The following Fedora EPEL 8 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-765ceaa306
clamav-0.102.3-1.el8
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-30aba92944
log4net-2.0.8-10.el8
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2056b1c4a9
exim-4.93-3.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5660594875
python-markdown2-2.3.9-1.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c3fca161ee
netdata-1.22.1-3.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-38309f9f6f
transmission-2.94-9.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-06e970da9c
knot-resolver-5.1.1-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
gloox-1.0.23-1.el8
nagios-plugins-2.3.3-3.el8
perl-Email-MIME-1.949-1.el8
perl-Email-MIME-ContentType-1.024-1.el8
python-oletools-0.55-2.el8
rancid-3.11-1.el8
testdisk-7.1-3.el8
Details about builds:
================================================================================
gloox-1.0.23-1.el8 (FEDORA-EPEL-2020-65f631d3ca)
A rock-solid, full-featured Jabber/XMPP client C++ library
--------------------------------------------------------------------------------
Update Information:
Build gloox for EPEL 8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.3.3-3.el8 (FEDORA-EPEL-2020-fda19f40be)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
Obsolete check_ssl_validity. To be reinstated when CentOS 8.2 is released.
BZ#1837397 ---- Remove ssl_validity as perl-Convert-ASN1 has been retired.
BZ#1837397
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 13 2003 Martin Jackson <mhjacks(a)swbell.net> - 2.3.3-3
- Obsolete check_ssl_validity. To be reinstated when CentOS 8.2 is released. BZ#1837397
* Wed Oct 8 2003 Martin Jackson <mhjacks(a)swbell.net> - 2.3.3-2
- Remove ssl_validity as perl-Convert-ASN1 has been retired. BZ#1837397
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1837397 - Can't install "nagios-plugins-all" because
"perl-Convert-ASN1" is missing for RHEL 8 / CentOS 8
https://bugzilla.redhat.com/show_bug.cgi?id=1837397
--------------------------------------------------------------------------------
================================================================================
perl-Email-MIME-1.949-1.el8 (FEDORA-EPEL-2020-383149ca50)
Easy MIME message parsing
--------------------------------------------------------------------------------
Update Information:
This update limits the number of nested MIME parts to 10 (by default), to avoid
a possible memory exhaustion issue with lots of tiny MIME parts.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Paul Howarth <paul(a)city-fan.org> - 1.949-1
- Update to 1.949
- Add $Email::MIME::MAX_DEPTH and refuse to parse deeper than that many
parts; current default: 10
- Fixes to handling of content-type parameters
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835353 - rubygem-mail: Out of memory issue through nested MIME parts
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--------------------------------------------------------------------------------
================================================================================
perl-Email-MIME-ContentType-1.024-1.el8 (FEDORA-EPEL-2020-383149ca50)
Parse a MIME Content-Type Header
--------------------------------------------------------------------------------
Update Information:
This update limits the number of nested MIME parts to 10 (by default), to avoid
a possible memory exhaustion issue with lots of tiny MIME parts.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Paul Howarth <paul(a)city-fan.org> - 1.024-1
- Update to 1.024
- Silence an uninitialized value warning
- Avoid allowing non-Latin digits in numbers
- Add new functions build_content_type() and build_content_disposition()
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.022-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835353 - rubygem-mail: Out of memory issue through nested MIME parts
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--------------------------------------------------------------------------------
================================================================================
python-oletools-0.55-2.el8 (FEDORA-EPEL-2019-3a67d5246c)
Tools to analyze Microsoft OLE2 files
--------------------------------------------------------------------------------
Update Information:
bump to bugfix release 0.55
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.55-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Dec 4 2019 Michal Ambroz <rebus AT_ seznam.cz> - 0.55-1
- bump to bugfix release 0.55
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1779427 - python-oletools-0.55 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1779427
--------------------------------------------------------------------------------
================================================================================
rancid-3.11-1.el8 (FEDORA-EPEL-2020-684bead341)
Really Awesome New Cisco confIg Differ
--------------------------------------------------------------------------------
Update Information:
New package for EL8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1838666 - Build rancid for EL8
https://bugzilla.redhat.com/show_bug.cgi?id=1838666
--------------------------------------------------------------------------------
================================================================================
testdisk-7.1-3.el8 (FEDORA-EPEL-2020-fea6659910)
Tool to check and undelete partition, PhotoRec recovers lost files
--------------------------------------------------------------------------------
Update Information:
libewf-devel is available in rhel8
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Christophe Grenier <grenier(a)cgsecurity.org> - 7.1-3
- libewf-devel is available in rhel8
--------------------------------------------------------------------------------