The following Fedora EPEL 7 Security updates need testing:
Age URL
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-86538d58b1
strongswan-5.6.3-1.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-656b24ec40
chromium-67.0.3396.79-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e70dca1af5
thunderbird-enigmail-2.0.7-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-871d88af0e
nodejs-6.14.3-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9d8de55465
drupal7-backup_migrate-3.5-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
godot-3.0.4-1.el7
libgit2-0.26.4-1.el7
libglvnd-1.0.1-0.1.git5baa1e5.el7
mozilla-https-everywhere-2018.6.21-1.el7
nova-agent-2.1.14-1.el7
python-cvss-1.8-1.el7
python-neomodel-3.2.8-5.el7
yubikey-piv-manager-1.4.2-5.el7
Details about builds:
================================================================================
godot-3.0.4-1.el7 (FEDORA-EPEL-2018-49c7c88f85)
Multi-platform 2D and 3D game engine with a feature-rich editor
--------------------------------------------------------------------------------
Update Information:
### Maintenance release: Godot 3.0.3 This update brings the latest upstream
release of Godot Engine, with over 350 patches of bug fixes and improvements
applied on top of Godot 3.0.2. This release is compatible with previous Godot
3.0.x versions and should load existing projects without issue. *References:*
- Release announcement:
https://godotengine.org/article/maintenance-release-
godot-3-0-3 - Changelog:
https://downloads.tuxfamily.org/godotengine/3.0.3/Godot
_v3.0.3-stable_changelog.txt
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 R��mi Verschelde <akien(a)fedoraproject.org> - 3.0.4-1
- Version 3.0.4-stable
* Wed Jun 20 2018 R��mi Verschelde <akien(a)fedoraproject.org> - 3.0.3-1
- Version 3.0.3-stable
- Enable aarch64 support
- Disable FT_LOAD_COLOR usage, not supported in FreeType 2.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591994 - godot-3.0.3-stable is available
https://bugzilla.redhat.com/show_bug.cgi?id=1591994
[ 2 ] Bug #1594529 - godot-3.0.4-stable is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594529
--------------------------------------------------------------------------------
================================================================================
libgit2-0.26.4-1.el7 (FEDORA-EPEL-2018-7926246d9d)
C implementation of the Git core methods as a library with a solid API
--------------------------------------------------------------------------------
Update Information:
Update to 0.26.4 (CVE-2018-11235)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Pete Walter <pwalter(a)fedoraproject.org> - 0.26.4-1
- Update to 0.26.4 (CVE-2018-11235)
--------------------------------------------------------------------------------
================================================================================
libglvnd-1.0.1-0.1.git5baa1e5.el7 (FEDORA-EPEL-2018-3a6e322da7)
The GL Vendor-Neutral Dispatch library
--------------------------------------------------------------------------------
Update Information:
Update private version of libglvnd to match current closed source drivers.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 2 2018 Simone Caronni <negativo17(a)gmail.com> -
1:1.0.1-0.1.20180327git5baa1e5
- Merge updates from master.
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2018.6.21-1.el7 (FEDORA-EPEL-2018-53ece067d8)
HTTPS enforcement extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
Wow, it's been a while, huh? I really thought it would update from the EFF
website. Apparently not! I'd've had the previous one out, but there was a bug
when talking to websites with a hostname of "." that caused an infinite loop.
Anyway, lots of ruleset updates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Russell Golden <niveusluna(a)niveusluna.org> - 2018.6.21-1
- Fix: websites with a hostname of "." cause an endless loop
- Batched ruleset updates
* Sun Jun 17 2018 Russell Golden <niveusluna(a)niveusluna.org> - 2018.6.13-1
- Ruleset updates
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2018.1.29-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1550296 - mozilla-https-everywhere-2018.6.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1550296
[ 2 ] Bug #1594042 - mozilla-https-everywhere-2018.6.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594042
--------------------------------------------------------------------------------
================================================================================
nova-agent-2.1.14-1.el7 (FEDORA-EPEL-2018-5ca4b69d9c)
Agent for setting up clean servers on Xen
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Dave Kludt <david.kludt(a)rackspace.com> - 2.1.14-1
- Latest upstream
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.1.12-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561811 - nova-agent-2.1.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1561811
--------------------------------------------------------------------------------
================================================================================
python-cvss-1.8-1.el7 (FEDORA-EPEL-2018-8ac96541d8)
CVSS2/3 library with interactive calculator
--------------------------------------------------------------------------------
Update Information:
New release 1.8 (RHBZ #1594561) ---- - New release v1.7 - Fixes regression
introduced in v1.5. Interactive calculator failed for CVSS3 as it did not
provide mandatory prefix. ---- - New release v1.6. - Fix to ensure cvss2 score
is never negative.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 26 2018 Viliam Krizan <vkrizan(a)redhat.com> - 1.8-1
- New release 1.8 (RHBZ #1594561)
- Convenience improvements for testing and interactive calculator
- Improved handling of empty fields
* Thu Jan 12 2017 pjp <pjp(a)fedoraproject.org> - 1.7-1
- New release 1.7 (RHBZ #1412158)
* Mon Dec 19 2016 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6-2
- Rebuild for Python 3.6
* Fri Dec 9 2016 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 1.6-1
- Update to 1.6 (RHBZ #1402174)
* Fri Nov 4 2016 Igor Gnatenko <ignatenko(a)redhat.com> - 1.5-1
- Update to 1.5
* Thu Sep 8 2016 Igor Gnatenko <ignatenko(a)redhat.com> - 1.4-2
- Fixes in packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594561 - python-cvss-v1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594561
[ 2 ] Bug #1402174 - python-cvss-v1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1402174
[ 3 ] Bug #1412158 - python-cvss-v1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1412158
--------------------------------------------------------------------------------
================================================================================
python-neomodel-3.2.8-5.el7 (FEDORA-EPEL-2018-36684f2efc)
A Python OGM for Neo4j
--------------------------------------------------------------------------------
Update Information:
Unpin the version of python-neo4j-driver
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 19 2018 mprahl <mprahl(a)redhat.com> - 3.2.8-5
- unpin the python-neo4j-driver version
* Tue Jun 19 2018 mprahl <mprahl(a)redhat.com> - 3.2.8-4
- add upstream patch to support python neo4j-driver 1.6.x
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.2.8-3
- Rebuilt for Python 3.7
* Thu Jun 14 2018 mprahl <mprahl(a)redhat.com> - 3.2.8-2
- pin the python-neo4j-driver version
--------------------------------------------------------------------------------
================================================================================
yubikey-piv-manager-1.4.2-5.el7 (FEDORA-EPEL-2018-78f743e49d)
Tool for configuring your PIV-enabled YubiKey
--------------------------------------------------------------------------------
Update Information:
Install desktop file
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Orion Poplawski <orion(a)nwra.com> - 1.4.2-5
- Install desktop file
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.4.2-4
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------