The following Fedora EPEL 7 Security updates need testing:
Age URL
319
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
81
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
45
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f82c6fc04a
p7zip-15.09-4.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dd35749dd3
wordpress-4.4.1-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-43613cf75a
keepassx-0.4.4-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e34ffdd692
prosody-0.9.9-2.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-273a82f7db
owncloud-8.0.10-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-551b68b67a
moodle-3.0.2-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8da165e1bb
mbedtls-2.2.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6f526f521d
python-rsa-3.3-2.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-043f77342d
cgit-0.12-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-418a480529
gsi-openssh-6.6.1p1-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ProDy-1.7.1-3.el7
ari-backup-1.0.12-1.el7
awscli-1.9.21-1.el7
codec2-0.5-1.el7
erlang-R16B-03.13.el7
freedv-1.1-4.el7
libnatpmp-20150609-1.el7
mozilla-requestpolicy-1.0-0.13.20160102gitc27c1f.el7
mysql-mmm-2.2.1-14.el7
osbs-client-0.16-1.el7
php-SymfonyCmfRouting-1.3.0-4.el7
php-interfasys-lognormalizer-1.0-1.el7
php-league-flysystem-1.0.16-1.el7
php-mcnetic-zipstreamer-0.7-1.el7
php-mtdowling-jmespath-php-2.3.0-1.el7
php-nette-bootstrap-2.3.4-1.el7
php-owncloud-tarstreamer-0.1-0.1.beta3.el7
php-scssphp-0.4.0-1.el7
python-botocore-1.3.21-1.el7
python-inifile-0.3-2.el7
python3-chardet-2.3.0-3.el7
qbittorrent-3.3.3-1.el7
qt5-qtbase-5.5.1-11.el7
qtlockedfile-2.4-20.20150629git5a07df5.el7
qtsingleapplication-2.6.1-26.el7
rubygem-journey-1.0.4-9.el7
rubygem-rack-cache-1.2-7.el7
rubygem-rack-protection-1.5.3-3.el7
s3cmd-1.6.1-1.el7
seamonkey-2.39-2.el7
transmission-2.84-10.el7
Details about builds:
================================================================================
ProDy-1.7.1-3.el7 (FEDORA-EPEL-2016-6fce12e575)
Application for protein structure, dynamics and sequence analysis
--------------------------------------------------------------------------------
Update Information:
- New package
--------------------------------------------------------------------------------
================================================================================
ari-backup-1.0.12-1.el7 (FEDORA-EPEL-2016-660c5d2118)
A helpful wrapper around rdiff-backup
--------------------------------------------------------------------------------
Update Information:
Raise to version 1.0.12, a bugfix release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300516 - ari-backup-1.0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1300516
--------------------------------------------------------------------------------
================================================================================
awscli-1.9.21-1.el7 (FEDORA-EPEL-2016-c576a00844)
Universal Command Line Environment for AWS
--------------------------------------------------------------------------------
Update Information:
Small update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1297989 - awscli-1.9.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297989
[ 2 ] Bug #1298925 - python-botocore-1.3.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1298925
--------------------------------------------------------------------------------
================================================================================
codec2-0.5-1.el7 (FEDORA-EPEL-2016-d007a8affa)
Next-Generation Digital Voice for Two-Way Radio
--------------------------------------------------------------------------------
Update Information:
Initial package release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1278638 - Review Request: freedv - FreeDV Digital Voice
https://bugzilla.redhat.com/show_bug.cgi?id=1278638
--------------------------------------------------------------------------------
================================================================================
erlang-R16B-03.13.el7 (FEDORA-EPEL-2016-72955321ca)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
* fix inet_dist_listen_{min,max} for ipv6 * Add patch for epmd ipv6 support
---- * Enable crash dump creation during a large distrubution error
--------------------------------------------------------------------------------
================================================================================
freedv-1.1-4.el7 (FEDORA-EPEL-2016-d007a8affa)
FreeDV Digital Voice
--------------------------------------------------------------------------------
Update Information:
Initial package release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1278638 - Review Request: freedv - FreeDV Digital Voice
https://bugzilla.redhat.com/show_bug.cgi?id=1278638
--------------------------------------------------------------------------------
================================================================================
libnatpmp-20150609-1.el7 (FEDORA-EPEL-2016-949b0c7348)
Library of The NAT Port Mapping Protocol (NAT-PMP)
--------------------------------------------------------------------------------
Update Information:
Update libnatpmp to support unbundling it from transmission. Patch transmission
gtk interface glitch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288861 - Transmission interface glitch
https://bugzilla.redhat.com/show_bug.cgi?id=1288861
[ 2 ] Bug #1264292 - Unbundle libnatpmp
https://bugzilla.redhat.com/show_bug.cgi?id=1264292
[ 3 ] Bug #1229934 - libnatpmp-20150609 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1229934
--------------------------------------------------------------------------------
================================================================================
mozilla-requestpolicy-1.0-0.13.20160102gitc27c1f.el7 (FEDORA-EPEL-2016-b8475f8fb8)
Firefox and Seamonkey extension that gives you control over cross-site requests
--------------------------------------------------------------------------------
Update Information:
- Update to v1.0.beta11pre4
--------------------------------------------------------------------------------
================================================================================
mysql-mmm-2.2.1-14.el7 (FEDORA-EPEL-2016-4ec36e55e1)
Multi-Master Replication Manager for MySQL
--------------------------------------------------------------------------------
Update Information:
Really apply patch for #1169914 this time
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1169914 - mysql-mmm bug with newer Net::ARP version numbers
https://bugzilla.redhat.com/show_bug.cgi?id=1169914
--------------------------------------------------------------------------------
================================================================================
osbs-client-0.16-1.el7 (FEDORA-EPEL-2016-1ed3c10dfa)
Python command line client for OpenShift Build Service
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.16.
--------------------------------------------------------------------------------
================================================================================
php-SymfonyCmfRouting-1.3.0-4.el7 (FEDORA-EPEL-2016-75a7ee7cd0)
Extends the Symfony2 routing component for dynamic routes and chaining
--------------------------------------------------------------------------------
Update Information:
- `php-composer(*)` virtual provide dependencies instead of direct package names
- Dropped max version build dependencies - Increased Symfony min version from
2.2 to 2.3.31/2.7.3 for autoloaders - Added
"`php-{COMPOSER_VENDOR}-{COMPOSER_PROJECT}`"
("`php-symfony-cmf-routing`")
virtual provide - Suggest `php-composer(symfony/event-dispatcher)` instead of
require - Added autoloader
--------------------------------------------------------------------------------
================================================================================
php-interfasys-lognormalizer-1.0-1.el7 (FEDORA-EPEL-2016-56f7c7209d)
Parses variables and converts them to string
--------------------------------------------------------------------------------
Update Information:
Parses variables and converts them to string so that they can be logged. Based
on the Monolog formatter/normalizer. Autoloader:
/usr/share/php/InterfaSys/LogNormalizer/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1298649 - Review Request: php-interfasys-lognormalizer - Parses variables and
converts them to string
https://bugzilla.redhat.com/show_bug.cgi?id=1298649
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.16-1.el7 (FEDORA-EPEL-2016-223d61d41a)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
Flysystem is a filesystem abstraction which allows you to easily swap out a
local filesystem for a remote one. Autoloader:
/usr/share/php/League/Flysystem/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1298475 - Review Request: php-league-flysystem - Filesystem abstraction: Many
filesystems, one API
https://bugzilla.redhat.com/show_bug.cgi?id=1298475
--------------------------------------------------------------------------------
================================================================================
php-mcnetic-zipstreamer-0.7-1.el7 (FEDORA-EPEL-2016-f2107c60da)
Stream zip files without i/o overhead
--------------------------------------------------------------------------------
Update Information:
Simple Class to create zip files on the fly and stream directly to the HTTP
client as the content is added (without using temporary files). Autoloader:
/usr/share/php/ZipStreamer/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1296901 - Review Request: php-mcnetic-zipstreamer - Stream zip files without
i/o overhead
https://bugzilla.redhat.com/show_bug.cgi?id=1296901
--------------------------------------------------------------------------------
================================================================================
php-mtdowling-jmespath-php-2.3.0-1.el7 (FEDORA-EPEL-2016-34e2e27699)
Declaratively specify how to extract elements from a JSON document
--------------------------------------------------------------------------------
Update Information:
## 2.3.0 - 2016-01-05 * Added support for
[
JEP-9](https://github.com/jmespath/jmespath.site/blob/master/docs/proposals
/improved-filters.rst), including unary filter expressions, and `&&` filter
expressions. * Fixed various parsing issues, including not removing escaped
single quotes from raw string literals. * Added support for the `map`
function. * Fixed several issues with code generation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295982 - php-mtdowling-jmespath-php-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1295982
--------------------------------------------------------------------------------
================================================================================
php-nette-bootstrap-2.3.4-1.el7 (FEDORA-EPEL-2016-577bbe1de7)
Nette Bootstrap
--------------------------------------------------------------------------------
Update Information:
Loads Nette Framework and all libraries. Class Configurator creates so called
DI container and handles application initialization. To use this library, you
just have to add, in your project: require_once
'/usr/share/php/Nette/Bootstrap/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277476 - Review Request: php-nette-bootstrap - Nette Bootstrap
https://bugzilla.redhat.com/show_bug.cgi?id=1277476
--------------------------------------------------------------------------------
================================================================================
php-owncloud-tarstreamer-0.1-0.1.beta3.el7 (FEDORA-EPEL-2016-3fc1891837)
Streaming dynamic tar files
--------------------------------------------------------------------------------
Update Information:
A library for dynamically streaming dynamic tar files without the need to have
the complete file stored on the server. Autoloader:
/usr/share/php/ownCloud/TarStreamer/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1296939 - Review Request: php-owncloud-tarstreamer - Streaming dynamic tar
files
https://bugzilla.redhat.com/show_bug.cgi?id=1296939
--------------------------------------------------------------------------------
================================================================================
php-scssphp-0.4.0-1.el7 (FEDORA-EPEL-2016-c27b133124)
A compiler for SCSS written in PHP
--------------------------------------------------------------------------------
Update Information:
### v0.4.0 #### Breaking Changes: - Parser: remove deprecated `show()` and
`to()` methods - Parser, Compiler: convert stdClass to Block, Node, and
OutputBlock abstractions - Compiler: 2nd argument passed to user registered
functions now receive kwargs instead of a Compiler instance #### Enhancements:
- New control directives: `@break`, `@continue`, and naked `@return` - New
operator: `<=>` (spaceship) operator #### Compatibility Fixes: - Compiler:
`index()` - coerce first argument to list - Compiler/Parser: fix `@media` nested
in mixin - Compiler: output literal string instead of division-by-zero exception
- Compiler: `str-slice()` - handle negative index - Compiler: pass kwargs to
built-ins and user registered functions ### v0.3.3 #### Enhancements: -
Compiler: add `getVariables()` and `addFeature()` API methods ####
Compatibility: - Compiler: can pass negative indices to `nth()` and `set-nth()`
- Compiler: can pass map as args to mixin expecting varargs - Compiler: add
coerceList(map) - Compiler: improve `@at-root` support - Nested formatter:
suppress empty blocks #### Internals: - Parser, Compiler: refactoring
sourceParser to sourceIndex to facilitate future caching of parse tree
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1274939 - php-scssphp-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1274939
--------------------------------------------------------------------------------
================================================================================
python-botocore-1.3.21-1.el7 (FEDORA-EPEL-2016-c576a00844)
Low-level, data-driven core of boto 3
--------------------------------------------------------------------------------
Update Information:
Small update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1297989 - awscli-1.9.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297989
[ 2 ] Bug #1298925 - python-botocore-1.3.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1298925
--------------------------------------------------------------------------------
================================================================================
python-inifile-0.3-2.el7 (FEDORA-EPEL-2016-18c1b36a18)
A small INI library for Python
--------------------------------------------------------------------------------
Update Information:
Library required for Lektor framework
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1299558 - Review Request: python-inifile - A small INI library for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1299558
--------------------------------------------------------------------------------
================================================================================
python3-chardet-2.3.0-3.el7 (FEDORA-EPEL-2016-ca5fc259d5)
Character encoding auto-detection in Python
--------------------------------------------------------------------------------
Update Information:
Character encoding auto-detection in Python. As smart as your browser. Open
source.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294714 - Review Request: python3-chardet - Character encoding auto-detection
in Python
https://bugzilla.redhat.com/show_bug.cgi?id=1294714
--------------------------------------------------------------------------------
================================================================================
qbittorrent-3.3.3-1.el7 (FEDORA-EPEL-2016-61b4cc6668)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300126 - qbittorrent-3.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1300126
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.5.1-11.el7 (FEDORA-EPEL-2016-62ce5a7b3f)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
Rebuild for newer system xcb libraries (and proper keyboard mapping)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295713 - Non-US keys don't work with qt5-qtbase under Xvnc (tigervnc) on
RHEL6 and RHEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1295713
--------------------------------------------------------------------------------
================================================================================
qtlockedfile-2.4-20.20150629git5a07df5.el7 (FEDORA-EPEL-2016-d404e9c4cf)
QFile extension with advisory locking functions
--------------------------------------------------------------------------------
Update Information:
Rebuild
--------------------------------------------------------------------------------
================================================================================
qtsingleapplication-2.6.1-26.el7 (FEDORA-EPEL-2016-30ab5679b4)
Qt library to start applications only once per user
--------------------------------------------------------------------------------
Update Information:
Rebuild
--------------------------------------------------------------------------------
================================================================================
rubygem-journey-1.0.4-9.el7 (FEDORA-EPEL-2016-1b3628f05c)
Journey is a router
--------------------------------------------------------------------------------
Update Information:
Ported to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-cache-1.2-7.el7 (FEDORA-EPEL-2016-fc72a70c30)
HTTP Caching for Rack
--------------------------------------------------------------------------------
Update Information:
Ported to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-protection-1.5.3-3.el7 (FEDORA-EPEL-2016-6652fa0abe)
Ruby gem that protects against typical web attacks
--------------------------------------------------------------------------------
Update Information:
Updated for EPEL7 requirements
--------------------------------------------------------------------------------
================================================================================
s3cmd-1.6.1-1.el7 (FEDORA-EPEL-2016-cb118d5a90)
Tool for accessing Amazon Simple Storage Service
--------------------------------------------------------------------------------
Update Information:
upstream 1.6.1
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.39-2.el7 (FEDORA-EPEL-2016-967a71fd7f)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Release SeaMonkey for EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1197491 - SeaMonkey is currently unavailable on EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1197491
--------------------------------------------------------------------------------
================================================================================
transmission-2.84-10.el7 (FEDORA-EPEL-2016-949b0c7348)
A lightweight GTK+ BitTorrent client
--------------------------------------------------------------------------------
Update Information:
Update libnatpmp to support unbundling it from transmission. Patch transmission
gtk interface glitch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288861 - Transmission interface glitch
https://bugzilla.redhat.com/show_bug.cgi?id=1288861
[ 2 ] Bug #1264292 - Unbundle libnatpmp
https://bugzilla.redhat.com/show_bug.cgi?id=1264292
[ 3 ] Bug #1229934 - libnatpmp-20150609 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1229934
--------------------------------------------------------------------------------