The following Fedora EPEL 7 Security updates need testing:
Age URL
61
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
56
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d2e0971e9b
uwsgi-2.0.17.1-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e9a8615099
mbedtls-2.7.5-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-52b5b56d0a
seamonkey-2.49.4-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5346e2123a
dpkg-1.18.25-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f5e90bb2b
libmspack-0.7-0.1.alpha.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7b6fa936b1
knot-resolver-2.4.1-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-38987c542e
cgit-1.1-11.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aec074825a
thunderbird-enigmail-2.0.8-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0be0127779
libgit2-0.26.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ipmiutil-3.1.2-3.el7
moodle-3.1.13-2.el7
perl-Parse-EDID-1.0.7-1.el7
zchunk-0.9.7-2.el7
Details about builds:
================================================================================
ipmiutil-3.1.2-3.el7 (FEDORA-EPEL-2018-41ef4d273f)
Easy-to-use IPMI server management utilities
--------------------------------------------------------------------------------
Update Information:
added iseltime.8, reworked util/Makefile.am for race condition
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 20 2018 Andrew Cress <arcress at users.sourceforge.net> 3.1.2-2
- added iseltime.8, reworked util/Makefile.am for race condition
* Fri Jul 20 2018 Andrew Cress <arcress at users.sourceforge.net> 3.1.2-1
- resolve doubly-defined Group for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1599923 - ipmiutil is violating Spec Maintenance and Canonicity
https://bugzilla.redhat.com/show_bug.cgi?id=1599923
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.13-2.el7 (FEDORA-EPEL-2018-33f460bd9c)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Patch cleanup. ---- Multiple CVE fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 10 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.1.13-2
- Patch cleanup.
* Mon Jul 30 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.1.13-1
- 3.1.13.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580990 - please remove moodle-QuickForm.patch
https://bugzilla.redhat.com/show_bug.cgi?id=1580990
[ 2 ] Bug #1599817 - CVE-2018-10891 moodle: Quiz question bank import preview could
execute JavaScript [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1599817
[ 3 ] Bug #1599807 - CVE-2018-10890 moodle: Web service core_course_get_categories may
return invisible categories [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1599807
[ 4 ] Bug #1599816 - CVE-2018-10891 moodle: Quiz question bank import preview could
execute JavaScript [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599816
[ 5 ] Bug #1599806 - CVE-2018-10890 moodle: Web service core_course_get_categories may
return invisible categories [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599806
[ 6 ] Bug #1599800 - CVE-2018-10889 moodle: Privacy data exports include log data
[fedora-27]
https://bugzilla.redhat.com/show_bug.cgi?id=1599800
--------------------------------------------------------------------------------
================================================================================
perl-Parse-EDID-1.0.7-1.el7 (FEDORA-EPEL-2018-32805ecaa4)
Extended display identification data (EDID) parser
--------------------------------------------------------------------------------
Update Information:
upgrade to 1.0.7 various bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 9 2018 Marianne Lombard <jehane(a)fedoraproject.org> - 1.0.7-1
- upgrade to 1.0.7 various bugfixes
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.0.6-12
- Perl 5.28 rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Jun 6 2017 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.0.6-9
- Perl 5.26 rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Mon May 16 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.0.6-7
- Perl 5.24 rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon Jun 8 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.0.6-4
- Perl 5.22 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613213 - Upgrade perl-Parse-EDID to 1.0.7
https://bugzilla.redhat.com/show_bug.cgi?id=1613213
--------------------------------------------------------------------------------
================================================================================
zchunk-0.9.7-2.el7 (FEDORA-EPEL-2018-080e852e16)
Compressed file format that allows easy deltas
--------------------------------------------------------------------------------
Update Information:
New release with contrib script to generate dictionaries
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 10 2018 Jonathan Dieter <jdieter(a)gmail.com> - 0.9.7-2
- Add contrib scripts to docs
- Fix test failures for zstd <= 1.3.4
- Add gen_xml_dictionary to libexecdir with zck_ prefix
--------------------------------------------------------------------------------