The following Fedora EPEL 7 Security updates need testing:
Age URL
170
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
121
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
104
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
76
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896
myrepos-1.20180726-1.el7
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bdb21ebc3f
drupal7-7.60-2.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9051b49e75
suricata-4.0.6-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc29932f12
pdns-4.0.6-2.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9270bbaec
pdns-recursor-4.1.7-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a09ace87bb
php-PHPMailer-5.2.27-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0e73364530
python-paramiko-2.1.1-0.9.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c25e48ded1
bird-1.6.4-2.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2206653eb9
python-django-1.11.13-4.el7 python-django16-1.6.11.7-5.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f65916e08
moodle-3.1.15-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cf66ab47c5
dnsdist-1.3.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cobbler-2.8.4-4.el7
did-0.11-1.el7
egl-wayland-1.1.0-0.2.20181015git0eb29d4.el7
golang-1.11.2-2.el7
golang-github-Sirupsen-logrus-1.1.1-2.el7
golang-github-vbatts-tar-split-0.11.1-1.el7
golang-googlecode-go-crypto-0-0.14.20181125git3d3f9f4.el7
php-fig-http-message-util-1.1.3-1.el7
python-productmd-1.18-1.el7
rpm-mpi-hooks-5-4.el7
Details about builds:
================================================================================
cobbler-2.8.4-4.el7 (FEDORA-EPEL-2018-a4f72b6533)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
- Revert bind_manage_ipmi feature that is broken on 2.8 - Use pathfix.py to fix
python shebangs ---- - Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433,
CVE-2018-1000226, CVE-2018-10931) - Make koan require python2-ethtool (BZ
1638933)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.4-4
- Revert bind_manage_ipmi feature that is broken on 2.8
* Sun Nov 25 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.4-3
- Use pathfix.py to fix python shebangs
* Sun Nov 25 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.4-2
- Make koan require python2-ethtool (BZ 1638933)
* Sat Nov 24 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.4-1
- Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931)
* Wed May 30 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.3-3
- koan requires urlgrabber
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643860 - Kickstart generation is broken
https://bugzilla.redhat.com/show_bug.cgi?id=1643860
[ 2 ] Bug #1614433 - CVE-2018-10931 cobbler: CobblerXMLRPCInterface exports all its
methods over XMLRPC [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1614433
[ 3 ] Bug #1613292 - cobbler: XMLRPC API endpoints are not correctly validating security
tokens [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1613292
[ 4 ] Bug #1638933 - koan RPM should require python-ethtool
https://bugzilla.redhat.com/show_bug.cgi?id=1638933
--------------------------------------------------------------------------------
================================================================================
did-0.11-1.el7 (FEDORA-EPEL-2018-ab30b38ebc)
What did you do last week, month, year?
--------------------------------------------------------------------------------
Update Information:
Pagure, Sentry, Redmine, gssapi, packaging...
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Petr ��pl��chal <psplicha(a)redhat.com> 0.11-1
- Validate plugin types in config [fix #148]
- Use email for searching Jira issues [fix #122]
- Handle authentication errors in the Jira plugin
- Update shebang to explicitly use python2
- Add a new section Questions to docs [fix #155]
- Raise error on unsuccessful request [fix #154]
- New plugin for Pagure stats [fix #153]
- Use requests-gssapi for Jira stats
- Fix problems with the Sentry plugin
- Merge configurable ssl verify for gitlab [#136]
- Merge the improved gitlab search [#137]
- Merge the new redmine plugin [#135]
- Some minor adjustments for the redmine plugin
- GitHub stats about reviewed PRs [#127]
- Remove zero-fill from Jira issues [fix #149]
- Add oauth2client to docs requirements [fix #152]
- Adjust until limit of the sentry plugin [fix #151]
- Update test data for the sentry & google plugins
- Update Python macros to new packaging standards
- Port to python-gssapi
- Fixed issue with failing tests
- Remove the idonethis plugin
- Merge the new sentry plugin
- Add basic Redmine support
- Add basic GitLab support
- Add search for subscribed bugs
- Add did.spec to MANIFEST.in
- Merge fix for bugs patched when created [#109]
- Merge the new Bugzilla query syntax [#111]
- Fetch only needed stats during GitHub testing
- Merge support for pull request separation [#114]
- Show month name / week number by default [#106]
* Wed Jan 11 2017 Martin Frodl <mfrodl(a)redhat.com> 0.10-1
- New plugin for Google Apps
- Document how to generate documentation locally
- Mock C modules while building documentation
- Make all make versions happy
- Add requirements.txt to fix docs building
- Properly handle GitHub issues with Unicode names
- Add login key to github section in example config
- Update install docs with fresh Fedora instructions
- Update coveralls links in README
- List install dependencies for Debian-based systems
- Use another Trac instance in plugin test
- Move kerberos to extra requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1264876 - did-0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1264876
[ 2 ] Bug #1634529 - [abrt] did: main(): cli.py:209:main:AttributeError:
'GSSError' object has no attribute 'gen_msg'
https://bugzilla.redhat.com/show_bug.cgi?id=1634529
[ 3 ] Bug #1635156 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1635156
--------------------------------------------------------------------------------
================================================================================
egl-wayland-1.1.0-0.2.20181015git0eb29d4.el7 (FEDORA-EPEL-2018-96341b0e25)
Wayland EGL External Platform library
--------------------------------------------------------------------------------
Update Information:
- Bug fix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Leigh Scott <leigh123linux(a)googlemail.com> -
1.1.0-0.2.20181015git0eb29d4
- Update to latest git snapshot (rhbz#1653118)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1653118 - libnvidia-egl-wayland.so lacks wl_eglstream_interface symbol
https://bugzilla.redhat.com/show_bug.cgi?id=1653118
--------------------------------------------------------------------------------
================================================================================
golang-1.11.2-2.el7 (FEDORA-EPEL-2018-ba8845b83b)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Un-retiring of the epel7 package branch * Rebase to 1.11.2
--------------------------------------------------------------------------------
================================================================================
golang-github-Sirupsen-logrus-1.1.1-2.el7 (FEDORA-EPEL-2018-34e70733ac)
Structured logger for Go
--------------------------------------------------------------------------------
Update Information:
Provide old import path ---- Release 1.1.1
--------------------------------------------------------------------------------
================================================================================
golang-github-vbatts-tar-split-0.11.1-1.el7 (FEDORA-EPEL-2018-63a72cc9e6)
Tar archive assembly/dis-assembly
--------------------------------------------------------------------------------
Update Information:
rebuilt for upstream 0.11.1
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-go-crypto-0-0.14.20181125git3d3f9f4.el7 (FEDORA-EPEL-2018-ff7b64fd64)
Supplementary Go cryptography libraries
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 3d3f9f413869b949e48070b5bc593aa22cc2b8f2 ---- Bump to
upstream 81372b2fc2f10bef2a7f338da115c315a56b2726 ---- Polish the spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1231618 - Tracker for golang-googlecode-go-crypto
https://bugzilla.redhat.com/show_bug.cgi?id=1231618
--------------------------------------------------------------------------------
================================================================================
php-fig-http-message-util-1.1.3-1.el7 (FEDORA-EPEL-2018-6ba7f16c09)
PSR Http Message Util
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.3** - 2018-11-19 * **Added** - [#10](https://github.com/php-
fig/http-message-util/pull/10) adds the constants
`StatusCodeInterface::STATUS_EARLY_HINTS` (103) and
`StatusCodeInterface::STATUS_TOO_EARLY` (425).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Remi Collet <remi(a)remirepo.net> - 1.1.3-1
- update to 1.1.3
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.18-1.el7 (FEDORA-EPEL-2018-e95cdff5bb)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
- Add SecurityFix label - Fix `get_major_version` on inputs with more than two
components
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.18-1
- Add SecurityFix label
- Fix get_major_version on inputs with more than two components
--------------------------------------------------------------------------------
================================================================================
rpm-mpi-hooks-5-4.el7 (FEDORA-EPEL-2018-39e7eed24a)
RPM dependency generator hooks for MPI packages
--------------------------------------------------------------------------------
Update Information:
RPM dependency generator hooks for MPI packages.
--------------------------------------------------------------------------------