The following Fedora EPEL 7 Security updates need testing:
Age URL
572
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
313
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
311
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b57b954fde
openfortivpn-1.12.0-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1f5dbc1cd7
cacti-1.2.10-1.el7 cacti-spine-1.2.10-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-471d8a7abd
sympa-6.2.54-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b3684de763
mbedtls-2.7.14-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4fdca9429c
seamonkey-2.53.1-2.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fbd804208a
monit-5.26.0-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9d0b57e90e
ansible-2.9.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cmake3-3.14.7-1.el7
sourcextractor++-0.8-1.el7
weechat-2.7.1-1.el7
Details about builds:
================================================================================
cmake3-3.14.7-1.el7 (FEDORA-EPEL-2020-e819495080)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
Bugfix release 3.14.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 Antonio Trande <sagitter(a)fedoraproject.org> - 3.14.7-1
- Bugfix release 3.14.7
--------------------------------------------------------------------------------
================================================================================
sourcextractor++-0.8-1.el7 (FEDORA-EPEL-2020-58450ed489)
A program that extracts a catalog of sources from astronomical images
--------------------------------------------------------------------------------
Update Information:
New RPM
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 31 2020 Alejandro Alvarez Ayllon <a.alvarezayllon(a)gmail.com> 0.8-1
- New RPM
--------------------------------------------------------------------------------
================================================================================
weechat-2.7.1-1.el7 (FEDORA-EPEL-2020-b8f44a854a)
Portable, fast, light and extensible IRC client
--------------------------------------------------------------------------------
Update Information:
New version, fixes a lot of bugs (some of them security). In the same update,
fixed up epel7 build to latest version as well.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 20 2020 Joe Walker <grumpey0(a)gmail.com> - 2.7.1-1
- Update to Version 2.7.1
(
https://weechat.org/files/releasenotes/ReleaseNotes-2.7.1.html)
(
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8955)
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Dec 9 2019 Nathan Morell <fedoraproject.org(a)fap.me> - 2.7-1
- Update to 2.7
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.4-4
- Rebuilt for Python 3.8
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 30 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.4-2
- Perl 5.30 rebuild
* Sun Apr 14 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.4-1
- Update to 2.4
- Tweak FindPython to work with Fedora python3
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 21 2019 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.3-2
- F-30: rebuild against ruby26
* Wed Nov 28 2018 Paul Komkoff <i(a)stingr.net> - 2.3-1
- Update to 2.3
- Enable python plugin.
* Tue Sep 18 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> - 2.2-2
- Switch to use python3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718050 - weechat-2.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1718050
[ 2 ] Bug #1444882 - CVE-2017-8073 weechat: Buffer overflow in the
irc_ctcp_dcc_filename_without_quotes function [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1444882
[ 3 ] Bug #1803066 - CVE-2020-8955 weechat: denial of service in irc_mode_channel_update
in plugins/irc/irc-mode.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1803066
[ 4 ] Bug #1803065 - CVE-2020-8955 weechat: denial of service in irc_mode_channel_update
in plugins/irc/irc-mode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1803065
[ 5 ] Bug #1648007 - Weechat 2.3 is currently available
https://bugzilla.redhat.com/show_bug.cgi?id=1648007
[ 6 ] Bug #1793597 - weechat is missing sources
https://bugzilla.redhat.com/show_bug.cgi?id=1793597
[ 7 ] Bug #1677974 - weechat-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1677974
[ 8 ] Bug #1500078 - weechat: Uninitialized buffer used in logger plugin [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1500078
--------------------------------------------------------------------------------