The following Fedora EPEL 7 Security updates need testing:
Age URL
371
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
133
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6dc46a554e
libssh-0.6.5-2.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-b23b791a7e
drupal7-7.43-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1613bc2a80
php-htmLawed-1.1.21-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-07b9ae23da
qpid-cpp-0.34-6.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e79091a3b8
ReviewBoard-2.5.3-1.el7 python-djblets-0.9.2-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-60ae263220
exim-4.84.2-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8fd1e13dd2
python-django-1.6.11-5.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0fc6ac67c6
websvn-2.3.3-12.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bfdc2d9e96
php-pecl-http-2.5.6-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
abi-dumper-0.99.15-1.el7
abi-tracker-1.5-1.el7
dropbear-2016.72-1.el7
httrack-3.48.21-1.el7
nsd-4.1.8-1.el7
php-Faker-1.5.0-5.el7
php-composer-installers-1.0.23-1.el7
php-kdyby-events-2.4.0-1.el7
python-dns-1.12.0GITa4774ee-1.el7
qbittorrent-3.3.3-6.el7
rb_libtorrent-1.0.9-1.el7
Details about builds:
================================================================================
abi-dumper-0.99.15-1.el7 (FEDORA-EPEL-2016-498f892776)
Tool to dump ABI of an ELF object containing DWARF debug info
--------------------------------------------------------------------------------
Update Information:
* Support for analysis of the Linux kernel. * Added a new target to build graph
of ABI symbols (target=graph). * Ability to regenerate objects report
(target=objectsreport). * Carefully map headers when creating headers diff. *
Added ABIDiff, CompatRate, SkipHeaders, Mode, Soname, ReportHeader,
ContentHeader and ReportStyle options of the profile.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1317204 - abi-tracker-1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317204
[ 2 ] Bug #1317203 - abi-dumper-0.99.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317203
--------------------------------------------------------------------------------
================================================================================
abi-tracker-1.5-1.el7 (FEDORA-EPEL-2016-498f892776)
Tool to visualize ABI changes timeline of a C/C++ library
--------------------------------------------------------------------------------
Update Information:
* Support for analysis of the Linux kernel. * Added a new target to build graph
of ABI symbols (target=graph). * Ability to regenerate objects report
(target=objectsreport). * Carefully map headers when creating headers diff. *
Added ABIDiff, CompatRate, SkipHeaders, Mode, Soname, ReportHeader,
ContentHeader and ReportStyle options of the profile.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1317204 - abi-tracker-1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317204
[ 2 ] Bug #1317203 - abi-dumper-0.99.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317203
--------------------------------------------------------------------------------
================================================================================
dropbear-2016.72-1.el7 (FEDORA-EPEL-2016-785fc9a2ea)
Lightweight SSH server and client
--------------------------------------------------------------------------------
Update Information:
CVE-2016-3116 dropbear: X11 forwarding input not validated properly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1316826 - CVE-2016-3116 dropbear: X11 forwarding input not validated properly
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1316826
--------------------------------------------------------------------------------
================================================================================
httrack-3.48.21-1.el7 (FEDORA-EPEL-2016-31b0b7ba5f)
Website copier and offline browser
--------------------------------------------------------------------------------
Update Information:
Bugfix from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1202070 - httrack-3.48.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1202070
--------------------------------------------------------------------------------
================================================================================
nsd-4.1.8-1.el7 (FEDORA-EPEL-2016-bcf7ca401d)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
New bugfix version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1316527 - nsd-4.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1316527
--------------------------------------------------------------------------------
================================================================================
php-Faker-1.5.0-5.el7 (FEDORA-EPEL-2016-3a00fc83ae)
A PHP library that generates fake data
--------------------------------------------------------------------------------
Update Information:
See
https://github.com/fzaninotto/Faker/releases/tag/v1.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1226339 - php-Faker-v1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1226339
--------------------------------------------------------------------------------
================================================================================
php-composer-installers-1.0.23-1.el7 (FEDORA-EPEL-2016-626eb865d5)
A multi-framework Composer library installer
--------------------------------------------------------------------------------
Update Information:
Changes since 1.0.22:
https://github.com/composer/installers/compare/v1.0.22...v1.0.23
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1302488 - php-composer-installers-1.0.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1302488
--------------------------------------------------------------------------------
================================================================================
php-kdyby-events-2.4.0-1.el7 (FEDORA-EPEL-2016-07385a62a7)
Events for Nette Framework
--------------------------------------------------------------------------------
Update Information:
This extension is here to provide robust events system for Nette Framework. To
use this library, you just have to add, in your project: require_once
'/usr/share/php/Kdyby/Events/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277493 - Review Request: php-kdyby-events - Events for Nette Framework
https://bugzilla.redhat.com/show_bug.cgi?id=1277493
--------------------------------------------------------------------------------
================================================================================
python-dns-1.12.0GITa4774ee-1.el7 (FEDORA-EPEL-2016-9d730787dd)
DNS toolkit for Python
--------------------------------------------------------------------------------
Update Information:
Provide python34 package for EPEL7
--------------------------------------------------------------------------------
================================================================================
qbittorrent-3.3.3-6.el7 (FEDORA-EPEL-2016-8b25197f71)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
Update rb_libtorrent version, with the following changes: * fix issue in
checking outgoing interfaces (when that option is enabled) * python binding fix
for boost-1.60.0 * optimize enumeration of network interfaces on windows *
improve reliability of binding listen sockets * support SNI in https web seeds
and trackers * fix unhandled exception in DHT when receiving a DHT packet over
IPv6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite
https://bugzilla.redhat.com/show_bug.cgi?id=1294336
[ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301942
--------------------------------------------------------------------------------
================================================================================
rb_libtorrent-1.0.9-1.el7 (FEDORA-EPEL-2016-8b25197f71)
A C++ BitTorrent library aiming to be the best alternative
--------------------------------------------------------------------------------
Update Information:
Update rb_libtorrent version, with the following changes: * fix issue in
checking outgoing interfaces (when that option is enabled) * python binding fix
for boost-1.60.0 * optimize enumeration of network interfaces on windows *
improve reliability of binding listen sockets * support SNI in https web seeds
and trackers * fix unhandled exception in DHT when receiving a DHT packet over
IPv6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite
https://bugzilla.redhat.com/show_bug.cgi?id=1294336
[ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301942
--------------------------------------------------------------------------------