The following Fedora EPEL 7 Security updates need testing:
Age URL
252
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
59
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8311ec8a2
tor-0.3.5.8-1.el7
53
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9c2c40e3df
guacamole-server-1.0.0-1.el7
33
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-317c9a2f81
drupal7-7.65-1.el7
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f1efad2982
aria2-1.34.0-4.el7
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-50a6a1ddfd
afflib-3.7.18-2.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-6ea040e59b
hostapd-2.7-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ae064347d8
python3-jinja2-2.8.1-2.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7fc4459823
libmediainfo-18.12-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
bird-1.6.6-1.el7
java-latest-openjdk-12.0.1.12-1.rolling.el7
lua-basexx-0.4.0-2.el7
lua-binaryheap-0.4-1.el7
lua-compat53-0.7-1.el7
lua-cqueues-20171014-6.el7
lua-fifo-0.2-1.el7
lua-http-0.3-2.el7
lua-lpeg-patterns-0.5-1.el7
lua-luaossl-20181207-1.el7
mock-1.4.15-1.el7
php-horde-horde-5.2.21-1.el7
php-horde-turba-4.2.24-1.el7
php-pear-CAS-1.3.7-1.el7
python-rfc3986-1.3.0-1.el7
python3-sip-4.19.16-1.el7
Details about builds:
================================================================================
bird-1.6.6-1.el7 (FEDORA-EPEL-2019-4f7752c4b1)
BIRD Internet Routing Daemon
--------------------------------------------------------------------------------
Update Information:
BIRD 1.6.6 (2019-02-27) ======================= * Several bugfixes related to
route propagation BIRD 1.6.5 (2019-01-05) ======================= * MRT
table dumps (RFC 6396) * BGP Long-lived graceful restart * Filter: Make
ifname attribute modifiable * Improved keeping track of IPv6 link-local
addresses * Many bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 6 2019 Robert Scheck <robert(a)fedoraproject.org> - 1.6.6-1
- Upgrade to 1.6.6
- Modernization and cleanup of spec file
- Ensure /etc/bird.conf can be only read by BIRD user
--------------------------------------------------------------------------------
================================================================================
java-latest-openjdk-12.0.1.12-1.rolling.el7 (FEDORA-EPEL-2019-efd25732f7)
OpenJDK Runtime Environment 12
--------------------------------------------------------------------------------
Update Information:
New package for short term support release OpenJDK is available for EPEL 7. This
package is designated as a rolling package, containing always current STS
release of OpenJDK (now it is 12). It can be installed in parallel with any
other OpenJDK package, however, it will always have lowest priority, and can be
switched via alternatives. ---- New package for short term support release
OpenJDK is available for EPEL 7. This package is designated as a rolling
package, containing always current STS release of OpenJDK (now it is 12). It can
be installed in parallel with any other OpenJDK package, however, it will always
have lowest priority, and can be switched via alternatives.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693987 - Review Request: java-latest-openjdk - rolling release for short
term support OpenJDK
https://bugzilla.redhat.com/show_bug.cgi?id=1693987
--------------------------------------------------------------------------------
================================================================================
lua-basexx-0.4.0-2.el7 (FEDORA-EPEL-2019-097b3b767f)
BaseXX encoding and decoding library for Lua
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-binaryheap-0.4-1.el7 (FEDORA-EPEL-2019-097b3b767f)
Binary heap implementation for Lua
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-compat53-0.7-1.el7 (FEDORA-EPEL-2019-097b3b767f)
Compatibility module providing Lua-5.3-style APIs for Lua 5.1
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-cqueues-20171014-6.el7 (FEDORA-EPEL-2019-097b3b767f)
Stackable Continuation Queues for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-fifo-0.2-1.el7 (FEDORA-EPEL-2019-097b3b767f)
FIFO library for Lua
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-http-0.3-2.el7 (FEDORA-EPEL-2019-097b3b767f)
HTTP library for Lua
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-lpeg-patterns-0.5-1.el7 (FEDORA-EPEL-2019-097b3b767f)
A collection of LPEG patterns
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
lua-luaossl-20181207-1.el7 (FEDORA-EPEL-2019-097b3b767f)
Most comprehensive OpenSSL module in the Lua universe
--------------------------------------------------------------------------------
Update Information:
lua-http with dependencies ---- initial lua-cqueues package for EL7 ----
initial lua-cqueues package for EL7
--------------------------------------------------------------------------------
================================================================================
mock-1.4.15-1.el7 (FEDORA-EPEL-2019-9f8e99528d)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
- ignore weird distro.version() [RHBZ#1690374] - switch to string rpm's API
[RHBZ#1693759] - FileNotFoundError is not defined in Python 2 [RHBZ#1696234] -
Fix python2-devel build require - temporary do not make errors from createrepo_c
fatal [GH#249] - allow to configure disabled DNF plugins [GH#210] - print
warning when user is not in the mock group [GH#244] - implement Dynamic Build
Dependencies - Allow mock to be built for epel 8, and without tests - Add debug
logging for systemd-nspawn and related args - Fix mock for non-ascii paths on
python2 - require python-jinja2 rather than python2-jinja2 - Fix --enable-
network documentation in man page
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 22 2019 Miroslav Such�� <msuchy(a)redhat.com> 1.4.15-1
- ignore weird distro.version() [RHBZ#1690374]
- switch to string rpm's API [RHBZ#1693759]
- FileNotFoundError is not defined in Python 2 [RHBZ#1696234]
- Fix python2-devel build require
- temporary do not make errors from createrepo_c fatal [GH#249]
- allow to configure disabled DNF plugins [GH#210]
- print warning when user is not in the mock group [GH#244]
- implement Dynamic Build Dependencies (msuchy(a)redhat.com)
- Allow mock to be built for epel 8, and without tests
(vanmeeuwen(a)kolabsys.com)
- Add debug logging for systemd-nspawn and related args (riehecky(a)fnal.gov)
- Fix mock for non-ascii paths on python2 (a.badger(a)gmail.com)
- require python-jinja2 rather than python2-jinja2
- Fix --enable-network documentation in man page (directhex(a)apebox.org)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696234 - Missing package error not catched
https://bugzilla.redhat.com/show_bug.cgi?id=1696234
[ 2 ] Bug #1693759 - mock: Switch to a string for RPM calls (oncoming rpm API fix
change)
https://bugzilla.redhat.com/show_bug.cgi?id=1693759
[ 3 ] Bug #1690374 - flatpak-module build-module build fails with ValueError: could not
convert string to float: '049-26.git20181204.fc30'
https://bugzilla.redhat.com/show_bug.cgi?id=1690374
--------------------------------------------------------------------------------
================================================================================
php-horde-horde-5.2.21-1.el7 (FEDORA-EPEL-2019-f05ef50515)
Horde Application Framework
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.21** * [mjr] SECURITY: Fix XSS vulnerability in the Cloud Block.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 23 2019 Remi Collet <remi(a)remirepo.net> - 5.2.21-1
- update to 5.2.21
- use range dependencies
--------------------------------------------------------------------------------
================================================================================
php-horde-turba-4.2.24-1.el7 (FEDORA-EPEL-2019-add436bec5)
A web based address book
--------------------------------------------------------------------------------
Update Information:
**turba 4.2.24** * [mjr] SECURITY: Fix XSS vulnerability in display of contact
tags. * [jan] Clarify objectClass filter examples for LDAP backends (Ralf Lang).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 23 2019 Remi Collet <remi(a)remirepo.net> - 4.2.24-1
- update to 4.2.24
- use range dependencies
--------------------------------------------------------------------------------
================================================================================
php-pear-CAS-1.3.7-1.el7 (FEDORA-EPEL-2019-ce35a27884)
Central Authentication Service client library in php
--------------------------------------------------------------------------------
Update Information:
**Changes in version 1.3.7** **Bug Fixes:** * Fix pear package [#297] (Phil
Fenstermacher) **Improvement:** * add method to get list of supported
protocols (#293) Julien Boulen
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 23 2019 Remi Collet <remi(a)remirepo.net> - 1.3.7-1
- update to 1.3.7
--------------------------------------------------------------------------------
================================================================================
python-rfc3986-1.3.0-1.el7 (FEDORA-EPEL-2019-fa7cd77ba6)
Validating URI References per RFC 3986
--------------------------------------------------------------------------------
Update Information:
Build for EPEL
--------------------------------------------------------------------------------
================================================================================
python3-sip-4.19.16-1.el7 (FEDORA-EPEL-2019-b56adcd6f9)
SIP - Python/C++ Bindings Generator
--------------------------------------------------------------------------------
Update Information:
Python 3 version of python-sip
--------------------------------------------------------------------------------