The following Fedora EPEL 7 Security updates need testing:
Age URL
294 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8311ec8a2
tor-0.3.5.8-1.el7
69 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d2c1368294
cinnamon-3.6.7-5.el7
62 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-50a6a1ddfd
afflib-3.7.18-2.el7
35 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b909a6e178
sleuthkit-4.6.6-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9cab93353c
drupal7-ds-2.16-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-2c1ec539fd
drupal7-uuid-1.2-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f614c9a4bc
drupal7-xmlsitemap-2.6-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-8278894e4d
drupal7-context-3.10-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-de5e3216ff
drupal7-path_breadcrumbs-3.4-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-748b40598c
drupal7-module_filter-2.2-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-53f9189a5e
drupal7-views-3.23-1.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-043371cfab
rust-1.35.0-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-fc63c75ab1
hostapd-2.8-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
python-django-1.11.21-1.el7
snapd-2.39.1-1.el7
Details about builds:
================================================================================
python-django-1.11.21-1.el7 (FEDORA-EPEL-2019-58a16a4811)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
fix for CVE-2019-12308 (rhbz#1716764)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 4 2019 Matthias Runge <[email protected]> - 1.11.21-1
- fix for CVE-2019-12308 (rhbz#1716764)
* Fri Mar 15 2019 Matthias Runge <[email protected]> - 1.11.20-2
- enable python3 subpackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1716764 - CVE-2019-12308 python-django: django: missing URL
validation by AdminURLFieldWidget leads to generation of clickable unsafe
JavaScript link causing cross site scripting [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1716764
--------------------------------------------------------------------------------
================================================================================
snapd-2.39.1-1.el7 (FEDORA-EPEL-2019-91a080fd55)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Update to snapd-2.39.1 to fix SELinux issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 4 2019 Neal Gompa <[email protected]> - 2.39.1-1
- Release 2.39.1 to Fedora (RH#1715505)
- Backport SELinux policy fixes for systemd unit mount namespacing (RH#1708991)
* Wed May 29 2019 Michael Vogt <[email protected]>
- New upstream release 2.39.1
- spread: enable Fedora 30
- cmd/snap-confine, data/selinux: cherry pick Fedora 30 fixes
- tests/unit/spread-shellcheck: temporary workaround for SC2251
- packaging: build empty package on powerpc
- interfaces: special-case "snapd" in sanitizeSlotReservedForOS*
helper
- cmd/snap: mangle descriptions that have indent > terminal width
- cmd/snap-confine: unshare per-user mount ns once
- tests: avoid adding spaces to the base snaps names
- systemd: workaround systemctl show quirks on older systemd
versions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1708991 - Failed to set up mount namespacing: Permission denied
https://bugzilla.redhat.com/show_bug.cgi?id=1708991
[ 2 ] Bug #1715505 - snapd-2.39.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1715505
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
