The following Fedora EPEL 7 Security updates need testing:
Age URL
682
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
445
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
163
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
147
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-92129d651d
exim-4.88-2.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fbb2447c6e
php-PHPMailer-5.2.22-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d29bf8e34
php-ZendFramework2-2.4.11-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f1acebb58b
wordpress-4.7.1-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6ee140a6d3
fedmsg-0.18.2-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6e3dadcb1d
pdns-recursor-3.7.4-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9bcc7b6164
mingw-nsis-3.01-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ad7467bd9c
pdns-3.4.11-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8cb1dcd776
python-crypto-2.6.1-13.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
brightnessctl-0.2-1.el7
gfal2-python-1.8.5-1.el7
golang-github-BurntSushi-toml-0-0.10.git2ceedfe.el7
golang-github-davecgh-go-spew-0-0.11.git6d21280.el7
golang-github-emicklei-go-restful-1.1.3-0.11.gitbf50d2b.el7
golang-github-golang-sys-0-0.9.git8f0908a.el7
golang-github-kr-text-0-0.10.git6807e77.el7
golang-github-magiconair-properties-1.7.0-1.el7
golang-github-rackspace-gophercloud-1.0.0-13.el7
golang-github-ugorji-go-0-0.8.git5cd0f2b.el7
golang-github-urfave-cli-1.18.0-0.1.git61f519f.el7
golang-googlecode-uuid-0-0.11.gitb984ec7.el7
libglvnd-0.2.999-6.git28867bb.el7
lighttpd-1.4.45-1.el7
mod_cluster-1.2.6-3.1.el7
module-build-service-1.1.0-2.el7
nagios-plugins-2.1.4-3.el7
python-crypto-2.6.1-13.el7
python-djblets-0.9.4-4.el7
python-flask-migrate-2.0.0-3.el7
python-flask-script-2.0.5-6.el7
python-funcsigs-1.0.2-4.el7
texlive-extension-2012-50.el7
wcstools-3.9.4-1.el7
webfts-2.2.11-1.el7
Details about builds:
================================================================================
brightnessctl-0.2-1.el7 (FEDORA-EPEL-2017-b46b8048fe)
Read and control device brightness
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413787 - brightnessctl-0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1413787
--------------------------------------------------------------------------------
================================================================================
gfal2-python-1.8.5-1.el7 (FEDORA-EPEL-2017-78aad12c06)
Python bindings for gfal 2
--------------------------------------------------------------------------------
Update Information:
Update for new upstream release
--------------------------------------------------------------------------------
================================================================================
golang-github-BurntSushi-toml-0-0.10.git2ceedfe.el7 (FEDORA-EPEL-2017-72417a4204)
TOML parser and encoder for Go with reflection
--------------------------------------------------------------------------------
Update Information:
Polish the spec file ---- Enable devel and unit-test for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1247656 - Tracker for golang-github-BurntSushi-toml
https://bugzilla.redhat.com/show_bug.cgi?id=1247656
--------------------------------------------------------------------------------
================================================================================
golang-github-davecgh-go-spew-0-0.11.git6d21280.el7 (FEDORA-EPEL-2017-d38ca4e63e)
Deep pretty printer for Go data structures to aid in debug
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 6d212800a42e8ab5c146b8ace3490ee17e5225f9 ---- Polish the spec
file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248791 - Tracker for golang-github-davecgh-go-spew
https://bugzilla.redhat.com/show_bug.cgi?id=1248791
--------------------------------------------------------------------------------
================================================================================
golang-github-emicklei-go-restful-1.1.3-0.11.gitbf50d2b.el7
(FEDORA-EPEL-2017-53a1f3631b)
Package for building REST-style Web Services using Google Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream bf50d2be18145391aa3d4339b07195807b25a427
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215626 - Tracker for golang-github-emicklei-go-restful
https://bugzilla.redhat.com/show_bug.cgi?id=1215626
--------------------------------------------------------------------------------
================================================================================
golang-github-golang-sys-0-0.9.git8f0908a.el7 (FEDORA-EPEL-2017-2bb7a66437)
Go packages for low-level interaction with the operating system
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 8f0908ab3b2457e2e15403d3697c9ef5cb4b57a9 ---- Polish the spec
file ---- Bump to upstream 62bee037599929a6e9146f29d10dd5208c43507d ----
Enable devel and unit-test subpackage for epel7 ---- Bump to upstream
33267e036fd93fcd26ea95b7bdaf2d8306cb743c
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1360748 - update for s390x support
https://bugzilla.redhat.com/show_bug.cgi?id=1360748
--------------------------------------------------------------------------------
================================================================================
golang-github-kr-text-0-0.10.git6807e77.el7 (FEDORA-EPEL-2017-fc98b142f1)
Go package for manipulating paragraphs of text
--------------------------------------------------------------------------------
Update Information:
Polish the spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248175 - Tracker for golang-github-kr-text
https://bugzilla.redhat.com/show_bug.cgi?id=1248175
--------------------------------------------------------------------------------
================================================================================
golang-github-magiconair-properties-1.7.0-1.el7 (FEDORA-EPEL-2017-f073498cb7)
Java properties scanner for Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 0723e352fa358f9322c938cc2dadda874e9151a9 ---- Polish the spec
file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413067 - Tracker for golang-github-magiconair-properties
https://bugzilla.redhat.com/show_bug.cgi?id=1413067
--------------------------------------------------------------------------------
================================================================================
golang-github-rackspace-gophercloud-1.0.0-13.el7 (FEDORA-EPEL-2017-da40dd19b1)
The Go SDK for Openstack
http://gophercloud.io
--------------------------------------------------------------------------------
Update Information:
Bump to upstream c90cb954266e1bdd6d1914678fd6909fc5fabbfa
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214774 - Tracker for golang-github-rackspace-gophercloud
https://bugzilla.redhat.com/show_bug.cgi?id=1214774
--------------------------------------------------------------------------------
================================================================================
golang-github-ugorji-go-0-0.8.git5cd0f2b.el7 (FEDORA-EPEL-2017-5d1ed59f1e)
Idiomatic codec and rpc lib for msgpack, cbor, json, etc
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 5cd0f2b3b6cca8e3a0a4101821e41a73cb59bed6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250516 - Tracker for golang-github-ugorji-go
https://bugzilla.redhat.com/show_bug.cgi?id=1250516
--------------------------------------------------------------------------------
================================================================================
golang-github-urfave-cli-1.18.0-0.1.git61f519f.el7 (FEDORA-EPEL-2017-193eefe843)
A simple, fast, and fun package for building command line apps in Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 61f519fe5e57c2518c03627b194899a105838eba ---- enable devel
and unit-test for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1354378 - Review Request: golang-github-urfave-cli - A simple, fast, and fun
package for building command line apps in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1354378
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-uuid-0-0.11.gitb984ec7.el7 (FEDORA-EPEL-2017-bb616c1df9)
Generates and inspects UUIDs based on RFC 4122 and DCE 1.1
--------------------------------------------------------------------------------
Update Information:
Bump to upstream b984ec7fa9ff9e428bd0cf0abf429384dfbe3e37 ---- Enable devel
and unit-test for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250523 - Tracker for golang-googlecode-uuid
https://bugzilla.redhat.com/show_bug.cgi?id=1250523
--------------------------------------------------------------------------------
================================================================================
libglvnd-0.2.999-6.git28867bb.el7 (FEDORA-EPEL-2017-0def2de72e)
The GL Vendor-Neutral Dispatch library
--------------------------------------------------------------------------------
Update Information:
Update ---- - Update snapshot - Restore hardened build - Remove ExclusiveArch
- Remove some pointless Provides/Obsoletes - BuildRequires pkgconfig(xext) not
pkgconfig(xv) - Update description to be a bit more confident - Dump make check
errors into the build log
--------------------------------------------------------------------------------
================================================================================
lighttpd-1.4.45-1.el7 (FEDORA-EPEL-2017-931611857b)
Lightning fast webserver with light system requirements
--------------------------------------------------------------------------------
Update Information:
1.4.45
https://www.lighttpd.net/2017/1/14/1.4.45/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413278 - lighttpd-1.4.45 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1413278
--------------------------------------------------------------------------------
================================================================================
mod_cluster-1.2.6-3.1.el7 (FEDORA-EPEL-2017-cffe7b8501)
Apache HTTP load balancer
--------------------------------------------------------------------------------
Update Information:
Disable java bindings
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.1.0-2.el7 (FEDORA-EPEL-2017-c0acc244c8)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Branch for EPEL7.
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.1.4-3.el7 (FEDORA-EPEL-2017-99cefd5950)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
Put in patch to fix check_file_age
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410039 - check_file_age is broken in recent update
https://bugzilla.redhat.com/show_bug.cgi?id=1410039
--------------------------------------------------------------------------------
================================================================================
python-crypto-2.6.1-13.el7 (FEDORA-EPEL-2017-8cb1dcd776)
Cryptography library for Python
--------------------------------------------------------------------------------
Update Information:
A heap-buffer overflow vulnerability was discovered in pycrypto leading to
arbitrary code execution. All users of pycrypto's AES module that allow the mode
of operation to be specified by an attacker, check for ECB explicitly and create
the objects without specifying an IV are vulnerable to this issue. This is
CVE-2013-7459.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409754 - CVE-2013-7459 pycrypto: Heap-buffer overflow in ALGobject
structure
https://bugzilla.redhat.com/show_bug.cgi?id=1409754
--------------------------------------------------------------------------------
================================================================================
python-djblets-0.9.4-4.el7 (FEDORA-EPEL-2017-92bd66a505)
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
Fix missing dependencies breaking Review Board
--------------------------------------------------------------------------------
================================================================================
python-flask-migrate-2.0.0-3.el7 (FEDORA-EPEL-2017-564e805f01)
SQLAlchemy database migrations for Flask applications using Alembic
--------------------------------------------------------------------------------
Update Information:
Branch for EPEL7.
--------------------------------------------------------------------------------
================================================================================
python-flask-script-2.0.5-6.el7 (FEDORA-EPEL-2017-605bdb6f6a)
Scripting support for Flask
--------------------------------------------------------------------------------
Update Information:
Branch for EPEL7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1412273 - Please branch for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1412273
--------------------------------------------------------------------------------
================================================================================
python-funcsigs-1.0.2-4.el7 (FEDORA-EPEL-2017-5c2d6629a7)
Python function signatures from PEP362 for Python 2.6, 2.7 and 3.2+
--------------------------------------------------------------------------------
Update Information:
Branch for EPEL7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414541 - Please build for EPEL7.
https://bugzilla.redhat.com/show_bug.cgi?id=1414541
--------------------------------------------------------------------------------
================================================================================
texlive-extension-2012-50.el7 (FEDORA-EPEL-2017-6223b86d63)
TeX formatting system
--------------------------------------------------------------------------------
Update Information:
update texlive-extension fixes following bugs: - bz#1272882, add siunitx -
bz#1309785, fixed wrong provides/requires on tex(texnansi.enc) - bz#1239049, tex
files cannot be compiled on RHEL7 - bz##1238433 missing auto-pst-pdf.sty
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309785 - Missing texlive components: mathdesign.sty texnansi.sty
vmargin.sty
https://bugzilla.redhat.com/show_bug.cgi?id=1309785
[ 2 ] Bug #1239049 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1239049
[ 3 ] Bug #1272882 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1272882
[ 4 ] Bug #1238433 - missing auto-pst-pdf.sty
https://bugzilla.redhat.com/show_bug.cgi?id=1238433
--------------------------------------------------------------------------------
================================================================================
wcstools-3.9.4-1.el7 (FEDORA-EPEL-2017-8766d3a1d8)
Software utilities to display and manipulate the WCS of a FITS image
--------------------------------------------------------------------------------
Update Information:
Unretire wcstools package and update to latest available release.
--------------------------------------------------------------------------------
================================================================================
webfts-2.2.11-1.el7 (FEDORA-EPEL-2017-cfeab3739a)
Web Interface for FTS
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------