The following Fedora EPEL 7 Security updates need testing:
Age URL
1038
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
800
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
383
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
280
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
112
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
49
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
nagios-4.3.4-5.el7
38
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d704442ae7
qpid-cpp-1.37.0-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b
monit-5.25.1-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-753e392fc4
xrdp-0.9.5-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2e2d08b1ff
awstats-7.6-4.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-49ca8440a1
gifsicle-1.90-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-28611aa33f
python-bottle-0.12.13-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-885bb5ec89
poco-1.6.1-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
R-RInside-0.2.14-5.el7
gammu-1.39.0-1.el7
kompose-1.7.0-1.el7
lizardfs-3.12.0-1.el7
mongodb-2.6.12-5.el7
orangefs-2.9.7-1.el7
pdns-3.4.11-2.el7
poco-1.6.1-3.el7
python-bottle-0.12.13-1.el7
python-gammu-2.11-2.el7
python3-dns-1.15.0-7.el7
wammu-0.44-3.el7
yaml-cpp-0.5.3-7.el7
Details about builds:
================================================================================
R-RInside-0.2.14-5.el7 (FEDORA-EPEL-2018-1141973a4a)
C++ Classes to Embed R in C++ Applications
--------------------------------------------------------------------------------
Update Information:
Rebuild with updated R-Rcpp.
--------------------------------------------------------------------------------
================================================================================
gammu-1.39.0-1.el7 (FEDORA-EPEL-2018-3c49613978)
Command Line utility to work with mobile phones
--------------------------------------------------------------------------------
Update Information:
Update gammu, python-gammu and wammu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531832 - wammu-0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531832
[ 2 ] Bug #1531519 - gammu-1.39.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531519
[ 3 ] Bug #1504333 - gammu-1.38.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504333
[ 4 ] Bug #1531828 - python-gammu-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531828
[ 5 ] Bug #1510442 - python-gammu-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510442
--------------------------------------------------------------------------------
================================================================================
kompose-1.7.0-1.el7 (FEDORA-EPEL-2018-21ad37dfbd)
Tool to move from 'docker-compose' to Kubernetes
--------------------------------------------------------------------------------
Update Information:
Update to kompose-1.7.0 source
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478152 - kompose tries to install docker
https://bugzilla.redhat.com/show_bug.cgi?id=1478152
[ 2 ] Bug #1486973 - kompose-v1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486973
--------------------------------------------------------------------------------
================================================================================
lizardfs-3.12.0-1.el7 (FEDORA-EPEL-2018-a88951b7c0)
Distributed, fault tolerant file system
--------------------------------------------------------------------------------
Update Information:
An update that adds support for rich (NFS4) ACLs and advanced chunkserver
options. For the smoothest upgrade experience, first upgrade your metadata
shadows and loggers, then the metadata master, then the chunkservers, and
finally the clients. See the notes at
https://docs.lizardfs.com/adminguide/upgrading.html for more details (the 3.10
upgrade notes apply if 3.12 are still missing).
--------------------------------------------------------------------------------
================================================================================
mongodb-2.6.12-5.el7 (FEDORA-EPEL-2018-c4856b5c5a)
High-performance, schema-free document-oriented database
--------------------------------------------------------------------------------
Update Information:
Updated yaml-cpp to 0.5.3 per request in RHBZ#1493710.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493710 - Please rebase yaml-cpp from 0.5.1 to 0.5.3 (from F26)
https://bugzilla.redhat.com/show_bug.cgi?id=1493710
--------------------------------------------------------------------------------
================================================================================
orangefs-2.9.7-1.el7 (FEDORA-EPEL-2018-be24fc1985)
Parallel network file system client
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530679 - please build orangefs for EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=1530679
--------------------------------------------------------------------------------
================================================================================
pdns-3.4.11-2.el7 (FEDORA-EPEL-2018-c4856b5c5a)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
Updated yaml-cpp to 0.5.3 per request in RHBZ#1493710.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493710 - Please rebase yaml-cpp from 0.5.1 to 0.5.3 (from F26)
https://bugzilla.redhat.com/show_bug.cgi?id=1493710
--------------------------------------------------------------------------------
================================================================================
poco-1.6.1-3.el7 (FEDORA-EPEL-2018-885bb5ec89)
C++ class libraries for network-centric applications
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-1000472
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532129 - poco: Improper path restriction in ZipCommon.cpp allows for
arbitrary files to be written
https://bugzilla.redhat.com/show_bug.cgi?id=1532129
--------------------------------------------------------------------------------
================================================================================
python-bottle-0.12.13-1.el7 (FEDORA-EPEL-2018-28611aa33f)
Fast and simple WSGI-framework for small web-applications
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405418 - CVE-2016-9964 python-bottle: redirect() doesn't filter
"\r\n" which allows for CRLF attack [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1405418
--------------------------------------------------------------------------------
================================================================================
python-gammu-2.11-2.el7 (FEDORA-EPEL-2018-3c49613978)
Python bindings for Gammu
--------------------------------------------------------------------------------
Update Information:
Update gammu, python-gammu and wammu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531832 - wammu-0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531832
[ 2 ] Bug #1531519 - gammu-1.39.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531519
[ 3 ] Bug #1504333 - gammu-1.38.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504333
[ 4 ] Bug #1531828 - python-gammu-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531828
[ 5 ] Bug #1510442 - python-gammu-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510442
--------------------------------------------------------------------------------
================================================================================
python3-dns-1.15.0-7.el7 (FEDORA-EPEL-2018-72b2cdeba8)
DNS toolkit for Python
--------------------------------------------------------------------------------
Update Information:
Remove default file permissions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526662 - Review Request: python3-dns - DNS toolkit for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1526662
[ 2 ] Bug #1526627 - Python 3.4 python-dns is not available in EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1526627
--------------------------------------------------------------------------------
================================================================================
wammu-0.44-3.el7 (FEDORA-EPEL-2018-3c49613978)
Mobile Phone Manager - Gammu GUI
--------------------------------------------------------------------------------
Update Information:
Update gammu, python-gammu and wammu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531832 - wammu-0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531832
[ 2 ] Bug #1531519 - gammu-1.39.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531519
[ 3 ] Bug #1504333 - gammu-1.38.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504333
[ 4 ] Bug #1531828 - python-gammu-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531828
[ 5 ] Bug #1510442 - python-gammu-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510442
--------------------------------------------------------------------------------
================================================================================
yaml-cpp-0.5.3-7.el7 (FEDORA-EPEL-2018-c4856b5c5a)
A YAML parser and emitter for C++
--------------------------------------------------------------------------------
Update Information:
Updated yaml-cpp to 0.5.3 per request in RHBZ#1493710.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493710 - Please rebase yaml-cpp from 0.5.1 to 0.5.3 (from F26)
https://bugzilla.redhat.com/show_bug.cgi?id=1493710
--------------------------------------------------------------------------------