The following Fedora EPEL 7 Security updates need testing:
Age URL
1094
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
856
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
439
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
336
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
168
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
105
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
nagios-4.3.4-5.el7
55
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65
rootsh-1.5.3-17.el7
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1
jhead-3.00-7.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-50566f0a39
uwsgi-2.0.16-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0296296d7c
mingw-wavpack-5.1.0-4.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9111777f91
freexl-1.0.5-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4
drupal7-7.57-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aacf1b47d6
clamav-0.99.4-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-815e0064e9
tor-0.2.9.15-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
dkms-2.5.0-2.20180306gitb1b9033.el7
knot-resolver-2.1.1-1.el7
libabigail-1.2-1.el7
pax-utils-1.2.3-1.el7
perl-Fsdb-2.65-2.el7
php-pecl-krb5-1.1.2-1.el7
python-django16-1.6.11.7-1.el7
squashfuse-0.1.102-1.el7
standard-test-roles-2.9-1.el7
x2goclient-4.1.1.1-1.el7
Details about builds:
================================================================================
dkms-2.5.0-2.20180306gitb1b9033.el7 (FEDORA-EPEL-2018-943a093af6)
Dynamic Kernel Module Support Framework
--------------------------------------------------------------------------------
Update Information:
Update to latest snapshot. Compressed module support and cleanups.
--------------------------------------------------------------------------------
================================================================================
knot-resolver-2.1.1-1.el7 (FEDORA-EPEL-2018-e9a6e2deb9)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
Knot Resolver 2.1.1 (2018-02-23) ================================ Bugfixes
-------- - when iterating, avoid unnecessary queries for NS in insecure parent.
This problem worsened in 2.0.0. (#246) - prevent UDP packet leaks when using TLS
forwarding - fix the hints module also on some other systems, e.g. Gentoo.
--------------------------------------------------------------------------------
================================================================================
libabigail-1.2-1.el7 (FEDORA-EPEL-2018-dddf390c1e)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.2
--------------------------------------------------------------------------------
================================================================================
pax-utils-1.2.3-1.el7 (FEDORA-EPEL-2018-dfb0769899)
ELF utils that can check files for security relevant properties
--------------------------------------------------------------------------------
Update Information:
ELF utils that can check files for security relevant properties.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548693 - pax-utils-1.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1548693
--------------------------------------------------------------------------------
================================================================================
perl-Fsdb-2.65-2.el7 (FEDORA-EPEL-2018-8fc46c3d61)
A set of commands for manipulating flat-text databases from the shell
--------------------------------------------------------------------------------
Update Information:
uplift to 2.65
--------------------------------------------------------------------------------
================================================================================
php-pecl-krb5-1.1.2-1.el7 (FEDORA-EPEL-2018-4ae839f24e)
Kerberos authentification extension
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.2** - [BUG] Add missing function entry termination for TLData -
[CLEANUP] Don't return garbage on hard class initialization errors, don't throw
from create_object handlers
--------------------------------------------------------------------------------
================================================================================
python-django16-1.6.11.7-1.el7 (FEDORA-EPEL-2018-f7a629b46f)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Update to address two serious CVEs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1552177 - CVE-2018-7536 CVE-2018-7537 python-django16: various flaws
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552177
--------------------------------------------------------------------------------
================================================================================
squashfuse-0.1.102-1.el7 (FEDORA-EPEL-2018-0c373ee2d6)
FUSE filesystem to mount squashfs archives
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.102, which also introduces -libs and -devel packages
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-2.9-1.el7 (FEDORA-EPEL-2018-2149e1a5de)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Update to 2.9
--------------------------------------------------------------------------------
================================================================================
x2goclient-4.1.1.1-1.el7 (FEDORA-EPEL-2018-60ef119939)
X2Go Client application
--------------------------------------------------------------------------------
Update Information:
- authentication bug fixes - only support single display settings if machine
has more than one display - Xinerama support with X2Go Server 4.1.0.0+ - new
--broker-logout-button functionality that can be used to switch to another
broker after the initial authorization
--------------------------------------------------------------------------------