The following Fedora EPEL 7 Security updates need testing:
Age URL
417
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
158
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
156
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
93
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897
dosbox-0.74.3-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7410520bec
blis-0.6.0-4.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-81572ab529
chromium-77.0.3865.90-2.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-1c8bc2bf57
mosquitto-1.6.7-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-600b4ad49c
yara-3.10.0-3.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-8b6b5df244
mbedtls-2.7.12-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-180a83b5fc
suricata-4.1.5-3.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-6ca75fc39a
nginx-1.16.1-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b69e8f60ca
libapreq2-2.13-13.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-40a9ceccd5
radare2-3.9.0-1.el7.1
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-3bcbd2f338
opendmarc-1.3.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
clamav-unofficial-sigs-6.1.1-2.el7
etckeeper-1.18.10-4.el7
ga-5.6.5-6.el7
golang-1.13.1-1.el7
gromacs-2018.8-1.el7
ipmctl-01.00.00.3469-2.el7
mirrormanager2-0.11-1.el7
pspg-2.1.3-1.el7
python-colcon-bash-0.4.1-1.el7
python-colcon-cmake-0.2.14-1.el7
python-colcon-output-0.2.6-1.el7
python-colcon-test-result-0.3.8-1.el7
python-rosdep-0.16.1-2.el7
python3-numpy-1.12.1-2.el7
python34-3.4.10-4.el7
Details about builds:
================================================================================
clamav-unofficial-sigs-6.1.1-2.el7 (FEDORA-EPEL-2019-32bc1492bf)
Scripts to download unofficial clamav signatures
--------------------------------------------------------------------------------
Update Information:
Fix bash path ---- Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2019 Didier Fabert <didier.fabert(a)gmail.com> - 6.1.1-2
- Fix bash path
- Fix shebang
* Sat Sep 21 2019 Didier Fabert <didier.fabert(a)gmail.com> - 6.1.1-1
- Update from upstream
- Add cron, logrotate and man from fixed files (upstream way is too difficult to
maintain)
- Fix buggy date in changelog
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752990 - Request to update: clamav-unofficial-sigs to v6.1.1
https://bugzilla.redhat.com/show_bug.cgi?id=1752990
--------------------------------------------------------------------------------
================================================================================
etckeeper-1.18.10-4.el7 (FEDORA-EPEL-2019-4db5587df3)
Store /etc in a SCM system (git, mercurial, bzr or darcs)
--------------------------------------------------------------------------------
Update Information:
etckeeper 1.18.10 released with these changes * Avoid post-install failing when
ps is from busybox or another version not supporting procps-specific options. *
Use ps --no-headers rather than problematic -h option. etckeeper 1.18.9
released with these changes * When run during a package installation, include
in the commit message the command line that caused etckeeper to run. Thanks,
Laszlo Gombos
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.18.10-4
- Package fixes for CentOS8.
- Build dnf plugin on CentOS7.
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.18.10-3
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Thu Oct 3 2019 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.18.10-2
- There is currently no bzr for rhel8.
* Thu Oct 3 2019 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.18.10-1
- Update to 1.18.10.
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.18.8-4
- Rebuilt for Python 3.8
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.18.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.18.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ga-5.6.5-6.el7 (FEDORA-EPEL-2019-bc3fbbe073)
Global Arrays Toolkit
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.5-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Feb 14 2019 Orion Poplawski <orion(a)nwra.com> - 5.6.5-5
- Rebuild for openmpi 3.1.3
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Tue Aug 7 2018 Edoardo Apra <edoardo.apra(a)gmail.com> - 5.6.5-3
- fortran integer casting in ga_diag. Fixes #1613089
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-1.13.1-1.el7 (FEDORA-EPEL-2019-301b621e07)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to 1.13.1 * Security fix for CVE-2019-16276
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 5 2019 Jakub ��ajka <jcajka(a)redhat.com> - 1.13.1-1
- Rebase to go1.13.1
- Fix for CVE-2019-16276
- Resolves: BZ#1755971
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1755969 - CVE-2019-16276 golang: HTTP/1.1 headers with a space before the
colon leads to filter bypass or request smuggling
https://bugzilla.redhat.com/show_bug.cgi?id=1755969
--------------------------------------------------------------------------------
================================================================================
gromacs-2018.8-1.el7 (FEDORA-EPEL-2019-89b7faa144)
Fast, Free and Flexible Molecular Dynamics
--------------------------------------------------------------------------------
Update Information:
Version bump to 2018.8
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Christoph Junghans <junghans(a)votca.org> - 2018.8-1
- Version bump to 2018.8
--------------------------------------------------------------------------------
================================================================================
ipmctl-01.00.00.3469-2.el7 (FEDORA-EPEL-2019-935fb4c2d1)
Utility for managing Intel Optane DC persistent memory modules
--------------------------------------------------------------------------------
Update Information:
Initial epel7 release
--------------------------------------------------------------------------------
================================================================================
mirrormanager2-0.11-1.el7 (FEDORA-EPEL-2019-893a33d272)
Mirror management application
--------------------------------------------------------------------------------
Update Information:
Update to 0.11 ---- Update to 0.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Adrian Reber <adrian(a)lisas.de> - 0.11-1
- Update to 0.11
- Offer protobuf output in refresh mirrorlist cache script
* Thu Oct 3 2019 Adrian Reber <adrian(a)lisas.de> - 0.10-1
- Update to 0.10
- crawler: correctly auto-disable mirrors
https://github.com/fedora-infra/mirrormanager2/pull/265
- Use protobuf instead of pickle for backend - mirrorlist data exchange
https://github.com/fedora-infra/mirrormanager2/pull/266
- Fix report_mirror with python3
https://github.com/fedora-infra/mirrormanager2/pull/269
- repomap: add playground support
https://github.com/fedora-infra/mirrormanager2/pull/270
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.0-6
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.0-5
- Rebuilt for Python 3.8
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue May 7 2019 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 0.9.0-3
- Patch requirements.txt to avoid an autogenerated dependency on
python3.7dist(python-openid) which cannot be satisfied. Fixes
https://bugzilla.redhat.com/show_bug.cgi?id=1707550
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Tue Jan 15 2019 Adrian Reber <adrian(a)lisas.de> - 0.9.0-1
- Update to 0.9.0
- crawler: Correctly calculate the remaining time
https://github.com/fedora-infra/mirrormanager2/pull/244
- repomap: more modular repository detection logic
https://github.com/fedora-infra/mirrormanager2/pull/243
- crawler: correctly handle keep-alive for HTTPS
https://github.com/fedora-infra/mirrormanager2/pull/245
- crawler: only update directories of the current category
https://github.com/fedora-infra/mirrormanager2/pull/250
- python3 compatibility
https://github.com/fedora-infra/mirrormanager2/pull/185
- rpmmd: switch from yum.repoMDObject pyrpmmd
https://github.com/fedora-infra/mirrormanager2/pull/254
- Migrate to new geoip API
https://github.com/fedora-infra/mirrormanager2/pull/253
- Use InputRequired() instead of Required()
https://github.com/fedora-infra/mirrormanager2/pull/256
- Enable MirrorManager2 to be built using Python 3 for Fedora
https://github.com/fedora-infra/mirrormanager2/pull/260
- Fix tests with python3
https://github.com/fedora-infra/mirrormanager2/pull/261
- Toggle private
https://github.com/fedora-infra/mirrormanager2/pull/257
* Sun Jul 22 2018 Adrian Reber <adrian(a)lisas.de> - 0.8.4-4
- Disable tests requiring network access
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
pspg-2.1.3-1.el7 (FEDORA-EPEL-2019-c8aa52a494)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes: -
https://github.com/okbob/pspg/releases/tag/2.1.3 -
https://github.com/okbob/pspg/releases/tag/2.1.2 -
https://github.com/okbob/pspg/releases/tag/2.1.1 -
https://github.com/okbob/pspg/releases/tag/2.1.0 -
https://github.com/okbob/pspg/releases/tag/2.0.5 -
https://github.com/okbob/pspg/releases/tag/2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 5 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.1.3-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/2.1.3
https://github.com/okbob/pspg/releases/tag/2.1.2
https://github.com/okbob/pspg/releases/tag/2.1.1
https://github.com/okbob/pspg/releases/tag/2.1.0
https://github.com/okbob/pspg/releases/tag/2.0.5
https://github.com/okbob/pspg/releases/tag/2.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1754109 - pspg-2.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1754109
--------------------------------------------------------------------------------
================================================================================
python-colcon-bash-0.4.1-1.el7 (FEDORA-EPEL-2019-631cec1cf9)
Extension for colcon to provide Bash scripts
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.1-1
- Update to 0.4.1 (rhbz#1757634)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1757563 - python-colcon-output-0.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757563
[ 2 ] Bug #1757635 - python-colcon-test-result-0.3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757635
[ 3 ] Bug #1757562 - python-colcon-cmake-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757562
[ 4 ] Bug #1757634 - python-colcon-bash-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757634
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.14-1.el7 (FEDORA-EPEL-2019-631cec1cf9)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.14-1
- Update to 0.2.14 (rhbz#1757562)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1757563 - python-colcon-output-0.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757563
[ 2 ] Bug #1757635 - python-colcon-test-result-0.3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757635
[ 3 ] Bug #1757562 - python-colcon-cmake-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757562
[ 4 ] Bug #1757634 - python-colcon-bash-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757634
--------------------------------------------------------------------------------
================================================================================
python-colcon-output-0.2.6-1.el7 (FEDORA-EPEL-2019-631cec1cf9)
Extension for colcon to customize the output in various ways
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.6-1
- Update to 0.2.6 (rhbz#1757563)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1757563 - python-colcon-output-0.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757563
[ 2 ] Bug #1757635 - python-colcon-test-result-0.3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757635
[ 3 ] Bug #1757562 - python-colcon-cmake-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757562
[ 4 ] Bug #1757634 - python-colcon-bash-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757634
--------------------------------------------------------------------------------
================================================================================
python-colcon-test-result-0.3.8-1.el7 (FEDORA-EPEL-2019-631cec1cf9)
Extension for colcon to provide information about the test results
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.8-1
- Update to 0.3.8 (rhbz#1757635)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1757563 - python-colcon-output-0.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757563
[ 2 ] Bug #1757635 - python-colcon-test-result-0.3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757635
[ 3 ] Bug #1757562 - python-colcon-cmake-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757562
[ 4 ] Bug #1757634 - python-colcon-bash-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757634
--------------------------------------------------------------------------------
================================================================================
python-rosdep-0.16.1-2.el7 (FEDORA-EPEL-2019-8a1a2b224d)
ROS System Dependency Installer
--------------------------------------------------------------------------------
Update Information:
Add missing dependency on python-srpm-macros
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Scott K Logan <logans(a)cottsay.net> - 0.16.1-2
- Add dependency on python-srpm-macros to resolve %{python3_pkgversion}
- Add weak dependencies for RHEL 8
- Make doc subpackage dependency weaker
--------------------------------------------------------------------------------
================================================================================
python3-numpy-1.12.1-2.el7 (FEDORA-EPEL-2019-cbae15145d)
A fast multidimensional array facility for Python 3
--------------------------------------------------------------------------------
Update Information:
Provide python3-numpy
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 4 2019 Orion Poplawski <orion(a)nwra.com> - 1.12.1-2
- Provide python3-numpy (bugz#1758151)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758151 - python3-numpy is not available for CentOS 7 with EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=1758151
--------------------------------------------------------------------------------
================================================================================
python34-3.4.10-4.el7 (FEDORA-EPEL-2019-4e8faaa263)
Version 3 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
This update backports fixes for CVE-2019-10160 (rhbz#1718867) and CVE-2019-16056
(rhbz#1750457) from Fedora. It also obsolete IUS python34u packages ([IUS
issue](https://github.com/iusrepo/packaging/issues/7)).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 3 2019 Carl George <carl(a)george.computer> - 3.4.10-4
- Obsolete IUS python34u packages
- Fix CVE-2019-10160 (rhbz#1718867)
- Fix CVE-2019-16056 (rhbz#1750457)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1750455 - CVE-2019-16056 python34: python: email.utils.parseaddr wrongly
parses email addresses [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1750455
[ 2 ] Bug #1718869 - CVE-2019-10160 python34: python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1718869
[ 3 ] Bug #1706855 - CVE-2019-9740 python34: python: improper neutralization of CRLF
sequences in urllib module [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1706855
[ 4 ] Bug #1698979 - CVE-2019-9947 CVE-2019-9948 python34: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1698979
[ 5 ] Bug #1688552 - CVE-2019-9636 python34: python: Information Disclosure due to
urlsplit improper NFKC normalization [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1688552
[ 6 ] Bug #1750764 - Sync EPEL's python34 with Fedora [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1750764
--------------------------------------------------------------------------------