The following Fedora EPEL 7 Security updates need testing:
Age URL
247
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
143
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
51
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7
39
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060
mediawiki123-1.23.11-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b3471305ee
php-horde-horde-5.2.8-1.el7 php-horde-imp-6.2.11-1.el7 php-horde-ingo-3.2.7-1.el7
php-horde-passwd-5.0.4-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d
php-ZendFramework-1.12.16-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19
perl-HTML-Scrubber-0.15-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b
qemu-2.0.0-1.el7.6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f5273e10c1
rabbitmq-server-3.3.5-12.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f75cdd1774
metis-5.1.0-7.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4b33ee7c84
wildmagic5-5.13-12.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6eaf22c8d
MUMPS-5.0.1-4.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e1379fc854
owncloud-8.0.9-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-693544258f
telegram-cli-1.3.1-7.20150730git2052f4.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7b2b7d02df
quassel-0.11.1-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8a26d71e56
pdns-3.4.7-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-da5a65c143
zarafa-7.1.14-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
clustershell-1.7-1.el7
dvisvgm-1.11-1.el7
grip-3.2.0-49.el7
jboss-jstl-1.2-api-1.0.3-13.el7
jxrlib-1.1-4.el7
perl-Time-ParseDate-2015.103-1.el7
texlive-extension-2012-1.el7
zarafa-7.1.14-1.el7
Details about builds:
================================================================================
clustershell-1.7-1.el7 (FEDORA-EPEL-2015-398011f3bb)
Python framework for efficient cluster administration
--------------------------------------------------------------------------------
Update Information:
clustershell-1.7-1.el7 - update to 1.7
--------------------------------------------------------------------------------
================================================================================
dvisvgm-1.11-1.el7 (FEDORA-EPEL-2015-8df71034ff)
DVI to SVG converter
--------------------------------------------------------------------------------
Update Information:
Update to dvisvgm 1.11. For information on recent changes in this version, see:
http://dvisvgm.bplaced.net/News
--------------------------------------------------------------------------------
================================================================================
grip-3.2.0-49.el7 (FEDORA-EPEL-2015-08a0855ec5)
Front-end for CD rippers and Ogg Vorbis encoders
--------------------------------------------------------------------------------
Update Information:
Added to EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279624 - Please branch and build grip for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1279624
--------------------------------------------------------------------------------
================================================================================
jboss-jstl-1.2-api-1.0.3-13.el7 (FEDORA-EPEL-2015-48ef56dfbb)
JSP Standard Template Library 1.2 API
--------------------------------------------------------------------------------
Update Information:
This is an update fixing build on s390x with IBM java SDK.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279214 - [epel7s390x] jboss-jstl-1.2-api SRPM does not build correctly on
s390x (using IBM Java)
https://bugzilla.redhat.com/show_bug.cgi?id=1279214
--------------------------------------------------------------------------------
================================================================================
jxrlib-1.1-4.el7 (FEDORA-EPEL-2015-3d7f3eb148)
Open source implementation of jpegxr
--------------------------------------------------------------------------------
Update Information:
Initial package for EL7.
--------------------------------------------------------------------------------
================================================================================
perl-Time-ParseDate-2015.103-1.el7 (FEDORA-EPEL-2015-7de0e3f469)
Perl modules for parsing dates and times
--------------------------------------------------------------------------------
Update Information:
2015.1030 2015-10-30 * Not requirement for Time::Piece for tests. 2015.0925
2015-09-25 *
https://rt.cpan.org/Ticket/Display.html?id=96453 * fix epoch
second 0 with timezone. 2015.0925 2015-09-25 * apply patch from bug
https://rt.cpan.org/Ticket/Display.html?id=90367 * use Time::Piece in place of
POSIX tzset for better compatibility with Windows. 2015.0925 2015-09-25 *
apply patch from bug
https://rt.cpan.org/Ticket/Display.html?id=96031 * manpage
typo patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279907 - perl-Time-ParseDate-2015.103 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1279907
--------------------------------------------------------------------------------
================================================================================
texlive-extension-2012-1.el7 (FEDORA-EPEL-2015-70dba1217c)
TeX formatting system
--------------------------------------------------------------------------------
Update Information:
texlive-extension include texlive extensions which are dropped in RHEL7. This
update has langcyrillic support.
--------------------------------------------------------------------------------
================================================================================
zarafa-7.1.14-1.el7 (FEDORA-EPEL-2015-da5a65c143)
Open Source Edition of the Zarafa Collaboration Platform
--------------------------------------------------------------------------------
Update Information:
Zarafa Collaboration Platform 7.1.14 final [51822]
================================================== - ZCP-13581: update fck-
editor (for webaccess) to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 -
zarafa-autorespond suffers from a potential local privilege escalation -
ZCP-13087: Meeting requests are not being sent with Thunderbird Lightning due to
new functionality - ZCP-13608: Attachments are missing in the Sent items folder
when using a cache profile - ZCP-13243: ser_safe_mode falsely reports that it
would delete users
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1263006 - CVE-2015-6566 zarafa: Potential local privilege escalation in
zarafa-autorespond
https://bugzilla.redhat.com/show_bug.cgi?id=1263006
--------------------------------------------------------------------------------