The following Fedora EPEL 7 Security updates need testing:
Age URL
414 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
176 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
43 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-34b85c63ee
drupal7-block_class-2.3-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1036441cdb
ReviewBoard-2.5.4-1.el7 python-djblets-0.9.3-1.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-caf6ebac81
ansible1.9-1.9.6-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-56e02a47c7
ansible-2.0.2.0-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d398cc4c6c
roundcubemail-1.1.5-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-017aadcc97
php-getid3-1.9.12-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-aad55a428b
w3m-0.5.3-20.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c731bc5ec0
cacti-0.8.8g-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
Lmod-6.3.1-1.el7
cacti-0.8.8g-1.el7
engauge-digitizer-7.2-1.el7
epson-inkjet-printer-escpr-1.5.2-3.1lsb3.2.el7
epson-inkjet-printer-escpr-1.6.5-1.1lsb3.2.el7
goaccess-0.9.8-1.el7
osbs-client-0.22-1.el7
quassel-0.12.4-1.el7
Details about builds:
================================================================================
Lmod-6.3.1-1.el7 (FEDORA-EPEL-2016-4cbda99dcc)
Environmental Modules System in Lua
--------------------------------------------------------------------------------
Update Information:
Update to 6.3.1 - protects it from user changes to LUA_PATH and LUA_CPATH by
using these values at configuration time. - Fixed bug with Capital Letters in a
version string. - Do not overwrite MODULEPATH (bug #1326075)
--------------------------------------------------------------------------------
================================================================================
cacti-0.8.8g-1.el7 (FEDORA-EPEL-2016-c731bc5ec0)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 0.8.8g Release notes:
http://www.cacti.net/release_notes_0_8_8g.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1259276 - Version of cacti in repos' is pretty old for EL6 and EL7
https://bugzilla.redhat.com/show_bug.cgi?id=1259276
[ 2 ] Bug #1082936 - CVE-2014-2327 CVE-2014-2326 CVE-2014-2328 cacti:
multiple flaws reported by Deutsche Telekom [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1082936
[ 3 ] Bug #1004548 - Tree not collapsing in graph mode in version 0.8.8b
https://bugzilla.redhat.com/show_bug.cgi?id=1004548
[ 4 ] Bug #1323943 - CVE-2016-3659 cacti: SQL injection vulnerability in
graph_view.php [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1323943
[ 5 ] Bug #1317550 - CVE-2016-3172 cacti: SQL injection vulnerability in
/cacti/tree.php [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1317550
[ 6 ] Bug #1306530 - CVE-2016-2313 cacti: authentication bypass [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1306530
[ 7 ] Bug #1295782 - CVE-2015-8604 cacti: SQL injection in graps_new.php via
cg_g parameter [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295782
[ 8 ] Bug #1291779 - CVE-2015-8369 cacti: SQL injection in graph.php
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1291779
[ 9 ] Bug #1291223 - CVE-2015-8377 cacti: SQL injection in graphs_new.php
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1291223
[ 10 ] Bug #1242868 - CVE-2015-4634 cacti: multiple SQL injection flaws fixed
in Cacti 0.8.8e [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1242868
[ 11 ] Bug #1233833 - CVE-2015-4454 CVE-2015-2665 cacti: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1233833
[ 12 ] Bug #1230297 - CVE-2015-4342 cacti: SQL Injection and Location header
injection from cdef id [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1230297
[ 13 ] Bug #1129764 - cacti: remote code execution and SQL injection
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1129764
[ 14 ] Bug #1121468 - cacti: cross-site scripting issues [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1121468
[ 15 ] Bug #1128298 - cacti-spine not available
https://bugzilla.redhat.com/show_bug.cgi?id=1128298
[ 16 ] Bug #1123884 - %post scriptlet error on install
https://bugzilla.redhat.com/show_bug.cgi?id=1123884
--------------------------------------------------------------------------------
================================================================================
engauge-digitizer-7.2-1.el7 (FEDORA-EPEL-2016-8cc7dc8e14)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- Update to 7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279184 - engauge on el6: not built for missing BR package,
log4cpp.
https://bugzilla.redhat.com/show_bug.cgi?id=1279184
--------------------------------------------------------------------------------
================================================================================
epson-inkjet-printer-escpr-1.5.2-3.1lsb3.2.el7 (FEDORA-EPEL-2016-c66c4cdeec)
Drivers for Epson inkjet printers
--------------------------------------------------------------------------------
Update Information:
Roll back to earlier version due to segfaults in the 1.6.x series.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327002 - Printer prints only half of the page, epson-escpr crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1327002
[ 2 ] Bug #1326572 - [abrt] epson-inkjet-printer-escpr: XFIFOClose():
epson-escpr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1326572
[ 3 ] Bug #1252376 - [abrt] epson-inkjet-printer-escpr: set_pips_parameter():
epson-escpr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1252376
--------------------------------------------------------------------------------
================================================================================
epson-inkjet-printer-escpr-1.6.5-1.1lsb3.2.el7 (FEDORA-EPEL-2016-2b83caa4e1)
Drivers for Epson inkjet printers
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.5. ---- Update to 1.6.4. Make sure drivers are properly detected
on Fedora platform.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327002 - Printer prints only half of the page, epson-escpr crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1327002
[ 2 ] Bug #1326572 - [abrt] epson-inkjet-printer-escpr: XFIFOClose():
epson-escpr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1326572
[ 3 ] Bug #1252376 - [abrt] epson-inkjet-printer-escpr: set_pips_parameter():
epson-escpr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1252376
[ 4 ] Bug #1323033 - Epson inkjet driver RPM does not advertise the printers
it supports
https://bugzilla.redhat.com/show_bug.cgi?id=1323033
--------------------------------------------------------------------------------
================================================================================
goaccess-0.9.8-1.el7 (FEDORA-EPEL-2016-e7474e15f3)
Real-time web log analyzer and interactive viewer
--------------------------------------------------------------------------------
Update Information:
== Changes to GoAccess 0.9.8 - Monday, February 29, 2016 == - Added a more
complete list of static extensions to the config file. - Added Android 6.0
Marshmallow to the list of OSs. - Added the ability to scroll through panels
on TAB with option to disable it --no-tab-scroll. - Added the first and
last log dates to the overall statistics panel. - Ensure GoAccess links
correctly against libtinfo. - Ensure static content is case-insensitive
verified. - Fixed bandwidth overflow issue (numbers > 2GB on non-x86_64 arch).
- Fixed broken HTML layout when html-method/protocol is missing in config file.
- Refactored parsing and display of available modules/panels. == Changes to
GoAccess 0.9.7 - Monday, December 21, 2015 == - Added Squid native log format
to the config file. - Fixed int overflow when getting total bandwidth using
the on-disk storage. - Fixed issue where a timestamp was stored as date under
the visitors panel. - Fixed issue where config dialog fields were not cleared
out on select. - Fixed issue where "Virtual Hosts" menu item wasn't shown in
the HTML sidebar.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293320 - goaccess-0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1293320
--------------------------------------------------------------------------------
================================================================================
osbs-client-0.22-1.el7 (FEDORA-EPEL-2016-472acd2ac0)
Python command line client for OpenShift Build Service
--------------------------------------------------------------------------------
Update Information:
New upstream release. ---- New upstream release. ---- New upstream release.
---- New upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329027 - osbs-client-0.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1329027
--------------------------------------------------------------------------------
================================================================================
quassel-0.12.4-1.el7 (FEDORA-EPEL-2016-7436010ccd)
A modern distributed IRC system
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
[email protected]
http://lists.fedoraproject.org/admin/lists/[email protected]
