The following Fedora EPEL 7 Security updates need testing:
Age URL
617
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
379
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
98
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
82
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-03fb3c1531
banshee-2.6.2-11.el7 dbus-sharp-0.7.0-15.el7 dbus-sharp-glib-0.5.0-13.el7
gdata-sharp-1.4.0.2-18.el7 gio-sharp-0.3-14.el7 gkeyfile-sharp-0.1-19.el7
gnome-sharp-2.24.2-12.el7 gtk-sharp-beans-2.14.0-17.el7 gtk-sharp2-2.12.26-3.el7
gtk-sharp3-2.99.3-16.el7 gudev-sharp-0.1-18.el7 libappindicator-12.10.0-11.el7
libgpod-0.8.3-14.el7 libyui-bindings-1.1.0-7.el7 mono-4.2.4-7.el7 mono-addins-1.1-3.el7
mono-cecil-0.9.6-6.el7 mono-zeroconf-0.9.0-16.el7 notify-sharp-0.4.0-0.26.20100411svn.el7
notify-sharp3-3.0.3-2.el7 nunit-3.5-1.el7 nunit2-2.6.4-14.el7 pinta-1.6-5.el7
taglib-sharp-2.1.0.0-3.el7
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6
compat-guile18-1.8.8-14.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-181efcf9c4
tre-0.8.0-18.20140228gitc2f5d13.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e26faf9489
python-simplejson-3.5.3-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2fcbc39837
chromium-54.0.2840.90-3.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-88e8651e7f
mingw-gnutls-3.3.24-2.el7 mingw-nettle-3.3-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9672a02dba
moodle-3.1.3-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0f8120bfcf
moin-1.9.9-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
auter-0.8-1.el7
dmenu-4.6-2.el7
fts-3.5.7-1.el7
gfal2-2.12.3-2.el7
gfal2-python-1.8.4-2.el7
kiss-fft-1.3.0-1.el7
lensfun-0.3.2-2.el7
libdirq-0.4-1.el7
libxsmm-1.5.2-2.el7
mbuffer-20160613-1.el7
moin-1.9.9-1.el7
moodle-3.1.3-1.el7
mozjs38-38.8.0-2.el7
ovirt-engine-cli-3.6.9.2-1.el7
ovirt-engine-sdk-java-3.6.10.0-1.el7
ovirt-engine-sdk-python-3.6.9.1-1.el7
php-simplesamlphp-saml2-2.3.2-1.el7
php-simplesamlphp-saml2_1-1.10.2-1.el7
python-netifaces-0.10.5-2.el7
python-requestbuilder-0.6.0-1.el7
python3-netaddr-0.7.18-2.el7
qm-dsp-1.7.1-1.el7
qm-vamp-plugins-1.7.1-1.el7
siege-4.0.2-2.el7
stompclt-1.5-1.el7
thunderbird-enigmail-1.9.6-1.el7
trustedqsl-2.3-1.el7
Details about builds:
================================================================================
auter-0.8-1.el7 (FEDORA-EPEL-2016-b1a2f53a33)
Prepare and apply updates
--------------------------------------------------------------------------------
Update Information:
Release version 0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1394985 - auter-0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1394985
--------------------------------------------------------------------------------
================================================================================
dmenu-4.6-2.el7 (FEDORA-EPEL-2016-1621887f0f)
Generic menu for X
--------------------------------------------------------------------------------
Update Information:
Update to dmenu 4.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392029 - Please upgrade dmenu to 4.6+
https://bugzilla.redhat.com/show_bug.cgi?id=1392029
--------------------------------------------------------------------------------
================================================================================
fts-3.5.7-1.el7 (FEDORA-EPEL-2016-69f5826a3a)
File Transfer Service V3
--------------------------------------------------------------------------------
Update Information:
New upstream release
[3.5](https://gitlab.cern.ch/fts/fts3/blob/develop/doc/v3.5.md)
--------------------------------------------------------------------------------
================================================================================
gfal2-2.12.3-2.el7 (FEDORA-EPEL-2016-77dc4e39a0)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Build mock plugin. ---- New upstream release 2.12.3
--------------------------------------------------------------------------------
================================================================================
gfal2-python-1.8.4-2.el7 (FEDORA-EPEL-2016-71ae615183)
Python bindings for gfal 2
--------------------------------------------------------------------------------
Update Information:
Rebuild to generate gfal2-python on ppc64le
--------------------------------------------------------------------------------
================================================================================
kiss-fft-1.3.0-1.el7 (FEDORA-EPEL-2016-078a10dcfc)
Fast Fourier Transform library
--------------------------------------------------------------------------------
Update Information:
New release of qm-vamp-plugins 1.7.1 and new required package kiss-fft. kiss-
fft description: A Fast Fourier Transform based up on the principle, "Keep It
Simple, Stupid". Kiss FFT is a very small, reasonably efficient, mixed radix FFT
library that can use either fixed or floating point data types.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279112 - Review Request: kiss-fft - Fast Fourier Transform library
https://bugzilla.redhat.com/show_bug.cgi?id=1279112
[ 2 ] Bug #1261681 - qm-vamp-plugins-1.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1261681
--------------------------------------------------------------------------------
================================================================================
lensfun-0.3.2-2.el7 (FEDORA-EPEL-2016-3b88974158)
Library to rectify defects introduced by photographic lenses
--------------------------------------------------------------------------------
Update Information:
0.3.2-2 release
--------------------------------------------------------------------------------
================================================================================
libdirq-0.4-1.el7 (FEDORA-EPEL-2016-693fad51b5)
C implementation of the simple directory queue algorithm
--------------------------------------------------------------------------------
Update Information:
Initial packaging of latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1393899 - Review Request: libdirq - C implementation of the simple directory
queue algorithm
https://bugzilla.redhat.com/show_bug.cgi?id=1393899
--------------------------------------------------------------------------------
================================================================================
libxsmm-1.5.2-2.el7 (FEDORA-EPEL-2016-02fb3b4515)
Small dense or sparse matrix multiplications and convolutions for x86_64
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1389016 - Review Request: libxsmm - Library for small matrix-matrix
multiplications on Intel x86_64 (e.g. for cp2k)
https://bugzilla.redhat.com/show_bug.cgi?id=1389016
--------------------------------------------------------------------------------
================================================================================
mbuffer-20160613-1.el7 (FEDORA-EPEL-2016-a438acd644)
Measuring Buffer is an enhanced version of buffer
--------------------------------------------------------------------------------
Update Information:
* Mon Nov 14 2016 Fabian Affolter <mail(a)fabian-affolter.ch> - 20160613-1 -
Update to new upstream version 20160613
--------------------------------------------------------------------------------
================================================================================
moin-1.9.9-1.el7 (FEDORA-EPEL-2016-0f8120bfcf)
MoinMoin is a WikiEngine to collaborate on easily editable web pages
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.9 (bugfix release for CVE-2016-7146, CVE-2016-7148)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1394684 - CVE-2016-7146 CVE-2016-7148 moin: Javascript injection via page
creation
https://bugzilla.redhat.com/show_bug.cgi?id=1394684
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.3-1.el7 (FEDORA-EPEL-2016-9672a02dba)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
3.1.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392336 - CVE-2016-9186 CVE-2016-9187 CVE-2016-9188 moodle: Multiple
vulnerabilities in 3.1.2 and before [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1392336
[ 2 ] Bug #1392335 - CVE-2016-9186 CVE-2016-9187 CVE-2016-9188 moodle: Multiple
vulnerabilities in 3.1.2 and before [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1392335
--------------------------------------------------------------------------------
================================================================================
mozjs38-38.8.0-2.el7 (FEDORA-EPEL-2016-6aca6223c2)
JavaScript interpreter and libraries
--------------------------------------------------------------------------------
Update Information:
Rebuild Fedora master branch for EPEL7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1393249 - please build mozjs38 for epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1393249
--------------------------------------------------------------------------------
================================================================================
ovirt-engine-cli-3.6.9.2-1.el7 (FEDORA-EPEL-2016-dd5bf397f2)
oVirt Engine Command Line Interface
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.6.9.2.
--------------------------------------------------------------------------------
================================================================================
ovirt-engine-sdk-java-3.6.10.0-1.el7 (FEDORA-EPEL-2016-70f4744523)
oVirt Engine Software Development Kit (Java)
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.6.10.0. ---- Update to upstream 3.6.0.3. ---- Update to
upstream 3.5.4.0
--------------------------------------------------------------------------------
================================================================================
ovirt-engine-sdk-python-3.6.9.1-1.el7 (FEDORA-EPEL-2016-f2155d65c9)
oVirt Engine Software Development Kit (Python)
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.6.9.1.
--------------------------------------------------------------------------------
================================================================================
php-simplesamlphp-saml2-2.3.2-1.el7 (FEDORA-EPEL-2016-5dcae4f165)
SAML2 PHP library from SimpleSAMLphp
--------------------------------------------------------------------------------
Update Information:
### 1.10.2 / 2.3.2 * Fix namespace bug that made it unable to parse ePTID
attributes as NameIDs ### 1.10.1 / 2.3.1 * Bugfix release to stop assuming
ePTIDs to be always arrays
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379182 - php-simplesamlphp-saml2_1-1.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1379182
[ 2 ] Bug #1393368 - php-simplesamlphp-saml2-2.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1393368
--------------------------------------------------------------------------------
================================================================================
php-simplesamlphp-saml2_1-1.10.2-1.el7 (FEDORA-EPEL-2016-5dcae4f165)
SAML2 PHP library from SimpleSAMLphp (version 1)
--------------------------------------------------------------------------------
Update Information:
### 1.10.2 / 2.3.2 * Fix namespace bug that made it unable to parse ePTID
attributes as NameIDs ### 1.10.1 / 2.3.1 * Bugfix release to stop assuming
ePTIDs to be always arrays
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379182 - php-simplesamlphp-saml2_1-1.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1379182
[ 2 ] Bug #1393368 - php-simplesamlphp-saml2-2.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1393368
--------------------------------------------------------------------------------
================================================================================
python-netifaces-0.10.5-2.el7 (FEDORA-EPEL-2016-9af5f4ff2b)
Python library to retrieve information about network interfaces
--------------------------------------------------------------------------------
Update Information:
Ship python3 package Update to 0.10.5: * Fixed a potential one-byte stack
overwrite (thanks Doug Horn). * Fixed possible null pointer deference (thanks
bastiak). * Respect interface priorities when determining default gateway * Use
CIDR notation for IPv6 netmasks. * Ignore broadcast addresses in the
169.254.0.0/16 range (it appears Cygwin's getaddrinfo() may erroneously generate
these). * Fixed a problem with multi-part Netlink messages on Linux. * When
using Netlink (i.e. Linux), check for the constant NLM_F_DUMP_INTR, since it
only appeared in kernel version 3.1 * Fixed a problem with the gateways()
function that caused it a crash on PyPy. * Added gateway detection via
gateways() function. * Removed empty 'addr' entries for interfaces that don't
provide any addresses. * Added a verion property to the module that you can test
at runtime. * Added address_families dictionary to allow code to look up the
symbolic name corresponding to a given numberic address family code.
--------------------------------------------------------------------------------
================================================================================
python-requestbuilder-0.6.0-1.el7 (FEDORA-EPEL-2016-5500cdfbb1)
Command line-driven HTTP request builder
--------------------------------------------------------------------------------
Update Information:
This update fixes several bugs in commands' help output formatting and adds a
NOTICE logging level.
--------------------------------------------------------------------------------
================================================================================
python3-netaddr-0.7.18-2.el7 (FEDORA-EPEL-2016-58bea500fe)
A pure Python network address representation and manipulation library
--------------------------------------------------------------------------------
Update Information:
A network address manipulation library for Python Provides support for: Layer
3 addresses * IPv4 and IPv6 addresses, subnets, masks, prefixes * iterating,
slicing, sorting, summarizing and classifying IP networks * dealing with
various ranges formats (CIDR, arbitrary ranges and globs, nmap) * set based
operations (unions, intersections etc) over IP addresses and subnets * parsing
a large variety of different formats and notations * looking up IANA IP block
information * generating DNS reverse lookups * supernetting and subnetting
Layer 2 addresses * representation and manipulation MAC addresses and EUI-64
identifiers * looking up IEEE organisational information (OUI, IAB) *
generating derived IPv6 addresses
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1394046 - Review Request: python3-netaddr - A pure Python network address
representation and manipulation library
https://bugzilla.redhat.com/show_bug.cgi?id=1394046
--------------------------------------------------------------------------------
================================================================================
qm-dsp-1.7.1-1.el7 (FEDORA-EPEL-2016-078a10dcfc)
Library for DSP and Music Informatics purposes
--------------------------------------------------------------------------------
Update Information:
New release of qm-vamp-plugins 1.7.1 and new required package kiss-fft. kiss-
fft description: A Fast Fourier Transform based up on the principle, "Keep It
Simple, Stupid". Kiss FFT is a very small, reasonably efficient, mixed radix FFT
library that can use either fixed or floating point data types.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279112 - Review Request: kiss-fft - Fast Fourier Transform library
https://bugzilla.redhat.com/show_bug.cgi?id=1279112
[ 2 ] Bug #1261681 - qm-vamp-plugins-1.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1261681
--------------------------------------------------------------------------------
================================================================================
qm-vamp-plugins-1.7.1-1.el7 (FEDORA-EPEL-2016-078a10dcfc)
Vamp audio feature extraction plugin
--------------------------------------------------------------------------------
Update Information:
New release of qm-vamp-plugins 1.7.1 and new required package kiss-fft. kiss-
fft description: A Fast Fourier Transform based up on the principle, "Keep It
Simple, Stupid". Kiss FFT is a very small, reasonably efficient, mixed radix FFT
library that can use either fixed or floating point data types.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279112 - Review Request: kiss-fft - Fast Fourier Transform library
https://bugzilla.redhat.com/show_bug.cgi?id=1279112
[ 2 ] Bug #1261681 - qm-vamp-plugins-1.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1261681
--------------------------------------------------------------------------------
================================================================================
siege-4.0.2-2.el7 (FEDORA-EPEL-2016-e7b71fd3d6)
A HTTP regression testing and benchmarking utility
--------------------------------------------------------------------------------
Update Information:
Rebuild
--------------------------------------------------------------------------------
================================================================================
stompclt-1.5-1.el7 (FEDORA-EPEL-2016-c5569532bd)
Versatile STOMP client
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395138 - stompclt-1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1395138
--------------------------------------------------------------------------------
================================================================================
thunderbird-enigmail-1.9.6-1.el7 (FEDORA-EPEL-2016-366957b1aa)
Authentication and encryption extension for Mozilla Thunderbird
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1361630 - enigmail refuses to import any public key
https://bugzilla.redhat.com/show_bug.cgi?id=1361630
--------------------------------------------------------------------------------
================================================================================
trustedqsl-2.3-1.el7 (FEDORA-EPEL-2016-123a7ba3f2)
TrustedQSL ham-radio applications
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release. See release notes for more information:
http://www.arrl.org/files/file/LoTW%20Instructions/TrustedQSL-2-3-release...
--------------------------------------------------------------------------------