The following Fedora EPEL 7 Security updates need testing:
Age URL
427
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
169
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
167
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
103
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897
dosbox-0.74.3-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-6ca75fc39a
nginx-1.16.1-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b69e8f60ca
libapreq2-2.13-13.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-3bcbd2f338
opendmarc-1.3.2-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-4e8faaa263
python34-3.4.10-4.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-301b621e07
golang-1.13.1-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-86a4692b13
scapy-2.4.3-2.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ef109e65c0
python-ecdsa-0.13.3-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-35adef43f8
koji-1.18.1-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-7f113c883b
wordpress-5.1.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
akmods-0.5.6-23.el7
chromium-77.0.3865.120-1.el7
fotoxx-19.18-1.el7
libmodulemd2-2.8.1-1.el7
python-ns1-python-0.12.0-1.el7
radare2-3.9.0-3.el7.1
Details about builds:
================================================================================
akmods-0.5.6-23.el7 (FEDORA-EPEL-2019-6a710036e9)
Automatic kmods build and install tool
--------------------------------------------------------------------------------
Update Information:
- Add requires kernel-abi-whitelists for RHEL ---- Update akmods , latest
version on stable have about 2 years ---- - Don't enforce target arch -
rhbz#1644430 - Rework log file path - Avoid using /usr/lib/modules for el6
compat ---- - Add inihibitor for akmods@.service - Use restart on
akmodsposttrans - Switch to always retry by default - Drop akmods preset by f28
- Don't enable service on ah - Test a rw directory
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 0.5.6-23
- Add requires kernel-abi-whitelists for RHEL
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.6-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon May 20 2019 Nicolas Chauvet <kwizart(a)gmail.com> - 0.5.6-21
- Add check for rhel8
* Wed May 15 2019 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> - 0.5.6-20
- Fix akmodsposttrans after kernel update/install on Fedora >= 28 and
RHEL >= 7 - rhbz#1709055
* Thu Feb 28 2019 Alexander Larsson <alexl(a)redhat.com> - 0.5.6-19
- Support ostree/silverblue builds - rhbz#1667014
* Thu Feb 28 2019 Hans de Goede <hdegoede(a)redhat.com>
- Do not fail when the old initscripts pkg is not installed - rhbz#1680121
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.6-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Nov 5 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 0.5.6-17
- Don't enforce target arch - rhbz#1644430
- Rework log file path
- Avoid using /usr/lib/modules for el6 compat
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.6-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Mar 26 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 0.5.6-15
- Add inihibitor for akmods@.service
- Use restart on akmodsposttrans
* Mon Mar 26 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 0.5.6-14
- Switch to always retry by default
- Drop akmods preset by f28
- Don't enable service on ah
- Test a rw directory
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.6-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Dec 13 2017 Nicolas Chauvet <kwizart(a)gmail.com> - 0.5.6-12
- Update kernel posttrans method - rhbz#1518401
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1760833 - Please Package akmods for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1760833
[ 2 ] Bug #1709055 - akmods doesn't compile modules after kernel update/install -
akmodsposttrans related
https://bugzilla.redhat.com/show_bug.cgi?id=1709055
[ 3 ] Bug #1644430 - akmods --force produces packages for wrong architecture (armv7l
instead of armv7hl)
https://bugzilla.redhat.com/show_bug.cgi?id=1644430
--------------------------------------------------------------------------------
================================================================================
chromium-77.0.3865.120-1.el7 (FEDORA-EPEL-2019-e4856d2c09)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Chromium update to 77.0.3865.120. For the upstream announcement see
https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-
desktop.html.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Tomas Popela <tpopela(a)redhat.com> - 77.0.3865.120-1
- Update to 77.0.3865.120
--------------------------------------------------------------------------------
================================================================================
fotoxx-19.18-1.el7 (FEDORA-EPEL-2019-a37039bf1c)
Photo editor
--------------------------------------------------------------------------------
Update Information:
19.18
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 19.18-1
- 19.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762336 - fotoxx-19.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762336
--------------------------------------------------------------------------------
================================================================================
libmodulemd2-2.8.1-1.el7 (FEDORA-EPEL-2019-0b85b17fa3)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Rework module default merging to improve interaction with third-party repos.
(Issue #[368](https://github.com/fedora-modularity/libmodulemd/issues/368))
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 15 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.8.1-1
- Improve the merge logic to handle third-party repos more sanely
--------------------------------------------------------------------------------
================================================================================
python-ns1-python-0.12.0-1.el7 (FEDORA-EPEL-2019-c3f9edc93a)
Python SDK for the NS1 DNS platform
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.12.0-1
- Update to 0.12.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1749020 - python-ns1-python-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1749020
--------------------------------------------------------------------------------
================================================================================
radare2-3.9.0-3.el7.1 (FEDORA-EPEL-2019-06e33f0123)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
* rebase radare2 to 3.9.0 * fix CVE-2019-14745 ---- - Rebase to radare2 3.9.0
- Fix CVE-2019-14745 in epel7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Riccardo Schirone <rschirone91(a)gmail.com> - 3.9.0-3.1
- Fix epel7 build
* Fri Oct 4 2019 Ivan Mironov <mironov.ivan(a)gmail.com> - 3.9.0-2.1
- Add missing BuildRequires: xxhash-devel, openssl-devel
- Add missing Requires for -devel package: file-devel, openssl-devel
* Mon Sep 30 2019 Riccardo Schirone <rschirone91(a)gmail.com> - 3.9.0-1.1
- rebase to upstream version 3.9.0
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.0-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1756378 - CVE-2019-14745 radare2: a command injection vulnerability in
bin_symbols() in libr/core/cbin.c leads to arbitrary code execution [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1756378
[ 2 ] Bug #1709298 - radare2-3.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1709298
--------------------------------------------------------------------------------