The following Fedora EPEL 7 Security updates need testing: Age URL 572 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 313 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 311 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 21 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b57b954fde openfortivpn-1.12.0-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1f5dbc1cd7 cacti-1.2.10-1.el7 cacti-spine-1.2.10-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-471d8a7abd sympa-6.2.54-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b3684de763 mbedtls-2.7.14-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4fdca9429c seamonkey-2.53.1-2.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fbd804208a monit-5.26.0-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9d0b57e90e ansible-2.9.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cmake3-3.14.7-1.el7 sourcextractor++-0.8-1.el7 weechat-2.7.1-1.el7
Details about builds:
================================================================================ cmake3-3.14.7-1.el7 (FEDORA-EPEL-2020-e819495080) Cross-platform make system -------------------------------------------------------------------------------- Update Information:
Bugfix release 3.14.7 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 8 2020 Antonio Trande sagitter@fedoraproject.org - 3.14.7-1 - Bugfix release 3.14.7 --------------------------------------------------------------------------------
================================================================================ sourcextractor++-0.8-1.el7 (FEDORA-EPEL-2020-58450ed489) A program that extracts a catalog of sources from astronomical images -------------------------------------------------------------------------------- Update Information:
New RPM -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 31 2020 Alejandro Alvarez Ayllon a.alvarezayllon@gmail.com 0.8-1 - New RPM --------------------------------------------------------------------------------
================================================================================ weechat-2.7.1-1.el7 (FEDORA-EPEL-2020-b8f44a854a) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information:
New version, fixes a lot of bugs (some of them security). In the same update, fixed up epel7 build to latest version as well. -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 20 2020 Joe Walker grumpey0@gmail.com - 2.7.1-1 - Update to Version 2.7.1 (https://weechat.org/files/releasenotes/ReleaseNotes-2.7.1.html) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8955) * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 2.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Dec 9 2019 Nathan Morell fedoraproject.org@fap.me - 2.7-1 - Update to 2.7 * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 2.4-4 - Rebuilt for Python 3.8 * Sat Jul 27 2019 Fedora Release Engineering releng@fedoraproject.org - 2.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu May 30 2019 Jitka Plesnikova jplesnik@redhat.com - 2.4-2 - Perl 5.30 rebuild * Sun Apr 14 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.4-1 - Update to 2.4 - Tweak FindPython to work with Fedora python3 * Sun Feb 3 2019 Fedora Release Engineering releng@fedoraproject.org - 2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 21 2019 Mamoru TASAKA mtasaka@fedoraproject.org - 2.3-2 - F-30: rebuild against ruby26 * Wed Nov 28 2018 Paul Komkoff i@stingr.net - 2.3-1 - Update to 2.3 - Enable python plugin. * Tue Sep 18 2018 Vasiliy N. Glazov vascom2@gmail.com - 2.2-2 - Switch to use python3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1718050 - weechat-2.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1718050 [ 2 ] Bug #1444882 - CVE-2017-8073 weechat: Buffer overflow in the irc_ctcp_dcc_filename_without_quotes function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1444882 [ 3 ] Bug #1803066 - CVE-2020-8955 weechat: denial of service in irc_mode_channel_update in plugins/irc/irc-mode.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1803066 [ 4 ] Bug #1803065 - CVE-2020-8955 weechat: denial of service in irc_mode_channel_update in plugins/irc/irc-mode.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1803065 [ 5 ] Bug #1648007 - Weechat 2.3 is currently available https://bugzilla.redhat.com/show_bug.cgi?id=1648007 [ 6 ] Bug #1793597 - weechat is missing sources https://bugzilla.redhat.com/show_bug.cgi?id=1793597 [ 7 ] Bug #1677974 - weechat-2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1677974 [ 8 ] Bug #1500078 - weechat: Uninitialized buffer used in logger plugin [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1500078 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org