epel-devel July 2020

epel-devel@lists.fedoraproject.org

26 participants
93 discussions

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 01 Jul '20

01 Jul '20

The following Fedora EPEL 6 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d2ea82902e python-httplib2-0.18.1-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing putty-0.74-1.el6 Details about builds: ================================================================================ putty-0.74-1.el6 (FEDORA-EPEL-2020-b1a8a3c29a) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2020-14002. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.74-1 - New version - Fixed possible information leak in the algorithm negotiation Resolves: rhbz#1852417 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852415 - CVE-2020-14002 putty: Observable Discrepancy leading to an information leak in the algorithm negotiation https://bugzilla.redhat.com/show_bug.cgi?id=1852415 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 01 Jul '20

01 Jul '20

The following Fedora EPEL 7 Security updates need testing: Age URL 686 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 428 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 425 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 135 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 75 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f33a36b2c4 python-httplib2-0.18.1-3.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c438b9fb89 lynis-3.0.0-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d749373a67 znc-1.8.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-af9b2ac861 alpine-2.23-2.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6ad4894c0c jbig2dec-0.12-5.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0078f6abc1 xpdf-3.04-10.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-af9c6001d1 ngircd-26-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5d348316dd chromium-83.0.4103.116-3.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing coturn-4.5.1.3-1.el7 php-composer-semver3-3.0.0-1.el7 putty-0.74-1.el7 python-ifcfg-0.21-1.el7 xrdp-0.9.13.1-1.el7 Details about builds: ================================================================================ coturn-4.5.1.3-1.el7 (FEDORA-EPEL-2020-afd5c42fd6) TURN/STUN & ICE Server -------------------------------------------------------------------------------- Update Information: Coturn 4.5.1.3 ============== * merge PR #575: Fix rpm packaging * merge PR #576: Tell tar to not include the metadata into release * merge PR #574: Change Docker `turnserver.conf` to latest `turnserver.conf` * merge PR #566: Remove reference to SSLv3 * merge PR #579: Ignore MD5 for BoringSSL * merge PR #577: Build RPM from local folder instead of Git repo * Fix for CVE-2020-4067: STUN response buffer not initialized properly (issue found and reported #583 by Felix D��rre) -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.3-1 - Update to 4.5.1.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852362 - CVE-2020-4067 coturn: STUN response buffer not initialized properly https://bugzilla.redhat.com/show_bug.cgi?id=1852362 -------------------------------------------------------------------------------- ================================================================================ php-composer-semver3-3.0.0-1.el7 (FEDORA-EPEL-2020-d8053bd3a2) Semver library version 3 -------------------------------------------------------------------------------- Update Information: Semver library version 3 that offers utilities, version constraint parsing and validation. Originally written as part of composer/composer, now extracted and made available as a stand-alone library. Autoloader: /usr/share/php/Composer/Semver3/autoload.php -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1843516 - Review Request: php-composer-semver3 - Semver library version 3 https://bugzilla.redhat.com/show_bug.cgi?id=1843516 -------------------------------------------------------------------------------- ================================================================================ putty-0.74-1.el7 (FEDORA-EPEL-2020-2f70f49092) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2020-14002. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.74-1 - New version - Fixed possible information leak in the algorithm negotiation Resolves: rhbz#1852418 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852415 - CVE-2020-14002 putty: Observable Discrepancy leading to an information leak in the algorithm negotiation https://bugzilla.redhat.com/show_bug.cgi?id=1852415 -------------------------------------------------------------------------------- ================================================================================ python-ifcfg-0.21-1.el7 (FEDORA-EPEL-2020-780bf90285) Python cross-platform network interface discovery (ifconfig/ipconfig/ip) -------------------------------------------------------------------------------- Update Information: Update to the latest `python-ifcfg` release -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Scott K Logan <logans(a)cottsay.net> - 0.21-1 - Update to 0.21 (rhbz#1852561) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852561 - python-ifcfg-0.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1852561 -------------------------------------------------------------------------------- ================================================================================ xrdp-0.9.13.1-1.el7 (FEDORA-EPEL-2020-6949cf3502) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information: This is a security fix release that includes fixes for the following local buffer overflow vulnerability. - CVE-2022-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it This update is recommended for all xrdp users. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13.1-1 - Bump up to 0.9.13.1 - CVE-2022-4044 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 01 Jul '20

01 Jul '20

The following Fedora EPEL 8 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-232e4f7411 python-django-2.2.13-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-18fb909316 znc-1.8.1-1.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-3c9503ab68 libmp4v2-2.1.0-0.21.trunkREV507.el8 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f64e687c3f lynis-3.0.0-1.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c047cbdfd0 hostapd-2.9-4.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4d185f6e16 alpine-2.23-2.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-da42cd0f70 ngircd-26-3.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6e0d8564ec chromium-83.0.4103.116-3.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing coturn-4.5.1.3-1.el8 ghc-rpm-macros-1.9.0-1.1.el8 hstr-2.2-2.el8 micro-2.0.6-1.el8 nagios-plugins-2.3.3-4.el8 perl-DateTime-Event-ICal-0.13-14.el8 perl-DateTime-Event-Recurrence-0.19-11.el8 perl-DateTime-Format-ICal-0.09-33.el8 purple-skypeweb-1.6-1.el8 python-asysocks-0.0.5-1.el8 python-collectd_systemd-0.0.1-0.18.20181018git212cb79.el8 python-ifcfg-0.21-1.el8 rubygem-xml-simple-1.1.5-9.el8 svt-av1-0.8.4-1.el8 xrdp-0.9.13.1-1.el8 Details about builds: ================================================================================ coturn-4.5.1.3-1.el8 (FEDORA-EPEL-2020-8e909a0e81) TURN/STUN & ICE Server -------------------------------------------------------------------------------- Update Information: Coturn 4.5.1.3 ============== * merge PR #575: Fix rpm packaging * merge PR #576: Tell tar to not include the metadata into release * merge PR #574: Change Docker `turnserver.conf` to latest `turnserver.conf` * merge PR #566: Remove reference to SSLv3 * merge PR #579: Ignore MD5 for BoringSSL * merge PR #577: Build RPM from local folder instead of Git repo * Fix for CVE-2020-4067: STUN response buffer not initialized properly (issue found and reported #583 by Felix D��rre) -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.3-1 - Update to 4.5.1.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852362 - CVE-2020-4067 coturn: STUN response buffer not initialized properly https://bugzilla.redhat.com/show_bug.cgi?id=1852362 -------------------------------------------------------------------------------- ================================================================================ ghc-rpm-macros-1.9.0-1.1.el8 (FEDORA-EPEL-2020-53f4541338) RPM macros for building Haskell packages for GHC -------------------------------------------------------------------------------- Update Information: GHC RPM macros -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ hstr-2.2-2.el8 (FEDORA-EPEL-2020-de7334c55d) Suggest box like shell history completion -------------------------------------------------------------------------------- Update Information: - Build for epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852083 - please add hstr to epel8 https://bugzilla.redhat.com/show_bug.cgi?id=1852083 -------------------------------------------------------------------------------- ================================================================================ micro-2.0.6-1.el8 (FEDORA-EPEL-2020-1910586f66) A modern and intuitive terminal-based text editor -------------------------------------------------------------------------------- Update Information: Update to 2.0.6 (#1849132) ---- Update to 2.0.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.6-1 - Update to 2.0.6 (#1849132) * Thu Jun 18 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.4-1 - Update to 2.0.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1823042 - micro-2.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1823042 [ 2 ] Bug #1849132 - micro-2.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1849132 -------------------------------------------------------------------------------- ================================================================================ nagios-plugins-2.3.3-4.el8 (FEDORA-EPEL-2020-70bcfe5382) Host/service/network monitoring program plugins for Nagios -------------------------------------------------------------------------------- Update Information: Reintroduce check_ssl_validity now that the dependency is in EL 8.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 19 2003 Martin Jackson <mhjacks(a)swbell.net> - 2.3.3-4 - Reintroduce check_ssl_validity now that the dependency is in EL 8.2 -------------------------------------------------------------------------------- ================================================================================ perl-DateTime-Event-ICal-0.13-14.el8 (FEDORA-EPEL-2020-fa10e53bce) Perl DateTime extension for computing rfc2445 recurrences -------------------------------------------------------------------------------- Update Information: Added to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1851453 - Add perl-DateTime-Format-ICal to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1851453 [ 2 ] Bug #1851457 - Add perl-DateTime-Event-ICal into EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1851457 -------------------------------------------------------------------------------- ================================================================================ perl-DateTime-Event-Recurrence-0.19-11.el8 (FEDORA-EPEL-2020-6e5fac6fdf) DateTime::Set extension for create basic recurrence sets -------------------------------------------------------------------------------- Update Information: Added new package to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1850757 - Add perl-DateTime-Event-Recurrence to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1850757 -------------------------------------------------------------------------------- ================================================================================ perl-DateTime-Format-ICal-0.09-33.el8 (FEDORA-EPEL-2020-fa10e53bce) Parse and format iCal datetime and duration strings -------------------------------------------------------------------------------- Update Information: Added to EPEL 8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1851453 - Add perl-DateTime-Format-ICal to EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1851453 [ 2 ] Bug #1851457 - Add perl-DateTime-Event-ICal into EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=1851457 -------------------------------------------------------------------------------- ================================================================================ purple-skypeweb-1.6-1.el8 (FEDORA-EPEL-2020-9681a87396) Adds support for Skype to Pidgin -------------------------------------------------------------------------------- Update Information: Updated to version 1.6. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.6-1 - Updated to version 1.6. * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-7.20190520git5d29285 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-asysocks-0.0.5-1.el8 (FEDORA-EPEL-2020-4ecff91ec5) Socks5/Socks4 client and server library -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 0.0.5 ---- Update to latest upstream release 0.0.4 -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 29 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.5-1 - Update to latest upstream release 0.0.5 * Mon Jun 22 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.4-1 - Update to latest upstream release 0.0.4 * Mon Jun 15 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.0.3-1 - Update to latest upstream release 0.0.3 * Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.2-2 - Rebuilt for Python 3.9 -------------------------------------------------------------------------------- ================================================================================ python-collectd_systemd-0.0.1-0.18.20181018git212cb79.el8 (FEDORA-EPEL-2020-1d0abd08b2) Collectd plugin to monitor systemd services -------------------------------------------------------------------------------- Update Information: Back port that a starting service is considered an okay service. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Steve Traylen <steve.traylen(a)cern.ch> - 0.0.1-0.18.20181018git212cb79 - Backport bug fix for start state of services. -------------------------------------------------------------------------------- ================================================================================ python-ifcfg-0.21-1.el8 (FEDORA-EPEL-2020-e76ff1c361) Python cross-platform network interface discovery (ifconfig/ipconfig/ip) -------------------------------------------------------------------------------- Update Information: Update to the latest `python-ifcfg` release -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Scott K Logan <logans(a)cottsay.net> - 0.21-1 - Update to 0.21 (rhbz#1852561) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1852561 - python-ifcfg-0.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1852561 -------------------------------------------------------------------------------- ================================================================================ rubygem-xml-simple-1.1.5-9.el8 (FEDORA-EPEL-2020-7e02a0a184) A simple API for XML processing -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1793208 - Request to package rubygem-xml-simple for EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1793208 -------------------------------------------------------------------------------- ================================================================================ svt-av1-0.8.4-1.el8 (FEDORA-EPEL-2020-035710bdf4) Scalable Video Technology for AV1 Encoder -------------------------------------------------------------------------------- Update Information: Update to 0.8.4 (#1851799) ---- Update to 0.8.3 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.4-1 - Update to 0.8.4 (#1851799) * Fri Jun 19 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.3-1 - Update to 0.8.3 * Sun Feb 2 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.1-1 - Update to 0.8.1 * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1825746 - svt-av1-0.8.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825746 [ 2 ] Bug #1851799 - svt-av1-0.8.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1851799 -------------------------------------------------------------------------------- ================================================================================ xrdp-0.9.13.1-1.el8 (FEDORA-EPEL-2020-f1828228be) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information: This is a security fix release that includes fixes for the following local buffer overflow vulnerability. - CVE-2022-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it This update is recommended for all xrdp users. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13.1-1 - Bump up to 0.9.13.1 - CVE-2022-4044 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel July 2020