The following Fedora EPEL 7 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a5abe545c6
wordpress-5.1.8-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f16789146a
chromium-86.0.4240.183-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b583975226
seamonkey-2.53.5-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d69636a383
tor-0.3.5.12-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0fe15b3c39
rpki-client-6.8p1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
convert2rhel-0.13-1.el7
copr-cli-1.90-1.el7
haproxy18-1.8.23-3.el7
openssl11-1.1.1g-1.el7
php-composer-semver3-3.2.4-1.el7
php-composer-xdebug-handler-1.4.5-1.el7
pngcheck-2.4.0-2.el7
python-calcephpy-3.4.7-2.el7
python-copr-1.106-1.el7
youtube-dl-2020.11.12-1.el7
Details about builds:
================================================================================
convert2rhel-0.13-1.el7 (FEDORA-EPEL-2020-42ebd9ff65)
Automates the conversion of RHEL derivative distributions to RHEL
--------------------------------------------------------------------------------
Update Information:
Changes included in this version: * allow conversions of CentOS and Oracle
Linux 8 * fix "TypeError: execve()" py2.6-related error when calling external
commands * remove unused code related to using offline snapshot or RHEL
repositories * remove all Red Hat Network (RHN)-related code as RHN has been
shut down * set POSIX/C locale at the start of running the tool * remove python-
syspurpose dependency from spec - not available on OL 7 and 8 * not renaming the
original system repofiles anymore * replace the word blacklist with
exclude/excluded * clearing yum versionlock that could cause the conversion to
fail * printing rpm files that were modified during the conversion * minor UX
improvements and test infrastructure improvements
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 13 2020 Michal Bocek <mbocek(a)redhat.com> 0.13-1
- allow conversions of CentOS and Oracle Linux 8
- fix "TypeError: execve()" py2.6-related error when calling external commands
- remove unused code related to using offline snapshot or RHEL repositories
- remove all Red Hat Network (RHN)-related code as RHN has been shut down
- set POSIX/C locale at the start of running the tool
- remove python-syspurpose dependency from spec - not available on OL 7 and 8
- not renaming the original system repofiles anymore
- replace the word blacklist with exclude/excluded
- clearing yum versionlock that could cause the conversion to fail
- printing rpm files that were modified during the conversion
- minor UX improvements and test infrastructure improvements
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.90-1.el7 (FEDORA-EPEL-2020-631b1eae2b)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- added support for custom build batches - more detailed --bootstrap
configuration options, per chroot, project, build - the --timeout option was
fixed, has an effect, default build timeout is 4 hours - added new dist-git
build method - added bash completion (when one has python3-argcomplete
installed) - the --memory option is now formally deprecated (never implemented
before)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 9 2020 Jakub Kadlcik <frostyx(a)email.cz> 1.90-1
- cli, frontend: custom build batches
- cli: propagate build --bootstrap value to API call
- cli: move the build --bootstrap option to a correct parser
- frontend, cli, python, rpmbuild: better bootstrap config
- beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap
- all: run pytest with -vv in package build
- cli: fix timeout option to allow change timeout for build
- cli: fix dist-git unit tests
- common, cli, python, rpmbuild, frontend, backend: DistGit source method
- cli: support project/chroot format for getting/editting chroots
- cli: do bash-completion when argcomplete is installed
- cli: formally deprecate --memory option
--------------------------------------------------------------------------------
================================================================================
haproxy18-1.8.23-3.el7 (FEDORA-EPEL-2020-4023597a9b)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
- Added helper to create optional symbolic links for convenience
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 13 2020 Robert Scheck <robert(a)fedoraproject.org> 1.8.23-3
- Added helper to create optional symbolic links for convenience
--------------------------------------------------------------------------------
================================================================================
openssl11-1.1.1g-1.el7 (FEDORA-EPEL-2020-62ef58ec56)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
- backport from 1.1.1g-11: Further changes for SP 800-56A rev3 requirements -
backport from 1.1.1g-9: Rewire FIPS_drbg API to use the RAND_DRBG - backport
from 1.1.1g-9: Use the well known DH groups in TLS even for 2048 and 1024 bit
parameters - backport from 1.1.1g-7: Disallow dropping Extended Master Secret
extension on renegotiation - backport from 1.1.1g-7: Return alert from s_server
if ALPN protocol does not match - backport from 1.1.1g-7: SHA1 is allowed in
@SECLEVEL=2 only if allowed by TLS SigAlgs configuration - backport from
1.1.1g-6: Add FIPS selftest for PBKDF2 and KBKDF - backport from 1.1.1g-5: Allow
only well known DH groups in the FIPS mode - backport from 1.1.1g-1: update to
the 1.1.1g release - backport from 1.1.1g-1: FIPS module installed state
definition is modified
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 13 2020 Robert Scheck <robert(a)fedoraproject.org> 1.1.1g-1
- backport from 1.1.1g-11: Further changes for SP 800-56A rev3 requirements
- backport from 1.1.1g-9: Rewire FIPS_drbg API to use the RAND_DRBG
- backport from 1.1.1g-9: Use the well known DH groups in TLS even for 2048 and 1024 bit
parameters
- backport from 1.1.1g-7: Disallow dropping Extended Master Secret extension on
renegotiation
- backport from 1.1.1g-7: Return alert from s_server if ALPN protocol does not match
- backport from 1.1.1g-7: SHA1 is allowed in @SECLEVEL=2 only if allowed by TLS SigAlgs
configuration
- backport from 1.1.1g-6: Add FIPS selftest for PBKDF2 and KBKDF
- backport from 1.1.1g-5: Allow only well known DH groups in the FIPS mode
- backport from 1.1.1g-1: update to the 1.1.1g release
- backport from 1.1.1g-1: FIPS module installed state definition is modified
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1780995 - CVE-2019-1551 openssl: Integer overflow in RSAZ modular
exponentiation on x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1780995
--------------------------------------------------------------------------------
================================================================================
php-composer-semver3-3.2.4-1.el7 (FEDORA-EPEL-2020-b2565d8e92)
Semver library version 3
--------------------------------------------------------------------------------
Update Information:
**Version 3.2.4** - 2020-11-13 * Fixed: code clean-up ---- **Version 3.2.3**
- 2020-11-12 * Fixed: constraints in the form of `X || Y, >=Y.1` and other
such complex constructs were in some cases being optimized into a more
restrictive constraint
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 13 2020 Remi Collet <remi(a)remirepo.net> - 3.2.4-1
- update to 3.2.4
* Fri Nov 13 2020 Remi Collet <remi(a)remirepo.net> - 3.2.3-1
- update to 3.2.3
--------------------------------------------------------------------------------
================================================================================
php-composer-xdebug-handler-1.4.5-1.el7 (FEDORA-EPEL-2020-19d824e244)
Restarts a process without Xdebug
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.5** - 2020-11-13 * Fixed: support for stream_isatty and overall
correct FD forwarding to the restarted process.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 13 2020 Remi Collet <remi(a)remirepo.net> - 1.4.5-1
- update to 1.4.5
--------------------------------------------------------------------------------
================================================================================
pngcheck-2.4.0-2.el7 (FEDORA-EPEL-2020-339db397ad)
Verifies the integrity of PNG, JNG and MNG files
--------------------------------------------------------------------------------
Update Information:
Fix buffer overflow (RHBZ #1897485) A global buffer overflow was discovered in
the check_chunk_name function via a crafted png file. ---- New upstream
version 2.4.0: - tweaked color definitions slightly to work better on terminals
with white/light backgrounds - added eXIf support - fixed DHDR (pre-MNG-1.0) bug
---- Enable executable hardening (PIC/PIE) ---- Initial import (#1886858)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897485 - Private bug
https://bugzilla.redhat.com/show_bug.cgi?id=1897485
--------------------------------------------------------------------------------
================================================================================
python-calcephpy-3.4.7-2.el7 (FEDORA-EPEL-2020-7898f353f9)
Astronomical library to access planetary ephemeris files
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-copr-1.106-1.el7 (FEDORA-EPEL-2020-631b1eae2b)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
- added support for custom build batches - more detailed --bootstrap
configuration options, per chroot, project, build - the --timeout option was
fixed, has an effect, default build timeout is 4 hours - added new dist-git
build method - added bash completion (when one has python3-argcomplete
installed) - the --memory option is now formally deprecated (never implemented
before)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 11 2020 Pavel Raiskup <praiskup(a)redhat.com> 1.106-1
- bump to non-devel version
* Mon Nov 9 2020 Jakub Kadlcik <frostyx(a)email.cz> 1.105.3.dev-1
- frontend, python: we cannot order chroots by name
- python: synchronize the docs for build options
- frontend, cli, python, rpmbuild: better bootstrap config
- beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap
- all: run pytest with -vv in package build
- common, cli, python, rpmbuild, frontend, backend: DistGit source method
- python: Don't apply bind_proxy in BaseProxy __init__()
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2020.11.12-1.el7 (FEDORA-EPEL-2020-07444d8667)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to version 2020.11.12
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Peter Hazenberg <fedoraproject(a)haas-en-berg.nl> - 2020.11.12-1
- Update to 2020.11.12
- Get releases from
yt-dl.org instead of github
* Sun Sep 20 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.09.20-1
- Update to 2020.09.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1894756 - 2020.11.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1894756
[ 2 ] Bug #1897102 - youtube-dl-2020.11.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897102
--------------------------------------------------------------------------------