The following Fedora EPEL 8 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-8e909a0e81
coturn-4.5.1.3-1.el8
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f1828228be
xrdp-0.9.13.1-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-13c6cbc484
python-gnupg-0.4.6-1.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2f1d845c76
python-rsa-3.4.2-15.el8
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9239b6fa50
botan2-2.12.1-2.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff58160b15
libslirp-4.3.1-1.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-672e6676c7
seamonkey-2.53.3-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
bdsync-0.11.2-1.el8
cacti-1.2.13-1.el8
cacti-spine-1.2.13-1.el8
cpuid-20200427-1.el8
mbedtls-2.16.7-1.el8
nnn-3.3-1.el8
pdns-4.3.0-5.el8
perl-MooseX-Types-DateTime-MoreCoercions-0.15-15.el8
puppet-6.14.0-1.el8
python-natlas-libnmap-0.7.1-1.el8
python-readme-renderer-24.0-3.el8
singularity-3.6.0-1.el8
sipcalc-1.1.6-17.el8
ufdbGuard-1.34.5-2.el8
wsdd-0.6.1-1.el8
Details about builds:
================================================================================
bdsync-0.11.2-1.el8 (FEDORA-EPEL-2020-21c2b8d984)
Remote sync for block devices
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
cacti-1.2.13-1.el8 (FEDORA-EPEL-2020-12d0e14fab)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.13 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.13
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 14 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.13-1
- Update to 1.2.13
- CVE-2020-11022, CVE-2020-11023, CVE-2020-13625, CVE-2020-14295
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849133 - CVE-2020-14295 cacti: SQL injection in color.php can lead to remote
command execution
https://bugzilla.redhat.com/show_bug.cgi?id=1849133
--------------------------------------------------------------------------------
================================================================================
cacti-spine-1.2.13-1.el8 (FEDORA-EPEL-2020-12d0e14fab)
Threaded poller for Cacti written in C
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.13 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.13
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 14 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.13-1
- Update to 1.2.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849133 - CVE-2020-14295 cacti: SQL injection in color.php can lead to remote
command execution
https://bugzilla.redhat.com/show_bug.cgi?id=1849133
--------------------------------------------------------------------------------
================================================================================
cpuid-20200427-1.el8 (FEDORA-EPEL-2020-d662b4c136)
Dumps information about the CPU(s)
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 20200427 (rhbz#1828251)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828251 - cpuid-20200427.src is available
https://bugzilla.redhat.com/show_bug.cgi?id=1828251
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.16.7-1.el8 (FEDORA-EPEL-2020-1c906e59bb)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.16.7 Security advisory:
https://tls.mbed.org/tech-
updates/security-advisories/mbedtls-security-advisory-2020-07
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 14 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.16.7-1
- Update to 2.16.7
- Security Advisory 2020-07
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1851867 - CVE-2020-10941 mbedtls: cache attack against RSA key import in SGX
https://bugzilla.redhat.com/show_bug.cgi?id=1851867
--------------------------------------------------------------------------------
================================================================================
nnn-3.3-1.el8 (FEDORA-EPEL-2020-90fe2de3db)
The missing terminal file browser for X
--------------------------------------------------------------------------------
Update Information:
Update to 3.3 (#1856600)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 14 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.3-1
- Update to 3.3 (#1856600)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1856600 - nnn-3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1856600
--------------------------------------------------------------------------------
================================================================================
pdns-4.3.0-5.el8 (FEDORA-EPEL-2020-2a2993896a)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
- Updated file permissions
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 14 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 4.3.0-5
- Updated file permissions
* Sun Jun 14 2020 Adrian Reber <adrian(a)lisas.de> - 4.3.0-4
- Rebuilt for protobuf 3.12
* Thu Jun 4 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 4.3.0-3
- Rebuilt for Boost 1.73
--------------------------------------------------------------------------------
================================================================================
perl-MooseX-Types-DateTime-MoreCoercions-0.15-15.el8 (FEDORA-EPEL-2020-2ed70197e0)
Extensions to MooseX::Types::DateTime
--------------------------------------------------------------------------------
Update Information:
Add new package to EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850776 - Add perl-MooseX-Types-DateTime-MoreCoercions to EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1850776
--------------------------------------------------------------------------------
================================================================================
puppet-6.14.0-1.el8 (FEDORA-EPEL-2020-e13502b7fa)
A network tool for managing many disparate systems
--------------------------------------------------------------------------------
Update Information:
Build of puppet 6.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1748525 - build of puppet for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1748525
--------------------------------------------------------------------------------
================================================================================
python-natlas-libnmap-0.7.1-1.el8 (FEDORA-EPEL-2020-d6cdd624a2)
Python library for nmap tasks, parse and compare/diff scan results
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-readme-renderer-24.0-3.el8 (FEDORA-EPEL-2020-7e8ab683f9)
Safely render long_description/README files in Warehouse
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852793 - Please provide python-readme-renderer for EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1852793
--------------------------------------------------------------------------------
================================================================================
singularity-3.6.0-1.el8 (FEDORA-EPEL-2020-442e619b4a)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream 3.6.0. Remove patch #4679 for el8.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 14 2020 Dave Dykstra <dwd(a)fedoraproject.org> - 3.6.0-1
- Upgrade to upstream 3.6.0. Remove patch #4679 for el8, since
golang-12 is now available for that build machine.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828680 - singularity-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1828680
--------------------------------------------------------------------------------
================================================================================
sipcalc-1.1.6-17.el8 (FEDORA-EPEL-2020-d5e4fcbe28)
An "advanced" console based ip subnet calculator
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1412939 - sipcalc package missing from el7
https://bugzilla.redhat.com/show_bug.cgi?id=1412939
--------------------------------------------------------------------------------
================================================================================
ufdbGuard-1.34.5-2.el8 (FEDORA-EPEL-2020-f50061e899)
A URL filter for squid
--------------------------------------------------------------------------------
Update Information:
Initial build.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426863 - unmaintained? package ufdbguard instead?
https://bugzilla.redhat.com/show_bug.cgi?id=1426863
[ 2 ] Bug #1856464 - Review Request: ufdbGuard - A URL filter for squid
https://bugzilla.redhat.com/show_bug.cgi?id=1856464
--------------------------------------------------------------------------------
================================================================================
wsdd-0.6.1-1.el8 (FEDORA-EPEL-2020-6f70a8210b)
Web Services Dynamic Discovery host daemon
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release. Copied from
https://github.com/christgau/wsdd/releases : Version 0.6.1 - ignore unknown
interface indexes from Netlink message on Linux (caused "error in main loop") -
prevent hosts from not being discovered due to misplaced socket registration at
selector Version 0.6 - new operation 'discovery' operation mode to scan for
other hosts, exposed via minimalistic socket-based API - improved handling of
address changes (prevents termination when system is currently starting up but
no IP address has been assigned) - usage of tentative IPv6 addresses is avoided
on Linux - chroot now works also an machines with international domain/host name
- fixed handling of invalid messages - improved FreeBSD rc.d script - code
heavily refactored
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 13 2020 Sam P <survient(a)fedoraproject.org> - 0.6.1-1
- Updated to upstream latest release
--------------------------------------------------------------------------------