The following Fedora EPEL 7 Security updates need testing:
Age URL
729
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
491
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
210
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
193
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
73
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-759dd56b65
firebird-2.5.7.27050.0-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-af1e2c321c
phpMyAdmin-4.4.15.10-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-20968c98b8
nodejs-6.9.5-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-cf89632a6e
canl-c-2.1.8-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d5fe44714a
cacti-1.0.4-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0e81fa293f
drupal7-metatag-1.21-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f1dce07331
drupal7-views-3.15-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f99defddc3
munin-2.0.30-5.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-18d82f816f
breeze-icon-theme-5.31.0-1.el7 extra-cmake-modules-5.31.0-3.el7 kf5-5.31.0-1.el7
kf5-attica-5.31.0-1.el7 kf5-baloo-5.31.0-1.el7 kf5-bluez-qt-5.31.0-1.el7
kf5-frameworkintegration-5.31.0-1.el7 kf5-kactivities-5.31.0-1.el7
kf5-kactivities-stats-5.31.0-1.el7 kf5-kapidox-5.31.0-1.el7 kf5-karchive-5.31.0-1.el7
kf5-kauth-5.31.0-1.el7 kf5-kbookmarks-5.31.0-1.el7 kf5-kcmutils-5.31.0-1.el7
kf5-kcodecs-5.31.0-1.el7 kf5-kcompletion-5.31.0-1.el7 kf5-kconfig-5.31.0-1.el7
kf5-kconfigwidgets-5.31.0-1.el7 kf5-kcoreaddons-5.31.0-1.el7 kf5-kcrash-5.31.0-1.el7
kf5-kdbusaddons-5.31.0-1.el7 kf5-kdeclarative-5.31.0-1.el7 kf5-kded-5.31.0-1.el7
kf5-kdelibs4support-5.31.0-1.el7 kf5-kdesignerplugin-5.31.0-1.el7 kf5-kdesu-5.31.0-1.el7
kf5-kdewebkit-5.31.0-1.el7 kf5-kdnssd-5.31.0-1.el7 kf5-kdoctools-5.31.0-1.el7
kf5-kemoticons-5.31.0-1.el7 kf5-kfilemetadata-5.31.0-1.el7 kf5-kglobalaccel-5.31.0-1.el7
kf5-kguiaddons-5.31.0-1.el7 kf5-khtml
-5.31.0-1.el7 kf5-ki18n-5.31.0-1.el7 kf5-kiconthemes-5.31.0-1.el7
kf5-kidletime-5.31.0-1.el7 kf5-kimageformats-5.31.0-1.el7 kf5-kinit-5.31.0-1.el7
kf5-kio-5.31.0-2.el7 kf5-kitemmodels-5.31.0-1.el7 kf5-kitemviews-5.31.0-1.el7
kf5-kjobwidgets-5.31.0-1.el7 kf5-kjs-5.31.0-1.el7 kf5-kjsembed-5.31.0-1.el7
kf5-kmediaplayer-5.31.0-1.el7 kf5-knewstuff-5.31.0-1.el7 kf5-knotifications-5.31.0-1.el7
kf5-knotifyconfig-5.31.0-1.el7 kf5-kpackage-5.31.0-1.el7 kf5-kparts-5.31.0-1.el7
kf5-kpeople-5.31.0-1.el7 kf5-kplotting-5.31.0-1.el7 kf5-kpty-5.31.0-1.el7
kf5-kross-5.31.0-1.el7 kf5-krunner-5.31.0-1.el7 kf5-kservice-5.31.0-1.el7
kf5-ktexteditor-5.31.0-2.el7 kf5-ktextwidgets-5.31.0-1.el7
kf5-kunitconversion-5.31.0-1.el7 kf5-kwallet-5.31.0-1.el7 kf5-kwidgetsaddons-5.31.0-1.el7
kf5-kwindowsystem-5.31.0-1.el7 kf5-kxmlgui-5.31.0-1.el7 kf5-kxmlrpcclient-5.31.0-1.el7
kf5-modemmanager-qt-5.31.0-1.el7 kf5-networkmanager-qt-5.31.0-1.el7
kf5-plasma-5.31.0-1.el7 kf5-solid-5.31.0-1.el7 kf5-sonnet-5.31.0-1.el7 kf5
-syntax-highlighting-5.31.0-1.el7 kf5-threadweaver-5.31.0-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c01d41d83
php-pear-PHP-CodeSniffer-2.8.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9701d0e0dd
GraphicsMagick-1.3.25-6.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d2049ca0d4
tor-0.2.9.10-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19578898e6
w3m-0.5.3-30.git20170102.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
beaker-24.1-1.el7
certbot-0.12.0-3.el7
cntlm-0.92.3-10.el7
crudini-0.9-1.el7
fslint-2.46-1.el7
golang-github-hashicorp-go-uuid-0-0.1.git64130c7.el7
golang-github-mitchellh-reflectwalk-0-0.2.giteecf4c7.el7
golang-github-spf13-viper-0-0.7.git1699063.el7
httpd-itk-2.4.7.04-1.el7
llvm3.9-3.9.1-5.el7
loudmouth-1.5.3-1.el7
lyx-2.2.2-5.el7
perl-File-Pid-1.01-21.el7
php-guzzlehttp-psr7-1.4.1-1.el7
php-phpmyadmin-motranslator-3.0-1.el7
php-phpmyadmin-shapefile-2.0-1.el7
php-zendframework-zend-diactoros-1.3.10-1.el7
python-acme-0.12.0-2.el7
python-certbot-apache-0.12.0-1.el7
zstd-1.1.3-1.el7
Details about builds:
================================================================================
beaker-24.1-1.el7 (FEDORA-EPEL-2017-bba78c4fd6)
Full-stack software and hardware integration testing system
--------------------------------------------------------------------------------
Update Information:
New upstream release 24.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410594 - Review Request: beaker - Full-stack software and hardware
integration testing system
https://bugzilla.redhat.com/show_bug.cgi?id=1410594
--------------------------------------------------------------------------------
================================================================================
certbot-0.12.0-3.el7 (FEDORA-EPEL-2017-7036057408)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.0 This update also provides the correct cert_t labelling for
generated certificates and adds an optional systemd timer to handle renewals
automatically (see README.fedora for more details on this).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428615 - python-acme-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428615
[ 2 ] Bug #1428618 - python-certbot-apache-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428618
[ 3 ] Bug #1428617 - certbot-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428617
[ 4 ] Bug #1377312 - Certificate renewal automation
https://bugzilla.redhat.com/show_bug.cgi?id=1377312
[ 5 ] Bug #1289778 - Let's Encrypt gets wrong selinux context on generated
certificates
https://bugzilla.redhat.com/show_bug.cgi?id=1289778
--------------------------------------------------------------------------------
================================================================================
cntlm-0.92.3-10.el7 (FEDORA-EPEL-2017-9972ef4fe5)
Fast NTLM authentication proxy with tunneling
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1264472 - Please provide cntlm in EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1264472
--------------------------------------------------------------------------------
================================================================================
crudini-0.9-1.el7 (FEDORA-EPEL-2017-7547b16d6d)
A utility for manipulating ini files
--------------------------------------------------------------------------------
Update Information:
* Bug fixes * Write errors to stdout are diagnosed correctly and
consistently. * Replacing symlinks now replaces the target rather than the
symlink itself. * Changes in behavior * The case of parameters is
maintained with --get. * Improvements * Single token parameters (without
equals) are now supported, which are used in mysql config for example. ----
Latest upstream
--------------------------------------------------------------------------------
================================================================================
fslint-2.46-1.el7 (FEDORA-EPEL-2017-2c77668175)
File System "lint" discovery and cleaning utility
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-go-uuid-0-0.1.git64130c7.el7 (FEDORA-EPEL-2017-931959e927)
Generates UUID-format strings using purely high quality random bytes
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410410 - Review Request: golang-github-hashicorp-go-uuid - Generates
UUID-format strings using purely high quality random bytes
https://bugzilla.redhat.com/show_bug.cgi?id=1410410
--------------------------------------------------------------------------------
================================================================================
golang-github-mitchellh-reflectwalk-0-0.2.giteecf4c7.el7 (FEDORA-EPEL-2017-4a80bd1e38)
Go library for "walking" complex structures, similar to walking a filesystem
--------------------------------------------------------------------------------
Update Information:
Disable tests ---- First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410150 - Review Request: golang-github-mitchellh-reflectwalk - Go library
for "walking" complex structures, similar to walking a filesystem
https://bugzilla.redhat.com/show_bug.cgi?id=1410150
--------------------------------------------------------------------------------
================================================================================
golang-github-spf13-viper-0-0.7.git1699063.el7 (FEDORA-EPEL-2017-6ad319cf9e)
Go configuration with fangs
--------------------------------------------------------------------------------
Update Information:
Use the default weather import path prefix ---- Bump to upstream
16990631d4aa7e38f73dbbbf37fa13e67c648531
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414254 - Tracker for golang-github-spf13-viper
https://bugzilla.redhat.com/show_bug.cgi?id=1414254
--------------------------------------------------------------------------------
================================================================================
httpd-itk-2.4.7.04-1.el7 (FEDORA-EPEL-2017-22c6dd28b8)
MPM Itk for Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
Update to version 2.4.7-04 to solve problem
https://lists.err.no/pipermail/mpm-
itk/2015-September/000925.html. By mail request of Marco Matarazzo.
--------------------------------------------------------------------------------
================================================================================
llvm3.9-3.9.1-5.el7 (FEDORA-EPEL-2017-da5443eeb3)
The Low Level Virtual Machine Version 3.9
--------------------------------------------------------------------------------
Update Information:
Versioned, parallel installable llvm 3.9
--------------------------------------------------------------------------------
================================================================================
loudmouth-1.5.3-1.el7 (FEDORA-EPEL-2017-8746242787)
XMPP/Jabber C programming library
--------------------------------------------------------------------------------
Update Information:
add el7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419014 - Make EPEL7 package
https://bugzilla.redhat.com/show_bug.cgi?id=1419014
--------------------------------------------------------------------------------
================================================================================
lyx-2.2.2-5.el7 (FEDORA-EPEL-2017-0395758b2b)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
Update to latest stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429544 - Upgrade to 2.2
https://bugzilla.redhat.com/show_bug.cgi?id=1429544
--------------------------------------------------------------------------------
================================================================================
perl-File-Pid-1.01-21.el7 (FEDORA-EPEL-2017-8d8e9685c3)
Pid File Manipulation
--------------------------------------------------------------------------------
Update Information:
Fixed using of uninitialized value (CPAN RT#18960)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429092 - File-Pid: uninitialized value warning if you call running without
an existing pid file (ie run the first time)
https://bugzilla.redhat.com/show_bug.cgi?id=1429092
--------------------------------------------------------------------------------
================================================================================
php-guzzlehttp-psr7-1.4.1-1.el7 (FEDORA-EPEL-2017-888632dea4)
PSR-7 message implementation
--------------------------------------------------------------------------------
Update Information:
## 1.4.1 - 2017-02-27 * Reverted BC break by reintroducing behavior to
automagically fix a URI with a relative path and an authority by adding a
leading slash to the path. It's only deprecated now. * Added triggering of
silenced deprecation warnings. ## 1.4.0 - 2017-02-21 * Fix `Stream::read` when
length parameter <= 0. * `copy_to_stream` reads bytes in chunks instead of
`maxLen` into memory. * Fix `ServerRequest::getUriFromGlobals` when `Host`
header contains port. * Ensure `ServerRequest::getUriFromGlobals` returns a URI
in absolute form. * Allow `parse_response` to parse a response without
delimiting space and reason. * Ensure each URI modification results in a valid
URI according to PSR-7 discussions. Invalid modifications will throw an
exception instead of returning a wrong URI or doing some magic. - `(new
Uri)->withPath('foo')->withHost('example.com')` will throw an
exception
because the path of a URI with an authority must start with a slash "/" or be
empty - `(new Uri())->withScheme('http')` will return
`'http://localhost'` *
Fix compatibility of URIs with `file` scheme and empty host. * Added common URI
utility methods based on RFC 3986 (see documentation in the readme): -
`Uri::isDefaultPort` - `Uri::isAbsolute` - `Uri::isNetworkPathReference`
- `Uri::isAbsolutePathReference` - `Uri::isRelativePathReference` -
`Uri::isSameDocumentReference` - `Uri::composeComponents` -
`UriNormalizer::normalize` - `UriNormalizer::isEquivalent` -
`UriResolver::relativize` * Deprecated `Uri::resolve` in favor of
`UriResolver::resolve` * Deprecated `Uri::removeDotSegments` in favor of
`UriResolver::removeDotSegments`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1425429 - php-guzzlehttp-psr7-1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1425429
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-motranslator-3.0-1.el7 (FEDORA-EPEL-2017-9f9f957199)
Translation API for PHP using Gettext MO files
--------------------------------------------------------------------------------
Update Information:
Translation API for PHP using Gettext MO files. Features * All strings are
stored in memory for fast lookup * Fast loading of MO files * Low level API for
reading MO files * Emulation of Gettext API * No use of eval() for plural
equation Limitations * Not suitable for huge MO files which you don't want to
store in memory * Input and output encoding has to match (preferably UTF-8)
Autoloader: /usr/share/php/PhpMyAdmin/MoTranslator/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415390 - Review Request: php-phpmyadmin-motranslator - Translation API for
PHP using Gettext MO files
https://bugzilla.redhat.com/show_bug.cgi?id=1415390
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-shapefile-2.0-1.el7 (FEDORA-EPEL-2017-86d0e50829)
ESRI ShapeFile library for PHP
--------------------------------------------------------------------------------
Update Information:
Currently the 2D and 3D variants except MultiPatch of the ShapeFile format as
defined in [1]. The library currently supports reading and editing of
ShapeFiles and the Associated information (DBF file). There are a lot of things
that can be improved in the code, if you are interested in developing, helping
with the documentation, making translations or offering new ideas please contact
us. [1]
https://www.esri.com/library/whitepapers/pdfs/shapefile.pdf
Autoloader: /usr/share/php/PhpMyAdmin/ShapeFile/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415389 - Review Request: php-phpmyadmin-shapefile - ESRI ShapeFile library
for PHP
https://bugzilla.redhat.com/show_bug.cgi?id=1415389
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-diactoros-1.3.10-1.el7 (FEDORA-EPEL-2017-b16bea87c8)
PSR HTTP Message implementations
--------------------------------------------------------------------------------
Update Information:
## 1.3.10 - 2017-01-23 ### Added - Nothing. ### Deprecated - Nothing. ###
Removed - Nothing. ### Fixed - [#226](https://github.com/zendframework/zend-
diactoros/pull/226) fixed an issue with the `SapiStreamEmitter` causing the
response body to be cast to `(string)` and also be read as a readable stream,
potentially producing double output. ## 1.3.9 - 2017-01-17 ### Added -
Nothing. ### Deprecated - Nothing. ### Removed - Nothing. ### Fixed -
[#223](https://github.com/zendframework/zend-diactoros/issues/223)
[#224](https://github.com/zendframework/zend-diactoros/pull/224) fixed an issue
with the `SapiStreamEmitter` consuming too much memory when producing output
for readable bodies. ## 1.3.8 - 2017-01-05 ### Added - Nothing. ###
Deprecated - Nothing. ### Removed - Nothing. ### Fixed -
[#222](https://github.com/zendframework/zend-diactoros/pull/222) fixes the
`SapiStreamEmitter`'s handling of the `Content-Range` header to properly only
emit a range of bytes if the header value is in the form `bytes {first-
last}/length`. This allows using other range units, such as `items`, without
incorrectly emitting truncated content.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1411062 - php-zendframework-zend-diactoros-1.3.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1411062
--------------------------------------------------------------------------------
================================================================================
python-acme-0.12.0-2.el7 (FEDORA-EPEL-2017-7036057408)
Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.0 This update also provides the correct cert_t labelling for
generated certificates and adds an optional systemd timer to handle renewals
automatically (see README.fedora for more details on this).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428615 - python-acme-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428615
[ 2 ] Bug #1428618 - python-certbot-apache-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428618
[ 3 ] Bug #1428617 - certbot-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428617
[ 4 ] Bug #1377312 - Certificate renewal automation
https://bugzilla.redhat.com/show_bug.cgi?id=1377312
[ 5 ] Bug #1289778 - Let's Encrypt gets wrong selinux context on generated
certificates
https://bugzilla.redhat.com/show_bug.cgi?id=1289778
--------------------------------------------------------------------------------
================================================================================
python-certbot-apache-0.12.0-1.el7 (FEDORA-EPEL-2017-7036057408)
The apache plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.0 This update also provides the correct cert_t labelling for
generated certificates and adds an optional systemd timer to handle renewals
automatically (see README.fedora for more details on this).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428615 - python-acme-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428615
[ 2 ] Bug #1428618 - python-certbot-apache-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428618
[ 3 ] Bug #1428617 - certbot-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428617
[ 4 ] Bug #1377312 - Certificate renewal automation
https://bugzilla.redhat.com/show_bug.cgi?id=1377312
[ 5 ] Bug #1289778 - Let's Encrypt gets wrong selinux context on generated
certificates
https://bugzilla.redhat.com/show_bug.cgi?id=1289778
--------------------------------------------------------------------------------
================================================================================
zstd-1.1.3-1.el7 (FEDORA-EPEL-2017-02e276e4b3)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------