The following Fedora EPEL 7 Security updates need testing:
Age URL
208
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
104
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
37
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7800
python-django-1.6.11-3.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8100
wordpress-4.3.1-1.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8113
php-ZendFramework2-2.4.8-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8146 nrpe-2.15-7.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-c29d29cc8f
mediawiki123-1.23.10-2.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
0install-2.9.1-1.el7
cobbler-2.6.10-1.el7
engrampa-1.10.2-1.el7
fedfind-1.6.1-1.el7
mate-terminal-1.10.1-2.el7
nordugrid-arc-5.0.3-1.el7
nordugrid-arc-doc-2.0.4-1.el7
ocaml-curl-0.7.5-2.el7
ocaml-lablgl-1.05-17.el7
ocaml-lablgtk-2.18.3-8.el7
ocaml-lwt-2.4.5-7.el7
ocaml-ounit-2.0.0-17.el7
perl-DBD-Firebird-1.21-1.el7
php-pear-Auth-RADIUS-1.1.0-1.el7
python-fmn-consumer-0.6.3-1.el7
python-pymongo-3.0.3-1.el7
python-pyngus-2.0.3-1.el7
python-qpid-0.32-9.el7
python-sphinxcontrib-httpdomain-1.4.0-1.el7
qpid-cpp-0.34-4.el7
qpid-dispatch-0.5-1.el7
qpid-proton-0.10-2.el7
qpid-qmf-0.32-1.el7
qpid-tests-0.32-1.el7
qpid-tools-0.32-9.el7
relevation-1.3-1.el7
resiprocate-1.10.0-21.el7
rubygem-qpid_messaging-0.34.1-1.el7
rubygem-qpid_proton-0.10.1-1.el7
xmms-1.2.11-25.20071117cvs.el7
yadifa-2.1.3-1.el7
yubico-piv-tool-1.0.3-1.el7
Details about builds:
================================================================================
0install-2.9.1-1.el7 (FEDORA-EPEL-2015-21e790c6a3)
A decentralized cross-distribution software installation system
--------------------------------------------------------------------------------
Update Information:
0install-2.9.1-1.el7 - Upstream update to 2.9.1. - Add buildrequires: ocaml-
react-devel for EPEL. - Exclude ppc64 for EPEL, as the build dependency ocaml-
findlib-devel is not available on it.
--------------------------------------------------------------------------------
================================================================================
cobbler-2.6.10-1.el7 (FEDORA-EPEL-2015-3ddf668df3)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.10: - This release only adds support for a few current distros. -
Release notes:
http://cobbler.github.io/manuals/2.6.0/1/1_-_Release_Notes.html
--------------------------------------------------------------------------------
================================================================================
engrampa-1.10.2-1.el7 (FEDORA-EPEL-2015-93650dc588)
MATE Desktop file archiver
--------------------------------------------------------------------------------
Update Information:
engrampa-1.10.2-1 - update to 1.10.2 release - fix # rhbz (#1264593) -
don't crash when opening archives on network drive (ftp, smb, ...)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1264593 - Engrampa segfaults when attempting to open an archive from a
networked location
https://bugzilla.redhat.com/show_bug.cgi?id=1264593
--------------------------------------------------------------------------------
================================================================================
fedfind-1.6.1-1.el7 (FEDORA-EPEL-2015-37a941e829)
Fedora Finder finds Fedora
--------------------------------------------------------------------------------
Update Information:
This update provides the latest fedfind release, 1.6.1. The main change in this
release is a behind-the-scenes rewrite which is not visible in normal use.
Documentation is also improved.
--------------------------------------------------------------------------------
================================================================================
mate-terminal-1.10.1-2.el7 (FEDORA-EPEL-2015-c8ce4721fc)
Terminal emulator for MATE
--------------------------------------------------------------------------------
Update Information:
mate-terminal-1.10.1-2 - fix usage of --tab at command line
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.0.3-1.el7 (FEDORA-EPEL-2015-3302f719eb)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
To fix several issues regarding stability with A-REX and a performance issue in
gridftp (missing delayed passive) discovered in NorduGrid ARC 15.03u3, an update
NorduGrid ARC 15.03u4 is now available.
http://www.nordugrid.org/arc/releases/15.03u4/release_notes_15.03u4.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1265662 - nordugrid-arc: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1265662
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-2.0.4-1.el7 (FEDORA-EPEL-2015-3302f719eb)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
To fix several issues regarding stability with A-REX and a performance issue in
gridftp (missing delayed passive) discovered in NorduGrid ARC 15.03u3, an update
NorduGrid ARC 15.03u4 is now available.
http://www.nordugrid.org/arc/releases/15.03u4/release_notes_15.03u4.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1265662 - nordugrid-arc: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1265662
--------------------------------------------------------------------------------
================================================================================
ocaml-curl-0.7.5-2.el7 (FEDORA-EPEL-2015-73b12e59f9)
OCaml Curl library (ocurl)
--------------------------------------------------------------------------------
Update Information:
Exclude ppc64 for EPEL, as ocaml-findlib is not available on it
--------------------------------------------------------------------------------
================================================================================
ocaml-lablgl-1.05-17.el7 (FEDORA-EPEL-2015-0f04d021d3)
LablGL is an OpenGL interface for Objective Caml
--------------------------------------------------------------------------------
Update Information:
Version scheme change back to 1.05
--------------------------------------------------------------------------------
================================================================================
ocaml-lablgtk-2.18.3-8.el7 (FEDORA-EPEL-2015-97f522cf14)
Objective Caml interface to gtk+
--------------------------------------------------------------------------------
Update Information:
Exclude ppc64 for EPEL, as ocaml-findlib is not available on it
--------------------------------------------------------------------------------
================================================================================
ocaml-lwt-2.4.5-7.el7 (FEDORA-EPEL-2015-95d35e7e24)
OCaml lightweight thread library
--------------------------------------------------------------------------------
Update Information:
Add back ocaml-react-devel, so package lwt.react is available
--------------------------------------------------------------------------------
================================================================================
ocaml-ounit-2.0.0-17.el7 (FEDORA-EPEL-2015-affbed653e)
Unit test framework for OCaml
--------------------------------------------------------------------------------
Update Information:
ocaml-ounit-2.0.0-17.el7 - Exclude ppc64 for EPEL, as ocaml-findlib-devel is
not available on it.
--------------------------------------------------------------------------------
================================================================================
perl-DBD-Firebird-1.21-1.el7 (FEDORA-EPEL-2015-7b3482190a)
A Firebird interface for perl
--------------------------------------------------------------------------------
Update Information:
DBD::Firebird 1.21 [2015-09-24] =============================== * Update
README[.md] * Silence 'Missing argument in sprintf' warning on perl 5.22 * Add
support for the SAVEPOINT statement (RT#107142)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1267292 - Upgrade perl-DBD-Firebird to 1.21
https://bugzilla.redhat.com/show_bug.cgi?id=1267292
--------------------------------------------------------------------------------
================================================================================
php-pear-Auth-RADIUS-1.1.0-1.el7 (FEDORA-EPEL-2015-241fa234f0)
Wrapper Classes for the RADIUS PECL
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.0** QA Release: * Drop php4 * Introduce exceptions * Drop PEAR
--------------------------------------------------------------------------------
================================================================================
python-fmn-consumer-0.6.3-1.el7 (FEDORA-EPEL-2015-2a67a00d3d)
Backend worker daemon for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Try to reconnect to the mailserver after a short nap when getaddrinfo fails on
it.
--------------------------------------------------------------------------------
================================================================================
python-pymongo-3.0.3-1.el7 (FEDORA-EPEL-2015-925e9374c9)
Python driver for MongoDB
--------------------------------------------------------------------------------
Update Information:
python-pymongo-3.0.3-1.fc21 - Upstream 3.0.3 - Fix CVE-2013-7440
(RHBZ#1231231 #1231232) python-pymongo-3.0.3-1.fc22 - Upstream 3.0.3 - Fix
CVE-2013-7440 (RHBZ#1231231 #1231232) python-pymongo-3.0.3-1.el6 - Upstream
3.0.3 - Fix CVE-2013-7440 (RHBZ#1231231 #1231232) python-pymongo-3.0.3-1.el7
- Upstream 3.0.3 - Fix CVE-2013-7440 (RHBZ#1231231 #1231232) python-
pymongo-3.0.3-1.fc23 - Upstream 3.0.3 - Fix CVE-2013-7440 (RHBZ#1231231
#1231232)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1231231 - CVE-2013-7440 CVE-2013-2099 python-pymongo: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1231231
[ 2 ] Bug #1210043 - Mongoengine require pymongo 2.7.1
https://bugzilla.redhat.com/show_bug.cgi?id=1210043
[ 3 ] Bug #1231232 - CVE-2013-7440 CVE-2013-2099 python-pymongo: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1231232
--------------------------------------------------------------------------------
================================================================================
python-pyngus-2.0.3-1.el7 (FEDORA-EPEL-2015-dbf5916412)
Callback API implemented over Proton
--------------------------------------------------------------------------------
Update Information:
python-pyngus-2.0.3-1.el7 - Rebased to 2.0.3 - Rebuilt against proton 0.10
--------------------------------------------------------------------------------
================================================================================
python-qpid-0.32-9.el7 (FEDORA-EPEL-2015-8e70e449fd)
Python client library for AMQP
--------------------------------------------------------------------------------
Update Information:
Split from qpid-cpp package.
--------------------------------------------------------------------------------
================================================================================
python-sphinxcontrib-httpdomain-1.4.0-1.el7 (FEDORA-EPEL-2015-7690eb2ad0)
Sphinx domain for documenting HTTP APIs
--------------------------------------------------------------------------------
Update Information:
Upstream release 1.4.0:
http://pythonhosted.org/sphinxcontrib-
httpdomain/#version-1-4-0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253880 - python-sphinxcontrib-httpdomain-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1253880
--------------------------------------------------------------------------------
================================================================================
qpid-cpp-0.34-4.el7 (FEDORA-EPEL-2015-4c5f6960ad)
Libraries for Qpid C++ client applications
--------------------------------------------------------------------------------
Update Information:
qpid-cpp-0.34-4.el7 - Rebased to 0.34 - Rebuilt against qpid-proton-0.10-2 -
Added qpid-cpp-server-devel - Added qpid-send and qpid-qpid-receive to qpid-
client-devel sub-package - Removed python-qpid-common, python-qpid, qpid-tools
and qpid-server-store sub-packages Note: python-qpid-common and python-qpid
will be added to python-qpid package qpid-tools will be added
to qpid-tools package
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-0.5-1.el7 (FEDORA-EPEL-2015-f81f67b77a)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
qpid-dispatch-0.5-1.el7 - Rebased to qpid dispatch 0.5 - Rebuilt against
qpid-proton 0.10
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.10-2.el7 (FEDORA-EPEL-2015-018d248281)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
qpid-proton-0.10-2.el7 - Added dependency on cyrus-sasl-devel and cyrus-sasl-
lib - Added 0001-PROTON-974-Accept-a-single-symbol-in-SASL-mechs-fram.patch -
Rebased to 0.10
--------------------------------------------------------------------------------
================================================================================
qpid-qmf-0.32-1.el7 (FEDORA-EPEL-2015-c13238f528)
The QPID Management Framework
--------------------------------------------------------------------------------
Update Information:
qpid-qmf-0.32-1.el7 - Rebased to 0.32 - Dropped qpid-tools as "Required"
for
python-qpid-qmf
--------------------------------------------------------------------------------
================================================================================
qpid-tests-0.32-1.el7 (FEDORA-EPEL-2015-b084fe6f5b)
Conformance tests for Apache Qpid
--------------------------------------------------------------------------------
Update Information:
Added new package.
--------------------------------------------------------------------------------
================================================================================
qpid-tools-0.32-9.el7 (FEDORA-EPEL-2015-3b5bb68565)
Management and diagostic tools for Apache Qpid
--------------------------------------------------------------------------------
Update Information:
Split from qpid-cpp.
--------------------------------------------------------------------------------
================================================================================
relevation-1.3-1.el7 (FEDORA-EPEL-2015-d157b03bb8)
Command-line search for Revelation Password Manager files
--------------------------------------------------------------------------------
Update Information:
Update to 1.3, which adds support for the newer format of data files used by
Revelation, plus a slightly better handling of international characters in the
data file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1021873 - relevation-1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1021873
--------------------------------------------------------------------------------
================================================================================
resiprocate-1.10.0-21.el7 (FEDORA-EPEL-2015-b841f047a1)
SIP and TURN stacks, with SIP proxy and TURN server implementations
--------------------------------------------------------------------------------
Update Information:
first release to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_messaging-0.34.1-1.el7 (FEDORA-EPEL-2015-c22afdb61d)
Ruby bindings for the Qpid messaging framework
--------------------------------------------------------------------------------
Update Information:
rubygem-qpid_messaging-0.34.1-1.el7 - Rebased to qpid_messaging 0.34
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.10.1-1.el7 (FEDORA-EPEL-2015-29d3950fee)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
rubygem-qpid_proton-0.10.1-1.el7 - Rebased to 0.10.1
--------------------------------------------------------------------------------
================================================================================
xmms-1.2.11-25.20071117cvs.el7 (FEDORA-EPEL-2015-46aa6b49cd)
The X MultiMedia System, a media player
--------------------------------------------------------------------------------
Update Information:
xmms-1.2.11-25.20071117cvs.el7 - Desktop entry: Add more module format
associations, fix some warnings - Mark COPYING as %license where available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1237066 - Please release it for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1237066
--------------------------------------------------------------------------------
================================================================================
yadifa-2.1.3-1.el7 (FEDORA-EPEL-2015-8a7a6a573d)
Lightweight authoritative Name Server with DNSSEC capabilities
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.3 release (latest upstream)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1265017 - yadifa: 2.1.3 release available
https://bugzilla.redhat.com/show_bug.cgi?id=1265017
--------------------------------------------------------------------------------
================================================================================
yubico-piv-tool-1.0.3-1.el7 (FEDORA-EPEL-2015-ca2e3b896b)
Tool for interacting with the PIV applet on a YubiKey NEO
--------------------------------------------------------------------------------
Update Information:
This update brings new version with few bug fixes.
--------------------------------------------------------------------------------