The following Fedora EPEL 7 Security updates need testing:
Age URL
504
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
266
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
133
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e0c08a1414
php-PHPMailer-5.2.16-2.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-767125139f
python34-3.4.3-5.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d85f5db77a
php-doctrine-orm-2.4.8-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6eebbe7e97
p7zip-16.02-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7913c4c81c
breeze-icon-theme-5.24.0-1.el7 extra-cmake-modules-5.24.0-1.el7 kf5-5.24.0-1.el7
kf5-attica-5.24.0-1.el7 kf5-baloo-5.24.0-1.el7 kf5-bluez-qt-5.24.0-1.el7
kf5-frameworkintegration-5.24.0-1.el7 kf5-kactivities-5.24.0-1.el7
kf5-kactivities-stats-5.24.0-1.el7 kf5-kapidox-5.24.0-1.el7 kf5-karchive-5.24.0-1.el7
kf5-kauth-5.24.0-1.el7 kf5-kbookmarks-5.24.0-1.el7 kf5-kcmutils-5.24.0-1.el7
kf5-kcodecs-5.24.0-1.el7 kf5-kcompletion-5.24.0-1.el7 kf5-kconfig-5.24.0-1.el7
kf5-kconfigwidgets-5.24.0-1.el7 kf5-kcoreaddons-5.24.0-1.el7 kf5-kcrash-5.24.0-1.el7
kf5-kdbusaddons-5.24.0-1.el7 kf5-kdeclarative-5.24.0-1.el7 kf5-kded-5.24.0-1.el7
kf5-kdelibs4support-5.24.0-1.el7 kf5-kdesignerplugin-5.24.0-1.el7 kf5-kdesu-5.24.0-1.el7
kf5-kdewebkit-5.24.0-1.el7 kf5-kdnssd-5.24.0-1.el7 kf5-kdoctools-5.24.0-1.el7
kf5-kemoticons-5.24.0-1.el7 kf5-kfilemetadata-5.24.0-1.el7 kf5-kglobalaccel-5.24.0-1.el7
kf5-kguiaddons-5.24.0-1.el7 kf5-khtml
-5.24.0-1.el7 kf5-ki18n-5.24.0-1.el7 kf5-kiconthemes-5.24.0-1.el7
kf5-kidletime-5.24.0-1.el7 kf5-kimageformats-5.24.0-1.el7 kf5-kinit-5.24.0-1.el7
kf5-kio-5.24.0-1.el7 kf5-kitemmodels-5.24.0-1.el7 kf5-kitemviews-5.24.0-1.el7
kf5-kjobwidgets-5.24.0-1.el7 kf5-kjs-5.24.0-1.el7 kf5-kjsembed-5.24.0-1.el7
kf5-kmediaplayer-5.24.0-1.el7 kf5-knewstuff-5.24.0-1.el7 kf5-knotifications-5.24.0-1.el7
kf5-knotifyconfig-5.24.0-1.el7 kf5-kpackage-5.24.0-1.el7 kf5-kparts-5.24.0-1.el7
kf5-kpeople-5.24.0-1.el7 kf5-kplotting-5.24.0-1.el7 kf5-kpty-5.24.0-1.el7
kf5-kross-5.24.0-1.el7 kf5-krunner-5.24.0-1.el7 kf5-kservice-5.24.0-1.el7
kf5-ktexteditor-5.24.0-1.el7 kf5-ktextwidgets-5.24.0-1.el7
kf5-kunitconversion-5.24.0-1.el7 kf5-kwallet-5.24.0-1.el7 kf5-kwidgetsaddons-5.24.0-1.el7
kf5-kwindowsystem-5.24.0-1.el7 kf5-kxmlgui-5.24.0-1.el7 kf5-kxmlrpcclient-5.24.0-1.el7
kf5-modemmanager-qt-5.24.0-1.el7 kf5-networkmanager-qt-5.24.0-1.el7
kf5-plasma-5.24.0-1.el7 kf5-solid-5.24.0-1.el7 kf5-sonnet-5.24.0-1.el7 kf5
-threadweaver-5.24.0-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3a667cc289
php-guzzlehttp-guzzle-5.3.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-fbf24e04bd
drupal7-views-3.14-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-76bb0cb040
php-doctrine-common-2.5.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
avr-binutils-2.24-3.el7
epel-release-7-8
htop-2.0.2-1.el7
opendmarc-1.3.2-0.4.beta0.el7
perl-Sereal-3.014-1.el7
perl-Sereal-Decoder-3.014-1.el7
perl-Sereal-Encoder-3.014-1.el7
php-aws-sdk-2.8.30-1.el7
php-composer-installers-1.1.0-1.el7
php-di-invoker-1.3.3-1.el7
php-google-apiclient-1.1.8-1.el7
php-scssphp-0.6.5-1.el7
php-silex-1.3.5-4.el7
php-stack-builder-1.0.4-1.el7
php-symfony-polyfill-1.2.0-1.el7
purple-skypeweb-1.2-2.20160720git2b42d11.el7
Details about builds:
================================================================================
avr-binutils-2.24-3.el7 (FEDORA-EPEL-2016-3652985c3e)
Cross Compiling GNU binutils targeted at avr
--------------------------------------------------------------------------------
Update Information:
fix CVE-2014-8738: out of bounds memory write
--------------------------------------------------------------------------------
================================================================================
epel-release-7-8 (FEDORA-EPEL-2016-c068572af2)
Extra Packages for Enterprise Linux repository configuration
--------------------------------------------------------------------------------
Update Information:
Drop duplicate libstoragemgmt from presets. Fixes bug #1358971
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1358971 - Duplicate 'libstoragemgmt' entry in systemd preset against
RHEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1358971
--------------------------------------------------------------------------------
================================================================================
htop-2.0.2-1.el7 (FEDORA-EPEL-2016-070fba16c9)
Interactive process viewer
--------------------------------------------------------------------------------
Update Information:
- Update to 2.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359437 - htop-2.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1359437
--------------------------------------------------------------------------------
================================================================================
opendmarc-1.3.2-0.4.beta0.el7 (FEDORA-EPEL-2016-bf7754d754)
A Domain-based Message Authentication, Reporting & Conformance (DMARC) milter and
library
--------------------------------------------------------------------------------
Update Information:
Fixed path in import-stats patch ---- Updating to 1.3.2.Beta0 release, in
anticipation of full release. This version incorporates a number of patches
since the 1.3.1 release. See:
https://sourceforge.net/p/opendmarc/activity/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293279 - opendkim miss LDAP support
https://bugzilla.redhat.com/show_bug.cgi?id=1293279
[ 2 ] Bug #1287176 - OpenDMARC does not accept valid mail size limiting syntax in DMARC
record
https://bugzilla.redhat.com/show_bug.cgi?id=1287176
[ 3 ] Bug #1331971 - wrong result with self SPF check
https://bugzilla.redhat.com/show_bug.cgi?id=1331971
[ 4 ] Bug #1332521 - opendmarc always adds spf=pass
https://bugzilla.redhat.com/show_bug.cgi?id=1332521
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-3.014-1.el7 (FEDORA-EPEL-2016-6c9c1e1cdb)
Fast, compact, powerful binary (de-)serialization
--------------------------------------------------------------------------------
Update Information:
Perl Sereal modules stack update for epel7. Testing COPR:
https://copr.fedorainfracloud.org/coprs/dfateyev/perl-Sereal/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347982 - Sereal 3.003 chomps off "\n" during serialization
https://bugzilla.redhat.com/show_bug.cgi?id=1347982
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Decoder-3.014-1.el7 (FEDORA-EPEL-2016-6c9c1e1cdb)
Perl deserialization for Sereal format
--------------------------------------------------------------------------------
Update Information:
Perl Sereal modules stack update for epel7. Testing COPR:
https://copr.fedorainfracloud.org/coprs/dfateyev/perl-Sereal/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347982 - Sereal 3.003 chomps off "\n" during serialization
https://bugzilla.redhat.com/show_bug.cgi?id=1347982
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Encoder-3.014-1.el7 (FEDORA-EPEL-2016-6c9c1e1cdb)
Perl serialization into Serial format
--------------------------------------------------------------------------------
Update Information:
Perl Sereal modules stack update for epel7. Testing COPR:
https://copr.fedorainfracloud.org/coprs/dfateyev/perl-Sereal/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347982 - Sereal 3.003 chomps off "\n" during serialization
https://bugzilla.redhat.com/show_bug.cgi?id=1347982
--------------------------------------------------------------------------------
================================================================================
php-aws-sdk-2.8.30-1.el7 (FEDORA-EPEL-2016-77eccb854e)
Amazon Web Services framework for PHP
--------------------------------------------------------------------------------
Update Information:
## 2.8.30 - 2016-05-03 * `Aws\Lambda` - Fixed bug in `UpdateFunctionCode`. ##
2.8.29 - 2016-04-11 * `Aws\Lambda` - Fixed bug in `UpdateFunctionCode`. ##
2.8.28 - 2016-04-05 * `Aws\Common` - Fixed a race condition caused by
credentials expiring and being refreshed after a request signature had been
partially calculated.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359344 - php-aws-sdk-2.8.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1359344
--------------------------------------------------------------------------------
================================================================================
php-composer-installers-1.1.0-1.el7 (FEDORA-EPEL-2016-b776ae5af1)
A multi-framework Composer library installer
--------------------------------------------------------------------------------
Update Information:
## [
v1.1.0](https://github.com/composer/installers/releases/tag/v1.1.0) -
Installer for ReIndex #262. - Installer for RadPHP #235. - Installer for Decibel
#283. - Installer for Phifty #276. - Installer for ExpressionEngine #303. - New
paths for new Bitrix CMS #309. Old paths is deprecated.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1352896 - php-composer-installers-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1352896
--------------------------------------------------------------------------------
================================================================================
php-di-invoker-1.3.3-1.el7 (FEDORA-EPEL-2016-63cb7b8759)
Generic and extensible callable invoker
--------------------------------------------------------------------------------
Update Information:
## [
1.3.3](https://github.com/PHP-DI/Invoker/releases/tag/1.3.3) - Performance
improvement: #12 ## [
1.3.2](https://github.com/PHP-
DI/Invoker/releases/tag/1.3.2) - \#11 Explicit exception message for
unsupported magic methods ## [
1.3.1](https://github.com/PHP-
DI/Invoker/releases/tag/1.3.1) - \#9 Fix exception message for callables
containing objects
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1341396 - php-di-invoker-1.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1341396
--------------------------------------------------------------------------------
================================================================================
php-google-apiclient-1.1.8-1.el7 (FEDORA-EPEL-2016-dc4aa9d528)
Client library for Google APIs
--------------------------------------------------------------------------------
Update Information:
## [
1.1.8](https://github.com/google/google-api-php-client/releases/tag/1.1.8)
- fixes branch alias for dev v1-master ## [
1.1.7](https://github.com/google
/google-api-php-client/releases/tag/1.1.7) - Merge pull request #816 from gws
/configurable-curl-proxy-workaround - Make cURL proxy header calculation bug
workaround configurable ## [
1.1.6](https://github.com/google/google-api-php-
client/releases/tag/1.1.6) - makes new tests for verifyIdToken php-53-array
friendly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1275453 - php-google-apiclient-1.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1275453
--------------------------------------------------------------------------------
================================================================================
php-scssphp-0.6.5-1.el7 (FEDORA-EPEL-2016-a9f8e460f1)
A compiler for SCSS written in PHP
--------------------------------------------------------------------------------
Update Information:
## [
v0.6.5](https://github.com/leafo/scssphp/releases/tag/v0.6.5) ###
Compatibility - ignore BOM (@nwiborg) - fix another mixin and variable scope
issue (@mahagr) ### Enhancement - Compiler: coerceValue support for #rgb
values (@thesjg) ### Maintenance - preserve un-normalized variable name for
error message (@kissifrot) ##
[
v0.6.4](https://github.com/leafo/scssphp/releases/tag/v0.6.4) ###
Compatibility - parsing multiple assignment flags (@Limych) - @warn should not
write to stdout (@atomicalnet) - evaluating null and/or 'foo' (@micranet) ###
Bug fixes - case insensitive directives regression (@Limych) ### Internals -
Compiler: scope change to some properties and methods to facilitate subclassing
(@jo) ## [
v0.6.3](https://github.com/leafo/scssphp/releases/tag/v0.6.3) ###
Compatibility - extend + parent + placeholder fix (@atna) ### Bug fixes -
nested content infinite loop (@Lusito) - only divide by 100 if percent (@jkrehm)
### Internals - Parser: refactoring and performance optimizations (@oyejorge)
## [
v0.6.2](https://github.com/leafo/scssphp/releases/tag/v0.6.2) ###
Announcement - Colors: add rebeccapurple from css-color draft (@Marat-Tanalin)
### Compat Buster - bin/pscss more performant, less compatible --iso8859-1
option (default is utf-8) ### Compatibility - support unicode characters in
identifiers (e.g., variable names) ### Internals - Parser: fix parser
exception when mbstring.func_overload=2 and mbstring.internal_encoding=utf-8 -
Parser: refactor attribute selector code - use shorthand array syntax, update
code sniffer dependency, and improve SensioLabsInsight score ##
[
v0.6.1](https://github.com/leafo/scssphp/releases/tag/v0.6.1) ###
Announcements - bin/pscss --continue-on-error ### SCSS Compatibility -
implement @extend !optional - implement keywords($args) built-in ### Bug fixes
- BEM and @extend infinite loop ### Internals - exception refactoring
(@osavchenko) - Compiler: setIgnoreErrors(boolean) (@osavchenko) ##
[
v0.6.0](https://github.com/leafo/scssphp/releases/tag/v0.6.0) ### Announcement
- php5.4 support to be dropped in the new year ### Compat Buster - Parser:
getLineNo() removed ### Compatibility - handle escaped quotes inside quoted
strings (with or without interpolation present) ### Bug fixes - undefined
sourceParser when re-using a single Compiler instance ### Internals - replace
sourceParsers[] with sourceNames - replace sourcePosition with sourceLine and
sourceColumn ## [
v0.5.1](https://github.com/leafo/scssphp/releases/tag/v0.5.1)
### Announcements - Added @scssphp-import-once (@IceReaper) ### Compatibility
- Avoid notices with custom error handlers that don't check if error_reporting()
returns 0 ## [
v0.5.0](https://github.com/leafo/scssphp/releases/tag/v0.5.0)
### Announcements - Raise minimum supported version to PHP 5.4 - Drop HHVM
support/hacks ### Breaking Changes - Remove deprecated classmap.php -
Node\Number units reimplemented as array ### Compatibility - Compiler: treat !
null === true - Compiler: str-splice() fixes - Node\Number: fixes incompatible
units
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347068 - php-scssphp-0.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1347068
--------------------------------------------------------------------------------
================================================================================
php-silex-1.3.5-4.el7 (FEDORA-EPEL-2016-46163198ef)
PHP micro-framework based on the Symfony components
--------------------------------------------------------------------------------
Update Information:
1.3.5 (2016-01-06) ------------------ * fixed typo in SecurityServiceProvider
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1296756 - php-silex-1.3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1296756
--------------------------------------------------------------------------------
================================================================================
php-stack-builder-1.0.4-1.el7 (FEDORA-EPEL-2016-575f88a10b)
Builder for stack middlewares based on HttpKernelInterface
--------------------------------------------------------------------------------
Update Information:
## 1.0.4 (2016-06-02) * Add compability with Symfony 3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342093 - php-stack-builder-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1342093
--------------------------------------------------------------------------------
================================================================================
php-symfony-polyfill-1.2.0-1.el7 (FEDORA-EPEL-2016-4f84bda2a5)
Symfony polyfills backporting features to lower PHP versions
--------------------------------------------------------------------------------
Update Information:
## [
v1.2.0](https://github.com/symfony/polyfill/releases/tag/v1.2.0) * bug #61
Normalizer::decompose() should reorder "recursive" combining chars (nicolas-
grekas) * bug #59 Normalizer::recompose() should reset the last combining class
on ASCII (nicolas-grekas) * bug #59 Normalizer::isNormalized() should fail with
Normalizer::NONE (nicolas-grekas) * bug #59 Normalizer::isNormalized() and
::normalize() should check for multibyte string function overload (nicolas-
grekas) * feature #44/#53 allow paragonie/random_compat 2.0 (ickbinhier) *
feature #51 Use plain PHP for data maps to benefit from OPcache on PHP 5.6+
(nicolas-grekas) * bug #49 Fix hex2bin return null (fuhry, binwiederhier) ##
[
v1.1.1](https://github.com/symfony/polyfill/releases/tag/v1.1.1) * bug #40
[Apcu] Load APCUIterator only when APCIterator exists (nicolas-grekas) * bug
#37 [Iconv] Fix wrong use in bootstrap.php (tucksaun) * bug #31 Fix class_uses
polyfill (WouterJ) ##
[
v1.1.0](https://github.com/symfony/polyfill/releases/tag/v1.1.0) * feature
#22 [APCu] A new polyfill for the legacy APC users (nicolas-grekas) * bug #28
[Php70] Workaround
https://bugs.php.net/63206 (nicolas-grekas)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301791 - php-symfony-polyfill-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301791
--------------------------------------------------------------------------------
================================================================================
purple-skypeweb-1.2-2.20160720git2b42d11.el7 (FEDORA-EPEL-2016-2b829cf376)
Adds support for Skype to Pidgin
--------------------------------------------------------------------------------
Update Information:
Updated to latest Git snapshot. ---- Updated to version 1.2.
--------------------------------------------------------------------------------