The following Fedora EPEL 7 Security updates need testing: Age URL 680 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 421 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 419 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 129 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 69 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-dbca324350 nghttp2-1.33.0-1.1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-761bce8292 wordpress-5.1.6-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a1eff3982c tcpreplay-4.3.3-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-add380f567 php-horde-horde-5.2.23-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f33a36b2c4 python-httplib2-0.18.1-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c438b9fb89 lynis-3.0.0-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d749373a67 znc-1.8.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6b96a7e3a chromium-83.0.4103.106-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
alpine-2.23-2.el7 libdigidocpp-3.14.3-1.el7 scitokens-cpp-0.5.1-1.el7
Details about builds:
================================================================================ alpine-2.23-2.el7 (FEDORA-EPEL-2020-af9b2ac861) powerful, easy to use console email client -------------------------------------------------------------------------------- Update Information:
2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 23 2020 josef radinger cheese@nosuchhost.net - 2.23-2 - 2.23 fixes CVE-2020-14929 (#1850048) and new version (#1848786) * Mon Jun 22 2020 josef radinger cheese@nosuchhost.net - 2.23-1 - bump version - update patch2 alpine-2.23-gcc10.patch * Tue Mar 24 2020 josef radinger cheese@nosuchhost.net - 2.22-1 - bump version * Thu Feb 13 2020 Than Ngo than@redhat.com - 2.21-13 - fixed multiple definition of symbols * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 2.21-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jul 24 2019 Fedora Release Engineering releng@fedoraproject.org - 2.21-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Jul 21 2019 Paul Wouters pwouters@redhat.com - 2.21-10 - Patch to suppress sending the user-agent per default * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 2.21-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 2.21-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon May 21 2018 Rex Dieter rdieter@fedoraproject.org - 2.21-7 - new URL - use %license, %make_build, %make_install * Tue Mar 6 2018 josef radinger cheese@nosuchhost.net - 2.21-6 - add Buildrequires: gcc https://fedoraproject.org/wiki/Packaging:C_and_C++ * Wed Feb 7 2018 Fedora Release Engineering releng@fedoraproject.org - 2.21-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1850047 - CVE-2020-14929 alpine: silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH https://bugzilla.redhat.com/show_bug.cgi?id=1850047 --------------------------------------------------------------------------------
================================================================================ libdigidocpp-3.14.3-1.el7 (FEDORA-EPEL-2020-4d94e9444b) Library offers creating, signing and verification of digitally signed documents -------------------------------------------------------------------------------- Update Information:
- Upstream release 3.14.3 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 24 2020 Dmitri Smirnov dmitri@smirnov.ee - 3.14.3-1 - Upstream release 3.14.3 --------------------------------------------------------------------------------
================================================================================ scitokens-cpp-0.5.1-1.el7 (FEDORA-EPEL-2020-805503deaa) C++ Implementation of the SciTokens Library -------------------------------------------------------------------------------- Update Information:
Translate WLCG's storage.modify as a write permission in SciTokens. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 24 2020 Derek Weitzel dweitzel@unl.edu - 0.5.1-1 - Add storage.modify as write permission --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org