The following Fedora EPEL 7 Security updates need testing:
Age URL
524
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
266
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
263
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9ffdf25269
python-django-1.11.27-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12cd208593
gnulib-0-31.20200107git.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-de388d4fd0
chromium-79.0.3945.117-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-35e87bab10
perl-Clipboard-0.21-1.el7.1
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a062204588
rubygem-rack-1.6.12-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-87fd65eed3
python3-pillow-6.2.2-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-345003feba
thunderbird-enigmail-2.1.5-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-348d34c4c6
elog-3.1.4-1.20190113git283534d97d5a.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-807cf11068
upx-3.95-5.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a16a109471
links-2.20.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.9.3-1.el7
koji-1.20.0-1.el7
pspg-2.6.6-1.el7
python-pip-epel-8.1.2-11.el7
Details about builds:
================================================================================
ansible-2.9.3-1.el7 (FEDORA-EPEL-2020-43a3a1207a)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to upstream security and bugfix release. See
https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v...
for complete changelog.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 20 2020 Kevin Fenzi <kevin(a)scrye.com> - 2.9.3-1
- Update to 2.9.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775633 - CVE-2019-14856 ansible: Incomplete fix for CVE-2019-10206 [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1775633
[ 2 ] Bug #1777693 - CVE-2019-14905 ansible: malicious code could craft filename in
nxos_file_copy module [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1777693
[ 3 ] Bug #1777690 - CVE-2019-14904 ansible: vulnerability in solaris_zone module via
crafted solaris zone [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1777690
--------------------------------------------------------------------------------
================================================================================
koji-1.20.0-1.el7 (FEDORA-EPEL-2020-8314d6faa2)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.20.0 upstream bugfix release. See
https://docs.pagure.org/koji/release_notes/release_notes_1.20/ for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 20 2020 Kevin Fenzi <kevin(a)scrye.com> - 1.20.0-1
- Update to 1.20.0.
* Wed Nov 27 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.19.1-2
- Add Requires to koji builder on python3-pycdio/pycdio. Fixes bug #1775536
--------------------------------------------------------------------------------
================================================================================
pspg-2.6.6-1.el7 (FEDORA-EPEL-2020-a45a4b1c28)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release 1790709 - Fix of drawing vertical cursor on last column
when border is 0 or 1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 20 2020 Pavel Raiskup <praiskup(a)redhat.com> - 2.6.6-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/2.6.5
https://github.com/okbob/pspg/releases/tag/2.6.6
- Fix of drawing vertical cursor on last column when border is 0 or 1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1790709 - pspg-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1790709
--------------------------------------------------------------------------------
================================================================================
python-pip-epel-8.1.2-11.el7 (FEDORA-EPEL-2020-d60f779676)
A tool for installing and managing Python packages
--------------------------------------------------------------------------------
Update Information:
Add two new patches for CVEs in bundled urllib3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 13 2020 Lum��r Balhar <lbalhar(a)redhat.com> - 8.1.2-11
- Add two new patches for CVEs in bundled urllib3
Resolves: rhbz#1649153
Resolves: rhbz#1700824
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774427 - CVE-2018-20060 python-pip-epel: python-urllib3: Cross-host redirect
does not remove Authorization header allow for credential exposure [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1774427
[ 2 ] Bug #1775365 - CVE-2019-11236 python-pip-epel: python-urllib3: CRLF injection due
to not encoding the '\r\n' sequence leading to possible attack on internal service
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1775365
--------------------------------------------------------------------------------