Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
641 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7
383 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7
381 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7
90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7
30 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-76347da426 seamonkey-2.53.2-1.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ec788c8a86 viewvc-1.1.28-1.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c9c5ded31b pure-ftpd-1.0.47-4.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-32b3a77f8c sleuthkit-4.9.0-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cd30b5b1cf chromium-81.0.4044.138-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6847d3b59 perl-Mojolicious-7.94-3.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239 clamav-0.102.3-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ae83e43288 log4net-2.0.8-10.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-567eda5296 exim-4.93-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
coturn-4.5.1.2-1.el7
gjots2-3.1.6-2.el7
json-c12-0.12.1-4.el7
librsync-2.3.0-1.el7
python-regex-2020.5.14-1.el7
rkhunter-1.4.6-2.el7
Details about builds:
================================================================================
coturn-4.5.1.2-1.el7 (FEDORA-EPEL-2020-ebecd0eb91)
TURN/STUN & ICE Server
--------------------------------------------------------------------------------
Update Information:
Coturn 4.5.1.2 ============== - merge regression fix: * Do not display
empty CLI passwd alert if CLI is not enabled - merge PR #359: * Remove
`turn_free_simple()` * Remove `turn_malloc()` * Remove `turn_realloc()`
* Remove `turn_free()` * Remove `turn_calloc()` * Remove `turn_strdup()`
* Remove `SSL_NEW()` and `SSL_FREE()` * Remove pointer debugging machinery
* Remove `ns_bzero()`, `ns_bcopy()`, and `ns_bcmp()` * Remove
`[su]{08,16,32,64}bits` type defines - merge PR #327 * Strip white-spaces
from config file lines end - merge PR #386 * fix the webadmin ip
permission add/delete sql injection - merge PR #390 * fix mongo driver
crash when invalid connection string is used - merge PR #392 enhanced fread
return length check - merge PR #367 disconnect database gracefully - merge
PR #382 * Using `SSL_get_version` method for BoringSSL compatibility *
Now we put in `turn_session_info->tls_method` the real TLS version. Earlier we
put UNKNOWN in this field if it was a TLS protocol that was not defined
supportel TLS protocol during compile time. - merge PR #276 Add systemd
service example - merge PR #284 Add bandwidth usage reporting packet/bandwidth
usage by peers - merge PR #381 Modifying configure to enable compile with
private libraries - merge PR #455 Typo corrected - merge PR #417 Append only
to log files rather to override them - merge PR #442 Updated incorrect string
length check for 'ssh' - merge PR #449 Fix Dockerfile for latest Debian -
http server NULL dereference * Reported (by quarkslab.com, cisco/talos)
* CVE-2020-6061 / TALOS-2020-0984 - http server out of bound read *
Reported (by quarkslab.com, cisco/talos) * CVE-2020-6061 / TALOS-2020-0984
- merge PR #472 STUN input validation - merge PR #398 FIPS - merge PR #478
prod - merge PR #463 fix typos and grammar - update travis config ubuntu/mac
images - merge PR #466 added null check for second char - merge PR #470
compiler warning fixes - merge PR #475 Update `README.docker` - merge PR
#471 Fix a memory leak when an SHATYPE isn't supported - merge PR #488 Fix
typos about `INSTALL` filenames - fix compiler warning comparison between
signed and unsigned integer expressions - fix compiler warning string
truncation - change Diffie Hellman default key length from 1066 to 2066 -
merge PR #522 drop of supplementary group IDs - merge PR #514 Unify spelling
of Coturn - merge PR#506 Rename "prod" config option to "no-software-
attribute" - merge PR #519 fix config extension in `README.docker` - merge
PR #516 change sql data dir in `docker-compose-all.yml` - merge PR #513 remove
trailing spaces from `README`s - merge PR #525 add flags to disable periodic
use of dynamic tables
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.2-1
- Update to 4.5.1.2
--------------------------------------------------------------------------------
================================================================================
gjots2-3.1.6-2.el7 (FEDORA-EPEL-2020-239a92e692)
A hierarchical note jotter - organize your ideas, notes, facts in a tree
--------------------------------------------------------------------------------
Update Information:
unretire package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1823599 - Review Request: gjots2 - A heirarchical note jotter. Organise your ideas, notes, facts in a tree
https://bugzilla.redhat.com/show_bug.cgi?id=1823599
--------------------------------------------------------------------------------
================================================================================
json-c12-0.12.1-4.el7 (FEDORA-EPEL-2020-134c471656)
JSON implementation in C (0.12 compatibility package)
--------------------------------------------------------------------------------
Update Information:
- Fix CVE-2020-12762. - Drop the unneeded `%pretrans` scriptlet.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-4
- Drop the unneeded %pretrans scriptlet
* Fri May 15 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-3
- Fix CVE-2020-12762
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835253 - CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file
https://bugzilla.redhat.com/show_bug.cgi?id=1835253
--------------------------------------------------------------------------------
================================================================================
librsync-2.3.0-1.el7 (FEDORA-EPEL-2020-5bd056a025)
Rsync remote-delta algorithm library
--------------------------------------------------------------------------------
Update Information:
librsync 2.3.0 ============== * Bump minor version from 2.2.1 to 2.3.0 to
reflect additional `rs_sig_args()` and `strong_len=-1` support. * Add public
`rs_sig_args()` function for getting the recommend signature args from the file
size. Added support to rdiff for `--sum-size=-1` to indicate "use minimum size
safe against random block collisions". Added warning output for sum-sizes that
are too small to be safe. Fixed possible rdiff bug affecting popt parsing on
non-little-endian platforms. * Fixed yet more compiler warnings for various
platforms/compilers. * Improved cmake popt handling to find popt dependencies
using PkgConfig. * Tidied internal code and improved tests for `netint.[ch]`,
`tube.c`, and `hashtable.h`. * Improved C99 compatibility. Add `-std=c99
-pedantic` to `CMAKE_C_FLAGS` for gcc and clang. Fix all C99 warnings by making
all code C99 compliant. Tidy all CMake checks, #cmakedefines, and #includes. Fix
64bit support for mdfour checksums. * Usage clarified in rdiff (1) man page.
librsync 2.2.1 ============== * Fix #176 hangs calculating deltas for files
larger than 4GB. librsync 2.2.0 ============== * Bump minor version from
2.1.0 to 2.2.0 to reflect additional RabinKarp rollsum support. * Fix MSVC
builds by adding missing `LIBRSYNC_EXPORT` to variables in `librsync.h`, add
`-DLIBRSYNC_STATIC_DEFINE` to the sumset_test target, and correctly install
`.dll` files in the bin directory. * Add RabinKarp rollsum support and make it
the default. RabinKarp is a much better rolling hash, which reduces the risk of
hash collision corruption and speeds up delta calculations. The rdiff cmd gets a
new `-R (rollsum|rabinkarp)` argument with the default being `rabinkarp`, Use
`-R rollsum` to generate backwards-compatible signatures. * Use single-byte
literal commands for small inserts in deltas. This makes each small insert use 1
less byte in deltas. * Fix multiple warnings (cross-)compiling for windows.
* Change `rs_file_size()` to report -1 instead of 0 for unknown file sizes (not
a regular file). * Add cmake `BUILD_SHARED_LIBS` option for static library
support. `BUILD_SHARED_LIBS` defaults to `ON`, and can be set to `OFF` using
`ccmake .` to build librsync as a static library. * Fix compile errors and add
`.gitignore` entries for MSVS 2019. Fixes `hashtable.h` to be C99 compliant.
librsync 2.1.0 ============== * Bump minor version from 2.0.3 to 2.1.0 to
reflect additions to `librsync.h`. * Fix exporting of private symbols from
librsync library. Add export of useful large file functions `rs_file_open()`,
`rs_file_close()`, and `rs_file_size()` to `librsync.h`. Add export of
`rs_signature_log_stats()` to log signature hashtable hit/miss stats. Improve
rdiff error output. * Updated release process to include stable tarballs. *
Remove redundant and broken `--paranoia` argument from rdiff. * Fix memory
leak of `rs_signature_t->block_sigs` when freeing signatures. * Document delta
file format. * Fix up doxygen comments.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Robert Scheck <robert(a)fedoraproject.org> 2.3.0-1
- Upgrade to 2.3.0
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-regex-2020.5.14-1.el7 (FEDORA-EPEL-2020-4cb6f7796b)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update to 2020.5.14.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.5.14-1
- Update to 2020.5.14.
--------------------------------------------------------------------------------
================================================================================
rkhunter-1.4.6-2.el7 (FEDORA-EPEL-2020-eee1e0c90b)
A host-based tool to scan for rootkits, backdoors and local exploits
--------------------------------------------------------------------------------
Update Information:
Exclude podman /dev/shm files from checks.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Kevin Fenzi <kevin(a)scrye.com> - 1.4.6-2
- Add allow for podman's /dev/shm files (fixes bug #1828698 )
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828698 - Suspicious file types found in /dev: /dev/shm/libpod_lock
https://bugzilla.redhat.com/show_bug.cgi?id=1828698
--------------------------------------------------------------------------------
3 years, 11 months
Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org
The following Fedora EPEL 6 Security updates need testing:
Age URL
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1be509a6b3 viewvc-1.1.28-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
exim-4.92.3-2.el6
json-c12-0.12.1-3.el6
Details about builds:
================================================================================
exim-4.92.3-2.el6 (FEDORA-EPEL-2020-db3d7a1399)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is an update fixing out-of-bounds read in the SPA authenticator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.92.3-2
- Fixed out-of-bounds read in the SPA authenticator
Resolves: CVE-2020-12783
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c
https://bugzilla.redhat.com/show_bug.cgi?id=1836362
--------------------------------------------------------------------------------
================================================================================
json-c12-0.12.1-3.el6 (FEDORA-EPEL-2020-d5bbc97415)
JSON implementation in C (0.12 compatibility package)
--------------------------------------------------------------------------------
Update Information:
- Fix CVE-2020-12762.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-3
- Fix CVE-2020-12762
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835253 - CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file
https://bugzilla.redhat.com/show_bug.cgi?id=1835253
--------------------------------------------------------------------------------
3 years, 11 months
Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org
The following Fedora EPEL 8 Security updates need testing:
Age URL
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ac1fd7a29f seamonkey-2.53.2-1.el8
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aa8ce752c3 pure-ftpd-1.0.49-4.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03d5f14bbe chromium-81.0.4044.138-1.el8
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0d41abf072 perl-Mojolicious-8.42-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-765ceaa306 clamav-0.102.3-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
exim-4.93-3.el8
log4net-2.0.8-10.el8
supervisor-4.2.0-1.el8
Details about builds:
================================================================================
exim-4.93-3.el8 (FEDORA-EPEL-2020-2056b1c4a9)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is an update fixing out-of-bounds read in the SPA authenticator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.93-3
- Fixed out-of-bounds read in the SPA authenticator
Resolves: CVE-2020-12783
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c
https://bugzilla.redhat.com/show_bug.cgi?id=1836362
--------------------------------------------------------------------------------
================================================================================
log4net-2.0.8-10.el8 (FEDORA-EPEL-2020-30aba92944)
A .NET framework for logging
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1285
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10
- apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache log4net
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary configuration files from users
https://bugzilla.redhat.com/show_bug.cgi?id=1835982
--------------------------------------------------------------------------------
================================================================================
supervisor-4.2.0-1.el8 (FEDORA-EPEL-2020-47bcd56bcf)
A System for Allowing the Control of Process State on UNIX
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.2.0 version; packaging cleanups to align with current Fedora
Packaging Guidelines
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Francisco Javier Tsao Sant��n <tsao(a)gpul.org> - 4.2.0-1
- Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13(a)gmail.com>
- Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Sant��n <tsao(a)gpul.org>
--------------------------------------------------------------------------------
3 years, 11 months
EPEL bugzilla / component listing limited
by Leon Fauster
I wanted to request a new EPEL package and noticed that it is not
possible to select the package name (fedora) in the component field
in the bug report form (Product: Fedora EPEL). Is this enforced or is
this a regression? I remember making such requests without problem.
The targeted package in request is: xdg-dbus-proxy
Any ideas?
--
Thanks,
Leon
3 years, 11 months
Re: [CentOS-devel] Handling packages retired in epel but not yet available in CentOS?
by Michel Alexandre Salim
On 5/14/20 4:59 PM, Nico Kadel-Garcia wrote:
> It's an ongoing problem. EPEL's decision to show only the most recent
> versions of RPMs, and to trim old RPMs out, is a destabilizing problem
> and why I make hrdlinked snapshots of EPEL using "rsnapshot" for
> internal access to old packages.
So that's a problem we have with Fedora (e.g. hardware regressions
preventing some hardware from being in the latest kernel, *but* if they
were not updating often enough, the last known-good version might not be
available anymore unless you pull from Koji).
But it does not really apply to the EPEL retirement. If a decision is
made to retire packages for a given branch, it does not matter how many
versions you keep, they will all be retired, right?
Perhaps having additional metadata in dist-git (e.g. "retire from EL 8.2
onwards") would allow maintainers to keep building as normal, we can
publish epel/8-all, epel/8.1, epel/8.2 etc. repos where the first repo
has all packages, and the others have symlinks to 8-all but filtering
out the retired packages?
But that won't work if there are ABI incompatibilities... so yeah,
overall I think the best solution is to just try and get CentOS releases
out of the door sooner rather than later.
Or have a "purgatory" repo where packages retired in EL 8.2 get to live
until, say, a month after CentOS 8.2 is GA? Again, seems like too much work.
In our case, hopefully this is a one-off (it's because we deploy
RPM-with-zstd internally).
--
Michel Alexandre Salim
profile: https://keybase.io/michel_slm
chat via email: https://delta.chat/
GPG key: 96A7 A6ED FB4D 2113 4056 3257 CAF9 AD10 ACB1 BEF2
3 years, 11 months
Re: [CentOS-devel] Handling packages retired in epel but not yet available in CentOS?
by Stephen John Smoogen
On Fri, 15 May 2020 at 09:06, Nico Kadel-Garcia <nkadel(a)gmail.com> wrote:
> On Fri, May 15, 2020 at 8:02 AM Stephen John Smoogen <smooge(a)gmail.com>
> wrote:
> >
> >
> >
> > On Thu, 14 May 2020 at 20:00, Nico Kadel-Garcia <nkadel(a)gmail.com>
> wrote:
> >>
> >> On Thu, May 14, 2020 at 3:32 PM Michel Alexandre Salim
> >> <michel(a)michel-slm.name> wrote:
> >> >
> >> > Hi,
> >> >
> >> > We're working on validating CentOS 8 for some desktop use cases at
> work,
> >> > and noticed that after working fine on a machine that's installed
> >> > several months ago, it's now failing on a freshly-installed machine.
> >>
> >> Do not get me *started* on the ansible version fun and games, or the
> >> confusing state of the python3 for various EPEL, RHEL and CentOS
> >> migrations. The situation is exacerbated when RHEL elects to use a
> >> kind-of-sort-of distinct naming scheme for software previously
> >> published via EPEL.
> >>
> >> It's an ongoing problem. EPEL's decision to show only the most recent
> >> versions of RPMs, and to trim old RPMs out, is a destabilizing problem
> >> and why I make hrdlinked snapshots of EPEL using "rsnapshot" for
> >> internal access to old packages.
> >
> >
> > To be clear here.. the 'decision' is that EPEL is built using the same
> build system that Fedora uses. The Fedora build system does not keep older
> versions of packages in its composes for a space and so EPEL can not keep
> older versions of packages either. We tried several 'hacks' to do this and
> they broke the Fedora side or didn't do what we wanted on the EPEL side
> either.
>
> That is not clear at all. Build systems normally build new versions of
> software and deploy them to some target space. The decision to delete
> older packages is a very distinct one. Review of that workspace and
> expiration of old packages pretty much *must* be a distinct one.
> Deletion of obsolete packages in anticipation of their activation in
> an entirely distinct repository is a very distinct decision.
>
>
I believe Dennis Gilmore and others have tried to explain this multiple
times in the past, but it seems that it just doesn't get through. Here is
my take on it.. which is not as nice as theirs and probably flawed because
I am tired.
The Fedora build system means everything from pkgs, pdc, bodhi, koji,
pungi, and several other tools. The way that this system is built is to
build a complete operating system with the 'compose' being just like what
is in rawhide or a release. Everything is tagged to be in the compose, a
fresh tree is generated, createrepo and other items are built on that tree,
and that tree then replaces the old one on the download servers. Just like
F32 directories and rawhide do not have older copies of packages.. neither
does EPEL. So to the system there are no old rpms to keep around.. [and
trying to keep them seems to end up with a good many mirrors carrying new
packages but old repodata (or vice versa.. new repodata but no new rpms) so
can't be used by yum/dnf]
Of course there could be other solutions that would fix this problem.. but
each one takes time and energy that no one seems to have the time to
volunteer to get done. If you have the time to do so, I am sure people will
welcome it.
--
Stephen J Smoogen.
3 years, 11 months
Re: [CentOS-devel] Handling packages retired in epel but not yet available in CentOS?
by Stephen John Smoogen
On Thu, 14 May 2020 at 20:00, Nico Kadel-Garcia <nkadel(a)gmail.com> wrote:
> On Thu, May 14, 2020 at 3:32 PM Michel Alexandre Salim
> <michel(a)michel-slm.name> wrote:
> >
> > Hi,
> >
> > We're working on validating CentOS 8 for some desktop use cases at work,
> > and noticed that after working fine on a machine that's installed
> > several months ago, it's now failing on a freshly-installed machine.
>
> Do not get me *started* on the ansible version fun and games, or the
> confusing state of the python3 for various EPEL, RHEL and CentOS
> migrations. The situation is exacerbated when RHEL elects to use a
> kind-of-sort-of distinct naming scheme for software previously
> published via EPEL.
>
> It's an ongoing problem. EPEL's decision to show only the most recent
> versions of RPMs, and to trim old RPMs out, is a destabilizing problem
> and why I make hrdlinked snapshots of EPEL using "rsnapshot" for
> internal access to old packages.
>
To be clear here.. the 'decision' is that EPEL is built using the same
build system that Fedora uses. The Fedora build system does not keep older
versions of packages in its composes for a space and so EPEL can not keep
older versions of packages either. We tried several 'hacks' to do this and
they broke the Fedora side or didn't do what we wanted on the EPEL side
either.
At this point it is either someone finding the time to deep dive into pungi
and other tools to make it work for this 2 different case mode or moving
EPEL to a different build system. Both are giant projects which no one has
had the time to do.
--
Stephen J Smoogen.
3 years, 11 months
Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
639 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7
381 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7
379 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7
88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7
28 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12ba1ceddb wordpress-5.1.5-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-76347da426 seamonkey-2.53.2-1.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ec788c8a86 viewvc-1.1.28-1.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c9c5ded31b pure-ftpd-1.0.47-4.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-32b3a77f8c sleuthkit-4.9.0-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cd30b5b1cf chromium-81.0.4044.138-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6847d3b59 perl-Mojolicious-7.94-3.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
clamav-0.102.3-1.el7
python-jsonpickle-0.9.4-3.el7
python-uritemplate-3.0.1-1.el7
python3-rpm-4.11.3-8.el7
uwsgi-2.0.18-8.el7
wireguard-tools-1.0.20200513-1.el7
xrdp-0.9.13-2.el7
Details about builds:
================================================================================
clamav-0.102.3-1.el7 (FEDORA-EPEL-2020-235a51a239)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.102.3 is a bug patch release to address the following issues. -
CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing module in ClamAV
0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper bounds
checking of an unsigned variable results in an out-of-bounds read which causes a
crash. Special thanks to Daehui Chang and Fady Othman for helping identify the
ARJ parsing vulnerability. - CVE-2020-3341: Fix a vulnerability in the PDF
parsing module in ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service
(DoS) condition. Improper size checking of a buffer used to initialize AES
decryption routines results in an out-of-bounds read which may cause a crash.
Bug found by OSS-Fuzz. - Fix "Attempt to allocate 0 bytes" error when parsing
some PDF documents. - Fix a couple of minor memory leaks. ---- - Add upstream
patch to fix "Attempt to allocate 0 bytes" errors while scanning certain
PDFs - Do not log freshclam output to syslog by default - creates double
entries in the journal (bz#1822012) - (#1820069) add try-restart clamav-
freshclam.service on logrotate - Enable prelude support (bz#1829726) - Move
/etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7
libcurl - re-enable on-access scanning (bz#1820395)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.3-1
- Update to 0.102.3 (bz#1834910)
- Security fixes CVE-2020-3341
* Sat May 2 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-9
- Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning
certain PDFs
* Thu Apr 30 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-8
- Enable prelude support (bz#1829726)
* Wed Apr 29 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-7
- Move /etc/clamd.d/scan.conf to clamav-filesystem
- Add patch to build with EL7 libcurl - re-enable on-access scanning
(bz#1820395)
- Add clamonacc.service
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.102.2-6
- Rebuild (json-c)
* Wed Apr 8 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-5
- Do not log freshclam output to syslog by default - creates double entries
in the journal (bz#1822012)
- (#1820069) add try-restart clamav-freshclam.service on logrotate
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1820069 - freshclam's logrotate settings incorrect because daemon is not restarted/nofitifed
https://bugzilla.redhat.com/show_bug.cgi?id=1820069
[ 2 ] Bug #1820395 - Clamav OnAccessScanning disabled
https://bugzilla.redhat.com/show_bug.cgi?id=1820395
[ 3 ] Bug #1822012 - When using the clamav-freshclam.service all log messages are logged twice
https://bugzilla.redhat.com/show_bug.cgi?id=1822012
[ 4 ] Bug #1829726 - ClamAV: Enable Prelude support
https://bugzilla.redhat.com/show_bug.cgi?id=1829726
[ 5 ] Bug #1834910 - clamav-0.102.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1834910
--------------------------------------------------------------------------------
================================================================================
python-jsonpickle-0.9.4-3.el7 (FEDORA-EPEL-2020-bbeead1050)
A module that allows any object to be serialized into JSON
--------------------------------------------------------------------------------
Update Information:
Python 3 subpackage, etc.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 0.9.4-3
- add Python 3 subpackage (rhbz #1828910)
- add source file verification
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828910 - python-jsonpickle: provide Python 3 package for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1828910
--------------------------------------------------------------------------------
================================================================================
python-uritemplate-3.0.1-1.el7 (FEDORA-EPEL-2020-51e576edf1)
Simple python library to deal with URI Templates (RFC 6570)
--------------------------------------------------------------------------------
Update Information:
- add Python 3 subpackage for EPEL 7 (rhbz #1829473) - Update to 3.0.1 - declare
licensing correctly and include actual license files
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 3 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 3.0.1-1
- update to 3.0.1
- declare licensing correctly and include actual license files
- add Python 3 subpackage for EPEL 7 (rhbz #1829473)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829473 - python-uritemplate: please provide a Python 3 version in EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1829473
--------------------------------------------------------------------------------
================================================================================
python3-rpm-4.11.3-8.el7 (FEDORA-EPEL-2020-3ef1e07e82)
Python 3 bindings for apps which will manipulate RPM packages
--------------------------------------------------------------------------------
Update Information:
Sync with rpm-4.11.3-43.el7 (RHEL 7.8).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 4.11.3-8
- Sync with rpm-4.11.3-43.el7 (RHEL 7.8)
- Fix packages getting removed on failed update via dnf (#1710691)
- Fix segfault on fingerprint symlink (#1660232)
- Fix bogus if-condition in find-debuginfo.sh (#1720590)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660232 - segfault when installing package with invalid signature
https://bugzilla.redhat.com/show_bug.cgi?id=1660232
[ 2 ] Bug #1710691 - Package gets removed on failed update via dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1710691
[ 3 ] Bug #1720590 - fix bogus if-condition in find-debuginfo.sh
https://bugzilla.redhat.com/show_bug.cgi?id=1720590
--------------------------------------------------------------------------------
================================================================================
uwsgi-2.0.18-8.el7 (FEDORA-EPEL-2020-fa7b2f5f4a)
Fast, self-healing, application container server
--------------------------------------------------------------------------------
Update Information:
Patching PHP plugin to fix Zend framework
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 12 2020 Jorge A Gallegos <kad(a)blegh.net> - 2.0.18-8
- Patching PHP plugin to fix Zend framework
--------------------------------------------------------------------------------
================================================================================
wireguard-tools-1.0.20200513-1.el7 (FEDORA-EPEL-2020-baf3fdd3d3)
Fast, modern, secure VPN tunnel
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.20200513 - Makefile: remember to install all systemd units -
ipc: openbsd: switch to array ioctl interface ---- Update to 1.0.20200510
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200513-1
- Update to 1.0.20200513
- Makefile: remember to install all systemd units
- ipc: openbsd: switch to array ioctl interface
* Mon May 11 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200510-1
- Update to 1.0.20200510
- ipc: add support for openbsd kernel implementation
- ipc: cleanup openbsd support
- wg-quick: add support for openbsd kernel implementation
- wg-quick: cleanup openbsd support
- wg-quick: support dns search domains
- Makefile: simplify silent cleaning
- ipc: remove extra space
- git: add gitattributes so tarball doesn't have gitignore files
- terminal: specialize color_mode to stdout only
- wg-quick: android: support application whitelist
- systemd: add wg-quick.target
* Wed Apr 15 2020 Leigh Scott <leigh123linux(a)gmail.com> - 1.0.20200319-2
- Add missing config directory
- Remove default buildroot BuildRequires
- Simplify doc install
- Remove commented lines
- Use correct macro for bash-completion
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.13-2.el7 (FEDORA-EPEL-2020-fcf52fc3c8)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Move socket directory to /run/xrdp.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13-2
- Move sockets to /run/xrdp, bug #1834178
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834178 - Existing build not compatible with pam_namespace.so
https://bugzilla.redhat.com/show_bug.cgi?id=1834178
--------------------------------------------------------------------------------
3 years, 11 months
Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org
The following Fedora EPEL 8 Security updates need testing:
Age URL
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ac1fd7a29f seamonkey-2.53.2-1.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aa8ce752c3 pure-ftpd-1.0.49-4.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03d5f14bbe chromium-81.0.4044.138-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0d41abf072 perl-Mojolicious-8.42-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
clamav-0.102.3-1.el8
keepass-2.45-1.el8
libmongocrypt-1.0.4-1.el8
wireguard-tools-1.0.20200513-1.el8
xrdp-0.9.13-2.el8
Details about builds:
================================================================================
clamav-0.102.3-1.el8 (FEDORA-EPEL-2020-765ceaa306)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.102.3 is a bug patch release to address the following issues. -
CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing module in ClamAV
0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper bounds
checking of an unsigned variable results in an out-of-bounds read which causes a
crash. Special thanks to Daehui Chang and Fady Othman for helping identify the
ARJ parsing vulnerability. - CVE-2020-3341: Fix a vulnerability in the PDF
parsing module in ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service
(DoS) condition. Improper size checking of a buffer used to initialize AES
decryption routines results in an out-of-bounds read which may cause a crash.
Bug found by OSS-Fuzz. - Fix "Attempt to allocate 0 bytes" error when parsing
some PDF documents. - Fix a couple of minor memory leaks. ---- - Add upstream
patch to fix "Attempt to allocate 0 bytes" errors while scanning certain
PDFs - Do not log freshclam output to syslog by default - creates double
entries in the journal (bz#1822012) - (#1820069) add try-restart clamav-
freshclam.service on logrotate - Enable prelude support (bz#1829726) - Move
/etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7
libcurl - re-enable on-access scanning (bz#1820395)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.3-1
- Update to 0.102.3 (bz#1834910)
- Security fixes CVE-2020-3341
* Sat May 2 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-9
- Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning
certain PDFs
* Thu Apr 30 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-8
- Enable prelude support (bz#1829726)
* Wed Apr 29 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-7
- Move /etc/clamd.d/scan.conf to clamav-filesystem
- Add patch to build with EL7 libcurl - re-enable on-access scanning
(bz#1820395)
- Add clamonacc.service
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.102.2-6
- Rebuild (json-c)
* Wed Apr 8 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-5
- Do not log freshclam output to syslog by default - creates double entries
in the journal (bz#1822012)
- (#1820069) add try-restart clamav-freshclam.service on logrotate
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1820069 - freshclam's logrotate settings incorrect because daemon is not restarted/nofitifed
https://bugzilla.redhat.com/show_bug.cgi?id=1820069
[ 2 ] Bug #1820395 - Clamav OnAccessScanning disabled
https://bugzilla.redhat.com/show_bug.cgi?id=1820395
[ 3 ] Bug #1822012 - When using the clamav-freshclam.service all log messages are logged twice
https://bugzilla.redhat.com/show_bug.cgi?id=1822012
[ 4 ] Bug #1829726 - ClamAV: Enable Prelude support
https://bugzilla.redhat.com/show_bug.cgi?id=1829726
[ 5 ] Bug #1834910 - clamav-0.102.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1834910
--------------------------------------------------------------------------------
================================================================================
keepass-2.45-1.el8 (FEDORA-EPEL-2020-dcffa3c4bb)
Password manager
--------------------------------------------------------------------------------
Update Information:
keepass for Epel8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1792998 - Add to epel 8: keepass package please.
https://bugzilla.redhat.com/show_bug.cgi?id=1792998
--------------------------------------------------------------------------------
================================================================================
libmongocrypt-1.0.4-1.el8 (FEDORA-EPEL-2020-a604e933f7)
The companion C library for client side encryption in drivers
--------------------------------------------------------------------------------
Update Information:
Upstream version 1.0.4 (no changelog)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Remi Collet <remi(a)remirepo.net> - 1.0.4-1
- update to 1.0.4
--------------------------------------------------------------------------------
================================================================================
wireguard-tools-1.0.20200513-1.el8 (FEDORA-EPEL-2020-e35d01a9f4)
Fast, modern, secure VPN tunnel
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.20200513 - Makefile: remember to install all systemd units -
ipc: openbsd: switch to array ioctl interface ---- Update to 1.0.20200510
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200513-1
- Update to 1.0.20200513
- Makefile: remember to install all systemd units
- ipc: openbsd: switch to array ioctl interface
* Mon May 11 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200510-1
- Update to 1.0.20200510
- ipc: add support for openbsd kernel implementation
- ipc: cleanup openbsd support
- wg-quick: add support for openbsd kernel implementation
- wg-quick: cleanup openbsd support
- wg-quick: support dns search domains
- Makefile: simplify silent cleaning
- ipc: remove extra space
- git: add gitattributes so tarball doesn't have gitignore files
- terminal: specialize color_mode to stdout only
- wg-quick: android: support application whitelist
- systemd: add wg-quick.target
* Wed Apr 15 2020 Leigh Scott <leigh123linux(a)gmail.com> - 1.0.20200319-2
- Add missing config directory
- Remove default buildroot BuildRequires
- Simplify doc install
- Remove commented lines
- Use correct macro for bash-completion
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.13-2.el8 (FEDORA-EPEL-2020-5818afc82e)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Move socket directory to /run/xrdp.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13-2
- Move sockets to /run/xrdp, bug #1834178
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834178 - Existing build not compatible with pam_namespace.so
https://bugzilla.redhat.com/show_bug.cgi?id=1834178
--------------------------------------------------------------------------------
3 years, 11 months
