epel-package-announce April 2020

epel-package-announce@lists.fedoraproject.org

1 participants
426 discussions

[SECURITY] Fedora EPEL 8 Update: coturn-4.5.1.1-3.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-913d6d1779 2020-04-08 00:35:24.095972 -------------------------------------------------------------------------------- Name : coturn Product : Fedora EPEL 8 Version : 4.5.1.1 Release : 3.el8 URL : https://github.com/coturn/coturn/ Summary : TURN/STUN & ICE Server Description : The Coturn TURN Server is a VoIP media traffic NAT traversal server and gateway. It can be used as a general-purpose network traffic TURN server/gateway, too. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relaying TURN extension - RFC 6156 - IPv6 extension for TURN - Experimental DTLS support as client protocol. STUN specs: - RFC 3489 - "classic" STUN - RFC 5389 - base "new" STUN specs - RFC 5769 - test vectors for STUN protocol testing - RFC 5780 - NAT behavior discovery support The implementation fully supports the following client-to-TURN-server protocols: - UDP (per RFC 5766) - TCP (per RFC 5766 and RFC 6062) - TLS (per RFC 5766 and RFC 6062); TLS1.0/TLS1.1/TLS1.2 - DTLS (experimental non-standard feature) Supported relay protocols: - UDP (per RFC 5766) - TCP (per RFC 6062) Supported user databases (for user repository, with passwords or keys, if authentication is required): - SQLite - MySQL - PostgreSQL - Redis Redis can also be used for status and statistics storage and notification. Supported TURN authentication mechanisms: - long-term - TURN REST API (a modification of the long-term mechanism, for time-limited secret-based authentication, for WebRTC applications) The load balancing can be implemented with the following tools (either one or a combination of them): - network load-balancer server - DNS-based load balancing - built-in ALTERNATE-SERVER mechanism. -------------------------------------------------------------------------------- Update Information: * An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. * An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 23 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.1-3 - Added upstream patch for CVE-2020-6061 (#1816159) - Backported upstream patch for CVE-2020-6062 (#1816163) * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1816159 - CVE-2020-6061 coturn: specially crafted HTTP POST request can lead to heap overflow which can result in information leak https://bugzilla.redhat.com/show_bug.cgi?id=1816159 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update coturn' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: wfuzz-2.4.5-3.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-3bad294630 2020-04-08 00:35:24.095957 -------------------------------------------------------------------------------- Name : wfuzz Product : Fedora EPEL 8 Version : 2.4.5 Release : 3.el8 URL : http://wfuzz.io Summary : Web fuzzer Description : Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. -------------------------------------------------------------------------------- Update Information: Fix changelog entries -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update wfuzz' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: zork-1.0.2-3.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-7d28ec15d7 2020-04-08 00:35:24.095927 -------------------------------------------------------------------------------- Name : zork Product : Fedora EPEL 8 Version : 1.0.2 Release : 3.el8 URL : https://github.com/devshane/zork Summary : Public Domain original DUNGEON game (Zork I) Description : Public Domain source code to the original DUNGEON game (Zork I). Released to the PD by Infocom. Includes source files, headers, and information. This version of Dungeon was modified from FORTRAN to C. The original was written in DEC FORTRAN, translated from MDL. It was then translated to f77 for UN*X systems, from which it was translated to C. The C translation was done with the help of f2c, the FORTRAN to C translator written by David Gay (AT&T Bell Labs), Stu Feldman (Bellcore), Mark Maimone (Carnegie-Mellon University), and Norm Schryer (AT&T Bell Labs). -------------------------------------------------------------------------------- Update Information: Add zork package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1704522 - Review Request: zork - Public Domain source code to the original DUNGEON game (Zork I) https://bugzilla.redhat.com/show_bug.cgi?id=1704522 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update zork' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: python-ana-0.06-1.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-962c5a23a4 2020-04-08 00:35:24.095943 -------------------------------------------------------------------------------- Name : python-ana Product : Fedora EPEL 8 Version : 0.06 Release : 1.el8 URL : https://pypi.org/project/ana/ Summary : Python module to provide easy distributed data storage Description : ANA is a project to provide easy distributed data storage. It provides every object with a UUID and, when pickled, will first serialize the object's state to a central location and then "pickle" the object into just its UUID. -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-ana' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: openfortivpn-1.13.1-1.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-b35926f6de 2020-04-08 00:35:24.095913 -------------------------------------------------------------------------------- Name : openfortivpn Product : Fedora EPEL 8 Version : 1.13.1 Release : 1.el8 URL : https://github.com/adrienverge/openfortivpn Summary : Client for PPP+SSL VPN tunnel services Description : openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs. -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 23 2020 Adrien Verg�� <adrienverge(a)gmail.com> - 1.13.1-1 - Update to latest upstream version -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update openfortivpn' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: pg-semver-0.21.0-1.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-a9838021cf 2020-04-08 00:35:24.095897 -------------------------------------------------------------------------------- Name : pg-semver Product : Fedora EPEL 8 Version : 0.21.0 Release : 1.el8 URL : https://github.com/theory/pg-semver Summary : A semantic version data type for PostgreSQL Description : PostgreSQL server extension implementing data type called "semver". It's an implementation of the version number format specified by the Semantic Versioning Specification. -------------------------------------------------------------------------------- Update Information: Update to 0.21.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 22 2020 Ernestas Kulik <ekulik(a)redhat.com> - 0.21.0-1 - Update to 0.21.0 - Change %setup to %setup -q -------------------------------------------------------------------------------- References: [ 1 ] Bug #1815859 - pg-semver-0.21.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1815859 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update pg-semver' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: python-geopy-1.21.0-1.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-e38e0105da 2020-04-08 00:35:24.095860 -------------------------------------------------------------------------------- Name : python-geopy Product : Fedora EPEL 8 Version : 1.21.0 Release : 1.el8 URL : https://geopy.readthedocs.io Summary : Python client for several popular geocoding web services Description : geopy makes it easy for Python developers to locate the coordinates of addresses, cities, countries, and landmarks across the globe using third- party geocoders and other data sources. geopy includes geocoder classes for the OpenStreetMap Nominatim, Google Geocoding API (V3), and many other geocoding services. -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 1.21.0 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-geopy' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 8 Update: okular-18.12.2-2.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-2cb1029c5a 2020-04-08 00:35:24.095882 -------------------------------------------------------------------------------- Name : okular Product : Fedora EPEL 8 Version : 18.12.2 Release : 2.el8 URL : https://www.kde.org/applications/graphics/okular/ Summary : A document viewer Description : A document viewer. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2020-9359 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 23 2020 Than Ngo <than(a)redhat.com> - 18.12.2-2 - Fixed bz#1815653, Security fix for CVE-2020-9359 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1815653 - CVE-2020-9359 okular: local binary execution via specially crafted PDF files [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=1815653 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update okular' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: python-moksha-common-1.2.5-14.el8
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-48c4b81b16 2020-04-08 00:35:24.095714 -------------------------------------------------------------------------------- Name : python-moksha-common Product : Fedora EPEL 8 Version : 1.2.5 Release : 14.el8 URL : https://pypi.io/project/moksha.common Summary : Common components for Moksha Description : Common components for Moksha. -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1815838 - please, provide epel8 update https://bugzilla.redhat.com/show_bug.cgi?id=1815838 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-moksha-common' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: ocserv-1.0.0-1.el7
by updates＠fedoraproject.org 07 Apr '20

07 Apr '20

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2020-08a306f9dd 2020-04-07 05:05:02.965755 -------------------------------------------------------------------------------- Name : ocserv Product : Fedora EPEL 7 Version : 1.0.0 Release : 1.el7 URL : http://www.infradead.org/ocserv/ Summary : OpenConnect SSL VPN server Description : OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS to provide the secure VPN service. -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.0.0 release -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 20 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> - 1.0.0-1 - Update to upstream 1.0.0 release -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ocserv' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
...
29
30
31
32
33
34
35
...
43
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce April 2020