The following Fedora EPEL 7 Security updates need testing:
Age URL
442
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
183
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
181
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
118
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897
dosbox-0.74.3-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-468e8243a0
freeimage-3.17.0-4.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-2108222740
proftpd-1.3.5e-6.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-821ac0b641
mingw-libidn2-2.2.0-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-19535181a5
java-latest-openjdk-13.0.1.9-2.rolling.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
eigen3-3.3.4-7.el7
fmf-0.10-1.el7
hostapd-2.9-2.el7
hylafax+-7.0.1-1.el7
libfaketime-0.9.8-5.el7
libx86-1.1-30.el7
python-bloom-0.9.0-1.el7
python-catkin_pkg-0.4.14-1.el7
python-colcon-cmake-0.2.16-1.el7
python-colcon-core-0.4.3-1.el7
python-colcon-devtools-0.2.2-1.el7
python-colcon-package-information-0.3.0-1.el7
python-colcon-powershell-0.3.6-1.el7
python-osrf-pycommon-0.1.9-1.el7
python-rosdep-0.17.1-1.el7
python-rosinstall_generator-0.1.18-1.el7
python-vcstool-0.2.4-1.el7
rssh-2.3.4-15.el7
wxGTK3-3.0.4-1.el7
Details about builds:
================================================================================
eigen3-3.3.4-7.el7 (FEDORA-EPEL-2019-99ec3bf40f)
A lightweight C++ template library for vector and matrix math
--------------------------------------------------------------------------------
Update Information:
Build with cmake3 to export cmake's Eigen3::Eigen target
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Christoph Junghans <junghans(a)votca.org> - 3.3.4-7
- build with cmake3 to export cmake's Eigen3::Eigen target
--------------------------------------------------------------------------------
================================================================================
fmf-0.10-1.el7 (FEDORA-EPEL-2019-a67c26370f)
Flexible Metadata Format
--------------------------------------------------------------------------------
Update Information:
* Mock is not needed for docs, fix missing new line * Provide a public static
method Tree.init() * Support custom conjunction like 'or' in listed() * Update
smoke testset to the latest L2 spec * Fix build conditional default for
englocale * Use raw strings for regular expression patterns * Update the list of
supported Python versions
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Petr ��pl��chal <psplicha(a)redhat.com> - 0.10-1
- Mock is not needed for docs, fix missing new line
- Provide a public static method Tree.init()
* Wed Oct 9 2019 Petr ��pl��chal <psplicha(a)redhat.com> - 0.9-1
- Support custom conjunction like 'or' in listed()
- Update smoke testset to the latest L2 spec
- Fix build conditional default for englocale
- Use raw strings for regular expression patterns
--------------------------------------------------------------------------------
================================================================================
hostapd-2.9-2.el7 (FEDORA-EPEL-2019-0d0c37fcca)
IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
--------------------------------------------------------------------------------
Update Information:
Security fix CVE-2019-16275 (AP mode PMF disconnection protection bypass)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 John W. Linville <linville(a)redhat.com> - 2.9-2
- Fix CVE-2019-16275 (AP mode PMF disconnection protection bypass)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767023 - CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection
bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1767023
--------------------------------------------------------------------------------
================================================================================
hylafax+-7.0.1-1.el7 (FEDORA-EPEL-2019-6b52d0c502)
An enterprise-strength fax server
--------------------------------------------------------------------------------
Update Information:
update to 7.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Lee Howard <faxguy(a)howardsilvan.com> - 7.0.1-1
- update to 7.0.1
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libfaketime-0.9.8-5.el7 (FEDORA-EPEL-2019-8baa73d31b)
Manipulate system time per process for testing purposes
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 29 2019 Paul Wouters <pwouters(a)redhat.com> - 0.9.8-5
- Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime
- Use license tag, remove duplicate README entry, update make test target
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1766749 - libfaketime rfe: please add Provides:faketime
https://bugzilla.redhat.com/show_bug.cgi?id=1766749
--------------------------------------------------------------------------------
================================================================================
libx86-1.1-30.el7 (FEDORA-EPEL-2019-a4d28750a9)
Library for making real-mode x86 calls
--------------------------------------------------------------------------------
Update Information:
Return libx86 to EPEL7
--------------------------------------------------------------------------------
================================================================================
python-bloom-0.9.0-1.el7 (FEDORA-EPEL-2019-1908c97b68)
Bloom is a release automation tool
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.9.0-1
- Update to 0.9.0 (rhbz#1763368)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763368 - python-bloom-0.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763368
--------------------------------------------------------------------------------
================================================================================
python-catkin_pkg-0.4.14-1.el7 (FEDORA-EPEL-2019-a814fdba21)
Library for retrieving information about catkin packages
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.14
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.14-1
- Update to 0.4.14 (rhbz#1762232)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762232 - python-catkin_pkg-0.4.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762232
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.16-1.el7 (FEDORA-EPEL-2019-ab6823fce4)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1
- Update to 0.2.16 (rhbz#1762084)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.4.3-1.el7 (FEDORA-EPEL-2019-ab6823fce4)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1
- Update to 0.4.3 (rhbz#1762548)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
--------------------------------------------------------------------------------
================================================================================
python-colcon-devtools-0.2.2-1.el7 (FEDORA-EPEL-2019-ab6823fce4)
Extension for information about colcon extensibility
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1
- Update to 0.2.2 (rhbz#1763461)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
--------------------------------------------------------------------------------
================================================================================
python-colcon-package-information-0.3.0-1.el7 (FEDORA-EPEL-2019-ab6823fce4)
Extension for colcon to output package information
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1
- Update to 0.3.0 (rhbz#1765938)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
--------------------------------------------------------------------------------
================================================================================
python-colcon-powershell-0.3.6-1.el7 (FEDORA-EPEL-2019-ab6823fce4)
Extension for colcon to provide PowerShell scripts
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1
- Update to 0.3.6 (rhbz#1762532)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
--------------------------------------------------------------------------------
================================================================================
python-osrf-pycommon-0.1.9-1.el7 (FEDORA-EPEL-2019-7ec5586bf4)
Commonly needed Python modules used by software developed at OSRF
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.9-1
- Update to 0.1.9 (rhbz#1762208)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762208 - python-osrf-pycommon-0.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762208
--------------------------------------------------------------------------------
================================================================================
python-rosdep-0.17.1-1.el7 (FEDORA-EPEL-2019-fa23007ae3)
ROS System Dependency Installer
--------------------------------------------------------------------------------
Update Information:
Update to 0.17.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.17.1-1
- Update to 0.17.1 (rhbz#1763367)
- Add a weak pip dependency
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763367 - python-rosdep-0.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763367
--------------------------------------------------------------------------------
================================================================================
python-rosinstall_generator-0.1.18-1.el7 (FEDORA-EPEL-2019-3d77236944)
Generates rosinstall files
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.18
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.18-1
- Update to 0.1.18 (rhbz#1742963)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742963 - python-rosinstall_generator-0.1.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742963
--------------------------------------------------------------------------------
================================================================================
python-vcstool-0.2.4-1.el7 (FEDORA-EPEL-2019-eaba71b48d)
Tool to invoke vcs commands on multiple repositories
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.4-1
- Update to 0.2.4 (rhbz#1764143)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1764143 - python-vcstool-0.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1764143
--------------------------------------------------------------------------------
================================================================================
rssh-2.3.4-15.el7 (FEDORA-EPEL-2019-458a052bdb)
Restricted shell for use with OpenSSH, allowing only scp and/or sftp
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Xavier Bachelot <xavier(a)bachelot.org> - 2.3.4-15
- Clean up specfile.
- Add patches for CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018.
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1672384 - CVE-2019-3464 rssh: rsync bypass resulting in arbitrary code
execution when built with popt [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1672384
[ 2 ] Bug #1672381 - CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code
execution [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1672381
[ 3 ] Bug #1671296 - CVE-2019-1000018 rssh: Possible allowscp bypass resulting in
arbitrary code execution [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1671296
--------------------------------------------------------------------------------
================================================================================
wxGTK3-3.0.4-1.el7 (FEDORA-EPEL-2019-9421c3f52f)
GTK port of the wxWidgets GUI library
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release 3.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott Talbert <swt(a)techie.net> - 3.0.4-1
- Update to new upstream release 3.0.4
--------------------------------------------------------------------------------