The following Fedora EPEL 7 Security updates need testing:
Age URL
561
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
303
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
301
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fb7ac4aee2
hiredis-0.12.1-2.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-99abadf4df
python-psutil-5.6.7-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b1046cc65d
python-colander-1.7.0-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-5f252e8e10
kea-1.6.0-4.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ea579d7782
proftpd-1.3.5e-9.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
clamav-0.102.2-2.el7
gfal2-2.17.2-1.el7
libmodulemd2-2.9.1-1.el7.1
openfortivpn-1.12.0-1.el7
php-pecl-krb5-1.1.3-1.el7
php-phpseclib-2.0.25-1.el7
remmina-1.4.1-1.el7
rr-5.3.0-11.20200224git4513b23.el7
siege-4.0.5-1.el7
Details about builds:
================================================================================
clamav-0.102.2-2.el7 (FEDORA-EPEL-2020-6a49f13053)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
clamav-0.102.2-2 with provides clamav-server
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 10 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-2
- Keep /var/log/freshclam.log handling - can still be used
- Restore clamav-server provides (bz#1801329)
- Fix old_freshclam cron conditional (bz#1801199)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1807388 - Packing changes between 0.101.5-1.el7 and 0.101.5-10.el7
https://bugzilla.redhat.com/show_bug.cgi?id=1807388
--------------------------------------------------------------------------------
================================================================================
gfal2-2.17.2-1.el7 (FEDORA-EPEL-2020-228b0e6cf8)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream release 2.17.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 25 2020 Michal Simon <michal.simon(a)cern.ch> - 2.17.2-1
- Upgrade to upstream release 2.17.2
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.17.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libmodulemd2-2.9.1-1.el7.1 (FEDORA-EPEL-2020-414954d191)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Release libmodulemd 2.9.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 25 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 2.9.1-1.1
- Drop Obsoletes causing issues on EPEL 7
* Fri Feb 14 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 2.9.1-1
- new upstream release: 2.9.1
* Wed Feb 12 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 2.9.0-1
- new upstream release: 2.9.0
--------------------------------------------------------------------------------
================================================================================
openfortivpn-1.12.0-1.el7 (FEDORA-EPEL-2020-b57b954fde)
Client for PPP+SSL VPN tunnel services
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version to fix CVE-2020-7041, CVE-2020-7042 and
CVE-2020-7043.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 26 2020 Adrien Verg�� <adrienverge(a)gmail.com> - 1.12.0-1
- Update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
php-pecl-krb5-1.1.3-1.el7 (FEDORA-EPEL-2020-a8346cc2ae)
Kerberos authentification extension
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.3** - [BUG] Keep proper minor status for error reporting in
initSecContex - [BUG] remove some overlooked debugging output - [BUG] fix PECL
package license metadata - [FEATURE] Add API for password expiration information
(MIT >=1.9 only) - [FEATURE] Allow leaving the NegotiateAuth SPN unspecified
(allow all from keytab) - [FEATURE] Add support for gss_acquire_cred_from()
instead of setting the per process keytab (in NegotiateAuth, GSSAPI to follow).
- [FEATURE] Allow overriding SPN for NegotiateAuth.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 27 2020 Remi Collet <remi(a)remirepo.net> - 1.1.3-1
- update to 1.1.3
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.25-1.el7 (FEDORA-EPEL-2020-fcbf91b905)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.25 - 2020-02-24** * SFTP: re-add buffering (#1455)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 25 2020 Remi Collet <remi(a)remirepo.net> - 2.0.25-1
- update to 2.0.25
* Mon Feb 24 2020 Remi Collet <remi(a)remirepo.net> - 2.0.24-1
- update to 2.0.24
--------------------------------------------------------------------------------
================================================================================
remmina-1.4.1-1.el7 (FEDORA-EPEL-2020-c5e7f4c699)
Remote Desktop Client
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.1 bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 25 2020 Simone Caronni <negativo17(a)gmail.com> - 1.4.1-1
- Update to 1.4.1.
* Sun Feb 9 2020 Simone Caronni <negativo17(a)gmail.com> - 1.3.10-2
- Backport patch to fix build with default GCC 10 options.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1799973 - remmina: FTBFS in Fedora rawhide/f32
https://bugzilla.redhat.com/show_bug.cgi?id=1799973
[ 2 ] Bug #1802562 - [abrt] remmina: sse2_blt(): remmina killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1802562
[ 3 ] Bug #1802622 - [abrt] remmina: wl_abort(): remmina killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1802622
--------------------------------------------------------------------------------
================================================================================
rr-5.3.0-11.20200224git4513b23.el7 (FEDORA-EPEL-2020-00098caf98)
Tool to record and replay execution of applications
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 24 2020 Sagar Patel <sapatel(a)redhat.com> 10.20200224git4513b23
- Sync with upstream branch master,
commit 4513b23c8092097dc42c73f3cbaf4cfaebd04efe.
- New patches enable rr to be built on older compilers.
* Thu Feb 13 2020 Sagar Patel <sapatel(a)redhat.com> 10.20200213gitabd3442
- Sync with upstream branch master,
commit abd344288878c9b4046e0b8664927992947a46eb.
- New patches enable rr to be built on RHEL7.2 and later.
* Tue Jan 14 2020 William Cohen <wcohen(a)redhat.com> 5.3.0-8.20200124git7908fea
- Sync with upstream branch master,
commit 70ba28f7ab2923d4e36ffc9d5d2e32357353b25c.
- SRPM buildable on Fedora koji or other rpm build systems.
--------------------------------------------------------------------------------
================================================================================
siege-4.0.5-1.el7 (FEDORA-EPEL-2020-9297138ee2)
A HTTP regression testing and benchmarking utility
--------------------------------------------------------------------------------
Update Information:
2020/02/10 Ben Baker-Smith <ben(a)DELETEbaker-smith.net> * src/main.c
Added -j/--json-output * src/init.c Added -j/--json-output - force
quiet mode * src/setup.h Added variable for json output *
doc/siegerc.in Added documentation to the config file
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 24 2020 Denis Fateyev <denis(a)fateyev.com> - 4.0.5-1
- Update to 4.0.5 (#1804857)
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Sep 12 2017 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org>
- 4.0.4-1
- Update to 4.0.4 (#1490661)
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1804857 - siege-4.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1804857
--------------------------------------------------------------------------------