The following Fedora EPEL 7 Security updates need testing:
Age URL
514
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
256
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
253
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-32603d41ea
GraphicsMagick-1.3.34-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b5ec870c52
mingw-wavpack-5.1.0-9.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-75cc3918d1
rubygem-ox-2.4.11-5.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9ffdf25269
python-django-1.11.27-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12cd208593
gnulib-0-31.20200107git.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-79.0.3945.117-1.el7
ike-scan-1.9.4-26.el7
libraqm-0.7.0-4.el7
perl-Clipboard-0.21-1.el7.1
php-owncloud-tarstreamer-0.1.2-1.el7
pscan-1.3-21.el7
python-django-ajax-selects-1.8.0-1.el7
rubygem-rack-1.6.12-1.el7
uberftp-2.8-3.el7
Details about builds:
================================================================================
chromium-79.0.3945.117-1.el7 (FEDORA-EPEL-2020-de388d4fd0)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 79.0.3945.117, fixes CVE-2020-6377.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2020 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.117-1
- update to 79.0.3945.117
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789443 - CVE-2020-6377 chromium: chromium-browser: Use after free in audio
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1789443
--------------------------------------------------------------------------------
================================================================================
ike-scan-1.9.4-26.el7 (FEDORA-EPEL-2020-176fc4e7cc)
IKE protocol tool to discover, fingerprint and test IPsec VPN servers
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.4-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.4-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.4-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.4-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.4-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.4-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Jun 6 2017 Paul Wouters <pwouters(a)redhat.com> - 1.9.4-20
- Pulled in 1.9.4 snapshot, two github patches and added snapshot support
- Updated license from GPLv2+ to GPLv3+
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Aug 21 2009 Tomas Mraz <tmraz(a)redhat.com> - 1.9-9
- rebuilt with new openssl
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Sat Jan 17 2009 Tomas Mraz <tmraz(a)redhat.com> - 1.9-6
- rebuild with new openssl
* Thu Jul 31 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 1.9-5
- fix license tag
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.9-4
- Autorebuild for GCC 4.3
* Fri Dec 7 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.9-3
- Rebuild for deps
* Thu May 3 2007 Sindre Pedersen Bj��rdal <foolish[AT]guezz.net> - 1.9-2
- Add openssl support
* Thu May 3 2007 Sindre Pedersen Bj��rdal <foolish[AT]guezz.net> - 1.9-1
- Initial build
--------------------------------------------------------------------------------
================================================================================
libraqm-0.7.0-4.el7 (FEDORA-EPEL-2020-dd654790ab)
Complex Textlayout Library
--------------------------------------------------------------------------------
Update Information:
- First build on EPEL8 - Use one branch to build on Fedora and EPEL - Use
python3 as BR except EPEL7 - Use LC_ALL=en_US.UTF-8 in EPEL7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2020 Mosaab Alzoubi <moceap(a)hotmail.com> - 0.7.0-4
- First build on EPEL8
- Use one branch to build on Fedora and EPEL
- Use python3 as BR except EPEL7
- Use LC_ALL=en_US.UTF-8 in EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1755388 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1755388
--------------------------------------------------------------------------------
================================================================================
perl-Clipboard-0.21-1.el7.1 (FEDORA-EPEL-2020-35e87bab10)
Copy and paste with any OS
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2014-5509.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2020 Xavier Bachelot <xavier(a)bachelot.org> - 0.21-1.1
- Adapt for EL6 and EL7.
* Tue Dec 17 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.21-1
- 0.21 bump
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.20-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 30 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.20-2
- Perl 5.30 rebuild
* Wed Apr 24 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.20-1
- 0.20 bump
* Thu Feb 28 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.19-1
- 0.19 bump
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.13-21
- Perl 5.28 rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon Jun 5 2017 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.13-18
- Perl 5.26 rebuild
* Tue May 16 2017 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.13-17
- Fix building on Perl without '.' in @INC
- Specify all dependencies
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Sun May 15 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.13-15
- Perl 5.24 rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.13-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Wed Jun 3 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.13-12
- Perl 5.22 rebuild
* Tue Aug 26 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.13-11
- Perl 5.20 rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.13-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.13-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Jul 18 2013 Petr Pisar <ppisar(a)redhat.com> - 0.13-8
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1135626 - perl-Clipboard: insecure temporary file usage [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1135626
--------------------------------------------------------------------------------
================================================================================
php-owncloud-tarstreamer-0.1.2-1.el7 (FEDORA-EPEL-2020-9c9677d0d5)
Streaming dynamic tar files
--------------------------------------------------------------------------------
Update Information:
**Version 0.1.2** * Fix mtime header field
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2020 Remi Collet <remi(a)remirepo.net> - 0.1.2-1
- update to 0.1.2
--------------------------------------------------------------------------------
================================================================================
pscan-1.3-21.el7 (FEDORA-EPEL-2020-80cf26f685)
Limited problem scanner for C source files
--------------------------------------------------------------------------------
Update Information:
Update spec file
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.3-21
- Update spec file
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Sat Apr 18 2009 Ville Skytt�� <ville.skytta at iki.fi> - 1.3-3
- Update Debian patchkit to 1.2-9 for support for larger source files
(Debian bug 436794).
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Sat Feb 9 2008 Ville Skytt�� <ville.skytta at iki.fi> - 1.3-1
- 1.3.
* Mon Aug 6 2007 Ville Skytt�� <ville.skytta at iki.fi> - 1.2-4
- License: GPLv2+
* Wed Aug 30 2006 Ville Skytt�� <ville.skytta at iki.fi> - 1.2-3
- Rebuild.
* Thu Feb 16 2006 Ville Skytt�� <ville.skytta at iki.fi> - 1.2-2
- Sync with Debian's 1.2-5.
* Sun Oct 16 2005 Ville Skytt�� <ville.skytta at iki.fi> - 1.2-1
- First FE build.
* Wed Oct 12 2005 Ville Skytt�� <ville.skytta at iki.fi> - 1.2-0.1
- First build, based on Debian's 1.2-4.
--------------------------------------------------------------------------------
================================================================================
python-django-ajax-selects-1.8.0-1.el7 (FEDORA-EPEL-2020-5201cb48dc)
Enables editing of ForeignKey, ManyToMany and simple text fields
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2020 Luis Bazan <lbazan(a)fedoraproject.org> - 1.8.0-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-1.6.12-1.el7 (FEDORA-EPEL-2020-a062204588)
Common API for connecting web frameworks, web servers and layers of software
--------------------------------------------------------------------------------
Update Information:
Update to Rack 1.6.12 as Security fix for CVE-2019-16782
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2020 Gerd Pokorra <gp(a)zimt.uni-siegen.de> - 1:1.6.12-1
- Update to Rack 1.6.12 as Security fix for CVE-2019-16782
- Remove the two test files spec_session_memcache.rb and spec_session_pool.rb
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789100 - CVE-2019-16782 rubygem-rack: hijack sessions by using timing
attacks targeting the session id
https://bugzilla.redhat.com/show_bug.cgi?id=1789100
--------------------------------------------------------------------------------
================================================================================
uberftp-2.8-3.el7 (FEDORA-EPEL-2020-3b13943e25)
GridFTP-enabled ftp client
--------------------------------------------------------------------------------
Update Information:
Bugfix: Detect when the server closed the socket and disconnects, instead of
going into an infinite loop.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2020 M��ty��s Selmeci <matyas(a)cs.wisc.edu> - 2.8-3
- Add patch to prevent hanging when command socket closes
--------------------------------------------------------------------------------