The following Fedora EPEL 7 Security updates need testing:
Age URL
311 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
73 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
37 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f82c6fc04a
p7zip-15.09-4.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-864da6c179
nghttp2-1.6.0-1.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e21e03e52f
mono-2.10.8-9.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3e181e41ca
openvpn-2.3.10-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-039bf0137a
salt-2015.5.8-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e04c714f9d
gajim-0.16.5-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ec85678f0c
nodejs-ws-1.0.1-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dd35749dd3
wordpress-4.4.1-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-43613cf75a
keepassx-0.4.4-1.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e34ffdd692
prosody-0.9.9-2.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-273a82f7db
owncloud-8.0.10-1.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8da165e1bb
mbedtls-2.2.1-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6f526f521d
python-rsa-3.3-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.0.0.1-1.el7
cppformat-2.0.0-1.el7
dpm-dsi-1.9.7-2.el7
globus-authz-3.11-2.el7
globus-ftp-client-8.27-2.el7
globus-gass-copy-9.18-2.el7
globus-gridftp-server-9.4-1.el7
globus-gridmap-eppn-callout-1.9-1.el7
globus-gssapi-gsi-11.25-1.el7
globus-net-manager-0.14-1.el7
gnucash-2.6.11-1.el7
gnucash-docs-2.6.11-1.el7
inxi-2.2.32-1.el7
mintmenu-5.6.5-2.el7
nodejs-chainsaw-0.1.0-2.el7
nodejs-deep-extend-0.3.2-2.el7
nodejs-duplexer-0.1.1-2.el7
nodejs-duplexify-3.2.0-2.el7
nodejs-end-of-stream-1.1.0-2.el7
nodejs-freetree-0.2.1-2.el7
nodejs-got-2.2.0-3.el7
nodejs-lex-parser-0.1.4-1.el7
nodejs-timed-out-2.0.0-3.el7
nodejs-xtend-4.0.0-3.el7
nordugrid-arc-5.0.5-1.el7
nordugrid-arc-doc-2.0.6-1.el7
ola-0.10.0-4.el7
openblas-0.2.15-5.el7
php-mikey179-vfsstream-1.6.2-1.el7
python-fmn-rules-0.7.5-1.el7
python-rsa-3.3-2.el7
python3-coverage-4.0.3-3.el7
rubygem-coffee-script-2.4.1-2.el7
rubygem-dalli-2.7.4-3.el7
rubygem-mail-2.6.3-3.el7
rubygem-railties-4.2.5-2.el7
Details about builds:
================================================================================
ansible-2.0.0.1-1.el7 (FEDORA-EPEL-2016-9dbb349f40)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Ansible v2 with many bugfixes and new features. See upstream changelog for
details: https://github.com/ansible/ansible/blob/devel/CHANGELOG.md
--------------------------------------------------------------------------------
================================================================================
cppformat-2.0.0-1.el7 (FEDORA-EPEL-2016-e5e039e9c5)
Small, safe and fast formatting library for C++
--------------------------------------------------------------------------------
Update Information:
https://github.com/cppformat/cppformat/compare/1.1.0...2.0.0
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.7-2.el7 (FEDORA-EPEL-2016-cf72c1e0f2)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-authz-3.11-2.el7 (FEDORA-EPEL-2016-290cbc1746)
Globus Toolkit - Globus authz library
--------------------------------------------------------------------------------
Update Information:
Rebuild for ppc64le.
--------------------------------------------------------------------------------
================================================================================
globus-ftp-client-8.27-2.el7 (FEDORA-EPEL-2016-290cbc1746)
Globus Toolkit - GridFTP Client Library
--------------------------------------------------------------------------------
Update Information:
Rebuild for ppc64le.
--------------------------------------------------------------------------------
================================================================================
globus-gass-copy-9.18-2.el7 (FEDORA-EPEL-2016-290cbc1746)
Globus Toolkit - Globus Gass Copy
--------------------------------------------------------------------------------
Update Information:
Rebuild for ppc64le.
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-9.4-1.el7 (FEDORA-EPEL-2016-cf72c1e0f2)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-gridmap-eppn-callout-1.9-1.el7 (FEDORA-EPEL-2016-cf72c1e0f2)
Globus Toolkit - Globus gridmap ePPN callout
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-11.25-1.el7 (FEDORA-EPEL-2016-cf72c1e0f2)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-net-manager-0.14-1.el7 (FEDORA-EPEL-2016-cf72c1e0f2)
Globus Toolkit - Network Manager
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
gnucash-2.6.11-1.el7 (FEDORA-EPEL-2015-121c7f7daa)
Finance management application
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to 2.6.11, the latest upstream release. For a list of bugs
fixed in this release, see the upstream release notes at: http://gnucash.org/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1266794 - gnucash-2.6.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1266794
[ 2 ] Bug #1236432 - gnucash-2.6.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1236432
[ 3 ] Bug #1178516 - "don't ask me again this session" remembers answer
forever
https://bugzilla.redhat.com/show_bug.cgi?id=1178516
[ 4 ] Bug #1293505 - gnucash-2.6.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1293505
[ 5 ] Bug #1297771 - gnucash-2.6.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297771
--------------------------------------------------------------------------------
================================================================================
gnucash-docs-2.6.11-1.el7 (FEDORA-EPEL-2015-121c7f7daa)
Help files and documentation for the GnuCash personal finanace manager
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to 2.6.11, the latest upstream release. For a list of bugs
fixed in this release, see the upstream release notes at: http://gnucash.org/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1266794 - gnucash-2.6.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1266794
[ 2 ] Bug #1236432 - gnucash-2.6.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1236432
[ 3 ] Bug #1178516 - "don't ask me again this session" remembers answer
forever
https://bugzilla.redhat.com/show_bug.cgi?id=1178516
[ 4 ] Bug #1293505 - gnucash-2.6.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1293505
[ 5 ] Bug #1297771 - gnucash-2.6.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297771
--------------------------------------------------------------------------------
================================================================================
inxi-2.2.32-1.el7 (FEDORA-EPEL-2016-b787b87f53)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.32
--------------------------------------------------------------------------------
================================================================================
mintmenu-5.6.5-2.el7 (FEDORA-EPEL-2016-c9fc08d6dc)
Advanced Menu for the MATE Desktop
--------------------------------------------------------------------------------
Update Information:
- fix rhbz (#1293105), credits to Sorokin Alexei (XRevan86) from opensuse ----
- update to 5.6.5 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293105 - mintMenuConfig.py doen't run and aborts with gtk errors
https://bugzilla.redhat.com/show_bug.cgi?id=1293105
--------------------------------------------------------------------------------
================================================================================
nodejs-chainsaw-0.1.0-2.el7 (FEDORA-EPEL-2016-253a7ee2b7)
Build chainable fluent interfaces the easy way
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-deep-extend-0.3.2-2.el7 (FEDORA-EPEL-2016-281f6e0d91)
Recursive object extending
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-duplexer-0.1.1-2.el7 (FEDORA-EPEL-2016-d68889ef05)
Creates a duplex stream
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-duplexify-3.2.0-2.el7 (FEDORA-EPEL-2016-6139807497)
Turn a writeable and readable stream into a single streams2 duplex stream
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-end-of-stream-1.1.0-2.el7 (FEDORA-EPEL-2016-a446ecde32)
Call a callback when a readable/writable/duplex stream has completed or failed
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-freetree-0.2.1-2.el7 (FEDORA-EPEL-2016-19a6867b00)
A node module for creating tree data structure from text input
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-got-2.2.0-3.el7 (FEDORA-EPEL-2016-a99a05dd70)
Simplified HTTP/HTTPS requests
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-lex-parser-0.1.4-1.el7 (FEDORA-EPEL-2016-10af0711ed)
A parser for lexical grammars used by jison
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
================================================================================
nodejs-timed-out-2.0.0-3.el7 (FEDORA-EPEL-2016-313bf24fdf)
Timeout HTTP/HTTPS requests
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-xtend-4.0.0-3.el7 (FEDORA-EPEL-2016-070648bff8)
Extend like a boss
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.0.5-1.el7 (FEDORA-EPEL-2016-3c18e87b00)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
NorduGrid ARC 15.03 update 6
http://www.nordugrid.org/arc/releases/15.03u6/release_notes_15.03u6.html
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-2.0.6-1.el7 (FEDORA-EPEL-2016-3c18e87b00)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
NorduGrid ARC 15.03 update 6
http://www.nordugrid.org/arc/releases/15.03u6/release_notes_15.03u6.html
--------------------------------------------------------------------------------
================================================================================
ola-0.10.0-4.el7 (FEDORA-EPEL-2016-86f42e7175)
Open Lighting Architecture
--------------------------------------------------------------------------------
Update Information:
This update fixes the package require in ola-rdm-tests for python2-ola in epel6
(which is named python-ola there) ---- Fixes: - the inclusion of manpages in
the right subpackages - epel6 python package naming - require pkgconfig of udev
instead of systemd for udev rules ---- This is a version upgrade from 0.9.8 to
0.10.0. For the full changelog look
[here](https://github.com/OpenLightingProject/ola/releases/tag/0.10.0) ----
This is a new package. The Open Lighting Architecture is a framework for
lighting control information. It supports a range of protocols and over a dozen
USB devices. It can run as a standalone service, which is useful for converting
signals between protocols, or alternatively using the OLA API, it can be used as
the back-end for lighting control software. OLA runs on many different platforms
including ARM, which makes it a perfect fit for low cost Ethernet to DMX
gateways.
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.15-5.el7 (FEDORA-EPEL-2016-49d61ed4db)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Use bundled version of LAPACK. ---- Enabled ARMv7 and PPC64le (POWER 8)
architectures. Built 64-bit interface libraries with additional symbol
suffixes, allowing for the library to be used in a same program with both the
32-bit and 64-bit interfaces.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1287541 - Shipping libopenblas?64_.so with symbol suffix
https://bugzilla.redhat.com/show_bug.cgi?id=1287541
[ 2 ] Bug #1222075 - Please enable building on ARM
https://bugzilla.redhat.com/show_bug.cgi?id=1222075
[ 3 ] Bug #1287105 - enable support ppc64/ppc64le and arm
https://bugzilla.redhat.com/show_bug.cgi?id=1287105
--------------------------------------------------------------------------------
================================================================================
php-mikey179-vfsstream-1.6.2-1.el7 (FEDORA-EPEL-2016-1ab37ab974)
PHP stream wrapper for a virtual file system
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.2** * fixed #128 duplicate "valid" files/directories and
incorrect file names
--------------------------------------------------------------------------------
================================================================================
python-fmn-rules-0.7.5-1.el7 (FEDORA-EPEL-2016-fc0035f319)
Message processing rules for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Cache calls to fedmsg.meta.
--------------------------------------------------------------------------------
================================================================================
python-rsa-3.3-2.el7 (FEDORA-EPEL-2016-6f526f521d)
Pure-Python RSA implementation
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2016-1494
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295871 - CVE-2016-1494 python-rsa: Signature forgery using
Bleichenbacher'06 attack [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295871
[ 2 ] Bug #1295870 - CVE-2016-1494 python-rsa: Signature forgery using
Bleichenbacher'06 attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295870
[ 3 ] Bug #1170702 - Long-unfixed security vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1170702
[ 4 ] Bug #1298335 - python-rsa-3.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1298335
[ 5 ] Bug #1297222 - Old version with security issues, please approve ACL
https://bugzilla.redhat.com/show_bug.cgi?id=1297222
--------------------------------------------------------------------------------
================================================================================
python3-coverage-4.0.3-3.el7 (FEDORA-EPEL-2016-f4058c4b32)
Code coverage testing module for Python 3
--------------------------------------------------------------------------------
Update Information:
Coverage.py is a Python 3 module that measures code coverage during Python
execution. It uses the code analysis tools and tracing hooks provided in the
Python standard library to determine which lines are executable, and which have
been executed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294860 - Review Request: python3-coverage - Code coverage testing
module for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1294860
--------------------------------------------------------------------------------
================================================================================
rubygem-coffee-script-2.4.1-2.el7 (FEDORA-EPEL-2016-be5049e73d)
Ruby CoffeeScript Compiler
--------------------------------------------------------------------------------
Update Information:
Updated for EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-dalli-2.7.4-3.el7 (FEDORA-EPEL-2016-9f415c3813)
High performance memcached client for Ruby
--------------------------------------------------------------------------------
Update Information:
Disabling tests for EPEL7 bootstrapping
--------------------------------------------------------------------------------
================================================================================
rubygem-mail-2.6.3-3.el7 (FEDORA-EPEL-2016-9aac9528cf)
Mail provides a nice Ruby DSL for making, sending and reading emails
--------------------------------------------------------------------------------
Update Information:
Changes for EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-railties-4.2.5-2.el7 (FEDORA-EPEL-2016-c1e87f1c36)
Tools for creating, working with, and running Rails applications
--------------------------------------------------------------------------------
Update Information:
Add EPEL7 requirements
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
[email protected]
http://lists.fedoraproject.org/admin/lists/[email protected]
