The following Fedora EPEL 7 Security updates need testing:
Age URL
755
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
495
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-89ad58d02c
golang-1.15-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-49c5f31e92
python-pip-epel-8.1.2-14.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-864bc6779e
chromium-85.0.4183.83-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-83bdeb2965
ansible-2.9.13-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0a324e529d
drupal7-7.72-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
mbedtls-2.7.17-1.el7
php-phpseclib-2.0.29-1.el7
python-idstools-0.6.4-1.el7
Details about builds:
================================================================================
mbedtls-2.7.17-1.el7 (FEDORA-EPEL-2020-f9a066663b)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.17
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 8 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.17-1
- Update to 2.7.17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1875047 - CVE-2020-16150 mbedtls: local side channel attack on classical CBC
decryption in (D)TLS
https://bugzilla.redhat.com/show_bug.cgi?id=1875047
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.29-1.el7 (FEDORA-EPEL-2020-ac52687ea5)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.29** - 2020-09-07 - SFTP: add enableDatePreservation() /
disableDatePreservation() (#1496) - SFTP: uploads on low speed networks could
get in infinite loop (#1507) - SSH2: when building algo list look at if crypto
engine is set (#1500) - X509: really looong base64 encoded strings broke
extractBER() (#1486)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 8 2020 Remi Collet <remi(a)remirepo.net> - 2.0.29-1
- update to 2.0.29
--------------------------------------------------------------------------------
================================================================================
python-idstools-0.6.4-1.el7 (FEDORA-EPEL-2020-d9c3980de9)
Snort and Suricata Rule and Event Utilities
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 7 2020 Marcin Dulak <Marcin.Dulak(a)gmail.com> - 0.6.4-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1863715 - python-idstools-0.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1863715
--------------------------------------------------------------------------------