The following Fedora EPEL 7 Security updates need testing:
Age URL
968
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
731
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
313
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
210
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
207
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
42
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
40
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b8147c68
openvpn-auth-ldap-2.0.3-15.el7
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3c06a7eecf
nagios-4.3.4-3.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1e541e27e9
nginx-1.12.2-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-37b21f1a51
seamonkey-2.49.1-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ce0091d73
lame-3.100-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-21fb9891af
modulemd-1.3.2-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f576d1826a
nodejs-6.11.5-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5e4edb1320
fedpkg-1.30-2.el7 rpkg-1.51-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-95bf973a7d
wordpress-4.8.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
SuperLUMT-3.1.0-13.el7
ansible-review-0.13.4-1.el7
auter-0.10-1.el7
cacti-1.1.27-1.el7
globus-gsi-credential-7.12-1.el7
globus-gssapi-gsi-13.3-1.el7
gnome-shell-extension-freon-30-1.el7
gnome-shell-extension-no-topleft-hot-corner-16.0-1.el7
gnome-shell-extension-openweather-1-0.31.20171030gita86b949.el7
golang-github-patrickmn-go-cache-2.1.0-1.el7
macromilter-3.4.3-1.el7
mimedefang-2.83-1.el7
mock-1.4.7-2.el7
mock-core-configs-27.4-1.el7
pakiti-3.0.2-1.el7
perl-Net-MQTT-Simple-1.21-3.el7
php-bartlett-php-compatinfo-db-1.25.0-1.el7
pypolicyd-spf-1.3.2-3.el7
python-croniter-0.3.19-1.el7
python-productmd-1.9-1.el7
python-pyspf-2.0.11-4.el7
wordpress-4.8.3-1.el7
Details about builds:
================================================================================
SuperLUMT-3.1.0-13.el7 (FEDORA-EPEL-2017-ef491d9f6a)
Single precision real SuperLU routines for shared memory parallel machines
--------------------------------------------------------------------------------
Update Information:
- Rebuild against openblas
--------------------------------------------------------------------------------
================================================================================
ansible-review-0.13.4-1.el7 (FEDORA-EPEL-2017-c6e24bfebe)
Reviews Ansible playbooks, roles and inventory and suggests improvements
--------------------------------------------------------------------------------
Update Information:
Ansible 2.4 support
--------------------------------------------------------------------------------
================================================================================
auter-0.10-1.el7 (FEDORA-EPEL-2017-13ab201ef4)
Prepare and apply updates
--------------------------------------------------------------------------------
Update Information:
Update to 0.10
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.27-1.el7 (FEDORA-EPEL-2017-6e5680e446)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.27 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.27
--------------------------------------------------------------------------------
================================================================================
globus-gsi-credential-7.12-1.el7 (FEDORA-EPEL-2017-bd0f704639)
Globus Toolkit - Globus GSI Credential Library
--------------------------------------------------------------------------------
Update Information:
globus-gsi-credential 7.12 * Remove prototype for non-existing function
globus-gssapi-gsi 13.3 * Allow configuration of non-root user to own
credentials for root services
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-13.3-1.el7 (FEDORA-EPEL-2017-bd0f704639)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
globus-gsi-credential 7.12 * Remove prototype for non-existing function
globus-gssapi-gsi 13.3 * Allow configuration of non-root user to own
credentials for root services
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-freon-30-1.el7 (FEDORA-EPEL-2017-1948446058)
GNOME Shell extension to display system temperature, voltage, and fan speed
--------------------------------------------------------------------------------
Update Information:
- Bump to upstream version 30, which assures support in GNOME 3.26, fixes a
bug related to Nvidia drivers, and adds Spanish translations. - Move setup notes
from RPM description to packaged README-fedora file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504347 - gnome-shell-extension-freon-29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504347
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-no-topleft-hot-corner-16.0-1.el7 (FEDORA-EPEL-2017-d4baaeddfb)
Disable the "hot corner" in the top-left of GNOME Shell
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 16.0, which assures compatibility with GNOME 3.26.
---- Move setup notes from RPM description to packaged README-fedora file.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-openweather-1-0.31.20171030gita86b949.el7
(FEDORA-EPEL-2017-96aa04d8e2)
Display weather information from many locations in the world
--------------------------------------------------------------------------------
Update Information:
Fix warnings, because of deprecated functions and wrong function parameter-
count. Minor enhancements.
--------------------------------------------------------------------------------
================================================================================
golang-github-patrickmn-go-cache-2.1.0-1.el7 (FEDORA-EPEL-2017-7796ac96b0)
An in-memory key:value store/cache library for Go (Golang)
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 2.1.0: * Add SetDefault(k string, x interface{}) for
setting with the default expiration value * Add GetWithExpiration(k string)
(interface{}, time.Time, bool) for getting both the value and expiration time
(thanks Alex Edwards) * Fix janitor data race (thanks Vivian Mathews)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508200 - golang-github-patrickmn-go-cache-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508200
--------------------------------------------------------------------------------
================================================================================
macromilter-3.4.3-1.el7 (FEDORA-EPEL-2017-964c6fbfcd)
Milter to check mails for suspicious Microsoft VBA macro code
--------------------------------------------------------------------------------
Update Information:
* Local information leak via log files (issue #18) * MacroMilter bypass with
nested ZIP files (issue #19) * Error in macromilter.logrotate at Ubuntu (issue
#21) * Some code review and better exception handling
--------------------------------------------------------------------------------
================================================================================
mimedefang-2.83-1.el7 (FEDORA-EPEL-2017-34bc2db1bb)
E-Mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
MIMEDefang 2.83 =============== * mimedefang.pl: Do not add a Message-ID:
header when handing a message to SpamAssassin if the original message lacks such
a header. * Add systemd unit files; thanks to Richard Laager. Downstream
comment: No impact or change, Fedora and EPEL packages are using optimized
systemd unit files already since MIMEDefang 2.78 (January 2016) * Minor
tweaks to the sample filter. * mimedefang-multiplexor: Change the maxLifetime
option to kick in only once a worker has processed at least one request; also
check for exceeded lifetimes during the periodic idle-time check. *
mimedefang-multiplexor: Fix an exit(EXIT_FAILURE) to be exit(EXIT_SUCCESS) in on
place.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508217 - mimedefang-2.83 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508217
--------------------------------------------------------------------------------
================================================================================
mock-1.4.7-2.el7 (FEDORA-EPEL-2017-1f6b4e46a2)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
* There is a new option in config `config_opts['chrootgroup']`, which allows you
to change name of group inside of chroot. * Any key for `config_opts` you
specify with 'bootstrap_*' will be copied to bootstrap config e.g.,
`config_opts['bootstrap_system_yum_command'] = '/usr/bin/yum-deprecated'`
will
become `config_opts['system_yum_command'] = '/usr/bin/yum-deprecated'`
for
bootstrap config. * There are three new default:
config_opts['bootstrap_chroot_additional_packages'] = []
config_opts['bootstrap_module_enable'] = []
config_opts['bootstrap_module_install'] = [] This will not install any
additional packages or modules into bootstrap chroot. * Mock now recognize
DeskOS. * Previously when `config_opts['rpmbuild_networking']` was enabled we
passed `--private-network` to systemd-nspawn. However that lead there was no
default route. And you cannot bind() UDP socket to all IP addresses and then
join multicast group, without having default route. Now we do onot add
`--private-network` to systemd-nspawn, instead we setup network namespace
ourselves and we also add default route pointing to loopback interface (only
interface in the new namespace). This feature introduce new dependency on
pyroute2. Bugfixes: * Delete rootdir as well when calling clean. In case one
overrides the rootdir option, and the rootdir is located outside of basedir, it
was not cleaned up when calling --clean. Fix this case by checking if the
rootdir is outside basedir. If that is the case, run an extra rmtree() on it. *
Choose good symbolic link of default.cfg on Mageia. * Ccache is now mounted to
/var/tmp as /tmp gets over-mounted with tmpfs when system-nspawn is used. *
Output of `--debug-config` is now sorted. * Use primary key for Fedora 27+ on
s390x.
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-27.4-1.el7 (FEDORA-EPEL-2017-1f6b4e46a2)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
* There is a new option in config `config_opts['chrootgroup']`, which allows you
to change name of group inside of chroot. * Any key for `config_opts` you
specify with 'bootstrap_*' will be copied to bootstrap config e.g.,
`config_opts['bootstrap_system_yum_command'] = '/usr/bin/yum-deprecated'`
will
become `config_opts['system_yum_command'] = '/usr/bin/yum-deprecated'`
for
bootstrap config. * There are three new default:
config_opts['bootstrap_chroot_additional_packages'] = []
config_opts['bootstrap_module_enable'] = []
config_opts['bootstrap_module_install'] = [] This will not install any
additional packages or modules into bootstrap chroot. * Mock now recognize
DeskOS. * Previously when `config_opts['rpmbuild_networking']` was enabled we
passed `--private-network` to systemd-nspawn. However that lead there was no
default route. And you cannot bind() UDP socket to all IP addresses and then
join multicast group, without having default route. Now we do onot add
`--private-network` to systemd-nspawn, instead we setup network namespace
ourselves and we also add default route pointing to loopback interface (only
interface in the new namespace). This feature introduce new dependency on
pyroute2. Bugfixes: * Delete rootdir as well when calling clean. In case one
overrides the rootdir option, and the rootdir is located outside of basedir, it
was not cleaned up when calling --clean. Fix this case by checking if the
rootdir is outside basedir. If that is the case, run an extra rmtree() on it. *
Choose good symbolic link of default.cfg on Mageia. * Ccache is now mounted to
/var/tmp as /tmp gets over-mounted with tmpfs when system-nspawn is used. *
Output of `--debug-config` is now sorted. * Use primary key for Fedora 27+ on
s390x.
--------------------------------------------------------------------------------
================================================================================
pakiti-3.0.2-1.el7 (FEDORA-EPEL-2017-17bf490412)
Patching status monitoring tool
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
perl-Net-MQTT-Simple-1.21-3.el7 (FEDORA-EPEL-2017-011bd76252)
Minimal MQTT version 3 interface
--------------------------------------------------------------------------------
Update Information:
A simple perl interface for MQTT v3
--------------------------------------------------------------------------------
================================================================================
php-bartlett-php-compatinfo-db-1.25.0-1.el7 (FEDORA-EPEL-2017-8a236c08f1)
Reference Database to be used with php-compatinfo library
--------------------------------------------------------------------------------
Update Information:
**Version 1.25.0** - 2017-10-30 * **Added** - Support to PHP 7.1.11 -
Support to PHP 7.0.25 - Support to PHP 5.6.32 * **Changed** - Amqp
reference updated to version 1.9.3 (stable) - Ast reference updated to
version 0.1.6 (stable)
--------------------------------------------------------------------------------
================================================================================
pypolicyd-spf-1.3.2-3.el7 (FEDORA-EPEL-2017-aded0ed528)
SPF Policy Server for Postfix (Python implementation)
--------------------------------------------------------------------------------
Update Information:
Revert all changes related to switch from ipaddr to ipaddress. Causing problems.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506445 - Broken package due to wrong dependency: python-ipaddress
https://bugzilla.redhat.com/show_bug.cgi?id=1506445
[ 2 ] Bug #1406939 - pyspf prefers incompatible ipaddress over ipaddr
https://bugzilla.redhat.com/show_bug.cgi?id=1406939
[ 3 ] Bug #1185471 - /usr/lib/python2.7/site-packages/spf.py crashes on IPv6 addresses
https://bugzilla.redhat.com/show_bug.cgi?id=1185471
[ 4 ] Bug #1406941 - pypolicyd-spf prefers incompatible ipaddress over ipaddr
https://bugzilla.redhat.com/show_bug.cgi?id=1406941
--------------------------------------------------------------------------------
================================================================================
python-croniter-0.3.19-1.el7 (FEDORA-EPEL-2017-a005bd20c1)
Iteration for datetime object with cron like format
--------------------------------------------------------------------------------
Update Information:
Bump version to 0.3.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1447805 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1447805
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.9-1.el7 (FEDORA-EPEL-2017-0aa0656780)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
Adds `updates-testing` as valid release type.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507176 - 1.9 should be shipped to all stable Fedora and EPEL (to add new
release type)
https://bugzilla.redhat.com/show_bug.cgi?id=1507176
--------------------------------------------------------------------------------
================================================================================
python-pyspf-2.0.11-4.el7 (FEDORA-EPEL-2017-aded0ed528)
Python module and programs for SPF (Sender Policy Framework)
--------------------------------------------------------------------------------
Update Information:
Revert all changes related to switch from ipaddr to ipaddress. Causing problems.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506445 - Broken package due to wrong dependency: python-ipaddress
https://bugzilla.redhat.com/show_bug.cgi?id=1506445
[ 2 ] Bug #1406939 - pyspf prefers incompatible ipaddress over ipaddr
https://bugzilla.redhat.com/show_bug.cgi?id=1406939
[ 3 ] Bug #1185471 - /usr/lib/python2.7/site-packages/spf.py crashes on IPv6 addresses
https://bugzilla.redhat.com/show_bug.cgi?id=1185471
[ 4 ] Bug #1406941 - pypolicyd-spf prefers incompatible ipaddress over ipaddr
https://bugzilla.redhat.com/show_bug.cgi?id=1406941
--------------------------------------------------------------------------------
================================================================================
wordpress-4.8.3-1.el7 (FEDORA-EPEL-2017-95bf973a7d)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Update to wordpress 4.8.3. See:
https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/ for details
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508255 - wordpress-4.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508255
--------------------------------------------------------------------------------