The following Fedora EPEL 7 Security updates need testing:
Age URL
295 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
87 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
57 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f82c6fc04a
p7zip-15.09-4.el7
16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-67166d0519
shellinabox-2.19-1.el7
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-0272adfe4b
gwenhywfar-4.13.1-2.el7
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-31d852eeac
php-horde-Horde-Core-2.22.4-1.el7 php-horde-Horde-Perms-2.1.6-1.el7
php-horde-Horde-Service-Weather-2.3.1-1.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-3a5146ccf7
nodejs-handlebars-4.0.5-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-fe8f5408df
moodle-3.0.1-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e943f1deb9
mediawiki123-1.23.13-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-5538691958
roundcubemail-1.1.4-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
mingw-gcc-4.9.3-1.el7
nsd-4.1.7-3.el7
opendkim-2.10.3-3.el7
php-doctrine-cache-1.5.4-1.el7
php-markdown-1.6.0-1.el7
php-pear-Net-Sieve-1.3.4-4.el7
php-solarium-3.5.1-1.el7
php-udan11-sql-parser-3.0.8-1.el7
python-configparser-3.5.0b2-1.el7
python-wand-0.4.2-1.el7
python-wikitcms-1.13.3-1.el7
pyzor-0.5.0-10.el7
relval-1.11.7-1.el7
roundcubemail-1.1.4-2.el7
sscep-0.6.1-1.20151228git68e354a.el7
texlive-extension-2012-4.el7
tomcat-native-1.1.34-1.el7
youtube-dl-2015.12.05-1.el7
Details about builds:
================================================================================
mingw-gcc-4.9.3-1.el7 (FEDORA-EPEL-2015-ff50ac1bdf)
MinGW Windows cross-compiler (GCC) for C
--------------------------------------------------------------------------------
Update Information:
Update to gcc 4.9.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292842 - Segmentation fault - non-inlined constructor with
argument of template type
https://bugzilla.redhat.com/show_bug.cgi?id=1292842
--------------------------------------------------------------------------------
================================================================================
nsd-4.1.7-3.el7 (FEDORA-EPEL-2015-fab62f20aa)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Improved integration for systemd, use PrivateTmp ---- This is the first
release of NSD4.X in Fedora/EL. This version is known to not work with the
current SELinux policy (see https://bugzilla.redhat.com/show_bug.cgi?id=1293140)
---- This is the first release of NSD4.X in Fedora/EL. This version is known to
not work with the current SELinux policy (see
https://bugzilla.redhat.com/show_bug.cgi?id=1293140)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1123911 - please add epel7 branch
https://bugzilla.redhat.com/show_bug.cgi?id=1123911
[ 2 ] Bug #1048796 - nsd-4.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1048796
--------------------------------------------------------------------------------
================================================================================
opendkim-2.10.3-3.el7 (FEDORA-EPEL-2015-dcb9f0f5db)
A DomainKeys Identified Mail (DKIM) milter to sign and/or verify mail
--------------------------------------------------------------------------------
Update Information:
Added OpenLDAP support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293279 - opendkim miss LDAP support
https://bugzilla.redhat.com/show_bug.cgi?id=1293279
--------------------------------------------------------------------------------
================================================================================
php-doctrine-cache-1.5.4-1.el7 (FEDORA-EPEL-2015-8789da28e3)
Doctrine Cache
--------------------------------------------------------------------------------
Update Information:
### v1.5.4 * 127: Path length of 259 is also not possible due to php bug ###
v1.5.3 * 113: Perform various tests on windows and this correction solved the
problem * 121: FileCache.php bug at line 140 in protected function getFilename *
122: Hotfix - #113 testing/correcting hashing for windows file path length
limitations * 124: Filenames are too long for windows * 125: Fix FileCache on
Windows ### v1.5.2 * 105: Fix fetch multiple with false * 107: fix file cache
naming under windows surpassing MAX_PATH * 108: Avoid MongoCursorException with
MongoCache ### v1.5.1 * 104: fetchMultiple problems with null and falsey
values ### v1.5.0 * 87: [enhancement] Predis cache improvement * 91: No need
to save the default namespace version * 92: travis: use container based build,
PHP 7 added * 94: fix file naming based on cache key * 97: unify bool(ean) and
add multi get support for wincache * 98: add travis cache and fix apcu
installation * 99: Update LICENSE * 100: composer: use PSR-4 autoload * 101:
Additional tests added ### v1.4.4 * 104: fetchMultiple problems with null and
falsey values ### v1.4.3 * 90: Fix CacheProvider::fetchMultiple if keys array
is empty * 91: No need to save the default namespace version * 95: Fix delete()
and flushAll()
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1276019 - php-doctrine-cache-v1.5.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1276019
--------------------------------------------------------------------------------
================================================================================
php-markdown-1.6.0-1.el7 (FEDORA-EPEL-2015-7991f2b3c6)
Markdown implementation in PHP
--------------------------------------------------------------------------------
Update Information:
**PHP Markdown Lib 1.6.0** (23 Dec 2015) * For fenced code blocks in
Markdown Extra, can now set a class name for the code block's language before
the special attribute block. Previously, this class name was only allowed in the
absence of the special attribute block. * Added a
`code_block_content_func` configuration variable which takes a function that
will convert the content of the code block to HTML. This is most useful for
syntax highlighting. For fenced code blocks in Markdown Extra, the function has
access to the language class name (the one outside of the special attribute
block). Credits to Mario Konrad for providing the implementation. * The
curled arrow character for the backlink in footnotes is now followed by a
Unicode variant selector to prevent it from being displayed in emoji form on
iOS. Note that in older browsers the variant selector is often
interpreted as a separate character, making it visible after the arrow. So there
is now a also a fn_backlink_html` configuration variable that can be used to set
the link text to something else. Credits to Dana for providing the
implementation. * Fixed an issue in MarkdownExtra where long header lines
followed by a special attribute block would hit the backtrack limit an cause an
empty string to be returned.
--------------------------------------------------------------------------------
================================================================================
php-pear-Net-Sieve-1.3.4-4.el7 (FEDORA-EPEL-2015-cf039cefc4)
Handles talking to a sieve server
--------------------------------------------------------------------------------
Update Information:
Add patches from https://github.com/roundcube/Net_Sieve which fix PHP 7
compatibility and avoid to maintain both original and forked library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253940 - array_merge(): Argument #1 is not an array in
/usr/share/pear/Net/Sieve.php on line 312
https://bugzilla.redhat.com/show_bug.cgi?id=1253940
--------------------------------------------------------------------------------
================================================================================
php-solarium-3.5.1-1.el7 (FEDORA-EPEL-2015-6814e37352)
Solarium PHP Solr client library
--------------------------------------------------------------------------------
Update Information:
**Version 3.5.1** - 2015-12-19 * Fix BC break in 3.5.0 release **Version
3.5.0** - 2015-12-09 - improvement: lots of code style fixes - improvement:
refactored 'base' plugin class to AbstractPlugin - improvement: removed old PHP
environments for Travis, added PHP7 - improvement: set license to a valid SPDX
license identifier - bugfix: PHAR generator updated to support namespacing -
bugfix: Collations broken for Solr 5 data format - added: Make it possible to
bypass (system-wide) proxy setting in Curl adapter - improvement: Added
SensioLabs Insight (including lots of fixed in the code based on report) -
added: ClientInterface - improvement: Set hard paths in .gitignore to prevent
tree lookups - added: Support for facet.contains settings - improvement: updated
Symfony event dispatcher dependency to a maintained version - added: docs in
repository (markdown format)
--------------------------------------------------------------------------------
================================================================================
php-udan11-sql-parser-3.0.8-1.el7 (FEDORA-EPEL-2015-2f9340e9ab)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
Bugfix version for phpMyAdmin 4.5.3
--------------------------------------------------------------------------------
================================================================================
python-configparser-3.5.0b2-1.el7 (FEDORA-EPEL-2015-fa1b970dbe)
Backport of Python 3 configparser module
--------------------------------------------------------------------------------
Update Information:
Updated to build for el6 and Python3 and other minor changes
--------------------------------------------------------------------------------
================================================================================
python-wand-0.4.2-1.el7 (FEDORA-EPEL-2015-99f30e07cb)
Ctypes-based simple MagickWand API binding for Python
--------------------------------------------------------------------------------
Update Information:
Updated to Wand version 0.4.2.
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-1.13.3-1.el7 (FEDORA-EPEL-2015-4a8ba466c7)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update provides the latest version of python-wikitcms, which is a bugfix
release that fixes a bug in reporting results in rows with similar test case
names.
--------------------------------------------------------------------------------
================================================================================
pyzor-0.5.0-10.el7 (FEDORA-EPEL-2015-26b65971e9)
Pyzor collaborative spam filtering system
--------------------------------------------------------------------------------
Update Information:
Pyzor is a collaborative, networked system to detect and block spam using
identifying digests of messages. Pyzor is similar to Vipul's Razor except
implemented in python, and using fully open source servers. Pyzor can be used
either standalone, or to augment the spam filtering ability of spamassassin.
spamassassin is highly recommended.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1145575 - Please build latest pyzor for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1145575
--------------------------------------------------------------------------------
================================================================================
relval-1.11.7-1.el7 (FEDORA-EPEL-2015-d1f7914fd2)
Tool for interacting with Fedora QA wiki pages
--------------------------------------------------------------------------------
Update Information:
This update provides the latest release of relval. This release provides a
single new feature: the `--wait` argument for the `nightly` subcommand, which
allows waiting for the compose to complete before creating the validation event.
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.1.4-2.el7 (FEDORA-EPEL-2015-5538691958)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Release 1.1.4** - Add workaround for https://bugs.php.net/bug.php?id=70757
(#1490582) - Fix duplicate messages in list and wrong count after delete
(#1490572) - Fix so Installer requires PHP5 - Make brute force attacks harder by
re-generating security token on every failed login (#1490549) - Slow down brute-
force attacks by waiting for a second after failed login (#1490549) - Fix
.htaccess rewrite rules to not block .well-known URIs (#1490615) - Fix mail view
scaling on iOS (#1490551) - Fix so database_attachments::cleanup() does not
remove attachments from other sessions (#1490542) - Fix responses list update
issue after response name change (#1490555) - Fix bug where message preview was
unintentionally reset on check-recent action (#1490563) - Fix bug where HTML
messages with invalid/excessive css styles couldn't be displayed (#1490539) -
Fix redundant blank lines when using HTML and top posting (#1490576) - Fix
redundant blank lines on start of text after html to text conversion (#1490577)
- Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583) - Fix
invalid LDAP query in ACL user autocompletion (#1490591) - Fix regression in
displaying contents of message/rfc822 parts (#1490606) - Fix handling of
message/rfc822 attachments on replies and forwards (#1490607) - Fix PDF support
detection in Firefox > 19 (#1490610) - Fix path traversal vulnerability (CWE-22)
in setting a skin (#1490620) - Fix so drag-n-drop of text (e.g. recipient
addresses) on compose page actually works (#1490619) **Packaging changes:** *
add .log suffix to all log file names, and rotate them all (may requires to
switch back to provided logrotate configuration)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269164 - Logrotate configuration /etc/logrotate.d/roundcubemail
is incomplete and should not contain "create"
https://bugzilla.redhat.com/show_bug.cgi?id=1269164
[ 2 ] Bug #1269155 - Insecure permissions of /var/lib/roundcubemail and
/var/log/roundcubemail
https://bugzilla.redhat.com/show_bug.cgi?id=1269155
--------------------------------------------------------------------------------
================================================================================
sscep-0.6.1-1.20151228git68e354a.el7 (FEDORA-EPEL-2015-4b0b208fa2)
Simple SCEP client with modifications for engine support & more
--------------------------------------------------------------------------------
Update Information:
Rebase on 0.6.1 release
--------------------------------------------------------------------------------
================================================================================
texlive-extension-2012-4.el7 (FEDORA-EPEL-2015-70dba1217c)
TeX formatting system
--------------------------------------------------------------------------------
Update Information:
texlive-extension include texlive extensions which are dropped in RHEL7. This
update has langcyrillic support.
--------------------------------------------------------------------------------
================================================================================
tomcat-native-1.1.34-1.el7 (FEDORA-EPEL-2015-b2a7126a18)
Tomcat native library
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.34
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2015.12.05-1.el7 (FEDORA-EPEL-2015-bc457ef12c)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
[email protected]
http://lists.fedoraproject.org/admin/lists/[email protected]
