The following Fedora EPEL 7 Security updates need testing:
Age URL
189
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
139
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
123
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2206653eb9
python-django-1.11.13-4.el7 python-django16-1.6.11.7-5.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0e5a2a81f
wildmidi-0.3.15-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0346a55d0f
nagios-4.4.2-3.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f5e66c71c9
mbedtls-2.7.8-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d0853fde65
wordpress-5.0.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.7.5-1.el7
boinc-client-7.14.2-5.el7
fcgiwrap-1.1.0-9.20181108git99c942c.el7
hw-probe-1.4-8.el7
perl-Net-OpenID-Consumer-1.18-8.el7
perl-Net-OpenID-Server-1.09-11.el7
python-certbot-dns-digitalocean-0.29.1-1.el7
python-dns-lexicon-3.0.6-1.el7
python-ldap3-2.5.1-1.el7
python3-setuptools-39.2.0-1.el7
youtube-dl-2018.12.09-1.el7
Details about builds:
================================================================================
ansible-2.7.5-1.el7 (FEDORA-EPEL-2018-1ae8b4c0f6)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.5 bugfix release. Fix for CVE-2018-16876
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 13 2018 Kevin Fenzi <kevin(a)scrye.com> - 2.7.5-1
- Update to 2.7.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1657390 - CVE-2018-16876 ansible: Information disclosure in vvv+ mode with
no_log on [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1657390
[ 2 ] Bug #1657389 - CVE-2018-16876 ansible: Information disclosure in vvv+ mode with
no_log on [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1657389
--------------------------------------------------------------------------------
================================================================================
boinc-client-7.14.2-5.el7 (FEDORA-EPEL-2018-b35434495f)
The BOINC client
--------------------------------------------------------------------------------
Update Information:
Enforced SCHED_IDLE CPU scheduler
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 14 2018 Germano Massullo <germano.massullo(a)cern.ch> - 7.14.2-5
- added systemd_scheduler.patch
* Wed Dec 12 2018 Germano Massullo <germano.massullo(a)cern.ch> - 7.14.2-4
- added scheduler.patch
--------------------------------------------------------------------------------
================================================================================
fcgiwrap-1.1.0-9.20181108git99c942c.el7 (FEDORA-EPEL-2018-d425be3696)
Simple FastCGI wrapper for CGI scripts
--------------------------------------------------------------------------------
Update Information:
fix typo in fcgiwrap socket file ---- Modify socket file based on feedback in
BZ 1655281
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 14 2018 Andrew Bauer <zonexpertconsulting(a)outlook.com> -
1.1.0-9.20181108git99c942c
- fix typo in fcgiwrap socket file
* Tue Dec 4 2018 Andrew Bauer <zonexpertconsulting(a)outlook.com> -
1.1.0-8.20181108git99c942c
- Modify socket file based on feedback in BZ 1655281
- Add README.SELinux
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1655281 - Socket location not covered by SELinux Policy
https://bugzilla.redhat.com/show_bug.cgi?id=1655281
--------------------------------------------------------------------------------
================================================================================
hw-probe-1.4-8.el7 (FEDORA-EPEL-2018-fdb0bf49ba)
A tool to check operability of computer hardware
--------------------------------------------------------------------------------
Update Information:
Recommends dmidecode. ---- New package hw-probe.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1655421 - Review Request: hw-probe - A tool to check operability of computer
hardware
https://bugzilla.redhat.com/show_bug.cgi?id=1655421
--------------------------------------------------------------------------------
================================================================================
perl-Net-OpenID-Consumer-1.18-8.el7 (FEDORA-EPEL-2018-d256a5a9b1)
Library for consumers of OpenID identities
--------------------------------------------------------------------------------
Update Information:
Add perl-Net-OpenID-Consumer to EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1205192 - Review Request: perl-Net-OpenID-Consumer - Library for consumers of
OpenID identities
https://bugzilla.redhat.com/show_bug.cgi?id=1205192
--------------------------------------------------------------------------------
================================================================================
perl-Net-OpenID-Server-1.09-11.el7 (FEDORA-EPEL-2018-43a220886c)
Library for building your own OpenID server/provider
--------------------------------------------------------------------------------
Update Information:
Add perl-Net-OpenID-Server to EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1205587 - Review Request: perl-Net-OpenID-Server - Library for building your
own OpenID server/provider
https://bugzilla.redhat.com/show_bug.cgi?id=1205587
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-digitalocean-0.29.1-1.el7 (FEDORA-EPEL-2018-aba8af85df)
DigitalOcean DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.29.1.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 11 2018 Eli Young <elyscape(a)gmail.com> - 0.29.1-1
- Update to 0.29.1
- Remove Python 2 package in Fedora 30+ (#1654016)
* Wed Nov 14 2018 Eli Young <elyscape(a)gmail.com> - 0.28.0-1
- Update to 0.28.0
--------------------------------------------------------------------------------
================================================================================
python-dns-lexicon-3.0.6-1.el7 (FEDORA-EPEL-2018-bfecb51960)
Manipulate DNS records on various DNS providers in a standardized/agnostic way
--------------------------------------------------------------------------------
Update Information:
- Update to 3.0.6 - Declare conflict with python-lexicon
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 14 2018 Eli Young <elyscape(a)gmail.com> - 3.0.6-1
- Update to 3.0.6
- Declare conflict with python-lexicon
- Remove Python 2 package in Fedora 30+
--------------------------------------------------------------------------------
================================================================================
python-ldap3-2.5.1-1.el7 (FEDORA-EPEL-2018-6938480cff)
Strictly RFC 4511 conforming LDAP V3 pure Python client
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 12 2018 Avram Lubkin <aviso(a)rockhopper.net> - 2.5.1-1
- Update to 2.5.1
- Build Python 3 packages for EPEL
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.5-2
- Rebuilt for Python 3.7
* Mon Apr 16 2018 Michal Cyprian <mcyprian(a)redhat.com> - 2.5-1
- Update to 2.5
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Jan 23 2018 Igor Gnatenko <ignatenko(a)redhat.com> - 2.4.1-1
- Update to 2.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1653732 - Provide new python-ldap3 packages for EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=1653732
--------------------------------------------------------------------------------
================================================================================
python3-setuptools-39.2.0-1.el7 (FEDORA-EPEL-2018-c59274a0d7)
Easily build and distribute Python 3 packages
--------------------------------------------------------------------------------
Update Information:
Update to 39.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 4 2018 Carl George <carl(a)george.computer> - 39.2.0-1
- Update to upstream 39.2.0
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2018.12.09-1.el7 (FEDORA-EPEL-2018-f95ff7e68a)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 15 2018 Mat��j Cepl <mcepl(a)cepl.eu> - 2018.12.09-1
- Update to the latest upstream release.
--------------------------------------------------------------------------------