The following Fedora EPEL 7 Security updates need testing:
Age URL
242
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
50
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8311ec8a2
tor-0.3.5.8-1.el7
43
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9c2c40e3df
guacamole-server-1.0.0-1.el7
23
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-317c9a2f81
drupal7-7.65-1.el7
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f1efad2982
aria2-1.34.0-4.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7bae341677
chromium-73.0.3683.86-2.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c9cd2d9a6c
ntfs-3g-2017.3.23-11.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-50a6a1ddfd
afflib-3.7.18-2.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c739f0a89d
openjpeg2-2.3.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-77190f3ef7
python34-3.4.10-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8395a0247
transmission-2.94-6.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-6ea040e59b
hostapd-2.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
clamav-unofficial-sigs-5.6.2-7.el7
python-bloom-0.8.0-1.el7
python-osrf-pycommon-0.1.7-1.el7
python-rosdep-0.15.1-1.el7
python-rosdistro-0.7.3-1.el7
python-rosinstall_generator-0.1.16-1.el7
python-rospkg-1.1.8-1.el7
python3-jinja2-2.8.1-2.el7
rclone-1.47.0-1.el7
smoldyn-2.58-1.el7
Details about builds:
================================================================================
clamav-unofficial-sigs-5.6.2-7.el7 (FEDORA-EPEL-2019-1abcd1d9fd)
Scripts to download unofficial clamav signatures
--------------------------------------------------------------------------------
Update Information:
Add patch proposal for RHEL/CentOS 6 to use /sbin/service from Robert Scheck
<robert(a)fedoraproject.org> ---- Fix spec for el6 build
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 30 2019 Didier Fabert <didier.fabert(a)gmail.com> - 5.6.2-7
- Add patch proposal for RHEL/CentOS 6 to use /sbin/service from Robert Scheck
<robert(a)fedoraproject.org>
* Sun Mar 17 2019 Didier Fabert <didier.fabert(a)gmail.com> 5.6.2-6
- Fix local state dir owner and group on el6
- Fix typo in summary
- Remove INSTALL from doc
* Thu Mar 7 2019 Tim Landscheidt <tim(a)tim-landscheidt.de> - 5.6.2-5
- Remove obsolete requirement for %post scriptlet
* Thu Feb 28 2019 Didier Fabert <didier.fabert(a)gmail.com> 5.6.2-4
- Fix spec for el6 build
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1683646 - Please build latest clamav-unofficial-sigs for EPEL 6
https://bugzilla.redhat.com/show_bug.cgi?id=1683646
--------------------------------------------------------------------------------
================================================================================
python-bloom-0.8.0-1.el7 (FEDORA-EPEL-2019-8c7dc8caa9)
Bloom is a release automation tool
--------------------------------------------------------------------------------
Update Information:
Update all ROS infrastructure packages to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2019 Scott K Logan <logans(a)cottsay.net> - 0.8.0-1
- Update to 0.8.0 (rhbz#1699490)
- Make doc subpackage a weaker dependency
* Sun Apr 3 2016 Scott K Logan <logans(a)cottsay.net> - 0.5.21-1
- Update to 0.5.21
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676592 - python-catkin_lint-1.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1676592
[ 2 ] Bug #1699490 - python-bloom-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699490
[ 3 ] Bug #1699085 - python-rospkg-1.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699085
[ 4 ] Bug #1699133 - python-osrf-pycommon-0.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699133
--------------------------------------------------------------------------------
================================================================================
python-osrf-pycommon-0.1.7-1.el7 (FEDORA-EPEL-2019-8c7dc8caa9)
Commonly needed Python modules used by software developed at OSRF
--------------------------------------------------------------------------------
Update Information:
Update all ROS infrastructure packages to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.7-1
- Update to 0.1.7
- Use Python 3 Sphinx
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676592 - python-catkin_lint-1.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1676592
[ 2 ] Bug #1699490 - python-bloom-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699490
[ 3 ] Bug #1699085 - python-rospkg-1.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699085
[ 4 ] Bug #1699133 - python-osrf-pycommon-0.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699133
--------------------------------------------------------------------------------
================================================================================
python-rosdep-0.15.1-1.el7 (FEDORA-EPEL-2019-8c7dc8caa9)
ROS System Dependency Installer
--------------------------------------------------------------------------------
Update Information:
Update all ROS infrastructure packages to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2019 Scott K Logan <logans(a)cottsay.net> - 0.15.1-1
- Update to 0.15.1
- Add executable links with Python version numbers
- Create a separate 'doc' package
- Co-own man page and sources directories among python2 and python3
- Make python-rpm recommended (will fall back to RPM CLI if not present)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676592 - python-catkin_lint-1.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1676592
[ 2 ] Bug #1699490 - python-bloom-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699490
[ 3 ] Bug #1699085 - python-rospkg-1.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699085
[ 4 ] Bug #1699133 - python-osrf-pycommon-0.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699133
--------------------------------------------------------------------------------
================================================================================
python-rosdistro-0.7.3-1.el7 (FEDORA-EPEL-2019-8c7dc8caa9)
File format for managing ROS Distributions
--------------------------------------------------------------------------------
Update Information:
Update all ROS infrastructure packages to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Scott K Logan <logans(a)cottsay.net> - 0.7.3-1
- Update to 0.7.3 (rhbz#1693483)
- Switch to Python 3 Sphinx
- Handle automatic dependency generation (f30+)
- Make doc subpackage a weaker dependency
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676592 - python-catkin_lint-1.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1676592
[ 2 ] Bug #1699490 - python-bloom-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699490
[ 3 ] Bug #1699085 - python-rospkg-1.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699085
[ 4 ] Bug #1699133 - python-osrf-pycommon-0.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699133
--------------------------------------------------------------------------------
================================================================================
python-rosinstall_generator-0.1.16-1.el7 (FEDORA-EPEL-2019-4f0a0dfd51)
Generates rosinstall files
--------------------------------------------------------------------------------
Update Information:
Introduction of rosinstall_generator to EPEL 7
--------------------------------------------------------------------------------
================================================================================
python-rospkg-1.1.8-1.el7 (FEDORA-EPEL-2019-8c7dc8caa9)
Utilities for ROS package, stack, and distribution information
--------------------------------------------------------------------------------
Update Information:
Update all ROS infrastructure packages to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2019 Scott K Logan <logans(a)cottsay.net> - 1.1.8-1
- Update to 1.1.8 (rhbz#1699085)
- Switch to Python 3 Sphinx
- Create a separate 'doc' package
- Handle automatic dependency generation (f30+)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676592 - python-catkin_lint-1.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1676592
[ 2 ] Bug #1699490 - python-bloom-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699490
[ 3 ] Bug #1699085 - python-rospkg-1.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699085
[ 4 ] Bug #1699133 - python-osrf-pycommon-0.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699133
--------------------------------------------------------------------------------
================================================================================
python3-jinja2-2.8.1-2.el7 (FEDORA-EPEL-2019-ae064347d8)
General purpose template engine
--------------------------------------------------------------------------------
Update Information:
Update to 2.8.1 Security fix for CVE-2016-10745 Security fix for
CVE-2019-10906
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 13 2019 Orion Poplawski <orion(a)nwra.com> - 2.8.1-2
- Backport fix for CVE-2016-10745 (bugz#1698839)
* Sat Apr 13 2019 Orion Poplawski <orion(a)nwra.com> - 2.8.1-1
- Update to 2.8.1 (CVE-2016-10745 bugz#1698350)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1698345 - CVE-2016-10745 python-jinja2: Sandbox escape due to information
disclosure via str.format
https://bugzilla.redhat.com/show_bug.cgi?id=1698345
[ 2 ] Bug #1698839 - CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape
https://bugzilla.redhat.com/show_bug.cgi?id=1698839
--------------------------------------------------------------------------------
================================================================================
rclone-1.47.0-1.el7 (FEDORA-EPEL-2019-dcf996ae93)
Rsync for cloud storage
--------------------------------------------------------------------------------
Update Information:
Release 1.47.0 (#1674166) ---- Release 1.46.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 13 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.47.0-1
- Release 1.47.0 (#1674166)
* Fri Apr 12 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.46.0-1
- Release 1.46.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1674166 - rclone-1.46.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1674166
--------------------------------------------------------------------------------
================================================================================
smoldyn-2.58-1.el7 (FEDORA-EPEL-2019-8b4bc36582)
A particle-based spatial stochastic simulator
--------------------------------------------------------------------------------
Update Information:
- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1672047 - Review Request: smoldyn - A particle-based spatial stochastic
simulator
https://bugzilla.redhat.com/show_bug.cgi?id=1672047
--------------------------------------------------------------------------------