The following Fedora EPEL 7 Security updates need testing:
Age URL
546
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
287
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
285
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4a1efc409a
pure-ftpd-1.0.47-3.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ebd7293594
python-pip-epel-8.1.2-12.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-453d58e60f
radare2-4.2.1-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-062fed623d
php-horde-Horde-Data-2.1.5-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-bf56589e5c
mbedtls-2.7.13-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-bee5eeedf0
cacti-1.2.9-1.el7 cacti-spine-1.2.9-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fleet-commander-client-0.15.0-2.el7
ncdu-1.14.2-1.el7
python3-virtualenv-15.1.0-5.el7
Details about builds:
================================================================================
fleet-commander-client-0.15.0-2.el7 (FEDORA-EPEL-2020-3ff4061ec0)
Fleet Commander Client
--------------------------------------------------------------------------------
Update Information:
Removal of python2 dependencies for Fedora
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 2 2020 Oliver Gutierrez <ogutierrez(a)redhat.com> - 0.15.0-2
- Removal of python2 dependencies for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1787238 - fleet-commander-client wrongly requires python2-gobject
https://bugzilla.redhat.com/show_bug.cgi?id=1787238
--------------------------------------------------------------------------------
================================================================================
ncdu-1.14.2-1.el7 (FEDORA-EPEL-2020-e68948e8bc)
Text-based disk usage viewer
--------------------------------------------------------------------------------
Update Information:
Update to new version 1.14.2. Changes in this version: * Fix minor display
issue when scanning 10M+ files * Slightly reduce memory usage for hard link
detection
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 11 2020 Richard Fearn <richardfearn(a)gmail.com> - 1.14.2-1
- Update to new upstream version 1.14.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1801316 - ncdu-1.14.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1801316
--------------------------------------------------------------------------------
================================================================================
python3-virtualenv-15.1.0-5.el7 (FEDORA-EPEL-2020-88a247cda8)
Tool to create isolated Python environments
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2018-20060 and CVE-2019-11236 in bundled urllib3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 14 2020 Lum��r Balhar <lbalhar(a)redhat.com> - 15.1.0-3
- Add two new patches for CVEs in bundled urllib3
Resolves: rhbz#1649153
Resolves: rhbz#1700824
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1649153 - CVE-2018-20060 python-urllib3: Cross-host redirect does not remove
Authorization header allow for credential exposure
https://bugzilla.redhat.com/show_bug.cgi?id=1649153
[ 2 ] Bug #1700824 - CVE-2019-11236 python-urllib3: CRLF injection due to not encoding
the '\r\n' sequence leading to possible attack on internal service
https://bugzilla.redhat.com/show_bug.cgi?id=1700824
--------------------------------------------------------------------------------