The following Fedora EPEL 7 Security updates need testing:
Age URL
387
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
163
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
129
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
127
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
63
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897
dosbox-0.74.3-2.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-dea2d705d0
python-mitogen-0.2.8-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ca3444781e
perl-SOAP-Lite-1.10-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-954cf3770a
seamonkey-2.49.5-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9bc2214140
nsd-4.2.2-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9166ad1315
cobbler-2.8.5-0.1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b4713b164c
chromium-76.0.3809.132-2.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-2dd8fb899e
wordpress-5.1.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
atop-2.4.0-4.el7
cacti-1.2.6-1.el7
cacti-spine-1.2.6-1.el7
dpkg-1.18.25-9.el7
inotify-tools-3.14-9.el7
libisds-0.11-1.el7
nodejs-codemirror-5.48.4-1.el7
openvpn-auth-ldap-2.0.3-17.el7
pspg-1.9.0-1.el7
singularity-3.4.0-1.2.el7
Details about builds:
================================================================================
atop-2.4.0-4.el7 (FEDORA-EPEL-2019-0573df4331)
An advanced interactive monitor to view the load on system and process level
--------------------------------------------------------------------------------
Update Information:
Ship atopacctd, and atopgpud(Fedora only) ---- Correct variable in sysconfig.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 2.4.0-4
- Package atopacctd.
* Wed Aug 28 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 2.4.0-3
- Fix LOGINTERVAL in sysconfig.
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1749429 - atopacctd is not included in the rpm
https://bugzilla.redhat.com/show_bug.cgi?id=1749429
[ 2 ] Bug #1746416 - atop configuration using incorrect INTERVAL variable
https://bugzilla.redhat.com/show_bug.cgi?id=1746416
--------------------------------------------------------------------------------
================================================================================
cacti-1.2.6-1.el7 (FEDORA-EPEL-2019-68a9556ee0)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.6 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 3 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.6-1
- Update to 1.2.6
- Don't require php-imap
--------------------------------------------------------------------------------
================================================================================
cacti-spine-1.2.6-1.el7 (FEDORA-EPEL-2019-68a9556ee0)
Threaded poller for Cacti written in C
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.6 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 3 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.6-1
- Update to 1.2.6
* Sat Aug 3 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.5-3
- Fix building on RHEL8
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
dpkg-1.18.25-9.el7 (FEDORA-EPEL-2019-a3b4d50e09)
Package maintenance system for Debian Linux
--------------------------------------------------------------------------------
Update Information:
another fix to support the very old tar 1.28
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 26 2019 Avi Kivity <avi(a)scylladb.com> - 1.18.15-9
- Remove unsupported --sort=name tar option (not available in .el7)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744032 - dpkg cannot build any package due to missing gtar --sort option
https://bugzilla.redhat.com/show_bug.cgi?id=1744032
--------------------------------------------------------------------------------
================================================================================
inotify-tools-3.14-9.el7 (FEDORA-EPEL-2019-6923112e79)
Command line utilities for inotify
--------------------------------------------------------------------------------
Update Information:
- Fix stack corruption on a moved directory, reproducible on aarch64.
https://bugzilla.redhat.com/show_bug.cgi?id=1741472 0006-Fix-buffer-overrun-
in-inotifytools.c.patch - Fix buffer overrun on -c|--csv with '"',
',' or '\n'
in directory name. 0005-Fix-segfault-with-csv-output-when-filename-
contains-.patch
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2019 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 3.14-9
- Fix stack corruption on a moved directory, reproducible on aarch64.
https://bugzilla.redhat.com/show_bug.cgi?id=1741472
0006-Fix-buffer-overrun-in-inotifytools.c.patch
- Fix buffer overrun on -c|--csv with '"', ',' or '\n' in
directory name.
0005-Fix-segfault-with-csv-output-when-filename-contains-.patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1741472 - Fix stack overflow in: `inotifytools_replace_filename`
https://bugzilla.redhat.com/show_bug.cgi?id=1741472
--------------------------------------------------------------------------------
================================================================================
libisds-0.11-1.el7 (FEDORA-EPEL-2019-b7dec03dd5)
Library for accessing the Czech Data Boxes
--------------------------------------------------------------------------------
Update Information:
This release brings a support for a mobile key authentication and
GetDataBoxActivityStatus service. It also corrects tests.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 6 2019 Petr Pisar <ppisar(a)redhat.com> - 0.11-1
- 0.11 bump
- License corrected to LGPLv3+ and GPLv3+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1749482 - libisds-0.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1749482
--------------------------------------------------------------------------------
================================================================================
nodejs-codemirror-5.48.4-1.el7 (FEDORA-EPEL-2019-e4eed7c94a)
A versatile JS text editor
--------------------------------------------------------------------------------
Update Information:
update to ver 5.48.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 27 2019 Mosaab Alzoubi <moceap(a)hotmail.com> - 5.48.4-1
- Update to 5.48.4
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.8.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1178368 - nodejs-codemirror-5.48.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1178368
--------------------------------------------------------------------------------
================================================================================
openvpn-auth-ldap-2.0.3-17.el7 (FEDORA-EPEL-2019-166fc5baa0)
OpenVPN plugin for LDAP authentication
--------------------------------------------------------------------------------
Update Information:
Adds a patch that prevents an OpenVPN crash when the LDAP server is unavailable
or times out.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2019 Sean Callaway <seancallaway(a)gmail.com> 2.0.3-17
- Applied patch to prevent crash when LDAP server unavailable.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727261 - OpenVPN crash if LDAP server is unavailble
https://bugzilla.redhat.com/show_bug.cgi?id=1727261
--------------------------------------------------------------------------------
================================================================================
pspg-1.9.0-1.el7 (FEDORA-EPEL-2019-f36d9ec9e3)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 6 2019 Pavel Raiskup <praiskup(a)redhat.com> - 1.9.0-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/1.9.0
https://github.com/okbob/pspg/releases/tag/1.7.2
https://github.com/okbob/pspg/releases/tag/1.7.1
https://github.com/okbob/pspg/releases/tag/1.7.0
https://github.com/okbob/pspg/releases/tag/1.6.8
https://github.com/okbob/pspg/releases/tag/1.6.7
https://github.com/okbob/pspg/releases/tag/1.6.6
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742278 - pspg-1.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742278
--------------------------------------------------------------------------------
================================================================================
singularity-3.4.0-1.2.el7 (FEDORA-EPEL-2019-cd35130bec)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Add fix for bug that always enabled --pid (PR #4380) ---- Update to upstream
3.4.0-1 + prs 4346 and 4370 ---- Update to upstream 3.3.0-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.4.0-1.2
- Add fix for bug that always enabled --pid (PR #4380)
* Tue Sep 3 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.4.0-1.1
- Update to upstream 3.4.0-1
- Fix compiles on non-64 bit architectures (PR #4370)
- Add config fakeroot CLI which was inadvertently left out of the upstream
release (PR #4346)
* Tue Jul 30 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.3.0-1
- Update to upstream 3.3.0-1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721422 - singularity-3.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1721422
--------------------------------------------------------------------------------