The following Fedora EPEL 8 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ac1fd7a29f
seamonkey-2.53.2-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aa8ce752c3
pure-ftpd-1.0.49-4.el8
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03d5f14bbe
chromium-81.0.4044.138-1.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0d41abf072
perl-Mojolicious-8.42-1.el8
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-765ceaa306
clamav-0.102.3-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
exim-4.93-3.el8
log4net-2.0.8-10.el8
supervisor-4.2.0-1.el8
Details about builds:
================================================================================
exim-4.93-3.el8 (FEDORA-EPEL-2020-2056b1c4a9)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is an update fixing out-of-bounds read in the SPA authenticator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.93-3
- Fixed out-of-bounds read in the SPA authenticator
Resolves: CVE-2020-12783
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator
can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c
https://bugzilla.redhat.com/show_bug.cgi?id=1836362
--------------------------------------------------------------------------------
================================================================================
log4net-2.0.8-10.el8 (FEDORA-EPEL-2020-30aba92944)
A .NET framework for logging
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1285
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10
- apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache
log4net
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary
configuration files from users
https://bugzilla.redhat.com/show_bug.cgi?id=1835982
--------------------------------------------------------------------------------
================================================================================
supervisor-4.2.0-1.el8 (FEDORA-EPEL-2020-47bcd56bcf)
A System for Allowing the Control of Process State on UNIX
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.2.0 version; packaging cleanups to align with current Fedora
Packaging Guidelines
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Francisco Javier Tsao Sant��n <tsao(a)gpul.org> - 4.2.0-1
- Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa
<ngompa13(a)gmail.com>
- Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Sant��n
<tsao(a)gpul.org>
--------------------------------------------------------------------------------