The following Fedora EPEL 7 Security updates need testing:
Age URL
160
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
111
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
94
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
66
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896
myrepos-1.20180726-1.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bdb21ebc3f
drupal7-7.60-2.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9091f95cd5
zchunk-0.9.14-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dea9ade8c1
icecast-2.4.4-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cbfa290941
mkvtoolnix-28.2.0-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be918c58c6
SDL2_image-2.0.4-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-df2d5af2fe
mingw-SDL2-2.0.9-1.el7 mingw-SDL2_mixer-2.0.4-1.el7 mingw-SDL2_image-2.0.4-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-32e0cee0bb
perl-Mojolicious-7.94-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9051b49e75
suricata-4.0.6-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc29932f12
pdns-4.0.6-2.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9270bbaec
pdns-recursor-4.1.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
SDL2_mixer-2.0.4-2.el7
ansible-2.7.2-1.el7
distribution-gpg-keys-1.26-1.el7
globus-common-18.0-2.el7
globus-ftp-client-9.1-2.el7
globus-gass-copy-10.3-2.el7
globus-gram-job-manager-15.1-2.el7
globus-gram-job-manager-scripts-7.1-1.el7
globus-gridftp-server-13.9-1.el7
globus-gsi-cert-utils-10.1-1.el7
globus-gssapi-gsi-14.9-1.el7
mock-core-configs-29.4-1.el7
php-PHPMailer-5.2.27-1.el7
python-asn1crypto-0.24.0-6.el7
python-django-1.11.13-2.el7
python-modestmaps-1.4.7-1.el7
python-neo4j-driver-1.6.2-1.el7
python-neomodel-3.3.0-1.el7
python-paramiko-2.1.1-0.9.el7
Details about builds:
================================================================================
SDL2_mixer-2.0.4-2.el7 (FEDORA-EPEL-2018-30276562ec)
Simple DirectMedia Layer - Sample Mixer Library
--------------------------------------------------------------------------------
Update Information:
Enable opus support ---- Update to 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-2
- Enable opus support (#1650399)
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 31 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-3
- Switch to %ldconfig_scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1650399 - SDL2_mixer 2.0.4 build-requires opusfile-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1650399
--------------------------------------------------------------------------------
================================================================================
ansible-2.7.2-1.el7 (FEDORA-EPEL-2018-1431f70fb4)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to ansible 2.7.2, a bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 15 2018 Kevin Fenzi <kevin(a)scrye.com> - 2.7.2-1
- Update to 2.7.2.
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.26-1.el7 (FEDORA-EPEL-2018-b5a73fcca9)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
add RHEL8 release gpg key add virtual module to rhelbeta-8 config ---- mock-
core-configs: - add rhelbeta-8-* configs - move EOLed configs to /etc/mock/eol
directory - Add source repos to all fedora configs (sfowler(a)redhat.com) - add
epel-7-ppc64.cfg distribution-gpg-keys: - update copr keys - add RPM-GPG-KEY-
redhat8-beta key - add RPM-GPG-KEY-redhat-auxiliary2 ---- * updated Copr keys
* added Microsoft key
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.26-1
- add RPM-GPG-KEY-redhat8-release
* Thu Nov 15 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.25-1
- update copr keys
- add RPM-GPG-KEY-redhat8-beta key
- add RPM-GPG-KEY-redhat-auxiliary2
* Thu Nov 8 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.24-1
- update Copr keys
- add Microsoft key
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637059 - epel-7-ppc64 config is missing despite ppc64 being a supported EL7
target
https://bugzilla.redhat.com/show_bug.cgi?id=1637059
[ 2 ] Bug #1615178 - distribution-gpg-keys-1.22-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1615178
--------------------------------------------------------------------------------
================================================================================
globus-common-18.0-2.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - Common Library
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 18.0-2
- Bump GCT release version to 6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-ftp-client-9.1-2.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - GridFTP Client Library
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 9.1-2
- Bump GCT release version to 6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-gass-copy-10.3-2.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - Globus Gass Copy
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 10.3-2
- Bump GCT release version to 6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-15.1-2.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - GRAM Jobmanager
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 15.1-2
- Bump GCT release version to 6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-scripts-7.1-1.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - GRAM Job ManagerScripts
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 7.1-1
- Architecture independent package should not depend on libtool
- Drop BR on gcc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-13.9-1.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 13.9-1
- Fix data_node restrict path
- Bump GCT release version to 6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-gsi-cert-utils-10.1-1.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - Globus GSI Cert Utils Library
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 10.1-1
- Fix broken subject in grid-cert-request
- Bump GCT release version to 6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-14.9-1.el7 (FEDORA-EPEL-2018-4927d5be91)
Grid Community Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus-
gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job-
manager-scripts-7.1-1 * Architecture independent package should not depend on
libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict
path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix
broken subject in grid-cert-request * Bump GCT release version to 6.2 globus-
gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi-
gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 14.9-1
- Allow TLS 1.0/1.1
- Fix leaks
- Drop patch globus-gssapi-gsi-allow-tls-1.0-1.1.patch accepted upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject
https://bugzilla.redhat.com/show_bug.cgi?id=1640939
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-29.4-1.el7 (FEDORA-EPEL-2018-b5a73fcca9)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
add RHEL8 release gpg key add virtual module to rhelbeta-8 config ---- mock-
core-configs: - add rhelbeta-8-* configs - move EOLed configs to /etc/mock/eol
directory - Add source repos to all fedora configs (sfowler(a)redhat.com) - add
epel-7-ppc64.cfg distribution-gpg-keys: - update copr keys - add RPM-GPG-KEY-
redhat8-beta key - add RPM-GPG-KEY-redhat-auxiliary2 ---- * updated Copr keys
* added Microsoft key
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Miroslav Such�� <msuchy(a)redhat.com> 29.4-1
- use correct gpg keys for rhelbeta-8
- add virtual platform module
* Thu Nov 15 2018 Miroslav Such�� <msuchy(a)redhat.com> 29.3-1
- add rhelbeta-8-* configs
- move EOLed configs to /etc/mock/eol directory
- Add source repos to all fedora configs (sfowler(a)redhat.com)
- add epel-7-ppc64.cfg
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637059 - epel-7-ppc64 config is missing despite ppc64 being a supported EL7
target
https://bugzilla.redhat.com/show_bug.cgi?id=1637059
[ 2 ] Bug #1615178 - distribution-gpg-keys-1.22-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1615178
--------------------------------------------------------------------------------
================================================================================
php-PHPMailer-5.2.27-1.el7 (FEDORA-EPEL-2018-a09ace87bb)
PHP email transport class with a lot of features
--------------------------------------------------------------------------------
Update Information:
**Version 5.2.27** * SECURITY Fix potential object injection vulnerability.
**CVE-2018-19296**. Reported by Sehun Oh of cyberone.kr. Note that the 5.2
branch is deprecated and will not receive security updates after 31st December
2018.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Remi Collet <remi(a)remirepo.net> - 5.2.27-1
- update to 5.2.27
--------------------------------------------------------------------------------
================================================================================
python-asn1crypto-0.24.0-6.el7 (FEDORA-EPEL-2018-cf0fb9e84b)
Fast Python ASN.1 parser and serializer
--------------------------------------------------------------------------------
Update Information:
Fast ASN.1 parser and serializer with definitions for private keys, public keys,
certificates, CRL, OCSP, CMS, PKCS#3, PKCS#7, PKCS#8, PKCS#12, PKCS#5, X.509 and
TSP.
--------------------------------------------------------------------------------
================================================================================
python-django-1.11.13-2.el7 (FEDORA-EPEL-2018-b4d4e0a3eb)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
rebase EPEL7 package to Django-1.11.x
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 15 2018 Matthias Runge <mrunge(a)redhat.com> - 1.11.13-2
- rebase EPEL7 package to Django-1.11.x
* Mon May 21 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.11.13-2
- Make python2-django require python-django-bash-completion (as intended)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432365 - Please update python-django in EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=1432365
[ 2 ] Bug #1611050 - CVE-2018-14574 python-django: django: Open redirect possibility in
CommonMiddleware [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1611050
[ 3 ] Bug #1552179 - CVE-2018-7536 CVE-2018-7537 python-django: various flaws [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552179
[ 4 ] Bug #1488634 - CVE-2017-7233 python-django: Open redirect and possible XSS attack
via user-supplied numeric redirect URLs [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1488634
[ 5 ] Bug #1357704 - CVE-2016-6186 python-django: django: XSS in admin's add/change
related popup [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1357704
--------------------------------------------------------------------------------
================================================================================
python-modestmaps-1.4.7-1.el7 (FEDORA-EPEL-2018-b269b0f466)
Modest Maps python port
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.7 and add a python3 package to Fedora
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Scott K Logan <logans(a)cottsay.net> - 1.4.7-1
- Update to 1.4.7
- Add python3 package
- Switch to Github upstream
--------------------------------------------------------------------------------
================================================================================
python-neo4j-driver-1.6.2-1.el7 (FEDORA-EPEL-2018-675e9345ea)
The official Neo4j Python driver
--------------------------------------------------------------------------------
Update Information:
Update to v1.6.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 mprahl <mprahl(a)redhat.com> - 1.6.2-1
- new version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.0-3
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
python-neomodel-3.3.0-1.el7 (FEDORA-EPEL-2018-72214376e3)
A Python OGM for Neo4j
--------------------------------------------------------------------------------
Update Information:
Update to v3.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 mprahl <mprahl(a)redhat.com> - 3.3.0-1
- new version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.8-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 2 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.2.8-6
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
python-paramiko-2.1.1-0.9.el7 (FEDORA-EPEL-2018-0e73364530)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
Update limited arch + python3 package to RHEL 7.6 version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2018 Orion Poplawski <orion(a)nwra.com> - 2.1.1-0.9
- Update limited-arch support package for EPEL (bug #1637265)
* Thu Oct 18 2018 Jake Hunsaker <jhunsake(a)redhat.com> - 2.1.1-9
- Fix a security flaw (CVE-2018-1000805) in Paramiko's server
mode (does not effect client mode).
Backported from 2.1.6
Resolves rhbz#1637366
* Fri Jul 20 2018 Jake Hunsaker <jhunsake(a)redhat.com> - 2.1.1-5
- Rebuild for move from Extras to Base for 7.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637265 - CVE-2018-1000805 python-paramiko: Authentication bypass in
auth_handler.py [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1637265
--------------------------------------------------------------------------------