The following Fedora EPEL 7 Security updates need testing: Age URL 352 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 127 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294 cinnamon-3.6.7-5.el7 93 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 91 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 63 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-fc63c75ab1 hostapd-2.8-1.el7 28 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-12067fc897 dosbox-0.74.3-2.el7 20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-487a6fb279 knot-2.8.2-1.el7 knot-resolver-4.1.0-1.el7 20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-aabd063c30 squirrelmail-1.4.23-1.el7.20190710 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-ef655ec55e proftpd-1.3.5e-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
HepMC-2.06.10-1.el7 firefox-pkcs11-loader-3.13.3-1.el7 python-ns1-python-0.10.0-2.el7 python-pyvirtualize-0.9-6.20181003git57d2307.el7 python-pyvmomi-6.7.1-5.el7 python-vconnector-0.5.3-4.el7 python-vevents-0.1.0-0.2.20149631git3ff37a2.el7 python-vpoller-0.7.3-6.el7 scdoc-1.9.6-2.el7 upx-3.95-4.el7 webextension-token-signing-1.0.9-1.el7 zstd-1.4.2-1.el7
Details about builds:
================================================================================ HepMC-2.06.10-1.el7 (FEDORA-EPEL-2019-05defa416d) C++ Event Record for Monte Carlo Generators -------------------------------------------------------------------------------- Update Information:
HepMC2 update. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jul 28 2019 Mattias Ellert mattias.ellert@physics.uu.se - 2.06.10-1 - Update to version 2.06.10 - Drop patches - all fixed in the new version - Drop the -ffp-contract=off hack - Remove redundant m_outstream->setf(std::ios::fixed) - Fix GenEventCopmpare - Adjust expected test output for changes in the code * Wed Jul 24 2019 Fedora Release Engineering releng@fedoraproject.org - 2.06.09-24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 2.06.09-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ firefox-pkcs11-loader-3.13.3-1.el7 (FEDORA-EPEL-2019-9467875c85) Helper script for Firefox that sets up the browser for authentication with Estonian ID-card -------------------------------------------------------------------------------- Update Information:
- Upstream release 3.13.3 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 22 2019 Dmitri Smirnov dmitri@smirnov.ee 3.13.3-1 - Upstream release 3.13.3: Unload old IDEMIA PKCS11 * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 3.13.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Dec 10 2018 Dmitri Smirnov dmitri@smirnov.ee 3.13.1-1 - upstream release 3.13.1 * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 3.13.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-ns1-python-0.10.0-2.el7 (FEDORA-EPEL-2019-55182d83b9) Python SDK for the NS1 DNS platform -------------------------------------------------------------------------------- Update Information:
Fix support for `use_client_subnet` option -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 1 2019 Igor Gnatenko ignatenkobrain@fedoraproject.org - 0.10.0-2 - Backport fix for use_client_subnet option --------------------------------------------------------------------------------
================================================================================ python-pyvirtualize-0.9-6.20181003git57d2307.el7 (FEDORA-EPEL-2019-13fcfdd459) Another python frontend to access and manage pyvmomi -------------------------------------------------------------------------------- Update Information:
drop brand -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 1 2019 Raphael Groner projects.rg@smart.ms - 0.9-6.20181003git57d2307 - drop brand - group BR by python version and subpackage * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 0.9-5.20181003git57d2307 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-pyvmomi-6.7.1-5.el7 (FEDORA-EPEL-2019-f4ab7e712c) vSphere Python SDK -------------------------------------------------------------------------------- Update Information:
drop brand -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 1 2019 Raphael Groner projects.rg@smart.ms - 6.7.1-5 - drop brand * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 6.7.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-vconnector-0.5.3-4.el7 (FEDORA-EPEL-2019-bc3ebb55c2) vSphere Connector Module for Python -------------------------------------------------------------------------------- Update Information:
drop brand -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 1 2019 Raphael Groner projects.rg@smart.ms - 0.5.3-4 - drop brand * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 0.5.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1659777 - Review Request: python-vconnector - vSphere Connector Module for Python https://bugzilla.redhat.com/show_bug.cgi?id=1659777 --------------------------------------------------------------------------------
================================================================================ python-vevents-0.1.0-0.2.20149631git3ff37a2.el7 (FEDORA-EPEL-2019-2b31c26ed7) vSphere Events from the command-line -------------------------------------------------------------------------------- Update Information:
intial package, rhbz#1733024 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1733024 - Review Request: python-vevents - vSphere Events from the command-line https://bugzilla.redhat.com/show_bug.cgi?id=1733024 --------------------------------------------------------------------------------
================================================================================ python-vpoller-0.7.3-6.el7 (FEDORA-EPEL-2019-51cc802fd3) Distributed vSphere API Proxy -------------------------------------------------------------------------------- Update Information:
drop brand -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 1 2019 Raphael Groner projects.rg@smart.ms - 0.7.3-6 - drop brand * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 0.7.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1669793 - Review Request: python-vpoller - Distributed vSphere API Proxy https://bugzilla.redhat.com/show_bug.cgi?id=1669793 --------------------------------------------------------------------------------
================================================================================ scdoc-1.9.6-2.el7 (FEDORA-EPEL-2019-d5c9ce4b36) Tool for generating roff manual pages -------------------------------------------------------------------------------- Update Information:
Initial EPEL7 package. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1734713 - scdoc package for rhel https://bugzilla.redhat.com/show_bug.cgi?id=1734713 --------------------------------------------------------------------------------
================================================================================ upx-3.95-4.el7 (FEDORA-EPEL-2019-44d26d23ea) Ultimate Packer for eXecutables -------------------------------------------------------------------------------- Update Information:
Patches for CVE-2019-14295, CVE-2019-14296 -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 1 2019 Gwyn Ciesla gwync@protonmail.com - 3.95-4 - Upstream patches for CVE-2019-14295 and CVE-2019-14296. * Sat Jul 27 2019 Fedora Release Engineering releng@fedoraproject.org - 3.95-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 3 2019 Fedora Release Engineering releng@fedoraproject.org - 3.95-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Aug 27 2018 Gwyn Ciesla limburgher@gmail - 3.95-1 - 3.95. - Switch to upstream's lzma fork. * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 3.94-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1735673 - CVE-2019-14296 upx: denial of service in canUnpack in p_vmlinx.cpp [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1735673 [ 2 ] Bug #1735669 - CVE-2019-14295 upx: integer overflow in getElfSections function in p_vmlinx.cpp [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1735669 [ 3 ] Bug #1735672 - CVE-2019-14296 upx: denial of service in canUnpack in p_vmlinx.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1735672 [ 4 ] Bug #1735668 - CVE-2019-14295 upx: integer overflow in getElfSections function in p_vmlinx.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1735668 --------------------------------------------------------------------------------
================================================================================ webextension-token-signing-1.0.9-1.el7 (FEDORA-EPEL-2019-c194e2da26) Chrome and Firefox extension for signing with your eID on the web -------------------------------------------------------------------------------- Update Information:
- Upstream release 1.0.9 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 22 2019 Dmitri Smirnov dmitri@smirnov.ee - 1.0.9-1 - 1.0.9 upstream release * Sun Feb 3 2019 Fedora Release Engineering releng@fedoraproject.org - 1.0.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sun Dec 9 2018 Dmitri Smirnov dmitri@smirnov.ee - 1.0.8-1 - 1.0.8 upstream release * Tue Dec 4 2018 Pete Walter pwalter@fedoraproject.org - 1.0.7-3 - Update summary and description now that Chrome is supported again * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 1.0.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ zstd-1.4.2-1.el7 (FEDORA-EPEL-2019-557739d363) Zstd compression library -------------------------------------------------------------------------------- Update Information:
latest upstream -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 31 2019 P��draig Brady P@draigBrady.com - 1.4.2-1 - Latest upstream * Sat Jul 27 2019 Fedora Release Engineering releng@fedoraproject.org - 1.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org