The following Fedora EPEL 7 Security updates need testing:
Age URL
893
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
656
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
238
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
135
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
134
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
133
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843
heimdal-7.4.0-1.el7
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c4e53cc90d
chicken-4.12.0-3.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-017fbc40e8
supervisor-3.1.4-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8683c5e591
potrace-1.15-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-816da4b59a
ReviewBoard-2.5.15-1.el7 python-djblets-0.9.9-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b69fde3111
mingw-libsoup-2.56.1-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a1d2b25c25
php-PHPMailer-5.2.24-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9bf7bf3989
mingw-gdk-pixbuf-2.36.8-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5344219d81
bodhi-2.9.1-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-17b77b3268
botan-1.10.16-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4a0b7bf8d6
chromium-60.0.3112.101-2.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-07d2039ffa
redis-3.2.10-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
PyDrive-1.3.1-2.el7
bodhi-2.9.1-1.el7
botan-1.10.16-1.el7
chromium-60.0.3112.101-2.el7
configsnap-0.13-1.el7
duplicity-0.7.13.1-2.el7
fedfind-3.6.0-1.el7
fedpkg-1.29-1.el7
fedrepo-req-1.3.0-1.el7
fedrepo-req-1.4.0-1.el7
google-api-python-client-1.6.2-3.el7
google-authenticator-1.04-1.el7
hd-idle-1.05-4.el7
hdf5-1.8.12-9.el7
jpype-0.6.2-2.el7
libmediainfo-0.7.98-1.el7
libzen-0.4.36-1.el7
lirc-0.10.0-2.el7
mediainfo-0.7.98-1.el7
nodejs-6.11.2-1.2.el7
pam_afs_session-2.6-5.el7
perl-Statistics-Descriptive-3.0612-6.el7
php-horde-nag-4.2.16-1.el7
preeny-0.1-3.el7
python-assimulo-2.9-15.el7
python-fedmsg-meta-fedora-infrastructure-0.20.0-1.el7
python-sphinx_rtd_theme-0.2.4-2.el7.0
qt-creator-4.1.0-3.el7
rancid-3.2-3.el7
redis-3.2.10-2.el7
rpkg-1.50-1.el7
tcl-tclnagios-1.3-4.el7
torque-4.2.10-11.el7
youtube-dl-2017.08.13-1.el7
Details about builds:
================================================================================
PyDrive-1.3.1-2.el7 (FEDORA-EPEL-2017-2f281be7ca)
A wrapper library of google-api-python-client for Google Drive API tasks
--------------------------------------------------------------------------------
Update Information:
Support Google Drive in duplicity
--------------------------------------------------------------------------------
================================================================================
bodhi-2.9.1-1.el7 (FEDORA-EPEL-2017-5344219d81)
A modular framework that facilitates publishing software updates
--------------------------------------------------------------------------------
Update Information:
Update to [
2.9.0](https://github.com/fedora-infra/bodhi/releases/tag/2.9.0).
Depend on filesystem instead of bash-completion. bodhi-server now depends on
bodhi-client. Update to [
2.9.1](https://github.com/fedora-
infra/bodhi/releases/tag/2.9.1), which addresses
[
CVE-2017-1002152](https://github.com/fedora-infra/bodhi/issues/1740).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477579 - bodhi-2.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1477579
[ 2 ] Bug #1479341 - bodhi-client ��� 2.9.0 hard-requires bash-completion
https://bugzilla.redhat.com/show_bug.cgi?id=1479341
[ 3 ] Bug #1479456 - bodhi-manage-releases needs bodhi-client, but bodhi-server
doesn't require bodhi-client
https://bugzilla.redhat.com/show_bug.cgi?id=1479456
[ 4 ] Bug #1478587 - Bodhi: Javascript injection in detail view
https://bugzilla.redhat.com/show_bug.cgi?id=1478587
--------------------------------------------------------------------------------
================================================================================
botan-1.10.16-1.el7 (FEDORA-EPEL-2017-17b77b3268)
Crypto library written in C++
--------------------------------------------------------------------------------
Update Information:
#### Version 1.10.16, 2017-04-04 #### * Fix a bug in X509 DN string comparisons
that could result in out of bound reads. This could result in information
leakage, denial of service, or potentially incorrect certificate validation
results. (CVE-2017-2801) * Avoid throwing during a destructor since this is
undefined in C++11 and rarely a good idea. [GH
#930](https://github.com/randombit/botan/issues/930) #### Version 1.10.15,
2017-01-12 #### * Fix a bug causing modular exponentiations done modulo even
numbers to almost always be incorrect, unless the values were small. This bug is
not known to affect any cryptographic operation in Botan. [GH
#754](https://github.com/randombit/botan/issues/754) * Avoid use of C++11
std::to_string in some code added in 1.10.14 [GH
#747](https://github.com/randombit/botan/issues/747) [GH
#834](https://github.com/randombit/botan/issues/834)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441126 - CVE-2017-2801 botan: Incorrect comparison in X.509 DN strings
https://bugzilla.redhat.com/show_bug.cgi?id=1441126
--------------------------------------------------------------------------------
================================================================================
chromium-60.0.3112.101-2.el7 (FEDORA-EPEL-2017-4a0b7bf8d6)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 60.0.3112.101. Apply upstream fix for cameras reporting 0x0 resolution
formats. ---- Chromium 60. Security fix for CVE-2017-5091, CVE-2017-5092,
CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097,
CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102,
CVE-2017-5103, CVE-2017-5104, CVE-2017-7000, CVE-2017-5105, CVE-2017-5106,
CVE-2017-5107, CVE-2017-5108, CVE-2017-5109, CVE-2017-5110. New subpackage
-headless.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475213 - CVE-2017-5110 chromium-browser: ui spoofing in payments dialog
https://bugzilla.redhat.com/show_bug.cgi?id=1475213
[ 2 ] Bug #1475212 - CVE-2017-5109 chromium-browser: ui spoofing in browser
https://bugzilla.redhat.com/show_bug.cgi?id=1475212
[ 3 ] Bug #1475211 - CVE-2017-5108 chromium-browser: type confusion in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1475211
[ 4 ] Bug #1475210 - CVE-2017-5107 chromium-browser: user information leak via svg
https://bugzilla.redhat.com/show_bug.cgi?id=1475210
[ 5 ] Bug #1475209 - CVE-2017-5106 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475209
[ 6 ] Bug #1475208 - CVE-2017-5105 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475208
[ 7 ] Bug #1475207 - CVE-2017-7000 chromium-browser: pointer disclosure in sqlite
https://bugzilla.redhat.com/show_bug.cgi?id=1475207
[ 8 ] Bug #1475206 - CVE-2017-5104 chromium-browser: ui spoofing in browser
https://bugzilla.redhat.com/show_bug.cgi?id=1475206
[ 9 ] Bug #1475205 - CVE-2017-5103 chromium-browser: uninitialized use in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475205
[ 10 ] Bug #1475204 - CVE-2017-5102 chromium-browser: uninitialized use in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475204
[ 11 ] Bug #1475203 - CVE-2017-5101 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475203
[ 12 ] Bug #1475202 - CVE-2017-5100 chromium-browser: use after free in chrome apps
https://bugzilla.redhat.com/show_bug.cgi?id=1475202
[ 13 ] Bug #1475201 - CVE-2017-5099 chromium-browser: out-of-bounds write in ppapi
https://bugzilla.redhat.com/show_bug.cgi?id=1475201
[ 14 ] Bug #1475200 - CVE-2017-5098 chromium-browser: use after free in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1475200
[ 15 ] Bug #1475199 - CVE-2017-5097 chromium-browser: out-of-bounds read in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475199
[ 16 ] Bug #1475198 - CVE-2017-5096 chromium-browser: user information leak via android
intents
https://bugzilla.redhat.com/show_bug.cgi?id=1475198
[ 17 ] Bug #1475197 - CVE-2017-5095 chromium-browser: out-of-bounds write in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1475197
[ 18 ] Bug #1475196 - CVE-2017-5094 chromium-browser: type confusion in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1475196
[ 19 ] Bug #1475195 - CVE-2017-5093 chromium-browser: ui spoofing in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1475195
[ 20 ] Bug #1475194 - CVE-2017-5092 chromium-browser: use after free in ppapi
https://bugzilla.redhat.com/show_bug.cgi?id=1475194
[ 21 ] Bug #1475193 - CVE-2017-5091 chromium-browser: use after free in indexeddb
https://bugzilla.redhat.com/show_bug.cgi?id=1475193
--------------------------------------------------------------------------------
================================================================================
configsnap-0.13-1.el7 (FEDORA-EPEL-2017-a39b2391e4)
Record and compare system state
--------------------------------------------------------------------------------
Update Information:
Update to 0.13
--------------------------------------------------------------------------------
================================================================================
duplicity-0.7.13.1-2.el7 (FEDORA-EPEL-2017-2f281be7ca)
Encrypted bandwidth-efficient backup using rsync algorithm
--------------------------------------------------------------------------------
Update Information:
Support Google Drive in duplicity
--------------------------------------------------------------------------------
================================================================================
fedfind-3.6.0-1.el7 (FEDORA-EPEL-2017-e5322164df)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This update adds support for the new modular composes, with 'Fedora-Modular' as
their shortnames. Currently only Rawhide and Branched nightly modular composes
are supported. ---- This new version of fedfind handles an unusual situation
where its local cache directory (which is usually `~/.cache/fedfind`, but can be
a temporary directory if that location is not writeable) disappears during the
lifetime of a fedfind-using process. Previously, this would cause the process to
crash, as fedfind wasn't written to handle this eventuality. There are no other
changes in this update.
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.29-1.el7 (FEDORA-EPEL-2017-2c5c94bf8c)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
# Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
# rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and
description of new-sources and upload commands - 1248737 (cqi) - Set
autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals
(cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode
with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) -
Make tests and covered code compatible with Py3 (cqi) - Add requirements files
(cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests
(cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when
rpmbuild fails in local command (cqi) - Report deprecation of config via logger
(lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.3.0-1.el7 (FEDORA-EPEL-2017-2bf593c298)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Bumps to version 1.3.0 ---- Initial release ---- Initial Release ----
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
[ 2 ] Bug #1469331 - Review Request: fedrepo-req - A CLI tool that provides an easy way
to submit ticket requests for packaging tasks in Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=1469331
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.4.0-1.el7 (FEDORA-EPEL-2017-868a70ab41)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Updates to v1.4.0. The client tool is mostly unchanged except that it has a few
usability improvements such as having a man page and telling users to read the
README if they haven't configured the client tool. The admin tool has a few
enhancements and bug fixes that are listed in git.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
--------------------------------------------------------------------------------
================================================================================
google-api-python-client-1.6.2-3.el7 (FEDORA-EPEL-2017-2f281be7ca)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
Support Google Drive in duplicity
--------------------------------------------------------------------------------
================================================================================
google-authenticator-1.04-1.el7 (FEDORA-EPEL-2017-ee06e06227)
One-time pass-code support using open standards
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream
--------------------------------------------------------------------------------
================================================================================
hd-idle-1.05-4.el7 (FEDORA-EPEL-2017-1dd7cbbf3f)
Spin down idle [USB] hard disks
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
================================================================================
hdf5-1.8.12-9.el7 (FEDORA-EPEL-2017-66660355c3)
A general purpose library and file format for storing scientific data
--------------------------------------------------------------------------------
Update Information:
Enable szip compression via libaec.
--------------------------------------------------------------------------------
================================================================================
jpype-0.6.2-2.el7 (FEDORA-EPEL-2017-649532bda2)
Full access for Python programs to Java class libraries
--------------------------------------------------------------------------------
Update Information:
- reenable python2 ---- bump to version 0.6.2 - disable generation of
documentation due to strange bug in RHEL7 - Fix JVM location for OSX. -
Fix a method overload bug. - Add support for synthetic methods
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476689 - jpype - new version 0.6.2 available
https://bugzilla.redhat.com/show_bug.cgi?id=1476689
--------------------------------------------------------------------------------
================================================================================
libmediainfo-0.7.98-1.el7 (FEDORA-EPEL-2017-5e286547a1)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.98.
--------------------------------------------------------------------------------
================================================================================
libzen-0.4.36-1.el7 (FEDORA-EPEL-2017-5e286547a1)
Shared library for libmediainfo and medianfo*
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.98.
--------------------------------------------------------------------------------
================================================================================
lirc-0.10.0-2.el7 (FEDORA-EPEL-2017-b29bef7216)
The Linux Infrared Remote Control package
--------------------------------------------------------------------------------
Update Information:
* lib/curl_poll.h: Fix header guard build error on m��sl libc. * Build: Mute
libtool when V=0, typo. * Update driver version info. * lircmd: Don't write on
non-existing socket (#295). * VPATH build fixes (#294). * Don't distribute
generated files (#294). * Portability fixes for python tests in python-pkg/test.
* Portability fixes and some docs for unit tests in test/ dir. * Build fixes for
kfreebsd debian builds. * Documentation update. * Fixed lirc-setup fail-on-start
(#290). * Make python unit tests work on Debian (#289). * Fix mode2 config file
parsing [292]. * Documentation update. * Build fixes. * lircd: The deprecated
--uinput option is dropped. Use the lircd-uinput(8) * daemon instead. * lircd:
The --release option is deprecated. * lircd: Adding a --immediate-init option
which initiates the hardware directly on start and exits on errors. * lircd,
lircd-uinput: Change default release suffix due to linux kernel changes (#263).
* The slinke (a. k. a. slink-e) driver is dropped. * plugins: Add support for
irdroid in the irtoy driver. * plugins: Enhanced device enumeration, mode2
--list-devices works for most drivers. * New, shiny (i. e., unstable) python
API. See the API docs, module "python bindings". The API is also available as a
pypi package, typically at /usr/share/lirc/python-pkg * lircd-uinput: Multiple
config file parsing errors (#284). * The configs/*conf files no more supports
enumerating devices using shell scripts. * Added enumeration support and server
version level check to driver API. * irrecord: Add --driver-options for lircd
symmetry (#277). * lircd: Fix devices not connected at first attempt (#279). *
lib: Fix failure when parsing absolute paths config files (#281). *
lircd/irsend: Fix bug when sending/receiving concurrently for some remotes
(#278, 5 pages!) * lircd:Fix missing systemd support due to upstream changes
(#274). * Build: Added new configure --enable-devinput option (#264). * Build:
Added new configure --enable-uinput option, ditched HAVE_UINPUT 0.9.4c cludge. *
Build: More quiet, enhanced V=0/V=1 support. * ftdi driver: Fix off-by-2 timings
(#275). * devinput driver: Fix bad codelength (#263). * OSX patches(#273)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1180838 - broken package dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1180838
--------------------------------------------------------------------------------
================================================================================
mediainfo-0.7.98-1.el7 (FEDORA-EPEL-2017-5e286547a1)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.98.
--------------------------------------------------------------------------------
================================================================================
nodejs-6.11.2-1.2.el7 (FEDORA-EPEL-2017-1788cd6310)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Temporarily bundle http-parser until CentOS 7.4 is released.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481470 - requires missing http-parser
https://bugzilla.redhat.com/show_bug.cgi?id=1481470
--------------------------------------------------------------------------------
================================================================================
pam_afs_session-2.6-5.el7 (FEDORA-EPEL-2017-6ef17ae5fd)
AFS PAG and AFS tokens on login
--------------------------------------------------------------------------------
Update Information:
Update to 2.6 upstream release. See the [upstream release
notes](https://www.eyrie.org/~eagle/software/pam-afs-session/news.html) for more
details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482691 - please upgrade to pam_afs_session 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1482691
--------------------------------------------------------------------------------
================================================================================
perl-Statistics-Descriptive-3.0612-6.el7 (FEDORA-EPEL-2017-308d0de0af)
Perl module of basic descriptive statistical functions
--------------------------------------------------------------------------------
Update Information:
Added to EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479090 - perl-Statistics-Descriptive missing in epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1479090
--------------------------------------------------------------------------------
================================================================================
php-horde-nag-4.2.16-1.el7 (FEDORA-EPEL-2017-a2b2852890)
A web based task list manager
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.16** * [jan] Fix parsing sub-tasks from the quick enter dialog (Bug
#14681). * [jan] Fix positioning of due time drop down list (Bug #12288). *
[jan] Improve compatibilty when synchronizing tasks via CalDAV/ICS (Bug #14057).
* [jan] Fix exporting multiple tags to iCalendar CATEGORIES (Bug #14057). *
[jan] Don't include external tasks into drop down list for parent tasks. * [jan]
Fix redirecting to task list after completing a task (Bug #14678). ---- **nag
4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed
start dates (Bug #14634).
--------------------------------------------------------------------------------
================================================================================
preeny-0.1-3.el7 (FEDORA-EPEL-2017-f9be6a6352)
Some helpful preload libraries for pwning stuff
--------------------------------------------------------------------------------
Update Information:
This is new package preeny.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479022 - Review Request: preeny - Some helpful preload libraries for pwning
stuff
https://bugzilla.redhat.com/show_bug.cgi?id=1479022
--------------------------------------------------------------------------------
================================================================================
python-assimulo-2.9-15.el7 (FEDORA-EPEL-2017-cb48e3c1a6)
Ordinary differential and differential algebraic equations solver
--------------------------------------------------------------------------------
Update Information:
- Fix Summary tag
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.20.0-1.el7 (FEDORA-EPEL-2017-670daa80f5)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0 Change log at :
https://github.com/fedora-
infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0200 ----
Update to 0.19.0 Release note at:
https://github.com/fedora-
infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0190
--------------------------------------------------------------------------------
================================================================================
python-sphinx_rtd_theme-0.2.4-2.el7.0 (FEDORA-EPEL-2017-f9e4031a58)
Sphinx theme for
readthedocs.org
--------------------------------------------------------------------------------
Update Information:
Require python-setuptools instead of python2-setuptools on epel
--------------------------------------------------------------------------------
================================================================================
qt-creator-4.1.0-3.el7 (FEDORA-EPEL-2017-53bf9d8d3c)
Cross-platform IDE for Qt
--------------------------------------------------------------------------------
Update Information:
Rebuild for qt5-5.6.2 included in rhel7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481978 - Update qt-creator for RHEL-7.4 qt5 upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=1481978
--------------------------------------------------------------------------------
================================================================================
rancid-3.2-3.el7 (FEDORA-EPEL-2017-c4362e074a)
Really Awesome New Cisco confIg Differ
--------------------------------------------------------------------------------
Update Information:
Rebuild to fix #1406785 and #1481811
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406785 - Dependency issues with Rancid on RHEL/CentOS 7.3
https://bugzilla.redhat.com/show_bug.cgi?id=1406785
[ 2 ] Bug #1481811 - rancid is not installable after RHEL-7.4 update
https://bugzilla.redhat.com/show_bug.cgi?id=1481811
--------------------------------------------------------------------------------
================================================================================
redis-3.2.10-2.el7 (FEDORA-EPEL-2017-07d2039ffa)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream Redis, backport packaging fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433968 - Redis 3.2.3 in EPEL 7 has multiple (including critical) security
vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1433968
[ 2 ] Bug #1444988 - Redis libexec shutdown script
https://bugzilla.redhat.com/show_bug.cgi?id=1444988
[ 3 ] Bug #1474461 - Redis package does not have a directory for sentinel logrotate
https://bugzilla.redhat.com/show_bug.cgi?id=1474461
--------------------------------------------------------------------------------
================================================================================
rpkg-1.50-1.el7 (FEDORA-EPEL-2017-2c5c94bf8c)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
# Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
# rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and
description of new-sources and upload commands - 1248737 (cqi) - Set
autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals
(cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode
with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) -
Make tests and covered code compatible with Py3 (cqi) - Add requirements files
(cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests
(cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when
rpmbuild fails in local command (cqi) - Report deprecation of config via logger
(lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
tcl-tclnagios-1.3-4.el7 (FEDORA-EPEL-2017-a3c6361bc6)
Library to assist with writing Nagios plugins in Tcl
--------------------------------------------------------------------------------
Update Information:
New package to help write Nagios plugins in TCL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479073 - Review Request: tcl-tclnagios - Library to simplify writing Nagios
plugins in Tcl
https://bugzilla.redhat.com/show_bug.cgi?id=1479073
--------------------------------------------------------------------------------
================================================================================
torque-4.2.10-11.el7 (FEDORA-EPEL-2017-6658d64670)
Tera-scale Open-source Resource and QUEue manager
--------------------------------------------------------------------------------
Update Information:
Resolve systemd requires for bug #1319195
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328958 - pbs_sched doesn't appear to work
https://bugzilla.redhat.com/show_bug.cgi?id=1328958
[ 2 ] Bug #1321154 - numa enabled torque don't work
https://bugzilla.redhat.com/show_bug.cgi?id=1321154
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.08.13-1.el7 (FEDORA-EPEL-2017-8e3af65ba1)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to latest release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476633 - youtube-dl-2017.08.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476633
[ 2 ] Bug #1476989 - [abrt] youtube-dl: write_string():
utils.py:1400:write_string:OSError: [Errno 5] Input/output error
https://bugzilla.redhat.com/show_bug.cgi?id=1476989
--------------------------------------------------------------------------------