The following Fedora EPEL 7 Security updates need testing:
Age URL
684
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
447
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
165
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
149
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-92129d651d
exim-4.88-2.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fbb2447c6e
php-PHPMailer-5.2.22-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d29bf8e34
php-ZendFramework2-2.4.11-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f1acebb58b
wordpress-4.7.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6ee140a6d3
fedmsg-0.18.2-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6e3dadcb1d
pdns-recursor-3.7.4-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9bcc7b6164
mingw-nsis-3.01-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ad7467bd9c
pdns-3.4.11-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8cb1dcd776
python-crypto-2.6.1-13.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-09ddf72aaa
percona-xtrabackup-2.3.6-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-cd2af02aae
rabbitmq-server-3.3.5-31.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8533f605ab
bubblewrap-0.1.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
bubblewrap-0.1.7-1.el7
golang-github-blang-semver-3.3.0-0.1.git60ec348.el7
golang-github-ghodss-yaml-0-0.13.gitaa0c862.el7
golang-github-juju-ratelimit-0-0.5.git77ed1c8.el7
golang-github-lsegal-gucumber-0-0.5.git71608e2.el7
golang-github-shiena-ansicolor-0-0.5.gitd445752.el7
golang-googlecode-go-decimal-inf-0.9.0-0.1.git3887ee9.el7
golang-googlecode-gogoprotobuf-0.2-0.5.gitd7788ac.el7
golang-googlecode-tools-0-15.1.git9deed8c.el7
masscan-1.0.3-5.el7
ocl-icd-2.2.11-1.el7
perl-AnyEvent-BDB-1.1-19.el7
perl-HTML-FromText-2.07-7.el7
perl-Log-TraceMessages-1.4-22.el7
php-phpmd-PHP-PMD-2.6.0-1.el7
php-udan11-sql-parser-3.4.17-1.el7
python-robosignatory-0.2.0-1.el7
qt-assistant-adp-4.6.3-12.el7
quasselc-0-2.20170111gita0a1e6b.el7
vulkan-1.0.37.0-1.el7
Details about builds:
================================================================================
bubblewrap-0.1.7-1.el7 (FEDORA-EPEL-2017-8533f605ab)
Core execution tool for unprivileged containers
--------------------------------------------------------------------------------
Update Information:
New upstream release, fixes a security issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1411815 - CVE-2017-5226 bubblewrap: Nonprivileged session can escape to the
parent session by using the TIOCSTI ioctl [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1411815
--------------------------------------------------------------------------------
================================================================================
golang-github-blang-semver-3.3.0-0.1.git60ec348.el7 (FEDORA-EPEL-2017-6da2d4700b)
Semantic Versioning library written in golang
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1412152 - Review Request: golang-github-blang-semver - Semantic Versioning
library written in golang
https://bugzilla.redhat.com/show_bug.cgi?id=1412152
--------------------------------------------------------------------------------
================================================================================
golang-github-ghodss-yaml-0-0.13.gitaa0c862.el7 (FEDORA-EPEL-2017-218c66ea7f)
A better way to marshal and unmarshal YAML in Golang
--------------------------------------------------------------------------------
Update Information:
Bump to upstream aa0c862057666179de291b67d9f093d12b5a8473 ---- Polish the spec
file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249030 - Tracker for golang-github-ghodss-yaml
https://bugzilla.redhat.com/show_bug.cgi?id=1249030
--------------------------------------------------------------------------------
================================================================================
golang-github-juju-ratelimit-0-0.5.git77ed1c8.el7 (FEDORA-EPEL-2017-4fa4754776)
Efficient token-bucket-based rate limiter package
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 77ed1c8a01217656d2080ad51981f6e99adaa177
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415212 - Tracker for golang-github-juju-ratelimit
https://bugzilla.redhat.com/show_bug.cgi?id=1415212
--------------------------------------------------------------------------------
================================================================================
golang-github-lsegal-gucumber-0-0.5.git71608e2.el7 (FEDORA-EPEL-2017-3610a5ca41)
An implementation of Cucumber BDD-style testing for Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 71608e2f6e76fd4da5b09a376aeec7a5c0b5edbc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415383 - Tracker for golang-github-lsegal-gucumber
https://bugzilla.redhat.com/show_bug.cgi?id=1415383
--------------------------------------------------------------------------------
================================================================================
golang-github-shiena-ansicolor-0-0.5.gitd445752.el7 (FEDORA-EPEL-2017-c16a87a6b8)
Ansicolor library provides color console in Windows
--------------------------------------------------------------------------------
Update Information:
Polish the spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415374 - Tracker for golang-github-shiena-ansicolor
https://bugzilla.redhat.com/show_bug.cgi?id=1415374
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-go-decimal-inf-0.9.0-0.1.git3887ee9.el7 (FEDORA-EPEL-2017-a800294f99)
Package implementing "infinite-precision" decimal arithmetic
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 3887ee99ecf07df5b447e9b00d9c0b2adaa9f3e4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250518 - Tracker for golang-googlecode-go-decimal-inf
https://bugzilla.redhat.com/show_bug.cgi?id=1250518
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-gogoprotobuf-0.2-0.5.gitd7788ac.el7 (FEDORA-EPEL-2017-81e390338a)
A fork of goprotobuf with several extra features
--------------------------------------------------------------------------------
Update Information:
Bump to upstream d7788ac7ca647999a3775cb756e449ab177dd138
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246215 - Tracker for golang-googlecode-gogoprotobuf
https://bugzilla.redhat.com/show_bug.cgi?id=1246215
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-tools-0-15.1.git9deed8c.el7 (FEDORA-EPEL-2017-7f94a570e6)
Supplementary tools and packages for Go
--------------------------------------------------------------------------------
Update Information:
Polish the spec file ---- Include missing templates and static directories
---- Do not ship vet and cover binaries anymore, they are shipped via golang-
bin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279381 - Tracker for golang-googlecode-tools
https://bugzilla.redhat.com/show_bug.cgi?id=1279381
[ 2 ] Bug #1370456 - golang-googlecode-tools - present utility unusable (missing
templates)
https://bugzilla.redhat.com/show_bug.cgi?id=1370456
[ 3 ] Bug #1268206 - golang-bin-1.5.1-0 file conflict with golang-vet-0.2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1268206
--------------------------------------------------------------------------------
================================================================================
masscan-1.0.3-5.el7 (FEDORA-EPEL-2017-c8b4fd0ba3)
This is the fastest Internet port scanner
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ocl-icd-2.2.11-1.el7 (FEDORA-EPEL-2017-7e414f77df)
OpenCL ICD Bindings
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.11
--------------------------------------------------------------------------------
================================================================================
perl-AnyEvent-BDB-1.1-19.el7 (FEDORA-EPEL-2017-1778f3c202)
Truly asynchronous Berkeley DB access
--------------------------------------------------------------------------------
Update Information:
initial epel7 package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408627 - build perl-AnyEvent-BDB for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1408627
--------------------------------------------------------------------------------
================================================================================
perl-HTML-FromText-2.07-7.el7 (FEDORA-EPEL-2017-30b4455880)
Convert plain text to HTML
--------------------------------------------------------------------------------
Update Information:
First EPEL 7 build
--------------------------------------------------------------------------------
================================================================================
perl-Log-TraceMessages-1.4-22.el7 (FEDORA-EPEL-2017-917ab9b23e)
Perl extension for trace messages used in debugging
--------------------------------------------------------------------------------
Update Information:
First EPEL 7 build.
--------------------------------------------------------------------------------
================================================================================
php-phpmd-PHP-PMD-2.6.0-1.el7 (FEDORA-EPEL-2017-7cbaf1724f)
PHPMD - PHP Mess Detector
--------------------------------------------------------------------------------
Update Information:
**phpmd-2.6.0** (2017/01/20) This release incorporates several pending PRs.
Beside that we have rebased PHPMD on PDepend 2.5 which should complete support
for PHP 7 language features. - Fixed #345: Development Code Fragment feature
is not working - Fixed #384: use-statement for functions returns in:
UnexpectedTokenException - Fixed #409: Test for PHPMD or PMD on SuppressWarnings
- Fixed #418: Add missing link to TooManyPublicMethods rule in the rules
document - Fixed #419: Fix a link to github help because the link is broken -
Fixed #426: Enable Windows Update service on AppVeyor - Fixed #429: Added ext-
xml to require in composer.json file - Fixed #433: Mistake in documentation of
CCN - Implemented #379: Code cleaning. - Implemented #412: Add .mailmap file to
fix git shortlog - Implemented #416: Test against lowest possible dependencies
--------------------------------------------------------------------------------
================================================================================
php-udan11-sql-parser-3.4.17-1.el7 (FEDORA-EPEL-2017-4d813ba119)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.17** - 2017-01-20 * Coding style fixes. * Fixed indentation in
HTML formatting. * Fixed parsing of unterminated variables. * Improved comments
lexing.
--------------------------------------------------------------------------------
================================================================================
python-robosignatory-0.2.0-1.el7 (FEDORA-EPEL-2017-00e361531a)
A fedmsg consumer that automatically signs artifacts
--------------------------------------------------------------------------------
Update Information:
Now, with plugins!
--------------------------------------------------------------------------------
================================================================================
qt-assistant-adp-4.6.3-12.el7 (FEDORA-EPEL-2017-c48395fde9)
Compatibility version of Qt Assistant
--------------------------------------------------------------------------------
Update Information:
Compatibility version of Qt Assistant
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405729 - EPEL 7 branch request for qt-assistant-adp
https://bugzilla.redhat.com/show_bug.cgi?id=1405729
--------------------------------------------------------------------------------
================================================================================
quasselc-0-2.20170111gita0a1e6b.el7 (FEDORA-EPEL-2017-08ef564774)
API to access a Quassel Core in pure C
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream commit.
--------------------------------------------------------------------------------
================================================================================
vulkan-1.0.37.0-1.el7 (FEDORA-EPEL-2017-e7a1ab8d2b)
Vulkan loader and validation layers
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.37.0 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402976 - vulkan package should recommend or require mesa-vulkan-drivers
https://bugzilla.redhat.com/show_bug.cgi?id=1402976
[ 2 ] Bug #1415054 - Vulkan loader package is out-of-date
https://bugzilla.redhat.com/show_bug.cgi?id=1415054
--------------------------------------------------------------------------------