The following Fedora EPEL 7 Security updates need testing:
Age URL
230
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binut...
114
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1087/dokuwiki-0-...
97
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1421/quassel-0.1...
35
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6262/cabal-insta...
21
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1545/strongswan-...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6782/cups-x2go-3...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6829/php-htmLawe...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6813/chicken-4.9...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6835/drupal7-7.3...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6862/trafficserv...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6942/openvas-gsa...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6975/cryptopp-5....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7005/python-pip-...
The following builds have been pushed to Fedora EPEL 7 updates-testing
prosody-0.9.8-3.el7
python-jenkins-0.4.7-1.el7
python-ovirt-register-1.0-1.el7
python-pip-7.1.0-1.el7
Details about builds:
================================================================================
prosody-0.9.8-3.el7 (FEDORA-EPEL-2015-7002)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Fixed the wrong logrotate configuration to not use a wildcard
Snippet to fix wrongly rotated log files (ignore any output): `systemctl reload
prosody.service; for log in /var/log/prosody/*; do if [ ! -s "$log" -o $(du -sb
"$log" | awk '{ print $1 }') -lt 100 ]; then rm -f "$log"; fi;
done; for log in /var/log/prosody/*-*; do mv -f "$log" "$(echo $log | sed
's/-[0-9]*//2g')"; gzip "$(echo $log | sed
's/-[0-9]*//2g')"; done`
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 1 2015 Robert Scheck <robert(a)fedoraproject.org> 0.9.8-3
- Fixed the wrong logrotate configuration to not use a wildcard
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-jenkins-0.4.7-1.el7 (FEDORA-EPEL-2015-6998)
Python bindings for the remote Jenkins API
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2015 Scott K Logan <logans(a)cottsay.net> - 0.4.7-1
- Update to 0.4.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1226093 - python-jenkins-0.4.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1226093
--------------------------------------------------------------------------------
================================================================================
python-ovirt-register-1.0-1.el7 (FEDORA-EPEL-2015-7006)
A python module and tool for registering nodes to oVirt Engine
--------------------------------------------------------------------------------
Update Information:
python-ovirt-register-1.0-1
--------------------------------------------------------------------------------
================================================================================
python-pip-7.1.0-1.el7 (FEDORA-EPEL-2015-7005)
A tool for installing and managing Python packages
--------------------------------------------------------------------------------
Update Information:
Newest version of pip that fixes bunch of security issues and brings new features.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 1 2015 Slavek Kabrda <bkabrda(a)redhat.com> - 7.1.0-1
- Update to 7.1.0
* Tue Jun 30 2015 Ville Skyttä <ville.skytta(a)iki.fi> - 7.0.3-3
- Install bash completion
- Ship LICENSE.txt as %license where available
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
7.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Thu Jun 4 2015 Matej Stuchlik <mstuchli(a)redhat.com> - 7.0.3-1
- Update to 7.0.3
* Fri Mar 6 2015 Matej Stuchlik <mstuchli(a)redhat.com> - 6.0.8-1
- Update to 6.0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1066692 - CVE-2013-5123 python-pip: insecure software download with mirroring
support
https://bugzilla.redhat.com/show_bug.cgi?id=1066692
[ 2 ] Bug #1224999 - CVE-2013-7440 python: wildcard matching rules do not follow RFC
6125
https://bugzilla.redhat.com/show_bug.cgi?id=1224999
--------------------------------------------------------------------------------