The following Fedora EPEL 7 Security updates need testing:
Age URL
527
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
269
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
267
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-35e87bab10
perl-Clipboard-0.21-1.el7.1
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a062204588
rubygem-rack-1.6.12-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-87fd65eed3
python3-pillow-6.2.2-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-345003feba
thunderbird-enigmail-2.1.5-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-348d34c4c6
elog-3.1.4-1.20190113git283534d97d5a.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-807cf11068
upx-3.95-5.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a16a109471
links-2.20.2-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d60f779676
python-pip-epel-8.1.2-11.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-43a3a1207a
ansible-2.9.3-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-751a496bfa
java-latest-openjdk-13.0.2.8-1.rolling.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-79.0.3945.130-1.el7
future-0.18.2-2.el7
ignition-0.35.0-1.git7afbeba.el7
nagios-plugins-check-updates-1.7.8-2.el7
nodejs-codemirror-5.51.0-1.el7
perl-lib-abs-0.94-2.el7
python-string_utils-0.6.0-10.el7
regindexer-0.6-1.el7
rssh-2.3.4-16.el7
scons-3.1.2-1.el7
shigofumi-0.8-2.el7
sympa-6.2.52-2.el7
Details about builds:
================================================================================
chromium-79.0.3945.130-1.el7 (FEDORA-EPEL-2020-fa33fd16b3)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 79.0.3945.130. Fixes the following security issues: * CVE-2020-6378 *
CVE-2020-6379 * CVE-2020-6380 ---- Update to 79.0.3945.117, fixes
CVE-2020-6377.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 17 2020 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.130-1
- update to 79.0.3945.130
* Thu Jan 9 2020 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.117-1
- update to 79.0.3945.117
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1793514 - CVE-2020-6378 chromium-browser: use-after-free in speech
recognizer
https://bugzilla.redhat.com/show_bug.cgi?id=1793514
[ 2 ] Bug #1793529 - CVE-2020-6379 chromium-browser: use-after-free in speech
recognizer
https://bugzilla.redhat.com/show_bug.cgi?id=1793529
[ 3 ] Bug #1793537 - CVE-2020-6380 chromium-browser: extension message verification
error
https://bugzilla.redhat.com/show_bug.cgi?id=1793537
--------------------------------------------------------------------------------
================================================================================
future-0.18.2-2.el7 (FEDORA-EPEL-2020-7f21b78236)
Easy, clean, reliable Python 2/3 compatibility
--------------------------------------------------------------------------------
Update Information:
- Release 0.18.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 24 2020 Antonio Trande <sagitterATfedoraproject.org> - 0.18.2-2
- Build Python2 version on Fedora 30
* Fri Jan 24 2020 Antonio Trande <sagitterATfedoraproject.org> - 0.18.2-1
- Release 0.18.2
* Sat Oct 12 2019 Antonio Trande <sagitterATfedoraproject.org> - 0.18.0-2
- Use python3_version_nodots macro
* Sat Oct 12 2019 Antonio Trande <sagitterATfedoraproject.org> - 0.18.0-1
- Release 0.18.0
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> -
0.17.1-0.5.20190506git23989c4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Sun Aug 18 2019 Miro Hron��ok <mhroncok(a)redhat.com> -
0.17.1-0.4.20190506git23989c4
- Rebuilt for Python 3.8
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.17.1-0.3.20190506git23989c4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Jul 23 2019 Antonio Trande <sagitterATfedoraproject.org> -
0.17.1-0.2.20190506git23989c4
- Bump to a pre-release 0.17.1, commit #23989c4
- Unversioned commands point to Python3 on Fedora
- Obsolete Python2 version on Fedora
* Tue Apr 9 2019 Antonio Trande <sagitterATfedoraproject.org> -
0.17.1-0.1.20190313gitc423752
- Bump to a pre-release 0.17.1 (fix rhbz#1698160, upstream bug #488)
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Oct 26 2018 Antonio Trande <sagitterATfedoraproject.org> - 0.17.0-1
- Release 0.17.0
--------------------------------------------------------------------------------
================================================================================
ignition-0.35.0-1.git7afbeba.el7 (FEDORA-EPEL-2020-1a7c7c3c4d)
First boot installer and configuration tool
--------------------------------------------------------------------------------
Update Information:
- Support adding HTTP headers to remote resource requests - Stabilize config
spec 2.4.0 - Various initrd improvements
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2020 Benjamin Gilbert <bgilbert(a)redhat.com> - 0.35.0-1.git7afbeba
- Update to v0.35.0
- Update to ignition-dracut d5d5663
- Add 99emergency-timeout Dracut module
* Thu Dec 19 2019 Andrew Jeddeloh <ajeddelo(a)redhat.com> - 0.34.0-1.git92f874c
- Update to v0.34.0.
- Add ignition-validate-nonlinux subpackage. This should not be installed. It
is only used for building binaries to sign by Fedora release engineering and
include on the Ignition project's Github releases page.
* Fri Mar 22 2019 Dusty Mabe <dusty(a)dustymabe.com> - 0.31.0-7.gitf59a653
- ignition-dracut: Pull in latest from spec2x branch
* grub: support overriding network kcmdline args
- ignition: pull in subuid/subgid files patch from spec2x branch
* stages/files: Also relabel subuid/subgid files
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-check-updates-1.7.8-2.el7 (FEDORA-EPEL-2020-ea24160281)
A Nagios plugin to check if Red Hat or Fedora system is up-to-date
--------------------------------------------------------------------------------
Update Information:
Should fix rhbz#1794308
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2020 Piotr Popieluch <piotr1212(a)gmail.com> - 1.7.8-2
- Remove bundled libraries
* Sat Jan 18 2020 Piotr Popieluch <piotr1212(a)gmail.com> - 1.7.8-1
- Update to 1.7.8
- Add version to Obsoletes:
* Mon Dec 2 2019 Martin Jackson <mhjacks(a)swbell.net> - 1.6.23-4
- Conditionalize yum Requires
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.23-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.23-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1794308 - Please update nagios-plugins-check-updates to v1.7.8
https://bugzilla.redhat.com/show_bug.cgi?id=1794308
--------------------------------------------------------------------------------
================================================================================
nodejs-codemirror-5.51.0-1.el7 (FEDORA-EPEL-2020-38473c33ed)
A versatile JS text editor
--------------------------------------------------------------------------------
Update Information:
Update to 5.51.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2020 Mosaab Alzoubi <moceap(a)hotmail.com> - 5.51.0-1
- Update to 5.51.0
- Use license macro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1753893 - nodejs-codemirror-5.51.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1753893
--------------------------------------------------------------------------------
================================================================================
perl-lib-abs-0.94-2.el7 (FEDORA-EPEL-2020-e63774f26a)
Module lib that makes relative path absolute to caller
--------------------------------------------------------------------------------
Update Information:
This release corrects tests.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2020 Petr Pisar <ppisar(a)redhat.com> - 0.94-2
- Correct unbundling
* Thu Jan 23 2020 Petr Pisar <ppisar(a)redhat.com> - 0.94-1
- 0.94 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1794207 - perl-lib-abs-0.94 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1794207
--------------------------------------------------------------------------------
================================================================================
python-string_utils-0.6.0-10.el7 (FEDORA-EPEL-2020-a2a29b0ffd)
A python module containing utility functions for strings
--------------------------------------------------------------------------------
Update Information:
Update build macros
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2020 Yatin Karel <ykarel(a)redhat.com> - 0.6.0-10
- Fix condition for El8
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.0-8
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.0-7
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
regindexer-0.6-1.el7 (FEDORA-EPEL-2020-2e8a0c2e25)
Tool for creating an index of a container registry
--------------------------------------------------------------------------------
Update Information:
Update to regindexer-0.6. This adds features for supporting indexes where the
Flatpak metadata is stored in labels rather than in annotations. Including: -
Allow writing an index of images that include a particular label - Allow
writing that skips including the Flatpak labels or annotations (so that dual-
metadata images don't create a bloated index.) - Handle icons in labels ----
This update makes the regindexer daemon compatible with fedmsg topics that are
generated by Bodhi v4 via the fedora-messaging => fedmsg bridge.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2020 Owen Taylor <otaylor(a)redhat.com> - 0.6-1
- Version 0.6 (add support for Flatpak metadata in labels)
* Thu Jun 6 2019 fedora-toolbox <otaylor(a)redhat.com> - 0.5-1
- Version 0.5 (compatibility with Bodhi v4)
--------------------------------------------------------------------------------
================================================================================
rssh-2.3.4-16.el7 (FEDORA-EPEL-2020-67c18c9c65)
Restricted shell for use with OpenSSH, allowing only scp and/or sftp
--------------------------------------------------------------------------------
Update Information:
Fix regression in patch for CVE-2019-1000018.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 21 2019 Frederick Lefebvre <fredlef(a)amazon.com> - 2.3.4-16
- Fix regression in patch for CVE-2019-1000018.
--------------------------------------------------------------------------------
================================================================================
scons-3.1.2-1.el7 (FEDORA-EPEL-2020-8803b9d519)
An Open Source software construction tool
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 17 2019 Antonio Trande <sagitter(a)fedoraproject.org> - 3.1.2-1
- Update to 3.1.2
- Use pathfix.py
- Add python-lxml lynx BR
* Fri Nov 15 2019 Antonio Trande <sagitter(a)fedoraproject.org> - 3.1.1-4
- Fix Changelog
* Fri Nov 15 2019 Antonio Trande <sagitter(a)fedoraproject.org> - 3.1.1-3
- Python2 SCons no longer built on Fedora 32+
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.1.1-2
- Rebuilt for Python 3.8.0rc1 (#1748018)
--------------------------------------------------------------------------------
================================================================================
shigofumi-0.8-2.el7 (FEDORA-EPEL-2020-9e7e18513c)
Command line client for accessing the Czech Data Boxes
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory management in an error path when parsing the
commands. It also a definition of a global variable.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 17 2020 Jeff Law <law(a)redhat.com> - 0.8-2
- Fix argument to zfree call in tokenize
- Fix building with GCC 10
--------------------------------------------------------------------------------
================================================================================
sympa-6.2.52-2.el7 (FEDORA-EPEL-2020-e25329a701)
Powerful multilingual List Manager
--------------------------------------------------------------------------------
Update Information:
Add upstream patches to fix 2 scenario failures.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 19 2020 Xavier Bachelot <xavier(a)bachelot.org> 6.2.52-2
- Add upstream patches to fix 2 scenario failures.
--------------------------------------------------------------------------------