The following Fedora EPEL 7 Security updates need testing:
Age URL
523
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
265
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
263
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-75cc3918d1
rubygem-ox-2.4.11-5.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9ffdf25269
python-django-1.11.27-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12cd208593
gnulib-0-31.20200107git.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-de388d4fd0
chromium-79.0.3945.117-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-35e87bab10
perl-Clipboard-0.21-1.el7.1
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a062204588
rubygem-rack-1.6.12-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-87fd65eed3
python3-pillow-6.2.2-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-345003feba
thunderbird-enigmail-2.1.5-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-348d34c4c6
elog-3.1.4-1.20190113git283534d97d5a.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-807cf11068
upx-3.95-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
links-2.20.2-1.el7
nss-mdns-0.14.1-5.el7
relval-2.4.11-1.el7
Details about builds:
================================================================================
links-2.20.2-1.el7 (FEDORA-EPEL-2020-a16a109471)
Web browser running in both graphics and text mode
--------------------------------------------------------------------------------
Update Information:
Update to a new version. Security bug fixed: when links was connected to tor,
it would send real dns requests outside the tor network when the displayed page
contains <link rel="dns-prefetch" href="http://host.domain/">.
Fix reading one
byte beyond allocated space in case of corrupted UTF-8 data - CVE-2017-11114
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 19 2020 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.20.2-1
- New release
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.17-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.17-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Oct 31 2018 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.17-1
- New release
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Mar 21 2017 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.14-1
- New release
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480633 - CVE-2017-11114 links: Global-based 1 byte buffer over-read in
put_chars function in html_r.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1480633
--------------------------------------------------------------------------------
================================================================================
nss-mdns-0.14.1-5.el7 (FEDORA-EPEL-2020-b5e1d863a8)
glibc plugin for .local name resolution
--------------------------------------------------------------------------------
Update Information:
Properly work with or without authselect
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 19 2020 Adam Goode <adam(a)spicenitz.org> - 0.14.1-5
- Properly work with or without authselect (BZ #1577243)
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.14.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.14.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.14.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577243 - nss-mdns modifies /etc/nsswitch.conf in scriptlets which conflicts
with authselect on Fedora 28
https://bugzilla.redhat.com/show_bug.cgi?id=1577243
--------------------------------------------------------------------------------
================================================================================
relval-2.4.11-1.el7 (FEDORA-EPEL-2020-80b82a4131)
Tool for interacting with Fedora QA wiki pages
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of relval that adds a new maximum size for
the Comp_Neuro spin. That is the only change.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 16 2020 Adam Williamson <awilliam(a)redhat.com> - 2.4.11-1
- New release 2.4.11: add max size for Comp_Neuro
--------------------------------------------------------------------------------