The following Fedora EPEL 7 Security updates need testing:
Age URL
554
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
296
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
294
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-bf56589e5c
mbedtls-2.7.13-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-bee5eeedf0
cacti-1.2.9-1.el7 cacti-spine-1.2.9-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-88a247cda8
python3-virtualenv-15.1.0-5.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fb7ac4aee2
hiredis-0.12.1-2.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-99abadf4df
python-psutil-5.6.7-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b1046cc65d
python-colander-1.7.0-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ccache-3.7.7-1.el7
clamav-unofficial-sigs-7.0.1-4.el7
dkms-2.8.1-4.20200214git5ca628c.el7
ipmctl-01.00.00.3474-2.el7
kea-1.6.0-4.el7
ocsinventory-agent-2.6.0-5.el7
python-kubernetes-10.0.1-2.el7
python-openshift-0.10.2-1.el7
Details about builds:
================================================================================
ccache-3.7.7-1.el7 (FEDORA-EPEL-2020-c4f0bb254f)
C/C++ compiler cache
--------------------------------------------------------------------------------
Update Information:
- Fixed a bug related to object file location in the dependency file (if
using -MD or -MMD but not -MF and the build directory is not the same as the
source directory then the object file location in the .d file would become
incorrect). This fixes regression in ccache 3.7.5 introduced by the bug fix
related to EDG-based compilers. Note that this removes support for EDG-based
compilers again. (A better fix for this is planned for ccache 4.0.) - Removed
the unify mode since it has bugs and shortcomings that are non-trivial or
impossible to fix: it doesn���t work with the direct mode, it doesn���t handle C++
raw strings correctly, it can give false cache hits for .incbin directives, it���s
turned off when using -g and it can make line numbers in warning messages and
__LINE__ macros incorrect. - mtime and ctime values are now stored in the
manifest files only when sloppy_file_stat is set. This avoids adding superfluous
manifest file entries on direct mode cache misses. - A ���Result:��� line is now
always printed to the log. - The ���cache miss��� statistics counter will now be
updated for read-only cache misses, making it consistent with the cache hit
case.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 18 2020 Orion Poplawski <orion(a)nwra.com> - 3.7.7-1
- Update to 3.7.7
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1773374 - ccache-3.7.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1773374
--------------------------------------------------------------------------------
================================================================================
clamav-unofficial-sigs-7.0.1-4.el7 (FEDORA-EPEL-2020-eadb6a0d1a)
Scripts to download unofficial clamav signatures
--------------------------------------------------------------------------------
Update Information:
Set cron script as configuration file.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 19 2020 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 7.0.1-4
- Backslash percent character in cron script
* Thu Feb 13 2020 J��n ONDREJ (SAL) <ondrejj(at)salstar.sk> - 7.0.1-3
- Make cron script as config(noreplace) (bz#1786860)
- Implement random delay before running update script from cron
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1786860 - Installs both cron job and systemd timer
https://bugzilla.redhat.com/show_bug.cgi?id=1786860
--------------------------------------------------------------------------------
================================================================================
dkms-2.8.1-4.20200214git5ca628c.el7 (FEDORA-EPEL-2020-34c412d66a)
Dynamic Kernel Module Support Framework
--------------------------------------------------------------------------------
Update Information:
Change mode to 755 for new install.d script. ---- Update to latest snapshot.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 19 2020 Martin Jackson <mhjacks(a)swbell.net> - 2.8.1-4.20200214git5ca628c
- Change mode to 755 for new install.d script.
* Sat Feb 15 2020 Simone Caronni <negativo17(a)gmail.com> -
2.8.1-3.20200214git5ca628c
- Update to latest snapshot.
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sun Dec 1 2019 Simone Caronni <negativo17(a)gmail.com> - 2.8.1-1
- Update to 2.8.1.
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1753044 - DKMS unnecessarily dependent on grubby
https://bugzilla.redhat.com/show_bug.cgi?id=1753044
--------------------------------------------------------------------------------
================================================================================
ipmctl-01.00.00.3474-2.el7 (FEDORA-EPEL-2020-aef17a784a)
Utility for managing Intel Optane DC persistent memory modules
--------------------------------------------------------------------------------
Update Information:
Conflict rather than obsoleting RHEL packages
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 19 2020 Juston Li <juston.li(a)intel.com> - 01.00.00.3474-2
- Change all packages to conflict with RHEL ixpdimm packages
RHBZ#1763820
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763820 - ipmctl obsoletes ixpdimm-cli which is rhel7 package
https://bugzilla.redhat.com/show_bug.cgi?id=1763820
--------------------------------------------------------------------------------
================================================================================
kea-1.6.0-4.el7 (FEDORA-EPEL-2020-5f252e8e10)
DHCPv4, DHCPv6 and DDNS server from ISC
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-6472 CVE-2019-6473 CVE-2019-6474
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Sep 11 2019 Kenneth Topp <toppk(a)bllue.org> - 1.6.0-1
- update to 1.6.0
- includes fixes for CVE-2019-6472, CVE-2019-6473 and CVE-2019-6474
* Tue Jul 30 2019 Pavel Zhukov <pzhukov(a)redhat.com> - 1.5.0-8
- Do not specify openssl version
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed May 22 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 1.5.0-4
- Update to 1.3.0 release version
- fix PID file path in service files
- clean up spec file
- switched to openssl-devel, now builds with openssl 1.1
- install systemd units manually instead of patching the souce to do it
- enable kea-shell
- add boost patch
- add kea-ctrl-agent unit
- change postgresql-devel to postgresql-server-devel
- update to 1.4.0
* Sun Dec 16 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.5.0-3
- Update to released version
* Tue Dec 11 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.5.0-beta2.2.el7
- Do not require -connectors on RHEL
* Tue Dec 4 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.5.0-beta2.1.el7
- update to beta2
* Tue Nov 20 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.5.0-2
- Update to 1.5.0 beta
* Mon Aug 27 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.3.0-12
- Disable tests again.
* Mon Aug 27 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.3.0-11
- Do not use compat verion of openssl
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu May 17 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.3.0-9
- Fix config files names (#1579298)
* Mon Feb 19 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 1.3.0-8
- Add gcc-c++ BR
* Wed Feb 14 2018 Pavel Zhukov <landgraf(a)fedoraproject.org> - 1.3.0-7
- Package released version (#1545096)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 31 2018 Pavel Zhukov <landgraf(a)fedoraproject.org> - 1.3.0-4
- Fix build with boost 1.66 (#1540331)
* Thu Nov 2 2017 Pavel Zhukov <pzhukov(a)redhat.com> - 1.3.0-3
- Add openssl-devel requires
- Do not force pkgconfig(openssl) version
* Mon Oct 23 2017 Pavel Zhukov <pzhukov(a)redhat.com> - 1.2.0-8
- Require openssl102
* Sun Oct 22 2017 Pavel Zhukov <pzhukov(a)redhat.com> - 1.2.0-7
- Rebuild with new openssl
* Thu Oct 12 2017 Pavel Zhukov <pzhukov(a)redhat.com> - 1.2.0-6
- Use mariadb-connector-c-devel instead of mysql-devel (#1493628)
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon Jul 3 2017 Jonathan Wakely <jwakely(a)redhat.com> - 1.2.0-3
- Rebuilt for Boost 1.64
* Fri May 26 2017 Pavel Zhukov <landgraf(a)fedoraproject.org> - 1.2.0-2
- New release 1.2.0 (#1440348)
* Tue Apr 4 2017 Pavel Zhukov <landgraf(a)fedoraproject.org> - 1.1.0-3
- Add patch for OpenSSL 1.1. Fix FTBFS (#1423812)
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1801656 - CVE-2019-6474 kea: ncoming client requests can lead to server
restart
https://bugzilla.redhat.com/show_bug.cgi?id=1801656
[ 2 ] Bug #1801653 - CVE-2019-6473 kea: packed containing a malformed code causing
assertion failure
https://bugzilla.redhat.com/show_bug.cgi?id=1801653
[ 3 ] Bug #1801642 - CVE-2019-6472 kea: packet containing a malformed DUID
https://bugzilla.redhat.com/show_bug.cgi?id=1801642
--------------------------------------------------------------------------------
================================================================================
ocsinventory-agent-2.6.0-5.el7 (FEDORA-EPEL-2020-6ab8f3e452)
Open Computer and Software Inventory Next Generation client
--------------------------------------------------------------------------------
Update Information:
Add simple support for folks requiring http proxy settings.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.0-5
- Add OCSPROXYSERVER for http/s proxys
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.0-4.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-kubernetes-10.0.1-2.el7 (FEDORA-EPEL-2020-fb72e5b154)
Python client for the kubernetes API.
--------------------------------------------------------------------------------
Update Information:
Build fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
- Work around BZ1758141 for BZ1799937
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1799937 - python-kubernetes: FTBFS in Fedora rawhide/f32
https://bugzilla.redhat.com/show_bug.cgi?id=1799937
--------------------------------------------------------------------------------
================================================================================
python-openshift-0.10.2-1.el7 (FEDORA-EPEL-2020-dc203cadca)
Python client for the OpenShift API
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 19 2020 Jason Montleon <jmontleo(a)redhat.com> 1:0.10.2-1
- Update to 0.10.2
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.10.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1784339 - python-openshift-0.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1784339
--------------------------------------------------------------------------------