The following Fedora EPEL 7 Security updates need testing:
Age URL
233
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
41
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8311ec8a2
tor-0.3.5.8-1.el7
35
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9c2c40e3df
guacamole-server-1.0.0-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-317c9a2f81
drupal7-7.65-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-15679bf3f9
wordpress-5.1.1-4.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-114610bd18
golang-googlecode-go-crypto-0-0.15.20190324gitb7391e9.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f1efad2982
aria2-1.34.0-4.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7bae341677
chromium-73.0.3683.86-2.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c9cd2d9a6c
ntfs-3g-2017.3.23-11.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-50a6a1ddfd
afflib-3.7.18-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
389-console-1.1.19-4.el7
ansible-2.7.10-1.el7
beakerlib-1.18-2.el7
lua-cqueues-20171014-3.el7
openjpeg2-2.3.1-1.el7
pylint-1.6.5-6.el7
python-pycodestyle-2.5.0-1.el7
python-whoosh-2.7.4-5.el7
python3-jinja2-2.8-4.el7
python3-markupsafe-0.23-3.el7
python3-pygments-2.2.0-3.el7
python3-sphinx-1.2.3-5.el7
python3-sqlalchemy-1.1.3-3.el7
python3-virtualenv-15.1.0-4.el7
singularity-3.1.1-1.el7
umr-1.0-2.20190403git1139876.el7
Details about builds:
================================================================================
389-console-1.1.19-4.el7 (FEDORA-EPEL-2019-cbaef32637)
389 Management Console
--------------------------------------------------------------------------------
Update Information:
Update classpath for jss >= 4.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 25 2019 Alexander Scheel <cipherboy(a)fedoraproject.org> - 1.1.19-4
- Update classpath for jss >= 4.5.0
- rhbz: 1634525
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.19-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Dec 20 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.1.19-2
- Bump version to 1.1.19-2
- Mark package as deprecated
* Thu Oct 18 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.1.19-1
- Bump version to 1.1.19-1
- Add JSS's dependencies to the classpath of 389-console
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.18-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.1.18-5
- Escape macros in %changelog
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.18-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.18-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.18-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ansible-2.7.10-1.el7 (FEDORA-EPEL-2019-cd7d7b3e23)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.10 bugfix release. See
https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v...
for detailed information.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Kevin Fenzi <kevin(a)scrye.com> - 2.7.10-1
- Update to 2.7.10. Fixes bug #1696379
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696379 - ansible-2.7.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696379
--------------------------------------------------------------------------------
================================================================================
beakerlib-1.18-2.el7 (FEDORA-EPEL-2019-0bd5996387)
A shell-level integration testing library
--------------------------------------------------------------------------------
Update Information:
rebase to beakerlib-1.18 - support for dnf/dnf download - support direct
systemctl call - netstat replaced by ss - ability to run without python (no
journal.xml) - better handling of reboots - better handling of persistent data -
final report polishing - better compatibility with old bash - <prefix>LibraryDir
variable pointing to the library directory for all imported libraries - fallback
to curl if wget is not available - updated documentation
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Dalibor Pospisil <dapospis(a)redhat.com> - 1.18-2
- rebase to beakerlib-1.18
- support for dnf/dnf download
- support direct systemctl call
- netstat replaced by ss
- ability to run without python (no journal.xml)
- better handling of reboots
- better handling of persistent data
- final report polishing
- better compatibility with old bash
- <prefix>LibraryDir variable pointing to the library directory for all imported
libraries
- fallback to curl if wget is not available
- updated documentation
--------------------------------------------------------------------------------
================================================================================
lua-cqueues-20171014-3.el7 (FEDORA-EPEL-2019-388b83ade7)
Stackable Continuation Queues for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
initial lua-cqueues package for EL7 ---- initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.3.1-1.el7 (FEDORA-EPEL-2019-c739f0a89d)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
Update to openjpeg2-2.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 2 2019 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-1
- Update to 2.3.1
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Dec 20 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-10
- Backport patches for CVE-2018-18088, CVE-2018-6616
* Thu Oct 4 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-9
- Backport patch for CVE-2018-5785 (#1537758)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Mar 7 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-7
- BR: gcc-c++
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1638561 - CVE-2018-18088 openjpeg2: NULL pointer dereference in the
imagetopnm function of jp2/convert.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1638561
[ 2 ] Bug #1626331 - CVE-2018-16375 openjpeg2: openjpeg: Heap-based buffer overflow in
pnmtoimage function in bin/jpwl/convert.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1626331
[ 3 ] Bug #1626323 - CVE-2018-16376 openjpeg2: openjpeg: Heap-based buffer overflow in
function t2_encode_packet in src/lib/openmj2/t2.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1626323
[ 4 ] Bug #1609911 - CVE-2018-14423 openjpeg2: Division-by-zero vulnerabilities in
lib/openjp3d/pi.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1609911
[ 5 ] Bug #1542322 - CVE-2018-6616 openjpeg2: Excessive iteration in
openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1542322
--------------------------------------------------------------------------------
================================================================================
pylint-1.6.5-6.el7 (FEDORA-EPEL-2019-f076346dfb)
Analyzes Python code looking for bugs and signs of poor quality
--------------------------------------------------------------------------------
Update Information:
Obsolete old python34-pylint
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.5-6
- Obsolete old python34-pylint
--------------------------------------------------------------------------------
================================================================================
python-pycodestyle-2.5.0-1.el7 (FEDORA-EPEL-2019-106a14c734)
Python style guide checker
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)cora.nwra.com> - 2.5.0-1
- Update to 2.5.0
--------------------------------------------------------------------------------
================================================================================
python-whoosh-2.7.4-5.el7 (FEDORA-EPEL-2019-813cc12887)
Fast, pure-Python full text indexing, search, and spell checking library
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 2.7.4-5
- Build for python3_other
--------------------------------------------------------------------------------
================================================================================
python3-jinja2-2.8-4.el7 (FEDORA-EPEL-2019-813cc12887)
General purpose template engine
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 2.8-4
- Build for python3_other
--------------------------------------------------------------------------------
================================================================================
python3-markupsafe-0.23-3.el7 (FEDORA-EPEL-2019-813cc12887)
Implements a XML/HTML/XHTML Markup safe string for Python
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 0.23-3
- Build for python3_other
--------------------------------------------------------------------------------
================================================================================
python3-pygments-2.2.0-3.el7 (FEDORA-EPEL-2019-813cc12887)
Syntax highlighting engine written in Python
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 2.2.0-3
- Build for python3_other
--------------------------------------------------------------------------------
================================================================================
python3-sphinx-1.2.3-5.el7 (FEDORA-EPEL-2019-813cc12887)
Python documentation generator
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 1.2.3-5
- Build for python3_other
- Move generic python3 script and man pages into main package
- Move shared translations into common package
--------------------------------------------------------------------------------
================================================================================
python3-sqlalchemy-1.1.3-3.el7 (FEDORA-EPEL-2019-813cc12887)
Modular and flexible ORM library for python
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 1.1.3-3
- Build for python3_other
--------------------------------------------------------------------------------
================================================================================
python3-virtualenv-15.1.0-4.el7 (FEDORA-EPEL-2019-813cc12887)
Tool to create isolated Python environments
--------------------------------------------------------------------------------
Update Information:
- Fix pytho34-virtualenv egg-info conflict - Build for python3_other
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Orion Poplawski <orion(a)nwra.com> - 15.1.0-4
- Fix egg-info for python3_other
--------------------------------------------------------------------------------
================================================================================
singularity-3.1.1-1.el7 (FEDORA-EPEL-2019-bde858e58d)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.1.1-1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 2 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.1.1-1
- Update to upstream 3.1.1-1
* Mon Feb 25 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.1.0-1
- Update to upstream 3.1.0-1
* Tue Jan 22 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.3-1
- Update to upstream 3.0.3-1 release.
* Fri Jan 18 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.3-rc2
- Update to upstream 3.0.3-rc2
* Wed Jan 16 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.3-rc1
- Update to upstream 3.0.3-rc1
* Wed Jan 9 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.2-1.2
- Add patch for PR 2531
* Mon Jan 7 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.2-1.1
- Update to upstream 3.0.2
- Added patches for PRs 2472, 2478, 2481
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693909 - singularity-3.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693909
--------------------------------------------------------------------------------
================================================================================
umr-1.0-2.20190403git1139876.el7 (FEDORA-EPEL-2019-f64802800f)
AMDGPU Userspace Register Debugger
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------