The following Fedora EPEL 7 Security updates need testing:
Age URL
1122
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
885
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
467
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
364
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
196
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
133
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
nagios-4.3.4-5.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1fbdf7f103
chromium-65.0.3325.181-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-86171fce03
python-paramiko-2.1.1-0.4.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2074629ed3
drupal7-7.58-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e12bc7bed5
nodejs-6.14.0-1.el7 libuv-1.19.2-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7c95e7ac21
libofx-0.9.9-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
container-exception-logger-1.0.2-1.el7
koji-1.15.1-1.el7
libdasm-1.6-1.el7
libmodulemd-1.2.0-1.el7
python-neomodel-3.2.5-1.el7
python-pip-8.1.2-6.el7
python-productmd-1.11-2.el7
python-pyev-0.9.0-0.1.20130610gite31d137.el7
python-resultsdb_api-2.1.0-1.el7
ravada-0.2.14-1.el7
spectre-meltdown-checker-0.36-1.el7
urjtag-2017.10-2.el7
wordpress-4.9.5-1.el7
Details about builds:
================================================================================
container-exception-logger-1.0.2-1.el7 (FEDORA-EPEL-2018-eeca67018c)
Logging from a container to a host
--------------------------------------------------------------------------------
Update Information:
Introducing container-exception-logger (#1559938)
--------------------------------------------------------------------------------
================================================================================
koji-1.15.1-1.el7 (FEDORA-EPEL-2018-e56f478565)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Fixes for CVE-2018-1002150.
--------------------------------------------------------------------------------
================================================================================
libdasm-1.6-1.el7 (FEDORA-EPEL-2018-0acbb92afb)
Simple x86 disassembly library
--------------------------------------------------------------------------------
Update Information:
New package - libdasm Summary: Simple x86 disassembly library
Description: libdasm is a C-library that tries to provide simple and convenient
way to disassemble Intel x86 raw op-code bytes (machine code). It can parse and
print out op-codes in AT&T and Intel syntax. The op-codes are based on IA-32
Intel Architecture Software Developer's Manual Volume 2: Instruction Set
Reference, order number 243667, year 2004. Non-Intel instructions are not
supported at the moment (also, non-Intel but Intel-compatible CPU extensions,
like AMD 3DNow! are not supported).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559699 - Review Request: libdasm - Simple x86 disassembly library
https://bugzilla.redhat.com/show_bug.cgi?id=1559699
--------------------------------------------------------------------------------
================================================================================
libmodulemd-1.2.0-1.el7 (FEDORA-EPEL-2018-bb555b68ba)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
# New Functions: * [Modulemd.objects_from_file()](https://sgallagh.fedorapeople.
org/docs/libmodulemd/1.2/modulemd-modulemd.html#modulemd-objects-from-file) * [M
odulemd.objects_from_string()](https://sgallagh.fedorapeople.org/docs/lib...
d/1.2/modulemd-modulemd.html#modulemd-objects-from-string) *
[
Modulemd.dump()](https://sgallagh.fedorapeople.org/docs/libmodulemd/1.2
/modulemd-modulemd.html#modulemd-dump) *
[
Modulemd.dumps()](https://sgallagh.fedorapeople.org/docs/libmodulemd/1.2
/modulemd-modulemd.html#modulemd-dumps) * [Modulemd.Defaults.new_from_file()](ht
tps://sgallagh.fedorapeople.org/docs/libmodulemd/1.2/modulemd-modulemd-
defaults.html#modulemd-defaults-new-from-file) * [Modulemd.Defaults.new_from_str
ing()](https://sgallagh.fedorapeople.org/docs/libmodulemd/1.2/modulemd-mo...
defaults.html#modulemd-defaults-new-from-string) # Deprecated Functions: * [Mod
ulemd.Module.new_all_from_file()](https://sgallagh.fedorapeople.org/docs/...
lemd/1.2/modulemd-modulemd-module.html#modulemd-module-new-all-from-file) * [Mod
ulemd.Module.new_all_from_file_ext()](https://sgallagh.fedorapeople.org/d...
modulemd/1.2/modulemd-modulemd-module.html#modulemd-module-new-all-from-file-
ext) * [
Modulemd.Module.new_all_from_string()](https://sgallagh.fedorapeople.org
/docs/libmodulemd/1.2/modulemd-modulemd-module.html#modulemd-module-new-all-
from-string) * [Modulemd.Module.new_all_from_string_ext()](https://sgallagh.fedo
rapeople.org/docs/libmodulemd/1.2/modulemd-modulemd-module.html#modulemd-...
new-all-from-string-ext) * [Modulemd.Module.dump_all()](https://sgallagh.fedorap
eople.org/docs/libmodulemd/1.2/modulemd-modulemd-module.html#modulemd-mod...
dump-all) * [
Modulemd.Module.dumps_all()](https://sgallagh.fedorapeople.org/docs
/libmodulemd/1.2/modulemd-modulemd-module.html#modulemd-module-dumps-all) #
Bugfixes * Properly use G_BEGIN_DECLS and G_END_DECLS in headers * Assorted
fixes for memory ownership in GObject Introspection ---- Fix issue with C
headers not compiling in C++ programs -
https://github.com/fedora-
modularity/libmodulemd/issues/30 ---- - Fixes numerous memory-leak issues
---- - Revert backwards-incompatible change to nsversion for GObject
Introspection - Make default stream and profiles optional - Fixes:
https://github.com/fedora-modularity/libmodulemd/issues/25 - Fixes:
https://github.com/fedora-modularity/libmodulemd/issues/26 - Fixes:
https://github.com/fedora-modularity/libmodulemd/issues/27 ---- * Adds support
for handling modulemd-defaults YAML documents * Adds peek()/dup() routines to
all object properties * Adds Modulemd.Module.dup_nsvc() to retrieve the
canonical form of the unique module identifier. * Adds support for boolean types
in the XMD section
--------------------------------------------------------------------------------
================================================================================
python-neomodel-3.2.5-1.el7 (FEDORA-EPEL-2018-7fb84ce124)
A Python OGM for Neo4j
--------------------------------------------------------------------------------
Update Information:
Initial release To install, this requires python-neo4j-driver which is waiting
to be pushed to stable.
--------------------------------------------------------------------------------
================================================================================
python-pip-8.1.2-6.el7 (FEDORA-EPEL-2018-038dc1d139)
A tool for installing and managing Python packages
--------------------------------------------------------------------------------
Update Information:
Fix `pip install` failure in FIPS mode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1430774 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1430774
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.11-2.el7 (FEDORA-EPEL-2018-fdadd93399)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
New upstream release with support for working with metadata about modules.
--------------------------------------------------------------------------------
================================================================================
python-pyev-0.9.0-0.1.20130610gite31d137.el7 (FEDORA-EPEL-2018-8657aca68a)
Python binding for the libev library
--------------------------------------------------------------------------------
Update Information:
New package - python-pyev Summary: Python binding for the libev library
Description: Python binding for the libev library. The libev is an event loop:
you register interest in certain events (such as a file descriptor being
readable or a timeout occurring), and it will manage these event sources and
provide your program with events.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560344 - Review Request: python-pyev - Python binding for the libev library
https://bugzilla.redhat.com/show_bug.cgi?id=1560344
--------------------------------------------------------------------------------
================================================================================
python-resultsdb_api-2.1.0-1.el7 (FEDORA-EPEL-2018-70fc3f4214)
Interface api to ResultsDB
--------------------------------------------------------------------------------
Update Information:
- Add support for auth token - Retry on HTTP 500 errors by default - py3:
Updates to work with Python 3
--------------------------------------------------------------------------------
================================================================================
ravada-0.2.14-1.el7 (FEDORA-EPEL-2018-8109ac4a9b)
Remote Virtual Desktops Manager
--------------------------------------------------------------------------------
Update Information:
Release 0.2.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1535207 - Review Request: ravada - Remote Virtual Desktops Manager
https://bugzilla.redhat.com/show_bug.cgi?id=1535207
--------------------------------------------------------------------------------
================================================================================
spectre-meltdown-checker-0.36-1.el7 (FEDORA-EPEL-2018-013bff77bf)
Spectre & Meltdown vulnerability/mitigation checker for Linux
--------------------------------------------------------------------------------
Update Information:
Update to release 0.36: * Feature: Add support to detect RHEL 5 kernels
backported mitigations * Feature: Add `--prefix-arch` option for cross-
architecture kernel inspection * Feature: Add `--hw-only` option to only show
CPU microcode features supported for mitigation * Feature: Add support to
properly extract some previously unsupported ARM kernels * Feature: Check for
MSR/CPUID of each CPU core, not just the first one * Feature: Add `--batch
prometheus` option to produce output for consumption by prometheus-node-exporter
* Fix: Corrected a corner case of blacklist detection for some microcode
versions * Fix: Properly detect Xen PVHVM mode * Fix: No longer check MSR/CPUID
for non-x86 CPUs * Misc: Other tiny enhancements and fixes
--------------------------------------------------------------------------------
================================================================================
urjtag-2017.10-2.el7 (FEDORA-EPEL-2018-dfc4bc9e12)
A tool for communicating over JTAG with flash chips and CPUs
--------------------------------------------------------------------------------
Update Information:
revert back armfix patch
--------------------------------------------------------------------------------
================================================================================
wordpress-4.9.5-1.el7 (FEDORA-EPEL-2018-13062a4d15)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
**WordPress 4.9.5 Security and Maintenance Release** WordPress 4.9.5 is now
available. This is a security and maintenance release for all versions since
WordPress 3.7. We strongly encourage you to update your sites immediately.
WordPress versions 4.9.4 and earlier are affected by three security issues. As
part of the core team's ongoing commitment to security hardening, the following
fixes have been implemented in 4.9.5: * Don't treat localhost as same host
by default. * Use safe redirects when redirecting the login page if SSL is
forced. * Make sure the version string is correctly escaped for use in
generator tags. Thank you to the reporters of these issues for practicing
���[coordinated security
disclosure](https://make.wordpress.org/core/handbook/testing/reporting-se...
vulnerabilities/): [
xknown](https://profiles.wordpress.org/xknown) of the
WordPress Security Team, [Nitin Venkatesh
(
nitstorm)](https://hackerone.com/nitstorm), and [Garth
Mortensen](https://twitter.com/voldemortensen) of the WordPress Security Team.
Twenty-five other bugs were fixed in WordPress 4.9.5. Particularly of note were:
* The previous styles on caption shortcodes have been restored. * Cropping
on touch screen devices is now supported. * A variety of strings such as
error messages have been updated for better clarity. * The position of an
attachment placeholder during uploads has been fixed. * Custom nonce
functionality in the REST API JavaScript client has been made consistent
throughout the code base. * Improved compatibility with PHP 7.2.
--------------------------------------------------------------------------------