The following Fedora EPEL 7 Security updates need testing: Age URL 523 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 265 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 263 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-75cc3918d1 rubygem-ox-2.4.11-5.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-9ffdf25269 python-django-1.11.27-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12cd208593 gnulib-0-31.20200107git.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-de388d4fd0 chromium-79.0.3945.117-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-35e87bab10 perl-Clipboard-0.21-1.el7.1 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a062204588 rubygem-rack-1.6.12-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-87fd65eed3 python3-pillow-6.2.2-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-345003feba thunderbird-enigmail-2.1.5-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-348d34c4c6 elog-3.1.4-1.20190113git283534d97d5a.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-807cf11068 upx-3.95-5.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing links-2.20.2-1.el7 nss-mdns-0.14.1-5.el7 relval-2.4.11-1.el7 Details about builds: ================================================================================ links-2.20.2-1.el7 (FEDORA-EPEL-2020-a16a109471) Web browser running in both graphics and text mode -------------------------------------------------------------------------------- Update Information: Update to a new version. Security bug fixed: when links was connected to tor, it would send real dns requests outside the tor network when the displayed page contains <link rel="dns-prefetch" href="http://host.domain/";>. Fix reading one byte beyond allocated space in case of corrupted UTF-8 data - CVE-2017-11114 -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 19 2020 Lubomir Rintel <lkundrak@xxxxx> - 1:2.20.2-1 - New release * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.17-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Oct 31 2018 Lubomir Rintel <lkundrak@xxxxx> - 1:2.17-1 - New release * Fri Jul 13 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.14-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.14-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.14-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue Mar 21 2017 Lubomir Rintel <lkundrak@xxxxx> - 1:2.14-1 - New release * Fri Feb 10 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1480633 - CVE-2017-11114 links: Global-based 1 byte buffer over-read in put_chars function in html_r.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1480633 -------------------------------------------------------------------------------- ================================================================================ nss-mdns-0.14.1-5.el7 (FEDORA-EPEL-2020-b5e1d863a8) glibc plugin for .local name resolution -------------------------------------------------------------------------------- Update Information: Properly work with or without authselect -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 19 2020 Adam Goode <adam@xxxxxxxxxxxxx> - 0.14.1-5 - Properly work with or without authselect (BZ #1577243) * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.14.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.14.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.14.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1577243 - nss-mdns modifies /etc/nsswitch.conf in scriptlets which conflicts with authselect on Fedora 28 https://bugzilla.redhat.com/show_bug.cgi?id=1577243 -------------------------------------------------------------------------------- ================================================================================ relval-2.4.11-1.el7 (FEDORA-EPEL-2020-80b82a4131) Tool for interacting with Fedora QA wiki pages -------------------------------------------------------------------------------- Update Information: This update provides a new release of relval that adds a new maximum size for the Comp_Neuro spin. That is the only change. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 16 2020 Adam Williamson <awilliam@xxxxxxxxxx> - 2.4.11-1 - New release 2.4.11: add max size for Comp_Neuro -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx
