The following Fedora EPEL 7 Security updates need testing:
Age URL
228
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
99
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b43fdd19c3
vcftools-0.1.16-1.el7
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8311ec8a2
tor-0.3.5.8-1.el7
30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9c2c40e3df
guacamole-server-1.0.0-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7e4233c554
mxml-3.0-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c43166839f
pdns-4.1.7-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-a578ca80ae
putty-0.71-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-317c9a2f81
drupal7-7.65-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-15679bf3f9
wordpress-5.1.1-4.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-114610bd18
golang-googlecode-go-crypto-0-0.15.20190324gitb7391e9.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f1efad2982
aria2-1.34.0-4.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-75efbdf54f
clamav-0.101.2-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7bae341677
chromium-73.0.3683.86-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
bird2-2.0.4-1.el7
egl-wayland-1.1.2-2.el7
ntfs-3g-2017.3.23-11.el7
phpwapmail-0.9.5-1.el7
Details about builds:
================================================================================
bird2-2.0.4-1.el7 (FEDORA-EPEL-2019-b9507e70bb)
BIRD Internet Routing Daemon
--------------------------------------------------------------------------------
Update Information:
BIRD 2.0.4 (2019-02-27) ======================= * OSPF: Opaque LSAs (RFC
5250) * OSPF: DN-bit handling (RFC 4576) * Preferred route counters are back
* Important BGP bugfix * Several bugfixes related to route propagation *
some minor bugfixes BIRD 2.0.3 (2019-01-05) ======================= * MRT
table dumps (RFC 6396) * BGP Long-lived graceful restart * BGP: Optional
import table (Adj-RIB-In) * BGP: Extend 'next hop keep' and 'next hop
self'
options * BGP: Improved VRF support * OSPF: Authentication trailer for
OSPFv3 (RFC 7166) * Babel: New option to randomize router ID * Filter:
Custom route attributes * Filter: Support for src accessor to SADR source
prefix * Filter: Support for VPN_RD sets * Filter: Make ifname attribute
modifiable * Perf: Protocol to measure BIRD performance internally * More
verbose error messages in config processing * Log file size limit / log
rotation * Many bugfixes Notes ----- Export of routes to RS EBGP (route
server) sessions from other sources than RS EBGP sessions was changed that ASN
is no longer prepended to BGP_PATH in that case. The change does not affect
regular BGP configurations or regular route servers that have only RS EBGP
peers. For BGP route servers and route reflectors, the default value of option
'next hop keep' was changed to a more appropriate value. Attributes for OSPF
and Babel metrics are no longer reset when exported to these protocols and could
be set anywhere in BIRD. As a result, OSPF metric is kept when a route is
reannounced between OSPF instances. Also, when route is exported to OSPF with
both ospf_metric1 and ospf_metric2 attributes it is now propagated as OSPF-E2
route instead of as OSPF-E1 route. Compiling BIRD with `--enable-debug` no
longer automatically activates debug mode (`-d` option) nor local mode (`-l`
option). Also, debug mode with output to file (`-D` option) no longer not forces
foreground mode (`-f` option). The `configure` script now uses standard option
`--runstatedir`, the old option `--with-runtimedir` is deprecated.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 30 2019 Robert Scheck <robert(a)fedoraproject.org> - 2.0.4-1
- Upgrade to 2.0.4 (#1684317)
* Fri Jan 18 2019 Robert Scheck <robert(a)fedoraproject.org> - 2.0.3-1
- Upgrade to 2.0.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1684317 - bird-2.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1684317
--------------------------------------------------------------------------------
================================================================================
egl-wayland-1.1.2-2.el7 (FEDORA-EPEL-2019-7262719691)
Wayland EGL External Platform library
--------------------------------------------------------------------------------
Update Information:
- Update buildfix
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 30 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 1.1.2-2
- Switch to upstream fix
--------------------------------------------------------------------------------
================================================================================
ntfs-3g-2017.3.23-11.el7 (FEDORA-EPEL-2019-c9cd2d9a6c)
Linux NTFS userspace driver
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2019-9755.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 29 2019 Tom Callaway <spot(a)fedoraproject.org> - 2:2017.3.23-11
- add upstream fix for CVE-2019-9755
* Mon Mar 11 2019 Kamil P��ral <kparal(a)redhat.com> - 2:2017.3.23-10
- add Recommends: ntfs-3g-system-compression. That allows people with
Windows 10 to read system files.
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2:2017.3.23-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jul 16 2018 Richard W.M. Jones <rjones(a)redhat.com> - 2:2017.3.23-8
- Fix for ntfsclone crash (RHBZ#1601146).
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2:2017.3.23-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691624 - CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local
root privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1691624
--------------------------------------------------------------------------------
================================================================================
phpwapmail-0.9.5-1.el7 (FEDORA-EPEL-2019-4a823f851d)
WAP-based e-mail client
--------------------------------------------------------------------------------
Update Information:
Fix incompatibility with PHP >= 5.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 30 2019 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 0.9.5-1
- update to 0.9.5 (supports PHP >= 5.4)
--------------------------------------------------------------------------------