The following Fedora EPEL 7 Security updates need testing:
Age URL
252 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
148 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155
nagios-4.0.8-1.el7
44 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060
mediawiki123-1.23.11-1.el7
20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d
php-ZendFramework-1.12.16-1.el7
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19
perl-HTML-Scrubber-0.15-1.el7
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b
qemu-2.0.0-1.el7.6
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f5273e10c1
rabbitmq-server-3.3.5-12.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f75cdd1774
metis-5.1.0-7.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4b33ee7c84
wildmagic5-5.13-12.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6eaf22c8d
MUMPS-5.0.1-4.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e1379fc854
owncloud-8.0.9-1.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-693544258f
telegram-cli-1.3.1-7.20150730git2052f4.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7b2b7d02df
quassel-0.11.1-1.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8a26d71e56
pdns-3.4.7-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-da5a65c143
zarafa-7.1.14-1.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-c399ccf199
sundials-2.6.2-11.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-914de61c66
potrace-1.13-2.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-987c5b1ead
monitorix-3.8.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
composer-1.0.0-0.15.alpha11.el7
fedmsg-0.16.2-5.el7
keybinder-0.3.1-1.el7
monitorix-3.8.1-1.el7
python-dirq-1.7-1.el7
uget-2.0.3-1.el7
yubikey-personalization-gui-3.1.23-2.el7
Details about builds:
================================================================================
composer-1.0.0-0.15.alpha11.el7 (FEDORA-EPEL-2015-589034bd4d)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
Upstream version 1.0.0alpha11
--------------------------------------------------------------------------------
================================================================================
fedmsg-0.16.2-5.el7 (FEDORA-EPEL-2015-fe204813fc)
Tools for Fedora Infrastructure real-time messaging
--------------------------------------------------------------------------------
Update Information:
Explicit python2 subpackages.
--------------------------------------------------------------------------------
================================================================================
keybinder-0.3.1-1.el7 (FEDORA-EPEL-2015-a36503f5bc)
A library for registering global keyboard shortcuts
--------------------------------------------------------------------------------
Update Information:
keybinder-0.3.1-1.el7 - update to 0.3.1 - change of upstream URL
--------------------------------------------------------------------------------
================================================================================
monitorix-3.8.1-1.el7 (FEDORA-EPEL-2015-987c5b1ead)
A free, open source, lightweight system monitoring tool
--------------------------------------------------------------------------------
Update Information:
This is a maintenance release that mainly fixes a Document Object Model
(DOM)-based cross-site scripting (XSS) vulnerability in the monitorix.cgi file.
Such vulnerability is by injection a JS code in the when parameter of the URL
shown after generating the graphs. Additionally, a potential denial of service
(DoS) issue was discovered in the same when parameter of the URL which could
lead in the creation of an enormous amount of .png files in the imgs directory
of the server.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1281979 - monitorix-3.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1281979
--------------------------------------------------------------------------------
================================================================================
python-dirq-1.7-1.el7 (FEDORA-EPEL-2015-e4bcf7fec2)
Directory based queue
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1281769 - python-dirq-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1281769
--------------------------------------------------------------------------------
================================================================================
uget-2.0.3-1.el7 (FEDORA-EPEL-2015-17cb1bd569)
Download manager using GTK+ and libcurl
--------------------------------------------------------------------------------
Update Information:
uget-2.0.3-1.el7 - 2.0.3 ---- rebuild for EPEL 7
--------------------------------------------------------------------------------
================================================================================
yubikey-personalization-gui-3.1.23-2.el7 (FEDORA-EPEL-2015-60de34c4f2)
GUI for Yubikey personalization
--------------------------------------------------------------------------------
Update Information:
yubikey-personalization-gui-3.1.23-2.el7 - Update to 3.1.23
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
