The following Fedora EPEL 7 Security updates need testing:
Age URL
39
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3621/php-Smarty-...
23
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binut...
17
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4154/nodejs-0.10...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4208/drupal7-7.3...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4302/hexchat-2.1...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4409/erlang-R16B...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4390/mingw-flac-...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4406/perl-YAML-L...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4380/pkcs11-help...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4463/llvm-3.4.2-...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4462/phpMyAdmin-...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4456/php-horde-k...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4445/pyxdg-0.25-...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4491/pwgen-2.07-...
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-lint-2.0.1-1.el7
goaccess-0.8.5-1.el7
icecast-2.4.1-1.el7
lnst-6-1.el7
minipro-0-6.20141011git6a561be.el7.2
nodejs-errs-0.3.2-1.el7
openblas-0.2.13-1.el7
perl-Rose-DB-0.775-2.el7
pwgen-2.07-1.el7
python-jsonrpclib-0.1.3-2.el7
python-ncclient-0.4.2-2.el7
python-pygal-1.5.1-1.el7
python-pyquery-1.2.8-4.el7
python-pyroute2-0.3.3-1.el7
rpmreaper-0.2.0-4.el7
rubygem-qpid_proton-0.8-1.el7
rubygem-rhc-1.32.2-1.el7
sl-5.02-1.el7
xml2-0.5-7.el7
Details about builds:
================================================================================
ansible-lint-2.0.1-1.el7 (FEDORA-EPEL-2014-4495)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.0.1-1
- Update to 2.0.1
--------------------------------------------------------------------------------
================================================================================
goaccess-0.8.5-1.el7 (FEDORA-EPEL-2014-4480)
Real-time web log analyzer and interactive viewer
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Eduardo Echeverria <echevemaster(a)gmail.com> - 0.8.5-1
- Update to 0.8.5
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
icecast-2.4.1-1.el7 (FEDORA-EPEL-2014-4477)
ShoutCast compatible streaming media server
--------------------------------------------------------------------------------
Update Information:
initial build
--------------------------------------------------------------------------------
================================================================================
lnst-6-1.el7 (FEDORA-EPEL-2014-4486)
Common code for lnst-ctl and lnst-slave
--------------------------------------------------------------------------------
Update Information:
update to version 6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Jiri Pirko <jpirko(a)redhat.com> - 6-1
- Updating to stable release 6
--------------------------------------------------------------------------------
================================================================================
minipro-0-6.20141011git6a561be.el7.2 (FEDORA-EPEL-2014-4497)
Utility for MiniPro TL866A/TL866/CS programmer
--------------------------------------------------------------------------------
Update Information:
Fix ATMEGA32 support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Lubomir Rintel <lkundrak(a)v3.sk> - 0-6.20141011git6a561be.2
- Fix ATMEGA32 support
--------------------------------------------------------------------------------
================================================================================
nodejs-errs-0.3.2-1.el7 (FEDORA-EPEL-2014-4488)
Simple error creation and passing utilities
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Parag Nemade <pnemade AT redhat DOT com> - 0.3.2-1
- Update to 0.3.2
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.13-1.el7 (FEDORA-EPEL-2014-4499)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.13, fixing a bug in sgemm on Sandy Bridge.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 0.2.13-1
- Update to 0.2.13.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171015 - openblas-0.2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1171015
--------------------------------------------------------------------------------
================================================================================
perl-Rose-DB-0.775-2.el7 (FEDORA-EPEL-2014-4501)
DBI wrapper and abstraction layer
--------------------------------------------------------------------------------
Update Information:
DBI wrapper and abstraction layer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #839751 - Review Request: perl-Rose-DB - DBI wrapper and abstraction layer
https://bugzilla.redhat.com/show_bug.cgi?id=839751
--------------------------------------------------------------------------------
================================================================================
pwgen-2.07-1.el7 (FEDORA-EPEL-2014-4491)
Automatic password generation
--------------------------------------------------------------------------------
Update Information:
Update to 2.07:
* Remove backwards compatibility for no-tty mode. Addresses CVE-2013-4440
* Fail hard if /dev/urandom and /dev/random are not available. Addresses CVE-2013-4442
and Launchpad #1183213 (Closes: #767008)
* Fix pwgen -B so that it doesn't accidentally generate passwords with ambiguous
characters after changing the case of some letters. Addresses Launchpad Bugs #638418 and
#1349863
* Fix potential portability bug on architectures where unsgined ints are not 4 bytes long
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Orion Poplawski <orion(a)cora.nwra.com> - 2.07-1
- Update to 2.07 (bug 1159526) fixes:
CVE-2013-4440 (bug 1020222, 1020223)
CVE-2013-4442 (bug 1020259, 1020261)
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.06-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.06-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.06-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1020220 - CVE-2013-4440 pwgen: non-tty passwords are trivially weak by
default
https://bugzilla.redhat.com/show_bug.cgi?id=1020220
[ 2 ] Bug #1020258 - CVE-2013-4442 pwgen: silent fallback to insecure entropy
https://bugzilla.redhat.com/show_bug.cgi?id=1020258
--------------------------------------------------------------------------------
================================================================================
python-jsonrpclib-0.1.3-2.el7 (FEDORA-EPEL-2014-4506)
JSON-RPC v2.0 client library for Python
--------------------------------------------------------------------------------
Update Information:
Minor update to dependencies and build spec.
--------------------------------------------------------------------------------
================================================================================
python-ncclient-0.4.2-2.el7 (FEDORA-EPEL-2014-4478)
Python library for NETCONF clients
--------------------------------------------------------------------------------
Update Information:
Initial upload of the package to repos.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1170629 - Review Request: python-ncclient - Python library for NETCONF
clients
https://bugzilla.redhat.com/show_bug.cgi?id=1170629
--------------------------------------------------------------------------------
================================================================================
python-pygal-1.5.1-1.el7 (FEDORA-EPEL-2014-4492)
A python svg graph plotting library
--------------------------------------------------------------------------------
Update Information:
branch for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1170310 - package is needed as build dependency for datagrepper-0.5.1-1.el7
https://bugzilla.redhat.com/show_bug.cgi?id=1170310
--------------------------------------------------------------------------------
================================================================================
python-pyquery-1.2.8-4.el7 (FEDORA-EPEL-2014-4493)
A jQuery-like library for python
--------------------------------------------------------------------------------
Update Information:
branch for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1170310 - package is needed as build dependency for datagrepper-0.5.1-1.el7
https://bugzilla.redhat.com/show_bug.cgi?id=1170310
--------------------------------------------------------------------------------
================================================================================
python-pyroute2-0.3.3-1.el7 (FEDORA-EPEL-2014-4504)
Pure Python netlink library
--------------------------------------------------------------------------------
Update Information:
Fix-ups, 0.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Peter V. Saveliev <peter(a)svinota.eu> 0.3.3-1
- Fix-ups, 0.3.3
- Bugfixes for Python 2.6
--------------------------------------------------------------------------------
================================================================================
rpmreaper-0.2.0-4.el7 (FEDORA-EPEL-2014-4500)
A tool for removing packages from system
--------------------------------------------------------------------------------
Update Information:
New package in epel7.
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.8-1.el7 (FEDORA-EPEL-2014-4490)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased on Proton 0.8.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 19 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.8-1
- Rebased on Proton 0.8.
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rubygem-rhc-1.32.2-1.el7 (FEDORA-EPEL-2014-4503)
OpenShift Express Client Tools
--------------------------------------------------------------------------------
Update Information:
Updated to version 1.32.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 4 2014 Guillermo Gomez <gomix(a)fedoraproject.org> - 1.32.2-1
- Updated to version 1.32.2
- Fixed some bogus changelogs dates
--------------------------------------------------------------------------------
================================================================================
sl-5.02-1.el7 (FEDORA-EPEL-2014-4494)
Joke command for when you type 'sl' instead of 'ls'
--------------------------------------------------------------------------------
Update Information:
Update to the new upstream (and new build system; #1170931)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Matej Cepl <mcepl(a)redhat.com> - 5.02-1
- Update to the new upstream (and new build system; #1170931)
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.03-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.03-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.03-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1170931 - RFE: update to 5.02
https://bugzilla.redhat.com/show_bug.cgi?id=1170931
--------------------------------------------------------------------------------
================================================================================
xml2-0.5-7.el7 (FEDORA-EPEL-2014-4481)
XML/Unix Processing Tools
--------------------------------------------------------------------------------
Update Information:
These tools are used to convert XML and HTML to and from a line-oriented format more
amenable to processing by classic Unix pipeline processing tools, like grep, sed, awk,
cut, shell scripts, and so forth.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #492708 - Review Request: xml2 - XML/Unix Processing Tools
https://bugzilla.redhat.com/show_bug.cgi?id=492708
--------------------------------------------------------------------------------