The following Fedora EPEL 7 Security updates need testing:
Age URL
543
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
285
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
282
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4a1efc409a
pure-ftpd-1.0.47-3.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ebd7293594
python-pip-epel-8.1.2-12.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-453d58e60f
radare2-4.2.1-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-062fed623d
php-horde-Horde-Data-2.1.5-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
guacamole-server-1.1.0-1.el7
mock-2.0-2.el7
mock-core-configs-32.1-1.el7
python3-six-1.12.0-1.el7
python3-urllib3-1.25.6-1.el7
remmina-1.3.10-1.el7
Details about builds:
================================================================================
guacamole-server-1.1.0-1.el7 (FEDORA-EPEL-2020-e3426f6e51)
Server-side native components that form the Guacamole proxy
--------------------------------------------------------------------------------
Update Information:
New Remmina and Guacamole server.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 8 2020 Simone Caronni <negativo17(a)gmail.com> - 1:1.1.0-1
- Update to 1.1.0, enable Kubernetes plugin and switch to FreeRDP 2.
- Fix license.
- Drop RHEL 6 support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1779615 - [abrt] remmina: _mm_loadu_si128(): remmina killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1779615
[ 2 ] Bug #1793095 - [abrt] remmina: rcw_get_visible_cnnobj(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1793095
[ 3 ] Bug #1777928 - [abrt] remmina: g_type_check_instance_cast(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1777928
[ 4 ] Bug #1792615 - [abrt] remmina: remmina_plugin_vnc_release_key(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1792615
[ 5 ] Bug #1750178 - [abrt] remmina: rcw_after_configure_scrolled(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1750178
[ 6 ] Bug #1780821 - [abrt] remmina: strlen(): remmina killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1780821
[ 7 ] Bug #1752225 - [abrt] remmina: rcw_get_visible_cnnobj(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1752225
[ 8 ] Bug #1797250 - Guacamole version 1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1797250
--------------------------------------------------------------------------------
================================================================================
mock-2.0-2.el7 (FEDORA-EPEL-2020-56dcc5ffbf)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
mock - log reasons why src.rpm can not be installed into chroot - nspawn: non-
interactive commands in chroot are executed with --pipe - bind mount local repos
to bootstrap chroot (dturecek(a)redhat.com) - expand the generated config
(includes) completely before passing it to eval() (sergio(a)serjux.com) - do not
ignore cleanup_on_success when post_install is True (logans(a)cottsay.net) - fix
fd resource-leak in 'mock --chain' (jcajka(a)redhat.com) - the --debug-config
option only shows the differences from the mock's default configuration - do not
expand jinja for --debug-config - don't use chroot.pkg_manager in podman case,
we need to install from within the container - --use-bootstrap-image implies
--bootstrap-chroot - drop python2 support from spec file, and code too - ammend
man page and state that --dnf is the default now - rename --{old,new}-chroot to
--isolation - turn ON the jinja rendering a bit earlier - pre-populate loop
devices in nspawn chroot as with --isolation=chroot - deepcopy the plugin_conf
options from chroot to bootstrap_chroot - simplified implementation of include()
config option, accept relative files (jkadlcik(a)redhat.com, sergio(a)serjux.com) -
lvm_root: fix volume removal in --scrub - bootstrap: don't install shadow-utils,
and distribution-gpg-keys - make --sources optional for --buildsrpm mode
(sisi.chlupova(a)gmail.com) - bootstrap: bind-mount normal chroot into bootstrap
chroot recursively - add --scrub=bootstrap parameter (frostyx(a)email.cz) - don't
clean bootstrap with --clean - do not call traceLog decorator when no tracing -
pre-create builddir before changing it's owner, and when we have proper process
privileges - copy /etc/pki/ca-trust/extracted into chroot [GH#397] - change
default of 'package_manager' to 'dnf' - always copy distribution-gpg-keys
into
chroot [GH#308] - support DNF vars added [GH#346] - use jinja macros instead of
python variable expansion - get the text representation of error code -
--scrub=all also does --scrub=bootstrap (jkadlcik(a)redhat.com) - success/fail
aren't created root-owned - compress_logs: setup defaults to 'gzip' - raise
error for --localrepo without --chain - detect that forcearch can not work, and
raise obvious error - drop unnecessary privilege escalations which only make
unnecessary root-owned files - solve yum.conf vs. dnf.conf inconsistency in code
and config - fix mockchain with --bootstrap-chroot (issue/469) - document 'mock
--chain -c' in man page mock-core-configs - solve yum.conf vs. dnf.conf
inconsistency in config and code - add F32 configs and move rawhide to F33 -
make compatibility changes with mock 2.0 - allow host overrides (build-time for
now) - use jinja for gpgkey= in rawhide template - add rhel-{7,8}-s390x configs
- drop rhel-8-ppc64, it was never supported - fix rhel-7 configs - update epel-8
config template to include modular repos as well as missing non-modular source
repo (mmathesi(a)redhat.com) - drop for a long time useless epel-6-ppc64 config -
use template for opensuse, openmandriva, mageia, epel, custom ... - fix
epel-6.tpl config bug - set default podman image for centos-stream - remove
aarch64 string from repo name in template [RHBZ#1780977] - EOL F29 configs - fix
rhelepel configs - allow including configs and templates from relative path
(frostyx(a)email.cz) - configs: drop cost=2000 from fedora-31+-i386 - add missing
metadata_expire=0 to epel configs - change default of 'package_manager' to
'dnf', and use 'dnf.conf' - remove rhelbeta-8-*
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 7 2020 Pavel Raiskup <praiskup(a)redhat.com> 2.0-2
- solve yum.conf vs. dnf.conf inconsistency in code and config
- fix mockchain with --bootstrap-chroot (issue/469)
- document 'mock --chain -c' in man page
* Thu Feb 6 2020 Pavel Raiskup <praiskup(a)redhat.com> 2.0-1
- log reasons why src.rpm can not be installed into chroot
- nspawn: non-interactive commands in chroot are executed with --pipe
- bind mount local repos to bootstrap chroot (dturecek(a)redhat.com)
- expand the generated config (includes) completely before passing it
to eval() (sergio(a)serjux.com)
- do not ignore cleanup_on_success when post_install is True
(logans(a)cottsay.net)
- fix fd resource-leak in 'mock --chain' (jcajka(a)redhat.com)
- the --debug-config option only shows the differences from the mock's default
configuration
- do not expand jinja for --debug-config
- don't use chroot.pkg_manager in podman case, we need to install from within
the container
- --use-bootstrap-image implies --bootstrap-chroot
- drop python2 support from spec file, and code too
- ammend man page and state that --dnf is the default now
- rename --{old,new}-chroot to --isolation
- turn ON the jinja rendering a bit earlier
- pre-populate loop devices in nspawn chroot as with --isolation=chroot
- deepcopy the plugin_conf options from chroot to bootstrap_chroot
- simplified implementation of include() config option, accept relative files
(jkadlcik(a)redhat.com, sergio(a)serjux.com)
- pass proxy environment to exec of Podman (RHBZ#1772598)
- lvm_root: fix volume removal in --scrub
- bootstrap: don't install shadow-utils, and distribution-gpg-keys
- make --sources optional for --buildsrpm mode (sisi.chlupova(a)gmail.com)
- bootstrap: bind-mount normal chroot into bootstrap chroot recursively
- add --scrub=bootstrap parameter (frostyx(a)email.cz)
- don't clean bootstrap with --clean
- do not call traceLog decorator when no tracing
- pre-create builddir before changing it's owner, and when we have proper
process privileges
- copy /etc/pki/ca-trust/extracted into chroot [GH#397]
- change default of 'package_manager' to 'dnf'
- always copy distribution-gpg-keys into chroot [GH#308]
- support DNF vars added [GH#346]
- use jinja macros instead of python variable expansion
- get the text representation of error code
- --scrub=all also does --scrub=bootstrap (jkadlcik(a)redhat.com)
- success/fail aren't created root-owned
- compress_logs: setup defaults to 'gzip'
- raise error for --localrepo without --chain
- detect that forcearch can not work, and raise obvious error
- drop unnecessary privilege escalations which only make unnecessary
root-owned files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1740421 - selinux is preventing mock-1.4.17-1 from executing RPM scriptlets
https://bugzilla.redhat.com/show_bug.cgi?id=1740421
[ 2 ] Bug #1767417 - --forcearch doesn't warn/fail if you don't have
qemu-user-static installed
https://bugzilla.redhat.com/show_bug.cgi?id=1767417
[ 3 ] Bug #1772598 - use_bootstrap_image doesn't use proxy
https://bugzilla.redhat.com/show_bug.cgi?id=1772598
[ 4 ] Bug #1672984 - mock --buildsrpm requires --sources when there are zero sources in
the spec file
https://bugzilla.redhat.com/show_bug.cgi?id=1672984
[ 5 ] Bug #1743843 - Builds fail with use_bootstrap_container experimental feature
enabled
https://bugzilla.redhat.com/show_bug.cgi?id=1743843
[ 6 ] Bug #1694420 - [abrt] mock: rmtree(): util.py:231:rmtree:PermissionError: [Errno
13] Permission denied:
'/var/lib/mock/fedora-29-x86_64/root/builddir/build/SOURCES'
https://bugzilla.redhat.com/show_bug.cgi?id=1694420
[ 7 ] Bug #1762728 - [lvm] can't scrub volume
https://bugzilla.redhat.com/show_bug.cgi?id=1762728
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-32.1-1.el7 (FEDORA-EPEL-2020-56dcc5ffbf)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
mock - log reasons why src.rpm can not be installed into chroot - nspawn: non-
interactive commands in chroot are executed with --pipe - bind mount local repos
to bootstrap chroot (dturecek(a)redhat.com) - expand the generated config
(includes) completely before passing it to eval() (sergio(a)serjux.com) - do not
ignore cleanup_on_success when post_install is True (logans(a)cottsay.net) - fix
fd resource-leak in 'mock --chain' (jcajka(a)redhat.com) - the --debug-config
option only shows the differences from the mock's default configuration - do not
expand jinja for --debug-config - don't use chroot.pkg_manager in podman case,
we need to install from within the container - --use-bootstrap-image implies
--bootstrap-chroot - drop python2 support from spec file, and code too - ammend
man page and state that --dnf is the default now - rename --{old,new}-chroot to
--isolation - turn ON the jinja rendering a bit earlier - pre-populate loop
devices in nspawn chroot as with --isolation=chroot - deepcopy the plugin_conf
options from chroot to bootstrap_chroot - simplified implementation of include()
config option, accept relative files (jkadlcik(a)redhat.com, sergio(a)serjux.com) -
lvm_root: fix volume removal in --scrub - bootstrap: don't install shadow-utils,
and distribution-gpg-keys - make --sources optional for --buildsrpm mode
(sisi.chlupova(a)gmail.com) - bootstrap: bind-mount normal chroot into bootstrap
chroot recursively - add --scrub=bootstrap parameter (frostyx(a)email.cz) - don't
clean bootstrap with --clean - do not call traceLog decorator when no tracing -
pre-create builddir before changing it's owner, and when we have proper process
privileges - copy /etc/pki/ca-trust/extracted into chroot [GH#397] - change
default of 'package_manager' to 'dnf' - always copy distribution-gpg-keys
into
chroot [GH#308] - support DNF vars added [GH#346] - use jinja macros instead of
python variable expansion - get the text representation of error code -
--scrub=all also does --scrub=bootstrap (jkadlcik(a)redhat.com) - success/fail
aren't created root-owned - compress_logs: setup defaults to 'gzip' - raise
error for --localrepo without --chain - detect that forcearch can not work, and
raise obvious error - drop unnecessary privilege escalations which only make
unnecessary root-owned files - solve yum.conf vs. dnf.conf inconsistency in code
and config - fix mockchain with --bootstrap-chroot (issue/469) - document 'mock
--chain -c' in man page mock-core-configs - solve yum.conf vs. dnf.conf
inconsistency in config and code - add F32 configs and move rawhide to F33 -
make compatibility changes with mock 2.0 - allow host overrides (build-time for
now) - use jinja for gpgkey= in rawhide template - add rhel-{7,8}-s390x configs
- drop rhel-8-ppc64, it was never supported - fix rhel-7 configs - update epel-8
config template to include modular repos as well as missing non-modular source
repo (mmathesi(a)redhat.com) - drop for a long time useless epel-6-ppc64 config -
use template for opensuse, openmandriva, mageia, epel, custom ... - fix
epel-6.tpl config bug - set default podman image for centos-stream - remove
aarch64 string from repo name in template [RHBZ#1780977] - EOL F29 configs - fix
rhelepel configs - allow including configs and templates from relative path
(frostyx(a)email.cz) - configs: drop cost=2000 from fedora-31+-i386 - add missing
metadata_expire=0 to epel configs - change default of 'package_manager' to
'dnf', and use 'dnf.conf' - remove rhelbeta-8-*
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 8 2020 Pavel Raiskup <praiskup(a)redhat.com> 32.1-1
- centos-8 and centos-stream to use dnf.conf
* Fri Feb 7 2020 Pavel Raiskup <praiskup(a)redhat.com> 32.0-2
- solve yum.conf vs. dnf.conf inconsistency in config and code
* Thu Feb 6 2020 Pavel Raiskup <praiskup(a)redhat.com> 32.0-1
- add F32 configs and move rawhide to F33
- make compatibility changes with mock 2.0
- allow host overrides (build-time for now)
- use jinja for gpgkey= in rawhide template
- add rhel-{7,8}-s390x configs
- drop rhel-8-ppc64, it was never supported
- fix rhel-7 configs
- update epel-8 config template to include modular repos as well as missing
non-modular source repo (mmathesi(a)redhat.com)
- drop for a long time useless epel-6-ppc64 config
- use template for opensuse, openmandriva, mageia, epel, custom ...
- fix epel-6.tpl config bug
- set default podman image for centos-stream
- remove aarch64 string from repo name in template [RHBZ#1780977]
- EOL F29 configs
- fix rhelepel configs
- allow including configs and templates from relative path (frostyx(a)email.cz)
- configs: drop cost=2000 from fedora-31+-i386
- add missing metadata_expire=0 to epel configs
- change default of 'package_manager' to 'dnf', and use
'dnf.conf'
- remove rhelbeta-8-*
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1740421 - selinux is preventing mock-1.4.17-1 from executing RPM scriptlets
https://bugzilla.redhat.com/show_bug.cgi?id=1740421
[ 2 ] Bug #1767417 - --forcearch doesn't warn/fail if you don't have
qemu-user-static installed
https://bugzilla.redhat.com/show_bug.cgi?id=1767417
[ 3 ] Bug #1772598 - use_bootstrap_image doesn't use proxy
https://bugzilla.redhat.com/show_bug.cgi?id=1772598
[ 4 ] Bug #1672984 - mock --buildsrpm requires --sources when there are zero sources in
the spec file
https://bugzilla.redhat.com/show_bug.cgi?id=1672984
[ 5 ] Bug #1743843 - Builds fail with use_bootstrap_container experimental feature
enabled
https://bugzilla.redhat.com/show_bug.cgi?id=1743843
[ 6 ] Bug #1694420 - [abrt] mock: rmtree(): util.py:231:rmtree:PermissionError: [Errno
13] Permission denied:
'/var/lib/mock/fedora-29-x86_64/root/builddir/build/SOURCES'
https://bugzilla.redhat.com/show_bug.cgi?id=1694420
[ 7 ] Bug #1762728 - [lvm] can't scrub volume
https://bugzilla.redhat.com/show_bug.cgi?id=1762728
--------------------------------------------------------------------------------
================================================================================
python3-six-1.12.0-1.el7 (FEDORA-EPEL-2020-7894ebebfb)
Python 2 and 3 compatibility utilities
--------------------------------------------------------------------------------
Update Information:
python3-six --- Update to 1.12.0 for urllib3 1.25.6 python3-urllib3 --- Update
to 1.25.6 to fix URLs with brackets
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 8 2020 Orion Poplawski <orion(a)nwra.com> - 1.12.0-1
- Update to 1.12.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1787227 - python3-urllib3 1.25.1 fails to parse URLs with brackets
https://bugzilla.redhat.com/show_bug.cgi?id=1787227
--------------------------------------------------------------------------------
================================================================================
python3-urllib3-1.25.6-1.el7 (FEDORA-EPEL-2020-7894ebebfb)
Python 3 HTTP library with thread-safe connection pooling and file post
--------------------------------------------------------------------------------
Update Information:
python3-six --- Update to 1.12.0 for urllib3 1.25.6 python3-urllib3 --- Update
to 1.25.6 to fix URLs with brackets
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 8 2020 Orion Poplawski <orion(a)nwra.com> - 1.25.6-1
- Update to 1.25.6 (bz#1787227)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1787227 - python3-urllib3 1.25.1 fails to parse URLs with brackets
https://bugzilla.redhat.com/show_bug.cgi?id=1787227
--------------------------------------------------------------------------------
================================================================================
remmina-1.3.10-1.el7 (FEDORA-EPEL-2020-e3426f6e51)
Remote Desktop Client
--------------------------------------------------------------------------------
Update Information:
New Remmina and Guacamole server.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 7 2020 Simone Caronni <negativo17(a)gmail.com> - 1.3.10-1
- Update to 1.3.10.
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1779615 - [abrt] remmina: _mm_loadu_si128(): remmina killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1779615
[ 2 ] Bug #1793095 - [abrt] remmina: rcw_get_visible_cnnobj(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1793095
[ 3 ] Bug #1777928 - [abrt] remmina: g_type_check_instance_cast(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1777928
[ 4 ] Bug #1792615 - [abrt] remmina: remmina_plugin_vnc_release_key(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1792615
[ 5 ] Bug #1750178 - [abrt] remmina: rcw_after_configure_scrolled(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1750178
[ 6 ] Bug #1780821 - [abrt] remmina: strlen(): remmina killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1780821
[ 7 ] Bug #1752225 - [abrt] remmina: rcw_get_visible_cnnobj(): remmina killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1752225
[ 8 ] Bug #1797250 - Guacamole version 1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1797250
--------------------------------------------------------------------------------