The following Fedora EPEL 7 Security updates need testing:
Age URL
352
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
127
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
93
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
91
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
63
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-fc63c75ab1
hostapd-2.8-1.el7
28
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897
dosbox-0.74.3-2.el7
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-487a6fb279
knot-2.8.2-1.el7 knot-resolver-4.1.0-1.el7
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-aabd063c30
squirrelmail-1.4.23-1.el7.20190710
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ef655ec55e
proftpd-1.3.5e-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
HepMC-2.06.10-1.el7
firefox-pkcs11-loader-3.13.3-1.el7
python-ns1-python-0.10.0-2.el7
python-pyvirtualize-0.9-6.20181003git57d2307.el7
python-pyvmomi-6.7.1-5.el7
python-vconnector-0.5.3-4.el7
python-vevents-0.1.0-0.2.20149631git3ff37a2.el7
python-vpoller-0.7.3-6.el7
scdoc-1.9.6-2.el7
upx-3.95-4.el7
webextension-token-signing-1.0.9-1.el7
zstd-1.4.2-1.el7
Details about builds:
================================================================================
HepMC-2.06.10-1.el7 (FEDORA-EPEL-2019-05defa416d)
C++ Event Record for Monte Carlo Generators
--------------------------------------------------------------------------------
Update Information:
HepMC2 update.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 28 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.06.10-1
- Update to version 2.06.10
- Drop patches - all fixed in the new version
- Drop the -ffp-contract=off hack
- Remove redundant m_outstream->setf(std::ios::fixed)
- Fix GenEventCopmpare
- Adjust expected test output for changes in the code
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.06.09-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
firefox-pkcs11-loader-3.13.3-1.el7 (FEDORA-EPEL-2019-9467875c85)
Helper script for Firefox that sets up the browser for authentication with Estonian
ID-card
--------------------------------------------------------------------------------
Update Information:
- Upstream release 3.13.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 22 2019 Dmitri Smirnov <dmitri(a)smirnov.ee> 3.13.3-1
- Upstream release 3.13.3: Unload old IDEMIA PKCS11
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.13.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Dec 10 2018 Dmitri Smirnov <dmitri(a)smirnov.ee> 3.13.1-1
- upstream release 3.13.1
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.13.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-ns1-python-0.10.0-2.el7 (FEDORA-EPEL-2019-55182d83b9)
Python SDK for the NS1 DNS platform
--------------------------------------------------------------------------------
Update Information:
Fix support for `use_client_subnet` option
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.10.0-2
- Backport fix for use_client_subnet option
--------------------------------------------------------------------------------
================================================================================
python-pyvirtualize-0.9-6.20181003git57d2307.el7 (FEDORA-EPEL-2019-13fcfdd459)
Another python frontend to access and manage pyvmomi
--------------------------------------------------------------------------------
Update Information:
drop brand
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Raphael Groner <projects.rg(a)smart.ms> - 0.9-6.20181003git57d2307
- drop brand
- group BR by python version and subpackage
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.9-5.20181003git57d2307
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pyvmomi-6.7.1-5.el7 (FEDORA-EPEL-2019-f4ab7e712c)
vSphere Python SDK
--------------------------------------------------------------------------------
Update Information:
drop brand
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Raphael Groner <projects.rg(a)smart.ms> - 6.7.1-5
- drop brand
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.7.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-vconnector-0.5.3-4.el7 (FEDORA-EPEL-2019-bc3ebb55c2)
vSphere Connector Module for Python
--------------------------------------------------------------------------------
Update Information:
drop brand
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Raphael Groner <projects.rg(a)smart.ms> - 0.5.3-4
- drop brand
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659777 - Review Request: python-vconnector - vSphere Connector Module for
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1659777
--------------------------------------------------------------------------------
================================================================================
python-vevents-0.1.0-0.2.20149631git3ff37a2.el7 (FEDORA-EPEL-2019-2b31c26ed7)
vSphere Events from the command-line
--------------------------------------------------------------------------------
Update Information:
intial package, rhbz#1733024
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1733024 - Review Request: python-vevents - vSphere Events from the
command-line
https://bugzilla.redhat.com/show_bug.cgi?id=1733024
--------------------------------------------------------------------------------
================================================================================
python-vpoller-0.7.3-6.el7 (FEDORA-EPEL-2019-51cc802fd3)
Distributed vSphere API Proxy
--------------------------------------------------------------------------------
Update Information:
drop brand
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Raphael Groner <projects.rg(a)smart.ms> - 0.7.3-6
- drop brand
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1669793 - Review Request: python-vpoller - Distributed vSphere API Proxy
https://bugzilla.redhat.com/show_bug.cgi?id=1669793
--------------------------------------------------------------------------------
================================================================================
scdoc-1.9.6-2.el7 (FEDORA-EPEL-2019-d5c9ce4b36)
Tool for generating roff manual pages
--------------------------------------------------------------------------------
Update Information:
Initial EPEL7 package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734713 - scdoc package for rhel
https://bugzilla.redhat.com/show_bug.cgi?id=1734713
--------------------------------------------------------------------------------
================================================================================
upx-3.95-4.el7 (FEDORA-EPEL-2019-44d26d23ea)
Ultimate Packer for eXecutables
--------------------------------------------------------------------------------
Update Information:
Patches for CVE-2019-14295, CVE-2019-14296
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 3.95-4
- Upstream patches for CVE-2019-14295 and CVE-2019-14296.
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.95-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.95-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Aug 27 2018 Gwyn Ciesla <limburgher@gmail> - 3.95-1
- 3.95.
- Switch to upstream's lzma fork.
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.94-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1735673 - CVE-2019-14296 upx: denial of service in canUnpack in p_vmlinx.cpp
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1735673
[ 2 ] Bug #1735669 - CVE-2019-14295 upx: integer overflow in getElfSections function in
p_vmlinx.cpp [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1735669
[ 3 ] Bug #1735672 - CVE-2019-14296 upx: denial of service in canUnpack in p_vmlinx.cpp
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1735672
[ 4 ] Bug #1735668 - CVE-2019-14295 upx: integer overflow in getElfSections function in
p_vmlinx.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1735668
--------------------------------------------------------------------------------
================================================================================
webextension-token-signing-1.0.9-1.el7 (FEDORA-EPEL-2019-c194e2da26)
Chrome and Firefox extension for signing with your eID on the web
--------------------------------------------------------------------------------
Update Information:
- Upstream release 1.0.9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 22 2019 Dmitri Smirnov <dmitri(a)smirnov.ee> - 1.0.9-1
- 1.0.9 upstream release
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sun Dec 9 2018 Dmitri Smirnov <dmitri(a)smirnov.ee> - 1.0.8-1
- 1.0.8 upstream release
* Tue Dec 4 2018 Pete Walter <pwalter(a)fedoraproject.org> - 1.0.7-3
- Update summary and description now that Chrome is supported again
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
zstd-1.4.2-1.el7 (FEDORA-EPEL-2019-557739d363)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 31 2019 P��draig Brady <P(a)draigBrady.com> - 1.4.2-1
- Latest upstream
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------