The following Fedora EPEL 7 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-01179f6b9f
suricata-4.1.9-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6c7b4cbec
tcpreplay-4.3.3-3.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-284f18e5de
lout-3.40-18.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fastd-21-2.el7
Details about builds:
================================================================================
fastd-21-2.el7 (FEDORA-EPEL-2020-fd6ec50fa5)
Fast and secure tunneling daemon
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2020-27638 ---- Update to version 20
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2020 Felix Kaechele <felix(a)kaechele.ca> - 21-2
- revert to legacy timestamp in changelog to make EL7 happy
* Fri Oct 23 2020 Felix Kaechele <felix(a)kaechele.ca> - 21-1
- update to 21
- fixes CVE-2020-27638
* Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-3
- add conditional for sphinx on EL < 8
* Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-2
- fix build on non x86 architectures
* Mon Oct 12 2020 Felix Kaechele <felix(a)kaechele.ca> - 20-1
- update to 20
- build system switched from cmake to meson
- drop OpenSSL patch (upstreamed)
* Thu Aug 13 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 19-4
- update cmake macros
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Sat May 23 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 19-1
- update to v19
- change upstream and source URLs to GitHub
- enable LTO
- add OpenSSL linker fix patch
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 18-15
- Rebuild (json-c)
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sun Jul 28 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 18-13
- fix build on F31: python-sphinx -> python3-sphinx
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Mar 6 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 18-9
- Rebuilt for libjson-c.so.4 (json-c v0.13.1)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Dec 10 2017 Bj��rn Esser <besser82(a)fedoraproject.org> - 18-7
- Rebuilt for libjson-c.so.3
* Wed Oct 4 2017 Felix Kaechele <heffer(a)fedoraproject.org> - 18-6
- disable libsodium AES implementation, removed upstream
* Mon Oct 2 2017 Remi Collet <remi(a)fedoraproject.org> - 18-5
- rebuild for libsodium
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 18-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1887118 - fastd-21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1887118
[ 2 ] Bug #1890968 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1890968
[ 3 ] Bug #1890969 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1890969
[ 4 ] Bug #1890970 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890970
--------------------------------------------------------------------------------