The following Fedora EPEL 7 Security updates need testing:
Age URL
507
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
269
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
32
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e0c08a1414
php-PHPMailer-5.2.16-2.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-767125139f
python34-3.4.3-5.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6eebbe7e97
p7zip-16.02-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7913c4c81c
breeze-icon-theme-5.24.0-1.el7 extra-cmake-modules-5.24.0-1.el7 kf5-5.24.0-1.el7
kf5-attica-5.24.0-1.el7 kf5-baloo-5.24.0-1.el7 kf5-bluez-qt-5.24.0-1.el7
kf5-frameworkintegration-5.24.0-1.el7 kf5-kactivities-5.24.0-1.el7
kf5-kactivities-stats-5.24.0-1.el7 kf5-kapidox-5.24.0-1.el7 kf5-karchive-5.24.0-1.el7
kf5-kauth-5.24.0-1.el7 kf5-kbookmarks-5.24.0-1.el7 kf5-kcmutils-5.24.0-1.el7
kf5-kcodecs-5.24.0-1.el7 kf5-kcompletion-5.24.0-1.el7 kf5-kconfig-5.24.0-1.el7
kf5-kconfigwidgets-5.24.0-1.el7 kf5-kcoreaddons-5.24.0-1.el7 kf5-kcrash-5.24.0-1.el7
kf5-kdbusaddons-5.24.0-1.el7 kf5-kdeclarative-5.24.0-1.el7 kf5-kded-5.24.0-1.el7
kf5-kdelibs4support-5.24.0-1.el7 kf5-kdesignerplugin-5.24.0-1.el7 kf5-kdesu-5.24.0-1.el7
kf5-kdewebkit-5.24.0-1.el7 kf5-kdnssd-5.24.0-1.el7 kf5-kdoctools-5.24.0-1.el7
kf5-kemoticons-5.24.0-1.el7 kf5-kfilemetadata-5.24.0-1.el7 kf5-kglobalaccel-5.24.0-1.el7
kf5-kguiaddons-5.24.0-1.el7 kf5-khtml
-5.24.0-1.el7 kf5-ki18n-5.24.0-1.el7 kf5-kiconthemes-5.24.0-1.el7
kf5-kidletime-5.24.0-1.el7 kf5-kimageformats-5.24.0-1.el7 kf5-kinit-5.24.0-1.el7
kf5-kio-5.24.0-1.el7 kf5-kitemmodels-5.24.0-1.el7 kf5-kitemviews-5.24.0-1.el7
kf5-kjobwidgets-5.24.0-1.el7 kf5-kjs-5.24.0-1.el7 kf5-kjsembed-5.24.0-1.el7
kf5-kmediaplayer-5.24.0-1.el7 kf5-knewstuff-5.24.0-1.el7 kf5-knotifications-5.24.0-1.el7
kf5-knotifyconfig-5.24.0-1.el7 kf5-kpackage-5.24.0-1.el7 kf5-kparts-5.24.0-1.el7
kf5-kpeople-5.24.0-1.el7 kf5-kplotting-5.24.0-1.el7 kf5-kpty-5.24.0-1.el7
kf5-kross-5.24.0-1.el7 kf5-krunner-5.24.0-1.el7 kf5-kservice-5.24.0-1.el7
kf5-ktexteditor-5.24.0-1.el7 kf5-ktextwidgets-5.24.0-1.el7
kf5-kunitconversion-5.24.0-1.el7 kf5-kwallet-5.24.0-1.el7 kf5-kwidgetsaddons-5.24.0-1.el7
kf5-kwindowsystem-5.24.0-1.el7 kf5-kxmlgui-5.24.0-1.el7 kf5-kxmlrpcclient-5.24.0-1.el7
kf5-modemmanager-qt-5.24.0-1.el7 kf5-networkmanager-qt-5.24.0-1.el7
kf5-plasma-5.24.0-1.el7 kf5-solid-5.24.0-1.el7 kf5-sonnet-5.24.0-1.el7 kf5
-threadweaver-5.24.0-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3a667cc289
php-guzzlehttp-guzzle-5.3.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-fbf24e04bd
drupal7-views-3.14-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-76bb0cb040
php-doctrine-common-2.5.3-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-20572dde69
dropbear-2016.74-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d6a70b113f
collectd-5.5.2-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-42ecf5c111
v8-3.14.5.10-25.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ac6030a9e9
cryptopp-5.6.2-10.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dbaaa35f43
lighttpd-1.4.40-4.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
SDL2_net-2.0.1-2.el7
collectd-5.5.2-1.el7
collectl-4.0.5-1.el7
cryptopp-5.6.2-10.el7
dpm-dsi-1.9.7-7.el7
dropbear-2016.74-1.el7
duplicity-0.7.09-1.1.el7
duply-1.11.3-1.el7
globus-ftp-control-7.2-1.el7
globus-gridftp-server-11.1-1.el7
glpi-0.90.5-1.el7
golang-github-jessevdk-go-flags-0-0.7.gitf2785f5.el7
golang-googlecode-text-0-0.13.git6fc2e00.el7
kobo-0.5.2-1.el7
lighttpd-1.4.40-4.el7
mcrypt-2.6.8-11.el7
ovirt-guest-agent-1.0.12-4.el7
php-bartlett-php-compatinfo-db-1.11.0-1.el7
php-onelogin-php-saml-2.9.1-3.el7
php-phpunit-PHPUnit-4.8.27-1.el7
php-udan11-sql-parser-3.4.4-1.el7
python-fmn-consumer-1.0.3-1.el7
python-fmn-lib-0.8.2-1.el7
python-fmn-rules-0.9.0-1.el7
v8-3.14.5.10-25.el7
vym-2.5.19-1.el7
zabbix22-2.2.14-1.el7
Details about builds:
================================================================================
SDL2_net-2.0.1-2.el7 (FEDORA-EPEL-2016-46d2a9229b)
SDL portable network library
--------------------------------------------------------------------------------
Update Information:
Initial SDL2_net build for EPEL 7.
--------------------------------------------------------------------------------
================================================================================
collectd-5.5.2-1.el7 (FEDORA-EPEL-2016-d6a70b113f)
Statistics collection daemon for filling RRD files
--------------------------------------------------------------------------------
Update Information:
- Upstream released new version (
https://collectd.org/news.shtml#news98) -
Contains fix for CVE-2016-6254 - Drop a few patches applied upstream - Use
Type=notify in systemd unit now that collectd support it. - Enable zfs_arc
plugin (#1359669)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359669 - RFE: add support for zfs_arc plugin for collectd
https://bugzilla.redhat.com/show_bug.cgi?id=1359669
--------------------------------------------------------------------------------
================================================================================
collectl-4.0.5-1.el7 (FEDORA-EPEL-2016-5fec54170f)
A utility to collect various Linux performance data
--------------------------------------------------------------------------------
Update Information:
updated to 4.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356745 - collectl-4.0.5.src is available
https://bugzilla.redhat.com/show_bug.cgi?id=1356745
--------------------------------------------------------------------------------
================================================================================
cryptopp-5.6.2-10.el7 (FEDORA-EPEL-2016-ac6030a9e9)
C++ class library of cryptographic schemes
--------------------------------------------------------------------------------
Update Information:
- CVE-2016-3995
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325951 - CVE-2016-3995 cryptopp: bogus protection from timing attacks
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1325951
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.7-7.el7 (FEDORA-EPEL-2016-53805c3cb3)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control * Add buffering to data ordering mode globus-gridftp-server
* Fix forced order issues with restart (11.1) * Add forced ordering option
(11.0) * Add Globus task id to transfer log (10.6) * Don't errantly kill a
transfer due to timeout while client is still connected (10.5) dpm-dsi *
Rebuilt for globus-gridftp-server 11.1
--------------------------------------------------------------------------------
================================================================================
dropbear-2016.74-1.el7 (FEDORA-EPEL-2016-20572dde69)
Lightweight SSH server and client
--------------------------------------------------------------------------------
Update Information:
new version ---- CVE-2016-3116 dropbear: X11 forwarding input not validated
properly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359635 - dropbear: Multiple security issues fixed in 2016.74
https://bugzilla.redhat.com/show_bug.cgi?id=1359635
--------------------------------------------------------------------------------
================================================================================
duplicity-0.7.09-1.1.el7 (FEDORA-EPEL-2016-8216bfdf81)
Encrypted bandwidth-efficient backup using rsync algorithm
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359548 - duplicity-0.7.09 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1359548
--------------------------------------------------------------------------------
================================================================================
duply-1.11.3-1.el7 (FEDORA-EPEL-2016-8e43691fb4)
Wrapper for duplicity
--------------------------------------------------------------------------------
Update Information:
Latest release, fixes deprecation warning.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1360193 - Duply triggers duplicity deprecation warning when excluding files
(since duplicity upgrade)
https://bugzilla.redhat.com/show_bug.cgi?id=1360193
--------------------------------------------------------------------------------
================================================================================
globus-ftp-control-7.2-1.el7 (FEDORA-EPEL-2016-53805c3cb3)
Globus Toolkit - GridFTP Control Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control * Add buffering to data ordering mode globus-gridftp-server
* Fix forced order issues with restart (11.1) * Add forced ordering option
(11.0) * Add Globus task id to transfer log (10.6) * Don't errantly kill a
transfer due to timeout while client is still connected (10.5) dpm-dsi *
Rebuilt for globus-gridftp-server 11.1
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-11.1-1.el7 (FEDORA-EPEL-2016-53805c3cb3)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control * Add buffering to data ordering mode globus-gridftp-server
* Fix forced order issues with restart (11.1) * Add forced ordering option
(11.0) * Add Globus task id to transfer log (10.6) * Don't errantly kill a
transfer due to timeout while client is still connected (10.5) dpm-dsi *
Rebuilt for globus-gridftp-server 11.1
--------------------------------------------------------------------------------
================================================================================
glpi-0.90.5-1.el7 (FEDORA-EPEL-2016-6a963cbce0)
Free IT asset management software
--------------------------------------------------------------------------------
Update Information:
Upgrade from old version 0.84 to latest upstream maintained version 0.90.
**Notice:** this version drops the support for OCS Inventory NG, if needed, you
have to install the [ocsinventoryng](http://plugins.glpi-
project.org/#/plugin/ocsinventoryng) plugin.
--------------------------------------------------------------------------------
================================================================================
golang-github-jessevdk-go-flags-0-0.7.gitf2785f5.el7 (FEDORA-EPEL-2016-df23b8d98f)
Go command line option parser
--------------------------------------------------------------------------------
Update Information:
Bump to upstream f2785f5820ec967043de79c8be97edfc464ca745
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250487 - Tracker for golang-github-jessevdk-go-flags
https://bugzilla.redhat.com/show_bug.cgi?id=1250487
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-text-0-0.13.git6fc2e00.el7 (FEDORA-EPEL-2016-d4f9bf2d32)
Supplementary Go text libraries
--------------------------------------------------------------------------------
Update Information:
Enable devel and unit-test ---- Polishing the spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1254601 - Tracker for golang-googlecode-text
https://bugzilla.redhat.com/show_bug.cgi?id=1254601
--------------------------------------------------------------------------------
================================================================================
kobo-0.5.2-1.el7 (FEDORA-EPEL-2016-929a79e528)
Python modules for tools development
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream.
--------------------------------------------------------------------------------
================================================================================
lighttpd-1.4.40-4.el7 (FEDORA-EPEL-2016-dbaaa35f43)
Lightning fast webserver with light system requirements
--------------------------------------------------------------------------------
Update Information:
Patch for CVE-2016-1000212. ---- Connection state patch. ---- Patch for ipv6
blocking bug. ---- 1.4.40
https://www.lighttpd.net/2016/7/16/1.4.40/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1360641 - CVE-2016-1000212 lighttpd: sets environmental variable based on
user supplied Proxy request header [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1360641
[ 2 ] Bug #1360640 - CVE-2016-1000212 lighttpd: sets environmental variable based on
user supplied Proxy request header [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1360640
[ 3 ] Bug #1357238 - lighttpd-1.4.40 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1357238
--------------------------------------------------------------------------------
================================================================================
mcrypt-2.6.8-11.el7 (FEDORA-EPEL-2016-f6c714ab8e)
Replacement for crypt()
--------------------------------------------------------------------------------
Update Information:
New package for EL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1357685 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1357685
--------------------------------------------------------------------------------
================================================================================
ovirt-guest-agent-1.0.12-4.el7 (FEDORA-EPEL-2016-4f7f85fe25)
The oVirt Guest Agent
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 1.0.12.2 and dependency fix on F24
--------------------------------------------------------------------------------
================================================================================
php-bartlett-php-compatinfo-db-1.11.0-1.el7 (FEDORA-EPEL-2016-97860fac75)
Reference Database to be used with php-compatinfo library
--------------------------------------------------------------------------------
Update Information:
**Version 1.11.0** - 2016-07-25 - Support to PHP 7.0.9 - Support to PHP 5.6.24
- Support to PHP 5.5.38
--------------------------------------------------------------------------------
================================================================================
php-onelogin-php-saml-2.9.1-3.el7 (FEDORA-EPEL-2016-81dff2c066)
SAML support for PHP
--------------------------------------------------------------------------------
Update Information:
New package used for PHP interfaces to SAML authentication services
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356552 - Review Request: php-onelogin-php-saml - SAML support for PHP
softwares
https://bugzilla.redhat.com/show_bug.cgi?id=1356552
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-4.8.27-1.el7 (FEDORA-EPEL-2016-cf8d6058c7)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 4.8.27** - 2016-07-21 * Fixed
[#1968](https://github.com/sebastianbergmann/phpunit/issues/1968): Invalid data
sets are not handled correctly for `@testWith` annotation
--------------------------------------------------------------------------------
================================================================================
php-udan11-sql-parser-3.4.4-1.el7 (FEDORA-EPEL-2016-2671f99a1a)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
- update to 3.4.4 - switch from udan11/sql-parser to phpmyadmin/sql-parser - add
sql-parser-highlight-query and sql-parser-lint-query commands
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342512 - Outdated dependency on sql-parser
https://bugzilla.redhat.com/show_bug.cgi?id=1342512
--------------------------------------------------------------------------------
================================================================================
python-fmn-consumer-1.0.3-1.el7 (FEDORA-EPEL-2016-360d4ef294)
Backend worker daemon for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Bugfix to fmn-lib and fmn-rules and new architecture to fmn-consumer
--------------------------------------------------------------------------------
================================================================================
python-fmn-lib-0.8.2-1.el7 (FEDORA-EPEL-2016-360d4ef294)
Internal API components and model for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Bugfix to fmn-lib and fmn-rules and new architecture to fmn-consumer
--------------------------------------------------------------------------------
================================================================================
python-fmn-rules-0.9.0-1.el7 (FEDORA-EPEL-2016-360d4ef294)
Message processing rules for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Bugfix to fmn-lib and fmn-rules and new architecture to fmn-consumer
--------------------------------------------------------------------------------
================================================================================
v8-3.14.5.10-25.el7 (FEDORA-EPEL-2016-42ecf5c111)
JavaScript Engine
--------------------------------------------------------------------------------
Update Information:
fix for CVE-2016-1669, fix for builtin reporting, add provides for v8-314
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1353623 - CVE-2016-1669 v8: chromium-browser,v8,nodejs: buffer overflow in v8
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1353623
[ 2 ] Bug #1353620 - CVE-2016-1669 v8: chromium-browser,v8,nodejs: buffer overflow in v8
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1353620
--------------------------------------------------------------------------------
================================================================================
vym-2.5.19-1.el7 (FEDORA-EPEL-2016-75d0cae8b7)
View your mind
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359465 - vym-2.5.19-1.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1359465
--------------------------------------------------------------------------------
================================================================================
zabbix22-2.2.14-1.el7 (FEDORA-EPEL-2016-cf904307bf)
Open-source monitoring solution for your IT infrastructure
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn2.2.14.php
--------------------------------------------------------------------------------