The following Fedora EPEL 7 Security updates need testing:
Age URL
566
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
308
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
306
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5f252e8e10
kea-1.6.0-4.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ea579d7782
proftpd-1.3.5e-9.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b57b954fde
openfortivpn-1.12.0-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1f5dbc1cd7
cacti-1.2.10-1.el7 cacti-spine-1.2.10-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
dnscrypt-proxy2-2.0.39-1.el7
fedpkg-1.38-1.el7
knot-2.9.3-1.el7
mbedtls-2.7.14-1.el7
openhantek-3.0.2-2.el7
python-pycryptodomex-3.9.7-1.el7
seamonkey-2.53.1-1.el7
sympa-6.2.54-1.el7
youtube-dl-2020.03.01-1.el7
Details about builds:
================================================================================
dnscrypt-proxy2-2.0.39-1.el7 (FEDORA-EPEL-2020-9d12d40fb8)
Flexible DNS proxy, with support for encrypted DNS protocols
--------------------------------------------------------------------------------
Update Information:
EPEL 7 build (#1792010)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 20 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.39-1
- EPEL 7 build (#1792010)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1792010 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1792010
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.38-1.el7 (FEDORA-EPEL-2020-6c0e3ca209)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Detailed release notes:
[
here](https://docs.pagure.org/fedpkg/releases/1.38.html) A number of fixes and
features from the list were already released as patches.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.38-1
- Removes check of bodhi-client version - rhbz#1796972 (onosek)
- Clone config customization for namespaces (onosek)
- Repair Jenkins tests (onosek)
- Update bash completion with side tag commands (lsedlar)
- add --fail-fast to bash-completion (cheese)
- Improve coding style by sorting imports (onosek)
- Repair tests for previous commits (onosek)
- Create fork of the active repository - #276 (onosek)
- request-tests-repo: add branch into ticket body - #359 (onosek)
- verrel command on master asks Koji first - #357 (onosek)
- Check nvr before build - #356 (onosek)
- Change dist tag for epel8-playground (onosek)
- Add test for retiring on archived release (lsedlar)
- Mock requests in all tests (lsedlar)
- Line up descriptions for better code readability (onosek)
- Clarify request-branch 'service levels' argument - #283 (onosek)
- Resolve Jenkins unittests failing (onosek)
- utils: fix whitespace in Pagure error message (kdreyer)
- New options for bodhi template - 459 (onosek)
- Block retiring in released branches - #337 (onosek)
- Use package.cfg for epel8+ branches (mboddu)
- Add epel*-playground into rpmdefines (smooge)
- linux_distribution import moved (onosek)
- Unittests for epel*-playground branch requests (onosek)
- Allow epel*-playground requests for epel8 and newer (onosek)
- Support for epel*-playground branch requests - #334 (mboddu)
- git-changelog: Fix running on Python 3 (onosek)
- Avoid warning about invalid escape with python3.8 (zbyszek)
- Tests for update stable karma - #321 (cqi)
- Bump check for bodhi client - 330 (lsedlar)
- Ignore files in a cloned repository - patterns update (onosek)
* Mon Feb 3 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.37-13
- Patch: Removes check of bodhi-client version
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.37-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Nov 8 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.37-11
- Drop unneeded build dependency on python3-unittest2
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.37-10
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Wed Aug 21 2019 Ond��ej Nosek <onosek(a)redhat.com> - 1.37-9
- Backport: display_name added to bodhi.template
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.37-8
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
knot-2.9.3-1.el7 (FEDORA-EPEL-2020-539803ce4c)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
new upstream release 2.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 3 2020 Tomas Krizek <tomas.krizek(a)nic.cz> - 2.9.3-1
- new upstream release 2.9.3
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.7.14-1.el7 (FEDORA-EPEL-2020-b3684de763)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.14 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.16.5-and-2.7.14-released Security Advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-
advisory-2020-02
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 3 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.14-1
- Update to 2.7.14
--------------------------------------------------------------------------------
================================================================================
openhantek-3.0.2-2.el7 (FEDORA-EPEL-2020-4bec3a09ed)
Hantek and compatible USB digital signal oscilloscope
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.2.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 3 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.0.2-2
- Update to 3.0.2
- Fix BR
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pycryptodomex-3.9.7-1.el7 (FEDORA-EPEL-2020-000651d026)
A self-contained cryptographic library for Python
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 21 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.7-1
- Update to 3.9.7
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.53.1-1.el7 (FEDORA-EPEL-2020-9d9cd4aeef)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Upgrade to 2.53.1 SeaMonkey-2.53.1, being initially based on the Firefox-56 and
Thunderbird-56 code, incorporates now a lot of backported features and security
fixes from the newer Firefox/Thunderbird versions up to 75. That way it tries to
be a modern browser, preserving the same time the familiar user interface and
the ability to use traditional extensions and addons. This version makes
changes to your profile that can't be reverted in case you want to go back to a
previous version of SeaMonkey. You MUST absolutely do a full backup of your
profile (~/.mozilla/seamonkey/ dir) BEFORE trying to run new version. SeaMonkey
now uses GTK3 library for GUI interface. If you experienced some size issues, go
to "about:config" and try to set "layout.css.devPixelsPerPx" parameter
to "1"
(or any other preferred value). You can also use gtk3's environment variables
GDK_SCALE and/or GDK_DPI_SCALE (useful for HiDPI displays). Full theme add-ons
may need changes because of user interface and internal changes. If you find any
problem with themes, contact the theme author. Before reporting a problem with
the user interface, please make sure to recreate it with either the Classic or
Modern theme. This version now includes "Lightning" calendar. It becomes a
standard part of Thunderbird/SeaMonkey, being just technically organized as an
extension. This version returns providing of Chatzilla and DOM inspector
extensions, just as it always was before. It is likely you need to update your
third party extensions to newer versions. Poorly designed or incompatible
extensions can cause unpredictable problems. If you encounter some strange
issues, try "seamonkey -safe-mode" from command line. Unfortunately, it is now
impossible to continue support of npapi plugins. Thus, java applets no more work
:( . All modern browsers have dropped such support years ago, and even plugin
owners recommend to not use it anymore. Search "browsers with java support" if
you still need it. Sorry for that. Flash is still supported, at least until its
EOL at the end of 2020. Since 2.53.1, 32-bit version (i686 arch) does not
provided, since no more supported. Please, read upstream release notes for more
info
https://www.seamonkey-project.org/releases/seamonkey2.53.1/
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 28 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.1-1
- Upgrade to 2.53.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808197 - seamonkey-2.53.1.source is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808197
--------------------------------------------------------------------------------
================================================================================
sympa-6.2.54-1.el7 (FEDORA-EPEL-2020-471d8a7abd)
Powerful multilingual List Manager
--------------------------------------------------------------------------------
Update Information:
Update to sympa 6.2.54 : - Fixes CVE-2020-9369 - See
https://sympa-
community.github.io/security/2020-001.html for details
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Xavier Bachelot <xavier(a)bachelot.org> 6.2.54-1
- Update to 6.2.54.
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
6.2.52-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2020.03.01-1.el7 (FEDORA-EPEL-2020-42c352cce8)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to 2020.03.01 ---- Update to 2020.02.16
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2020.03.01-1
- Update to 2020.03.01
* Fri Feb 21 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2020.02.16-1
- Update to 2020.02.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808828 - youtube-dl-2020.03.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808828
[ 2 ] Bug #1803530 - youtube-dl-2020.02.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1803530
--------------------------------------------------------------------------------