The following Fedora EPEL 7 Security updates need testing: Age URL 473 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 214 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 212 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-8a7207a341 libidn2-2.3.0-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-aff200699c mingw-libidn2-2.3.0-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b1761c2898 imapfilter-2.6.15-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-1a5ac407f8 jhead-3.04-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d6b0a398c2 clamav-0.101.5-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-06a2efa1e8 tnef-1.4.18-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-9007659871 chromium-78.0.3904.108-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-72ead04703 proftpd-1.3.5e-8.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

Lmod-8.2.7-1.el7 cacti-1.2.7-1.el7 cacti-spine-1.2.7-1.el7 engauge-digitizer-12.1-1.el7 python3-requests-2.14.2-2.el7

Details about builds:

================================================================================ Lmod-8.2.7-1.el7 (FEDORA-EPEL-2019-a9d9438057) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information:

- Update to 8.2.7 (bz#1777262) - Make 00-modulepath.sh return 0 - Make sure /etc/profile.d/modules.sh has $MODULEPATH (#1461656) -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 30 2019 Orion Poplawski orion@nwra.com - 8.2.7-1 - Update to 8.2.7 (bz#1777262) - Make 00-modulepath.sh return 0 - Make sure /etc/profile.d/modules.sh has $MODULEPATH (#1461656) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1777262 - Lmod upgrade to version 8.2 https://bugzilla.redhat.com/show_bug.cgi?id=1777262 --------------------------------------------------------------------------------

================================================================================ cacti-1.2.7-1.el7 (FEDORA-EPEL-2019-6e566163d8) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information:

- Update to 1.2.7 Release notes: https://www.cacti.net/release_notes.php?version=1.2.7 -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 30 2019 Morten Stevens mstevens@fedoraproject.org - 1.2.7-1 - Update to 1.2.7 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1756761 - cacti-1.2.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1756761 --------------------------------------------------------------------------------

================================================================================ cacti-spine-1.2.7-1.el7 (FEDORA-EPEL-2019-6e566163d8) Threaded poller for Cacti written in C -------------------------------------------------------------------------------- Update Information:

- Update to 1.2.7 Release notes: https://www.cacti.net/release_notes.php?version=1.2.7 -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 30 2019 Morten Stevens mstevens@fedoraproject.org - 1.2.7-1 - Update to 1.2.7 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1756761 - cacti-1.2.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1756761 --------------------------------------------------------------------------------

================================================================================ engauge-digitizer-12.1-1.el7 (FEDORA-EPEL-2019-367a23a0cb) Convert graphs or map files into numbers -------------------------------------------------------------------------------- Update Information:

- Release 12.1 -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 30 2019 Antonio Trande sagitter@fedoraproject.org - 1:12.1-1 - Release 12.1 * Sat Aug 24 2019 Antonio Trande sagitter@fedoraproject.org - 1:12-2 - SPEC file enhancements * Fri Aug 23 2019 Antonio Trande sagitter@fedoraproject.org - 1:12-1 - Release 12.0 * Wed Jul 24 2019 Fedora Release Engineering releng@fedoraproject.org - 1:11.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ python3-requests-2.14.2-2.el7 (FEDORA-EPEL-2019-cd462a69ad) HTTP library, written in Python, for human beings -------------------------------------------------------------------------------- Update Information:

Add upstream patch for CVE-2018-18074 -------------------------------------------------------------------------------- ChangeLog:

* Fri Nov 29 2019 Orion Poplawski orion@nwra.com - 2.14.2-2 - Add upstream patch for CVE-2018-18074 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1778144 - CVE-2018-18074 python3-requests: python-requests: Redirect from HTTPS to HTTP does not remove Authorization header [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1778144 --------------------------------------------------------------------------------