The following Fedora EPEL 7 Security updates need testing:
Age URL
25
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2748/nodejs-0.10...
24
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2825/nginx-1.6.2...
24
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2861/nodejs-qs-0...
24
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2870/nodejs-send...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3236/python-oaut...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3283/php-ZendFra...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3292/davfs2-1.4....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3454/rubygem-htt...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3432/drupal7-7.3...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3328/zarafa-7.1....
The following builds have been pushed to Fedora EPEL 7 updates-testing
cln-1.3.4-1.el7
grib_api-1.12.3-4.el7
levien-inconsolata-fonts-1.01-11.el7
libsodium-1.0.0-1.el7
munin-2.0.23-1.el7
perl-Crypt-PBKDF2-0.142390-1.el7
perl-Excel-Writer-XLSX-0.79-1.el7
perl-Gtk3-0.017-3.el7
perl-HTTP-Soup-0.01-1.el7
perl-WebService-Linode-0.23-1.el7
php-horde-Horde-Core-2.15.0-1.el7
php-pear-Net-URL2-2.0.11-1.el7
pylint-1.3.1-1.el7
python-astroid-1.2.1-2.el7
python-logilab-common-0.62.1-1.el7
python-paramiko-1.15.1-1.el7
Details about builds:
================================================================================
cln-1.3.4-1.el7 (FEDORA-EPEL-2014-3464)
Class Library for Numbers
--------------------------------------------------------------------------------
Update Information:
2014-10-16, version 1.3.4
=========================
Implementation changes
----------------------
* Fix input of huge floats.
Other changes
-------------
* Support the AArch64 and the Mips64 ABIs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1148106 - cln epel-7 branch
https://bugzilla.redhat.com/show_bug.cgi?id=1148106
--------------------------------------------------------------------------------
================================================================================
grib_api-1.12.3-4.el7 (FEDORA-EPEL-2014-3485)
WMO FM-92 GRIB (v1,v2) interface accessible from C and FORTRAN programs
--------------------------------------------------------------------------------
Update Information:
- Add png support (bug #1154192)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2014 Orion Poplawski <orion(a)cora.nwra.com> - 1.12.3-4
- Add png support (bug #1154192)
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.12.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
levien-inconsolata-fonts-1.01-11.el7 (FEDORA-EPEL-2014-3477)
Inconsolata fonts
--------------------------------------------------------------------------------
Update Information:
Initial epel7 version of levien-inconsolata-fonts
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1154155 - epel-7 branch for levien-inconsolata-fonts
https://bugzilla.redhat.com/show_bug.cgi?id=1154155
--------------------------------------------------------------------------------
================================================================================
libsodium-1.0.0-1.el7 (FEDORA-EPEL-2014-3461)
The Sodium crypto library
--------------------------------------------------------------------------------
Update Information:
- The API and ABI are now stable. New features will be added, but
backward-compatibility is guaranteed through all the 1.x.y releases.
- crypto_sign() properly works with overlapping regions again. Thanks to @pysiak for
reporting this regression introduced in version 0.6.1.
- The test suite has been extended.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 18 2014 Christopher Meng <rpm(a)cicku.me> - 1.0.0-1
- Update to 1.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1144999 - libsodium-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1144999
--------------------------------------------------------------------------------
================================================================================
munin-2.0.23-1.el7 (FEDORA-EPEL-2014-3481)
Network-wide graphing framework (grapher/gatherer)
--------------------------------------------------------------------------------
Update Information:
Upstream released 2.0.23
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 18 2014 "D. Johnson" <fenris02(a)fedoraproject.org> - 2.0.23-1
- Upstream released 2.0.23
* Fri Oct 17 2014 "D. Johnson" <fenris02(a)fedoraproject.org> - 2.0.22-1
- Upstream released 2.0.22
* Tue Oct 7 2014 "D. Johnson" <fenris02(a)fedoraproject.org> - 2.0.21-8
- BZ# 1149948 - munin-async pid file in /var/run rather than /var/run/munin
* Mon Sep 15 2014 Petr Pisar <ppisar(a)redhat.com> - 2.0.21-6
- Build against perl 5.20
* Sun Sep 14 2014 "D. Johnson" <fenris02(a)fedoraproject.org> - 2.0.21-6
- Add amavis plugin config defaults
* Sun Sep 7 2014 "D. Johnson" <fenris02(a)fedoraproject.org> - 2.0.21-5
- BZ# 1114857 - munin-2.0.21-2.fc21 FTBFS: No Package found for java-1.7.0-devel
- re-merge earlier commit for epel7
* Fri Aug 29 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.0.21-4
- Perl 5.20 rebuild
* Fri Aug 1 2014 "D. Johnson" <fenris02(a)fedoraproject.org> - 2.0.21-3
- Default to a localhost name to prevent munin-node from complaining
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.21-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114857 - munin-2.0.21-2.fc21 FTBFS: No Package found for java-1.7.0-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1114857
[ 2 ] Bug #1149948 - munin-async pid file in /var/run rather than /var/run/munin
https://bugzilla.redhat.com/show_bug.cgi?id=1149948
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-PBKDF2-0.142390-1.el7 (FEDORA-EPEL-2014-3476)
PBKDF2 password hashing algorithm
--------------------------------------------------------------------------------
Update Information:
Added option for password length limit, add HMACSHA3 hasher
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 18 2014 David Dick <ddick(a)cpan.org> - 0.142390-1
- Added option for password length limit, add HMACSHA3 hasher
* Mon Sep 1 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.140890-3
- Perl 5.20 rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.140890-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134270 - perl-Crypt-PBKDF2-0.142390 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1134270
--------------------------------------------------------------------------------
================================================================================
perl-Excel-Writer-XLSX-0.79-1.el7 (FEDORA-EPEL-2014-3460)
Create a new file in the Excel 2007+ XLSX format
--------------------------------------------------------------------------------
Update Information:
Update to 0.79
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 18 2014 David Dick <ddick(a)cpan.org> - 0.79-1
- Update to 0.79
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1153976 - perl-Excel-Writer-XLSX-0.79 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1153976
--------------------------------------------------------------------------------
================================================================================
perl-Gtk3-0.017-3.el7 (FEDORA-EPEL-2014-3469)
Perl interface to the 3.x series of the GTK+ toolkit
--------------------------------------------------------------------------------
Update Information:
Perl 5.20 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1150727 - Request EPEL7 branch
https://bugzilla.redhat.com/show_bug.cgi?id=1150727
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Soup-0.01-1.el7 (FEDORA-EPEL-2014-3466)
HTTP client/server library for GNOME
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064817 - Review Request: perl-HTTP-Soup - HTTP client/server library for
GNOME
https://bugzilla.redhat.com/show_bug.cgi?id=1064817
--------------------------------------------------------------------------------
================================================================================
perl-WebService-Linode-0.23-1.el7 (FEDORA-EPEL-2014-3480)
Perl Interface to the
Linode.com API
--------------------------------------------------------------------------------
Update Information:
0.23 2014-10-14 16:31:36 EDT
- Batched API request support by Kevan Benson <kbenson(a)cpan.org>
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 18 2014 Christopher Meng <rpm(a)cicku.me> - 0.23-1
- Update to 0.23
* Thu Aug 28 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.22-2
- Perl 5.20 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1153984 - perl-WebService-Linode-0.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1153984
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.15.0-1.el7 (FEDORA-EPEL-2014-3478)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
Horde_Core 2.15.0
* [mjr] Fix fatal error viewing certain MIME parts due to incorrect method name in the
MimeViewer factory.
* [mjr] Add support for moving calendar items on EAS clients.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 12 2014 Remi Collet <remi(a)fedoraproject.org> - 2.15.0-1
- Update to 2.15.0
--------------------------------------------------------------------------------
================================================================================
php-pear-Net-URL2-2.0.11-1.el7 (FEDORA-EPEL-2014-3228)
Class for parsing and handling URL
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog:
Version 2.0.11
* New: OPTION_DROP_SEQUENCE
Version 2.0.9
* Fixed #20418: Incorrect normalization of URI with missing authority
* Upd: Test for RFC 3986 Section 1.1.2 Examples
* Upd: Travis CI - PHP 5.6 added
Version 2.0.8
* Fixed #20420: Inconsistent setAuthority and getAuthority
* Fixed #20423: URI with IPv6 or IPvFuture not parsed
* Imp: Test for RFC 3986 Section 1.1.2 Examples
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 18 2014 Remi Collet <remi(a)fedoraproject.org> - 2.0.11-1
- Update to 2.0.11
- provide php-composer(pear/net_url2)
* Thu Oct 9 2014 Remi Collet <remi(a)fedoraproject.org> - 2.0.9-1
- Update to 2.0.9 (stable)
* Wed Oct 8 2014 Remi Collet <remi(a)fedoraproject.org> - 2.0.8-1
- Update to 2.0.8 (stable)
--------------------------------------------------------------------------------
================================================================================
pylint-1.3.1-1.el7 (FEDORA-EPEL-2014-3404)
Analyzes Python code looking for bugs and signs of poor quality
--------------------------------------------------------------------------------
Update Information:
Updating to current pylint release.
Fix GLib detection (#1141440)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 3 2014 Brian C. Lane <bcl(a)redhat.com> 1.3.1-1
- Upstream v1.3.1
Dropped patches included in upstream
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon Jun 2 2014 Brian C. Lane <bcl(a)redhat.com> 1.2-6
- Add python3-astroid and python3-setuptools as Requires (#1103479)
* Tue May 27 2014 Kalev Lember <kalevlember(a)gmail.com> - 1.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Changes/Python_3.4
* Fri May 9 2014 Brian C. Lane <bcl(a)redhat.com> 1.2-4
- Fix a potential AttributeError when checking for `reversed` arguments.
https://bitbucket.org/logilab/pylint/commits/93babaf6bffc59a49c75319d9850...
* Thu May 8 2014 Brian C. Lane <bcl(a)redhat.com> 1.2-3
- fix explicit check of python script
https://bitbucket.org/logilab/pylint/issue/219/
* Thu Apr 24 2014 Brian C. Lane <bcl(a)redhat.com> 1.2-2
- Patch to Fix --init-hook typo (dshea)
https://bitbucket.org/logilab/pylint/issue/211/init-hook-no-longer-works
* Tue Apr 22 2014 Brian C. Lane <bcl(a)redhat.com> 1.2-1
- Upstream v1.2
* Thu Feb 27 2014 Brian C. Lane <bcl(a)redhat.com> 1.1.0-1
- Upstream v1.1.0
Drop patch included in upstream
* Thu Oct 24 2013 Brian C. Lane <bcl(a)redhat.com> 1.0.0-3
- Switching on python3 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1141440 - [PATCH] pylint has broken glib detection on f21
https://bugzilla.redhat.com/show_bug.cgi?id=1141440
--------------------------------------------------------------------------------
================================================================================
python-astroid-1.2.1-2.el7 (FEDORA-EPEL-2014-3404)
Python Abstract Syntax Tree New Generation
--------------------------------------------------------------------------------
Update Information:
Updating to current pylint release.
Fix GLib detection (#1141440)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2014 Brian C. Lane <bcl(a)redhat.com> 1.2.1-2
- Add patch to fix GLib detection (#1141440)
https://bitbucket.org/logilab/astroid/issue/49
* Fri Oct 3 2014 Brian C. Lane <bcl(a)redhat.com> 1.2.1-1
- Upstream v1.2.1
Drop patches now included in upstream
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 14 2014 Bohuslav Kabrda <bkabrda(a)redhat.com> - 1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Changes/Python_3.4
* Wed Apr 23 2014 Brian C. Lane <bcl(a)redhat.com> 1.1-3
- Add patch to fix metaclass recursion (upstream bug #25)
https://bitbucket.org/logilab/astroid/issue/25/runtimeerror-maximum-recur...
* Tue Apr 22 2014 Brian C. Lane <bcl(a)redhat.com> 1.1-2
- Add missing source file
* Tue Apr 22 2014 Brian C. Lane <bcl(a)redhat.com> 1.1-1
- Upstream v1.1
Drop patches now included in upstream
* Tue Apr 1 2014 Cole Robinson <crobinso(a)redhat.com> - 1.0.1-3
- Fix some gobject introspection false positives (bz #1079643)
* Fri Feb 28 2014 Brian C. Lane <bcl(a)redhat.com> 1.0.1-2
- Add patch to fix gobject introspection of illegal symbol names (dshea)
* Thu Feb 27 2014 Brian C. Lane <bcl(a)redhat.com> 1.0.1-1
- Upstream v1.0.1
Drop patch included in upstream
* Thu Oct 24 2013 Brian C. Lane <bcl(a)redhat.com> 1.0.0-6
- Switching on python3 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1141440 - [PATCH] pylint has broken glib detection on f21
https://bugzilla.redhat.com/show_bug.cgi?id=1141440
--------------------------------------------------------------------------------
================================================================================
python-logilab-common-0.62.1-1.el7 (FEDORA-EPEL-2014-3404)
Common libraries for Logilab projects
--------------------------------------------------------------------------------
Update Information:
Updating to current pylint release.
Fix GLib detection (#1141440)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 3 2014 Brian C. Lane <bcl(a)redhat.com> 0.62.1-1
- Upstream 0.62.1
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.61.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 14 2014 Bohuslav Kabrda <bkabrda(a)redhat.com> - 0.61.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Changes/Python_3.4
* Thu Feb 27 2014 Brian C. Lane <bcl(a)redhat.com> 0.61.0-1
- Upstream 0.61.0
Fixes CVE-2014-1838 and CVE-2014-1839
* Thu Oct 24 2013 Brian C. Lane <bcl(a)redhat.com> 0.60.0-2
- Switching on python3 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1141440 - [PATCH] pylint has broken glib detection on f21
https://bugzilla.redhat.com/show_bug.cgi?id=1141440
--------------------------------------------------------------------------------
================================================================================
python-paramiko-1.15.1-1.el7 (FEDORA-EPEL-2014-3483)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
Update to 1.15.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2014 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.15.1-1
- Update to 1.15.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1109351 - Update paramiko to 1.15.1
https://bugzilla.redhat.com/show_bug.cgi?id=1109351
--------------------------------------------------------------------------------