The following Fedora EPEL 7 Security updates need testing:
Age URL
450 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
212 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
79 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
31 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4f1d69369e
openvas-cli-1.4.4-1.el7 openvas-gsa-6.0.10-3.el7 openvas-libraries-8.0.7-2.el7
openvas-manager-6.0.8-2.el7 openvas-scanner-5.0.5-3.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e5732b714e
phpMyAdmin-4.4.15.6-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-804b7430fd
GraphicsMagick-1.3.24-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-70e05c7285
nginx-1.6.3-9.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
GraphicsMagick-1.3.24-1.el7
certbot-0.7.0-1.el7
composer-1.1.2-1.el7
fldigi-3.23.10-1.el7
libkscreen-qt5-5.6.4-2.el7
liblxqt-0.10.0-7.el7
libqtxdg-1.3.0-2.el7
libstatgrab-0.91-4.el7
libsysstat-0.3.1-4.el7
lxqt-about-0.10.0-4.el7
lxqt-common-0.10.0-11.el7
lxqt-config-0.10.0-5.el7
lxqt-globalkeys-0.10.0-4.el7
lxqt-notificationd-0.10.0-4.el7
lxqt-openssh-askpass-0.10.0-3.el7
lxqt-panel-0.10.0-6.el7
lxqt-policykit-0.10.0-3.el7
lxqt-powermanagement-0.10.0-3.el7
lxqt-qtplugin-0.10.0-2.el7
lxqt-runner-0.10.0-5.el7
lxqt-session-0.10.0-3.el7
lxqt-sudo-0.10.0-4.el7
nginx-1.6.3-9.el7
pagure-2.2-1.el7
php-nette-database-2.3.9-1.el7
php-nette-forms-2.3.9-1.el7
python-acme-0.7.0-1.el7
salt-2015.5.10-2.el7
Details about builds:
================================================================================
GraphicsMagick-1.3.24-1.el7 (FEDORA-EPEL-2016-804b7430fd)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
New GraphicsMagick bugfix/security release, see also:
http://www.graphicsmagick.org/NEWS.html#may-30-2016
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1306148 - CVE-2016-2317 CVE-2016-2318 GraphicsMagick: SVG parsing
issues
https://bugzilla.redhat.com/show_bug.cgi?id=1306148
[ 2 ] Bug #1333410 - GraphicsMagick: SVG converting issues
https://bugzilla.redhat.com/show_bug.cgi?id=1333410
[ 3 ] Bug #1340814 - CVE-2016-5118 ImageMagick: Remote code execution via
filename
https://bugzilla.redhat.com/show_bug.cgi?id=1340814
--------------------------------------------------------------------------------
================================================================================
certbot-0.7.0-1.el7 (FEDORA-EPEL-2016-97f896566e)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.0
--------------------------------------------------------------------------------
================================================================================
composer-1.1.2-1.el7 (FEDORA-EPEL-2016-46f0f1deae)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.2** - 2016-05-31 * Fixed degraded mode issue when accessing
packagist.org * Fixed GitHub access_token being added on subsequent requests
in case of redirections * Fixed exclude-from-classmap not working in some
circumstances * Fixed openssl warning preventing the use of config command for
disabling tls ---- **Version 1.1.1** - 2016-05-17 * Fixed regression in
handling of #reference which made it update every time * Fixed dev platform
requirements being required even in --no-dev install from a lock file * Fixed
parsing of extension versions that do not follow valid numbers, we now try to
parse x.y.z and ignore the rest * Fixed exact constraints warnings appearing
for 0.x versions * Fixed regression in the `remove` command --- **Version
1.1.0** - 2016-05-10 * Added fallback to SSH for https bitbucket URLs *
Added BaseCommand::isProxyCommand that can be overriden to mark a command as
being a mere proxy, which helps avoid duplicate warnings etc on composer startup
* Fixed archiving generating long paths in zip files on Windows --- **Version
1.1.0-RC** - 2016-04-29 * Added ability for plugins to register their own
composer commands * Optimized the autoloader initialization using static
loading on PHP 5.6 and above, this reduces the load time for large classmaps to
almost nothing * Added `--latest` to `show` command to show the latest version
available of your dependencies * Added `--outdated` to `show` command an
`composer outdated` alias for it, to show only packages in need of update *
Added `--direct` to `show` and `outdated` commands to show only your direct
dependencies in the listing * Added support for editing all top-level
properties (name, minimum-stability, ...) as well as extra values via the
`config` command * Added abandoned state warning to the `show` and `outdated`
commands when listing latest packages * Added support for `~/` and `$HOME/` in
the path repository paths * Added support for wildcards in the `show` command
package filter, e.g. `composer show seld/*` * Added ability to call composer
itself from scripts via `@composer ...` * Added untracked files detection to
the `status` command * Added warning to `validate` command when using exact-
version requires * Added warning once per domain when accessing insecure URLs
with secure-http disabled * Added a dependency on composer/ca-bundle
(extracted CA bundle management to a standalone lib) * Added support for empty
directories when archiving to tar * Added an `init` event for plugins to react
to, which occurs right after a Composer instance is fully initialized * Added
many new detections of problems in the `why-not`/`prohibits` command to figure
out why something does not get installed in the expected version * Added a
deprecation notice for script event listeners that use legacy script classes *
Fixed abandoned state not showing up if you had a package installed before it
was marked abandoned * Fixed --no-dev updates creating an incomplete lock
file, everything is now always resolved on update * Fixed partial updates in
case the vendor dir was not up to date with the lock file
--------------------------------------------------------------------------------
================================================================================
fldigi-3.23.10-1.el7 (FEDORA-EPEL-2016-1d2ae2f444)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
=Version 3.23.10= 2016-05-23 David Freese <iam_w1...@w1hkj.com>
33ad2e6: logger c184758: Restore focus af25ef7: RsID button
ae93f9c: flmsg keepalive 5b367fb: 4bars b4b8df4: ASCII ctl chars
759e6cf: Suppress dockable macros 065ead7: Packet Prep 2016-04-13
Edouard Lafargue W6ELA <edou...@lafargue.name> 505c8b3: Portaudio Mono
2016-04-13 David Freese <iam_w1...@w1hkj.com> 68d9b32: FSQ message
files 2016-04-12 Robert Stiles <kk...@yahoo.com> 4ab48d4: KISS,
8PSK, FLARQ icon Modifications 2016-04-12 David Freese <iam_w1...@w1hkj.com>
76ab77c: FLARQ 9c04f07: focus behavior 2a3f4d4: PTT delays
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1314945 - fldigi-3.23.10.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1314945
--------------------------------------------------------------------------------
================================================================================
libkscreen-qt5-5.6.4-2.el7 (FEDORA-EPEL-2016-7864befa97)
KDE display configuration library
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
liblxqt-0.10.0-7.el7 (FEDORA-EPEL-2016-7864befa97)
Core shared library for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
libqtxdg-1.3.0-2.el7 (FEDORA-EPEL-2016-7864befa97)
QtXdg, a Qt5 implementation of XDG standards
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
libstatgrab-0.91-4.el7 (FEDORA-EPEL-2016-7864befa97)
A library that provides cross platform access to statistics of the system
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
libsysstat-0.3.1-4.el7 (FEDORA-EPEL-2016-7864befa97)
Library used to query system info and statistics
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-about-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97)
About application for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-common-0.10.0-11.el7 (FEDORA-EPEL-2016-7864befa97)
Common resources for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-config-0.10.0-5.el7 (FEDORA-EPEL-2016-7864befa97)
Config tools for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-globalkeys-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97)
Global keys utility for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-notificationd-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97)
Notification daemon for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-openssh-askpass-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97)
Askpass openssh transition dialog for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-panel-0.10.0-6.el7 (FEDORA-EPEL-2016-7864befa97)
Main panel bar for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-policykit-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97)
PolicyKit agent for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-powermanagement-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97)
Powermanagement daemon for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-qtplugin-0.10.0-2.el7 (FEDORA-EPEL-2016-7864befa97)
Qt plugin framework for LXQt Desktop Suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-runner-0.10.0-5.el7 (FEDORA-EPEL-2016-7864befa97)
Application runner agent for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-session-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97)
Main session for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
lxqt-sudo-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97)
GUI frontend for sudo/su
--------------------------------------------------------------------------------
Update Information:
update lxqt 0.10.0
--------------------------------------------------------------------------------
================================================================================
nginx-1.6.3-9.el7 (FEDORA-EPEL-2016-70e05c7285)
A high performance web server and reverse proxy server
--------------------------------------------------------------------------------
Update Information:
fix CVE-2016-4450
--------------------------------------------------------------------------------
================================================================================
pagure-2.2-1.el7 (FEDORA-EPEL-2016-928d5ee916)
A git-centered forge
--------------------------------------------------------------------------------
Update Information:
Update to 2.2 ---- Update to 2.1.1
--------------------------------------------------------------------------------
================================================================================
php-nette-database-2.3.9-1.el7 (FEDORA-EPEL-2016-0c8ffe4219)
Nette Database Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.9** * Helpers::detectType() detects DATERANGE as text
* Structure::analyzeForeignKeys() fixed lowercased name #122
--------------------------------------------------------------------------------
================================================================================
php-nette-forms-2.3.9-1.el7 (FEDORA-EPEL-2016-42e32e0f6c)
Nette Forms: greatly facilitates web forms
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.9** * UploadControl: added isOK() *
Helpers::exportRules() skips empty branches * netteForms.js: Nette.noInit =
true disables auto initialization
--------------------------------------------------------------------------------
================================================================================
python-acme-0.7.0-1.el7 (FEDORA-EPEL-2016-97f896566e)
Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.0
--------------------------------------------------------------------------------
================================================================================
salt-2015.5.10-2.el7 (FEDORA-EPEL-2016-3dca8ed97a)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Updated patch ---- Update to bugfix release 2015.5.10
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/epel-devel@lists.fedoraproject.org
