The following Fedora EPEL 7 Security updates need testing:
Age URL
312
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3989
cross-binutils-2.23.88.0.1-2.el7.1
196
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
92
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
38
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7613
zabbix20-2.0.15-1.el7
25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7800
python-django-1.6.11-3.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7909 pdns-3.4.6-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8100
wordpress-4.3.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8113
php-ZendFramework2-2.4.8-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8146 nrpe-2.15-7.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fedfind-1.6-1.el7
nagios-4.0.8-1.el7
owncloud-8.0.8-1.el7
phpMyAdmin-4.4.15-1.el7
python-wikitcms-1.12.3-1.el7
radicale-0.10-8.el7
xrdp-0.9.0-4.el7
youtube-dl-2015.09.09-1.el7
Details about builds:
================================================================================
fedfind-1.6-1.el7 (FEDORA-EPEL-2015-8158)
Fedora Finder finds Fedora
--------------------------------------------------------------------------------
Update Information:
This update provides the new release of fedfind, 1.6, with some tweaks to image
identification (including better handling of Atomic images) and handling of
post-release nightly snapshots (related to the [Two Week
Atomic](https://fedorahosted.org/fesco/ticket/1452) plan). It also provides a
new release of python-wikitcms which will improve the image names shown in the
download tables on TC/RC wiki pages. ---- This update provides the latest
upstream version of python-wikitcms, 1.12.2, with a small bug fix (the previous
version accidentally printed the captcha to the console when editing a page
required solving a captcha; this has been fixed) and a refinement to the layout
of the download tables (images are now more finely distinguished so there are
fewer rows with multiple links).
--------------------------------------------------------------------------------
================================================================================
nagios-4.0.8-1.el7 (FEDORA-EPEL-2015-8155)
Host/service/network monitoring program
--------------------------------------------------------------------------------
Update Information:
nagios-4.0.8-1.fc21 nagios-4.0.8-1.fc22 nagios-4.0.8-1.el6 nagios-4.0.8-1.el7
nagios-4.0.8-1.fc23 - update to 4.0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #469320 - CVE-2008-4796 snoopy: command execution via shell metacharacters
https://bugzilla.redhat.com/show_bug.cgi?id=469320
[ 2 ] Bug #958002 - CVE-2013-4214 Nagios core: html/rss-newsfeed.php insecure temporary
file usage
https://bugzilla.redhat.com/show_bug.cgi?id=958002
[ 3 ] Bug #1046113 - CVE-2013-7108 CVE-2013-7205 nagios: denial of service due to
off-by-one flaw in process_cgivars()
https://bugzilla.redhat.com/show_bug.cgi?id=1046113
--------------------------------------------------------------------------------
================================================================================
owncloud-8.0.8-1.el7 (FEDORA-EPEL-2015-8147)
Private file sync and share server
--------------------------------------------------------------------------------
Update Information:
This update provides the latest upstream minor update to the 8.0 series, 8.0.8.
It contains the usual crop of bug fixes and enhancements. See the [upstream
changelog](https://owncloud.org/changelog/) for details. As usual, the update
should apply cleanly without special handling, but we recommend backing up
configuration, data and database contents before installing the update, just in
case.
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.4.15-1.el7 (FEDORA-EPEL-2015-8159)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.4.15.0 (2015-09-20) ================================ - Undefined
"replace" function on numeric scalar - Stored-proc / routine - broken
parameter
parsing - Missing name for configuration read_as_multibytes - Incorrect "No
row selected" message - MySQL 5.5 and the language system variable - Semantics
of export and import icons are mixed up - Designer-Bug in move.js on multiple
server configuration - Invalid UTF-8 sequence in argument - Request URI too
large - Invalid argument supplied for foreach() - Foreign key constraints for
InnoDB tables with upper-case letters disabled - Warning when entering Query
page
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-1.12.3-1.el7 (FEDORA-EPEL-2015-8158)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update provides the new release of fedfind, 1.6, with some tweaks to image
identification (including better handling of Atomic images) and handling of
post-release nightly snapshots (related to the [Two Week
Atomic](https://fedorahosted.org/fesco/ticket/1452) plan). It also provides a
new release of python-wikitcms which will improve the image names shown in the
download tables on TC/RC wiki pages. ---- This update provides the latest
upstream version of python-wikitcms, 1.12.2, with a small bug fix (the previous
version accidentally printed the captcha to the console when editing a page
required solving a captcha; this has been fixed) and a refinement to the layout
of the download tables (images are now more finely distinguished so there are
fewer rows with multiple links).
--------------------------------------------------------------------------------
================================================================================
radicale-0.10-8.el7 (FEDORA-EPEL-2015-8154)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Switch conditionally back to python2 to support el6/el7
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.0-4.el7 (FEDORA-EPEL-2015-8153)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
own /etc/xrdp/pulse directory
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2015.09.09-1.el7 (FEDORA-EPEL-2015-8160)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to the latest release (#1251785)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1251785 - youtube-dl-2015.09.09 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1251785
--------------------------------------------------------------------------------