--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-913d6d1779
2020-04-08 00:35:24.095972
--------------------------------------------------------------------------------
Name : coturn
Product : Fedora EPEL 8
Version : 4.5.1.1
Release : 3.el8
URL : https://github.com/coturn/coturn/
Summary : TURN/STUN & ICE Server
Description :
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gateway.
It can be used as a general-purpose network traffic TURN server/gateway, too.
This implementation also includes some extra features. Supported RFCs:
TURN specs:
- RFC 5766 - base TURN specs
- RFC 6062 - TCP relaying TURN extension
- RFC 6156 - IPv6 extension for TURN
- Experimental DTLS support as client protocol.
STUN specs:
- RFC 3489 - "classic" STUN
- RFC 5389 - base "new" STUN specs
- RFC 5769 - test vectors for STUN protocol testing
- RFC 5780 - NAT behavior discovery support
The implementation fully supports the following client-to-TURN-server protocols:
- UDP (per RFC 5766)
- TCP (per RFC 5766 and RFC 6062)
- TLS (per RFC 5766 and RFC 6062); TLS1.0/TLS1.1/TLS1.2
- DTLS (experimental non-standard feature)
Supported relay protocols:
- UDP (per RFC 5766)
- TCP (per RFC 6062)
Supported user databases (for user repository, with passwords or keys, if
authentication is required):
- SQLite
- MySQL
- PostgreSQL
- Redis
Redis can also be used for status and statistics storage and notification.
Supported TURN authentication mechanisms:
- long-term
- TURN REST API (a modification of the long-term mechanism, for time-limited
secret-based authentication, for WebRTC applications)
The load balancing can be implemented with the following tools (either one or a
combination of them):
- network load-balancer server
- DNS-based load balancing
- built-in ALTERNATE-SERVER mechanism.
--------------------------------------------------------------------------------
Update Information:
* An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1
web server parses POST requests. A specially crafted HTTP POST request can lead
to information leaks and other misbehavior. * An exploitable denial-of-service
vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
A specially crafted HTTP POST request can lead to server crash and denial of
service.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.1-3
- Added upstream patch for CVE-2020-6061 (#1816159)
- Backported upstream patch for CVE-2020-6062 (#1816163)
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816159 - CVE-2020-6061 coturn: specially crafted HTTP POST request can lead to heap overflow which can result in information leak
https://bugzilla.redhat.com/show_bug.cgi?id=1816159
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update coturn' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-3bad294630
2020-04-08 00:35:24.095957
--------------------------------------------------------------------------------
Name : wfuzz
Product : Fedora EPEL 8
Version : 2.4.5
Release : 3.el8
URL : http://wfuzz.io
Summary : Web fuzzer
Description :
Wfuzz has been created to facilitate the task in web applications assessments
and it is based on a simple concept: it replaces any reference to the FUZZ
keyword by the value of a given payload.
--------------------------------------------------------------------------------
Update Information:
Fix changelog entries
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wfuzz' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-7d28ec15d7
2020-04-08 00:35:24.095927
--------------------------------------------------------------------------------
Name : zork
Product : Fedora EPEL 8
Version : 1.0.2
Release : 3.el8
URL : https://github.com/devshane/zork
Summary : Public Domain original DUNGEON game (Zork I)
Description :
Public Domain source code to the original DUNGEON game (Zork I). Released to
the PD by Infocom. Includes source files, headers, and information.
This version of Dungeon was modified from FORTRAN to C. The original was
written in DEC FORTRAN, translated from MDL. It was then translated to f77 for
UN*X systems, from which it was translated to C. The C translation was done
with the help of f2c, the FORTRAN to C translator written by David Gay (AT&T
Bell Labs), Stu Feldman (Bellcore), Mark Maimone (Carnegie-Mellon University),
and Norm Schryer (AT&T Bell Labs).
--------------------------------------------------------------------------------
Update Information:
Add zork package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704522 - Review Request: zork - Public Domain source code to the original DUNGEON game (Zork I)
https://bugzilla.redhat.com/show_bug.cgi?id=1704522
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zork' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-962c5a23a4
2020-04-08 00:35:24.095943
--------------------------------------------------------------------------------
Name : python-ana
Product : Fedora EPEL 8
Version : 0.06
Release : 1.el8
URL : https://pypi.org/project/ana/
Summary : Python module to provide easy distributed data storage
Description :
ANA is a project to provide easy distributed data storage. It provides every
object with a UUID and, when pickled, will first serialize the object's state
to a central location and then "pickle" the object into just its UUID.
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-ana' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-b35926f6de
2020-04-08 00:35:24.095913
--------------------------------------------------------------------------------
Name : openfortivpn
Product : Fedora EPEL 8
Version : 1.13.1
Release : 1.el8
URL : https://github.com/adrienverge/openfortivpn
Summary : Client for PPP+SSL VPN tunnel services
Description :
openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd
process and operates the communication between the gateway and this process.
It is compatible with Fortinet VPNs.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Adrien Verg�� <adrienverge(a)gmail.com> - 1.13.1-1
- Update to latest upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openfortivpn' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-a9838021cf
2020-04-08 00:35:24.095897
--------------------------------------------------------------------------------
Name : pg-semver
Product : Fedora EPEL 8
Version : 0.21.0
Release : 1.el8
URL : https://github.com/theory/pg-semver
Summary : A semantic version data type for PostgreSQL
Description :
PostgreSQL server extension implementing data type called "semver".
It's an implementation of the version number format specified by the
Semantic Versioning Specification.
--------------------------------------------------------------------------------
Update Information:
Update to 0.21.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 22 2020 Ernestas Kulik <ekulik(a)redhat.com> - 0.21.0-1
- Update to 0.21.0
- Change %setup to
%setup -q
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1815859 - pg-semver-0.21.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1815859
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pg-semver' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-e38e0105da
2020-04-08 00:35:24.095860
--------------------------------------------------------------------------------
Name : python-geopy
Product : Fedora EPEL 8
Version : 1.21.0
Release : 1.el8
URL : https://geopy.readthedocs.io
Summary : Python client for several popular geocoding web services
Description :
geopy makes it easy for Python developers to locate the coordinates of
addresses, cities, countries, and landmarks across the globe using third-
party geocoders and other data sources.
geopy includes geocoder classes for the OpenStreetMap Nominatim, Google
Geocoding API (V3), and many other geocoding services.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 1.21.0
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-geopy' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-2cb1029c5a
2020-04-08 00:35:24.095882
--------------------------------------------------------------------------------
Name : okular
Product : Fedora EPEL 8
Version : 18.12.2
Release : 2.el8
URL : https://www.kde.org/applications/graphics/okular/
Summary : A document viewer
Description :
A document viewer.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-9359
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Than Ngo <than(a)redhat.com> - 18.12.2-2
- Fixed bz#1815653, Security fix for CVE-2020-9359
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1815653 - CVE-2020-9359 okular: local binary execution via specially crafted PDF files [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1815653
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update okular' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-48c4b81b16
2020-04-08 00:35:24.095714
--------------------------------------------------------------------------------
Name : python-moksha-common
Product : Fedora EPEL 8
Version : 1.2.5
Release : 14.el8
URL : https://pypi.io/project/moksha.common
Summary : Common components for Moksha
Description :
Common components for Moksha.
--------------------------------------------------------------------------------
Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1815838 - please, provide epel8 update
https://bugzilla.redhat.com/show_bug.cgi?id=1815838
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-moksha-common' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-08a306f9dd
2020-04-07 05:05:02.965755
--------------------------------------------------------------------------------
Name : ocserv
Product : Fedora EPEL 7
Version : 1.0.0
Release : 1.el7
URL : http://www.infradead.org/ocserv/
Summary : OpenConnect SSL VPN server
Description :
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a
secure, small, fast and configurable VPN server. It implements the OpenConnect
SSL VPN protocol, and has also (currently experimental) compatibility with
clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol
uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS
to provide the secure VPN service.
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.0.0 release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 20 2020 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> - 1.0.0-1
- Update to upstream 1.0.0 release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ocserv' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------