The following Fedora EPEL 7 Security updates need testing: Age URL 680 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 421 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 419 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 129 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 69 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-dbca324350 nghttp2-1.33.0-1.1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-761bce8292 wordpress-5.1.6-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a1eff3982c tcpreplay-4.3.3-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-add380f567 php-horde-horde-5.2.23-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f33a36b2c4 python-httplib2-0.18.1-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c438b9fb89 lynis-3.0.0-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d749373a67 znc-1.8.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6b96a7e3a chromium-83.0.4103.106-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing alpine-2.23-2.el7 libdigidocpp-3.14.3-1.el7 scitokens-cpp-0.5.1-1.el7 Details about builds: ================================================================================ alpine-2.23-2.el7 (FEDORA-EPEL-2020-af9b2ac861) powerful, easy to use console email client -------------------------------------------------------------------------------- Update Information: 2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786) -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 23 2020 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.23-2 - 2.23 fixes CVE-2020-14929 (#1850048) and new version (#1848786) * Mon Jun 22 2020 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.23-1 - bump version - update patch2 alpine-2.23-gcc10.patch * Tue Mar 24 2020 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.22-1 - bump version * Thu Feb 13 2020 Than Ngo <than@xxxxxxxxxx> - 2.21-13 - fixed multiple definition of symbols * Tue Jan 28 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.21-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jul 24 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.21-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Jul 21 2019 Paul Wouters <pwouters@xxxxxxxxxx> - 2.21-10 - Patch to suppress sending the user-agent per default * Thu Jan 31 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.21-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jul 12 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.21-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon May 21 2018 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 2.21-7 - new URL - use %license, %make_build, %make_install * Tue Mar 6 2018 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.21-6 - add Buildrequires: gcc https://fedoraproject.org/wiki/Packaging:C_and_C++ * Wed Feb 7 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.21-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1850047 - CVE-2020-14929 alpine: silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH https://bugzilla.redhat.com/show_bug.cgi?id=1850047 -------------------------------------------------------------------------------- ================================================================================ libdigidocpp-3.14.3-1.el7 (FEDORA-EPEL-2020-4d94e9444b) Library offers creating, signing and verification of digitally signed documents -------------------------------------------------------------------------------- Update Information: - Upstream release 3.14.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 24 2020 Dmitri Smirnov <dmitri@xxxxxxxxxx> - 3.14.3-1 - Upstream release 3.14.3 -------------------------------------------------------------------------------- ================================================================================ scitokens-cpp-0.5.1-1.el7 (FEDORA-EPEL-2020-805503deaa) C++ Implementation of the SciTokens Library -------------------------------------------------------------------------------- Update Information: Translate WLCG's storage.modify as a write permission in SciTokens. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 24 2020 Derek Weitzel <dweitzel@xxxxxxx> - 0.5.1-1 - Add storage.modify as write permission -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx
