The following Fedora EPEL 7 Security updates need testing:
Age URL
550
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
292
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
289
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-453d58e60f
radare2-4.2.1-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-062fed623d
php-horde-Horde-Data-2.1.5-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-bf56589e5c
mbedtls-2.7.13-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-bee5eeedf0
cacti-1.2.9-1.el7 cacti-spine-1.2.9-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-88a247cda8
python3-virtualenv-15.1.0-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fmf-0.11-1.el7
hiredis-0.12.1-2.el7
Details about builds:
================================================================================
fmf-0.11-1.el7 (FEDORA-EPEL-2020-faf2a2f9e0)
Flexible Metadata Format
--------------------------------------------------------------------------------
Update Information:
Tree.node, fmf identifier and minor improvements
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 14 2020 Petr ��pl��chal <psplicha(a)redhat.com> - 0.11-1
- Add git to BuildRequires (now required by tests)
- Use coveralls to report coverage results
- Adjust Tree.node() implementation, extend tests
- Get metadata for unique id [fix #67]
- Use the fedora-all target in packit config (#72)
- Define the full fmf identifier [fix #52]
- A minor cleanup of the concept documentation
- Always ignore special system directories
- Filesystem root and inaccessible dirs [fix #70]
- Rename the 'testsets' directory to 'plans'
--------------------------------------------------------------------------------
================================================================================
hiredis-0.12.1-2.el7 (FEDORA-EPEL-2020-fb7ac4aee2)
Minimalistic C client library for Redis
--------------------------------------------------------------------------------
Update Information:
Update for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 15 2020 Kevin Fenzi <kevin(a)scrye.com> - 0.12.1-2
- Apply patch for CVE-2020-7105. Fixes bug #1796474
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1796476 - CVE-2020-7105 hiredis: NULL pointer dereference in async.c and
dict.c in libhiredis.a [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1796476
--------------------------------------------------------------------------------