The following Fedora EPEL 7 Security updates need testing:
Age URL
165
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
148
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
40
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0346a55d0f
nagios-4.4.2-3.el7
22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6fa6cebc3
game-music-emu-0.6.2-1.el7
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b43fdd19c3
vcftools-0.1.16-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-25ef4c914f
tcpreplay-4.3.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b96164478d
php-horde-Horde-Image-2.5.4-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-6c3fb8b090
chromium-71.0.3578.98-2.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-8e5fe375cf
php-horde-Horde-Form-2.0.19-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-01cf520c0b
python-django-1.11.18-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
boinc-client-7.14.2-7.el7
containerd-1.2.1-1.el7
dymo-cups-drivers-1.4.0.5-4.el7
git-cola-3.2-1.el7
gitolite3-3.6.11-1.el7
golang-1.11.4-1.el7
golang-github-cpuguy83-go-md2man-1.0.4-5.el7
openblas-0.3.5-1.el7
python-bsddb3-6.2.6-3.el7
python-service-identity-16.0.0-11.el7
rust-1.31.1-9.el7
Details about builds:
================================================================================
boinc-client-7.14.2-7.el7 (FEDORA-EPEL-2019-88803b4333)
The BOINC client
--------------------------------------------------------------------------------
Update Information:
Added patch to enable CPU scheduling policy = idle
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Germano Massullo <germano.massullo(a)cern.ch> - 7.14.2-7
- removed added systemd_scheduler.patch since scheduler.patch is already enough to achieve
boinc running in idle
- disabled systemd_hardening.patch because its tests are still in early stage on upstream
development process
* Fri Dec 14 2018 Germano Massullo <germano.massullo(a)cern.ch> - 7.14.2-6
- added systemd_hardening.patch
* Fri Dec 14 2018 Germano Massullo <germano.massullo(a)cern.ch> - 7.14.2-5
- added systemd_scheduler.patch
* Wed Dec 12 2018 Germano Massullo <germano.massullo(a)cern.ch> - 7.14.2-4
- added scheduler.patch
--------------------------------------------------------------------------------
================================================================================
containerd-1.2.1-1.el7 (FEDORA-EPEL-2019-1bc46813c3)
An industry-standard container runtime
--------------------------------------------------------------------------------
Update Information:
First build for EPEL7.
--------------------------------------------------------------------------------
================================================================================
dymo-cups-drivers-1.4.0.5-4.el7 (FEDORA-EPEL-2019-389348b102)
DYMO LabelWriter Drivers for CUPS
--------------------------------------------------------------------------------
Update Information:
don't own cups folders
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659709 - Review Request: dymo-cups-drivers - DYMO LabelWriter Drivers for
CUPS
https://bugzilla.redhat.com/show_bug.cgi?id=1659709
--------------------------------------------------------------------------------
================================================================================
git-cola-3.2-1.el7 (FEDORA-EPEL-2019-5dbcef08b5)
A sleek and powerful git GUI
--------------------------------------------------------------------------------
Update Information:
update to git-cola 3.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Oliver Haessler <oliver(a)redhat.com> - 3.2-1
- Update to 3.2
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.10-5
- Rebuilt for Python 3.7
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555766 - git-cola: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1555766
[ 2 ] Bug #1440743 - git-cola-3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1440743
--------------------------------------------------------------------------------
================================================================================
gitolite3-3.6.11-1.el7 (FEDORA-EPEL-2019-4d365dad3c)
Highly flexible server for git directory version tracker
--------------------------------------------------------------------------------
Update Information:
3.6.11:
https://github.com/sitaramc/gitolite/commit/b49133dc5f49b12807165ed2503
07213c1ac0a53
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 1:3.6.11-1
- 3.6.11.
--------------------------------------------------------------------------------
================================================================================
golang-1.11.4-1.el7 (FEDORA-EPEL-2019-7c5121f71d)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to 1.11.4 * Security fix for CVE-2018-16875, CVE-2018-16874 and
CVE-2018-16873
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Jakub ��ajka <jcajka(a)redhat.com> - 1.11.4-1
- Rebase to go1.11.4
- Fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873
- Resolves: BZ#1664332
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1657565 - CVE-2018-16875 golang: crypto/x509 allows for denial of service via
crafted TLS client certificate
https://bugzilla.redhat.com/show_bug.cgi?id=1657565
[ 2 ] Bug #1657564 - CVE-2018-16874 golang: "go get" vulnerable to directory
traversal via malicious package
https://bugzilla.redhat.com/show_bug.cgi?id=1657564
[ 3 ] Bug #1657563 - CVE-2018-16873 golang: "go get" command vulnerable to RCE
via import of malicious package
https://bugzilla.redhat.com/show_bug.cgi?id=1657563
--------------------------------------------------------------------------------
================================================================================
golang-github-cpuguy83-go-md2man-1.0.4-5.el7 (FEDORA-EPEL-2019-313ed4635b)
Process markdown into manpages
--------------------------------------------------------------------------------
Update Information:
- Sync with RHEL spec file - Removed bundled libraries ---- RHEL 7 has
deprecated it's golang stack, which has resulted in golang-github-cpuguy83-go-
md2man no longer being available in CentOS. Since golang has been added back to
EPEL, it should be ok to add golang-github-cpuguy83-go-md2man now as well.
--------------------------------------------------------------------------------
================================================================================
openblas-0.3.5-1.el7 (FEDORA-EPEL-2019-abb5b76382)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.5 with runtime CPU detection on aarch64. See full list of changes
at
https://github.com/xianyi/OpenBLAS/releases.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 0.3.5-1
- Update to 0.3.5, enabling dynamic CPU detection on aarch64.
--------------------------------------------------------------------------------
================================================================================
python-bsddb3-6.2.6-3.el7 (FEDORA-EPEL-2019-31ccaa2539)
Python 3 bindings for Berkeley DB
--------------------------------------------------------------------------------
Update Information:
Renamed and rebuilt `python3-bsddb3` for EPEL 7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1662501 - Please build python3-bsddb3 for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1662501
[ 2 ] Bug #1663442 - Rename Request: python-bsddb3 - Python 3 bindings for Berkeley DB
https://bugzilla.redhat.com/show_bug.cgi?id=1663442
--------------------------------------------------------------------------------
================================================================================
python-service-identity-16.0.0-11.el7 (FEDORA-EPEL-2019-cc94262b2a)
Service identity verification for pyOpenSSL
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
rust-1.31.1-9.el7 (FEDORA-EPEL-2019-a2a585f283)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
[Rust
1.31.1](https://blog.rust-lang.org/2018/12/20/Rust-1.31.1.html) fixes a
few issues in RLS.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Josh Stone <jistone(a)redhat.com> - 1.31.1-9
- Update to 1.31.1 for RLS fixes.
--------------------------------------------------------------------------------