e6a5d9958e)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
Fixed problems with imports from 'gitlab' modules.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Matej Mu��ila <mmuzila(a)redhat.com> - 0.24.1-1
- Fixed problems with imports from 'gitlab' modules.
* Tue Apr 27 2021 Matej Mu��ila <mmuzila(a)redhat.com> - 0.24.0-1
- Exceptions for non-supported features were refactored.
- Behaviour of `Github.get_file_content()` was unified with `GitLab` and `Pagure`.
--------------------------------------------------------------------------------
================================================================================
python-yara-4.1.0-1.el8 (FEDORA-EPEL-2021-33433b2f22)
Python binding for the YARA pattern matching tool
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 4.1.0 Security fix for CVE-2017-9438, CVE-2021-3402,
CVE-2019-19648, CVE-2017-9438
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.0-1
- bump the python-yara as well to 4.1.0
* Tue Apr 27 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-3
- rebuild for new version of yara 4.1.0
* Sun Apr 25 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-2
- rebuild for epel
* Sat Mar 13 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-1
- bump to version 4.0.5
* Wed Feb 10 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.4-1
- bump to version 4.0.4
* Thu Feb 4 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.3-1
- bump to version 4.0.3
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 16 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.2-1
- bump to version 4.0.2
* Sat Jun 6 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.1-1
- bump to version 4.0.1
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 4.0.0-2
- Rebuilt for Python 3.9
* Tue May 12 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.0-1
- bump to version 4.0.0
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.11.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1459012 - CVE-2017-9438 yara: Stack consumption via a crafted rule mishandled
in the _ur_re_emit function
https://bugzilla.redhat.com/show_bug.cgi?id=1459012
[ 2 ] Bug #1930175 - CVE-2021-3402 libyara: Integer overflow in
libyara/modules/macho/macho.c via a malicious Mach-O file
https://bugzilla.redhat.com/show_bug.cgi?id=1930175
--------------------------------------------------------------------------------
================================================================================
yara-4.1.0-1.el8 (FEDORA-EPEL-2021-33433b2f22)
Pattern matching Swiss knife for malware researchers
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 4.1.0 Security fix for CVE-2017-9438, CVE-2021-3402,
CVE-2019-19648, CVE-2017-9438
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.0-1
- bump to 4.1.0
* Sun Apr 25 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-2
- rebuild for epel
* Fri Feb 5 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-1
- bump to yara bugfix 4.0.5 release
* Wed Feb 3 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.4-1
- bump to yara bugfix 4.0.4 release
* Thu Jul 16 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.2-1
- bump to yara bugfix 4.0.2 release
- fix build on epel7
* Sun Jun 14 2020 Adrian Reber <adrian(a)lisas.de> - 4.0.1-2
- Rebuilt for protobuf 3.12
* Tue Jun 2 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.1-1
- bump to yara bugfix 4.0.1 release
* Tue Apr 28 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.0-1
- bump to yara 4.0.0 release
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.11.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1459012 - CVE-2017-9438 yara: Stack consumption via a crafted rule mishandled
in the _ur_re_emit function
https://bugzilla.redhat.com/show_bug.cgi?id=1459012
[ 2 ] Bug #1930175 - CVE-2021-3402 libyara: Integer overflow in
libyara/modules/macho/macho.c via a malicious Mach-O file
https://bugzilla.redhat.com/show_bug.cgi?id=1930175
--------------------------------------------------------------------------------