The following Fedora EPEL 7 Security updates need testing:
Age URL
647
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
389
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
387
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
96
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465
python34-3.4.10-5.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-32b3a77f8c
sleuthkit-4.9.0-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cd30b5b1cf
chromium-81.0.4044.138-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6847d3b59
perl-Mojolicious-7.94-3.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec
openssl11-1.1.1c-2.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579
qbittorrent-3.3.16-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239
clamav-0.102.3-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ae83e43288
log4net-2.0.8-10.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-567eda5296
exim-4.93-3.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-134c471656
json-c12-0.12.1-4.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff11142989
netdata-1.22.1-3.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e7814b7723
transmission-2.94-9.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19de895038
knot-resolver-5.1.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
golang-1.13.11-1.el7
libb2-0.98.1-2.el7
mock-2.3-1.el7
nodejs-rhea-1.0.21-1.el7
openconnect-8.10-1.el7
python3-sip-4.19.22-1.el7
qpid-dispatch-1.12.0-1.el7
qpid-proton-0.31.0-1.el7
rubygem-qpid_proton-0.31.0-2.el7
zstd-1.4.5-1.el7
Details about builds:
================================================================================
golang-1.13.11-1.el7 (FEDORA-EPEL-2020-ed6bc3c8d4)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to go1.13.11 * Security fix for CVE-2020-7919
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 18 2020 ��lex S��ez <asm(a)redhat.com> - 1.13.11-1
- Rebase to go1.13.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808041 - CVE-2020-7919 golang: Integer overflow on 32bit architectures via
crafted certificate allows for denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1808041
--------------------------------------------------------------------------------
================================================================================
libb2-0.98.1-2.el7 (FEDORA-EPEL-2020-f9ac9a4f30)
C library providing BLAKE2b, BLAKE2s, BLAKE2bp, BLAKE2sp
--------------------------------------------------------------------------------
Update Information:
- Release 0.98.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.98.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Sep 9 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.98.1-1
- Update to latest tagged version
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.98-4.20171225git60ea749
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.98-3.20171225git60ea749
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.98-2.20171225git60ea749
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836534 - Please build libb2-0.98.1 for Fedora 31
https://bugzilla.redhat.com/show_bug.cgi?id=1836534
[ 2 ] Bug #1836535 - Please build libb2-0.98.1 for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1836535
--------------------------------------------------------------------------------
================================================================================
mock-2.3-1.el7 (FEDORA-EPEL-2020-9662bcb8a3)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
https://github.com/rpm-software-management/mock/wiki/Release-Notes-2.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 Pavel Raiskup <praiskup(a)redhat.com> 2.3-1
- bindmount resultdir to bootstrap chroot so we can --postinstall from
bootstrap (issue #564)
- fix mount.py plugin configuration (issue #578)
- better error for dynamic_buildrequires %prep failure (issue #570)
- mock: pre-create directory for file bind-mounts (rhbz#1816696)
- fix doChroot() traceback for getresuid() (issue #571)
- fix --rootdir option with bootstrap (issue #560)
- avoid using host rpm _show_installed_packages() (pmatilai(a)redhat.com, PR#568)
- expand braced dnf variables in repo url (dmarshall(a)gmail.com, PR#577)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816696 - mirrorlists stopped working
https://bugzilla.redhat.com/show_bug.cgi?id=1816696
--------------------------------------------------------------------------------
================================================================================
nodejs-rhea-1.0.21-1.el7 (FEDORA-EPEL-2020-af9fa37ca5)
A reactive messaging library based on the AMQP protocol
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.0.21.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 1.0.21-1
- Rebased to 1.0.21
--------------------------------------------------------------------------------
================================================================================
openconnect-8.10-1.el7 (FEDORA-EPEL-2020-ffbb93e200)
Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect
--------------------------------------------------------------------------------
Update Information:
Update to 8.10 release (CVE-2020-12823)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 Nikos Mavrogiannopoulos <nmav(a)redhat.com> - 8.10-1
- Update to 8.10 release (CVE-2020-12823)
--------------------------------------------------------------------------------
================================================================================
python3-sip-4.19.22-1.el7 (FEDORA-EPEL-2020-cadeec41c2)
SIP - Python/C++ Bindings Generator
--------------------------------------------------------------------------------
Update Information:
fix a crash wxPython.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 18 2020 Scott Talbert <swt(a)techie.net> - 4.19.22-1
- Update to new upstream release 4.19.22
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.12.0-1.el7 (FEDORA-EPEL-2020-2d644c2542)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.12.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 1.12.0-1
- Rebased to 1.12.0
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.31.0-1.el7 (FEDORA-EPEL-2020-7cf1988508)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.31.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 0.31.0-1
- Rebased to 0.31.0
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.31.0-2.el7 (FEDORA-EPEL-2020-458135e2d4)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.31.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 0.31.0-1
- Rebased to 0.31.0
--------------------------------------------------------------------------------
================================================================================
zstd-1.4.5-1.el7 (FEDORA-EPEL-2020-cbf411038f)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 P��draig Brady <P(a)draigBrady.com> - 1.4.5-1
- Latest upstream
* Fri May 22 2020 Avi Kivity <avi(a)scylladb.com> - 1.4.4-3
- Added static library subpackage
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------