The following Fedora EPEL 7 Security updates need testing:
Age URL
59
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
54
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d2e0971e9b
uwsgi-2.0.17.1-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f19460105c
pam_yubico-2.26-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5b5c4b0050
rust-1.27.2-3.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e9a8615099
mbedtls-2.7.5-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-52b5b56d0a
seamonkey-2.49.4-2.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5346e2123a
dpkg-1.18.25-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4f0963b857
moodle-3.1.13-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f5e90bb2b
libmspack-0.7-0.1.alpha.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7b6fa936b1
knot-resolver-2.4.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-38987c542e
cgit-1.1-11.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aec074825a
thunderbird-enigmail-2.0.8-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0be0127779
libgit2-0.26.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
js-jsroot-5.5.0-1.el7
libmodulemd-1.6.2-1.el7
python-moksha-hub-1.5.12-1.el7
python-pluginlib-0.6.1-1.el7
ravada-0.3.0-0.6.beta6.el7
root-6.14.02-1.el7
singularity-2.6.0-1.1.el7
spectre-meltdown-checker-0.38-1.el7
Details about builds:
================================================================================
js-jsroot-5.5.0-1.el7 (FEDORA-EPEL-2018-ea6d93938d)
JavaScript ROOT - Interactive numerical data analysis graphics
--------------------------------------------------------------------------------
Update Information:
*
https://root.cern.ch/doc/v614/release-notes.html#release-6.1402 *
https://github.com/root-project/jsroot/releases/tag/5.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 20 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.5.0-1
- Update to version 5.5.0
- Change dependency to js-jquery since js-jquery2 is orphaned
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1586022 - ROOTConfig-targets.cmake need to be adopted to the actually
installed root packages.
https://bugzilla.redhat.com/show_bug.cgi?id=1586022
--------------------------------------------------------------------------------
================================================================================
libmodulemd-1.6.2-1.el7 (FEDORA-EPEL-2018-b0e421ca89)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Make buildorder a signed integer to match the modulemd specification
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1.6.2-1
- Update to 1.6.2
- Make buildorder a signed integer to match modulemd specification
* Mon Jul 23 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1.6.1-2
- Obsolete unsupported pythonX-modulemd packages
--------------------------------------------------------------------------------
================================================================================
python-moksha-hub-1.5.12-1.el7 (FEDORA-EPEL-2018-9b0f7829d9)
Hub components for Moksha
--------------------------------------------------------------------------------
Update Information:
Hub shuts down now on errors from a STOMP broker. ---- Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.12-1
- new version
* Thu Aug 2 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.11-1
- new version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jun 18 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5.10-2
- Rebuilt for Python 3.7
* Mon Jun 18 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.10-1
- new version
--------------------------------------------------------------------------------
================================================================================
python-pluginlib-0.6.1-1.el7 (FEDORA-EPEL-2018-437510cf18)
A framework for creating and importing plugins in Python
--------------------------------------------------------------------------------
Update Information:
0.6.1 Release ---- EL6 build requirements should only apply to Python 2 ----
Change with_pythonX to use bcond_with(out)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607543 - Review Request: python-pluginlib - A framework for creating and
importing plugins in Python
https://bugzilla.redhat.com/show_bug.cgi?id=1607543
--------------------------------------------------------------------------------
================================================================================
ravada-0.3.0-0.6.beta6.el7 (FEDORA-EPEL-2018-bea042947c)
Remote Virtual Desktops Manager
--------------------------------------------------------------------------------
Update Information:
Remove vmport in templates, which is not supported in EPEL qemu ---- Fix qemu-
kvm path for EPEL ---- Fix _unique_uuid call ---- Fix SQL for MariaDB 5.5
---- Add a patch for compatibility with Perl 5.16 ---- Pre-release 0.3.0
beta6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.6.beta6
- Remove vmport in templates, which is not supported in EPEL qemu
* Sun Aug 5 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.5.beta6
- Fix qemu-kvm path for EPEL
* Sat Aug 4 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.4.beta6
- Fix _unique_uuid call
* Thu Aug 2 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.3.beta6
- Fix SQL for MariaDB 5.5
* Wed Aug 1 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.2.beta6
- Add a patch for compatibility with Perl 5.16
* Fri Jul 27 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.1.beta6
- Pre-release 0.3.0 beta6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610588 - ravada post-install setup missing some dependencies:
https://bugzilla.redhat.com/show_bug.cgi?id=1610588
[ 2 ] Bug #1609338 - RFE - Please provide update to Ravada Ravada 0.3.0-rc1
https://bugzilla.redhat.com/show_bug.cgi?id=1609338
--------------------------------------------------------------------------------
================================================================================
root-6.14.02-1.el7 (FEDORA-EPEL-2018-ea6d93938d)
Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:
*
https://root.cern.ch/doc/v614/release-notes.html#release-6.1402 *
https://github.com/root-project/jsroot/releases/tag/5.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 6 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.02-1
- Update to 6.14.02
- Make python3 the preferred python for Fedora 29+:
- Give python3 libPyROOT higher priority than python2 libPyROOT
- The python scripts in root-cli use python3-root
- Let root-tmva-python use python3-numpy
- Fix build issue with undefined symbols in libSrvAuth
- Make ROOTConfig-targets.cmake not error on missing files to work better with
subpackages
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.14.00-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1586022 - ROOTConfig-targets.cmake need to be adopted to the actually
installed root packages.
https://bugzilla.redhat.com/show_bug.cgi?id=1586022
--------------------------------------------------------------------------------
================================================================================
singularity-2.6.0-1.1.el7 (FEDORA-EPEL-2018-c189fbeea1)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Update to released upstream 2.6.0. Includes the underlay option (pr #1817),
enables python3 by default (pr #1818), and enables docker:// and shub:// URLs to
work in the singularity-runtime subpackage (pr #1819). ---- Updates to
upstream 2.6.0-rc2, internal version 2.5.999. Disables underlay feature by
default. Adds upstream PR #1324 which makes docker:// and shub:// work with
just singularity-runtime package. Fixes python3 dependencies. ---- Update to
upstream 2.5.99, which is tagged as 2.6.0-rc1. Get python3 patch from PR #1762
instead of custom defined. Move /usr/bin/python3 BuildRequires to singularity-
runtime subpackage. Apply PR #1638, which adds the underlay feature.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.6.0-1.1
- Update to released upstream 2.6.0
- Rename PR 1638 to 1817
- Rename PR 1762 to 1818
- Note that PR 1324 was also renamed, to 1819
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.4
- Move the Requires /usr/bin/python3 to be under %package runtime instead
of under its %description.
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.3
- Move the BuildRequires /usr/bin/python3 back to the primary package,
because otherwise it doesn't get installed at build time. Leave
the Requires on the runtime subpackage.
- Add singularity.abignore to avoid warnings from abipkgdiff.
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.2
- Add PR #1324 which makes the docker:// and shub:// URLs work with only
the runtime subpackage. All the changes are to this file so it does
not add a patch. Moves python files to the runtime subpackage, so the
BuildRequires & Requires /usr/bin/python3 go back there as well.
- Improve the underlay option comment in singularity.conf as found in
the current version of PR #1638.
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.1
- Update to upstream 2.5.999, which is tagged as 2.6.0-rc2.
- Disable the underlay feature by default
- Move the BuildRequires: /usr/bin/python3 back to the singularity package
because there is no python in singularity-runtime.
- Add an additional Requires: /usr/bin/python3 for install time.
* Mon Jul 16 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.99-1.1
- Update to upstream 2.5.99, which is tagged as 2.6.0-rc1.
- Switch to using internally defined require_python3, which is true unless
%{osg} is defined, to decide whether or not to require python3.
- Get python3 patch from PR #1762 instead of custom defined.
- Move /usr/bin/python3 BuildRequires to singularity-runtime subpackage.
- Apply PR #1638, which adds the underlay feature.
- Only require python3 if macro defined
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1600319 - singularity-2.6.0-rc2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1600319
[ 2 ] Bug #1762 - screen and Gnome-Terminal
https://bugzilla.redhat.com/show_bug.cgi?id=1762
[ 3 ] Bug #1638 - text editors on starbuck rescue disks don't work
https://bugzilla.redhat.com/show_bug.cgi?id=1638
--------------------------------------------------------------------------------
================================================================================
spectre-meltdown-checker-0.38-1.el7 (FEDORA-EPEL-2018-6ccb89d827)
Spectre & Meltdown vulnerability/mitigation checker for Linux
--------------------------------------------------------------------------------
Update Information:
* Feature: support detection for Variant 3a (CVE-2018-3640) and Variant 4
(CVE-2018-3639) * Feature: add Spectre v1 mitigation detection for ARM 32 bits *
Feature: add Cavium CPU support and correct vulnerability information * Feature:
add guess for kernel image location on Raspberry Pi 3 * Feature: ability to run
the script inside a Docker container * Change: omit explanations by default to
avoid cluttering the output, use `--explain` to get detailed mitigation help *
Enhancement: explain mode: suggest to set VM CPU to an IBRS-capable one for
hypervisors * Enhancement: avoid use of `iflag=skip_bytes` for compat with old
`dd` versions * Fix: no longer unload msr or cpuid modules on exit if they were
loaded before we started * Fix: when we can't determine if IBRS is enabled or
not, report it as NO instead of UNKNOWN when we know that the CPU can't support
it * Fix: variant2: detection now works under SLES kernels * Fix: ARM: update
vulnerability info to latest vendor statement * Fix: ARM: ARMv8 models under
Cortex A57 correctly marked as non-vulnerable (also fixes Raspberry Pi 3) * Fix:
prometheus output wouldn't format `\n` correctly under some systems
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Reto Gantenbein <reto.gantenbein(a)linuxmonk.ch> - 0.38-1
- Update to 0.38
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.37-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------