The following Fedora EPEL 7 Security updates need testing:
Age URL
73
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
67
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
41
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d2e0971e9b
uwsgi-2.0.17.1-1.el7
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
23
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5346e2123a
dpkg-1.18.25-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0be0127779
libgit2-0.26.6-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-33f460bd9c
moodle-3.1.13-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dce803ff0d
lighttpd-1.4.50-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-69993b3f45
sleuthkit-4.6.2-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-6f182ddbf7
python34-3.4.9-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
adobe-source-code-pro-fonts-2.030.1.050-5.el7
fedpkg-1.35-1.el7
rpkg-1.56-1.el7
yubico-piv-tool-1.6.1-1.el7
Details about builds:
================================================================================
adobe-source-code-pro-fonts-2.030.1.050-5.el7 (FEDORA-EPEL-2018-20d41c4ad6)
A set of mono-spaced OpenType fonts designed for coding environments
--------------------------------------------------------------------------------
Update Information:
Align with Fedora releases.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.030.1.050-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.030.1.050-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.030.1.050-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.030.1.050-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Sat Jul 23 2016 Michael Kuhn <suraia(a)ikkoku.de> - 2.030.1.050-1
- Update to roman fonts 2.030 and italic fonts 1.050
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.010.1.030-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.35-1.el7 (FEDORA-EPEL-2018-b9c5bded6e)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
rpkg:
https://docs.pagure.org/rpkg/releases/1.56.html fedpkg:
https://docs.pagure.org/fedpkg/releases/1.35.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 21 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.35-1
- Reserve last bodhi template on error - rhbz#1467897 (cqi)
- New command releases-info - #247 (cqi)
- Fix a test for request-repo command (cqi)
- New option to request a repo without an initial commit - #215 (cqi)
- Add --shell to bash completion for mockbuild (cqi)
- Greenwave conf and support for gating validation (gnaponie)
- Allow to create update directly with CLI options - #93 rhbz#1007157 (cqi)
- Add more tests for utils (cqi)
- Rewrite method to create bodhi update - rhbz#1492480 (cqi)
- Mock fedora.client.OpenIdBaseClient._load_cookies (cqi)
- Do not use configparser.SafeConfigParser in tests (cqi)
- Fix test_retire to use unittest2 in el6 (cqi)
- Submit builds from stream branch (cqi)
- The create new project is not needed for packager (pingou)
- Add py37 testenv (cqi)
- Set PYCURL_SSL_LIBRARY directly for installing pycurl (cqi)
- Fix flake8 errors and typo in tests (cqi)
- Add tests for some commands (cqi)
- Add tests for utils.py (cqi)
- Convert test case for utils.py as normal test case (cqi)
- Add some tests for BugzillaClient (cqi)
- Fix TypeError raised from override create command - #256 (cqi)
- Add missing command and options in bash completion (cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438685 - Add --shell to the rhpkg command
https://bugzilla.redhat.com/show_bug.cgi?id=1438685
[ 2 ] Bug #1583822 - fedpkg shouldn't assemble the rpm in ~/rpmbuild/BUILDROOT/
https://bugzilla.redhat.com/show_bug.cgi?id=1583822
[ 3 ] Bug #1492480 - fedpkg update without type has cryptic error message
https://bugzilla.redhat.com/show_bug.cgi?id=1492480
[ 4 ] Bug #1007157 - Allow bodhi command line options for fedpkg update
https://bugzilla.redhat.com/show_bug.cgi?id=1007157
[ 5 ] Bug #1467897 - fedpkg update throws my update text on error
https://bugzilla.redhat.com/show_bug.cgi?id=1467897
--------------------------------------------------------------------------------
================================================================================
rpkg-1.56-1.el7 (FEDORA-EPEL-2018-b9c5bded6e)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
rpkg:
https://docs.pagure.org/rpkg/releases/1.56.html fedpkg:
https://docs.pagure.org/fedpkg/releases/1.35.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 21 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.56-1
- Validate greenwave policy early in Commands.build (cqi)
- Refine error message for failure gating.yaml validation (cqi)
- explain mbs-manager exception handling (nils)
- test for missing mbs-manager with errno set (nils)
- catch errno == ENOENT if mbs-manager is missing (nils)
- add missing method docstring (nils)
- Show full error from MBS (lsedlar)
- Fix tests for greenwave policy validation (cqi)
- Add testenv for building docs (cqi)
- New option --buildrootdir - rhbz#1583822 (cqi)
- Add --shell option to mockbuild - rhbz#1438685 (cqi)
- Validate gating.yaml file for Greenwave gating (gnaponie)
- Update README (cqi)
- Reduce the number of repo creation for tests (cqi)
- Fix flake8 error (cqi)
- Drop rpm-py-installer from requires - #357 (cqi)
- Allow _run_command to capture and return output to stdout or stderr (cqi)
- Claim Python 3.7 in README and package classifiers (cqi)
- Fix a bad test teardown (otaylor)
- Refactor build command (cqi)
- Remove rpmfluff package (cqi)
- Set PYCURL_SSL_LIBRARY directly for installing pycurl (cqi)
- Add py37 testenv (cqi)
* Thu Jul 26 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.55-2
- Remove dependency python-rpmfluff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438685 - Add --shell to the rhpkg command
https://bugzilla.redhat.com/show_bug.cgi?id=1438685
[ 2 ] Bug #1583822 - fedpkg shouldn't assemble the rpm in ~/rpmbuild/BUILDROOT/
https://bugzilla.redhat.com/show_bug.cgi?id=1583822
[ 3 ] Bug #1492480 - fedpkg update without type has cryptic error message
https://bugzilla.redhat.com/show_bug.cgi?id=1492480
[ 4 ] Bug #1007157 - Allow bodhi command line options for fedpkg update
https://bugzilla.redhat.com/show_bug.cgi?id=1007157
[ 5 ] Bug #1467897 - fedpkg update throws my update text on error
https://bugzilla.redhat.com/show_bug.cgi?id=1467897
--------------------------------------------------------------------------------
================================================================================
yubico-piv-tool-1.6.1-1.el7 (FEDORA-EPEL-2018-8e10f21fa8)
Tool for interacting with the PIV applet on a YubiKey NEO
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-14779 CVE-2018-14780
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 21 2018 Jakub Jelen <jjelen(a)redhat.com> - 1.6.1-1
- New upstream bugfix release
* Wed Aug 8 2018 Jakub Jelen <jjelen(a)redhat.com> - 1.6.0-1
- New upstream release fixing YSA-2018-03 (#1613863)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1619709 - CVE-2018-14779 CVE-2018-14780 yubico-piv-tool: Unchecked Buffer in
libykpiv
https://bugzilla.redhat.com/show_bug.cgi?id=1619709
--------------------------------------------------------------------------------