The following Fedora EPEL 7 Security updates need testing:
Age URL
846
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
608
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
190
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
88
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
86
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
85
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1
lxc-1.0.10-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-30baf73207
chromium-59.0.3071.104-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-abfcb66c76
python-djblets-0.9.8-1.el7 ReviewBoard-2.5.13.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5ab90c7180
zabbix20-2.0.21-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-eb357ac3b3
zabbix22-2.2.18-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7c2e699925
catdoc-0.95-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1
globus-xio-5.16-1.el7 globus-net-manager-0.17-1.el7 globus-gass-cache-program-6.7-1.el7
globus-gass-copy-9.27-1.el7 globus-gssapi-gsi-12.16-1.el7
globus-gram-job-manager-14.36-1.el7 globus-gridftp-server-12.2-1.el7 globus-io-11.9-1.el7
globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7
globus-xio-udt-driver-1.27-1.el7 myproxy-6.1.28-1.el7 globus-ftp-client-8.35-2.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bcfa38e123
drupal7-7.56-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ee32a5ffa
libtomcrypt-1.17-25.el7 libtommath-0.42.0-5.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2b04537603
phpMyAdmin-4.4.15.10-2.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2ba20eeb97
php-horde-Horde-Image-2.5.1-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e
cross-binutils-2.25.1-31.el7.1 cross-gcc-4.8.5-16.el7.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b
mosquitto-1.4.13-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ejabberd-15.07-4.el7
mosquitto-1.4.13-1.el7
python-pytoml-0.1.14-1.git7dea353.el7
rkhunter-1.4.4-1.el7
Details about builds:
================================================================================
ejabberd-15.07-4.el7 (FEDORA-EPEL-2017-90f50212d5)
A distributed, fault-tolerant Jabber/XMPP server
--------------------------------------------------------------------------------
Update Information:
First EPEL 7 build.
--------------------------------------------------------------------------------
================================================================================
mosquitto-1.4.13-1.el7 (FEDORA-EPEL-2017-ffb0e00f3b)
An Open Source MQTT v3.1/v3.1.1 Broker
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2017-9868 (rhbz#1464946)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464946 - CVE-2017-9868 mosquitto: World-readable persistence file possibly
leaking sensitive information
https://bugzilla.redhat.com/show_bug.cgi?id=1464946
--------------------------------------------------------------------------------
================================================================================
python-pytoml-0.1.14-1.git7dea353.el7 (FEDORA-EPEL-2017-1140c6ca6c)
Parser for TOML
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.14
--------------------------------------------------------------------------------
================================================================================
rkhunter-1.4.4-1.el7 (FEDORA-EPEL-2017-0ba0d21577)
A host-based tool to scan for rootkits, backdoors and local exploits
--------------------------------------------------------------------------------
Update Information:
New upstream release with various fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284403 - Logger is not being used correctly in /usr/bin/rkhunter
https://bugzilla.redhat.com/show_bug.cgi?id=1284403
[ 2 ] Bug #1466318 - rkhunter-1.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1466318
--------------------------------------------------------------------------------