The following Fedora EPEL 7 Security updates need testing:
Age URL
671
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
433
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
151
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c
redis-3.2.3-1.el7
135
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
78
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6
compat-guile18-1.8.8-14.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-61ae084204
seamonkey-2.46-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-b2e637ff5a
python-wikitcms-2.1.10-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0fa3a954b0
borgbackup-1.0.9-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-edab07e39a
php-PHPMailer-5.2.21-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bb32162e83
php-swiftmailer-5.4.5-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-92129d651d
exim-4.88-2.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-770d2afc7d
mingw-flac-1.3.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
bindfs-1.13.5-3.el7
fail2ban-0.9.6-1.el7
inxi-2.3.7-1.el7
koji-1.11.0-3.el7
loopabull-0.0.5-1.el7
pdc-updater-0.4.6-1.el7
perl-Sys-Mmap-0.17-6.el7
php-nikic-fast-route-1.1.0-1.el7
python-djblets-0.9.4-3.el7
python-httpretty-0.8.14-1.20161011git70af1f8.el7
python3-urllib3-1.19.1-3.el7
Details about builds:
================================================================================
bindfs-1.13.5-3.el7 (FEDORA-EPEL-2017-779718fcf9)
Fuse filesystem to mirror a directory
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1282073 - RFE; Build for epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1282073
--------------------------------------------------------------------------------
================================================================================
fail2ban-0.9.6-1.el7 (FEDORA-EPEL-2017-57b616d0bb)
Daemon to ban hosts that cause multiple authentication errors
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.6: * Misleading add resp. enable of (already available) jail in
database, that induced a subsequent error: last position of log file will be
never retrieved (gh-795) * Fixed a distribution related bug within
testReadStockJailConfForceEnabled (e.g. test-cases faults on Fedora, see
gh-1353) * Fixed pythonic filters and test scripts (running via wrong python
version, uses "fail2ban-python" now); * Fixed test case
"testSetupInstallRoot"
for not default python version (also using direct call, out of virtualenv); *
Fixed ambiguous wrong recognized date pattern resp. its optional parts (see
gh-1512); * FIPS compliant, use sha1 instead of md5 if it not allowed (see
gh-1540) * Monit config: scripting is not supported in path (gh-1556) *
`filter.d/apache-modsecurity.conf` - Fixed for newer version (one space,
gh-1626), optimized: non-greedy catch-all replaced for safer match,
unneeded catch-all anchoring removed, non-capturing * `filter.d/asterisk.conf`
- Fixed to match different asterisk log prefix (source file: method:) *
`filter.d/dovecot.conf` - Fixed failregex ignores failures through some not
relevant info (gh-1623) * `filter.d/ignorecommands/apache-fakegooglebot` -
Fixed error within apache-fakegooglebot, that will be called with wrong
python version (gh-1506) * `filter.d/assp.conf` - Extended failregex and
test cases to handle ASSP V1 and V2 (gh-1494) * `filter.d/postfix-sasl.conf`
- Allow for having no trailing space after 'failed:' (gh-1497) *
`filter.d/vsftpd.conf` - Optional reason part in message after FAIL LOGIN
(gh-1543) * `filter.d/sendmail-reject.conf` - removed mandatory double space
(if dns-host available, gh-1579) * filter.d/sshd.conf - recognized "Failed
publickey for" (gh-1477); - optimized failregex to match all of "Failed
any-
method for ... from <HOST>" (gh-1479) - eliminated possible complex
injections (on user-name resp. auth-info, see gh-1479) - optional port part
after host (see gh-1533, gh-1581) * New Actions: - `action.d/npf.conf` for
NPF, the latest packet filter for NetBSD * New Filters: - `filter.d/mongodb-
auth.conf` for MongoDB (document-oriented NoSQL database engine) (gh-1586,
gh-1606 and gh-1607) * DateTemplate regexp extended with the word-end boundary,
additionally to word-start boundary * Introduces new command "fail2ban-
python", as automatically created symlink to python executable, where fail2ban
currently installed (resp. its modules are located): - allows to use the
same version, fail2ban currently running, e.g. in external scripts just
via replace python with fail2ban-python: ```diff -#!/usr/bin/env
python +#!/usr/bin/env fail2ban-python ``` - always the same
pickle protocol - the same (and also guaranteed available) fail2ban modules
- simplified stand-alone install, resp. stand-alone installation possibility
via setup (like gh-1487) is getting closer * Several test cases rewritten using
new methods assertIn, assertNotIn * New forward compatibility method
assertRaisesRegexp (normally python >= 2.7). Methods assertIn, assertNotIn,
assertRaisesRegexp, assertLogged, assertNotLogged are test covered now * Jail
configuration extended with new syntax to pass options to the backend (see
gh-1408), examples: - `backend =
systemd[journalpath=/run/log/journal/machine-1]` - `backend =
systemd[journalfiles="/run/log/journal/machine-1/system.journal,
/run/log/journal/machine-1/user.journal"]` - `backend =
systemd[journalflags=2]` Fix sendmail-auth filter (bug #1329919)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329919 - sendmail-auth.conf filter never matchs on failregex condition
https://bugzilla.redhat.com/show_bug.cgi?id=1329919
--------------------------------------------------------------------------------
================================================================================
inxi-2.3.7-1.el7 (FEDORA-EPEL-2017-8091d80f0d)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.7.
--------------------------------------------------------------------------------
================================================================================
koji-1.11.0-3.el7 (FEDORA-EPEL-2017-e04d644972)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Add proxy support to hub ---- Fix kerberos support for koji-gc
--------------------------------------------------------------------------------
================================================================================
loopabull-0.0.5-1.el7 (FEDORA-EPEL-2017-49d0813f6f)
Event loop driven Ansible playbook execution engine
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream.
--------------------------------------------------------------------------------
================================================================================
pdc-updater-0.4.6-1.el7 (FEDORA-EPEL-2017-f5eeedc179)
Update the product definition center in response to fedmsg
--------------------------------------------------------------------------------
Update Information:
Flatten a misbehaving generator. ---- Use the container_build_user to find
docker builds in a tag..
--------------------------------------------------------------------------------
================================================================================
perl-Sys-Mmap-0.17-6.el7 (FEDORA-EPEL-2017-d4749f87d2)
Use mmap to map in a file as a Perl variable
--------------------------------------------------------------------------------
Update Information:
Perl 5.24 rebuild
--------------------------------------------------------------------------------
================================================================================
php-nikic-fast-route-1.1.0-1.el7 (FEDORA-EPEL-2017-ed4dff94a5)
Fast implementation of a regular expression based router
--------------------------------------------------------------------------------
Update Information:
Last upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408886 - php-nikic-fast-route-v1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1408886
--------------------------------------------------------------------------------
================================================================================
python-djblets-0.9.4-3.el7 (FEDORA-EPEL-2017-92bd66a505)
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
Fix missing dependencies breaking Review Board
--------------------------------------------------------------------------------
================================================================================
python-httpretty-0.8.14-1.20161011git70af1f8.el7 (FEDORA-EPEL-2017-fb7e41f3a7)
HTTP request mock tool for Python
--------------------------------------------------------------------------------
Update Information:
This update provides version 0.8.14 of httpretty. This is a significant update
over the previous 0.8.3, but so far as I am aware, there are no backward-
incompatible changes (please comment if you find any). The package now has its
test suite enabled (aside from a few tests that require remote trips), and all
tests pass for all releases, so we have some confidence this in fact works
correctly now. Python 3 compatibility is also greatly improved. 0.8.3 was
entirely broken with more recent urllib3, requests, and openssl versions, and
had many compatibility issues with Python 3.
--------------------------------------------------------------------------------
================================================================================
python3-urllib3-1.19.1-3.el7 (FEDORA-EPEL-2017-c0adf476bd)
Python 3 HTTP library with thread-safe connection pooling and file post
--------------------------------------------------------------------------------
Update Information:
Install symlink to system six.py
--------------------------------------------------------------------------------