[SECURITY] Fedora EPEL 8 Update: libtpms-0.8.4-0.20210624gita594c4692a.el8.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-ac096c00b0
2021-07-17 00:30:58.635426
--------------------------------------------------------------------------------
Name : libtpms
Product : Fedora EPEL 8
Version : 0.8.4
Release : 0.20210624gita594c4692a.el8.1
URL : http://github.com/stefanberger/libtpms
Summary : Library providing Trusted Platform Module (TPM) functionality
Description :
A library providing TPM functionality for VMs. Targeted for integration
into Qemu.
--------------------------------------------------------------------------------
Update Information:
tpm2: Reset too large size indicators in TPM2B to avoid access beyond buffer
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 24 2021 Stefan Berger <stefanb(a)linux.ibm.com> - 0.8.4-0.20210625gita594c4692a
- tpm2: Reset too large size indicators in TPM2B to avoid access beyond buffer
- tpm2: Restore original value in buffer if unmarshalled one was illegal
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1976806 - CVE-2021-3623 libtpms: out-of-bounds access when trying to resume the state of the vTPM
https://bugzilla.redhat.com/show_bug.cgi?id=1976806
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libtpms' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 8 Update: ec2-hibinit-agent-1.0.4-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-d33da662e7
2021-07-17 00:30:58.635415
--------------------------------------------------------------------------------
Name : ec2-hibinit-agent
Product : Fedora EPEL 8
Version : 1.0.4
Release : 1.el8
URL : https://github.com/aws/amazon-ec2-hibinit-agent
Summary : Hibernation setup utility for Amazon EC2
Description :
An EC2 agent that creates a setup for instance hibernation
--------------------------------------------------------------------------------
Update Information:
Update to v1.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 1 2021 David Duncan <davdunc(a)amazon.com> - 1.0.4-1
- Update to v1.0.4
* Sat Jun 5 2021 Python Maint <python-maint(a)redhat.com> - 1.0.3-8
- Rebuilt for Python 3.10
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.0.3-7
- Rebuilt for Python 3.10
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.0.3-6
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.3-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Jan 21 2021 David Duncan <davdunc(a)amazon.com> - 1.0.3-4
- Add BuildRequires: make, FESCo issue: #2500
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1978305 - Update to v1.0.4 for epel8
https://bugzilla.redhat.com/show_bug.cgi?id=1978305
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ec2-hibinit-agent' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
[SECURITY] Fedora EPEL 8 Update: libolm-3.2.4-2.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-d4c3bbff96
2021-07-17 00:30:58.635358
--------------------------------------------------------------------------------
Name : libolm
Product : Fedora EPEL 8
Version : 3.2.4
Release : 2.el8
URL : https://gitlab.matrix.org/matrix-org/olm
Summary : Double Ratchet cryptographic library
Description :
An implementation of the Double Ratchet cryptographic ratchet in C++.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-34813.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 3.2.4-2
- Rebuilt for Python 3.10
* Wed Jun 2 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.2.4-1
- Updated to version 3.2.4.
* Tue May 25 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.2.3-1
- Updated to version 3.2.3.
* Tue Feb 23 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.2.2-1
- Updated to version 3.2.2.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Oct 14 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.2.1-1
- Updated to version 3.2.1.
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.5-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 21 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.1.5-1
- Updated to version 3.1.5.
* Wed Jun 24 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.1.4-4
- Added python3-setuptools to build requirements.
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.1.4-3
- Rebuilt for Python 3.9
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Nov 4 2019 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.1.4-1
- Updated to version 3.1.4.
- Added Python 3 bindings.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1978135 - CVE-2021-34813 libolm: allows a malicious Matrix homeserver to crash a client
https://bugzilla.redhat.com/show_bug.cgi?id=1978135
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libolm' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 7 Update: rpminspect-data-centos-1.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-a087106e96
2021-07-16 01:26:32.012640
--------------------------------------------------------------------------------
Name : rpminspect-data-centos
Product : Fedora EPEL 7
Version : 1.0
Release : 1.el7
URL : https://gitlab.com/redhat/centos-stream/ci-cd/rpminspect-data-centos
Summary : Build deviation compliance tool data files for CentOS
Description :
CentOS and CentOS Stream specific configuration file for rpminspect
and data files used by the inspections provided by librpminspect.
--------------------------------------------------------------------------------
Update Information:
rpminspect-data-centos-1.0
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957928 - Review Request: rpminspect-data-centos - Build deviation compliance tool data files
https://bugzilla.redhat.com/show_bug.cgi?id=1957928
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rpminspect-data-centos' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 7 Update: sshguard-2.4.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-04bf9d0c5b
2021-07-16 01:26:32.012629
--------------------------------------------------------------------------------
Name : sshguard
Product : Fedora EPEL 7
Version : 2.4.2
Release : 1.el7
URL : http://www.sshguard.net
Summary : Protects hosts from brute-force attacks against SSH and other services
Description :
Sshguard protects hosts from brute-force attacks against SSH and other
services. It aggregates system logs and blocks repeat offenders using one of
several firewall backends.
Sshguard can read log messages from standard input or monitor one or more log
files. Log messages are parsed, line-by-line, for recognized patterns. If an
attack, such as several login failures within a few seconds, is detected, the
offending IP is blocked. Offenders are unblocked after a set interval, but can
be semi-permanently banned using the blacklist option.
--------------------------------------------------------------------------------
Update Information:
Update to sshguard 2.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Christopher Engelhard <ce(a)lcts.de> 2.4.2-1
- Update to 2.4.2
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.4.1-6
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Tue Feb 23 2021 Christopher Engelhard <ce(a)lcts.de> 2.4.1-5
- Fix backend path in example spec file
- Remove SysV init related things
- Require a backend
- Fix wrong check for EPEL8
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Sep 11 2020 Christopher Engelhard <ce(a)lcts.de> 2.4.1-3
- Revert patch from previous release as it could cause attacks
to not be blocked.
* Thu Sep 3 2020 Christopher Engelhard <ce(a)lcts.de> 2.4.1-2
- add patch that fixes high load when banning many IPs using firewalld
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939315 - sshguard-2.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1939315
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update sshguard' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 7 Update: clamav-0.103.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-2d9bc56e41
2021-07-16 01:26:32.012572
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 7
Version : 0.103.3
Release : 1.el7
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
https://blog.clamav.net/2021/06/clamav-01033-patch-release.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 22 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.3-1
- Update to 0.103.3 (#1974601)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1974601 - clamav-0.103.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1974601
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 8 Update: mkosi-9-4.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-b8960f6143
2021-07-16 01:15:37.583406
--------------------------------------------------------------------------------
Name : mkosi
Product : Fedora EPEL 8
Version : 9
Release : 4.el8
URL : https://github.com/systemd/mkosi
Summary : Create legacy-free OS images
Description :
A fancy wrapper around "dnf --installroot", "debootstrap" and
"pacstrap", that may generate disk images with a number of bells and
whistles.
Generated images are "legacy-free". This means only GPT disk labels
(and no MBR disk labels) are supported, and only systemd based images
may be generated. Moreover, for bootable images only EFI systems are
supported (not plain MBR/BIOS).
--------------------------------------------------------------------------------
Update Information:
Only gate out Recommends on el7. This fixes the build of mkosi RPM on el8.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mkosi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 8 Update: bgpq3-0.1.35-0.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-384d2492fa
2021-07-16 01:15:37.583395
--------------------------------------------------------------------------------
Name : bgpq3
Product : Fedora EPEL 8
Version : 0.1.35
Release : 0.el8
URL : http://snar.spb.ru/prog/bgpq3/
Summary : Automate BGP filter generation based on routing database information
Description :
You are running BGP in your network and want to automate
filter generation for your routers? Well, with BGPQ3 it's easy.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release v 0.1.35
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bgpq3' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months
Fedora EPEL 8 Update: rpminspect-data-centos-1.0-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-20a66b3776
2021-07-16 01:15:37.583382
--------------------------------------------------------------------------------
Name : rpminspect-data-centos
Product : Fedora EPEL 8
Version : 1.0
Release : 1.el8
URL : https://gitlab.com/redhat/centos-stream/ci-cd/rpminspect-data-centos
Summary : Build deviation compliance tool data files for CentOS
Description :
CentOS and CentOS Stream specific configuration file for rpminspect
and data files used by the inspections provided by librpminspect.
--------------------------------------------------------------------------------
Update Information:
rpminspect-data-centos-1.0
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957928 - Review Request: rpminspect-data-centos - Build deviation compliance tool data files
https://bugzilla.redhat.com/show_bug.cgi?id=1957928
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rpminspect-data-centos' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
2 years, 9 months