The following Fedora EPEL 7 Security updates need testing:
Age URL
182
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
133
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
116
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2206653eb9
python-django-1.11.13-4.el7 python-django16-1.6.11.7-5.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cf66ab47c5
dnsdist-1.3.3-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a4f72b6533
cobbler-2.8.4-4.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bffc0108f2
pdns-recursor-4.1.8-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0e5a2a81f
wildmidi-0.3.15-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0346a55d0f
nagios-4.4.2-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
HepMC-2.06.09-22.el7
caribou0-0.4.21-12.el7
cproto-4.7o-1.el7
geolite2-20181204-1.el7
libburn1-1.5.0-1.el7
libisoburn-1.5.0-1.el7
libisofs1-1.5.0-1.el7
mbedtls-2.7.8-1.el7
rust-1.31.0-8.el7
vile-9.8t-1.el7
Details about builds:
================================================================================
HepMC-2.06.09-22.el7 (FEDORA-EPEL-2018-af9ddc850d)
C++ Event Record for Monte Carlo Generators
--------------------------------------------------------------------------------
Update Information:
Fix segmentation fault.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 8 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.06.09-22
- Fix a segmentation fault (continue vs. break)
* Mon Jul 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.06.09-21
- Add BuildRequires on gcc-c++
- Packaging updates
- Remove Group and BuildRoot tags
- Don't clear the buildroot in the install section
- Remove the clean section
- Install license in licensedir (where applicable)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Oct 7 2016 Dan Hor��k <dan[at]danny.cz> - 2.06.09-15
- disable FMA on s390(x)
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Sep 17 2015 Marcin Juszkiewicz <mjuszkiewicz(a)redhat.com> - 2.06.09-13
- disable FMA on both aarch64 and ppc64(le) to pass all tests
* Thu Sep 3 2015 Marcin Juszkiewicz <mjuszkiewicz(a)redhat.com> - 2.06.09-12
- disable -fexpensive-optimizations for aarch64 to get it build
* Tue Jun 16 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.06.09-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 2.06.09-10
- Rebuilt for GCC 5 C++11 ABI change
--------------------------------------------------------------------------------
================================================================================
caribou0-0.4.21-12.el7 (FEDORA-EPEL-2018-d0b563dc4a)
A simplified in-place on-screen keyboard
--------------------------------------------------------------------------------
Update Information:
Branch for EPEL7 from Fedora. Permits upgrade of RHEL7.6 systems with cinnamon-
desktop installed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1648981 - [RFE] EPEL7 branch of caribou
https://bugzilla.redhat.com/show_bug.cgi?id=1648981
[ 2 ] Bug #1651739 - Review Request: caribou EPEL7 - EPEL7 branch of caribou (cinnamon
prereq)
https://bugzilla.redhat.com/show_bug.cgi?id=1651739
--------------------------------------------------------------------------------
================================================================================
cproto-4.7o-1.el7 (FEDORA-EPEL-2018-b425bc4d4e)
Generates function prototypes and variable declarations from C code
--------------------------------------------------------------------------------
Update Information:
- new upstream release fixes rhbz #1655648
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1655648 - cproto-4.7o is available
https://bugzilla.redhat.com/show_bug.cgi?id=1655648
--------------------------------------------------------------------------------
================================================================================
geolite2-20181204-1.el7 (FEDORA-EPEL-2018-d320e6d4eb)
Free IP geolocation databases
--------------------------------------------------------------------------------
Update Information:
- Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 5 2018 Carl George <carl(a)george.computer> - 20181204-1
- Latest upstream
--------------------------------------------------------------------------------
================================================================================
libburn1-1.5.0-1.el7 (FEDORA-EPEL-2018-d2b18aa5f1)
Library for reading, mastering and writing optical discs
--------------------------------------------------------------------------------
Update Information:
libisofs 1.5.0 ============== * New API call iso_image_get_ignore_aclea(),
new iso_image_set_ignore_aclea() and iso_file_source_get_aa_string() flag bit3
to import all xattr namespaces * New API calls iso_image_was_blind_attrs(),
iso_local_set_attrs_errno(). * New flag bit7 with iso_local_set_attrs() to
avoid unnecessary write attempts. * New return value 2 of
IsoFileSource.get_aa_string() and iso_local_get_attrs(). * Now putting user
defined padding after appended partitions. * Bug fix: Add-on sessions with
partition offset claimed too many blocks as size. Regression of version 1.4.8.
* Bug fix: Long Joliet names without dot were mangled with one character too
many. Long Joliet names with leading dot were mangled one char too short. *
Bug fix: Reading beyond array end for HFS+ production caused SIGSEGV with
FreeBSD 11 CLANG -O2. Thanks ASX of GhostBSD. libburn 1.5.0 ============= *
Bug fix: cdrskin threw errno 22 on data file input if libburn is configured with
--enable-track-src-odirect * Bug fix: SIGSEGV could happen if a track ended by
reaching its fixed size while the track source still was willing to deliver
bytes. Thanks to user swordragon. * Bug fix: Device file comparison parameters
were recorded wrong with Linux sg libisoburn 1.5.0 ================ * Bug
fix: Multi-session emulation was not recognized with non-zero partition offset
* New bit10 of isoburn_drive_aquire() to accept all xattr namespaces * New
-xattr mode "any" to process all xattr namespaces of local filesystem * New
-as mkisofs option --xattr-any * New -as mkisofs options -uid and -gid
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 8 2018 Robert Scheck <robert(a)fedoraproject.org> 1.5.0-1
- Upgrade to 1.5.0
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Dec 1 2017 Merlin Mathesius <mmathesi(a)redhat.com> - 1.4.8-2
- Cleanup spec file conditionals
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1633872 - RPM installs "extract ISO-image" service menu for KDE4
but nothing for KDE 5
https://bugzilla.redhat.com/show_bug.cgi?id=1633872
--------------------------------------------------------------------------------
================================================================================
libisoburn-1.5.0-1.el7 (FEDORA-EPEL-2018-d2b18aa5f1)
Library to enable creation and expansion of ISO-9660 filesystems
--------------------------------------------------------------------------------
Update Information:
libisofs 1.5.0 ============== * New API call iso_image_get_ignore_aclea(),
new iso_image_set_ignore_aclea() and iso_file_source_get_aa_string() flag bit3
to import all xattr namespaces * New API calls iso_image_was_blind_attrs(),
iso_local_set_attrs_errno(). * New flag bit7 with iso_local_set_attrs() to
avoid unnecessary write attempts. * New return value 2 of
IsoFileSource.get_aa_string() and iso_local_get_attrs(). * Now putting user
defined padding after appended partitions. * Bug fix: Add-on sessions with
partition offset claimed too many blocks as size. Regression of version 1.4.8.
* Bug fix: Long Joliet names without dot were mangled with one character too
many. Long Joliet names with leading dot were mangled one char too short. *
Bug fix: Reading beyond array end for HFS+ production caused SIGSEGV with
FreeBSD 11 CLANG -O2. Thanks ASX of GhostBSD. libburn 1.5.0 ============= *
Bug fix: cdrskin threw errno 22 on data file input if libburn is configured with
--enable-track-src-odirect * Bug fix: SIGSEGV could happen if a track ended by
reaching its fixed size while the track source still was willing to deliver
bytes. Thanks to user swordragon. * Bug fix: Device file comparison parameters
were recorded wrong with Linux sg libisoburn 1.5.0 ================ * Bug
fix: Multi-session emulation was not recognized with non-zero partition offset
* New bit10 of isoburn_drive_aquire() to accept all xattr namespaces * New
-xattr mode "any" to process all xattr namespaces of local filesystem * New
-as mkisofs option --xattr-any * New -as mkisofs options -uid and -gid
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 8 2018 Robert Scheck <robert(a)fedoraproject.org> 1.5.0-1
- Upgrade to 1.5.0
- Provide KDE service menu entry for KDE 4 and 5 (#1633872)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1633872 - RPM installs "extract ISO-image" service menu for KDE4
but nothing for KDE 5
https://bugzilla.redhat.com/show_bug.cgi?id=1633872
--------------------------------------------------------------------------------
================================================================================
libisofs1-1.5.0-1.el7 (FEDORA-EPEL-2018-d2b18aa5f1)
Library to create ISO 9660 disk images
--------------------------------------------------------------------------------
Update Information:
libisofs 1.5.0 ============== * New API call iso_image_get_ignore_aclea(),
new iso_image_set_ignore_aclea() and iso_file_source_get_aa_string() flag bit3
to import all xattr namespaces * New API calls iso_image_was_blind_attrs(),
iso_local_set_attrs_errno(). * New flag bit7 with iso_local_set_attrs() to
avoid unnecessary write attempts. * New return value 2 of
IsoFileSource.get_aa_string() and iso_local_get_attrs(). * Now putting user
defined padding after appended partitions. * Bug fix: Add-on sessions with
partition offset claimed too many blocks as size. Regression of version 1.4.8.
* Bug fix: Long Joliet names without dot were mangled with one character too
many. Long Joliet names with leading dot were mangled one char too short. *
Bug fix: Reading beyond array end for HFS+ production caused SIGSEGV with
FreeBSD 11 CLANG -O2. Thanks ASX of GhostBSD. libburn 1.5.0 ============= *
Bug fix: cdrskin threw errno 22 on data file input if libburn is configured with
--enable-track-src-odirect * Bug fix: SIGSEGV could happen if a track ended by
reaching its fixed size while the track source still was willing to deliver
bytes. Thanks to user swordragon. * Bug fix: Device file comparison parameters
were recorded wrong with Linux sg libisoburn 1.5.0 ================ * Bug
fix: Multi-session emulation was not recognized with non-zero partition offset
* New bit10 of isoburn_drive_aquire() to accept all xattr namespaces * New
-xattr mode "any" to process all xattr namespaces of local filesystem * New
-as mkisofs option --xattr-any * New -as mkisofs options -uid and -gid
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 8 2018 Robert Scheck <robert(a)fedoraproject.org> 1.5.0-1
- Upgrade to 1.5.0
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Dec 1 2017 Merlin Mathesius <mmathesi(a)redhat.com> - 1.4.8-2
- Cleanup spec file conditionals
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1633872 - RPM installs "extract ISO-image" service menu for KDE4
but nothing for KDE 5
https://bugzilla.redhat.com/show_bug.cgi?id=1633872
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.7.8-1.el7 (FEDORA-EPEL-2018-f5e66c71c9)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.8 - CVE-2018-19608 (#1656785) Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released Security Advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-
advisory-2018-03 ---- - Update to 2.7.7 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.14.0-2.7.7-and-2.1.16-released
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 7 2018 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.8-1
- Update to 2.7.8
- CVE-2018-19608 (#1656785)
* Mon Dec 3 2018 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.7-1
- Update to 2.7.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1656785 - CVE-2018-19608 mbedtls: Local timing attack on RSA decryption
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1656785
--------------------------------------------------------------------------------
================================================================================
rust-1.31.0-8.el7 (FEDORA-EPEL-2018-c2c1096ab5)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and related tools, marking the start of Rust 2018 edition!
See the release notes for [1.31](https://blog.rust-
lang.org/2018/12/06/Rust-1.31-and-rust-2018.html). The subpackages for
`clippy`, `rls`, and `rustfmt` no longer have the "-preview" suffix, as these
tools were promoted with the 2018 edition.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2018 Josh Stone <jistone(a)redhat.com> - 1.31.0-8
- Update to 1.31.0 -- Rust 2018!
- clippy/rls/rustfmt are no longer -preview
--------------------------------------------------------------------------------
================================================================================
vile-9.8t-1.el7 (FEDORA-EPEL-2018-38851ab5f7)
VI Like Emacs
--------------------------------------------------------------------------------
Update Information:
- update vile to latest upstream version 9.8t - changelog
http://invisible-
island.net/vile/CHANGES.html#v9_8t
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 7 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 9.8t-1
- update to latest upstream 9.8t
- changelog
http://invisible-island.net/vile/CHANGES.html#v9_8t
* Thu Sep 13 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 9.8s-1
- rebuilt to latest upstream 9.8s
* Tue Jul 31 2018 Florian Weimer <fweimer(a)redhat.com> - 9.8r-9
- Rebuild with fixed binutils
* Sat Jul 28 2018 Mark McKinstry <mmckinst(a)umich.edu> - 9.8r-8
- add BuildRequires for gcc (RHBZ#1606646)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.8r-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 9.8r-6
- Remove obsolete scriptlets + spec modernization
* Sat Jan 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 9.8r-5
- Rebuilt for switch to libxcrypt
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.8r-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.8r-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.8r-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Jul 29 2016 Mark McKinstry <mmckinst(a)umich.edu> - 9.8r-1
- upgrade to 9.8r (RHBZ#1361436)
--------------------------------------------------------------------------------