The following Fedora EPEL 7 Security updates need testing:
Age URL
293
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3989
cross-binutils-2.23.88.0.1-2.el7.1
177
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
73
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7613
zabbix20-2.0.15-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7612
php-twig-1.20.0-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7732 drupal7-7.39-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7800
python-django-1.6.11-3.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7845
php-guzzle-Guzzle-3.9.3-5.el7 php-ZendFramework2-2.4.7-2.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7874
onionshare-0.7.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
Pound-2.7-1.el7
cgit-0.11.2-1.el7
libsmbios-2.2.28-14.el7
nodejs-typeahead.js-0.10.5-3.el7
qmmp-plugin-pack-0.8.6-1.el7
rear-1.17.2-1.el7
shellinabox-2.18-1.el7
udiskie-1.2.1-1.el7
Details about builds:
================================================================================
Pound-2.7-1.el7 (FEDORA-EPEL-2015-7887)
Reverse proxy and load balancer
--------------------------------------------------------------------------------
Update Information:
* update to 2.7 final (#1258262) * drop huge downstream patch which caused PID
file related issues (#1097409)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258262 - weak Diffie-Hellman keys
https://bugzilla.redhat.com/show_bug.cgi?id=1258262
[ 2 ] Bug #1097409 - Pound PID file issue
https://bugzilla.redhat.com/show_bug.cgi?id=1097409
--------------------------------------------------------------------------------
================================================================================
cgit-0.11.2-1.el7 (FEDORA-EPEL-2015-7876)
A fast web interface for git
--------------------------------------------------------------------------------
Update Information:
Update to 0.11.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258552 - EPEL6 build of cgit-0.11.2
https://bugzilla.redhat.com/show_bug.cgi?id=1258552
--------------------------------------------------------------------------------
================================================================================
libsmbios-2.2.28-14.el7 (FEDORA-EPEL-2015-7882)
Libsmbios C/C++ shared libraries
--------------------------------------------------------------------------------
Update Information:
Fixes Bug 852719: Dell Open Manage falis to start when libsmbios in EPEL branch
is used. ---- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #852719 - Update libsmbios to 2.2.28 in EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=852719
--------------------------------------------------------------------------------
================================================================================
nodejs-typeahead.js-0.10.5-3.el7 (FEDORA-EPEL-2015-7878)
Autocomplete library for JavaScript
--------------------------------------------------------------------------------
Update Information:
Inspired by twitter.com's autocomplete search functionality, typeahead.js is a
flexible JavaScript library that provides a strong foundation for building
robust typeaheads.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1151818 - Review Request: nodejs-typeahead.js - Autocomplete library for
JavaScript
https://bugzilla.redhat.com/show_bug.cgi?id=1151818
--------------------------------------------------------------------------------
================================================================================
qmmp-plugin-pack-0.8.6-1.el7 (FEDORA-EPEL-2015-7880)
A set of extra plugins for Qmmp
--------------------------------------------------------------------------------
Update Information:
build for EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1242361 - [RFE] Please provide qmmp EPEL7 build
https://bugzilla.redhat.com/show_bug.cgi?id=1242361
--------------------------------------------------------------------------------
================================================================================
rear-1.17.2-1.el7 (FEDORA-EPEL-2015-7891)
Relax-and-Recover is a Linux disaster recovery and system migration tool
--------------------------------------------------------------------------------
Update Information:
For a changelog see the rear-release-notes.txt file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1238843 - rear: Insecure temporary file usage
https://bugzilla.redhat.com/show_bug.cgi?id=1238843
--------------------------------------------------------------------------------
================================================================================
shellinabox-2.18-1.el7 (FEDORA-EPEL-2015-7885)
Web based AJAX terminal emulator
--------------------------------------------------------------------------------
Update Information:
- Fixed handling of large HTTP packets - Fixed services cleanup on session
timeout - Added logging to system log files for important/fatal errors - Support
for perfect forward secrecy (SSL) - Disabled secure client initiated
renegotiations (SSL) - Minor CSS fixes - SSL security issues - Firefox
international keyboard issue - 256 color support - Message passing support for
embedded shellinabox - Unix domain socket support - Real IP recognition over
proxy - Other minor bug fixes and improvements - Packaging: add license macro,
switch to GitHub sources
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252109 - We package an unmaintained fork of shellinabox
https://bugzilla.redhat.com/show_bug.cgi?id=1252109
--------------------------------------------------------------------------------
================================================================================
udiskie-1.2.1-1.el7 (FEDORA-EPEL-2015-7881)
Removable disk auto-mounter
--------------------------------------------------------------------------------
Update Information:
udiskie-1.2.1-1.fc21 - Update to 1.2.1. udiskie-1.2.1-1.fc22 - Update to
1.2.1. udiskie-1.2.1-1.el7 - Update to 1.2.1. udiskie-1.2.1-1.fc23 -
Update to 1.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258675 - udiskie-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1258675
--------------------------------------------------------------------------------