The following Fedora EPEL 7 Security updates need testing: Age URL 359 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 134 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294 cinnamon-3.6.7-5.el7 100 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 98 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 70 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-fc63c75ab1 hostapd-2.8-1.el7 35 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897 dosbox-0.74.3-2.el7 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-487a6fb279 knot-2.8.2-1.el7 knot-resolver-4.1.0-1.el7 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-aabd063c30 squirrelmail-1.4.23-1.el7.20190710 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-44d26d23ea upx-3.95-4.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b6948289f0 pdns-4.1.11-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ad7b11b384 igraph-0.7.1-12.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-643d621522 jhead-3.03-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-4e6da66b9f python-django-1.11.23-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-204f810692 clamav-0.101.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
allegro-4.4.3-3.el7 charliecloud-0.9.10-10.el7 gsi-openssh-7.4p1-5.el7 kf5-kconfig-5.52.0-1.el7.1 libmspack-0.5-0.0.7.alpha.el7 mock-1.4.17-1.el7 mock-core-configs-30.5-1.el7 nnn-2.6-1.el7 python-pip-epel-8.1.2-9.el7 python2-wheel-0.29.0-2.el7 python34-setuptools-39.2.0-4.el7
Details about builds:
================================================================================ allegro-4.4.3-3.el7 (FEDORA-EPEL-2019-1316639965) A game programming library -------------------------------------------------------------------------------- Update Information:
4.4.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1550686 - Rebuild on epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1550686 --------------------------------------------------------------------------------
================================================================================ charliecloud-0.9.10-10.el7 (FEDORA-EPEL-2019-c7b6c39f2f) Lightweight user-defined software stacks for high-performance computing -------------------------------------------------------------------------------- Update Information:
initial charliecloud package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1690046 - Review Request: charliecloud - unprivileged container runtime https://bugzilla.redhat.com/show_bug.cgi?id=1690046 --------------------------------------------------------------------------------
================================================================================ gsi-openssh-7.4p1-5.el7 (FEDORA-EPEL-2019-cf2a892f53) An implementation of the SSH protocol with GSI authentication -------------------------------------------------------------------------------- Update Information:
Sync with openssh package. -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 7 2019 Mattias Ellert mattias.ellert@physics.uu.se - 7.4p1-5 - Based on openssh-7.4p1-21.el7 --------------------------------------------------------------------------------
================================================================================ kf5-kconfig-5.52.0-1.el7.1 (FEDORA-EPEL-2019-5f75a76f4e) KDE Frameworks 5 Tier 1 addon with advanced configuration system -------------------------------------------------------------------------------- Update Information:
Backport upstream fix for CVE-2019-14744 security issue. -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 8 2019 Rex Dieter rdieter@fedoraproject.org - 5.52.0-1.1 - (branch backport) upstream fix for CVE-2019-14744 (#1738901) --------------------------------------------------------------------------------
================================================================================ libmspack-0.5-0.0.7.alpha.el7 (FEDORA-EPEL-2019-aa84623a4e) Library for CAB and related files compression and decompression -------------------------------------------------------------------------------- Update Information:
The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft. Security Fix(es): * libmspack: Out-of-bounds write in mspack/cab.h (CVE-2018-18584) * libmspack: chmd_read_headers() fails to reject filenames containing NULL bytes (CVE-2018-18585) https://access.redhat.com/errata/RHSA-2019:2049 -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 8 2019 Orion Poplawski orion@nwra.com - 0.5-0.0.7.alpha - Limited arch package for EPEL 7 --------------------------------------------------------------------------------
================================================================================ mock-1.4.17-1.el7 (FEDORA-EPEL-2019-b8a4ee539c) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information:
- change of exit code during transition from mockchain to mock --chain - support run in Fedora Toolbox (otaylor@fishsoup.net) - add cheat sheet - Adding tool for parsing build.log (sisi.chlupova@gmail.com) - load secondary groups [RHBZ#1264005] - pass --allowerasing by default to DNF [GH#251] - make include() functional for --chain [GH#263] - Removing buildstderr from log - configurable via _mock_stderr_line_prefix (sisi.chlupova@gmail.com) - Fixup: Use rpm -qa --root instead of running rpm -qa in chroot (miro@hroncok.cz) - DynamicBuildrequires: Detect when no new packages were installed (miro@hroncok.cz) - Allow more loop devices (sisi.chlupova@gmail.com) - Fix binary locations in /bin for split-usr setups (bero@lindev.ch) - describe behaviour of resultdir together with --chain [GH#267] - repeat dynamic requires if needed [GH#276] - Fix compatibility with pre-4.15 RPM versions with DynamicBuildRequires (i.gnatenko.brain@gmail.com) - Enable dynamic BuildRequires by default (i.gnatenko.brain@gmail.com) - bootstrap: independent network configuration (praiskup@redhat.com) - Update the man page about ~/.config/mock/FOO.cfg (miro@hroncok.cz) - explicitely convert releasever to string [GH#270] - grant anyone access to bind-mounted /etc/resolv.conf (praiskup@redhat.com) - -r FOO will try to read first ~/.mock/FOO.cfg if exists - enhance man page of mock about --chain - bash completion for --chain - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com) - Fix crash on non-ascii dnf log messages (bkorren@redhat.com) - add deprecation warning to mockchain - replace mockchain with `mock --chain` command (necas.marty@gmail.com) - switch to python3 on el7 (msuchy@redhat.com) - disable updates-modulare repos for now - buildrequire systemd-srpm-macros to get _sysusersdir - removed info about metadata expire (khoidinhtrinh@gmail.com) - added updates-modular to 29 and 30 (khoidinhtrinh@gmail.com) - replace groupadd using sysusers.d - core-configs: epel-7 profiles to use mirrorlists (praiskup@redhat.com) - EOL Fedora 28 - do not protect packages in chroot [GH#286] - Fix value for dist for OpenMandriva 4.0 configs (ngompa13@gmail.com) - Add initial OpenMandriva distribution targets (ngompa13@gmail.com) -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 8 2019 Miroslav Such�� msuchy@redhat.com 1.4.17-1 - change of exit code during transition from mockchain to mock --chain - support run in Fedora Toolbox (otaylor@fishsoup.net) - add cheat sheet - Adding tool for parsing build.log (sisi.chlupova@gmail.com) - load secondary groups [RHBZ#1264005] - pass --allowerasing by default to DNF [GH#251] - make include() functional for --chain [GH#263] - Removing buildstderr from log - configurable via _mock_stderr_line_prefix (sisi.chlupova@gmail.com) - Fixup: Use rpm -qa --root instead of running rpm -qa in chroot (miro@hroncok.cz) - DynamicBuildrequires: Detect when no new packages were installed (miro@hroncok.cz) - Allow more loop devices (sisi.chlupova@gmail.com) - Fix binary locations in /bin for split-usr setups (bero@lindev.ch) - describe behaviour of resultdir together with --chain [GH#267] - repeat dynamic requires if needed [GH#276] - Fix compatibility with pre-4.15 RPM versions with DynamicBuildRequires (i.gnatenko.brain@gmail.com) - Enable dynamic BuildRequires by default (i.gnatenko.brain@gmail.com) - bootstrap: independent network configuration (praiskup@redhat.com) - Update the man page about ~/.config/mock/FOO.cfg (miro@hroncok.cz) - explicitely convert releasever to string [GH#270] - grant anyone access to bind-mounted /etc/resolv.conf (praiskup@redhat.com) - -r FOO will try to read first ~/.mock/FOO.cfg if exists - enhance man page of mock about --chain - bash completion for --chain - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com) - Fix crash on non-ascii dnf log messages (bkorren@redhat.com) - add deprecation warning to mockchain - replace mockchain with `mock --chain` command (necas.marty@gmail.com) - switch to python3 on el7 (msuchy@redhat.com) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1264005 - when dropping privileges secondary user groups are not loaded https://bugzilla.redhat.com/show_bug.cgi?id=1264005 --------------------------------------------------------------------------------
================================================================================ mock-core-configs-30.5-1.el7 (FEDORA-EPEL-2019-b8a4ee539c) Mock core config files basic chroots -------------------------------------------------------------------------------- Update Information:
- change of exit code during transition from mockchain to mock --chain - support run in Fedora Toolbox (otaylor@fishsoup.net) - add cheat sheet - Adding tool for parsing build.log (sisi.chlupova@gmail.com) - load secondary groups [RHBZ#1264005] - pass --allowerasing by default to DNF [GH#251] - make include() functional for --chain [GH#263] - Removing buildstderr from log - configurable via _mock_stderr_line_prefix (sisi.chlupova@gmail.com) - Fixup: Use rpm -qa --root instead of running rpm -qa in chroot (miro@hroncok.cz) - DynamicBuildrequires: Detect when no new packages were installed (miro@hroncok.cz) - Allow more loop devices (sisi.chlupova@gmail.com) - Fix binary locations in /bin for split-usr setups (bero@lindev.ch) - describe behaviour of resultdir together with --chain [GH#267] - repeat dynamic requires if needed [GH#276] - Fix compatibility with pre-4.15 RPM versions with DynamicBuildRequires (i.gnatenko.brain@gmail.com) - Enable dynamic BuildRequires by default (i.gnatenko.brain@gmail.com) - bootstrap: independent network configuration (praiskup@redhat.com) - Update the man page about ~/.config/mock/FOO.cfg (miro@hroncok.cz) - explicitely convert releasever to string [GH#270] - grant anyone access to bind-mounted /etc/resolv.conf (praiskup@redhat.com) - -r FOO will try to read first ~/.mock/FOO.cfg if exists - enhance man page of mock about --chain - bash completion for --chain - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com) - Fix crash on non-ascii dnf log messages (bkorren@redhat.com) - add deprecation warning to mockchain - replace mockchain with `mock --chain` command (necas.marty@gmail.com) - switch to python3 on el7 (msuchy@redhat.com) - disable updates-modulare repos for now - buildrequire systemd-srpm-macros to get _sysusersdir - removed info about metadata expire (khoidinhtrinh@gmail.com) - added updates-modular to 29 and 30 (khoidinhtrinh@gmail.com) - replace groupadd using sysusers.d - core-configs: epel-7 profiles to use mirrorlists (praiskup@redhat.com) - EOL Fedora 28 - do not protect packages in chroot [GH#286] - Fix value for dist for OpenMandriva 4.0 configs (ngompa13@gmail.com) - Add initial OpenMandriva distribution targets (ngompa13@gmail.com) -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 8 2019 Miroslav Such�� msuchy@redhat.com 30.5-1 - disable updates-modulare repos for now - buildrequire systemd-srpm-macros to get _sysusersdir - removed info about metadata expire (khoidinhtrinh@gmail.com) - added updates-modular to 29 and 30 (khoidinhtrinh@gmail.com) - replace groupadd using sysusers.d - core-configs: epel-7 profiles to use mirrorlists (praiskup@redhat.com) - EOL Fedora 28 - do not protect packages in chroot [GH#286] - Fix value for dist for OpenMandriva 4.0 configs (ngompa13@gmail.com) - Add initial OpenMandriva distribution targets (ngompa13@gmail.com) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1264005 - when dropping privileges secondary user groups are not loaded https://bugzilla.redhat.com/show_bug.cgi?id=1264005 --------------------------------------------------------------------------------
================================================================================ nnn-2.6-1.el7 (FEDORA-EPEL-2019-081ca3690c) The missing terminal file browser for X -------------------------------------------------------------------------------- Update Information:
Release 2.6 -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 8 2019 Robert-Andr�� Mauchin zebob.m@gmail.com - 2.6-1 - Release 2.6 --------------------------------------------------------------------------------
================================================================================ python-pip-epel-8.1.2-9.el7 (FEDORA-EPEL-2019-31bd12e515) A tool for installing and managing Python packages -------------------------------------------------------------------------------- Update Information:
Rename packages after RHEL 7.7. To be pushed to stable after the release. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1733190 - Review Request: python34-setuptools - Easily build and distribute Python 3.4 packages https://bugzilla.redhat.com/show_bug.cgi?id=1733190 [ 2 ] Bug #1737028 - Review Request: python-pip-epel - A tool for installing and managing Python packages https://bugzilla.redhat.com/show_bug.cgi?id=1737028 [ 3 ] Bug #1733193 - Review Request: python2-wheel - A built-package format for Python https://bugzilla.redhat.com/show_bug.cgi?id=1733193 --------------------------------------------------------------------------------
================================================================================ python2-wheel-0.29.0-2.el7 (FEDORA-EPEL-2019-31bd12e515) A built-package format for Python -------------------------------------------------------------------------------- Update Information:
Rename packages after RHEL 7.7. To be pushed to stable after the release. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1733190 - Review Request: python34-setuptools - Easily build and distribute Python 3.4 packages https://bugzilla.redhat.com/show_bug.cgi?id=1733190 [ 2 ] Bug #1737028 - Review Request: python-pip-epel - A tool for installing and managing Python packages https://bugzilla.redhat.com/show_bug.cgi?id=1737028 [ 3 ] Bug #1733193 - Review Request: python2-wheel - A built-package format for Python https://bugzilla.redhat.com/show_bug.cgi?id=1733193 --------------------------------------------------------------------------------
================================================================================ python34-setuptools-39.2.0-4.el7 (FEDORA-EPEL-2019-31bd12e515) Easily build and distribute Python 3.4 packages -------------------------------------------------------------------------------- Update Information:
Rename packages after RHEL 7.7. To be pushed to stable after the release. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1733190 - Review Request: python34-setuptools - Easily build and distribute Python 3.4 packages https://bugzilla.redhat.com/show_bug.cgi?id=1733190 [ 2 ] Bug #1737028 - Review Request: python-pip-epel - A tool for installing and managing Python packages https://bugzilla.redhat.com/show_bug.cgi?id=1737028 [ 3 ] Bug #1733193 - Review Request: python2-wheel - A built-package format for Python https://bugzilla.redhat.com/show_bug.cgi?id=1733193 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org