The following Fedora EPEL 7 Security updates need testing:
Age URL
928
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
690
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
272
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
170
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
168
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
167
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
34
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-17b77b3268
botan-1.10.16-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-59c79d3a8a
google-api-python-client-1.6.3-1.el7 python-httplib2-0.9.2-0.1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7bdf242c17
drupal7-views-3.18-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-10553ac5bd
ReviewBoard-2.5.16-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9f88067c22
mpg123-1.25.6-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2795d59fcc
python3-numpy-1.10.4-5.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-30a9c74908
php-horde-Horde-Image-2.5.2-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5b07cc6958
wordpress-4.8.2-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8da6477f0a
moodle-3.1.8-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3a2abe4898
php-horde-passwd-5.0.7-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a3ae700da7
php-horde-wicked-2.0.8-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d49c1ef800
php-horde-nag-4.2.17-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b8147c68
openvpn-auth-ldap-2.0.3-15.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
abook-0.6.1-2.el7
bodhi-2.11.0-1.el7
gsmartcontrol-1.1.0-2.el7
homebank-5.1.6-2.el7
icemon-3.1.0-5.el7
mate-themes-3.22.14-1.el7
module-build-service-1.3.30-2.el7
moodle-3.1.8-1.el7
openvpn-auth-ldap-2.0.3-15.el7
php-horde-nag-4.2.17-1.el7
php-horde-passwd-5.0.7-1.el7
php-horde-wicked-2.0.8-1.el7
proftpd-1.3.5e-3.el7
python-ldap3-2.3-2.el7
rakudo-URI-0.1.4-0.1.20170920gite5c8551.el7
transtats-cli-0.1.0-3.el7
Details about builds:
================================================================================
abook-0.6.1-2.el7 (FEDORA-EPEL-2017-1812b18f17)
Text-based addressbook program for mutt
--------------------------------------------------------------------------------
Update Information:
Text-based address book program.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1492297 - please create an epel7 package for abook
https://bugzilla.redhat.com/show_bug.cgi?id=1492297
--------------------------------------------------------------------------------
================================================================================
bodhi-2.11.0-1.el7 (FEDORA-EPEL-2017-6aac4b31d3)
A modular framework that facilitates publishing software updates
--------------------------------------------------------------------------------
Update Information:
Update to [
bodhi-2.11.0](https://github.com/fedora-
infra/bodhi/releases/tag/2.11.0).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493587 - bodhi-2.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493587
--------------------------------------------------------------------------------
================================================================================
gsmartcontrol-1.1.0-2.el7 (FEDORA-EPEL-2017-49d0d44929)
Graphical user interface for smartctl
--------------------------------------------------------------------------------
Update Information:
Drop consolehelper. ---- Update to 1.1.0.
--------------------------------------------------------------------------------
================================================================================
homebank-5.1.6-2.el7 (FEDORA-EPEL-2017-1a0ad30789)
Free easy personal accounting for all
--------------------------------------------------------------------------------
Update Information:
Update to 5.1.6
--------------------------------------------------------------------------------
================================================================================
icemon-3.1.0-5.el7 (FEDORA-EPEL-2017-9884c72a89)
Icecream GUI monitor
--------------------------------------------------------------------------------
Update Information:
New package for epel7
--------------------------------------------------------------------------------
================================================================================
mate-themes-3.22.14-1.el7 (FEDORA-EPEL-2017-41f8dbd068)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- update to 3.22.14
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.3.30-2.el7 (FEDORA-EPEL-2017-64dc34f346)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Latest upstream. ---- Some fixes: -
https://pagure.io/fm-orchestrator/pull-
request/698 -
https://pagure.io/fm-orchestrator/pull-request/697 -
https://pagure.io/fm-orchestrator/pull-request/693 -
https://pagure.io/fm-
orchestrator/pull-request/692 -
https://pagure.io/fm-orchestrator/pull-
request/691 ---- Latest upstream. - Optional Kerberos + LDAP Authentication
for the server. - Correct "filtering" at build time: conflict with packages
filtered out from the build-requires to ensure they won't appear in a buildroot.
- Wait for components to be tagged also in final tag before marking module as
done. This should fix an issue for the F27 compose. - Local mock builds no
longer hardcode`x86_64` for architecture. ---- Latest upstream. ---- Latest
upstream.
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.8-1.el7 (FEDORA-EPEL-2017-8da6477f0a)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Patches for CVE-2017-12156, CVE-2017-12157. ---- Bundling corrections.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493515 - CVE-2017-12156 CVE-2017-12157 moodle: Multiple vulnerabilities
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1493515
[ 2 ] Bug #1493516 - CVE-2017-12156 CVE-2017-12157 moodle: Multiple vulnerabilities
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1493516
[ 3 ] Bug #1489208 - EPEL moodle 3.1.x doesn't load tcpdf/tcpdf.php
https://bugzilla.redhat.com/show_bug.cgi?id=1489208
[ 4 ] Bug #1489197 - EPEL moodle-3.1.x must use bundled php-pear-HTML*
https://bugzilla.redhat.com/show_bug.cgi?id=1489197
--------------------------------------------------------------------------------
================================================================================
openvpn-auth-ldap-2.0.3-15.el7 (FEDORA-EPEL-2017-52b8147c68)
OpenVPN plugin for LDAP authentication
--------------------------------------------------------------------------------
Update Information:
Include patch to fix binding before STARTTLS has completed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1489559 - openvpn LDAP plugin binds before StartTLS
https://bugzilla.redhat.com/show_bug.cgi?id=1489559
--------------------------------------------------------------------------------
================================================================================
php-horde-nag-4.2.17-1.el7 (FEDORA-EPEL-2017-d49c1ef800)
A web based task list manager
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.17** * [jan] SECURITY: Fix unauthorized access to task exports. *
[jan] Fix regression when exporting single tags to iCalendar CATEGORIES. * [jan]
Officially support PHP 7.
--------------------------------------------------------------------------------
================================================================================
php-horde-passwd-5.0.7-1.el7 (FEDORA-EPEL-2017-3a2abe4898)
Horde password changing application
--------------------------------------------------------------------------------
Update Information:
**passwd 5.0.7** * [jan] Officially support PHP 7. * [jan] SECURITY: Fix open
redirects.
--------------------------------------------------------------------------------
================================================================================
php-horde-wicked-2.0.8-1.el7 (FEDORA-EPEL-2017-a3ae700da7)
Wiki application
--------------------------------------------------------------------------------
Update Information:
**wicked 2.0.8** * [jan] SECURITY: Fix unauthorized access to page attachments.
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.5e-3.el7 (FEDORA-EPEL-2017-9a435fc191)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This update adds a proftpd-sqlite package, to add SQLite to the SQL database
support in addition to the existing support for MySQL and PostgreSQL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493448 - Please build proftpd in EPEL7 (and Fedora) with sqlite support
https://bugzilla.redhat.com/show_bug.cgi?id=1493448
--------------------------------------------------------------------------------
================================================================================
python-ldap3-2.3-2.el7 (FEDORA-EPEL-2017-a801b41423)
Strictly RFC 4511 conforming LDAP V3 pure Python client
--------------------------------------------------------------------------------
Update Information:
Fixup wrong requires in egg ---- Update to version 2.3
--------------------------------------------------------------------------------
================================================================================
rakudo-URI-0.1.4-0.1.20170920gite5c8551.el7 (FEDORA-EPEL-2017-3f1f20ada8)
Perl 6 realization of URI
--------------------------------------------------------------------------------
Update Information:
add initial build
--------------------------------------------------------------------------------
================================================================================
transtats-cli-0.1.0-3.el7 (FEDORA-EPEL-2017-2c59a13726)
Transtats command line interface to query transtats server
--------------------------------------------------------------------------------
Update Information:
Add man page to transtats-cli
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1489383 - Review Request: transtats-cli - Transtats command line interface to
query server
https://bugzilla.redhat.com/show_bug.cgi?id=1489383
--------------------------------------------------------------------------------