The following Fedora EPEL 7 Security updates need testing:
Age URL
529
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
270
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
268
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-87fd65eed3
python3-pillow-6.2.2-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-345003feba
thunderbird-enigmail-2.1.5-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-348d34c4c6
elog-3.1.4-1.20190113git283534d97d5a.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a16a109471
links-2.20.2-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d60f779676
python-pip-epel-8.1.2-11.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-43a3a1207a
ansible-2.9.3-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-751a496bfa
java-latest-openjdk-13.0.2.8-1.rolling.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa33fd16b3
chromium-79.0.3945.130-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
argparse-manpage-1.4-1.el7
clamav-unofficial-sigs-7.0-1.el7
python-regex-2020.1.8-1.el7
upx-3.96-1.el7
Details about builds:
================================================================================
argparse-manpage-1.4-1.el7 (FEDORA-EPEL-2020-1f3615270e)
Build manual page from Python ArgumentParser object
--------------------------------------------------------------------------------
Update Information:
new release to fix testsuite against Python 3.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 24 2020 Pavel Raiskup <praiskup(a)redhat.com> - 1.4-1
- new release to fix testsuite against Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1791757 - argparse-manpage fails to build with Python 3.9
https://bugzilla.redhat.com/show_bug.cgi?id=1791757
--------------------------------------------------------------------------------
================================================================================
clamav-unofficial-sigs-7.0-1.el7 (FEDORA-EPEL-2020-b86f54cbf1)
Scripts to download unofficial clamav signatures
--------------------------------------------------------------------------------
Update Information:
Update to upstream, fix version warnings (bz#1794506)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2020 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 7.0-1
- Update to upstream, fix version warnings (bz#1794506)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1794506 - New version : v6.3.0
https://bugzilla.redhat.com/show_bug.cgi?id=1794506
--------------------------------------------------------------------------------
================================================================================
python-regex-2020.1.8-1.el7 (FEDORA-EPEL-2020-3edea93bf0)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update regex to the latest released version.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.1.8-1
- Update to 2020.1.8.
--------------------------------------------------------------------------------
================================================================================
upx-3.96-1.el7 (FEDORA-EPEL-2020-6d47c64c04)
Ultimate Packer for eXecutables
--------------------------------------------------------------------------------
Update Information:
3.96, multiple security fixes. ---- Patch for CVE-2019-20021
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 24 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 3.96-1
- 3.96
* Fri Jan 17 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 3.95-5
- Upstream patch for CVE-2019-20021
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1792327 - CVE-2019-20021 upx: heap-based buffer overflow in canUnpack in
p_mach.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1792327
[ 2 ] Bug #1581264 - CVE-2018-11243 upx: Double-free in PackLinuxElf64::unpack in
p_lx_elf.cpp allows denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1581264
[ 3 ] Bug #1794720 - CVE-2019-20051 upx: floating point exception in
PackLinuxElf::elf_hash in p_lx_elf.cpp [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1794720
[ 4 ] Bug #1794722 - CVE-2019-20051 upx: floating point exception in
PackLinuxElf::elf_hash in p_lx_elf.cpp [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1794722
[ 5 ] Bug #1794721 - CVE-2019-20051 upx: floating point exception in
PackLinuxElf::elf_hash in p_lx_elf.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1794721
[ 6 ] Bug #1792328 - CVE-2019-20021 upx: heap-based buffer overflow in canUnpack in
p_mach.cpp [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1792328
[ 7 ] Bug #1581263 - CVE-2018-11243 upx: Double-free in PackLinuxElf64::unpack in
p_lx_elf.cpp allows denial of service [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1581263
[ 8 ] Bug #1792329 - CVE-2019-20021 upx: heap-based buffer overflow in canUnpack in
p_mach.cpp [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1792329
--------------------------------------------------------------------------------