The following Fedora EPEL 7 Security updates need testing:
Age URL
775
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
538
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
240
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
120
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-45845d256f
python-django-1.6.11.6-1.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99c7c2f382
xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-5.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b9db4ff3ec
proftpd-1.3.5e-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5e2d792c06
php-pear-CAS-1.3.5-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-323bfce094
yara-3.5.0-7.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e4d67c8654
collectd-5.7.1-2.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fdcd61a2be
pcre2-10.21-18.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e0d424c073
ansible-2.3.0.0-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-lint-3.4.12-1.el7
cacti-1.1.3-1.el7
certbot-0.13.0-1.el7
copr-cli-1.59-1.el7
jboss-classfilewriter-1.1.2-3.el7
jboss-common-beans-2.0.0-3.el7
jboss-threads-2.2.1-4.el7
jboss-vfs-3.2.12-3.el7
libsqlite3x-20071018-20.el7
lizardfs-3.10.6-5.el7
modularity-testing-framework-0.2.5-1.el7
mozilla-https-everywhere-5.2.15-1.el7
nagios-plugins-2.2.1-1.el7
nrpe-3.1.0-1.el7
perl-ExtUtils-XSpp-0.18-8.el7
perl-Image-ExifTool-10.50-1.el7
postbooks-4.10.0-11.el7
python-acme-0.13.0-1.el7
python-certbot-apache-0.13.0-1.el7
python-copr-1.77-1.el7
python-multilib-1.2-2.el7
qmapshack-1.8.0-1.el7
quazip-qt5-0.7.3-2.el7
ragel-7.0.0.9-2.el7
stress-1.0.4-16.el7
vcftools-0.1.15-1.el7
vertica-python-0.6.14-1.el7
xtuple-csvimp-0.5.4-8.el7
xtuple-openrpt-3.3.12-8.el7
Details about builds:
================================================================================
ansible-lint-3.4.12-1.el7 (FEDORA-EPEL-2017-2b2a51642d)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.12 version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444064 - Update the branches to current
https://bugzilla.redhat.com/show_bug.cgi?id=1444064
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.3-1.el7 (FEDORA-EPEL-2017-d963d5267a)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.3 Release notes:
http://www.cacti.net/release_notes_1_1_3.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442607 - cacti-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442607
--------------------------------------------------------------------------------
================================================================================
certbot-0.13.0-1.el7 (FEDORA-EPEL-2017-e5138e4f7d)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
* Update to 0.13.0 * Some tweaks to the renew timer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439954 - python-acme-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439954
[ 2 ] Bug #1441846 - Improvements to timer randomization
https://bugzilla.redhat.com/show_bug.cgi?id=1441846
[ 3 ] Bug #1439957 - certbot-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439957
[ 4 ] Bug #1439958 - python-certbot-apache-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439958
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.59-1.el7 (FEDORA-EPEL-2017-66fb96f0a0)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
copr-cli: - when building module --url or --yaml needs to be selected - remove
make-module command - update man for build-module command - allow to submit
optional params to mbs - frontend act as a gateway between user and mbs -
possibility to submit yaml file to mbs - compose auth url more prettier -
describe module actions in man - rename method for making module to match cli
naming - split module building into two separate commands - add possibility to
build module via MBS or not - add command for building modules - more similar
mock-config with real builder's config - put errors/warnings on stderr - fix
trace in 'copr-cli --debug' - replace fedorahosted links - use 'avg' api
from
python-progress python-copr: - allow to submit optional params to mbs -
frontend act as a gateway between user and mbs - allow to create module and it's
action separately - possibility to submit yaml file to mbs - update auth for
current MBS package - rename method for making module to match cli naming - add
command for building modules - files can be uploaded via simple MultipartEncoder
(RhBug: 1440480) - fix proxyuser when creating modules - replace fedorahosted
links - fix setting username on multipart data - proxyuser feature (RhBug:
1381574) ---- EPEL6 fix
--------------------------------------------------------------------------------
================================================================================
jboss-classfilewriter-1.1.2-3.el7 (FEDORA-EPEL-2017-54d356cbac)
JBoss Class File Writer
--------------------------------------------------------------------------------
Update Information:
Disable doclint
--------------------------------------------------------------------------------
================================================================================
jboss-common-beans-2.0.0-3.el7 (FEDORA-EPEL-2017-b458e34f3c)
JBoss Common Beans
--------------------------------------------------------------------------------
Update Information:
Disable doclint
--------------------------------------------------------------------------------
================================================================================
jboss-threads-2.2.1-4.el7 (FEDORA-EPEL-2017-38923a7580)
JBoss Threads
--------------------------------------------------------------------------------
Update Information:
Invocation of plugins for target configured to 1.7
--------------------------------------------------------------------------------
================================================================================
jboss-vfs-3.2.12-3.el7 (FEDORA-EPEL-2017-48dc141c77)
JBoss Virtual File System
--------------------------------------------------------------------------------
Update Information:
Disable doclint
--------------------------------------------------------------------------------
================================================================================
libsqlite3x-20071018-20.el7 (FEDORA-EPEL-2017-89bf6b16ea)
A C++ Wrapper for the SQLite3 embeddable SQL database engine
--------------------------------------------------------------------------------
Update Information:
Postbooks 4.10.0 initial EPEL release
--------------------------------------------------------------------------------
================================================================================
lizardfs-3.10.6-5.el7 (FEDORA-EPEL-2017-4a5a68b241)
Distributed, fault tolerant file system
--------------------------------------------------------------------------------
Update Information:
Initial release for EPEL
--------------------------------------------------------------------------------
================================================================================
modularity-testing-framework-0.2.5-1.el7 (FEDORA-EPEL-2017-1cd7d0af4f)
Framework for writing tests for modules and containers
--------------------------------------------------------------------------------
Update Information:
New package modularity-testing-framework
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1437851 - Review Request: modularity-testing-framework - Framework for
writing tests for modules and containers
https://bugzilla.redhat.com/show_bug.cgi?id=1437851
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.2.15-1.el7 (FEDORA-EPEL-2017-25aa174a27)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
More unspecified ruleset updates. ---- More bugfixes. Upstream isn't putting
the specific bugfixes in the changelogs anymore. Did you know that you're
supposed to turn the car off when you go into a restaurant? I hear it helps
prevent carjacking.
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.2.1-1.el7 (FEDORA-EPEL-2017-e452ab1676)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
New version of plugins. Remove old patches ---- Fix the patch order to get the
code working again. ---- Consolidate the patches from patrick and git ----
OK so it turns out writing to a non initialized pointer is bad. mmmkay. ----
Try to put in a logic fix for http. It gives answer expected but may not work
for upstream ---- Got feedback on bz 1422993. Put in fix from github ----
Start collecting and fixing bugzilla reports. This one fixes ipv6 for check_snmp
---- Grab other fixes from git maintenance branch to fix other check_ problems
---- Put in patch to fix check_file_age
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410324 - nagios-plugins 2.1.4: check_dns lost MX priority on output
https://bugzilla.redhat.com/show_bug.cgi?id=1410324
[ 2 ] Bug #1426817 - check_http behavior changed from 2.1.4 to 2.2.0 in case option -e
is used
https://bugzilla.redhat.com/show_bug.cgi?id=1426817
[ 3 ] Bug #1422993 - check_snmp missing support for IPv6
https://bugzilla.redhat.com/show_bug.cgi?id=1422993
[ 4 ] Bug #1159891 - When trying to install nagios-plugins-all (with OSP5 enabled) it
fails due to dependency issue
https://bugzilla.redhat.com/show_bug.cgi?id=1159891
[ 5 ] Bug #1298766 - check_dhcp segfaults while parsing arguments
https://bugzilla.redhat.com/show_bug.cgi?id=1298766
[ 6 ] Bug #1409932 - nagios-plugins-dns-2.1.4-2.el7.x86_64 broke reverse lookup (PTR)
checks
https://bugzilla.redhat.com/show_bug.cgi?id=1409932
[ 7 ] Bug #1417259 - nagios-plugins-2.1.4-stable check_snmp rate calculation expects
strange path
https://bugzilla.redhat.com/show_bug.cgi?id=1417259
[ 8 ] Bug #1410039 - check_file_age is broken in recent update
https://bugzilla.redhat.com/show_bug.cgi?id=1410039
--------------------------------------------------------------------------------
================================================================================
nrpe-3.1.0-1.el7 (FEDORA-EPEL-2017-6efc362080)
Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:
update to 3.1.0 ---- Fix npre pid. Fix systemd ---- Update to 3.0.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1190708 - nrpe.service does not support reload for systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1190708
[ 2 ] Bug #1275870 - NRPE initscript does not read PID file when calling
status/killproc
https://bugzilla.redhat.com/show_bug.cgi?id=1275870
[ 3 ] Bug #1411705 - allowed_hosts doesn't work, if one of the hostnames can't
be resolved by dns
https://bugzilla.redhat.com/show_bug.cgi?id=1411705
--------------------------------------------------------------------------------
================================================================================
perl-ExtUtils-XSpp-0.18-8.el7 (FEDORA-EPEL-2017-03d13c05eb)
C++ variant of Perl's XS language
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Image-ExifTool-10.50-1.el7 (FEDORA-EPEL-2017-0179d6820b)
Utility for reading and writing image meta info
--------------------------------------------------------------------------------
Update Information:
Update to 10.50 (latest stable).
--------------------------------------------------------------------------------
================================================================================
postbooks-4.10.0-11.el7 (FEDORA-EPEL-2017-89bf6b16ea)
xTuple Accounting/ERP suite desktop client
--------------------------------------------------------------------------------
Update Information:
Postbooks 4.10.0 initial EPEL release
--------------------------------------------------------------------------------
================================================================================
python-acme-0.13.0-1.el7 (FEDORA-EPEL-2017-e5138e4f7d)
Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:
* Update to 0.13.0 * Some tweaks to the renew timer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439954 - python-acme-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439954
[ 2 ] Bug #1441846 - Improvements to timer randomization
https://bugzilla.redhat.com/show_bug.cgi?id=1441846
[ 3 ] Bug #1439957 - certbot-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439957
[ 4 ] Bug #1439958 - python-certbot-apache-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439958
--------------------------------------------------------------------------------
================================================================================
python-certbot-apache-0.13.0-1.el7 (FEDORA-EPEL-2017-e5138e4f7d)
The apache plugin for certbot
--------------------------------------------------------------------------------
Update Information:
* Update to 0.13.0 * Some tweaks to the renew timer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439954 - python-acme-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439954
[ 2 ] Bug #1441846 - Improvements to timer randomization
https://bugzilla.redhat.com/show_bug.cgi?id=1441846
[ 3 ] Bug #1439957 - certbot-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439957
[ 4 ] Bug #1439958 - python-certbot-apache-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439958
--------------------------------------------------------------------------------
================================================================================
python-copr-1.77-1.el7 (FEDORA-EPEL-2017-66fb96f0a0)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
copr-cli: - when building module --url or --yaml needs to be selected - remove
make-module command - update man for build-module command - allow to submit
optional params to mbs - frontend act as a gateway between user and mbs -
possibility to submit yaml file to mbs - compose auth url more prettier -
describe module actions in man - rename method for making module to match cli
naming - split module building into two separate commands - add possibility to
build module via MBS or not - add command for building modules - more similar
mock-config with real builder's config - put errors/warnings on stderr - fix
trace in 'copr-cli --debug' - replace fedorahosted links - use 'avg' api
from
python-progress python-copr: - allow to submit optional params to mbs -
frontend act as a gateway between user and mbs - allow to create module and it's
action separately - possibility to submit yaml file to mbs - update auth for
current MBS package - rename method for making module to match cli naming - add
command for building modules - files can be uploaded via simple MultipartEncoder
(RhBug: 1440480) - fix proxyuser when creating modules - replace fedorahosted
links - fix setting username on multipart data - proxyuser feature (RhBug:
1381574) ---- EPEL6 fix
--------------------------------------------------------------------------------
================================================================================
python-multilib-1.2-2.el7 (FEDORA-EPEL-2017-85fc206f4c)
A module for determining if a package is multilib or not
--------------------------------------------------------------------------------
Update Information:
New upstream version that transparently supports DNF package objects (as well as
yum package objects). There are no functional changes.
--------------------------------------------------------------------------------
================================================================================
qmapshack-1.8.0-1.el7 (FEDORA-EPEL-2017-7788d4f456)
GPS mapping and management tool
--------------------------------------------------------------------------------
Update Information:
- new package quazip-qt5 - qmapshack updated to 1.8.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439178 - Review Request: quazip-qt5 - Qt5 wrapper for the minizip library
https://bugzilla.redhat.com/show_bug.cgi?id=1439178
--------------------------------------------------------------------------------
================================================================================
quazip-qt5-0.7.3-2.el7 (FEDORA-EPEL-2017-7788d4f456)
Qt5 wrapper for the minizip library
--------------------------------------------------------------------------------
Update Information:
- new package quazip-qt5 - qmapshack updated to 1.8.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439178 - Review Request: quazip-qt5 - Qt5 wrapper for the minizip library
https://bugzilla.redhat.com/show_bug.cgi?id=1439178
--------------------------------------------------------------------------------
================================================================================
ragel-7.0.0.9-2.el7 (FEDORA-EPEL-2017-4595bb1398)
Finite state machine compiler
--------------------------------------------------------------------------------
Update Information:
Initial epel7 release
--------------------------------------------------------------------------------
================================================================================
stress-1.0.4-16.el7 (FEDORA-EPEL-2017-4c129f1de3)
A tool to put given subsystems under a specified load
--------------------------------------------------------------------------------
Update Information:
1st release for epel7
--------------------------------------------------------------------------------
================================================================================
vcftools-0.1.15-1.el7 (FEDORA-EPEL-2017-e45d594e9e)
VCF file manipulation tools
--------------------------------------------------------------------------------
Update Information:
- Update to latest upstream release 0.1.15
--------------------------------------------------------------------------------
================================================================================
vertica-python-0.6.14-1.el7 (FEDORA-EPEL-2017-e958402d88)
A native Python adapter for the Vertica database
--------------------------------------------------------------------------------
Update Information:
update to version 0.6.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325608 - vertica-python-0.6.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1325608
--------------------------------------------------------------------------------
================================================================================
xtuple-csvimp-0.5.4-8.el7 (FEDORA-EPEL-2017-89bf6b16ea)
xTuple data import utility
--------------------------------------------------------------------------------
Update Information:
Postbooks 4.10.0 initial EPEL release
--------------------------------------------------------------------------------
================================================================================
xtuple-openrpt-3.3.12-8.el7 (FEDORA-EPEL-2017-89bf6b16ea)
xTuple / PostBooks reporting utility and libraries
--------------------------------------------------------------------------------
Update Information:
Postbooks 4.10.0 initial EPEL release
--------------------------------------------------------------------------------