The following Fedora EPEL 7 Security updates need testing:
Age URL
178
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
161
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
35
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6fa6cebc3
game-music-emu-0.6.2-1.el7
32
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b43fdd19c3
vcftools-0.1.16-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-4d365dad3c
gitolite3-3.6.11-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7c5121f71d
golang-1.11.4-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-a6100f3df6
nodejs-6.16.0-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d661b588d2
nagios-4.4.3-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-17b3c81533
cacti-1.2.0-1.el7 cacti-spine-1.2.0-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
flatpak-module-tools-0.9.1-1.el7
moodle-3.1.16-1.el7
python-pycxx-7.1.0-1.el7
python3-cups-1.9.74-3.el7
Details about builds:
================================================================================
flatpak-module-tools-0.9.1-1.el7 (FEDORA-EPEL-2019-a835ef79fc)
Tools for maintaining Flatpak applications and runtimes as Fedora modules
--------------------------------------------------------------------------------
Update Information:
Version 0.9.1 * Add a configuration system to allow profiles pointing at
different infrastructure * Bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 fedora-toolbox <otaylor(a)redhat.com> - 0.9.1-1
- Version 0.9.1 - bug fixes including systemd-nspawn compatibility
* Tue Jan 22 2019 Owen Taylor <otaylor(a)redhat.com> - 0.9-1
- Version 0.9 - configurability, fixes for F29 dnf compatibility
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.16-1.el7 (FEDORA-EPEL-2019-5d3da674fb)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Multiple CVE fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 3.1.16-1
- 3.1.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1668074 - CVE-2019-3810 moodle: User full name is not escaped in the
un-linked userpix page (MSA-19-0003) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668074
[ 2 ] Bug #1668068 - CVE-2019-3809 moodle: Blind SSRF Risk in /badges/mybackpack.php
(MSA-19-0002) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668068
[ 3 ] Bug #1668066 - CVE-2019-3808 moodle: Manage groups capability is missing XSS risk
flag (MSA-19-0001) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668066
[ 4 ] Bug #1668065 - CVE-2019-3808 moodle: Manage groups capability is missing XSS risk
flag (MSA-19-0001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668065
--------------------------------------------------------------------------------
================================================================================
python-pycxx-7.1.0-1.el7 (FEDORA-EPEL-2019-56ca034c68)
Write Python extensions in C++
--------------------------------------------------------------------------------
Update Information:
Update to 7.1.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Richard Shaw <hobbes1069(a)gmail.com> - 7.1.0-1
- Update to 7.1.0.
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 7.0.3-3
- Add Python 3.7 patch to add const
- Invoke python2 with python2, not python
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 7.0.3-2
- Rebuilt for Python 3.7
* Wed Apr 11 2018 Richard Shaw <hobbes1069(a)gmail.com> - 7.0.3-1
- Update to 7.0.3.
* Wed Apr 11 2018 Richard Shaw <hobbes1069(a)gmail.com> - 7.0.2-1
- Update to 7.0.2.
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.8-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Aug 19 2017 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 6.2.8-6
- Python 2 binary package renamed to python2-pycxx
See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.8-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Tue Dec 13 2016 Charalampos Stratakis <cstratak(a)redhat.com> - 6.2.8-3
- Rebuild for Python 3.6
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.2.8-2
-
https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_...
* Mon May 16 2016 Richard Shaw <hobbes1069(a)gmail.com> - 6.2.8-1
- Update to latest upstream release.
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> -
6.2.4-12.20130805svn280
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Tue Nov 10 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.2.4-11.20130805svn280
- Rebuilt for
https://fedoraproject.org/wiki/Changes/python3.5
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.2.4-10.20130805svn280
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.2.4-9.20130805svn280
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python3-cups-1.9.74-3.el7 (FEDORA-EPEL-2019-665f980b64)
Python 3 bindings for CUPS API, known as pycups
--------------------------------------------------------------------------------
Update Information:
This package provides Python 3 bindings for CUPS API, known as pycups. It was
written for use with system-config-printer, but can be put to other uses as
well.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1667278 - Review Request: python3-cups - Python 3 bindings for CUPS API,
known as pycups
https://bugzilla.redhat.com/show_bug.cgi?id=1667278
--------------------------------------------------------------------------------