[SECURITY] Fedora EPEL 6 Update: exim-4.92.3-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-db3d7a1399
2020-05-31 01:31:39.206339
--------------------------------------------------------------------------------
Name : exim
Product : Fedora EPEL 6
Version : 4.92.3
Release : 2.el6
URL : http://www.exim.org/
Summary : The exim mail transfer agent
Description :
Exim is a message transfer agent (MTA) developed at the University of
Cambridge for use on Unix systems connected to the Internet. It is
freely available under the terms of the GNU General Public Licence. In
style it is similar to Smail 3, but its facilities are more
general. There is a great deal of flexibility in the way mail can be
routed, and there are extensive facilities for checking incoming
mail. Exim can be installed in place of sendmail, although the
configuration of exim is quite different to that of sendmail.
--------------------------------------------------------------------------------
Update Information:
This is an update fixing out-of-bounds read in the SPA authenticator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.92.3-2
- Fixed out-of-bounds read in the SPA authenticator
Resolves: CVE-2020-12783
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c
https://bugzilla.redhat.com/show_bug.cgi?id=1836362
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update exim' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
[SECURITY] Fedora EPEL 7 Update: exim-4.93-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-567eda5296
2020-05-31 00:44:20.123051
--------------------------------------------------------------------------------
Name : exim
Product : Fedora EPEL 7
Version : 4.93
Release : 3.el7
URL : https://www.exim.org/
Summary : The exim mail transfer agent
Description :
Exim is a message transfer agent (MTA) developed at the University of
Cambridge for use on Unix systems connected to the Internet. It is
freely available under the terms of the GNU General Public Licence. In
style it is similar to Smail 3, but its facilities are more
general. There is a great deal of flexibility in the way mail can be
routed, and there are extensive facilities for checking incoming
mail. Exim can be installed in place of sendmail, although the
configuration of exim is quite different to that of sendmail.
--------------------------------------------------------------------------------
Update Information:
This is an update fixing out-of-bounds read in the SPA authenticator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.93-3
- Fixed out-of-bounds read in the SPA authenticator
Resolves: CVE-2020-12783
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c
https://bugzilla.redhat.com/show_bug.cgi?id=1836362
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update exim' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
[SECURITY] Fedora EPEL 7 Update: log4net-2.0.8-10.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-ae83e43288
2020-05-31 00:44:20.122917
--------------------------------------------------------------------------------
Name : log4net
Product : Fedora EPEL 7
Version : 2.0.8
Release : 10.el7
URL : http://logging.apache.org/log4net/
Summary : A .NET framework for logging
Description :
log4net is a tool to help the programmer output log statements to a
variety of output targets. log4net is a port of the excellent log4j
framework to the .NET runtime
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1285
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10
- apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache log4net
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.8-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Aug 21 2019 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-8
- Rebuilt with new mono package so that the Provides is fixed again
- don't require nant for building
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary configuration files from users
https://bugzilla.redhat.com/show_bug.cgi?id=1835982
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update log4net' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
[SECURITY] Fedora EPEL 8 Update: exim-4.93-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-2056b1c4a9
2020-05-31 00:39:15.117016
--------------------------------------------------------------------------------
Name : exim
Product : Fedora EPEL 8
Version : 4.93
Release : 3.el8
URL : https://www.exim.org/
Summary : The exim mail transfer agent
Description :
Exim is a message transfer agent (MTA) developed at the University of
Cambridge for use on Unix systems connected to the Internet. It is
freely available under the terms of the GNU General Public Licence. In
style it is similar to Smail 3, but its facilities are more
general. There is a great deal of flexibility in the way mail can be
routed, and there are extensive facilities for checking incoming
mail. Exim can be installed in place of sendmail, although the
configuration of exim is quite different to that of sendmail.
--------------------------------------------------------------------------------
Update Information:
This is an update fixing out-of-bounds read in the SPA authenticator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.93-3
- Fixed out-of-bounds read in the SPA authenticator
Resolves: CVE-2020-12783
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c
https://bugzilla.redhat.com/show_bug.cgi?id=1836362
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update exim' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
[SECURITY] Fedora EPEL 8 Update: log4net-2.0.8-10.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-30aba92944
2020-05-31 00:39:15.116991
--------------------------------------------------------------------------------
Name : log4net
Product : Fedora EPEL 8
Version : 2.0.8
Release : 10.el8
URL : http://logging.apache.org/log4net/
Summary : A .NET framework for logging
Description :
log4net is a tool to help the programmer output log statements to a
variety of output targets. log4net is a port of the excellent log4j
framework to the .NET runtime
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1285
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10
- apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache log4net
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary configuration files from users
https://bugzilla.redhat.com/show_bug.cgi?id=1835982
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update log4net' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 8 Update: supervisor-4.2.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-47bcd56bcf
2020-05-31 00:39:15.116810
--------------------------------------------------------------------------------
Name : supervisor
Product : Fedora EPEL 8
Version : 4.2.0
Release : 1.el8
URL : http://supervisord.org/
Summary : A System for Allowing the Control of Process State on UNIX
Description :
The supervisor is a client/server system that allows its users to control a
number of processes on UNIX-like operating systems.
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.2.0 version; packaging cleanups to align with current Fedora
Packaging Guidelines
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Francisco Javier Tsao Sant��n <tsao(a)gpul.org> - 4.2.0-1
- Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13(a)gmail.com>
- Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Sant��n <tsao(a)gpul.org>
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update supervisor' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 7 Update: python-jsonpickle-0.9.4-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-bbeead1050
2020-05-30 01:43:51.091969
--------------------------------------------------------------------------------
Name : python-jsonpickle
Product : Fedora EPEL 7
Version : 0.9.4
Release : 3.el7
URL : https://pypi.io/project/jsonpickle/
Summary : A module that allows any object to be serialized into JSON
Description :
This module allows python objects to be serialized to JSON in a similar fashion
to the pickle module.
--------------------------------------------------------------------------------
Update Information:
Python 3 subpackage, etc.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 0.9.4-3
- add Python 3 subpackage (rhbz #1828910)
- add source file verification
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828910 - python-jsonpickle: provide Python 3 package for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1828910
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-jsonpickle' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 7 Update: python-uritemplate-3.0.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-51e576edf1
2020-05-30 01:43:51.091955
--------------------------------------------------------------------------------
Name : python-uritemplate
Product : Fedora EPEL 7
Version : 3.0.1
Release : 1.el7
URL : https://uritemplate.readthedocs.io
Summary : Simple python library to deal with URI Templates (RFC 6570)
Description :
Simple python library to deal with URI Templates (RFC 6570).
--------------------------------------------------------------------------------
Update Information:
- add Python 3 subpackage for EPEL 7 (rhbz #1829473) - Update to 3.0.1 - declare
licensing correctly and include actual license files
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 3 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 3.0.1-1
- update to 3.0.1
- declare licensing correctly and include actual license files
- add Python 3 subpackage for EPEL 7 (rhbz #1829473)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829473 - python-uritemplate: please provide a Python 3 version in EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1829473
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-uritemplate' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 7 Update: python3-rpm-4.11.3-8.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-3ef1e07e82
2020-05-30 01:43:51.091940
--------------------------------------------------------------------------------
Name : python3-rpm
Product : Fedora EPEL 7
Version : 4.11.3
Release : 8.el7
URL : http://www.rpm.org/
Summary : Python 3 bindings for apps which will manipulate RPM packages
Description :
The python3-rpm package contains a module that permits applications
written in the Python programming language to use the interface
supplied by RPM Package Manager libraries.
This package should be installed if you want to develop Python 3
programs that will manipulate RPM packages and databases.
--------------------------------------------------------------------------------
Update Information:
Sync with rpm-4.11.3-43.el7 (RHEL 7.8).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 4.11.3-8
- Sync with rpm-4.11.3-43.el7 (RHEL 7.8)
- Fix packages getting removed on failed update via dnf (#1710691)
- Fix segfault on fingerprint symlink (#1660232)
- Fix bogus if-condition in find-debuginfo.sh (#1720590)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660232 - segfault when installing package with invalid signature
https://bugzilla.redhat.com/show_bug.cgi?id=1660232
[ 2 ] Bug #1710691 - Package gets removed on failed update via dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1710691
[ 3 ] Bug #1720590 - fix bogus if-condition in find-debuginfo.sh
https://bugzilla.redhat.com/show_bug.cgi?id=1720590
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-rpm' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years
Fedora EPEL 7 Update: uwsgi-2.0.18-8.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-fa7b2f5f4a
2020-05-30 01:43:51.091926
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora EPEL 7
Version : 2.0.18
Release : 8.el7
URL : https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
Patching PHP plugin to fix Zend framework
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 12 2020 Jorge A Gallegos <kad(a)blegh.net> - 2.0.18-8
- Patching PHP plugin to fix Zend framework
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update uwsgi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years