The following Fedora EPEL 7 Security updates need testing:
Age URL
857
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
620
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
202
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
99
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
98
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
97
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
31
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1
lxc-1.0.10-2.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e
cross-binutils-2.25.1-31.el7.1 cross-gcc-4.8.5-16.el7.1
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b
mosquitto-1.4.13-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a427bcb775
yara-3.6.2-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7678ea423a
jabberd-2.6.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-86125e7897
GraphicsMagick-1.3.26-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1
globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7
globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7
globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7
globus-gridftp-server-12.2-1.el7 globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7
globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7
globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d13b9e8413
cacti-1.1.12-2.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843
heimdal-7.4.0-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
distribution-gpg-keys-1.12-1.el7
heimdal-7.4.0-1.el7
mate-themes-3.14.7-1.el7
nagios-plugins-2.2.1-3git.el7
php-phpmyadmin-sql-parser-4.1.9-1.el7
uid_wrapper-1.2.2-1.el7
Details about builds:
================================================================================
distribution-gpg-keys-1.12-1.el7 (FEDORA-EPEL-2017-5623a3170f)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
Updated Copr gpg keys.
--------------------------------------------------------------------------------
================================================================================
heimdal-7.4.0-1.el7 (FEDORA-EPEL-2017-47be021843)
A Kerberos 5 implementation without export restrictions
--------------------------------------------------------------------------------
Update Information:
Update to 7.4.0 GA release (CVE-2017-11103)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469998 - CVE-2017-11103 heimdal: krb5: Metadata taken from the
unauthenticated plaintext [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1469998
--------------------------------------------------------------------------------
================================================================================
mate-themes-3.14.7-1.el7 (FEDORA-EPEL-2017-ea73c8aa2c)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- update to 3.14.7
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.2.1-3git.el7 (FEDORA-EPEL-2017-4b1c55c024)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
Updated patches to fix check_http problems ---- Update to git for 20170703
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1052740 - SELinux is preventing check_log via NRPE from read and open
var_log_t files
https://bugzilla.redhat.com/show_bug.cgi?id=1052740
[ 2 ] Bug #1204683 - check_ide_smart cannot be started by nrpe
https://bugzilla.redhat.com/show_bug.cgi?id=1204683
[ 3 ] Bug #1210380 - SELinux prevents check_mailq from executing postfix when run via
NRPE
https://bugzilla.redhat.com/show_bug.cgi?id=1210380
[ 4 ] Bug #1256848 - nagios-plugins-log has incorrect paths to egrep/tail (EL6)
https://bugzilla.redhat.com/show_bug.cgi?id=1256848
[ 5 ] Bug #1423008 - nagios-plugins-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1423008
[ 6 ] Bug #1427925 - check_http 2.2.0-4 fails if Transfer-Encoding ends the header
https://bugzilla.redhat.com/show_bug.cgi?id=1427925
[ 7 ] Bug #1463674 - check_http segfaults once Location header terminates with
additional 0x0a and is last header line
https://bugzilla.redhat.com/show_bug.cgi?id=1463674
[ 8 ] Bug #1465784 - nagios http plugin is old and buggy
https://bugzilla.redhat.com/show_bug.cgi?id=1465784
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-sql-parser-4.1.9-1.el7 (FEDORA-EPEL-2017-e2e7d7e43c)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 4.1.9** - 2017-07-12 * Various code cleanups. * Improved error
handling of several invalid statements. ---- **Version 4.1.8** - 2017-07-09
* Fixed parsing SQL comment at the end of query. * Improved handing of non utf-8
strings. * Added query flag for SET queries.
--------------------------------------------------------------------------------
================================================================================
uid_wrapper-1.2.2-1.el7 (FEDORA-EPEL-2017-159cb2b26d)
A wrapper for privilege separation
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.2
--------------------------------------------------------------------------------