The following Fedora EPEL 7 Security updates need testing:
Age URL
459
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
201
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
198
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-50f0062140
golang-1.13.3-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-1946200e23
putty-0.73-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-2d77bb9597
python3-requests-2.14.2-1.el7 python3-urllib3-1.25.1-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-72f653ef17
php-robrichards-xmlseclibs3-3.0.4-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-927a9446df
php-robrichards-xmlseclibs-2.1.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ba474a8841
freetds-1.1.20-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-25eb663796
libmp4v2-2.1.0-0.19.trunkREV507.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-540c6a4e1d
djvulibre-3.5.25.3-18.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-136fa99185
limnoria-20191109-2.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-5fecd4c331
libmodbus-3.0.8-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d8f3c6a443
chromium-78.0.3904.97-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-58be818bb4
thunderbird-enigmail-2.1.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
libidn2-2.3.0-1.el7
mingw-libidn2-2.3.0-1.el7
pagure-5.8-1.el7
Details about builds:
================================================================================
libidn2-2.3.0-1.el7 (FEDORA-EPEL-2019-8a7207a341)
Library to support IDNA2008 internationalized domain names
--------------------------------------------------------------------------------
Update Information:
Libidn 2.3.0 (released 2019-11-14) ================================== * Mitre
has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced
in 2.2.0 (commit 241e8f48) * Update the data tables from Unicode 6.3.0 to
Unicode 11.0 * Turn `_idn2_punycode_encode`, `_idn2_punycode_decode` into
compat symbols (Fixes #74)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 16 2019 Robert Scheck <robert(a)fedoraproject.org> 2.3.0-1
- Upgrade to 2.3.0 (#1764345, #1772703)
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1772703 - libidn2-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1772703
--------------------------------------------------------------------------------
================================================================================
mingw-libidn2-2.3.0-1.el7 (FEDORA-EPEL-2019-aff200699c)
MinGW Windows Internationalized Domain Name 2008 support library
--------------------------------------------------------------------------------
Update Information:
Libidn 2.3.0 (released 2019-11-14) ================================== * Mitre
has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced
in 2.2.0 (commit 241e8f48) * Update the data tables from Unicode 6.3.0 to
Unicode 11.0 * Turn `_idn2_punycode_encode`, `_idn2_punycode_decode` into
compat symbols (Fixes #74)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 16 2019 Robert Scheck <robert(a)fedoraproject.org> - 2.3.0-1
- New upstream release (#1764345, #1773229)
* Tue Oct 8 2019 Sandro Mani <manisandro(a)gmail.com> - 2.2.0-2
- Rebuild (Changes/Mingw32GccDwarf2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1773229 - mingw-libidn2-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1773229
--------------------------------------------------------------------------------
================================================================================
pagure-5.8-1.el7 (FEDORA-EPEL-2019-8d4f94853a)
A git-centered forge
--------------------------------------------------------------------------------
Update Information:
Update to 5.8 + Enable the ctrl-enter keys to submit forms on tickets and PRs +
Fix spelling errors on documentation + Fix renewing url on invalid token error
message + Various fixes to the srcfpo theme + disable smooth scrolling on
initial highlight & scroll process + Accept a with_commits parameter on the
branches api to resolve the HEAD commits + Various fixes to the PR view + Add
support for arrow >= 0.15 + Select full text on git|ssh url input boxes when
they get focus + Send notification when a branch is created + Add revision along
with tag/branch creation/deletion + Add asciidoc syntax override + Fix git blame
on unborn HEAD or non-master default branch repos + Fix the logic to rebase PRs
+ Fix setting one's default email address + Send oldrev as old_commit for
git.receive event + Add a set-default-branch action to pagure-admin + Fix
rendering badges on the PR list page + Tweak when we show the merge and the
rebase buttons + Fix the logic around interacting with read-only databases in
hooks + Fix .diff and .patch generation for empty commits + Fix url on the
invalid token error message + Fix typo on the pull request merge error message +
Allow cross-project API token to open pull-request + Allow updating PRs via the
API using cross-project tokens + Fix the logic to make the merge button appear
on pull-request
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 16 2019 Neal Gompa <ngompa13(a)gmail.com> - 5.8-1
- Update to 5.8 (RH#1744065)
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.7.4-4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.7.4-3
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744065 - pagure-5.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744065
--------------------------------------------------------------------------------