The following Fedora EPEL 7 Security updates need testing:
Age URL
516
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
257
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
255
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-32603d41ea
GraphicsMagick-1.3.34-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b5ec870c52
mingw-wavpack-5.1.0-9.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-75cc3918d1
rubygem-ox-2.4.11-5.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9ffdf25269
python-django-1.11.27-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12cd208593
gnulib-0-31.20200107git.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-de388d4fd0
chromium-79.0.3945.117-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-35e87bab10
perl-Clipboard-0.21-1.el7.1
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a062204588
rubygem-rack-1.6.12-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
debconf-1.5.73-2.el7
python3-pillow-6.2.2-1.el7
Details about builds:
================================================================================
debconf-1.5.73-2.el7 (FEDORA-EPEL-2020-cc1aa82667)
Debian configuration management system
--------------------------------------------------------------------------------
Update Information:
Update 1.5.73 and fix python3-provides
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 11 2020 S��rgio Basto <sergio(a)serjux.com> - 1.5.73-2
- Fix typo on commit 77cbe078
* Tue Oct 8 2019 S��rgio Basto <sergio(a)serjux.com> - 1.5.73-1
- Update to 1.5.73
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5.69-8
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5.69-7
- Rebuilt for Python 3.8
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.69-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Jun 1 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.5.69-5
- Perl 5.30 rebuild
* Tue May 28 2019 S��rgio Basto <sergio(a)serjux.com>
- Obsoletes debconf-kde and debconf-gnome sub-packages
* Mon May 27 2019 Petr Pisar <ppisar(a)redhat.com> - 1.5.69-4
- Remove an unused build dependency on perl-Qt-devel (bug #1676813)
- Require Perl ABI by all packages that install module into standard paths
--------------------------------------------------------------------------------
================================================================================
python3-pillow-6.2.2-1.el7 (FEDORA-EPEL-2020-87fd65eed3)
Python image processing library
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.2 - See
https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 11 2020 Orion Poplawski <orion(a)nwra.com> - 6.2.2-1
- Update to 6.2.2 (Resolves CVE-2020-5313, CVE-2020-5312, CVE-2020-5311, CVE-2020-5310,
bz#1789542)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789532 - CVE-2020-5313 python-pillow: Buffer overflow in
libImaging/FliDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789532
[ 2 ] Bug #1789540 - CVE-2019-19911 python-pillow: Out of memory issue in
FpxImagePlugin.py
https://bugzilla.redhat.com/show_bug.cgi?id=1789540
[ 3 ] Bug #1789538 - CVE-2020-5310 python-pillow: Integer overflow in
libImaging/TiffDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789538
[ 4 ] Bug #1789533 - CVE-2020-5312 python-pillow: Buffer overflow in
libImaging/PcxDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789533
[ 5 ] Bug #1789535 - CVE-2020-5311 python-pillow: Buffer overflow in
libImaging/SgiRleDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789535
--------------------------------------------------------------------------------