The following Fedora EPEL 7 Security updates need testing:
Age URL
570
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
311
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80
python-gnupg-0.4.4-1.el7
309
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b
bubblewrap-0.3.3-2.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6
python-waitress-1.4.3-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ea579d7782
proftpd-1.3.5e-9.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b57b954fde
openfortivpn-1.12.0-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1f5dbc1cd7
cacti-1.2.10-1.el7 cacti-spine-1.2.10-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-471d8a7abd
sympa-6.2.54-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-b3684de763
mbedtls-2.7.14-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4fdca9429c
seamonkey-2.53.1-2.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fbd804208a
monit-5.26.0-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
annobin-9.12-1.el7
batctl-2020.0-1.el7
fedpkg-1.38-2.el7
xxhash-0.7.3-1.el7
Details about builds:
================================================================================
annobin-9.12-1.el7 (FEDORA-EPEL-2020-2bde7f71f3)
Annotate and examine compiled binary files
--------------------------------------------------------------------------------
Update Information:
Latest version of annobin for use with rpm checkers
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 4 2020 Nick Clifton <nickc(a)redhat.com> - 9.12-1
- Improve builtby tool.
- Stop annocheck complaining about missing notes when the binary is not compiled by either
gcc or clang.
- Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.
(#1809656)
- Fix infinite loop hangup in annocheck.
- Disable debuginfod support by default.
- Improve parsing of .comment section.
- Fix clang plugin to use hidden symbols.
- Add ability to build clang plugin (disabled by default).
- Annocheck: Fix error printing out the version number.
- Annobin: Add checks of the exact location of the examined switches.
- Annobin: Note when stack clash notes are generated.
- Annocheck: Handle multiple builder IDs in the .comment section.
- Add configure option to suppress building annocheck.
- Fix debuginfod test.
- Correct the build requirement for building with debuginfod support.
- Add debuginfod support.
- Add clang plugin (experimental).
- Have annocheck ignore notes with an end address of 0.
- Improve checking of gcc versions.
* Fri Nov 15 2019 Nick Clifton <nickc(a)redhat.com> - 8.90-1
- Do not skip positive results.
* Mon Nov 4 2019 Nick Clifton <nickc(a)redhat.com> - 8.89-1
- Generate a WARN result for code compiled with instrumentation enabled. (#1753918)
- Replace address checks with dladdr1.
- Use libabigail like checking to ensure variable address consistency.
- Skip generation of global notes for hot/cold sections.
- Generate FAIL results if -Wall or -Wformat-security are missing.
- If notes cannot be found in the executable look for them in the debuginfo file, if
available.
- Generate a FAIL if notes are missing from the executable/debuginfo file.
- Record and report the setting of the AArcht64 specific -mbranch-protection option.
* Mon Sep 23 2019 Nick Clifton <nickc(a)redhat.com> - 8.81-1
- Improve detection of GO binaries.
- Add gcc version information to annobin notes.
- Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO
compilations.
* Tue Aug 6 2019 Nick Clifton <nickc(a)redhat.com> - 8.78-1
- Fix a memory allocation error in the annobin plugin. (#1737306)
* Mon Jun 24 2019 Nick Clifton <nickc(a)redhat.com> - 8.77-1
- Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE
options. (#1703500)
* Tue Jun 18 2019 Nick Clifton <nickc(a)redhat.com> - 8.76-1
- Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.
(#1703499)
- Do not report problems with -fstack-protection if the binary was not built by gcc or
clang. (#1703788)
- Add tests of clang command line options recorded in the DW_AT_producer attribute.
* Fri Apr 26 2019 Nick Clifton <nickc(a)redhat.com> - 8.74-1
- Add tests of clang command line options recorded in the DW_AT_producer attribute.
--------------------------------------------------------------------------------
================================================================================
batctl-2020.0-1.el7 (FEDORA-EPEL-2020-ce29a9c00b)
B.A.T.M.A.N. advanced control and management tool
--------------------------------------------------------------------------------
Update Information:
Update to 2020.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.0-1
- update to 2020.0
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2019.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.38-2.el7 (FEDORA-EPEL-2020-6c0e3ca209)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Detailed release notes:
[
here](https://docs.pagure.org/fedpkg/releases/1.38.html) A number of fixes and
features from the list were already released as patches.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.38-2
- Patch: Move rpm dependency for test environment only
* Mon Mar 2 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.38-1
- Removes check of bodhi-client version - rhbz#1796972 (onosek)
- Clone config customization for namespaces (onosek)
- Repair Jenkins tests (onosek)
- Update bash completion with side tag commands (lsedlar)
- add --fail-fast to bash-completion (cheese)
- Improve coding style by sorting imports (onosek)
- Repair tests for previous commits (onosek)
- Create fork of the active repository - #276 (onosek)
- request-tests-repo: add branch into ticket body - #359 (onosek)
- verrel command on master asks Koji first - #357 (onosek)
- Check nvr before build - #356 (onosek)
- Change dist tag for epel8-playground (onosek)
- Add test for retiring on archived release (lsedlar)
- Mock requests in all tests (lsedlar)
- Line up descriptions for better code readability (onosek)
- Clarify request-branch 'service levels' argument - #283 (onosek)
- Resolve Jenkins unittests failing (onosek)
- utils: fix whitespace in Pagure error message (kdreyer)
- New options for bodhi template - 459 (onosek)
- Block retiring in released branches - #337 (onosek)
- Use package.cfg for epel8+ branches (mboddu)
- Add epel*-playground into rpmdefines (smooge)
- linux_distribution import moved (onosek)
- Unittests for epel*-playground branch requests (onosek)
- Allow epel*-playground requests for epel8 and newer (onosek)
- Support for epel*-playground branch requests - #334 (mboddu)
- git-changelog: Fix running on Python 3 (onosek)
- Avoid warning about invalid escape with python3.8 (zbyszek)
- Tests for update stable karma - #321 (cqi)
- Bump check for bodhi client - 330 (lsedlar)
- Ignore files in a cloned repository - patterns update (onosek)
* Mon Feb 3 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.37-13
- Patch: Removes check of bodhi-client version
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.37-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Nov 8 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.37-11
- Drop unneeded build dependency on python3-unittest2
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.37-10
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Wed Aug 21 2019 Ond��ej Nosek <onosek(a)redhat.com> - 1.37-9
- Backport: display_name added to bodhi.template
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.37-8
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
xxhash-0.7.3-1.el7 (FEDORA-EPEL-2020-a5ebf9dbc2)
Extremely fast hash algorithm
--------------------------------------------------------------------------------
Update Information:
xxhash 0.7.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.7.3-1
- Update to version 0.7.3
- Drop patch xxhash-gcc10-altivec.patch (accepted upstream)
* Fri Feb 7 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.7.2-3
- Fix ppc64le build with gcc 10
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1810867 - xxhash-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1810867
--------------------------------------------------------------------------------