The following Fedora EPEL 7 Security updates need testing:
Age URL
922
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
684
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
266
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
164
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
162
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
161
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
64
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843
heimdal-7.4.0-1.el7
28
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-17b77b3268
botan-1.10.16-1.el7
23
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fc1436acf8
dnsdist-1.2.0-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8f80d01c29
chromium-60.0.3112.113-2.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-29c9f4e49e
freexl-1.0.0i-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-dadbc43983
mimedefang-2.81-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2e4b6b7b5c
lightdm-1.18.3-5.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-59c79d3a8a
google-api-python-client-1.6.3-1.el7 python-httplib2-0.9.2-0.1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7bdf242c17
drupal7-views-3.18-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-10553ac5bd
ReviewBoard-2.5.16-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
copr-cli-1.63-1.el7
idm-console-framework-1.1.17-4.el7
libburn1-1.4.8-1.el7
libisoburn-1.4.8-1.el7
libisofs1-1.4.8-1.el7
module-build-service-1.3.28-1.el7
nodejs-rhea-0.2.4-1.el7
polkit-gnome-0.106-0.1.20170423gita0763a2.el7
prename-1.9-5.el7
python-copr-1.81-1.el7
python-graphitesend-0.10.0-3.el7
rubygem-aws-sigv4-1.0.2-1.el7
ssdeep-2.14-1.el7
Details about builds:
================================================================================
copr-cli-1.63-1.el7 (FEDORA-EPEL-2017-5e1f7e4fbd)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- fix unittests - run tests with python3 - pag#130 update requirements - pag#125
copr build copr pkgs [pkgs ...] builds only the first SRPM - pag#112 [RFE] copr-
cli whoami - Bug 1431035 - coprs should check credentials before uploading
source rpm - Spelling fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431035 - coprs should check credentials before uploading source rpm
https://bugzilla.redhat.com/show_bug.cgi?id=1431035
--------------------------------------------------------------------------------
================================================================================
idm-console-framework-1.1.17-4.el7 (FEDORA-EPEL-2017-cec2fcb8ae)
Identity Management Console Framework
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.1.17-4
--------------------------------------------------------------------------------
================================================================================
libburn1-1.4.8-1.el7 (FEDORA-EPEL-2017-65beea126f)
Library for reading, mastering and writing optical discs
--------------------------------------------------------------------------------
Update Information:
libisofs 1.4.8 ============== * Bug fix: iso_read_opts_set_no_rockridge() did
not prevent reading of root SUSP. * Bug fix: Non-SUSP data in System Use Area
prevented image loading if Rock Ridge was enabled. Thanks to Jonathan Dowland.
* Bug fix: Protective MBR for GPT could emerge with boot flag set. * Bug fix:
Appended partitions of size >= 4 GiB led to abort with error message "FATAL :
ISO overwrite". Thanks to Sven Haardiek. * Bug fix: Bit 15 of
iso_write_opts_set_system_area did not work with generic MBR. * Bug fix:
Keeping and patching of loaded boot images failed. Regression by version 1.4.4.
* Bug fix: Program crashes by intentionally wrong ISO image input. Found by
American Fuzzy Lop and Jakub Wilk. Debian bug reports: 872372, 872475, 872545,
872590, 872761. * New API calls el_torito_set_full_load(),
el_torito_get_full_load(). * New API call
iso_write_opts_set_iso_mbr_part_type(). libburn and cdrskin 1.4.8
========================= * Bug fix: Option -dummy did not affect writing by
direct_write_amount= * New API call burn_drive_reset_simulate() * New API
call burn_drive_get_bd_r_pow() * Refusing to write to BD-R if formatted to
Pseudo Overwrite libisoburn and xorriso 1.4.8 ============================
* Bug fix: -as mkisofs -no-emul-boot without -boot-load-size defaulted to size
4, instead of full boot image size * Bug fix: -read_fs "norock" did not
prevent reading of root Rock Ridge info * Bug fix: Mix of absolute and
relative disk paths could cause SIGSEGV with pattern expansion * Bug fix:
--mbr-force-bootable did not get into effect with -append_partition * Bug fix:
Exit value of failed -mount command was reported as 0 * Bug fix: -boot_image
actions "keep" and "patch" did not work any more. Regression by
libisofs 1.4.4.
* New -find tests -maxdepth and -mindepth * New commands -update_lxi and
-update_li * New API calls isoburn_igopt_set_iso_mbr_part_type(),
isoburn_igopt_get_iso_mbr_part_type() * New -boot_image bootspec
iso_mbr_part_type= * New -as mkisofs option -iso_mbr_part_type * New -as
mkisofs option -eltorito-platform * Properly refusing on Pseudo Overwritable
formatted BD-R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1491482 - libisoburn-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491482
[ 2 ] Bug #1491478 - libburn-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491478
[ 3 ] Bug #1491483 - libisofs-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491483
--------------------------------------------------------------------------------
================================================================================
libisoburn-1.4.8-1.el7 (FEDORA-EPEL-2017-65beea126f)
Library to enable creation and expansion of ISO-9660 filesystems
--------------------------------------------------------------------------------
Update Information:
libisofs 1.4.8 ============== * Bug fix: iso_read_opts_set_no_rockridge() did
not prevent reading of root SUSP. * Bug fix: Non-SUSP data in System Use Area
prevented image loading if Rock Ridge was enabled. Thanks to Jonathan Dowland.
* Bug fix: Protective MBR for GPT could emerge with boot flag set. * Bug fix:
Appended partitions of size >= 4 GiB led to abort with error message "FATAL :
ISO overwrite". Thanks to Sven Haardiek. * Bug fix: Bit 15 of
iso_write_opts_set_system_area did not work with generic MBR. * Bug fix:
Keeping and patching of loaded boot images failed. Regression by version 1.4.4.
* Bug fix: Program crashes by intentionally wrong ISO image input. Found by
American Fuzzy Lop and Jakub Wilk. Debian bug reports: 872372, 872475, 872545,
872590, 872761. * New API calls el_torito_set_full_load(),
el_torito_get_full_load(). * New API call
iso_write_opts_set_iso_mbr_part_type(). libburn and cdrskin 1.4.8
========================= * Bug fix: Option -dummy did not affect writing by
direct_write_amount= * New API call burn_drive_reset_simulate() * New API
call burn_drive_get_bd_r_pow() * Refusing to write to BD-R if formatted to
Pseudo Overwrite libisoburn and xorriso 1.4.8 ============================
* Bug fix: -as mkisofs -no-emul-boot without -boot-load-size defaulted to size
4, instead of full boot image size * Bug fix: -read_fs "norock" did not
prevent reading of root Rock Ridge info * Bug fix: Mix of absolute and
relative disk paths could cause SIGSEGV with pattern expansion * Bug fix:
--mbr-force-bootable did not get into effect with -append_partition * Bug fix:
Exit value of failed -mount command was reported as 0 * Bug fix: -boot_image
actions "keep" and "patch" did not work any more. Regression by
libisofs 1.4.4.
* New -find tests -maxdepth and -mindepth * New commands -update_lxi and
-update_li * New API calls isoburn_igopt_set_iso_mbr_part_type(),
isoburn_igopt_get_iso_mbr_part_type() * New -boot_image bootspec
iso_mbr_part_type= * New -as mkisofs option -iso_mbr_part_type * New -as
mkisofs option -eltorito-platform * Properly refusing on Pseudo Overwritable
formatted BD-R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1491482 - libisoburn-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491482
[ 2 ] Bug #1491478 - libburn-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491478
[ 3 ] Bug #1491483 - libisofs-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491483
--------------------------------------------------------------------------------
================================================================================
libisofs1-1.4.8-1.el7 (FEDORA-EPEL-2017-65beea126f)
Library to create ISO 9660 disk images
--------------------------------------------------------------------------------
Update Information:
libisofs 1.4.8 ============== * Bug fix: iso_read_opts_set_no_rockridge() did
not prevent reading of root SUSP. * Bug fix: Non-SUSP data in System Use Area
prevented image loading if Rock Ridge was enabled. Thanks to Jonathan Dowland.
* Bug fix: Protective MBR for GPT could emerge with boot flag set. * Bug fix:
Appended partitions of size >= 4 GiB led to abort with error message "FATAL :
ISO overwrite". Thanks to Sven Haardiek. * Bug fix: Bit 15 of
iso_write_opts_set_system_area did not work with generic MBR. * Bug fix:
Keeping and patching of loaded boot images failed. Regression by version 1.4.4.
* Bug fix: Program crashes by intentionally wrong ISO image input. Found by
American Fuzzy Lop and Jakub Wilk. Debian bug reports: 872372, 872475, 872545,
872590, 872761. * New API calls el_torito_set_full_load(),
el_torito_get_full_load(). * New API call
iso_write_opts_set_iso_mbr_part_type(). libburn and cdrskin 1.4.8
========================= * Bug fix: Option -dummy did not affect writing by
direct_write_amount= * New API call burn_drive_reset_simulate() * New API
call burn_drive_get_bd_r_pow() * Refusing to write to BD-R if formatted to
Pseudo Overwrite libisoburn and xorriso 1.4.8 ============================
* Bug fix: -as mkisofs -no-emul-boot without -boot-load-size defaulted to size
4, instead of full boot image size * Bug fix: -read_fs "norock" did not
prevent reading of root Rock Ridge info * Bug fix: Mix of absolute and
relative disk paths could cause SIGSEGV with pattern expansion * Bug fix:
--mbr-force-bootable did not get into effect with -append_partition * Bug fix:
Exit value of failed -mount command was reported as 0 * Bug fix: -boot_image
actions "keep" and "patch" did not work any more. Regression by
libisofs 1.4.4.
* New -find tests -maxdepth and -mindepth * New commands -update_lxi and
-update_li * New API calls isoburn_igopt_set_iso_mbr_part_type(),
isoburn_igopt_get_iso_mbr_part_type() * New -boot_image bootspec
iso_mbr_part_type= * New -as mkisofs option -iso_mbr_part_type * New -as
mkisofs option -eltorito-platform * Properly refusing on Pseudo Overwritable
formatted BD-R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1491482 - libisoburn-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491482
[ 2 ] Bug #1491478 - libburn-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491478
[ 3 ] Bug #1491483 - libisofs-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1491483
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.3.28-1.el7 (FEDORA-EPEL-2017-1db0646bc6)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Latest upstream. - Optional Kerberos + LDAP Authentication for the server. -
Correct "filtering" at build time: conflict with packages filtered out from the
build-requires to ensure they won't appear in a buildroot. - Wait for components
to be tagged also in final tag before marking module as done. This should fix
an issue for the F27 compose. - Local mock builds no longer hardcode`x86_64` for
architecture. ---- Latest upstream. ---- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
nodejs-rhea-0.2.4-1.el7 (FEDORA-EPEL-2017-a8f167bebf)
A reactive messaging library based on the AMQP protocol
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.2.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433338 - nodejs-rhea-0.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1433338
--------------------------------------------------------------------------------
================================================================================
polkit-gnome-0.106-0.1.20170423gita0763a2.el7 (FEDORA-EPEL-2017-f9ad3d10e9)
PolicyKit integration for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Update to the latest git snapshot for improved locale support.
--------------------------------------------------------------------------------
================================================================================
prename-1.9-5.el7 (FEDORA-EPEL-2017-ef80a18735)
Perl script to rename multiple files
--------------------------------------------------------------------------------
Update Information:
Fix for EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482997 - Review Request: prename - Perl script to rename multiple files
https://bugzilla.redhat.com/show_bug.cgi?id=1482997
--------------------------------------------------------------------------------
================================================================================
python-copr-1.81-1.el7 (FEDORA-EPEL-2017-5e1f7e4fbd)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
- fix unittests - run tests with python3 - pag#130 update requirements - pag#125
copr build copr pkgs [pkgs ...] builds only the first SRPM - pag#112 [RFE] copr-
cli whoami - Bug 1431035 - coprs should check credentials before uploading
source rpm - Spelling fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431035 - coprs should check credentials before uploading source rpm
https://bugzilla.redhat.com/show_bug.cgi?id=1431035
--------------------------------------------------------------------------------
================================================================================
python-graphitesend-0.10.0-3.el7 (FEDORA-EPEL-2017-b4172ff270)
Easy python bindings to write to Carbon
--------------------------------------------------------------------------------
Update Information:
Fix epel7 dependency: python2-gevent -> python-gevent ---- Fix epel7
dependency: python2-gevent -> python-gevent ---- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1490068 - Review Request: python-graphitesend - Easy python bindings to write
to Carbon
https://bugzilla.redhat.com/show_bug.cgi?id=1490068
--------------------------------------------------------------------------------
================================================================================
rubygem-aws-sigv4-1.0.2-1.el7 (FEDORA-EPEL-2017-6271f0d278)
AWS Signature Version 4 library
--------------------------------------------------------------------------------
Update Information:
Amazon Web Services Signature Version 4 signing library. Generates sigv4
signature for HTTP requests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474301 - Review Request: rubygem-aws-sigv4 - AWS Signature Version 4
library
https://bugzilla.redhat.com/show_bug.cgi?id=1474301
--------------------------------------------------------------------------------
================================================================================
ssdeep-2.14-1.el7 (FEDORA-EPEL-2017-02eabbb8ee)
Compute context triggered piecewise hashes
--------------------------------------------------------------------------------
Update Information:
** Version 2.14** - 12 Sep 2017 * New Features - Optimizations to the
fuzzy hashing engine. (hash generator can run as twice as fast and comparison
can run 1.5 through 5 times faster [heavily depends on the data and platform]
than the previous release) * Bug Fixes - Fixed issue when certain memory
allocation is failed.
--------------------------------------------------------------------------------