The following Fedora EPEL 7 Security updates need testing:
Age URL
376 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
138 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8fd1e13dd2
python-django-1.6.11-5.el7
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0fc6ac67c6
websvn-2.3.3-12.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bfdc2d9e96
php-pecl-http-2.5.6-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3c6d565eff
proftpd-1.3.5b-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-961ab9f259
seamonkey-2.40-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
carbon-c-relay-1.10-1.el7
coin-or-CoinUtils-2.10.13-1.el7
collectd-5.5.1-3.el7
fedpkg-1.22-2.el7
imagefactory-1.1.8-2.el7
imagefactory-plugins-1.1.8-2.el7
inxi-2.2.35-1.el7
memkind-1.0.0-1.el7
mozilla-noscript-2.9.0.5-1.el7
munin-2.0.25-11.el7
ocaml-camlidl-1.05-34.el7
openblas-0.2.16-2.el7
packagedb-cli-2.12-1.el7
php-horde-Horde-Crypt-2.7.2-1.el7
php-horde-Horde-Service-Weather-2.3.3-1.el7
php-icewind-smb-1.0.8-1.el7
php-icewind-streams-0.4.0-1.el7
php-league-flysystem-1.0.20-1.el7
php-pecl-mongo-1.6.13-1.el7
python-rjsmin-1.0.12-2.el7
qbittorrent-3.3.3-11.el7
qtsingleapplication-2.6.1-28.el7
rb_libtorrent-1.0.9-2.el7
rebase-helper-0.7.2-1.el7
rpkg-1.42-1.el7
seamonkey-2.40-1.el7
xboxdrv-0.8.8-2.el7
Details about builds:
================================================================================
carbon-c-relay-1.10-1.el7 (FEDORA-EPEL-2016-4e391eb5b6)
Enhanced C implementation of Carbon relay, aggregator and rewriter
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1315289 - carbon-c-relay-v1.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1315289
--------------------------------------------------------------------------------
================================================================================
coin-or-CoinUtils-2.10.13-1.el7 (FEDORA-EPEL-2016-f5b9eabf25)
Coin-or Utilities
--------------------------------------------------------------------------------
Update Information:
- New package
--------------------------------------------------------------------------------
================================================================================
collectd-5.5.1-3.el7 (FEDORA-EPEL-2016-8dbf30da45)
Statistics collection daemon for filling RRD files
--------------------------------------------------------------------------------
Update Information:
Enable modbus plugin.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310854 - RFE: enable modbus plugin in collectd please?
https://bugzilla.redhat.com/show_bug.cgi?id=1310854
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.22-2.el7 (FEDORA-EPEL-2016-3028c1ea15)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
* new support for dist git namespacing * adds copr-build command ---- This
update improves container-build command: - support yum repos with --build-
with=koji - move --scratch option to koji group - prints task info
--------------------------------------------------------------------------------
================================================================================
imagefactory-1.1.8-2.el7 (FEDORA-EPEL-2016-ff9937a843)
System image generation tool
--------------------------------------------------------------------------------
Update Information:
Fix systemd unit file in RPM for EPEL7 ---- Significant Docker and EC2 updates
and various bug fixes.
--------------------------------------------------------------------------------
================================================================================
imagefactory-plugins-1.1.8-2.el7 (FEDORA-EPEL-2016-feee2b02a9)
Default plugins for the Image Factory system image generation tool
--------------------------------------------------------------------------------
Update Information:
Significant updates for Docker and EC2 as well as various bug fixes
--------------------------------------------------------------------------------
================================================================================
inxi-2.2.35-1.el7 (FEDORA-EPEL-2016-bb9c55cc04)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.35.
--------------------------------------------------------------------------------
================================================================================
memkind-1.0.0-1.el7 (FEDORA-EPEL-2016-0e3db6b1df)
User Extensible Heap Manager
--------------------------------------------------------------------------------
Update Information:
Update memkind source file to 1.0.0 upstream
--------------------------------------------------------------------------------
================================================================================
mozilla-noscript-2.9.0.5-1.el7 (FEDORA-EPEL-2016-6b3013fe92)
JavaScript white list extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
Changes since 2.9.0.3: * [XSS] Improved detection of computed property
accessors (thanks Emanuel Bronshtein @e3amn2l for report) * [HTTPS] Fixed
httpsDefWhitelist breaking OCSP (thanks al_9x for reporting) * [HTTPS] Fixed
httpsDefWhitelist breaking yui.yahooapis.com (thanks Rob Greenberg for reporting
* [XSS] Fixed OpenID-related false positive * Restored Nightly compatibility
broken by bug 1253016 * Fixed regression in HTTPS enforcing exceptions *
[Surrogate] Updated googletag replacement (thanks barbaz) * [Surrogate] Updated
ga replacement (thanks barbaz) * [XSS] Improved replacement for dangerous
keywords/built-in properties (thanks Emanuel Bronshtein @e3amn2l for report) *
[HTTPS] noscript.httpsDefWhitelist option to automatically upgrade to HTTPS
sites found in the default whitelist (enabled by default, thanks Mazin Ahmed
for reporting) * Fixed InjectionChecker over-optimization bug (thanks Maxim Rupp
for reporting) * [l10n] Updated ar (thanks Nassim Dhaher)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1318460 - mozilla-noscript-2.9.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1318460
--------------------------------------------------------------------------------
================================================================================
munin-2.0.25-11.el7 (FEDORA-EPEL-2016-8a2521ca09)
Network-wide graphing framework (grapher/gatherer)
--------------------------------------------------------------------------------
Update Information:
EL5/6 do not need to install firewalld files BZ# 1312121 - Munin dynamic graph
zoom (dynazoom) failing due to Apache config. BZ# 1210767 - At least one file
seems corrupt in version 2.0.25-2 and earlier BZ# 1269230 - hddtemp_smartctl
fails to parse temperature from output ---- EL5/6 do not need to install
firewalld files BZ# 1315810 - postgresql plugin default configuration (contrib)
BZ# 1315990 - Please remove unnecessary requirements for munin-node BZ# 1315951
- move /etc/tmpfiles.d/munin.conf to /usr/lib/tmpfiles.d Remove firewalld
Require and associated script. EPEL7 does not have them. BZ# 1300379 - Please
include firewalld service file for munin-node in RPM package BZ# 1262751 -
munin-common should be requires(pre) shadow-utils package Brought forward
munin-2.0.26-406c67e ---- BZ# 1262751 - munin-common should be requires(pre)
shadow-utils package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312121 - Munin dynamic graph zoom (dynazoom) failing due to
Apache config.
https://bugzilla.redhat.com/show_bug.cgi?id=1312121
[ 2 ] Bug #1210767 - At least one file seems corrupt in version 2.0.25-2 and
earlier
https://bugzilla.redhat.com/show_bug.cgi?id=1210767
[ 3 ] Bug #1269230 - hddtemp_smartctl fails to parse temperature from output
https://bugzilla.redhat.com/show_bug.cgi?id=1269230
[ 4 ] Bug #1315810 - postgresql plugin default configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1315810
[ 5 ] Bug #1315990 - Please remove unnecessary requirements for munin-node
https://bugzilla.redhat.com/show_bug.cgi?id=1315990
[ 6 ] Bug #1315951 - move /etc/tmpfiles.d/munin.conf to /usr/lib/tmpfiles.d
https://bugzilla.redhat.com/show_bug.cgi?id=1315951
[ 7 ] Bug #1300379 - Please include firewalld service file for munin-node in
RPM package
https://bugzilla.redhat.com/show_bug.cgi?id=1300379
[ 8 ] Bug #1262751 - munin-common should be requires(pre) shadow-utils package
https://bugzilla.redhat.com/show_bug.cgi?id=1262751
--------------------------------------------------------------------------------
================================================================================
ocaml-camlidl-1.05-34.el7 (FEDORA-EPEL-2016-cc53b0c3e9)
Stub code generator and COM binding for Objective Caml
--------------------------------------------------------------------------------
Update Information:
Build ocaml-camlidl in epel7 to allow build google-drive-ocamlfuse in epel7
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.16-2.el7 (FEDORA-EPEL-2016-cfdf760b8b)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.16, bringing in LAPACK bugfixes and some more optimizations. Full
changelog available at
https://github.com/xianyi/OpenBLAS/blob/develop/Changelog.txt
--------------------------------------------------------------------------------
================================================================================
packagedb-cli-2.12-1.el7 (FEDORA-EPEL-2016-04eff2ea4b)
A CLI for pkgdb
--------------------------------------------------------------------------------
Update Information:
Update to 2.12 - Improved README for running pkgdb-cli/admin from the sources -
Ensure the fedora-review flag has been touched when processing a new package
request - Fix creating new packages with monitoring and koschei statuses
provided ---- - Update to 2.11 - Fix processing all the pending actions (Till
Maas) - Improved py3 support - When processing a request, show the tests
performed (Till Maas) - Fix encoding for package description or user that are
not only ascii - Improve the checks performed when processing a new package
request - Let the users control the limit argument when retrieving all the
packages (Ralph Bean) - Add support for pkgdb2's namespacing - Port to
openidbaseclient from python-fedora (Ralph Bean) - Show the FAS user's username
from their bugzilla email when processing requests (Till Maas) - Include
monitoring information if any are provided when creating a package - If there
are co-maintainers specified in the new package request, grant them ACLs
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Crypt-2.7.2-1.el7 (FEDORA-EPEL-2016-880e4785d5)
Horde Cryptography API
--------------------------------------------------------------------------------
Update Information:
**Horde_Crypt 2.7.2** * [jan] Fix throwing exception if verifying a PGP
signature failed. ---- **Horde_Crypt 2.7.1** * [jan] Update Greek
translation (Limperis Antonis). * [jan] Try three times to retrieve public PGP
if the keyserver pool contains broken servers.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Service-Weather-2.3.3-1.el7 (FEDORA-EPEL-2016-ccce7ab901)
Horde Weather Provider
--------------------------------------------------------------------------------
Update Information:
**Horde_Service_Weather 2.3.3** * [mjr] Fix fatal error related to setting
timezone in WWO driver (Bug #14289).
--------------------------------------------------------------------------------
================================================================================
php-icewind-smb-1.0.8-1.el7 (FEDORA-EPEL-2016-695f0fab9c)
php wrapper for smbclient and libsmbclient-php
--------------------------------------------------------------------------------
Update Information:
** icewind/smb 1.0.8** * Workaround for an upstream bug using fstat and dfs
shares --- ** icewind/smb 1.0.7** * only set minumum required streams version
--- ** icewind/smb 1.0.6** * Properly handle errors in stream_stat --- **
icewind/smb 1.0.5** * Improved detection and reporting of errors ---
**icewin/streams 0.4.0** * Add RetryWrapper to work with remote streams that
don't return all the requested data --- **icewin/streams 0.3.0** * Add
Path object to wrap a stream in a string-like variable to pass to functions. *
Add UrlCallBack wrapper that provides callbacks for fopen, unlink, etc * Add
folder support to callback wrapper
--------------------------------------------------------------------------------
================================================================================
php-icewind-streams-0.4.0-1.el7 (FEDORA-EPEL-2016-695f0fab9c)
A set of generic stream wrappers
--------------------------------------------------------------------------------
Update Information:
** icewind/smb 1.0.8** * Workaround for an upstream bug using fstat and dfs
shares --- ** icewind/smb 1.0.7** * only set minumum required streams version
--- ** icewind/smb 1.0.6** * Properly handle errors in stream_stat --- **
icewind/smb 1.0.5** * Improved detection and reporting of errors ---
**icewin/streams 0.4.0** * Add RetryWrapper to work with remote streams that
don't return all the requested data --- **icewin/streams 0.3.0** * Add
Path object to wrap a stream in a string-like variable to pass to functions. *
Add UrlCallBack wrapper that provides callbacks for fopen, unlink, etc * Add
folder support to callback wrapper
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.20-1.el7 (FEDORA-EPEL-2016-288617e90d)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.20** * MimeType detection now falls back on extension guessing
when the contents is a resource. --- **Version 1.0.19** *
[Util::normalizeRelativePath] '.' didn't normalize to '', this is now fixed.
---- **Version 1.0.18** * Revert "Simplified Util::pathinfo, dirname key
always exists."
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongo-1.6.13-1.el7 (FEDORA-EPEL-2016-321b6185fc)
PHP MongoDB database driver
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.13** * [PHP-1483] - GridFS file storage fails on big endian
platform * [PHP-1500] - Socket timeout not applied to initial command cursor
query * [PHP-1501] - Rephrase unsupported/corrupt BSON messages * [PHP-1504] -
Segfault connecting to authenticated RS after non-auth connections * [PHP-1505]
- negative files.length when storing file with size > 2GB in gridfs
--------------------------------------------------------------------------------
================================================================================
python-rjsmin-1.0.12-2.el7 (FEDORA-EPEL-2016-9ea5c5e2b4)
Javascript Minifier
--------------------------------------------------------------------------------
Update Information:
initial package (rhbz#1312350)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312350 - Review Request: python-rjsmin - Javascript Minifier
https://bugzilla.redhat.com/show_bug.cgi?id=1312350
--------------------------------------------------------------------------------
================================================================================
qbittorrent-3.3.3-11.el7 (FEDORA-EPEL-2016-5a49ee14d2)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
Fix multiple bugs in those packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite
https://bugzilla.redhat.com/show_bug.cgi?id=1294336
[ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301942
[ 3 ] Bug #1317676 - rb_libtorrent Python 3 binding is missing a library
https://bugzilla.redhat.com/show_bug.cgi?id=1317676
--------------------------------------------------------------------------------
================================================================================
qtsingleapplication-2.6.1-28.el7 (FEDORA-EPEL-2016-5a49ee14d2)
Qt library to start applications only once per user
--------------------------------------------------------------------------------
Update Information:
Fix multiple bugs in those packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite
https://bugzilla.redhat.com/show_bug.cgi?id=1294336
[ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301942
[ 3 ] Bug #1317676 - rb_libtorrent Python 3 binding is missing a library
https://bugzilla.redhat.com/show_bug.cgi?id=1317676
--------------------------------------------------------------------------------
================================================================================
rb_libtorrent-1.0.9-2.el7 (FEDORA-EPEL-2016-5a49ee14d2)
A C++ BitTorrent library aiming to be the best alternative
--------------------------------------------------------------------------------
Update Information:
Fix multiple bugs in those packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite
https://bugzilla.redhat.com/show_bug.cgi?id=1294336
[ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301942
[ 3 ] Bug #1317676 - rb_libtorrent Python 3 binding is missing a library
https://bugzilla.redhat.com/show_bug.cgi?id=1317676
--------------------------------------------------------------------------------
================================================================================
rebase-helper-0.7.2-1.el7 (FEDORA-EPEL-2016-93a5bcf784)
The tool which helps you with rebase package
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1318134 - rebase-helper-0.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1318134
--------------------------------------------------------------------------------
================================================================================
rpkg-1.42-1.el7 (FEDORA-EPEL-2016-3028c1ea15)
Utility for interacting with rpm+git packaging systems
--------------------------------------------------------------------------------
Update Information:
* new support for dist git namespacing * adds copr-build command ---- This
update improves container-build command: - support yum repos with --build-
with=koji - move --scratch option to koji group - prints task info
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.40-1.el7 (FEDORA-EPEL-2016-961ab9f259)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.40 Fixes various security issues, see
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more
info.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1318592 - seamonkey: 2.40 version release
https://bugzilla.redhat.com/show_bug.cgi?id=1318592
--------------------------------------------------------------------------------
================================================================================
xboxdrv-0.8.8-2.el7 (FEDORA-EPEL-2016-a14b82a78c)
Userspace Xbox/Xbox360 Gamepad Driver for Linux
--------------------------------------------------------------------------------
Update Information:
- Made xboxdrv.conf file and moved into /etc - Fix init script for EPEL6 ----
- Update to release 0.8.8 - Patched for old kernels (EPEL6) - Added init script
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293089 - [abrt] xboxdrv: USBController::on_read_data(): xboxdrv
killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1293089
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-de...@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/epel-de...@lists.fedoraproject.org
