The following Fedora EPEL 7 Security updates need testing:
Age URL
303
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
95
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
65
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
28
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f82c6fc04a
p7zip-15.09-4.el7
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-67166d0519
shellinabox-2.19-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-fe8f5408df
moodle-3.0.1-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e943f1deb9
mediawiki123-1.23.13-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-5538691958
roundcubemail-1.1.4-2.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-864da6c179
nghttp2-1.6.0-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e21e03e52f
mono-2.10.8-9.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3e181e41ca
openvpn-2.3.10-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-039bf0137a
salt-2015.5.8-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e04c714f9d
gajim-0.16.5-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ec85678f0c
nodejs-ws-1.0.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
atomicapp-0.3.0-1.el7
carbon-c-relay-1.4-1.el7
efl-1.16.1-1.el7
epel-rpm-macros-7-5
gajim-0.16.5-1.el7
java-dirq-1.7-1.el7
jmtpfs-0.4-2.el7
lastpass-cli-0.8.0-1.el7
libinput-1.1.4-1.el7
mathgl-2.3.3-7.el7
mimedefang-2.78-5.el7
nodejs-ws-1.0.1-1.el7
openblas-0.2.15-2.el7
pam-kwallet-5.5.2-1.el7
pdsh-2.31-1.el7
perl-Test-CheckManifest-1.29-3.el7
perl-Test-SharedFork-0.35-1.el7
php-doctrine-inflector-1.1.0-1.el7
php-egulias-email-validator-1.2.11-1.el7
php-paragonie-random-compat-1.1.4-1.el7
php-psr-cache-1.0.0-1.el7
php-symfony-polyfill-1.0.1-1.el7
php-zendframework-zend-diactoros-1.3.3-1.el7
python-crypto-2.6.1-9.el7
python-fedmsg-meta-fedora-infrastructure-0.15.7-1.el7
python-retask-0.3-5.el7
python-tzlocal-1.2-2.el7
python3-py-1.4.30-2.el7
rubygem-bacon-1.2.0-2.el7
rubygem-coffee-script-source-1.6.3-1.el7
rubygem-http_connection-1.4.1-10.el7
rubygem-kramdown-1.9.0-1.el7
rubygem-liquid-3.0.1-2.el7
rubygem-maruku-0.7.2-1.el7
rubygem-redis-3.2.1-2.el7
rubygem-ref-1.0.5-2.el7
rubygem-sass-3.4.19-1.el7
salt-2015.5.8-1.el7
unar-1.8.1-10.el7
yubikey-personalization-gui-3.1.24-1.el7
Details about builds:
================================================================================
atomicapp-0.3.0-1.el7 (FEDORA-EPEL-2016-525537a725)
Reference implementation of the Nulecule container application Specification
--------------------------------------------------------------------------------
Update Information:
Christmas update to 0.3.0 ---- Adding python-setuptools and docker to requires
---- Update to 0.1.10 ---- Initial package ---- Update to 0.1.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292635 - atomicapp-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1292635
[ 2 ] Bug #1265029 - atomicapp-0.1.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1265029
[ 3 ] Bug #1223887 - Review Request: atomicapp - Reference implementation of the
Nulecule container application Specification
https://bugzilla.redhat.com/show_bug.cgi?id=1223887
[ 4 ] Bug #1265860 - atomicapp-0.1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1265860
--------------------------------------------------------------------------------
================================================================================
carbon-c-relay-1.4-1.el7 (FEDORA-EPEL-2016-70d73583fd)
Enhanced C implementation of Carbon relay, aggregator and rewriter
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.4 ---- Update to upstream 1.3 ---- Update to upstream
1.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1290612 - carbon-c-relay-v1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1290612
--------------------------------------------------------------------------------
================================================================================
efl-1.16.1-1.el7 (FEDORA-EPEL-2016-f59767cd5d)
Collection of Enlightenment libraries
--------------------------------------------------------------------------------
Update Information:
Upstream update to efl-1.16.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1256696 - efl-devel obsoletes e_dbus
https://bugzilla.redhat.com/show_bug.cgi?id=1256696
[ 2 ] Bug #1294204 - efl-1.16.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1294204
--------------------------------------------------------------------------------
================================================================================
epel-rpm-macros-7-5 (FEDORA-EPEL-2016-ecc29403a2)
Extra Packages for Enterprise Linux RPM macros
--------------------------------------------------------------------------------
Update Information:
Fix python_provide macro for EPEL7 python3 package names
--------------------------------------------------------------------------------
================================================================================
gajim-0.16.5-1.el7 (FEDORA-EPEL-2016-e04c714f9d)
Jabber client written in PyGTK
--------------------------------------------------------------------------------
Update Information:
Version 0.16.5 of Gajim has been released. What's new since 0.16.4: * Improve
Message Archive Management implementation * Improve security on connexion and
for roster management (CVE-2015-8688) Full changelog:
http://hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog List of fixed bugs:
https://trac.gajim.org/query?status=closed&milestone=0.16.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295477 - CVE-2015-8688 gajim: Message interception due to unverified origin
of roster push [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295477
--------------------------------------------------------------------------------
================================================================================
java-dirq-1.7-1.el7 (FEDORA-EPEL-2016-4d9d05cc80)
Directory based queue
--------------------------------------------------------------------------------
Update Information:
Updated to upstream version 1.7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1286944 - java-dirq-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1286944
--------------------------------------------------------------------------------
================================================================================
jmtpfs-0.4-2.el7 (FEDORA-EPEL-2016-46f030c51b)
FUSE and libmtp based filesystem for accessing MTP devices
--------------------------------------------------------------------------------
Update Information:
jmtpfs is a FUSE and libmtp based filesystem for accessing MTP (Media Transfer
Protocol) devices. It was specifically designed for exchanging files between
Linux systems and newer Android devices that support MTP but not USB Mass
Storage. The goal is to create a well behaved filesystem, allowing tools like
find and rsync to work as expected. MTP file types are set automatically based
on file type detection using libmagic. Setting the file appears to be necessary
for some Android apps, like Gallery, to be able to find and use the files.
Since it is meant as an Android file transfer utility, the playlists and other
non-file based data are not supported.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294577 - Review Request: jmtpfs - FUSE and libmtp based filesystem for
accessing MTP devices
https://bugzilla.redhat.com/show_bug.cgi?id=1294577
--------------------------------------------------------------------------------
================================================================================
lastpass-cli-0.8.0-1.el7 (FEDORA-EPEL-2016-3e614e9a35)
Command line interface to
LastPass.com
--------------------------------------------------------------------------------
Update Information:
Update to latest version. ---- Initial EPEL package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295589 - lastpass-cli-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1295589
[ 2 ] Bug #1282640 - Review Request: lastpass-cli - Command line interface to
LastPass.com
https://bugzilla.redhat.com/show_bug.cgi?id=1282640
--------------------------------------------------------------------------------
================================================================================
libinput-1.1.4-1.el7 (FEDORA-EPEL-2016-07556bd252)
Input device library
--------------------------------------------------------------------------------
Update Information:
Upstream update to 1.1.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1261103 - [RFE] EPEL7 branch of libinput
https://bugzilla.redhat.com/show_bug.cgi?id=1261103
--------------------------------------------------------------------------------
================================================================================
mathgl-2.3.3-7.el7 (FEDORA-EPEL-2016-142baaa768)
Cross-platform library for making high-quality scientific graphics
--------------------------------------------------------------------------------
Update Information:
* Make arch dependent package arched. * Split out python module
--------------------------------------------------------------------------------
================================================================================
mimedefang-2.78-5.el7 (FEDORA-EPEL-2016-897f9d80ed)
E-Mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
Provide native systemd service (#789768, #1279452) to avoid initscript errors
when NETWORKING variable is not set (e.g. with NetworkManager or future systemd-
networkd).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279452 - mimedefang init script produces error when NETWORKING variable not
set
https://bugzilla.redhat.com/show_bug.cgi?id=1279452
--------------------------------------------------------------------------------
================================================================================
nodejs-ws-1.0.1-1.el7 (FEDORA-EPEL-2016-ec85678f0c)
Web socket client, server and console for nodejs
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.1 - Security Fix - (#1295717,1295718,1295719)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295717 - nodejs-ws: Remote memory disclosure via ping functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1295717
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.15-2.el7 (FEDORA-EPEL-2016-b5d8b1465e)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Enabled ARMv7 and PPC64le (POWER 8) architectures. Built 64-bit interface
libraries with additional symbol suffixes, allowing for the library to be used
in a same program with both the 32-bit and 64-bit interfaces.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222075 - Please enable building on ARM
https://bugzilla.redhat.com/show_bug.cgi?id=1222075
[ 2 ] Bug #1287541 - Shipping libopenblas?64_.so with symbol suffix
https://bugzilla.redhat.com/show_bug.cgi?id=1287541
[ 3 ] Bug #1287105 - enable support ppc64/ppc64le and arm
https://bugzilla.redhat.com/show_bug.cgi?id=1287105
--------------------------------------------------------------------------------
================================================================================
pam-kwallet-5.5.2-1.el7 (FEDORA-EPEL-2015-b59342ac4d)
PAM module for KWallet
--------------------------------------------------------------------------------
Update Information:
Update to 5.5.2
--------------------------------------------------------------------------------
================================================================================
pdsh-2.31-1.el7 (FEDORA-EPEL-2016-7bf9866147)
Parallel remote shell program
--------------------------------------------------------------------------------
Update Information:
This is a build for EPEL7, no changes otherwise
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1228031 - Build pdsh for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1228031
--------------------------------------------------------------------------------
================================================================================
perl-Test-CheckManifest-1.29-3.el7 (FEDORA-EPEL-2016-9884e2af26)
Check if your Manifest matches your distro
--------------------------------------------------------------------------------
Update Information:
First build for EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285486 - perl-Test-CheckManifest: please update and build epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1285486
--------------------------------------------------------------------------------
================================================================================
perl-Test-SharedFork-0.35-1.el7 (FEDORA-EPEL-2016-4c88b7198f)
Fork test
--------------------------------------------------------------------------------
Update Information:
Upstream update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284623 - perl-Test-SharedFork: update to 0.29 in epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1284623
--------------------------------------------------------------------------------
================================================================================
php-doctrine-inflector-1.1.0-1.el7 (FEDORA-EPEL-2016-e8ef502b53)
Common string manipulations with regard to casing and singular/plural rules
--------------------------------------------------------------------------------
Update Information:
#### v1.1.0 * 11: Add a method to uppercase words with a custom delimeter. *
16: Criteria is plural, not singular * 17: Switch to the docker-based
infrastructure on Travis * 18: Hero works the same as Buffalo and Tomato * 19:
Fixes reversal of criteria and criterion * 20: Update Inflector.php * 21:
travis: PHP 7.0 nightly added + phpunit explicit * 22: More Inflections * 24:
Added some plurals and ordered arrays * 25: Bumped branch alias * 26: Update
LICENSE
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279884 - php-doctrine-inflector-v1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1279884
--------------------------------------------------------------------------------
================================================================================
php-egulias-email-validator-1.2.11-1.el7 (FEDORA-EPEL-2016-63e6d6c86c)
A library for validating emails
--------------------------------------------------------------------------------
Update Information:
Diff:
https://github.com/egulias/EmailValidator/compare/1.2.10...1.2.11 ####
1.2.11 * Orphan brackets (see
[#84](https://github.com/egulias/EmailValidator/pull/84))
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1280283 - php-egulias-email-validator-1.2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1280283
--------------------------------------------------------------------------------
================================================================================
php-paragonie-random-compat-1.1.4-1.el7 (FEDORA-EPEL-2016-19f1615254)
PHP 5.x polyfill for random_bytes() and random_int() from PHP 7
--------------------------------------------------------------------------------
Update Information:
Diff:
https://github.com/paragonie/random_compat/compare/1.1.0...1.1.4 ####
Version 1.1.4 * Thanks narfbg for critiquing the previous patch and suggesting
a fix. #### Version 1.1.3 * The test for COM in disabled_classes is now case-
insensitive. #### Version 1.1.2 * Don't instantiate COM if it's a disabled
class. Removes the E_WARNING on Windows. #### Version 1.1.1 * Fix a
performance issue with `/dev/urandom` buffering.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1290629 - php-paragonie-random-compat-1.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1290629
--------------------------------------------------------------------------------
================================================================================
php-psr-cache-1.0.0-1.el7 (FEDORA-EPEL-2016-9bbb455597)
PSR Cache: Common interface for caching libraries
--------------------------------------------------------------------------------
Update Information:
This package holds all interfaces defined by [PSR-6](http://www.php-
fig.org/psr/psr-6/). Note that this is not a Cache implementation of its own.
It is merely an interface that describes a Cache implementation. See the
specification for more details. Autoloader:
`/usr/share/php/Psr/Cache/autoload.php`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295254 - Review Request: php-psr-cache - PSR Cache: Common interface for
caching libraries
https://bugzilla.redhat.com/show_bug.cgi?id=1295254
--------------------------------------------------------------------------------
================================================================================
php-symfony-polyfill-1.0.1-1.el7 (FEDORA-EPEL-2016-ad872c32d2)
Symfony polyfills backporting features to lower PHP versions
--------------------------------------------------------------------------------
Update Information:
Diff:
https://github.com/symfony/polyfill/compare/v1.0.0...v1.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294916 - php-symfony-polyfill-1.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1294916
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-diactoros-1.3.3-1.el7 (FEDORA-EPEL-2016-55c662de8b)
PSR HTTP Message implementations
--------------------------------------------------------------------------------
Update Information:
Diff:
https://github.com/zendframework/zend-diactoros/compare/1.1.4...1.3.3 ##
1.3.3 - 2016-01-04 ### Added - Nothing. ### Deprecated - Nothing. ###
Removed - Nothing. ### Fixed - [#135](https://github.com/zendframework/zend-
diactoros/pull/135) fixes the behavior of
`ServerRequestFactory::marshalHeaders()` to no longer omit `Cookie` headers
from the aggregated headers. While the values are parsed and injected into the
cookie params, it's useful to have access to the raw headers as well. ##
1.3.2 - 2015-12-22 ### Added - [#124](https://github.com/zendframework/zend-
diactoros/pull/124) adds four more optional arguments to the `ServerRequest`
constructor: - `array $cookies` - `array $queryParams` -
`null|array|object $parsedBody` - `string $protocolVersion`
`ServerRequestFactory` was updated to pass values for each of these parameters
when creating an instance, instead of using the related `with*()` methods on
an instance. ### Deprecated - Nothing. ### Removed - Nothing. ### Fixed -
[#122](https://github.com/zendframework/zend-diactoros/pull/122) updates the
`ServerRequestFactory` to retrieve the HTTP protocol version and inject it in
the generated `ServerRequest`, which previously was not performed. ## 1.3.1 -
2015-12-16 ### Added - Nothing. ### Deprecated - Nothing. ### Removed -
Nothing. ### Fixed - [#113](https://github.com/zendframework/zend-
diactoros/pull/113) fixes an issue in the response serializer, ensuring that
the status code in the deserialized response is an integer. -
[#115](https://github.com/zendframework/zend-diactoros/pull/115) fixes an
issue in the various text-basd response types (`TextResponse`, `HtmlResponse`,
and `JsonResponse`); due to the fact that the constructor was not rewinding
the message body stream, `getContents()` was thus returning `null`, as the
pointer was at the end of the stream. The constructor now rewinds the stream
after populating it in the constructor. ## 1.3.0 - 2015-12-15 ### Added -
[#110](https://github.com/zendframework/zend-diactoros/pull/110) adds
`Zend\Diactoros\Response\SapiEmitterTrait`, which provides the following
private method definitions: - `injectContentLength()` - `emitStatusLine()`
- `emitHeaders()` - `flush()` - `filterHeader()` The `SapiEmitter`
implementation has been updated to remove those methods and instead compose
the trait. - [#111](https://github.com/zendframework/zend-diactoros/pull/111)
adds a new emitter implementation, `SapiStreamEmitter`; this emitter type will
loop through the stream instead of emitting it in one go, and supports content
ranges. ### Deprecated - Nothing. ### Removed - Nothing. ### Fixed -
Nothing. ## 1.2.1 - 2015-12-15 ### Added - Nothing. ### Deprecated -
Nothing. ### Removed - Nothing. ### Fixed -
[#101](https://github.com/zendframework/zend-diactoros/pull/101) fixes the
`withHeader()` implementation to ensure that if the header existed previously
but using a different casing strategy, the previous version will be removed in
the cloned instance. - [#103](https://github.com/zendframework/zend-
diactoros/pull/103) fixes the constructor of `Response` to ensure that null
status codes are not possible. - [#99](https://github.com/zendframework/zend-
diactoros/pull/99) fixes validation of header values submitted via request and
response constructors as follows: - numeric (integer and float) values are
now properly allowed (this solves some reported issues with setting Content-
Length headers) - invalid header names (non-string values or empty strings)
now raise an exception. - invalid individual header values (non-string,
non-numeric) now raise an exception. ## 1.2.0 - 2015-11-24 ### Added -
[#88](https://github.com/zendframework/zend-diactoros/pull/88) updates the
`SapiEmitter` to emit a `Content-Length` header with the content length as
reported by the response body stream, assuming that
`StreamInterface::getSize()` returns an integer. -
[#77](https://github.com/zendframework/zend-diactoros/pull/77) adds a new
response type, `Zend\Diactoros\Response\TextResponse`, for returning plain
text responses. By default, it sets the content type to `text/plain;
charset=utf-8`; per the other response types, the signature is `new
TextResponse($text, $status = 200, array $headers = [])`. -
[#90](https://github.com/zendframework/zend-diactoros/pull/90) adds a new
`Zend\Diactoros\CallbackStream`, allowing you to back a stream with a PHP
callable (such as a generator) to generate the message content. Its
constructor accepts the callable: `$stream = new CallbackStream($callable);`
### Deprecated - Nothing. ### Removed - Nothing. ### Fixed -
[#77](https://github.com/zendframework/zend-diactoros/pull/77) updates the
`HtmlResponse` to set the charset to utf-8 by default (if no content type
header is provided at instantiation).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285581 - php-zendframework-zend-diactoros-1.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1285581
--------------------------------------------------------------------------------
================================================================================
python-crypto-2.6.1-9.el7 (FEDORA-EPEL-2016-bbf04f1b2a)
Cryptography library for Python
--------------------------------------------------------------------------------
Update Information:
This update adds a python34-crypto sub-package to support the python 3.4 stack
in EPEL-7. The original python2 package is renamed from python-crypto to
python2-crypto, with appropriate provides/obsoletes to manage the transition
cleanly. This update is packaging changes only, no functional changes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294708 - Build for python3 in EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1294708
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.15.7-1.el7 (FEDORA-EPEL-2016-b1b5298048)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Updates the taskotron and mailman message handlers. ---- New processors for
pungi-koji and nagios messages.
--------------------------------------------------------------------------------
================================================================================
python-retask-0.3-5.el7 (FEDORA-EPEL-2016-5081e42a76)
Python module to create and manage distributed task queues
--------------------------------------------------------------------------------
Update Information:
python-retask for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1244143 - [epel7] python-retask not built yet
https://bugzilla.redhat.com/show_bug.cgi?id=1244143
--------------------------------------------------------------------------------
================================================================================
python-tzlocal-1.2-2.el7 (FEDORA-EPEL-2016-8434cdd00f)
A Python module that tries to figure out what your local timezone is
--------------------------------------------------------------------------------
Update Information:
Rebuilt for python 3.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295709 - python-tzlocal in EPEL 7 does not work with systemd, please update
to version 1.2
https://bugzilla.redhat.com/show_bug.cgi?id=1295709
--------------------------------------------------------------------------------
================================================================================
python3-py-1.4.30-2.el7 (FEDORA-EPEL-2016-0087a8cbe2)
Library with cross-python path, ini-parsing, io, code, log facilities
--------------------------------------------------------------------------------
Update Information:
The py lib is a Python development support library featuring the following tools
and modules: * py.path: uniform local and svn path objects * py.apipkg:
explicit API control and lazy-importing * py.iniconfig: easy parsing of .ini
files * py.code: dynamic code generation and introspection * py.path:
uniform local and svn path objects
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1294711 - Review Request: python3-py - Library with cross-python path,
ini-parsing, io, code, log facilities
https://bugzilla.redhat.com/show_bug.cgi?id=1294711
--------------------------------------------------------------------------------
================================================================================
rubygem-bacon-1.2.0-2.el7 (FEDORA-EPEL-2016-cc9b14c529)
A small RSpec clone
--------------------------------------------------------------------------------
Update Information:
Bringing package to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-coffee-script-source-1.6.3-1.el7 (FEDORA-EPEL-2016-7bfbbec84b)
The CoffeeScript Compiler
--------------------------------------------------------------------------------
Update Information:
Bring package to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-http_connection-1.4.1-10.el7 (FEDORA-EPEL-2016-8a7dc7275e)
RightScale's robust HTTP/S connection module
--------------------------------------------------------------------------------
Update Information:
Bringing build to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-kramdown-1.9.0-1.el7 (FEDORA-EPEL-2016-ef426fdfa5)
Fast, pure-Ruby Markdown-superset converter
--------------------------------------------------------------------------------
Update Information:
Bringing package to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-liquid-3.0.1-2.el7 (FEDORA-EPEL-2016-8bd448e93f)
A secure, non-evaling end user template engine with aesthetic markup
--------------------------------------------------------------------------------
Update Information:
Bringing package to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-maruku-0.7.2-1.el7 (FEDORA-EPEL-2016-b21eee14a7)
Maruku is a Markdown-superset interpreter written in Ruby
--------------------------------------------------------------------------------
Update Information:
Bring package to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-redis-3.2.1-2.el7 (FEDORA-EPEL-2016-04eefacfc2)
A Ruby client library for Redis
--------------------------------------------------------------------------------
Update Information:
Importing build to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-ref-1.0.5-2.el7 (FEDORA-EPEL-2016-bc912e844c)
Library that implements weak, soft, and strong references in Ruby
--------------------------------------------------------------------------------
Update Information:
Bringing package to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-sass-3.4.19-1.el7 (FEDORA-EPEL-2016-3bf2520549)
A powerful but elegant CSS compiler that makes CSS fun again
--------------------------------------------------------------------------------
Update Information:
Bringing package to EPEL7
--------------------------------------------------------------------------------
================================================================================
salt-2015.5.8-1.el7 (FEDORA-EPEL-2016-039bf0137a)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 2015.5.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1212790 - CVE-2015-1839 CVE-2015-1838 salt: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1212790
[ 2 ] Bug #1273070 - CVE-2015-6941 salt: win_useradd module and salt-cloud display
passwords in debug log [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1273070
[ 3 ] Bug #1273071 - CVE-2015-6941 salt-cloud: salt: win_useradd module and salt-cloud
display passwords in debug log [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1273071
[ 4 ] Bug #1289111 - CVE-2015-8034 salt: Information leak from state.sls cache data
stored as world-readable [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1289111
[ 5 ] Bug #1295395 - CVE-2014-9759 mantis: crypto_master_salt sensitive config was
disclosed via SOAP API [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=1295395
[ 6 ] Bug #1257156 - salt: git module leaks authentication details into log [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1257156
--------------------------------------------------------------------------------
================================================================================
unar-1.8.1-10.el7 (FEDORA-EPEL-2016-b8cfc570ef)
Multi-format extractor
--------------------------------------------------------------------------------
Update Information:
The command-line utilities lsar and unar are capable of listing and extracting
files respectively in several formats including RARv3. unar can serve as a free
and open source replacement of unrar.
--------------------------------------------------------------------------------
================================================================================
yubikey-personalization-gui-3.1.24-1.el7 (FEDORA-EPEL-2016-aac9483a20)
GUI for Yubikey personalization
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.24 ---- yubikey-personalization-gui-3.1.23-2.el7 - Update to
3.1.23
--------------------------------------------------------------------------------