The following Fedora EPEL 7 Security updates need testing:
Age URL
1090
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
853
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
435
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
332
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
164
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
101
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
nagios-4.3.4-5.el7
51
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65
rootsh-1.5.3-17.el7
25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1
jhead-3.00-7.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-276ec6ee2b
exim-4.90.1-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e50c94a832
seamonkey-2.49.2-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-525417d3d4
mbedtls-2.7.0-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cee77fc9b3
knot-resolver-2.1.0-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7a74678b1
openjpeg2-2.3.0-6.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-50566f0a39
uwsgi-2.0.16-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0296296d7c
mingw-wavpack-5.1.0-4.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9111777f91
freexl-1.0.5-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4
drupal7-7.57-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ProDy-1.9.4-0.1.el7
clamav-0.99.4-1.el7
tor-0.2.9.15-1.el7
Details about builds:
================================================================================
ProDy-1.9.4-0.1.el7 (FEDORA-EPEL-2018-aa1ae8a715)
Application for protein structure, dynamics and sequence analysis
--------------------------------------------------------------------------------
Update Information:
- Pre-release 1.9.4
--------------------------------------------------------------------------------
================================================================================
clamav-0.99.4-1.el7 (FEDORA-EPEL-2018-aacf1b47d6)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It
includes fixes for: - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423
- CVE-2018-1000085 There are also a few bug fixes that were not assigned
CVE���s, but were important enough to address while we had the chance. One of
these was the notorious file descriptor exhaustion bug that caused outages late
last January. In addition to the above, 0.99.4 fixes: - CVE-2018-0202: Two
newly reported vulnerabilities in the PDF parsing code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1549071 - CVE-2018-1000085 clamav: Out-of-bounds heap read in XAR parser
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549071
[ 2 ] Bug #1550747 - clamav-0.99.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1550747
--------------------------------------------------------------------------------
================================================================================
tor-0.2.9.15-1.el7 (FEDORA-EPEL-2018-815e0064e9)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
Update to latest version. Security-Fixes TROVE-2018-001, TROVE-2018-002,
--------------------------------------------------------------------------------