The following Fedora EPEL 7 Security updates need testing:
Age URL
61 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
29 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d2e0971e9b
uwsgi-2.0.17.1-1.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e9a8615099
mbedtls-2.7.5-1.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-52b5b56d0a
seamonkey-2.49.4-2.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5346e2123a
dpkg-1.18.25-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f5e90bb2b
libmspack-0.7-0.1.alpha.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7b6fa936b1
knot-resolver-2.4.1-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-38987c542e
cgit-1.1-11.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aec074825a
thunderbird-enigmail-2.0.8-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0be0127779
libgit2-0.26.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ipmiutil-3.1.2-3.el7
moodle-3.1.13-2.el7
perl-Parse-EDID-1.0.7-1.el7
zchunk-0.9.7-2.el7
Details about builds:
================================================================================
ipmiutil-3.1.2-3.el7 (FEDORA-EPEL-2018-41ef4d273f)
Easy-to-use IPMI server management utilities
--------------------------------------------------------------------------------
Update Information:
added iseltime.8, reworked util/Makefile.am for race condition
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 20 2018 Andrew Cress <arcress at users.sourceforge.net> 3.1.2-2
- added iseltime.8, reworked util/Makefile.am for race condition
* Fri Jul 20 2018 Andrew Cress <arcress at users.sourceforge.net> 3.1.2-1
- resolve doubly-defined Group for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1599923 - ipmiutil is violating Spec Maintenance and Canonicity
https://bugzilla.redhat.com/show_bug.cgi?id=1599923
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.13-2.el7 (FEDORA-EPEL-2018-33f460bd9c)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Patch cleanup. ---- Multiple CVE fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 10 2018 Gwyn Ciesla <[email protected]> - 3.1.13-2
- Patch cleanup.
* Mon Jul 30 2018 Gwyn Ciesla <[email protected]> - 3.1.13-1
- 3.1.13.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580990 - please remove moodle-QuickForm.patch
https://bugzilla.redhat.com/show_bug.cgi?id=1580990
[ 2 ] Bug #1599817 - CVE-2018-10891 moodle: Quiz question bank import preview
could execute JavaScript [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1599817
[ 3 ] Bug #1599807 - CVE-2018-10890 moodle: Web service
core_course_get_categories may return invisible categories [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1599807
[ 4 ] Bug #1599816 - CVE-2018-10891 moodle: Quiz question bank import preview
could execute JavaScript [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599816
[ 5 ] Bug #1599806 - CVE-2018-10890 moodle: Web service
core_course_get_categories may return invisible categories [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599806
[ 6 ] Bug #1599800 - CVE-2018-10889 moodle: Privacy data exports include log
data [fedora-27]
https://bugzilla.redhat.com/show_bug.cgi?id=1599800
--------------------------------------------------------------------------------
================================================================================
perl-Parse-EDID-1.0.7-1.el7 (FEDORA-EPEL-2018-32805ecaa4)
Extended display identification data (EDID) parser
--------------------------------------------------------------------------------
Update Information:
upgrade to 1.0.7 various bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 9 2018 Marianne Lombard <[email protected]> - 1.0.7-1
- upgrade to 1.0.7 various bugfixes
* Fri Jul 13 2018 Fedora Release Engineering <[email protected]> -
1.0.6-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <[email protected]> - 1.0.6-12
- Perl 5.28 rebuild
* Fri Feb 9 2018 Fedora Release Engineering <[email protected]> -
1.0.6-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <[email protected]> -
1.0.6-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Jun 6 2017 Jitka Plesnikova <[email protected]> - 1.0.6-9
- Perl 5.26 rebuild
* Sat Feb 11 2017 Fedora Release Engineering <[email protected]> -
1.0.6-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Mon May 16 2016 Jitka Plesnikova <[email protected]> - 1.0.6-7
- Perl 5.24 rebuild
* Thu Feb 4 2016 Fedora Release Engineering <[email protected]> -
1.0.6-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Jun 18 2015 Fedora Release Engineering <[email protected]>
- 1.0.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon Jun 8 2015 Jitka Plesnikova <[email protected]> - 1.0.6-4
- Perl 5.22 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613213 - Upgrade perl-Parse-EDID to 1.0.7
https://bugzilla.redhat.com/show_bug.cgi?id=1613213
--------------------------------------------------------------------------------
================================================================================
zchunk-0.9.7-2.el7 (FEDORA-EPEL-2018-080e852e16)
Compressed file format that allows easy deltas
--------------------------------------------------------------------------------
Update Information:
New release with contrib script to generate dictionaries
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 10 2018 Jonathan Dieter <[email protected]> - 0.9.7-2
- Add contrib scripts to docs
- Fix test failures for zstd <= 1.3.4
- Add gen_xml_dictionary to libexecdir with zck_ prefix
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]/message/VEEEEOOERCQU6U7M6YPWH6JCWUEMUJ5B/
