The following Fedora EPEL 7 Security updates need testing:
Age URL
914
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
677
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
259
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
157
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
155
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
154
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
57
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843
heimdal-7.4.0-1.el7
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-17b77b3268
botan-1.10.16-1.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8c25bd6d7
exim-4.89-2.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fc1436acf8
dnsdist-1.2.0-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-40114bdc74
mbedtls-2.6.0-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8f80d01c29
chromium-60.0.3112.113-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9c2a089ab4
libidn2-2.0.4-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f159ad2ec9
mingw-libidn2-2.0.4-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-29c9f4e49e
freexl-1.0.0i-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-dadbc43983
mimedefang-2.81-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2e4b6b7b5c
lightdm-1.18.3-5.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-59c79d3a8a
google-api-python-client-1.6.2-4.el7 python-httplib2-0.9.2-0.1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
google-api-python-client-1.6.2-4.el7
mint-y-icons-1.0.8-6.el7
moodle-3.1.7-2.el7
pdc-client-1.7.0-3.el7
pg_view-1.4.0-1.el7
php-grasmash-yaml-expander-1.1.1-1.el7
php-phpmyadmin-sql-parser-4.2.0-1.el7
python-azure-sdk-2.0.0-2.el7
python-azure-storage-0.36.0-1.el7
python-httplib2-0.9.2-0.1.el7
python-libpagure-0.10-1.el7
python-mimeparse-1.6.0-4.el7
python-msrestazure-0.4.13-1.el7
stlink-1.4.0-2.el7
Details about builds:
================================================================================
google-api-python-client-1.6.2-4.el7 (FEDORA-EPEL-2017-59c79d3a8a)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
Update for new version of python-httplib2 in RHEL7 Extras. Remove google-api-
python-client patch that allowed 0.9.1 python-httplib2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #958642 - CVE-2013-2037 Python httplib2: ssl cert incorrect error handling
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=958642
--------------------------------------------------------------------------------
================================================================================
mint-y-icons-1.0.8-6.el7 (FEDORA-EPEL-2017-daa963c2c1)
The Mint-Y icon theme
--------------------------------------------------------------------------------
Update Information:
- Add eye-candy for online-accounts
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.7-2.el7 (FEDORA-EPEL-2017-ae10795cdf)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Bundling corrections.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1489208 - EPEL moodle 3.1.x doesn't load tcpdf/tcpdf.php
https://bugzilla.redhat.com/show_bug.cgi?id=1489208
[ 2 ] Bug #1489197 - EPEL moodle-3.1.x must use bundled php-pear-HTML*
https://bugzilla.redhat.com/show_bug.cgi?id=1489197
--------------------------------------------------------------------------------
================================================================================
pdc-client-1.7.0-3.el7 (FEDORA-EPEL-2017-4dcdb5b925)
Console client for interacting with Product Definition Center
--------------------------------------------------------------------------------
Update Information:
Option `insecure` is deprecated (can be still used but a warning printed on
console). The old option should be replaced with `ssl-verify` in personal
configuration files (`~/.config/pdc/*.json`). The **new value is negation of the
old one**, e.g. `"insecure":false` becomes `"ssl-verify":true`. The
version was
bumped from 1.2.0 to 1.7.0 to avoid conflicts with internal and related
projects. ## Changelog - Add "product" command - Add
"product-version" command
- Add "release-variant" command - Add "base-product" command - Add
content-
delivery-repo export/import sub-commands - Allow deleting multiple group
resource perms at once - Allow deleting multiple repos at once - Allow deleting
release variants - Fix SSL command line options - Fix configuration name in
README - Fix content-delivery-repo list ordering - Fix passing ordering
parameter - Fix reading "develop" option from settings - Fix the bug about the
include-shadow para in repo clone - Increase `pdc content-deliver-repo list`
verbosity - Make error reporting less verbose - Omit installing plugins with
Python packages - Omit printing long HTML with error - Print table with minimum
width for content-deliver-repo list - Remove the arch parameter from option -
Replace a custom test runner with standard setup.py test - Simplify reporting
server errors - Sort commands in pdc --help - Support SSL cert when insecure is
false - Unify json output serialization - Update test data for content-deliver-
repo - Update value type for "Shadow" field - Allow overriding 'dest'
option
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484780 - Update pdc-client and pdc python libraries to newest upstream
release
https://bugzilla.redhat.com/show_bug.cgi?id=1484780
--------------------------------------------------------------------------------
================================================================================
pg_view-1.4.0-1.el7 (FEDORA-EPEL-2017-4772c2f919)
Command-line tool to display the state of the PostgreSQL processes
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.0
--------------------------------------------------------------------------------
================================================================================
php-grasmash-yaml-expander-1.1.1-1.el7 (FEDORA-EPEL-2017-3ccfd08cc8)
Expands internal property references in a yaml file
--------------------------------------------------------------------------------
Update Information:
Expands internal property references in a yaml file. Autoloader:
`/usr/share/php/Grasmash/YamlExpander/autoload.php`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483379 - Review Request: php-grasmash-yaml-expander - Expands internal
property references in a yaml file
https://bugzilla.redhat.com/show_bug.cgi?id=1483379
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-sql-parser-4.2.0-1.el7 (FEDORA-EPEL-2017-834beb048a)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 4.2.0** - 2017-08-30 * Initial support for MariaDB SQL contexts. *
Add support for MariaDB 10.3 INTERSECT and EXCEPT.
--------------------------------------------------------------------------------
================================================================================
python-azure-sdk-2.0.0-2.el7 (FEDORA-EPEL-2017-50395615c9)
Microsoft Azure SDK for Python
--------------------------------------------------------------------------------
Update Information:
AutoRest swagger generator Python client runtime. Azure-specific module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1358741 - Review Request: python-msrestazure - AutoRest swagger generator
Python client runtime (Azure-specific module)
https://bugzilla.redhat.com/show_bug.cgi?id=1358741
[ 2 ] Bug #1297852 - Review Request: python-azure-sdk - Microsoft Azure SDK for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1297852
[ 3 ] Bug #1298131 - Review Request: python-azure-storage - Microsoft Azure Storage
Library for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1298131
--------------------------------------------------------------------------------
================================================================================
python-azure-storage-0.36.0-1.el7 (FEDORA-EPEL-2017-50395615c9)
Microsoft Azure Storage Library for Python
--------------------------------------------------------------------------------
Update Information:
AutoRest swagger generator Python client runtime. Azure-specific module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1358741 - Review Request: python-msrestazure - AutoRest swagger generator
Python client runtime (Azure-specific module)
https://bugzilla.redhat.com/show_bug.cgi?id=1358741
[ 2 ] Bug #1297852 - Review Request: python-azure-sdk - Microsoft Azure SDK for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1297852
[ 3 ] Bug #1298131 - Review Request: python-azure-storage - Microsoft Azure Storage
Library for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1298131
--------------------------------------------------------------------------------
================================================================================
python-httplib2-0.9.2-0.1.el7 (FEDORA-EPEL-2017-59c79d3a8a)
A comprehensive HTTP client library
--------------------------------------------------------------------------------
Update Information:
Update for new version of python-httplib2 in RHEL7 Extras. Remove google-api-
python-client patch that allowed 0.9.1 python-httplib2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #958642 - CVE-2013-2037 Python httplib2: ssl cert incorrect error handling
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=958642
--------------------------------------------------------------------------------
================================================================================
python-libpagure-0.10-1.el7 (FEDORA-EPEL-2017-37a62821bb)
A Python library for Pagure APIs
--------------------------------------------------------------------------------
Update Information:
Updates to 0.10
--------------------------------------------------------------------------------
================================================================================
python-mimeparse-1.6.0-4.el7 (FEDORA-EPEL-2017-6db46034ab)
Python module for parsing mime-type names
--------------------------------------------------------------------------------
Update Information:
- Enable python34 subpackage for EPEL
--------------------------------------------------------------------------------
================================================================================
python-msrestazure-0.4.13-1.el7 (FEDORA-EPEL-2017-50395615c9)
AutoRest swagger generator Python client runtime (Azure-specific module)
--------------------------------------------------------------------------------
Update Information:
AutoRest swagger generator Python client runtime. Azure-specific module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1358741 - Review Request: python-msrestazure - AutoRest swagger generator
Python client runtime (Azure-specific module)
https://bugzilla.redhat.com/show_bug.cgi?id=1358741
[ 2 ] Bug #1297852 - Review Request: python-azure-sdk - Microsoft Azure SDK for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1297852
[ 3 ] Bug #1298131 - Review Request: python-azure-storage - Microsoft Azure Storage
Library for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1298131
--------------------------------------------------------------------------------
================================================================================
stlink-1.4.0-2.el7 (FEDORA-EPEL-2017-607ef72dfc)
STM32 discovery line Linux programmer
--------------------------------------------------------------------------------
Update Information:
New package programmer for STM32 microcontrollers.
--------------------------------------------------------------------------------