The following Fedora EPEL 8 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d4406c9c75
awstats-7.8-2.el8
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-001e4d949f
dia-0.97.3-16.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bd945e3b55
adplug-2.3.3-1.el8 audacious-plugins-4.0.5-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
coturn-4.5.2-1.el8
duplicity-0.8.18-1.el8
gengetopt-2.23-3.el8
htop-3.0.5-1.el8
plasma-applet-translator-0.8-1.el8
python-rfc3987-1.3.7-15.el8
python-slixmpp-1.5.2-2.el8
s3fs-fuse-1.88-1.el8
Details about builds:
================================================================================
coturn-4.5.2-1.el8 (FEDORA-EPEL-2021-e976495093)
TURN/STUN & ICE Server
--------------------------------------------------------------------------------
Update Information:
Coturn 4.5.2 ============ - Fix null pointer dereference in case of out of
memory - Add prometheus metrics - Delete trailing whitespace in example
configuration files - Add architecture ppc64le to travis build - Fix
misleading option in doc (prometheus) - Allow RFC6062 TCP relay data to look
like TLS - Add support for proxy protocol V1 - Print full date and time in
logs - Add new options: "new-log-timestamp" and
"new-log-timestamp-format" -
Do not use FIPS and remove hardcode `OPENSSL_VERSION_NUMBER` with LibreSSL -
Add ACME redirect url - Support of `--acme-redirect <URL>` - Fix acme
security, redundancy, consistency - Disable binding request logging to avoid
DoS attacks (Breaking change!) - Add new `--log-binding` option to enable
binding request logging - Fix stale-nonce documentation - Version number is
changed to semver 2.0 - pkg-config, and various cleanups in configure file -
Add systemd notification for better systemd integration - Fix: Null pointer
dereference on tcp_client_input_handler_rfc6062data function - Fix: use-after-
free vulnerability on write_to_peerchannel function - Fix: use-after-free
vulnerability on write_client_connection function - Little refactoring
prometheus - Fix c++ support - Simplify - Remove session
id/allocation labels - Remove per session metrics - Fix CVE-2020-26262
- Fix ipv6 ::1 loopback check - Not allow allocate peer address 0.0.0.0/8
and ::/128 - For more details see the github security advisory:
https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 11 2021 Robert Scheck <robert(a)fedoraproject.org> - 4.5.2-1
- Upgrade to 4.5.2 (#1914861)
* Sun Sep 27 2020 Christian Glombek <lorbus(a)fedoraproject.org> - 4.5.1.3-3
- Rebuilt for libevent 2.1.12 soname bump
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1915045 - CVE-2020-26262 coturn: Loopback access control bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1915045
--------------------------------------------------------------------------------
================================================================================
duplicity-0.8.18-1.el8 (FEDORA-EPEL-2021-22f638da42)
Encrypted bandwidth-efficient backup using rsync algorithm
--------------------------------------------------------------------------------
Update Information:
0.8.18
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 11 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 0.8.18-1
- 0.8.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1914552 - duplicity-0.8.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1914552
--------------------------------------------------------------------------------
================================================================================
gengetopt-2.23-3.el8 (FEDORA-EPEL-2021-3ae7b1ed61)
Tool to write command line option parsing code for C programs
--------------------------------------------------------------------------------
Update Information:
New package for epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1792864 - Please, provide the package in EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1792864
--------------------------------------------------------------------------------
================================================================================
htop-3.0.5-1.el8 (FEDORA-EPEL-2021-dfea948821)
Interactive process viewer
--------------------------------------------------------------------------------
Update Information:
- Update to 3.0.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 11 2021 Mukundan Ragavan <nonamedotc(a)fedoraproject.org> - 3.0.5-1
- Update to 3.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1915002 - htop-3.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1915002
--------------------------------------------------------------------------------
================================================================================
plasma-applet-translator-0.8-1.el8 (FEDORA-EPEL-2021-aef97be0c8)
Plasma 5 applet for translate-shell
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 10 2021 Vasiliy Glazov <vascom2(a)gmail.com> - 0.8-1
- Update to 0.8
--------------------------------------------------------------------------------
================================================================================
python-rfc3987-1.3.7-15.el8 (FEDORA-EPEL-2021-5494ad5d24)
Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-slixmpp-1.5.2-2.el8 (FEDORA-EPEL-2021-4436106081)
Slixmpp is an XMPP library for Python 3.5+
--------------------------------------------------------------------------------
Update Information:
Initial import from fedora/rawhide
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
s3fs-fuse-1.88-1.el8 (FEDORA-EPEL-2021-05940c8cba)
FUSE-based file system backed by Amazon S3
--------------------------------------------------------------------------------
Update Information:
Update to 1.88 from
https://github.com/s3fs-fuse/s3fs-fuse (#1914881) Full
changelog:
https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.88
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 11 2021 Julio Gonz��lez Gil <packages(a)juliogonzalez.es> - 1.88-1
- Update to 1.88 from
https://github.com/s3fs-fuse/s3fs-fuse (#1914881)
Full changelog:
https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.88
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1914881 - s3fs-fuse-1.88 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1914881
--------------------------------------------------------------------------------