The following Fedora EPEL 7 Security updates need testing:
Age URL
63
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binut...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0290/python-djan...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0304/thunderbird...
The following builds have been pushed to Fedora EPEL 7 updates-testing
dpm-xrootd-3.5.2-1.el7
perl-CPAN-Reporter-1.2011-2.el7
python-XStatic-Angular-Bootstrap-0.11.0.2-1.el7
python-django-1.6.10-1.el7
python-fedmsg-meta-fedora-infrastructure-0.3.9-1.el7
python-fmn-consumer-0.4.3-1.el7
python-fmn-lib-0.4.3-2.el7
python-fmn-rules-0.4.3-2.el7
python-fmn-web-0.4.3-1.el7
python-geojson-1.0.1-4.el7
python-narcissus-app-0.9.1-3.el7
python-narcissus-common-0.9.0.1-3.el7
python-pygit2-0.21.4-2.el7
python-tw2-jqplugins-jqplot-2.0.3-3.el7
python-tw2-polymaps-0.3-3.el7
python-tw2-slideymenu-2.2-3.el7
thunderbird-31.4.0-1.el7
youtube-dl-2015.01.11-1.el7
Details about builds:
================================================================================
dpm-xrootd-3.5.2-1.el7 (FEDORA-EPEL-2015-0289)
XROOT interface to the Disk Pool Manager (DPM)
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 3.5.2
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Reporter-1.2011-2.el7 (FEDORA-EPEL-2015-0297)
Adds CPAN Testers reporting to CPAN.pm
--------------------------------------------------------------------------------
Update Information:
Perl 5.20 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1127169 - Review Request: perl-CPAN-Reporter - Adds CPAN Testers reporting to
CPAN.pm
https://bugzilla.redhat.com/show_bug.cgi?id=1127169
--------------------------------------------------------------------------------
================================================================================
python-XStatic-Angular-Bootstrap-0.11.0.2-1.el7 (FEDORA-EPEL-2015-0301)
Angular-Bootstrap (XStatic packaging standard)
--------------------------------------------------------------------------------
Update Information:
Initial package (rhbz#1180803)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1180803 - Review Request: python-XStatic-Angular-Bootstrap -
Angular-Bootstrap (XStatic packaging standard)
https://bugzilla.redhat.com/show_bug.cgi?id=1180803
--------------------------------------------------------------------------------
================================================================================
python-django-1.6.10-1.el7 (FEDORA-EPEL-2015-0290)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
fix CVE-2015-0219 (rhbz#1181939)
update to 1.6.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 14 2015 Matthias Runge <mrunge(a)redhat.com> - 1.6.10-1
- fix CVE-2015-0219 (rhbz#1181939)
- fix CVE-2015-0220 (rhbz#1181943)
- fix CVE-2015-0221 (rhbz#1181946)
- fix CVE-2015-0222 (rhbz#1181951)
* Mon Jan 5 2015 Matthias Runge <mrunge(a)redhat.com> - 1.6.9-1
- update to 1.6.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1179672 - CVE-2015-0219 Django: WSGI header spoofing via underscore/dash
conflation
https://bugzilla.redhat.com/show_bug.cgi?id=1179672
[ 2 ] Bug #1179675 - CVE-2015-0220 Django: Mitigated possible XSS attack via
user-supplied redirect URLs
https://bugzilla.redhat.com/show_bug.cgi?id=1179675
[ 3 ] Bug #1179679 - CVE-2015-0221 Django: denial of service attack against
django.views.static.serve
https://bugzilla.redhat.com/show_bug.cgi?id=1179679
[ 4 ] Bug #1179685 - CVE-2015-0222 Django: database denial of service with
ModelMultipleChoiceField
https://bugzilla.redhat.com/show_bug.cgi?id=1179685
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.3.9-1.el7 (FEDORA-EPEL-2015-0294)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Handle a new message type from the-new-hotness. Change the way usernames are returned
from pkgdb messages.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 15 2015 Ralph Bean <rbean(a)redhat.com> - 0.3.9-1
- Handle a new message from the-new-hotness.
- Change the way usernames are returned from pkgdb messages.
--------------------------------------------------------------------------------
================================================================================
python-fmn-consumer-0.4.3-1.el7 (FEDORA-EPEL-2015-0302)
Backend worker daemon for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 14 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-1
- Latest upstream.
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- Latest upstream.
* Thu Oct 2 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.1-1
- Bugfixes to character encodings in email.
- Bugfix to timestamp construction in irc messages.
--------------------------------------------------------------------------------
================================================================================
python-fmn-lib-0.4.3-2.el7 (FEDORA-EPEL-2015-0295)
Internal API components and model for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Fix incorrect summershum defaults.
Latest upstream.
Latest upstream.
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 15 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-2
- Patch summershum defaults.
* Wed Jan 14 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-1
- Latest upstream.
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.2-1
- Latest upstream with simpler defaults.
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- Latest upstream.
- Tests temporarily disabled due to cyclic dep with fmn.rules.
--------------------------------------------------------------------------------
================================================================================
python-fmn-rules-0.4.3-2.el7 (FEDORA-EPEL-2015-0300)
Message processing rules for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Patch fix to regex matching.
Latest upstream.
Latest upstream.
Latest upstream.
Lots of new rules.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 14 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-2
- Patch to fix regex matching.
* Wed Jan 14 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-1
- Latest upstream.
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.2-1
- Latest upstream with simpler defaults.
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- Updated descriptions.
- Datanommer hinting.
- Temporarily disabled tests due to cyclic dep with fmn.lib.
* Wed Jan 7 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.0-1
- Latest upstream with tons of new rules from Sayan Chowdhury.
--------------------------------------------------------------------------------
================================================================================
python-fmn-web-0.4.3-1.el7 (FEDORA-EPEL-2015-0287)
Frontend Web Application for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 14 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-1
- Latest upstream.
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
python-geojson-1.0.1-4.el7 (FEDORA-EPEL-2015-0285)
Encoder/decoder for simple GIS features
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
python-narcissus-app-0.9.1-3.el7 (FEDORA-EPEL-2015-0303)
WSGI components for Narcissus, realtime log visualization
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
python-narcissus-common-0.9.0.1-3.el7 (FEDORA-EPEL-2015-0299)
Common components for Narcissus, realtime log visualization
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
python-pygit2-0.21.4-2.el7 (FEDORA-EPEL-2015-0293)
Python 2.x bindings for libgit2
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
python-tw2-jqplugins-jqplot-2.0.3-3.el7 (FEDORA-EPEL-2015-0292)
Toscawidgets2 wrapper for the jqPlot jQuery plugin
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
python-tw2-polymaps-0.3-3.el7 (FEDORA-EPEL-2015-0298)
Toscawidgets2 wrapper for polymaps - amazing javascript maps
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
python-tw2-slideymenu-2.2-3.el7 (FEDORA-EPEL-2015-0288)
Toscawidgets2 wrapper for a "slidey" menu
--------------------------------------------------------------------------------
Update Information:
Branch for epel7.
--------------------------------------------------------------------------------
================================================================================
thunderbird-31.4.0-1.el7 (FEDORA-EPEL-2015-0304)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
For list of changes see
https://www.mozilla.org/en-US/thunderbird/31.4.0/releasenotes/
See
https://www.mozilla.org/en-US/thunderbird/31.3.0/releasenotes/ for changes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 14 2015 Jan Horak <jhorak(a)redhat.com> - 31.4.0-1
- Update to 31.4.0
* Mon Jan 5 2015 Jan Horak <jhorak(a)redhat.com> - 31.3.0-2
- Exclude ppc64 arch for epel7
* Mon Dec 1 2014 Jan Horak <jhorak(a)redhat.com> - 31.3.0-1
- Update to 31.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1172386 - security update thunderbird for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1172386
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2015.01.11-1.el7 (FEDORA-EPEL-2015-0286)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to new release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 14 2015 Till Maas <opensource(a)till.name> - 2015.01.11-1
- Update to new release
--------------------------------------------------------------------------------