The following Fedora EPEL 7 Security updates need testing:
Age URL
511
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
253
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
251
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-32603d41ea
GraphicsMagick-1.3.34-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b5ec870c52
mingw-wavpack-5.1.0-9.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1dbced42b2
ocsinventory-agent-2.6.0-3.2.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-75cc3918d1
rubygem-ox-2.4.11-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
argparse-manpage-1.3-1.el7
gnulib-0-31.20200107git.el7
python-django-1.11.27-1.el7
Details about builds:
================================================================================
argparse-manpage-1.3-1.el7 (FEDORA-EPEL-2020-faa57a6a6e)
Build manual page from Python ArgumentParser object
--------------------------------------------------------------------------------
Update Information:
new release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2020 Pavel Raiskup <praiskup(a)redhat.com> - 1.3-1
- new release
--------------------------------------------------------------------------------
================================================================================
gnulib-0-31.20200107git.el7 (FEDORA-EPEL-2020-12cd208593)
GNU Portability Library
--------------------------------------------------------------------------------
Update Information:
- Update on 2020-01-07 - CVE-2018-17942 - Patch for building in EPEL7 (Add sup
macro to Texinfo) - Force python3 for building in EPEL7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2020 Mosaab Alzoubi <moceap[AT]hotmail[DOT]com> - 0-31.20200107git
- Update on 2020-01-07
- CVE-2018-17942
- Patch for building in EPEL7 (Add sup macro to Texinfo)
- Force python3 for building in EPEL7
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-30.20180720git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Mar 7 2019 Tim Landscheidt <tim(a)tim-landscheidt.de> - 0-29.20180720git.el7
- Remove obsolete requirements for post/preun scriptlets
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-28.20180720git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sun Sep 16 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-27.20180720git
- Also include /usr/share/gnulib/top/GNUmakefile (#1607163)
* Sun Jul 22 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-26.20180720git
- Update on 20180720
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-25.20170217git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-24.20170217git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-23.20170217git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Peter Lemenkov <lemenkov(a)gmail.com> - 0-22.20170217git
- Install relocatable.texi file as well (required sometimes)
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-21.20170217git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 17 2017 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-20.20170217git
- Update on 20170217.
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-19.20161109git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Sat Nov 12 2016 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-18.20161109git
- Update on 20161109.
* Wed May 11 2016 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-17.20160508git
- Update on 20160511.
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-16.20150928git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Mon Sep 28 2015 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-15.20150928git
- Update on 20150928.
* Mon Jul 6 2015 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
0-15.20150706git
- Update on 20150706.
- Fixes #1239538.
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-15.20150325git
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635896 - CVE-2018-17942 gnulib: heap-based buffer overflow in
convert_to_decimal function in vasnprintf.c
https://bugzilla.redhat.com/show_bug.cgi?id=1635896
--------------------------------------------------------------------------------
================================================================================
python-django-1.11.27-1.el7 (FEDORA-EPEL-2020-9ffdf25269)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
update to 1.11.27, fix CVE-2019-19844 (rhbz#1788427)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2020 Matthias Runge <mrunge(a)redhat.com> - 1.11.27-1
- update to 1.11.27, fix CVE-2019-19844 (rhbz#1788427)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1788425 - CVE-2019-19844 Django: crafted email address allows account
takeover
https://bugzilla.redhat.com/show_bug.cgi?id=1788425
--------------------------------------------------------------------------------