The following Fedora EPEL 7 Security updates need testing:
Age URL
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-01179f6b9f
suricata-4.1.9-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6c7b4cbec
tcpreplay-4.3.3-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
bitlbee-facebook-1.2.1-1.el7
lout-3.40-18.el7
nwchem-7.0.2-1.el7
perl-Test-Net-LDAP-0.07-2.el7
Details about builds:
================================================================================
bitlbee-facebook-1.2.1-1.el7 (FEDORA-EPEL-2020-e605817723)
Facebook protocol plugin for BitlBee
--------------------------------------------------------------------------------
Update Information:
bitlbee-facebook 1.2.1 ====================== * Fix "Parse error: unexpected
identifier 'taNewMessage'" * Fix "Failed to read thrift:
facebook-api.c:1929
fb_api_cb_publish_pt: assertion 'fb_thrift_read_stop(thft)' failed"
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 22 2020 Robert Scheck <robert(a)fedoraproject.org> 1.2.1-1
- Upgrade to 1.2.1 (#1889850)
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889850 - bitlbee-facebook-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889850
--------------------------------------------------------------------------------
================================================================================
lout-3.40-18.el7 (FEDORA-EPEL-2020-284f18e5de)
A document formatting system
--------------------------------------------------------------------------------
Update Information:
Add lout-3.40-cve.patch from
https://lists.nongnu.org/archive/html/lout-
users/2020-10/msg00013.html fixing rhbz#1787383 and rhbz#1787386
(CVE-2019-19918 and CVE-2019-19917), two buffer overflows.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 23 2020 Mat��j Cepl <mcepl(a)cepl.eu> - 3.40-18
- Add lout-3.40-cve.patch from
https://lists.nongnu.org/archive/html/lout-users/2020-10/msg00013.html
fixing rhbz#1787383 and rhbz#1787386 (CVE-2019-19918 and
CVE-2019-19917), two buffer overflows.
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-12
- Fix rpmlint issues.
* Mon Feb 19 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-11
- Add BuildRequires gcc per new PG.
- Fix FSF addresses (actually, remove them as the upstream does).
* Thu Feb 8 2018 Mat��j Cepl <mcepl(a)redhat.com> - 3.40-10
- Remove Group, it has been unnecessary since RHEL-6.
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.40-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1787384 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1787384
[ 2 ] Bug #1787385 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1787385
[ 3 ] Bug #1787386 - CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1787386
[ 4 ] Bug #1787389 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1787389
[ 5 ] Bug #1787390 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1787390
[ 6 ] Bug #1787391 - CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1787391
--------------------------------------------------------------------------------
================================================================================
nwchem-7.0.2-1.el7 (FEDORA-EPEL-2020-a0b3e41049)
Delivering High-Performance Computational Chemistry to Science
--------------------------------------------------------------------------------
Update Information:
Set OMP_NUM_THREADS=1
https://github.com/edoapra/fedpkg/issues/10#issuecomment-699276160
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 19 2020 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 7.0.2-2
- Set OMP_NUM_THREADS=1
https://github.com/edoapra/fedpkg/issues/10#issuecomment-699276160
- Fix hostname br for el6
* Thu Oct 15 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.2-1
- new 7.0.2 release
* Fri Aug 28 2020 I��aki ��car <iucar(a)fedoraproject.org> - 7.0.0-11
-
https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 7.0.0-9
- Rebuilt for Python 3.9
* Thu Apr 2 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 7.0.0-8
- Fix string quoting for rpm >= 4.16
* Sat Mar 28 2020 Edoardo Apr�� <edoardo.apra(a)gmail.com> - 7.0.0-7
- nproc=1 for mpich/ppc64le
--------------------------------------------------------------------------------
================================================================================
perl-Test-Net-LDAP-0.07-2.el7 (FEDORA-EPEL-2020-6d9d0fa351)
Net::LDAP subclass for testing
--------------------------------------------------------------------------------
Update Information:
First build
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------