-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2021-db87395a9d 2021-10-24 22:36:29.919106 --------------------------------------------------------------------------------
Name : fail2ban Product : Fedora EPEL 7 Version : 0.11.2 Release : 3.el7 URL : http://fail2ban.sourceforge.net/ Summary : Daemon to ban hosts that cause multiple authentication errors Description : Fail2Ban scans log files and bans IP addresses that makes too many password failures. It updates firewall rules to reject the IP address. These rules can be defined by the user. Fail2Ban can read multiple log files such as sshd or Apache web server ones.
Fail2Ban is able to reduce the rate of incorrect authentications attempts however it cannot eliminate the risk that weak authentication presents. Configure services to use only two factor or public/private authentication mechanisms if you really want to protect services.
This is a meta-package that will install the default configuration. Other sub-packages are available to install support for other actions and configurations.
-------------------------------------------------------------------------------- Update Information:
Address CVE-2021-32749. -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Richard Shaw hobbes1069@gmail.com - 0.11.2-3 - Address CVE-2021-32749. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1983224 - CVE-2021-32749 fail2ban: Command injection via mail comand [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1983224 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update fail2ban' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------