The following Fedora EPEL 7 Security updates need testing:
Age URL
974
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
736
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
318
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
216
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
213
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
48
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
45
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b8147c68
openvpn-auth-ldap-2.0.3-15.el7
31
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3c06a7eecf
nagios-4.3.4-3.el7
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1e541e27e9
nginx-1.12.2-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-37b21f1a51
seamonkey-2.49.1-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-21fb9891af
modulemd-1.3.2-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f576d1826a
nodejs-6.11.5-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-95bf973a7d
wordpress-4.8.3-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5e4edb1320
fedpkg-1.30-3.el7 rpkg-1.51-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-020fe6e5ac
rubygem-ox-2.4.11-3.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-30026fdcc1
hostapd-2.6-6.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-01fce22094
php-PHPMailer-5.2.26-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
CGSI-gSOAP-1.3.10-7.el7
atop-2.3.0-3.el7
blueberry-1.1.17-1.el7
hostapd-2.6-6.el7
lightdm-settings-1.1.3-1.el7
module-build-service-1.4.5-1.el7
perl-Email-Simple-2.214-1.el7
perl-Finance-Quote-1.41-1.el7
php-PHPMailer-5.2.26-1.el7
rpkg-client-0.12-1.el7
slick-greeter-1.1.0-1.el7
the_silver_searcher-2.1.0-1.el7
yamllint-1.10.0-1.el7
Details about builds:
================================================================================
CGSI-gSOAP-1.3.10-7.el7 (FEDORA-EPEL-2017-4aeee8647f)
GSI plugin for gSOAP
--------------------------------------------------------------------------------
Update Information:
Adapt to a change in globus-gsi-credential.
--------------------------------------------------------------------------------
================================================================================
atop-2.3.0-3.el7 (FEDORA-EPEL-2017-f7b1be04d2)
An advanced interactive monitor to view the load on system and process level
--------------------------------------------------------------------------------
Update Information:
2.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509943 - Update to version 2.3.0
https://bugzilla.redhat.com/show_bug.cgi?id=1509943
--------------------------------------------------------------------------------
================================================================================
blueberry-1.1.17-1.el7 (FEDORA-EPEL-2017-2c6943741c)
Bluetooth configuration tool
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509725 - blueberry-1.1.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1509725
--------------------------------------------------------------------------------
================================================================================
hostapd-2.6-6.el7 (FEDORA-EPEL-2017-30026fdcc1)
IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
--------------------------------------------------------------------------------
Update Information:
Latest hostapd release with KRACK patches applied.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1503874 - KRACK affects hostapd
https://bugzilla.redhat.com/show_bug.cgi?id=1503874
[ 2 ] Bug #1502588 - CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080
CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 hostapd:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1502588
[ 3 ] Bug #1468942 - attempting to create Access Point overrides modprobe for wifi and
crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1468942
--------------------------------------------------------------------------------
================================================================================
lightdm-settings-1.1.3-1.el7 (FEDORA-EPEL-2017-55eb1f5ea8)
Configuration tool for the LightDM display manager
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509947 - lightdm-settings-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1509947
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.4.5-1.el7 (FEDORA-EPEL-2017-816505f8cf)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Fix a bug when resuming module builds that failed during the init state
--------------------------------------------------------------------------------
================================================================================
perl-Email-Simple-2.214-1.el7 (FEDORA-EPEL-2017-f884843a7a)
Simple parsing of RFC2822 message format and headers
--------------------------------------------------------------------------------
Update Information:
Update to 2.214.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485309 - [Request] Package upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=1485309
--------------------------------------------------------------------------------
================================================================================
perl-Finance-Quote-1.41-1.el7 (FEDORA-EPEL-2017-967e14970f)
A Perl module that retrieves stock and mutual fund quotes
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release. Various sources fixed, new source
AlphaVantage added.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509722 - perl-Finance-Quote-1.40 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1509722
--------------------------------------------------------------------------------
================================================================================
php-PHPMailer-5.2.26-1.el7 (FEDORA-EPEL-2017-01fce22094)
PHP email transport class with a lot of features
--------------------------------------------------------------------------------
Update Information:
**Version 5.2.26** (November 4th 2017) * Minor security backport from 6.0 - set
Debugoutput in constructor according to SAPI in use, avoiding potential XSS in
default debug output.
--------------------------------------------------------------------------------
================================================================================
rpkg-client-0.12-1.el7 (FEDORA-EPEL-2017-da15e3a7ca)
RPM packaging utitility
--------------------------------------------------------------------------------
Update Information:
- respect hashtype from the sources file if any ---- - set default distgit
target to
src.fedoraproject.org - fix downloading sources for any-length-
namespace modules - make the whole lookaside url template explict in the
config file - rename 'rpkg' config section to 'distgit' - update in
command
descriptions ---- - possibility to give directory to --spec - also take --spec
in account for rpmdefines - update spec descriptions - added is-packed
subcommand - try reading ~/.config/rpkg before /etc/rpkg - add unittests - for
source downloading, try both url formats with/without hashtype - add make-
source subcommand - patch srpm to generate Source0 if unpacked content -
override load_ns_module_name to work with any length namespaces - added --spec
for srpm, make-source, and copr-build - fixed tagging not to include host dist
tag - docs update - make all config values optional
--------------------------------------------------------------------------------
================================================================================
slick-greeter-1.1.0-1.el7 (FEDORA-EPEL-2017-d6758dc5ed)
A slick-looking LightDM greeter
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509759 - slick-greeter-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1509759
--------------------------------------------------------------------------------
================================================================================
the_silver_searcher-2.1.0-1.el7 (FEDORA-EPEL-2017-7e4afe5854)
Super-fast text searching tool (ag)
--------------------------------------------------------------------------------
Update Information:
update to 2.1.0
--------------------------------------------------------------------------------
================================================================================
yamllint-1.10.0-1.el7 (FEDORA-EPEL-2017-14b759df04)
A linter for YAML files
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------