The following Fedora EPEL 7 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-86538d58b1
strongswan-5.6.3-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-04bf550089
nikto-2.1.6-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-656b24ec40
chromium-67.0.3396.79-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e70dca1af5
thunderbird-enigmail-2.0.7-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.5.5-1.el7
epel-rpm-macros-7-19
fleet-commander-admin-0.10.8-3.el7
gnome-shell-extension-openweather-1-0.33.20180616git401d68e.el7
marco-1.16.1-3.el7
nodejs-6.14.3-1.el7
python-pytoml-0.1.16-1.el7
vim-fugitive-2.3-1.el7
Details about builds:
================================================================================
ansible-2.5.5-1.el7 (FEDORA-EPEL-2018-fa11f61de0)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.5 bugfix/security release See
https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v...
for full changes. Fixes CVE-2018-10855
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 14 2018 Kevin Fenzi <kevin(a)scrye.com> - 2.5.5-1
- Update to 2.5.5. Fixes bug #1580530 and #1584927
- Fixes 1588855,1590200 (fedora) and 1588855,1590199 (epel)
CVE-2018-10855 (security bug with no_log handling)
* Thu May 31 2018 Kevin Fenzi <kevin(a)scrye.com> - 2.5.4-1
- Update to 2.5.4. Fixes bug #1584927
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580530 - ansible-2.5.3-1.fc28 broke "synchronize" task
https://bugzilla.redhat.com/show_bug.cgi?id=1580530
[ 2 ] Bug #1584927 - ansible-2.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1584927
[ 3 ] Bug #1590199 - CVE-2018-10855 ansible: Failed tasks do not honour no_log option
allowing for secrets to be disclosed in logs [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1590199
[ 4 ] Bug #1590200 - CVE-2018-10855 ansible: Failed tasks do not honour no_log option
allowing for secrets to be disclosed in logs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1590200
--------------------------------------------------------------------------------
================================================================================
epel-rpm-macros-7-19 (FEDORA-EPEL-2018-99aa68bf61)
Extra Packages for Enterprise Linux RPM macros
--------------------------------------------------------------------------------
Update Information:
Add the %set_build_flags macro, to enhance specfile compatibility with Fedora.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2018 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 7-19
- Add %set_build_flags macro.
--------------------------------------------------------------------------------
================================================================================
fleet-commander-admin-0.10.8-3.el7 (FEDORA-EPEL-2018-cbefb06724)
Fleet Commander
--------------------------------------------------------------------------------
Update Information:
Fixed python3 dependency for EPEL7 ---- Updated to version 0.10.8
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2018 Oliver Gutierrez <ogutierrez(a)redhat.com> - 0.10.8-3
- Fixed python3 dependency for EPEL7
* Thu Jun 14 2018 Oliver Gutierrez <ogutierrez(a)redhat.com> - 0.10.8-2
- Fixed dependency for EPEL7
* Thu Jun 7 2018 Oliver Gutierrez <ogutierrez(a)redhat.com> - 0.10.8-1
- Updated to release 0.10.8
- Migrated logger to python3
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-openweather-1-0.33.20180616git401d68e.el7
(FEDORA-EPEL-2018-f48311d606)
Display weather information from many locations in the world
--------------------------------------------------------------------------------
Update Information:
Moved upstream to gitlab, updated urls accordingly. Update some language-files.
Make max location-length configurable.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 16 2018 Jens Lody <fedora(a)jenslody.de> - 1-0.33.20180616git401d68e
- Moved the upstream repo to gitlab.
- Fixed some locale-files.
- Added option to cinfigure the max location-length.
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1-0.32.20171030gita86b949
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Nov 26 2017 Jens Lody <fedora(a)jenslody.de> - 1-0.32.20171126gitcac94f2
- Fix search-results popup not shown in last revision.
--------------------------------------------------------------------------------
================================================================================
marco-1.16.1-3.el7 (FEDORA-EPEL-2018-75111625de)
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
- fix for rhbz (#1591973)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 16 2018 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.16.1-3
- fix for rhbz (#1591973)
* Sat Jun 16 2018 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.16.1-2
- fix for rhbz (#1591973)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591973 - Windows get permanently composited on the screen
https://bugzilla.redhat.com/show_bug.cgi?id=1591973
--------------------------------------------------------------------------------
================================================================================
nodejs-6.14.3-1.el7 (FEDORA-EPEL-2018-871d88af0e)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update for security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 14 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1:6.14.3-1
- Update to 6.14.3 security release
-
https://nodejs.org/en/blog/release/v6.14.3/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591019 - CVE-2018-7162 nodejs: denial of service (DoS) by causing a node
process which provides an http server supporting TLS server to crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591019
[ 2 ] Bug #1591014 - CVE-2018-7161 nodejs: denial of service (DoS) by causing a node
server providing an http2 server to crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591014
[ 3 ] Bug #1591009 - CVE-2018-7167 nodejs: Denial of Service by calling Buffer.fill() or
Buffer.alloc() with specially crafted parameters [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591009
--------------------------------------------------------------------------------
================================================================================
python-pytoml-0.1.16-1.el7 (FEDORA-EPEL-2018-a8a4d06fc5)
Parser for TOML
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.16
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 16 2018 Julien Enselme <jujens(a)jujens.eu> - 0.1.16-1
- Update to 0.1.16
* Fri Mar 16 2018 Tomas Orsava <torsava(a)redhat.com> - 0.1.14-5.git7dea353
- Conditionalize the Python 2 subpackage
- Don't build the Python 2 subpackage on EL > 7 and Fedora > 28
* Sat Jan 27 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.1.14-3.git7dea353
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1581006 - python-pytoml-v0.1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1581006
--------------------------------------------------------------------------------
================================================================================
vim-fugitive-2.3-1.el7 (FEDORA-EPEL-2018-0ea67b631f)
A Git wrapper so awesome, it should be illegal
--------------------------------------------------------------------------------
Update Information:
- Latest upstream - Mark documentation file as %%doc
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2018 Carl George <carl(a)george.computer> - 2.3-1
- Latest upstream
- Mark documentation file as %doc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585397 - vim-fugitive-2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1585397
--------------------------------------------------------------------------------