The following Fedora EPEL 7 Security updates need testing:
Age URL
539 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
302 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
64 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e0c08a1414
php-PHPMailer-5.2.16-2.el7
20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
19 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4b8dd3488d
knot-1.6.8-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f0e09b5124
borgbackup-1.0.7-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-df8a00854a
openvpn-2.3.12-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4316d954e8
canl-c-2.1.7-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-62fd4a9900
phpMyAdmin-4.4.15.8-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cherrytree-0.37.4-2.el7
duplicity-0.7.10-1.el7
engauge-digitizer-9.2-1.el7
guake-0.8.7-1.el7
hitch-1.3.1-1.el7
libbson-1.3.5-2.el7
lxqt-wallet-3.0.0-1.el7
pcre2-10.21-6.el7
phpMyAdmin-4.4.15.8-2.el7
privoxy-3.0.26-1.el7
shinken-2.4.3-2.el7
tlp-0.9-1.el7
zulucrypt-5.0.0-3.20160802git064e9db.el7
Details about builds:
================================================================================
cherrytree-0.37.4-2.el7 (FEDORA-EPEL-2016-3c96264dfd)
Hierarchical note taking application
--------------------------------------------------------------------------------
Update Information:
update to 0.37.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1365098 - cherrytree-0.37.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1365098
[ 2 ] Bug #1370698 - cherrytree-0.37.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370698
--------------------------------------------------------------------------------
================================================================================
duplicity-0.7.10-1.el7 (FEDORA-EPEL-2016-ebc5285cef)
Encrypted bandwidth-efficient backup using rsync algorithm
--------------------------------------------------------------------------------
Update Information:
https://launchpad.net/duplicity/+milestone/0.7.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370670 - duplicity-0.7.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370670
--------------------------------------------------------------------------------
================================================================================
engauge-digitizer-9.2-1.el7 (FEDORA-EPEL-2016-0f5faf840c)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- Update to 9.2
--------------------------------------------------------------------------------
================================================================================
guake-0.8.7-1.el7 (FEDORA-EPEL-2016-904d016ed5)
Drop-down terminal for GNOME
--------------------------------------------------------------------------------
Update Information:
update to 0.8.7 ---- update to guake-0.8.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1355731 - [abrt] guake: common.py:53:test_gconf:GError:
Configuration server couldn't be contacted: D-BUS error: Did not receive a
reply. Possible causes include: the remote application did not send a reply,
the message bus security policy blocked the reply, ...
https://bugzilla.redhat.com/show_bug.cgi?id=1355731
[ 2 ] Bug #1353542 - guake config "appears on the display with focus" doesn't
works
https://bugzilla.redhat.com/show_bug.cgi?id=1353542
[ 3 ] Bug #1348460 - Arbitrary code execution due to insecure loading of
Python module(s) from CWD
https://bugzilla.redhat.com/show_bug.cgi?id=1348460
[ 4 ] Bug #1279169 - Guake vertical scrollbar
https://bugzilla.redhat.com/show_bug.cgi?id=1279169
[ 5 ] Bug #1370730 - guake-0.8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370730
[ 6 ] Bug #1343054 - guake-0.8.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343054
--------------------------------------------------------------------------------
================================================================================
hitch-1.3.1-1.el7 (FEDORA-EPEL-2016-9563b74eb3)
Network proxy that terminates TLS/SSL connections
--------------------------------------------------------------------------------
Update Information:
New upstream release; a feature and bugfix release. New feature: Support for
OCSP. For fixed bugs, see the changelog included in the package, or online at
https://github.com/varnish/hitch/blob/master/CHANGES.rst
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1335334 - hitch-1.3.0~beta1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1335334
--------------------------------------------------------------------------------
================================================================================
libbson-1.3.5-2.el7 (FEDORA-EPEL-2016-342eadd1c3)
Building, parsing, and iterating BSON documents
--------------------------------------------------------------------------------
Update Information:
Fix buffer overrun in bson_strndup() function.
--------------------------------------------------------------------------------
================================================================================
lxqt-wallet-3.0.0-1.el7 (FEDORA-EPEL-2016-f08257b92c)
Create a kwallet like functionality for LXQt
--------------------------------------------------------------------------------
Update Information:
initial packages, rhbz#1356657 rhbz#1356739
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356657 - Review Request: lxqt-wallet - Create a kwallet like
functionality for LXQt
https://bugzilla.redhat.com/show_bug.cgi?id=1356657
[ 2 ] Bug #1362317 - lxqt-wallet-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1362317
[ 3 ] Bug #1356739 - Review Request: zulucrypt - Qt GUI front end to
cryptsetup
https://bugzilla.redhat.com/show_bug.cgi?id=1356739
--------------------------------------------------------------------------------
================================================================================
pcre2-10.21-6.el7 (FEDORA-EPEL-2016-0cc1bc6c60)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes matching characters above 255 when a negative character type
was used without enabled UCP in a positive class.
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.4.15.8-2.el7 (FEDORA-EPEL-2016-62fd4a9900)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.4.15.8 (2016-08-16) ================================ This release
includes many security fixes of various levels of severity. Upstream recommends
all users of the 4.4 branch upgrade to this release immediately. For full
information on the vulnerabilities fixed and mitigation factors for users who
are unable to upgrade, refer to the ChangeLog file included with this release
and the security announcements at https://www.phpmyadmin.net/security/
--------------------------------------------------------------------------------
================================================================================
privoxy-3.0.26-1.el7 (FEDORA-EPEL-2016-88a3e09813)
Privacy enhancing proxy
--------------------------------------------------------------------------------
Update Information:
3.0.26
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371151 - privoxy-3.0.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371151
--------------------------------------------------------------------------------
================================================================================
shinken-2.4.3-2.el7 (FEDORA-EPEL-2016-5b1a5dc5b5)
Python Monitoring tool
--------------------------------------------------------------------------------
Update Information:
https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Package
s
--------------------------------------------------------------------------------
================================================================================
tlp-0.9-1.el7 (FEDORA-EPEL-2016-643732c481)
Advanced power management tool for Linux
--------------------------------------------------------------------------------
Update Information:
Update to 0.9 ---- Update to 0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1242380 - Update Request: update TLP to the latest version
https://bugzilla.redhat.com/show_bug.cgi?id=1242380
--------------------------------------------------------------------------------
================================================================================
zulucrypt-5.0.0-3.20160802git064e9db.el7 (FEDORA-EPEL-2016-f08257b92c)
Qt GUI front end to cryptsetup
--------------------------------------------------------------------------------
Update Information:
initial packages, rhbz#1356657 rhbz#1356739
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356657 - Review Request: lxqt-wallet - Create a kwallet like
functionality for LXQt
https://bugzilla.redhat.com/show_bug.cgi?id=1356657
[ 2 ] Bug #1362317 - lxqt-wallet-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1362317
[ 3 ] Bug #1356739 - Review Request: zulucrypt - Qt GUI front end to
cryptsetup
https://bugzilla.redhat.com/show_bug.cgi?id=1356739
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/epel-devel@lists.fedoraproject.org
