The following Fedora EPEL 7 Security updates need testing:
Age URL
660
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
402
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
400
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
109
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
49
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465
python34-3.4.10-5.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ed6bc3c8d4
golang-1.13.11-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-05b9f2eac5
sympa-6.2.56-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6f2a4db251
mbedtls-2.7.15-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c47d3538f7
cacti-1.2.12-1.el7 cacti-spine-1.2.12-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-101619ac61 jq-1.6-2.el7
oniguruma-6.8.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fmf-0.12-1.el7
pdns-recursor-4.1.16-1.el7
perl-Test-TempDir-0.10-15.el7
perl-Test2-0.000044-3.el7
php-composer-xdebug-handler-1.4.2-1.el7
php-zstd-0.9.0-1.el7
resalloc-3.2-1.el7
Details about builds:
================================================================================
fmf-0.12-1.el7 (FEDORA-EPEL-2020-3880ddcb72)
Flexible Metadata Format
--------------------------------------------------------------------------------
Update Information:
Fix cache issue in utils.fetch
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 4 2020 Petr ��pl��chal <psplicha(a)redhat.com> - 0.12-1
- Do git pull in utils.fetch
- Make fetch._run official as utils.run
--------------------------------------------------------------------------------
================================================================================
pdns-recursor-4.1.16-1.el7 (FEDORA-EPEL-2020-03f2097af0)
Modern, advanced and high performance recursing/non authoritative name server
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2020-10995, CVE-2020-12244 and CVE-2020-10030
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 3 2020 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 4.1.16-1
- Upstream released new version
Fixes CVE-2020-10995, CVE-2020-12244 and CVE-2020-10030
See
https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16 for more details
Switch to Boost 1.69 to fix build on ppc64le
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1837296 - pdns-recursor-4.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1837296
[ 2 ] Bug #1838002 - bump powerdns to at lat 4.1.16 to fix CVEs
https://bugzilla.redhat.com/show_bug.cgi?id=1838002
[ 3 ] Bug #1839800 - CVE-2020-10995 CVE-2020-12244 CVE-2020-10030 pdns-recursor:
multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1839800
[ 4 ] Bug #1840184 - CVE-2020-10030 pdns-recursor: stack-based out-of-bounds read via a
larger hostname [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840184
[ 5 ] Bug #1840185 - CVE-2020-10030 pdns-recursor: stack-based out-of-bounds read via a
larger hostname [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840185
[ 6 ] Bug #1840192 - CVE-2020-12244 pdns-recursor: incorrect handling of records in the
answer section of a NXDOMAIN response lacking an SOA allows an attacker to bypass DNSSEC
validation [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840192
[ 7 ] Bug #1840193 - CVE-2020-12244 pdns-recursor: incorrect handling of records in the
answer section of a NXDOMAIN response lacking an SOA allows an attacker to bypass DNSSEC
validation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840193
[ 8 ] Bug #1840281 - CVE-2020-10995 pdns-recursor: issue in DNS protocol allows
malicious parties to use recursive DNS services to attack third party authoritative name
servers [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840281
[ 9 ] Bug #1840282 - CVE-2020-10995 pdns-recursor: issue in DNS protocol allows
malicious parties to use recursive DNS services to attack third party authoritative name
servers [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840282
--------------------------------------------------------------------------------
================================================================================
perl-Test-TempDir-0.10-15.el7 (FEDORA-EPEL-2020-eecf7a6753)
Temporary files support for testing
--------------------------------------------------------------------------------
Update Information:
This package contains the Perl module Test::TempDir, which provides temporary
directory creation with testing in mind.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1843173 - perl-Test-TempDir is wanted in EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1843173
--------------------------------------------------------------------------------
================================================================================
perl-Test2-0.000044-3.el7 (FEDORA-EPEL-2020-1e6db211d2)
Framework for writing test tools that all work together
--------------------------------------------------------------------------------
Update Information:
This update brings you a new perl-Test2 package that provides a framework for
writing the test tools.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1843426 - Review Request: perl-Test2 - Framework for writing test tools that
all work together
https://bugzilla.redhat.com/show_bug.cgi?id=1843426
--------------------------------------------------------------------------------
================================================================================
php-composer-xdebug-handler-1.4.2-1.el7 (FEDORA-EPEL-2020-5c7475b2fa)
Restarts a process without Xdebug
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.2** - 2020-06-04 * Fixed: ignore SIGINTs to let the restarted
process handle them.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 4 2020 Remi Collet <remi(a)remirepo.net> - 1.4.2-1
- update to 1.4.2
--------------------------------------------------------------------------------
================================================================================
php-zstd-0.9.0-1.el7 (FEDORA-EPEL-2020-183db0fbc4)
Zstandard extension
--------------------------------------------------------------------------------
Update Information:
Upstream **version 0.9.0** promoted to stable.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 4 2020 Remi Collet <remi(a)remirepo.net> - 0.9.0-1
- update to 0.9.0 (stable)
--------------------------------------------------------------------------------
================================================================================
resalloc-3.2-1.el7 (FEDORA-EPEL-2020-2ef3712f01)
Resource allocator for expensive resources - client tooling
--------------------------------------------------------------------------------
Update Information:
- new configuration option cmd_release - command to be run before resource as
reusable again - after server restart, schedule all inconsistent resources to be
(mitigates issue#41) - systemd service is restarted upon failure (just in case)
---- new version v3.1, improved resource checker ---- new 3.0 version - new
possibility to re-use resources, and client requests can survive server restart
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 2 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.2-1
- new configuration option cmd_release - command to be run before we mark the
resource as reusable again
- after server restart, schedule all inconsistent resources to be terminated
(mitigates issue#41)
- systemd service is restarted upon failure (just in case)
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.1-2
- Rebuilt for Python 3.9
* Tue May 26 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.1-1
- new version v3.1, improved resource checker
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.0-2
- Rebuilt for Python 3.9
* Sun May 17 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.0-1
- new 3.0 version - new possibility to re-use resources, and client requests can
survive server restarts
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.6-3
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.6-2
- Rebuilt for Python 3.8
* Fri Aug 2 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.6-1
- don't assign resources to closed tickets
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jun 13 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.5-1
- thread safety - don't change os.environ
* Tue Jun 11 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.4-1
- fix improperly handled thread communication
--------------------------------------------------------------------------------