The following Fedora EPEL 7 Security updates need testing:
Age URL
671
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
412
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
410
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
120
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
60
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465
python34-3.4.10-5.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-101619ac61 jq-1.6-2.el7
oniguruma-6.8.2-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03f2097af0
pdns-recursor-4.1.16-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-dbca324350
nghttp2-1.33.0-1.1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-761bce8292
wordpress-5.1.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
apcupsd-3.14.14-18.el7
borgbackup-1.1.13-2.el7
perl-DBIx-Safe-1.2.5-37.el7
php-horde-horde-5.2.23-1.el7
root-6.20.06-1.el7
tcpreplay-4.3.3-1.el7
Details about builds:
================================================================================
apcupsd-3.14.14-18.el7 (FEDORA-EPEL-2020-79117a1f44)
APC UPS Power Control Daemon
--------------------------------------------------------------------------------
Update Information:
Replaced BuildRequires: gnome-vfs2 with BuildRequires: GConf2-devel
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 8 2020 Germano Massullo <germano.massullo(a)gmail.com> - 3.14.14-18
- Replaced BuildRequires: gnome-vfs2 with BuildRequires: GConf2-devel More infos at
https://bugzilla.redhat.com/show_bug.cgi?id=1745727#c5
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.14.14-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 3.14.14-16
- Workaround change in RPM 4.15 which breaks the build.
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.14.14-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.14.14-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Dec 3 2018 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 3.14.14-13
- Fix broken zero-size icon.
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.14.14-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu May 17 2018 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 3.14.14-11
- Add KillMode=process to the systemd unit.
* Mon Mar 26 2018 Till Maas <opensource(a)till.name> - 3.14.14-10
- rebuilt to drop tcp_wrappers dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1518751
- remove tcp_wrappers support
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.14-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jan 25 2018 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 3.14.14-8
- Use proper systemd dependencies.
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.14-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.14-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
borgbackup-1.1.13-2.el7 (FEDORA-EPEL-2020-2278c665bc)
A deduplicating backup program with compression and authenticated encryption
--------------------------------------------------------------------------------
Update Information:
update to new upstream release 1.1.13 (fixes memory leak during restore)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 1.1.13-2
- bump release to rebuild against newer libb2
* Sun Jun 7 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 1.1.13-1
- update to 1.1.13
--------------------------------------------------------------------------------
================================================================================
perl-DBIx-Safe-1.2.5-37.el7 (FEDORA-EPEL-2020-05280f8511)
Safer access to your database through a DBI database handle
--------------------------------------------------------------------------------
Update Information:
update spec file
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-37
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-36
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 31 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.2.5-35
- Perl 5.30 rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-34
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-33
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.2.5-32
- Perl 5.28 rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-31
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-30
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Jun 6 2017 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.2.5-29
- Perl 5.26 rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-28
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Mon May 16 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.2.5-27
- Perl 5.24 rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-horde-horde-5.2.23-1.el7 (FEDORA-EPEL-2020-add380f567)
Horde Application Framework
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.23** * [mjr] SECURITY: Fix javascript injection vulnerability in
mobile login page. * [mjr] Fix broken cloud search in portal block.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Remi Collet <remi(a)remirepo.net> - 5.2.23-1
- update to 5.2.23
--------------------------------------------------------------------------------
================================================================================
root-6.20.06-1.el7 (FEDORA-EPEL-2020-5cd88a7b70)
Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:
root 6.20.06
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.20.06-1
- Update to 6.20.06
- Fix test failure on ppc64le and aarch64
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 6.20.04-3
- Rebuilt for Python 3.9
* Fri Apr 10 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.20.04-2
- Replace BR qt5-devel with qt5-qtbase-devel
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.3.3-1.el7 (FEDORA-EPEL-2020-a1eff3982c)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
This release contains bug fixes only (which includes security fixes): -
Increase cache buffers size to accomodate VLAN edits (#594) - Correct L2 header
length to correct IP header offset (#583) - Fix warnings from gcc version 10
(#580) - Heap Buffer Overflow in randomize_iparp (#579) - Use after free in
get_ipv6_next (#578) - Heap Buffer Overflow in git_ipv6_next (#576) - Call
pcap_freecode() on pcap_compile() (#572) - Increase max snaplen to 262144 (#571)
- Fix divide by zero in fuzzing (#570) - Unique IP repeats at very high
iteration counts (#566) - Fails to compile on FreeBSD amd64 13.0 (#558) - Heap
Buffer Overflow in do_checksum (#556) (#577) - Attempt to correct corrupt pcap
files, if possible (#557) - Fix GCC v10 warnings (#555) - Remove some duplicated
SOURCES entries (#551) - Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
- Implement --loopdelay-ms when using --loop=0 (#546) - Heap overflow
packet2tree and get_l2len (#530)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2020 Bojan Smojver <bojan@rexursive com> - 4.3.3-1
- bump up to 4.3.3
- CVE-2020-12740
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1678246 - CVE-2019-8377 tcpreplay: null pointer dereference in function
get_ipv6_l4proto() in get.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678246
[ 2 ] Bug #1835343 - CVE-2020-12740 tcpreplay: Heap-based buffer over-read in function
get_ipv6_next() at common/get.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1835343
--------------------------------------------------------------------------------