The following Fedora EPEL 7 Security updates need testing:
Age URL
653
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
415
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
134
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
118
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
60
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6
compat-guile18-1.8.8-14.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-090cbd0a83
botan-1.10.14-3.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-73b4fc1c78
chromium-55.0.2883.87-1.el7.1
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d21e337184
hdf5-1.8.12-8.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0899019edf
game-music-emu-0.6.1-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-911ea9b639
fedfind-3.2.3-1.el7 python-wikitcms-2.1.9-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-17165c490b
nagios-plugins-2.1.4-2.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-403020225c
tor-0.2.8.12-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a189d9c701
js-jquery1-1.12.4-2.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-11ee6fcfdf
js-jquery-2.2.4-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
jabberd-2.4.0-6.el7
js-jquery-2.2.4-1.el7
js-jquery1-1.12.4-2.el7
libspf2-1.2.10-12.20150405gitd57d79fd.el7
opendkim-2.11.0-0.1.el7
python-egenix-mx-base-3.2.9-1.el7
python3-zope-interface-4.3.3-1.el7
tor-0.2.8.12-1.el7
uwsgi-2.0.14-3.el7
webalizer-2.23_08-5.el7
wine-1.8.6-1.el7
Details about builds:
================================================================================
jabberd-2.4.0-6.el7 (FEDORA-EPEL-2016-8ba4818a55)
OpenSource server implementation of the Jabber protocols
--------------------------------------------------------------------------------
Update Information:
Added patches to fix "segfaut in 'sm' component when blocking users"
(#1406062)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406062 - segfaut in 'sm' component when blocking users
https://bugzilla.redhat.com/show_bug.cgi?id=1406062
--------------------------------------------------------------------------------
================================================================================
js-jquery-2.2.4-1.el7 (FEDORA-EPEL-2016-11ee6fcfdf)
JavaScript DOM manipulation, event handling, and AJAX library
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.4 with backport for XSS vulnerability.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307666 - js-jquery: FTBFS in F24
https://bugzilla.redhat.com/show_bug.cgi?id=1307666
[ 2 ] Bug #1399550 - js-jquery: Cross-site scripting via cross-domain ajax requests
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1399550
[ 3 ] Bug #1399549 - js-jquery: Cross-site scripting via cross-domain ajax requests
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1399549
--------------------------------------------------------------------------------
================================================================================
js-jquery1-1.12.4-2.el7 (FEDORA-EPEL-2016-a189d9c701)
JavaScript DOM manipulation, event handling, and AJAX library
--------------------------------------------------------------------------------
Update Information:
Update to latest jquery1 stable, with backport fix for XSS vulnerability.)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307668 - js-jquery1: FTBFS in F24
https://bugzilla.redhat.com/show_bug.cgi?id=1307668
[ 2 ] Bug #1257589 - Upgrade js-jquery1 to 1.11.3
https://bugzilla.redhat.com/show_bug.cgi?id=1257589
[ 3 ] Bug #1399548 - js-jquery1: js-jquery: Cross-site scripting via cross-domain ajax
requests [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1399548
[ 4 ] Bug #1399547 - js-jquery1: js-jquery: Cross-site scripting via cross-domain ajax
requests [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1399547
--------------------------------------------------------------------------------
================================================================================
libspf2-1.2.10-12.20150405gitd57d79fd.el7 (FEDORA-EPEL-2016-55b3f94e04)
An implementation of the SPF specification
--------------------------------------------------------------------------------
Update Information:
Simplify release numbers (same for both library and perl module)
--------------------------------------------------------------------------------
================================================================================
opendkim-2.11.0-0.1.el7 (FEDORA-EPEL-2016-b701e2ad15)
A DomainKeys Identified Mail (DKIM) milter to sign and/or verify mail
--------------------------------------------------------------------------------
Update Information:
Updating to the 2.11.Alpha0 upstream source @
https://sourceforge.net/projects/opendkim/, which has been stable since 2015.
Patches included for: * openssl 1.1.0 support
(
https://sourceforge.net/p/opendkim/patches/35/) * strl.h location
(
https://sourceforge.net/p/opendkim/patches/37/) Thanks @adamwill for the nudge
on re-diffing patches.
--------------------------------------------------------------------------------
================================================================================
python-egenix-mx-base-3.2.9-1.el7 (FEDORA-EPEL-2016-2654cd9eda)
A collection of Python software tools
--------------------------------------------------------------------------------
Update Information:
Upstream v3.2.9
--------------------------------------------------------------------------------
================================================================================
python3-zope-interface-4.3.3-1.el7 (FEDORA-EPEL-2016-ae61512e6e)
Zope 3 Interface Infrastructure
--------------------------------------------------------------------------------
Update Information:
New package for Python 3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404502 - python3-zope-interface-4.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1404502
--------------------------------------------------------------------------------
================================================================================
tor-0.2.8.12-1.el7 (FEDORA-EPEL-2016-403020225c)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-1254 ---- update to upstream release 0.2.8.11 ----
update to upstream release 0.2.8.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406314 - CVE-2016-1254 tor: Remote DoS via parsing problem
https://bugzilla.redhat.com/show_bug.cgi?id=1406314
--------------------------------------------------------------------------------
================================================================================
uwsgi-2.0.14-3.el7 (FEDORA-EPEL-2016-dc198994cb)
Fast, self-healing, application container server
--------------------------------------------------------------------------------
Update Information:
enable psgi plugin on el7
--------------------------------------------------------------------------------
================================================================================
webalizer-2.23_08-5.el7 (FEDORA-EPEL-2016-f2f5bb1856)
A flexible Web server log file analysis program
--------------------------------------------------------------------------------
Update Information:
Build on EPEL >= 7 against libdb-devel to enable DNS/GeoDB code
--------------------------------------------------------------------------------
================================================================================
wine-1.8.6-1.el7 (FEDORA-EPEL-2016-3ea90287b0)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- Fix a regression introduced in 1.8.5 (#41627) - Various bug fixes. - A few
more cards added to the GPU description table.
--------------------------------------------------------------------------------