The following Fedora EPEL 7 Security updates need testing:
Age URL
244
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
140
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
48
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060
mediawiki123-1.23.11-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b3471305ee
php-horde-horde-5.2.8-1.el7 php-horde-imp-6.2.11-1.el7 php-horde-ingo-3.2.7-1.el7
php-horde-passwd-5.0.4-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-02bd65205b
drupal7-7.41-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d
php-ZendFramework-1.12.16-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-3cdbf28493
lxc-1.0.7-4.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19
perl-HTML-Scrubber-0.15-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b
qemu-2.0.0-1.el7.6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f5273e10c1
rabbitmq-server-3.3.5-12.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f75cdd1774
metis-5.1.0-7.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4b33ee7c84
wildmagic5-5.13-12.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6eaf22c8d
MUMPS-5.0.1-4.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e1379fc854
owncloud-8.0.9-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-693544258f
telegram-cli-1.3.1-7.20150730git2052f4.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7b2b7d02df
quassel-0.11.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
adobe-source-code-pro-fonts-2.010.1.030-1.el7
atril-1.10.2-2.el7
calligra-2.9.9-1.el7
calligra-l10n-2.9.9-1.el7
carbon-c-relay-0.45-1.el7
cppcheck-1.70-2.el7
darktable-1.6.9-5.el7
dpm-dsi-1.9.5-12.el7
dpm-dsi-1.9.5-9.el7
gfal2-2.10.2-1.el7
globus-gridftp-server-8.9-1.el7
globus-gridftp-server-9.1-1.el7
globus-xio-5.10-1.el7
globus-xio-udt-driver-1.19-1.el7
mate-power-manager-1.10.2-2.el7
matio-1.5.2-1.el7
mozilla-adblockplus-2.6.11-1.el7
myrepos-1.20151022-1.el7
nautilus-image-converter-0.3.1-0.10.git430afce31.el7
nodejs-arrify-1.0.0-1.el7
nodejs-std-mocks-1.0.0-1.el7
nordugrid-arc-nagios-plugins-1.8.4-3.el7
nwchem-6.6.27746-22.el7
pdns-3.4.7-1.el7
php-kukulich-fshl-2.1.0-2.el7
py4j-0.9-1.el7
quassel-0.11.1-1.el7
relval-1.11.6-2.el7
telegram-cli-1.3.1-7.20150730git2052f4.el7
xsd-4.0.0-10.el7
Details about builds:
================================================================================
adobe-source-code-pro-fonts-2.010.1.030-1.el7 (FEDORA-EPEL-2015-f4378bd60f)
A set of mono-spaced OpenType fonts designed for coding environments
--------------------------------------------------------------------------------
Update Information:
initial package
--------------------------------------------------------------------------------
================================================================================
atril-1.10.2-2.el7 (FEDORA-EPEL-2015-4d27bcff62)
Document viewer
--------------------------------------------------------------------------------
Update Information:
atril-1.10.2-2.el7 - update to 1.12.0 release - fix regression with dvi
documents,
https://github.com/mate-desktop/atril/issues/164
--------------------------------------------------------------------------------
================================================================================
calligra-2.9.9-1.el7 (FEDORA-EPEL-2015-1be55b45e6)
An integrated office suite
--------------------------------------------------------------------------------
Update Information:
Calligra 2.9.9 bugfix release, see also
https://www.calligra.org/news/calligra-2-9-9-released/
--------------------------------------------------------------------------------
================================================================================
calligra-l10n-2.9.9-1.el7 (FEDORA-EPEL-2015-1be55b45e6)
Language files for calligra
--------------------------------------------------------------------------------
Update Information:
Calligra 2.9.9 bugfix release, see also
https://www.calligra.org/news/calligra-2-9-9-released/
--------------------------------------------------------------------------------
================================================================================
carbon-c-relay-0.45-1.el7 (FEDORA-EPEL-2015-c7e9550280)
Enhanced C implementation of Carbon relay, aggregator and rewriter
--------------------------------------------------------------------------------
Update Information:
Update to new version
--------------------------------------------------------------------------------
================================================================================
cppcheck-1.70-2.el7 (FEDORA-EPEL-2015-438e2f2111)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
Added -gui package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1278318 - cppcheck gui package is missing
https://bugzilla.redhat.com/show_bug.cgi?id=1278318
--------------------------------------------------------------------------------
================================================================================
darktable-1.6.9-5.el7 (FEDORA-EPEL-2015-e14a6e59fb)
Utility to organize and develop raw images
--------------------------------------------------------------------------------
Update Information:
darktable-1.6.9-5.fc23 - Removed i386 support darktable-1.6.9-5.fc21 -
Added Removed i386 support darktable-1.6.9-5.fc22 - Added Removed i386
support darktable-1.6.9-5.el7 - Removed i386 support ----
darktable-1.6.9-2.el7 - Rework bundled opencl-headers handling in %prep
(RHBZ#1264933). ---- darktable-1.6.9-1.el7 - Update to 1.6.9 ----
darktable-1.6.9-3.fc23 - Removed x86 32 bit CPU support
darktable-1.6.9-3.fc21 - Removed x86 32 bit CPU support
darktable-1.6.9-3.fc22 - Removed x86 32 bit CPU support darktable-1.6.9-3.el7
- Removed x86 32 bit CPU support ---- darktable-1.6.9-1.el7 - Update to
1.6.9
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.5-12.el7 (FEDORA-EPEL-2015-4f583d172a)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
globus-gridftp-server-9.1-1 - fix for thread race crash between sequential
transfers - fix for partial stat punting when passed a single entry - fix for
double free on transfer failure race dpm-dsi-1.9.5-12 - Rebuilt for globus-
gridftp-server 9.1
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.5-9.el7 (FEDORA-EPEL-2015-70f2d35019)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS
fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's
attempts at ipv6 negotiation)
--------------------------------------------------------------------------------
================================================================================
gfal2-2.10.2-1.el7 (FEDORA-EPEL-2015-8b9c8308a8)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Update for upstream release 2.10.2
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-8.9-1.el7 (FEDORA-EPEL-2015-70f2d35019)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS
fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's
attempts at ipv6 negotiation)
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-9.1-1.el7 (FEDORA-EPEL-2015-4f583d172a)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-gridftp-server-9.1-1 - fix for thread race crash between sequential
transfers - fix for partial stat punting when passed a single entry - fix for
double free on transfer failure race dpm-dsi-1.9.5-12 - Rebuilt for globus-
gridftp-server 9.1
--------------------------------------------------------------------------------
================================================================================
globus-xio-5.10-1.el7 (FEDORA-EPEL-2015-70f2d35019)
Globus Toolkit - Globus XIO Framework
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS
fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's
attempts at ipv6 negotiation)
--------------------------------------------------------------------------------
================================================================================
globus-xio-udt-driver-1.19-1.el7 (FEDORA-EPEL-2015-70f2d35019)
Globus Toolkit - Globus XIO UDT Driver
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS
fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's
attempts at ipv6 negotiation)
--------------------------------------------------------------------------------
================================================================================
mate-power-manager-1.10.2-2.el7 (FEDORA-EPEL-2015-de9102f144)
MATE power management service
--------------------------------------------------------------------------------
Update Information:
mate-power-manager-1.10.2-2.el7 - fix handle backlight in different cases -
add an option to disable power button
--------------------------------------------------------------------------------
================================================================================
matio-1.5.2-1.el7 (FEDORA-EPEL-2015-52ce6855c7)
Library for reading/writing Matlab MAT files
--------------------------------------------------------------------------------
Update Information:
initial package for EPEL7
--------------------------------------------------------------------------------
================================================================================
mozilla-adblockplus-2.6.11-1.el7 (FEDORA-EPEL-2015-e802769724)
Adblocking extension for Mozilla Firefox, Thunderbird, and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
- Fixed: Findbar in Filter Preferences was slightly broken when using Firefox
42 and above (issue 2832). - Fixed: Notification pop-up shouldn’t disappear if
somebody clicks outside it (issue 3060). - Fixed: Toolbar icon broken in
SeaMonkey 2.40 and above (issue 3072). - Added promotional message for Adblock
Browser to the first-run page (issue 3031). Some users may object to the last
one. I do not consider this to be a significant change in the user experience,
or a change at all, really. It does not impact usage, only a minor change to the
first run screen.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1265859 - mozilla-adblockplus-2.6.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1265859
--------------------------------------------------------------------------------
================================================================================
myrepos-1.20151022-1.el7 (FEDORA-EPEL-2015-8bb56d6198)
A multiple SCM repository management tool
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.20151022 (rhbz#1278814)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1278814 - myrepos is outdated
https://bugzilla.redhat.com/show_bug.cgi?id=1278814
--------------------------------------------------------------------------------
================================================================================
nautilus-image-converter-0.3.1-0.10.git430afce31.el7 (FEDORA-EPEL-2015-9ad5f62288)
Nautilus extension to mass resize images
--------------------------------------------------------------------------------
Update Information:
Initial build for EPEL7
--------------------------------------------------------------------------------
================================================================================
nodejs-arrify-1.0.0-1.el7 (FEDORA-EPEL-2015-f7dd91fd67)
Convert a value to an array
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1272668 - Review Request: nodejs-arrify - Convert a value to an array
https://bugzilla.redhat.com/show_bug.cgi?id=1272668
--------------------------------------------------------------------------------
================================================================================
nodejs-std-mocks-1.0.0-1.el7 (FEDORA-EPEL-2015-659a964be0)
Mock node stdout and stderr without pain
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1275000 - Review Request: nodejs-std-mocks - Mock node stdout and stderr
without pain
https://bugzilla.redhat.com/show_bug.cgi?id=1275000
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-nagios-plugins-1.8.4-3.el7 (FEDORA-EPEL-2015-7600fcdec0)
Nagios plugins for ARC
--------------------------------------------------------------------------------
Update Information:
Nagios plugins for ARC.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1274493 - Review Request: nordugrid-arc-nagios-plugins - Nagios plugins for
ARC
https://bugzilla.redhat.com/show_bug.cgi?id=1274493
--------------------------------------------------------------------------------
================================================================================
nwchem-6.6.27746-22.el7 (FEDORA-EPEL-2015-58d7c8e310)
Delivering High-Performance Computational Chemistry to Science
--------------------------------------------------------------------------------
Update Information:
upstream update
--------------------------------------------------------------------------------
================================================================================
pdns-3.4.7-1.el7 (FEDORA-EPEL-2015-8a26d71e56)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
- Update to 3.4.7 Release notes:
https://doc.powerdns.com/md/changelog
/#powerdns-authoritative-server-347
--------------------------------------------------------------------------------
================================================================================
php-kukulich-fshl-2.1.0-2.el7 (FEDORA-EPEL-2015-4e5f130916)
FSHL: fast syntax highlighter
--------------------------------------------------------------------------------
Update Information:
FSHL is a free, open source, universal, fast syntax highlighter written in PHP.
A very fast parser performs syntax highlighting for few languages and produces a
HTML output. To use this library, you just have to add, in your project:
require_once '/usr/share/php/FSHL/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277487 - Review Request: php-kukulich-fshl - FSHL: fast syntax highlighter
https://bugzilla.redhat.com/show_bug.cgi?id=1277487
--------------------------------------------------------------------------------
================================================================================
py4j-0.9-1.el7 (FEDORA-EPEL-2015-9ae36e9e80)
Dynamically access in Python programs to arbitrary Java objects
--------------------------------------------------------------------------------
Update Information:
official upstream release (v0.9)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215762 - Review Request: py4j - Dynamically access in Python programs to
arbitrary Java objects (for Python 2 and 3)
https://bugzilla.redhat.com/show_bug.cgi?id=1215762
--------------------------------------------------------------------------------
================================================================================
quassel-0.11.1-1.el7 (FEDORA-EPEL-2015-7b2b7d02df)
A modern distributed IRC system
--------------------------------------------------------------------------------
Update Information:
upgraded to 0.11.1, fixes CVE-2015-3427 set severity to "high" because
CVE-2015-3427 bug allows remote attackers SQL injection
--------------------------------------------------------------------------------
================================================================================
relval-1.11.6-2.el7 (FEDORA-EPEL-2015-09db862e14)
Tool for interacting with Fedora QA wiki pages
--------------------------------------------------------------------------------
Update Information:
This update introduces the 'relval' package. relval is a tool for interacting
with the Fedora wiki pages related to release validation testing: it can create
new pages, enter results into existing pages, generate various statistics, and
more. See the [upstream
page](https://www.happyassassin.net/wikitcms) for
details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1173798 - Review Request: relval - Tool for interacting with Fedora QA wiki
pages
https://bugzilla.redhat.com/show_bug.cgi?id=1173798
--------------------------------------------------------------------------------
================================================================================
telegram-cli-1.3.1-7.20150730git2052f4.el7 (FEDORA-EPEL-2015-693544258f)
Linux Command-line interface for Telegram
--------------------------------------------------------------------------------
Update Information:
telegram-cli-1.3.1-7.20150730git2052f4.fc22 - Hardened builds on <F23
telegram-cli-1.3.1-7.20150730git2052f4.fc23 - Hardened builds on <F23
telegram-cli-1.3.1-7.20150730git2052f4.el7 - Hardened builds on <F23
telegram-cli-1.3.1-7.20150730git2052f4.el6 - Hardened builds on <F23
--------------------------------------------------------------------------------
================================================================================
xsd-4.0.0-10.el7 (FEDORA-EPEL-2015-7172d2b48e)
W3C XML schema to C++ data binding compiler
--------------------------------------------------------------------------------
Update Information:
xsd-4.0.0-10.fc23 - Add patch to fix bug in C++/Parser Expat Support in EPEL
builds xsd-4.0.0-10.fc21 - Add patch to fix bug in C++/Parser Expat Support
in EPEL builds xsd-4.0.0-10.fc22 - Add patch to fix bug in C++/Parser Expat
Support in EPEL builds xsd-4.0.0-10.el6 - Add patch to fix bug in C++/Parser
Expat Support in EPEL builds xsd-4.0.0-10.el7 - Add patch to fix bug in
C++/Parser Expat Support in EPEL builds
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1098622 - Request build for epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1098622
[ 2 ] Bug #1270346 - XSD Additional review
https://bugzilla.redhat.com/show_bug.cgi?id=1270346
--------------------------------------------------------------------------------