Fedora EPEL 7 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
745 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
508 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
210 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7
90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7
17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19578898e6 w3m-0.5.3-30.git20170102.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6950a0884d R-3.3.3-1.el7
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-956d05f9c4 mbedtls-2.4.2-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-05ac8b1dc4 php-onelogin-php-saml-2.10.5-1.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b639a46822 tcpreplay-4.2.0-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d518cd4b9 libgit2-0.24.6-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5794ee2486 moodle-3.1.5-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
apcupsd-3.14.12-2.el7
duplicity-0.7.12-1.el7
libgit2-0.24.6-1.el7
module-build-service-1.3.14-1.el7
moodle-3.1.5-1.el7
perl-Boulder-1.30-26.el7
perl-Cflow-1.053-32.el7
php-cs-fixer-2.1.2-1.el7
php-justinrainbow-json-schema5-5.2.0-1.el7
python-ansible-tower-cli-3.1.3-1.el7
python-packaging-16.8-5.el7
rktime-0.6-3.el7
youtube-dl-2017.03.22-1.el7
Details about builds:
================================================================================
apcupsd-3.14.12-2.el7 (FEDORA-EPEL-2017-8acb6bcc5c)
APC UPS Power Control Daemon for Linux
--------------------------------------------------------------------------------
Update Information:
- reduce amount of debug messages (#1053324, #1284600)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284600 - apcupsd filling log with debug messages
https://bugzilla.redhat.com/show_bug.cgi?id=1284600
--------------------------------------------------------------------------------
================================================================================
duplicity-0.7.12-1.el7 (FEDORA-EPEL-2017-e2a88ecdc7)
Encrypted bandwidth-efficient backup using rsync algorithm
--------------------------------------------------------------------------------
Update Information:
https://launchpad.net/duplicity/+announcement/14536
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434625 - duplicity-0.7.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434625
--------------------------------------------------------------------------------
================================================================================
libgit2-0.24.6-1.el7 (FEDORA-EPEL-2017-3d518cd4b9)
C implementation of the Git core methods as a library with a solid API
--------------------------------------------------------------------------------
Update Information:
Update to 0.24.6, fixing CVE-2016-10128 CVE-2016-10129 CVE-2016-10130
CVE-2017-5338 CVE-2017-5339
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1411857 - CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 libgit2: Two vulnerabilities fixed in libgit 0.25.1 and 0.24.6
https://bugzilla.redhat.com/show_bug.cgi?id=1411857
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.3.14-1.el7 (FEDORA-EPEL-2017-741dccac7f)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest
upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest
upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest
upstream. ---- Latest upstream. ---- Include fedmsg.d/mbs-scheduler.py by
default. ---- Branch for EPEL7. ---- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.5-1.el7 (FEDORA-EPEL-2017-5794ee2486)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Update for multiple CVEs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434721 - CVE-2017-2641 CVE-2017-2643 CVE-2017-2644 CVE-2017-2645 moodle: Multiple security vulnerabilities [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1434721
--------------------------------------------------------------------------------
================================================================================
perl-Boulder-1.30-26.el7 (FEDORA-EPEL-2017-41cd2f7540)
An API for hierarchical tag/value structures
--------------------------------------------------------------------------------
Update Information:
Boulder provides a simple stream-oriented format for transmitting data objects
between one or more processes. It does not provide for the serialization of
Perl objects the way FreezeThaw or Data::Dumper do, but it does provide the
advantage of being language independent.
--------------------------------------------------------------------------------
================================================================================
perl-Cflow-1.053-32.el7 (FEDORA-EPEL-2017-923b46d38d)
Find flows in raw IP flow files
--------------------------------------------------------------------------------
Update Information:
Cflow with flow-tools support. This module implements an API for processing IP
flow accounting information which as been collected from routers and written
into flow files.
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.1.2-1.el7 (FEDORA-EPEL-2017-8d8a6dc66e)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.1.2** * bug #2580 NoSpacesAfterFunctionNameFixer - Fix after
dynamic call (SpacePossum, keradus) * bug #2586 NoUnusedImportsFixerTest -
handle FQCN import (keradus) * bug #2587 NoClosingTagFixerTest - handle file
without operations (keradus, SpacePossum) * minor #2552 Initial compatibility
with PHP 7.2-DEV (keradus) * minor #2582 Improve AppVeyor and Travis CI build
time (julienfalque) * minor #2584 NoUnreachableDefaultArgumentValueFixer - fix
typo (chadburrus) * minor #2593 PhpUnitFqcnAnnotationFixer - move test to proper
namespace (keradus) * minor #2596 AppVeyor - update PHP versions (keradus)
**Changelog for v2.1.1** * bug #2547 NoUnneededControlParenthesesFixer - Handle
T_COALESCE in clone (keksa) * bug #2557 BracesFixer - Better comments handling
(SpacePossum) * bug #2558 require symfony/polyfill-xml (SpacePossum) * bug #2560
PhpdocNoAliasTagFixer - Fix circular replacements detection (julienfalque) * bug
#2567 Filename with spaces usage (jaymecd) * bug #2572
NoUnreachableDefaultArgumentValueFixer - Mark as risky (SpacePossum) * minor
#2533 AppVeyor - adjust phpunit version (keradus) * minor #2535 Make .gitignore
entries more specific (julienfalque) * minor #2541 README.rst - provide download
link for latest version (keradus) * minor #2562 Add schema.json (keradus) *
minor #2563 Add deprecation notices tests (julienfalque) * minor #2564 Add rules
configuration by passing json encode config by CLI (SpacePossum) * minor #2569
Make symfony/phpunit-bridge a dev dependency only (julienfalque) * minor #2574
Add xml.xsd (keradus)
--------------------------------------------------------------------------------
================================================================================
php-justinrainbow-json-schema5-5.2.0-1.el7 (FEDORA-EPEL-2017-4534b24bc7)
A library to validate a json schema
--------------------------------------------------------------------------------
Update Information:
A PHP Implementation for validating JSON Structures against a given Schema.
This package provides the library version 5. See http://json-schema.org/
Autoloader: /usr/share/php/JsonSchema5/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428926 - Review Request: php-justinrainbow-json-schema5 - A library to validate a json schema
https://bugzilla.redhat.com/show_bug.cgi?id=1428926
--------------------------------------------------------------------------------
================================================================================
python-ansible-tower-cli-3.1.3-1.el7 (FEDORA-EPEL-2017-7248a9a459)
A CLI tool for Ansible Tower
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434636 - python-ansible-tower-cli-v3.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434636
--------------------------------------------------------------------------------
================================================================================
python-packaging-16.8-5.el7 (FEDORA-EPEL-2017-346f47abad)
Core utilities for Python packages
--------------------------------------------------------------------------------
Update Information:
Epel7 compatible spec/package
--------------------------------------------------------------------------------
================================================================================
rktime-0.6-3.el7 (FEDORA-EPEL-2017-18a5ed8f15)
Multi-zone time display utility
--------------------------------------------------------------------------------
Update Information:
A command-line utility which displays the time in multiple timezones in an easy-
to-read way, using color to help indicate which locations are currently in
business hours.
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.03.22-1.el7 (FEDORA-EPEL-2017-8ae8d5b01f)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Updates to the latest release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424672 - youtube-dl-2017.03.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1424672
--------------------------------------------------------------------------------