The following Fedora EPEL 7 Security updates need testing:
Age URL
512
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
254
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
251
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-32603d41ea
GraphicsMagick-1.3.34-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b5ec870c52
mingw-wavpack-5.1.0-9.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-75cc3918d1
rubygem-ox-2.4.11-5.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9ffdf25269
python-django-1.11.27-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12cd208593
gnulib-0-31.20200107git.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fedfind-4.3.0-1.el7
holland-1.1.21-1.el7
jq-1.6-1.el7
scitokens-cpp-0.4.0-1.el7
Details about builds:
================================================================================
fedfind-4.3.0-1.el7 (FEDORA-EPEL-2020-2014fd204b)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of fedfind which enhances its handling of
releases for which metadata is not immediately available in two ways. Firstly,
if metadata for the compose is not found on the mirror server, fedfind will try
and find it in [
PDC](pdc.fedoraproject.org/). This is mainly useful for finding
information on older nightly composes which have been garbage-collected from the
mirrors, but were imported to PDC: you will not be able to find actual image
files for these composes, but you will be able to find information on the images
they contained, which may be useful for various kinds of analysis. Secondly,
for releases which we can find but which do not have metadata on the mirror
system or in PDC - which more or less means the old stable releases in the
mirror system - fedfind can now retrieve image sizes from the `imagelist` files
(which are generated by [quick-fedora-mirror](https://pagure.io/quick-fedora-
mirror) and kept at the top level of the `fedora`, `alt` and `archive` trees on
the mirrors) it uses to discover images. This means that the synthesized
metadata for these releases will now include file sizes. As a concrete example,
if you do `rel = fedfind.release.get_release(1); rel.all_images`, the image
dicts you get will have `size` keys giving you the image sizes. This will not be
the case immediately - we will change the live `imagelist` files only after this
update has gone stable, because older fedfind releases will be broken by the new
format. Both these changes were inspired by a [discussion on the devel@ list](h
ttps://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.or...
ge/AV2EFKWUSAJII7NQBTNR3DZ37O7IVMEO/) about the 'Feedback Pipeline' proposed by
@asamalik.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2020 Adam Williamson <awilliam(a)redhat.com> - 4.3.0-1
- New release 4.3.0: enhance metadata for composes without it
+ Retrieve metadata from PDC for older nightly and candidates
+ Retrieve image sizes from imagelist files for stable releases
--------------------------------------------------------------------------------
================================================================================
holland-1.1.21-1.el7 (FEDORA-EPEL-2020-67958e3d12)
Pluggable Backup Framework
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream 1.1.21
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2020 Pete Travis <immanetize(a)fedoraproject.org> - 1.1.21-1
- Update to latest upstream 1.1.21
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1778941 - holland-1.1.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1778941
--------------------------------------------------------------------------------
================================================================================
jq-1.6-1.el7 (FEDORA-EPEL-2020-ec6f2e57cb)
Command-line JSON processor
--------------------------------------------------------------------------------
Update Information:
Upstream jq 1.6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2020 Ha��kel Gu��mar <hguemar(a)fedoraproject.org> - 1.6-1
- Upstream 1.6 release
- Sync with Fedora spec
--------------------------------------------------------------------------------
================================================================================
scitokens-cpp-0.4.0-1.el7 (FEDORA-EPEL-2020-6756584348)
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Add support for WLCG profile
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 8 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.4.0-1
- Add support for WLCG profile
* Fri Nov 8 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.3.5-1
- Fix EC public key handling
* Wed Sep 18 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.3.4-1
- Fix bugs for support with IAM
* Thu Aug 1 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.3.3-3
- Update the packaging to bring it line with EPEL (fedora) guidelines
* Tue Jul 30 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.3.3-2
- Change the Source URL
- Use make_build in the packaging
* Thu Jul 25 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.3.3-1
- Merge OSG changes
- Use a newer, still supported version of devtoolset
- Fix bug in verifying EC signed tokens #13
* Thu Jul 25 2019 Derek Weitzel <dweitzel(a)unl.edu> - 0.3.2-1
- Update RPM to v0.3.2 of the packaging.
- Fix downloading public key bug #12
* Thu Jun 20 2019 Brian Bockelman <brian.bockelman(a)cern.ch> - 0.3.1-1
- Update RPM to v0.3.1 of the packaging.
* Wed May 29 2019 M��ty��s Selmeci <matyas(a)cs.wisc.edu> - 0.3.0-4
- Use double layer of const for deserialize
(patch from
https://github.com/scitokens/scitokens-cpp/commit/ac0b2f0679488fa91c14ed7...)
* Mon May 13 2019 M��ty��s Selmeci <matyas(a)cs.wisc.edu> - 0.3.0-3
- Add Force-aud-test-in-the-validator.patch from
https://github.com/scitokens/scitokens-cpp/pull/8
* Fri May 3 2019 M��ty��s Selmeci <matyas(a)cs.wisc.edu> - 0.3.0-2
- Fix requirements
* Thu May 2 2019 M��ty��s Selmeci <matyas(a)cs.wisc.edu> - 0.3.0-1
- Update to v0.3.0
- Add dependencies on libcurl-devel, libuuid-devel
* Thu Jan 3 2019 Brian Bockelman <bbockelm(a)cse.unl.edu> - 0.1.0-1
- Initial version of the SciTokens C++ RPM.
--------------------------------------------------------------------------------