The following Fedora EPEL 7 Security updates need testing: Age URL 160 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a unrtf-0.21.9-8.el7 111 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7 94 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 66 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896 myrepos-1.20180726-1.el7 16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bdb21ebc3f drupal7-7.60-2.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9091f95cd5 zchunk-0.9.14-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dea9ade8c1 icecast-2.4.4-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cbfa290941 mkvtoolnix-28.2.0-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be918c58c6 SDL2_image-2.0.4-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-df2d5af2fe mingw-SDL2-2.0.9-1.el7 mingw-SDL2_mixer-2.0.4-1.el7 mingw-SDL2_image-2.0.4-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-32e0cee0bb perl-Mojolicious-7.94-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9051b49e75 suricata-4.0.6-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc29932f12 pdns-4.0.6-2.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9270bbaec pdns-recursor-4.1.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
SDL2_mixer-2.0.4-2.el7 ansible-2.7.2-1.el7 distribution-gpg-keys-1.26-1.el7 globus-common-18.0-2.el7 globus-ftp-client-9.1-2.el7 globus-gass-copy-10.3-2.el7 globus-gram-job-manager-15.1-2.el7 globus-gram-job-manager-scripts-7.1-1.el7 globus-gridftp-server-13.9-1.el7 globus-gsi-cert-utils-10.1-1.el7 globus-gssapi-gsi-14.9-1.el7 mock-core-configs-29.4-1.el7 php-PHPMailer-5.2.27-1.el7 python-asn1crypto-0.24.0-6.el7 python-django-1.11.13-2.el7 python-modestmaps-1.4.7-1.el7 python-neo4j-driver-1.6.2-1.el7 python-neomodel-3.3.0-1.el7 python-paramiko-2.1.1-0.9.el7
Details about builds:
================================================================================ SDL2_mixer-2.0.4-2.el7 (FEDORA-EPEL-2018-30276562ec) Simple DirectMedia Layer - Sample Mixer Library -------------------------------------------------------------------------------- Update Information:
Enable opus support ---- Update to 2.0.4 -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Pete Walter pwalter@fedoraproject.org - 2.0.4-2 - Enable opus support (#1650399) * Tue Nov 6 2018 Pete Walter pwalter@fedoraproject.org - 2.0.4-1 - Update to 2.0.4 * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 2.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering releng@fedoraproject.org - 2.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jan 31 2018 Igor Gnatenko ignatenkobrain@fedoraproject.org - 2.0.2-3 - Switch to %ldconfig_scriptlets -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1650399 - SDL2_mixer 2.0.4 build-requires opusfile-devel https://bugzilla.redhat.com/show_bug.cgi?id=1650399 --------------------------------------------------------------------------------
================================================================================ ansible-2.7.2-1.el7 (FEDORA-EPEL-2018-1431f70fb4) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information:
Update to ansible 2.7.2, a bugfix release. -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 15 2018 Kevin Fenzi kevin@scrye.com - 2.7.2-1 - Update to 2.7.2. --------------------------------------------------------------------------------
================================================================================ distribution-gpg-keys-1.26-1.el7 (FEDORA-EPEL-2018-b5a73fcca9) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information:
add RHEL8 release gpg key add virtual module to rhelbeta-8 config ---- mock- core-configs: - add rhelbeta-8-* configs - move EOLed configs to /etc/mock/eol directory - Add source repos to all fedora configs (sfowler@redhat.com) - add epel-7-ppc64.cfg distribution-gpg-keys: - update copr keys - add RPM-GPG-KEY- redhat8-beta key - add RPM-GPG-KEY-redhat-auxiliary2 ---- * updated Copr keys * added Microsoft key -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Miroslav Such�� msuchy@redhat.com 1.26-1 - add RPM-GPG-KEY-redhat8-release * Thu Nov 15 2018 Miroslav Such�� msuchy@redhat.com 1.25-1 - update copr keys - add RPM-GPG-KEY-redhat8-beta key - add RPM-GPG-KEY-redhat-auxiliary2 * Thu Nov 8 2018 Miroslav Such�� msuchy@redhat.com 1.24-1 - update Copr keys - add Microsoft key -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1637059 - epel-7-ppc64 config is missing despite ppc64 being a supported EL7 target https://bugzilla.redhat.com/show_bug.cgi?id=1637059 [ 2 ] Bug #1615178 - distribution-gpg-keys-1.22-1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1615178 --------------------------------------------------------------------------------
================================================================================ globus-common-18.0-2.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - Common Library -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 18.0-2 - Bump GCT release version to 6.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-ftp-client-9.1-2.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - GridFTP Client Library -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 9.1-2 - Bump GCT release version to 6.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-gass-copy-10.3-2.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - Globus Gass Copy -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 10.3-2 - Bump GCT release version to 6.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-gram-job-manager-15.1-2.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - GRAM Jobmanager -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 15.1-2 - Bump GCT release version to 6.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-gram-job-manager-scripts-7.1-1.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - GRAM Job ManagerScripts -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 7.1-1 - Architecture independent package should not depend on libtool - Drop BR on gcc -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-gridftp-server-13.9-1.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 13.9-1 - Fix data_node restrict path - Bump GCT release version to 6.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-gsi-cert-utils-10.1-1.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - Globus GSI Cert Utils Library -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 10.1-1 - Fix broken subject in grid-cert-request - Bump GCT release version to 6.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ globus-gssapi-gsi-14.9-1.el7 (FEDORA-EPEL-2018-4927d5be91) Grid Community Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information:
globus-common-18.0-2, globus-ftp-client-9.1-2, globus-gass-copy-10.3-2, globus- gram-job-manager-15.1-2 * Bump GCT release version to 6.2 globus-gram-job- manager-scripts-7.1-1 * Architecture independent package should not depend on libtool * Drop BR on gcc globus-gridftp-server-13.9-1 * Fix data_node restrict path * Bump GCT release version to 6.2 globus-gsi-cert-utils-10.1-1 * Fix broken subject in grid-cert-request * Bump GCT release version to 6.2 globus- gssapi-gsi-14.9-1 * Allow TLS 1.0/1.1 * Fix leaks * Drop patch globus-gssapi- gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Mattias Ellert mattias.ellert@physics.uu.se - 14.9-1 - Allow TLS 1.0/1.1 - Fix leaks - Drop patch globus-gssapi-gsi-allow-tls-1.0-1.1.patch accepted upstream -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640939 - grid-cert-request creates signing request with broken subject https://bugzilla.redhat.com/show_bug.cgi?id=1640939 --------------------------------------------------------------------------------
================================================================================ mock-core-configs-29.4-1.el7 (FEDORA-EPEL-2018-b5a73fcca9) Mock core config files basic chroots -------------------------------------------------------------------------------- Update Information:
add RHEL8 release gpg key add virtual module to rhelbeta-8 config ---- mock- core-configs: - add rhelbeta-8-* configs - move EOLed configs to /etc/mock/eol directory - Add source repos to all fedora configs (sfowler@redhat.com) - add epel-7-ppc64.cfg distribution-gpg-keys: - update copr keys - add RPM-GPG-KEY- redhat8-beta key - add RPM-GPG-KEY-redhat-auxiliary2 ---- * updated Copr keys * added Microsoft key -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Miroslav Such�� msuchy@redhat.com 29.4-1 - use correct gpg keys for rhelbeta-8 - add virtual platform module * Thu Nov 15 2018 Miroslav Such�� msuchy@redhat.com 29.3-1 - add rhelbeta-8-* configs - move EOLed configs to /etc/mock/eol directory - Add source repos to all fedora configs (sfowler@redhat.com) - add epel-7-ppc64.cfg -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1637059 - epel-7-ppc64 config is missing despite ppc64 being a supported EL7 target https://bugzilla.redhat.com/show_bug.cgi?id=1637059 [ 2 ] Bug #1615178 - distribution-gpg-keys-1.22-1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1615178 --------------------------------------------------------------------------------
================================================================================ php-PHPMailer-5.2.27-1.el7 (FEDORA-EPEL-2018-a09ace87bb) PHP email transport class with a lot of features -------------------------------------------------------------------------------- Update Information:
**Version 5.2.27** * SECURITY Fix potential object injection vulnerability. **CVE-2018-19296**. Reported by Sehun Oh of cyberone.kr. Note that the 5.2 branch is deprecated and will not receive security updates after 31st December 2018. -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Remi Collet remi@remirepo.net - 5.2.27-1 - update to 5.2.27 --------------------------------------------------------------------------------
================================================================================ python-asn1crypto-0.24.0-6.el7 (FEDORA-EPEL-2018-cf0fb9e84b) Fast Python ASN.1 parser and serializer -------------------------------------------------------------------------------- Update Information:
Fast ASN.1 parser and serializer with definitions for private keys, public keys, certificates, CRL, OCSP, CMS, PKCS#3, PKCS#7, PKCS#8, PKCS#12, PKCS#5, X.509 and TSP. --------------------------------------------------------------------------------
================================================================================ python-django-1.11.13-2.el7 (FEDORA-EPEL-2018-b4d4e0a3eb) A high-level Python Web framework -------------------------------------------------------------------------------- Update Information:
rebase EPEL7 package to Django-1.11.x -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 15 2018 Matthias Runge mrunge@redhat.com - 1.11.13-2 - rebase EPEL7 package to Django-1.11.x * Mon May 21 2018 Miro Hron��ok mhroncok@redhat.com - 1.11.13-2 - Make python2-django require python-django-bash-completion (as intended) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432365 - Please update python-django in EPEL https://bugzilla.redhat.com/show_bug.cgi?id=1432365 [ 2 ] Bug #1611050 - CVE-2018-14574 python-django: django: Open redirect possibility in CommonMiddleware [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1611050 [ 3 ] Bug #1552179 - CVE-2018-7536 CVE-2018-7537 python-django: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552179 [ 4 ] Bug #1488634 - CVE-2017-7233 python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1488634 [ 5 ] Bug #1357704 - CVE-2016-6186 python-django: django: XSS in admin's add/change related popup [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1357704 --------------------------------------------------------------------------------
================================================================================ python-modestmaps-1.4.7-1.el7 (FEDORA-EPEL-2018-b269b0f466) Modest Maps python port -------------------------------------------------------------------------------- Update Information:
Update to 1.4.7 and add a python3 package to Fedora -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Scott K Logan logans@cottsay.net - 1.4.7-1 - Update to 1.4.7 - Add python3 package - Switch to Github upstream --------------------------------------------------------------------------------
================================================================================ python-neo4j-driver-1.6.2-1.el7 (FEDORA-EPEL-2018-675e9345ea) The official Neo4j Python driver -------------------------------------------------------------------------------- Update Information:
Update to v1.6.2 -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 mprahl mprahl@redhat.com - 1.6.2-1 - new version * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 1.6.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1.6.0-3 - Rebuilt for Python 3.7 --------------------------------------------------------------------------------
================================================================================ python-neomodel-3.3.0-1.el7 (FEDORA-EPEL-2018-72214376e3) A Python OGM for Neo4j -------------------------------------------------------------------------------- Update Information:
Update to v3.3.0 -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 mprahl mprahl@redhat.com - 3.3.0-1 - new version * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 3.2.8-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Jul 2 2018 Miro Hron��ok mhroncok@redhat.com - 3.2.8-6 - Rebuilt for Python 3.7 --------------------------------------------------------------------------------
================================================================================ python-paramiko-2.1.1-0.9.el7 (FEDORA-EPEL-2018-0e73364530) SSH2 protocol library for python -------------------------------------------------------------------------------- Update Information:
Update limited arch + python3 package to RHEL 7.6 version -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 16 2018 Orion Poplawski orion@nwra.com - 2.1.1-0.9 - Update limited-arch support package for EPEL (bug #1637265) * Thu Oct 18 2018 Jake Hunsaker jhunsake@redhat.com - 2.1.1-9 - Fix a security flaw (CVE-2018-1000805) in Paramiko's server mode (does not effect client mode). Backported from 2.1.6 Resolves rhbz#1637366 * Fri Jul 20 2018 Jake Hunsaker jhunsake@redhat.com - 2.1.1-5 - Rebuild for move from Extras to Base for 7.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1637265 - CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1637265 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org