The following Fedora EPEL 7 Security updates need testing: Age URL 150 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a unrtf-0.21.9-8.el7 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7 84 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896 myrepos-1.20180726-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bdb21ebc3f drupal7-7.60-2.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-29716ed12f php-pear-CAS-1.3.6-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8876f503ce libgit2-0.26.8-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9091f95cd5 zchunk-0.9.14-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dea9ade8c1 icecast-2.4.4-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cbfa290941 mkvtoolnix-28.2.0-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing SDL2_image-2.0.4-1.el7 SDL2_mixer-2.0.4-1.el7 mingw-SDL2-2.0.9-1.el7 mingw-SDL2_image-2.0.4-1.el7 mingw-SDL2_mixer-2.0.4-1.el7 perl-Mojolicious-7.94-1.el7 python-mock-1.0.1-10.el7 python3-mock-2.0.0-1.el7 twa-1.6.2-1.el7 Details about builds: ================================================================================ SDL2_image-2.0.4-1.el7 (FEDORA-EPEL-2018-be918c58c6) Image loading library for SDL -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2018-3977 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 6 2018 Pete Walter <pwalter@xxxxxxxxxxxxxxxxx> - 2.0.4-1 - Update to 2.0.4 * Thu Jul 12 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering functionality https://bugzilla.redhat.com/show_bug.cgi?id=1646575 -------------------------------------------------------------------------------- ================================================================================ SDL2_mixer-2.0.4-1.el7 (FEDORA-EPEL-2018-7311575631) Simple DirectMedia Layer - Sample Mixer Library -------------------------------------------------------------------------------- Update Information: Update to 2.0.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 6 2018 Pete Walter <pwalter@xxxxxxxxxxxxxxxxx> - 2.0.4-1 - Update to 2.0.4 * Thu Jul 12 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jan 31 2018 Igor Gnatenko <ignatenkobrain@xxxxxxxxxxxxxxxxx> - 2.0.2-3 - Switch to %ldconfig_scriptlets -------------------------------------------------------------------------------- ================================================================================ mingw-SDL2-2.0.9-1.el7 (FEDORA-EPEL-2018-df2d5af2fe) MinGW Windows port of SDL2 cross-platform multimedia library -------------------------------------------------------------------------------- Update Information: mingw-SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling https://bugzilla.redhat.com/show_bug.cgi?id=1500450 -------------------------------------------------------------------------------- ================================================================================ mingw-SDL2_image-2.0.4-1.el7 (FEDORA-EPEL-2018-df2d5af2fe) MinGW Windows port of the Image loading library for SDL2 -------------------------------------------------------------------------------- Update Information: mingw-SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling https://bugzilla.redhat.com/show_bug.cgi?id=1500450 -------------------------------------------------------------------------------- ================================================================================ mingw-SDL2_mixer-2.0.4-1.el7 (FEDORA-EPEL-2018-df2d5af2fe) MinGW Windows port of Simple DirectMedia Layer's Sample Mixer Library -------------------------------------------------------------------------------- Update Information: mingw-SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling https://bugzilla.redhat.com/show_bug.cgi?id=1500450 -------------------------------------------------------------------------------- ================================================================================ perl-Mojolicious-7.94-1.el7 (FEDORA-EPEL-2018-32e0cee0bb) A next generation web framework for Perl -------------------------------------------------------------------------------- Update Information: Mojolicious 7.94 is the last Mojolicious 7.x release and fixes a number of bugs that were in the previous versions. As an example, Mojo::UserAgent was not checking peer SSL certificates by default. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 6 2018 Emmanuel Seyman <emmanuel@xxxxxxxxx> - 7.94-1 - Update to 7.94 -------------------------------------------------------------------------------- ================================================================================ python-mock-1.0.1-10.el7 (FEDORA-EPEL-2018-51facbfbbb) A Python Mocking and Patching Library for Testing -------------------------------------------------------------------------------- Update Information: - Update python34-mock to 2.0.0 - Ship python36-mock -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 5 2018 Orion Poplawski <orion@xxxxxxxx> - 1.0.1-10 - Move Python 3 package to python3-mock -------------------------------------------------------------------------------- ================================================================================ python3-mock-2.0.0-1.el7 (FEDORA-EPEL-2018-51facbfbbb) A Python Mocking and Patching Library for Testing -------------------------------------------------------------------------------- Update Information: - Update python34-mock to 2.0.0 - Ship python36-mock -------------------------------------------------------------------------------- ================================================================================ twa-1.6.2-1.el7 (FEDORA-EPEL-2018-3f8001658e) Tiny web auditor with strong opinions -------------------------------------------------------------------------------- Update Information: Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 6 2018 Artur Iwicki <fedora@xxxxxxxxxx> - 1.6.2-1 - Update to latest upstream version * Sat Oct 20 2018 Artur Iwicki <fedora@xxxxxxxxxx> - 1.6.0-1 - Update to latest upstream version - Update upstream URL (repo owner change) -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx
