The following Fedora EPEL 7 Security updates need testing:
Age URL
913
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
675
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
257
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
155
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
153
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
152
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
55
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843
heimdal-7.4.0-1.el7
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-17b77b3268
botan-1.10.16-1.el7
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8c25bd6d7
exim-4.89-2.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fc1436acf8
dnsdist-1.2.0-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-40114bdc74
mbedtls-2.6.0-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8f80d01c29
chromium-60.0.3112.113-2.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9c2a089ab4
libidn2-2.0.4-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f159ad2ec9
mingw-libidn2-2.0.4-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-29c9f4e49e
freexl-1.0.0i-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-dadbc43983
mimedefang-2.81-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2e4b6b7b5c
lightdm-1.18.3-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cacti-1.1.21-1.el7
cherrytree-0.38.2-1.el7
cmake-fedora-2.9.3-1.el7
fldigi-4.0.9-1.el7
hitch-1.4.6-4.el7
kobo-0.6.0-1.el7
lightdm-1.18.3-5.el7
pdc-client-1.7.0-2.el7
python-msrestazure-0.4.13-1.el7
python3-kitchen-1.2.5-1.el7
Details about builds:
================================================================================
cacti-1.1.21-1.el7 (FEDORA-EPEL-2017-bc3ad0cc08)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.21 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.21
--------------------------------------------------------------------------------
================================================================================
cherrytree-0.38.2-1.el7 (FEDORA-EPEL-2017-066a0c97ba)
Hierarchical note taking application
--------------------------------------------------------------------------------
Update Information:
update to version 0.38.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487799 - cherrytree-0.38.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1487799
--------------------------------------------------------------------------------
================================================================================
cmake-fedora-2.9.3-1.el7 (FEDORA-EPEL-2017-d45fbedb4c)
CMake helper modules for fedora developers
--------------------------------------------------------------------------------
Update Information:
- Fixed cmake-fedora-fedpkg failed to push to bodhi. - Target tag_pre now
depends on target module-only. ---- Fixed the cmake-fedora-fedpkg related path
SRPM bug - Bugs: + Fixed RHBZ#1475682 - ChangeLog failed to update after
doing the git reset --hard HEAD ---- Migrate changes like fedorahosted to
pagure. And move from pkgdb to product definition center (PDC). - Enhancement:
+ cmake-fedora-pkgdb new sub-commands: - git-branch package: List the git-
branches of package - newest-nvr: Return NVR of master branch - newest-
changelog: Return the latest ChangeLog in master branch. - Changes: + koji-
build-scratch is now back to use koji build --scratch +
MANAGE_UPLOAD_FEDORAHOSTED is marked as depreciated But MANAGE_UPLOAD_PAGURE
is not implemented yet, as pagure does not support scp upload yet - Bugs:
+ Fixed RHBZ#1424757 - cmake-fedora: failed to handle f26-pending + Fixed
RHBZ#1425263 - cmake-fedora: migrate from fedorahosted to pagure + Fixed
fedpkg --dist depreciate warning
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475682 - ChangeLog failed to update after doing the git reset --hard HEAD
https://bugzilla.redhat.com/show_bug.cgi?id=1475682
--------------------------------------------------------------------------------
================================================================================
fldigi-4.0.9-1.el7 (FEDORA-EPEL-2017-7707dd2dd9)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
Version 4.0.9 doc update clock_gettime * Change np-compat.m4 to
provide for conditional use of library calls to clock_gettime -
allow for compiling on OS X < 10.12 using Xcode 8.xxx - use
./configure --without-clock_gettime spectrum display * Changed from fft
mode to spectrum display paradigm - spectrum display available independent
of digital mode in use. - spectrum display dialog opens from "View" menu
- removed all code relating to the original fftscan modem - added new fltk
widget, spectrum based on fldigi's digiscope widget Test Signal
Dialog * Correct IMD range controls dxcluster fonts * fix dxreport
font rendition * add resizable groups to correctly resize tabs Spot
buffer * add clear RE buffer after a successfull match Winkeyer clones
* added longer time out for character echo. - requirement for ZLP clone of
Winkeyer
http://www.g4zlp.co.uk/unified/DigiMaster_CW.htm RX Text
capture * Fix loss of capture when Rx text scrolls or user's mouse
clicks off of the target PSK s/n imd * Changed s/n display code to avoid
displaying misleading values * Changed Noise/Offset/IMD test signal
generator IMD can be specified in dB and signal will correctly emulate
an over driven transmit signal. IMD generator modified to correctly
computer 3rd, 5th, 7th and 9th harmonics of PSK fundamental (15.625
Hertz). * Removed "--noise" command line parameter * Added Test Signal
Dialog with S/N IMD tx freq offset controls *
disabled display of Rx IMD, s/n values if |imd| > |s/n| PSK viewer *
Added the following modes to the multi-channel viewer - PSK31, PSK63,
PSK63F, PSK125, PSK250, PSK500 - PSK125R, PSK250R, PSK500R - QPSK31,
QPSK63, QPSK125, QPSK250, QPSK500
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476538 - fldigi-4.0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476538
--------------------------------------------------------------------------------
================================================================================
hitch-1.4.6-4.el7 (FEDORA-EPEL-2017-37113f0c2e)
Network proxy that terminates TLS/SSL connections
--------------------------------------------------------------------------------
Update Information:
Rebuilt against openssl-1.0.2k for epel7, enabling ALPN support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1452029 - Hitch without ALPN support
https://bugzilla.redhat.com/show_bug.cgi?id=1452029
--------------------------------------------------------------------------------
================================================================================
kobo-0.6.0-1.el7 (FEDORA-EPEL-2017-0579784f53)
Python modules for tools development
--------------------------------------------------------------------------------
Update Information:
- new upstream release 0.6.0 - Fedora#1436563 - kobo worker name no longer needs
to match host FQDN - Fedora#1387483 - improved error reporting when loading
configuration - improved error reporting from kobo.shortcuts.run - reduced
memory usage when handling large log files - models now respect
settings.AUTH_USER_MODEL - fixed crash on xml-rpc client in python <= 2.7.9 -
fixed spurious whitespace from kobo.shortcuts.run (#40) - fixed missing
migration for User model ---- Update to latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1387483 - remove reverse DNS validation in
kobo.hub.decorators.validate_worker()
https://bugzilla.redhat.com/show_bug.cgi?id=1387483
[ 2 ] Bug #1436563 - Rebase kobo to 0.6.0
https://bugzilla.redhat.com/show_bug.cgi?id=1436563
--------------------------------------------------------------------------------
================================================================================
lightdm-1.18.3-5.el7 (FEDORA-EPEL-2017-2e4b6b7b5c)
A cross-desktop Display Manager
--------------------------------------------------------------------------------
Update Information:
- Disable guest login as system default preset (CVE-2017-8900)
--------------------------------------------------------------------------------
================================================================================
pdc-client-1.7.0-2.el7 (FEDORA-EPEL-2017-78d6ab4913)
Console client for interacting with Product Definition Center
--------------------------------------------------------------------------------
Update Information:
Option `insecure` is deprecated (can be still used but a warning printed on
console). The old option should be replaced with `ssl-verify` in personal
configuration files (`~/.config/pdc/*.json`). The **new value is negation of the
old one**, e.g. `"insecure":false` becomes `"ssl-verify":true`. The
version was
bumped from 1.2.0 to 1.7.0 to avoid conflicts with internal and related
projects. ## Changelog - Add "product" command - Add
"product-version" command
- Add "release-variant" command - Add "base-product" command - Add
content-
delivery-repo export/import sub-commands - Allow deleting multiple group
resource perms at once - Allow deleting multiple repos at once - Allow deleting
release variants - Fix SSL command line options - Fix configuration name in
README - Fix content-delivery-repo list ordering - Fix passing ordering
parameter - Fix reading "develop" option from settings - Fix the bug about the
include-shadow para in repo clone - Increase `pdc content-deliver-repo list`
verbosity - Make error reporting less verbose - Omit installing plugins with
Python packages - Omit printing long HTML with error - Print table with minimum
width for content-deliver-repo list - Remove the arch parameter from option -
Replace a custom test runner with standard setup.py test - Simplify reporting
server errors - Sort commands in pdc --help - Support SSL cert when insecure is
false - Unify json output serialization - Update test data for content-deliver-
repo - Update value type for "Shadow" field - Allow overriding 'dest'
option
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484780 - Update pdc-client and pdc python libraries to newest upstream
release
https://bugzilla.redhat.com/show_bug.cgi?id=1484780
--------------------------------------------------------------------------------
================================================================================
python-msrestazure-0.4.13-1.el7 (FEDORA-EPEL-2017-50395615c9)
AutoRest swagger generator Python client runtime (Azure-specific module)
--------------------------------------------------------------------------------
Update Information:
AutoRest swagger generator Python client runtime. Azure-specific module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1358741 - Review Request: python-msrestazure - AutoRest swagger generator
Python client runtime (Azure-specific module)
https://bugzilla.redhat.com/show_bug.cgi?id=1358741
--------------------------------------------------------------------------------
================================================================================
python3-kitchen-1.2.5-1.el7 (FEDORA-EPEL-2017-613440a77c)
Small, useful pieces of code to make python coding easier
--------------------------------------------------------------------------------
Update Information:
Make a python3-only package for EPEL, based on the Fedora package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482139 - Review Request: python3-kitchen - Small, useful pieces of code to
make python coding easier
https://bugzilla.redhat.com/show_bug.cgi?id=1482139
--------------------------------------------------------------------------------