The following Fedora EPEL 7 Security updates need testing:
Age URL
680
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
421
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
419
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
129
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
69
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465
python34-3.4.10-5.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-dbca324350
nghttp2-1.33.0-1.1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-761bce8292
wordpress-5.1.6-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a1eff3982c
tcpreplay-4.3.3-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-add380f567
php-horde-horde-5.2.23-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f33a36b2c4
python-httplib2-0.18.1-3.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c438b9fb89
lynis-3.0.0-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d749373a67
znc-1.8.1-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6b96a7e3a
chromium-83.0.4103.106-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
alpine-2.23-2.el7
libdigidocpp-3.14.3-1.el7
scitokens-cpp-0.5.1-1.el7
Details about builds:
================================================================================
alpine-2.23-2.el7 (FEDORA-EPEL-2020-af9b2ac861)
powerful, easy to use console email client
--------------------------------------------------------------------------------
Update Information:
2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 23 2020 josef radinger <cheese(a)nosuchhost.net> - 2.23-2
- 2.23 fixes CVE-2020-14929 (#1850048) and new version (#1848786)
* Mon Jun 22 2020 josef radinger <cheese(a)nosuchhost.net> - 2.23-1
- bump version
- update patch2 alpine-2.23-gcc10.patch
* Tue Mar 24 2020 josef radinger <cheese(a)nosuchhost.net> - 2.22-1
- bump version
* Thu Feb 13 2020 Than Ngo <than(a)redhat.com> - 2.21-13
- fixed multiple definition of symbols
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jul 21 2019 Paul Wouters <pwouters(a)redhat.com> - 2.21-10
- Patch to suppress sending the user-agent per default
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon May 21 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 2.21-7
- new URL
- use %license, %make_build, %make_install
* Tue Mar 6 2018 josef radinger <cheese(a)nosuchhost.net> - 2.21-6
- add Buildrequires: gcc
https://fedoraproject.org/wiki/Packaging:C_and_C++
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850047 - CVE-2020-14929 alpine: silently proceeds to use an insecure
connection after a /tls is sent in certain circumstances involving PREAUTH
https://bugzilla.redhat.com/show_bug.cgi?id=1850047
--------------------------------------------------------------------------------
================================================================================
libdigidocpp-3.14.3-1.el7 (FEDORA-EPEL-2020-4d94e9444b)
Library offers creating, signing and verification of digitally signed documents
--------------------------------------------------------------------------------
Update Information:
- Upstream release 3.14.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Dmitri Smirnov <dmitri(a)smirnov.ee> - 3.14.3-1
- Upstream release 3.14.3
--------------------------------------------------------------------------------
================================================================================
scitokens-cpp-0.5.1-1.el7 (FEDORA-EPEL-2020-805503deaa)
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Translate WLCG's storage.modify as a write permission in SciTokens.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Derek Weitzel <dweitzel(a)unl.edu> - 0.5.1-1
- Add storage.modify as write permission
--------------------------------------------------------------------------------