The following Fedora EPEL 7 Security updates need testing:
Age URL
192
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
142
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
126
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0e5a2a81f
wildmidi-0.3.15-1.el7
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0346a55d0f
nagios-4.4.2-3.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f5e66c71c9
mbedtls-2.7.8-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d0853fde65
wordpress-5.0.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
Zim-0.69-1.el7
game-music-emu-0.6.2-1.el7
holland-1.1.9-1.el7
libwebsockets-3.0.1-1.el7
mate-power-manager-1.16.2-2.el7
mosquitto-1.5.5-1.el7
perl-Schedule-Cron-1.01-1.el7
php-phpseclib-2.0.13-1.el7
python-pyvirtualize-0.9-2.20181003git57d2307.el7
python-regex-2018.11.22-1.el7
python-slacker-0.12.0-2.el7
python-yamlordereddictloader-0.4.0-1.el7
python3-sphinx-1.2.3-3.el7
rclone-1.45-1.el7
slim-1.3.6-7.el7
snapd-2.36.3-1.el7
snapd-glib-1.44-1.el7
tinc-1.0.35-1.el7
Details about builds:
================================================================================
Zim-0.69-1.el7 (FEDORA-EPEL-2018-a7f596c2a4)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 17 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 0.69-1
- Update to 0.69
- Fix Requires on Fedora <= 28
--------------------------------------------------------------------------------
================================================================================
game-music-emu-0.6.2-1.el7 (FEDORA-EPEL-2018-b6fa6cebc3)
Video game music file emulation/playback library
--------------------------------------------------------------------------------
Update Information:
New release 0.6.2 - Security fix for CVE-2017-17446
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Karel Voln�� <kvolny(a)redhat.com> 0.6.2-1
- New release 0.6.2
- Fixes CVE-2017-17446 (rhbz#1524563)
- Update tarball url
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524561 - CVE-2017-17446 game-music-emu: The Mem_File_Reader::read_avail
function does not ensure a non-negative size
https://bugzilla.redhat.com/show_bug.cgi?id=1524561
--------------------------------------------------------------------------------
================================================================================
holland-1.1.9-1.el7 (FEDORA-EPEL-2018-9e8620753c)
Pluggable Backup Framework
--------------------------------------------------------------------------------
Update Information:
- Latest upstream - Add mariabackup subpackage rhbz#1651820
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Carl George <carl(a)george.computer> - 1.1.9-1
- Latest upstream
- Add mariabackup subpackage rhbz#1651820
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651820 - Ship holland-mariabackup in CentOS 6/7
https://bugzilla.redhat.com/show_bug.cgi?id=1651820
--------------------------------------------------------------------------------
================================================================================
libwebsockets-3.0.1-1.el7 (FEDORA-EPEL-2018-2c0914a1f0)
A lightweight C library for Websockets
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 3.0.1 (rhbz#1604687)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 3.0.1-1
- Update to latest upstream release 3.0.1 (rhbz#1604687)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon May 7 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 3.0.0-1
- Update to latest upstream release 3.0.0 (rhbz#1575605)
* Thu Mar 15 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.4.2-1
- Update to latest upstream release 2.4.2 (rhbz#1504377)
* Fri Feb 16 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.4.1-1
- Update to latest upstream release 2.4.1 (rhbz#1504377)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Oct 20 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.4.0-1
- Update to latest upstream release 2.4.0 (rhbz#1504377)
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Sat Jul 29 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.3.0-1
- Update to latest upstream release 2.3.0 (rhbz#1472509)
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Thu May 11 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.2.0-1
- Update to latest upstream release 2.2.1 (rhbz#1437272)
* Sat Mar 25 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.2.0-1
- Update to latest upstream release 2.2.0 (rhbz#1422477)
* Tue Mar 14 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.1.1-1
- Update to latest upstream release 2.1.1 (rhbz#1422477)
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Nov 17 2016 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.1.0-2
- Move tests (rhbz#1390538)
* Thu Nov 17 2016 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.1.0-1
- Update to latest upstream release 2.1.0 (rhbz#1376257)
* Mon Oct 31 2016 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.0.3-1
- Update to latest upstream release 2.0.3
* Wed Aug 3 2016 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.0.2-1
- Update to latest upstream release 2.0.2 (rhbz#1358988)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1604687 - libwebsockets: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1604687
--------------------------------------------------------------------------------
================================================================================
mate-power-manager-1.16.2-2.el7 (FEDORA-EPEL-2018-022f80378a)
MATE power management service
--------------------------------------------------------------------------------
Update Information:
- fix crash on unknown dbus signal name -
https://github.com/mate-desktop/mate-
power-manager/issues/225
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 15 2018 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.16.2-2
- fix crash on unknown dbus signal name
-
https://github.com/mate-desktop/mate-power-manager/issues/225
--------------------------------------------------------------------------------
================================================================================
mosquitto-1.5.5-1.el7 (FEDORA-EPEL-2018-3047c90576)
An Open Source MQTT v3.1/v3.1.1 Broker
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.5.5 (rhbz#1660413, rhbz#1660414)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5.5-1
- Update to new upstream version 1.5.5 (rhbz#1660413, rhbz#1660414)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660413 - CVE-2018-20145 mosquitto: Possible ACL bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1660413
--------------------------------------------------------------------------------
================================================================================
perl-Schedule-Cron-1.01-1.el7 (FEDORA-EPEL-2018-1ff892923a)
Provides a simple but complete cron like scheduler
--------------------------------------------------------------------------------
Update Information:
Initial specfile
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1658851 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1658851
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.13-1.el7 (FEDORA-EPEL-2018-346ac64147)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.13** * SSH2: fix order of user_error() / bitmap reset (#1314)
* SSH2: setTimeout(0) didn't work as intended (#1116) * Agent: add support
for rsa-sha2-256 / rsa-sha2-512 (#1319) * Agent: add parameter to constructor
(#1319) * X509: fix errors with validateDate (#1318)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Remi Collet <remi(a)remirepo.net> - 2.0.13-1
- update to 2.0.13
--------------------------------------------------------------------------------
================================================================================
python-pyvirtualize-0.9-2.20181003git57d2307.el7 (FEDORA-EPEL-2018-924c63f6b2)
Python module to access and manage VMware
--------------------------------------------------------------------------------
Update Information:
initial package, rhbz#1626231
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1626231 - Review Request: python-pyvirtualize - Python module to access and
manage VMware
https://bugzilla.redhat.com/show_bug.cgi?id=1626231
--------------------------------------------------------------------------------
================================================================================
python-regex-2018.11.22-1.el7 (FEDORA-EPEL-2018-12d1246c8c)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update to the latest released version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Thomas Moschny <thomas.moschny(a)gmx.de> - 2018.11.22-1
- Update to 2018.11.22.
--------------------------------------------------------------------------------
================================================================================
python-slacker-0.12.0-2.el7 (FEDORA-EPEL-2018-169d3b6140)
Slack API client
--------------------------------------------------------------------------------
Update Information:
initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659759 - Review Request: python-slacker - Slack API client
https://bugzilla.redhat.com/show_bug.cgi?id=1659759
--------------------------------------------------------------------------------
================================================================================
python-yamlordereddictloader-0.4.0-1.el7 (FEDORA-EPEL-2018-5aa25c28e2)
YAML loader for PyYAML that maintains key order
--------------------------------------------------------------------------------
Update Information:
New upstream version 0.4.0 Should fix won't-install-on-EPEL7 bug. ---- Fix
python3 requires.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Greg Hellings <greg.hellings(a)gmail.com> - 0.4.0-1
- Upstream version 0.4.0
- Switched hard-coded python3 to use %{python3_pkgversion}
- Addresses BZ#1647597
* Tue Dec 18 2018 Troy Dawson <tdawson(a)redhat.com> - 0.3.0-2
- Fix python3 requires.
* Fri Oct 12 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.3.0-6
- Python2 binary package has been removed
See
https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.3.0-4
- Rebuilt for Python 3.7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1647597 - EPEL7 - python3-yamlordereddictloader won't install on RHEL
7.6
https://bugzilla.redhat.com/show_bug.cgi?id=1647597
--------------------------------------------------------------------------------
================================================================================
python3-sphinx-1.2.3-3.el7 (FEDORA-EPEL-2018-6148a50d6d)
Python documentation generator
--------------------------------------------------------------------------------
Update Information:
Rename locale files to not conflict ---- Sphinx is a tool that makes it easy
to create intelligent and beautiful documentation for Python projects (or other
documents consisting of multiple reStructuredText sources), written by Georg
Brandl. It was originally created to translate the new Python documentation, but
has now been cleaned up in the hope that it will be useful to many other
projects. Sphinx uses reStructuredText as its markup language, and many of its
strengths come from the power and straightforwardness of reStructuredText and
its parsing and translating suite, the Docutils. Although it is still under
constant development, the following features are already present, work fine and
can be seen "in action" in the Python docs: * Output formats: HTML
(including Windows HTML Help) and LaTeX, for printable PDF versions *
Extensive cross-references: semantic markup and automatic links for
functions, classes, glossary terms and similar pieces of information *
Hierarchical structure: easy definition of a document tree, with automatic
links to siblings, parents and children * Automatic indices: general index
as well as a module index * Code handling: automatic highlighting using the
Pygments highlighter * Various extensions are available, e.g. for automatic
testing of snippets and inclusion of appropriately formatted docstrings.
This is the Python 3 build
--------------------------------------------------------------------------------
================================================================================
rclone-1.45-1.el7 (FEDORA-EPEL-2018-681284c011)
rsync for cloud storage
--------------------------------------------------------------------------------
Update Information:
Update to version 1.45
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.45-1
- Update to version 1.45
- Fix #1659644
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659644 - Can not save profil Mirosoft OneDrive for Business to config file.
https://bugzilla.redhat.com/show_bug.cgi?id=1659644
--------------------------------------------------------------------------------
================================================================================
slim-1.3.6-7.el7 (FEDORA-EPEL-2018-2d7ce3ce7a)
Simple Login Manager
--------------------------------------------------------------------------------
Update Information:
Use default background in EPEL (#1647581)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Troy Dawson <tdawson(a)redhat.com> - 1.3.6-7
- Use default background in EPEL (#1647581)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1647581 - EPEL7 - slim won't install on RHEL 7.6
https://bugzilla.redhat.com/show_bug.cgi?id=1647581
--------------------------------------------------------------------------------
================================================================================
snapd-2.36.3-1.el7 (FEDORA-EPEL-2018-b240f3418f)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Initial packaging for EPEL 7 based on Fedora `snapd-2.36.3` and `snapd-
glib-1.44` packages.
--------------------------------------------------------------------------------
================================================================================
snapd-glib-1.44-1.el7 (FEDORA-EPEL-2018-b240f3418f)
Library providing a GLib interface to snapd
--------------------------------------------------------------------------------
Update Information:
Initial packaging for EPEL 7 based on Fedora `snapd-2.36.3` and `snapd-
glib-1.44` packages.
--------------------------------------------------------------------------------
================================================================================
tinc-1.0.35-1.el7 (FEDORA-EPEL-2018-4b286336b7)
A virtual private network daemon
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-16737, CVE-2018-16738, CVE-2018-16758
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.35-1
- Fix for CVE-2018-16737, CVE-2018-16738 and CVE-2018-16758
- Update to new upstream version 1.0.35
* Fri Oct 26 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.34-1
- Update to new upstream version 1.0.34
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.33-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Mar 8 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.33-3
- Fix BR
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.33-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Nov 4 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.33-1
- Update to new upstream version 1.0.33
* Sat Sep 30 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.32-1
- Update to new upstream version 1.0.32
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.31-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.31-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637483 - CVE-2018-16737 CVE-2018-16738 CVE-2018-16758 tinc: Multiple issues
fixed in the 1.0.35 release [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1637483
[ 2 ] Bug #1637482 - CVE-2018-16737 CVE-2018-16738 CVE-2018-16758 tinc: Multiple issues
fixed in the 1.0.35 release [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1637482
--------------------------------------------------------------------------------