The following Fedora EPEL 8 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ac1fd7a29f
seamonkey-2.53.2-1.el8
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aa8ce752c3
pure-ftpd-1.0.49-4.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03d5f14bbe
chromium-81.0.4044.138-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0d41abf072
perl-Mojolicious-8.42-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
clamav-0.102.3-1.el8
keepass-2.45-1.el8
libmongocrypt-1.0.4-1.el8
wireguard-tools-1.0.20200513-1.el8
xrdp-0.9.13-2.el8
Details about builds:
================================================================================
clamav-0.102.3-1.el8 (FEDORA-EPEL-2020-765ceaa306)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.102.3 is a bug patch release to address the following issues. -
CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing module in ClamAV
0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper bounds
checking of an unsigned variable results in an out-of-bounds read which causes a
crash. Special thanks to Daehui Chang and Fady Othman for helping identify the
ARJ parsing vulnerability. - CVE-2020-3341: Fix a vulnerability in the PDF
parsing module in ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service
(DoS) condition. Improper size checking of a buffer used to initialize AES
decryption routines results in an out-of-bounds read which may cause a crash.
Bug found by OSS-Fuzz. - Fix "Attempt to allocate 0 bytes" error when parsing
some PDF documents. - Fix a couple of minor memory leaks. ---- - Add upstream
patch to fix "Attempt to allocate 0 bytes" errors while scanning certain
PDFs - Do not log freshclam output to syslog by default - creates double
entries in the journal (bz#1822012) - (#1820069) add try-restart clamav-
freshclam.service on logrotate - Enable prelude support (bz#1829726) - Move
/etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7
libcurl - re-enable on-access scanning (bz#1820395)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.3-1
- Update to 0.102.3 (bz#1834910)
- Security fixes CVE-2020-3341
* Sat May 2 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-9
- Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning
certain PDFs
* Thu Apr 30 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-8
- Enable prelude support (bz#1829726)
* Wed Apr 29 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-7
- Move /etc/clamd.d/scan.conf to clamav-filesystem
- Add patch to build with EL7 libcurl - re-enable on-access scanning
(bz#1820395)
- Add clamonacc.service
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.102.2-6
- Rebuild (json-c)
* Wed Apr 8 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-5
- Do not log freshclam output to syslog by default - creates double entries
in the journal (bz#1822012)
- (#1820069) add try-restart clamav-freshclam.service on logrotate
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1820069 - freshclam's logrotate settings incorrect because daemon is not
restarted/nofitifed
https://bugzilla.redhat.com/show_bug.cgi?id=1820069
[ 2 ] Bug #1820395 - Clamav OnAccessScanning disabled
https://bugzilla.redhat.com/show_bug.cgi?id=1820395
[ 3 ] Bug #1822012 - When using the clamav-freshclam.service all log messages are
logged twice
https://bugzilla.redhat.com/show_bug.cgi?id=1822012
[ 4 ] Bug #1829726 - ClamAV: Enable Prelude support
https://bugzilla.redhat.com/show_bug.cgi?id=1829726
[ 5 ] Bug #1834910 - clamav-0.102.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1834910
--------------------------------------------------------------------------------
================================================================================
keepass-2.45-1.el8 (FEDORA-EPEL-2020-dcffa3c4bb)
Password manager
--------------------------------------------------------------------------------
Update Information:
keepass for Epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1792998 - Add to epel 8: keepass package please.
https://bugzilla.redhat.com/show_bug.cgi?id=1792998
--------------------------------------------------------------------------------
================================================================================
libmongocrypt-1.0.4-1.el8 (FEDORA-EPEL-2020-a604e933f7)
The companion C library for client side encryption in drivers
--------------------------------------------------------------------------------
Update Information:
Upstream version 1.0.4 (no changelog)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Remi Collet <remi(a)remirepo.net> - 1.0.4-1
- update to 1.0.4
--------------------------------------------------------------------------------
================================================================================
wireguard-tools-1.0.20200513-1.el8 (FEDORA-EPEL-2020-e35d01a9f4)
Fast, modern, secure VPN tunnel
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.20200513 - Makefile: remember to install all systemd units -
ipc: openbsd: switch to array ioctl interface ---- Update to 1.0.20200510
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200513-1
- Update to 1.0.20200513
- Makefile: remember to install all systemd units
- ipc: openbsd: switch to array ioctl interface
* Mon May 11 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200510-1
- Update to 1.0.20200510
- ipc: add support for openbsd kernel implementation
- ipc: cleanup openbsd support
- wg-quick: add support for openbsd kernel implementation
- wg-quick: cleanup openbsd support
- wg-quick: support dns search domains
- Makefile: simplify silent cleaning
- ipc: remove extra space
- git: add gitattributes so tarball doesn't have gitignore files
- terminal: specialize color_mode to stdout only
- wg-quick: android: support application whitelist
- systemd: add wg-quick.target
* Wed Apr 15 2020 Leigh Scott <leigh123linux(a)gmail.com> - 1.0.20200319-2
- Add missing config directory
- Remove default buildroot BuildRequires
- Simplify doc install
- Remove commented lines
- Use correct macro for bash-completion
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.13-2.el8 (FEDORA-EPEL-2020-5818afc82e)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Move socket directory to /run/xrdp.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13-2
- Move sockets to /run/xrdp, bug #1834178
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834178 - Existing build not compatible with pam_namespace.so
https://bugzilla.redhat.com/show_bug.cgi?id=1834178
--------------------------------------------------------------------------------