The following Fedora EPEL 7 Security updates need testing:
Age URL
420
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
182
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
48
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-56e02a47c7
ansible-2.0.2.0-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d398cc4c6c
roundcubemail-1.1.5-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-017aadcc97
php-getid3-1.9.12-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-aad55a428b
w3m-0.5.3-20.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c731bc5ec0
cacti-0.8.8g-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-af216d3233
ansible1.9-1.9.6-2.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2a74e47381
pgpdump-0.30-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4f1d69369e
openvas-cli-1.4.4-1.el7 openvas-gsa-6.0.10-3.el7 openvas-libraries-8.0.7-2.el7
openvas-manager-6.0.8-2.el7 openvas-scanner-5.0.5-3.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cd0af81454
botan-1.10.13-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
arp-scan-1.8.4-7.el7
botan-1.10.13-1.el7
libisofs1-1.4.2-3.el7
libraqm-0.1.1-1.el7
php-ZendFramework-1.12.18-1.el7
qt5-qtbase-5.6.0-13.el7
tinc-1.0.28-1.el7
yad-0.36.2-1.el7
Details about builds:
================================================================================
arp-scan-1.8.4-7.el7 (FEDORA-EPEL-2016-e1e1d439e4)
Scanning and fingerprinting tool
--------------------------------------------------------------------------------
Update Information:
Porting to EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292219 - epel7 tuxcut Requires unavailable arp-scan
https://bugzilla.redhat.com/show_bug.cgi?id=1292219
[ 2 ] Bug #1145290 - Please build an EPEL7 build of arp-scan
https://bugzilla.redhat.com/show_bug.cgi?id=1145290
--------------------------------------------------------------------------------
================================================================================
botan-1.10.13-1.el7 (FEDORA-EPEL-2016-cd0af81454)
Crypto library written in C++
--------------------------------------------------------------------------------
Update Information:
From the upstream release notes: Botan 1.10.13 has been released backporting
some side channel protections for ECDSA signatures (CVE-2016-2849) and PKCS #1
RSA decryption (CVE-2015-7827).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1330875 - CVE-2016-2849 CVE-2016-2850 botan: two issues fixed in 1.11.29
https://bugzilla.redhat.com/show_bug.cgi?id=1330875
[ 2 ] Bug #1311989 - CVE-2015-7827 botan: PKCS #1 decoding not in constant time
https://bugzilla.redhat.com/show_bug.cgi?id=1311989
--------------------------------------------------------------------------------
================================================================================
libisofs1-1.4.2-3.el7 (FEDORA-EPEL-2016-872f0b825c)
Library to create ISO 9660 disk images
--------------------------------------------------------------------------------
Update Information:
Libisofs is a library to create an ISO-9660 filesystem and supports extensions
like RockRidge or Joliet. It is also a full featured ISO-9660 editor, allowing
you to modify an ISO image or multisession disc, including file addition or
removal, change of file names and attributes etc. It supports the extension AAIP
which allows to store ACLs and xattr in ISO-9660 filesystems as well. As it is
linked with zlib, it supports zisofs compression, too.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #744416 - Review Request: libisofs1 - Library to create ISO 9660 disk images
https://bugzilla.redhat.com/show_bug.cgi?id=744416
--------------------------------------------------------------------------------
================================================================================
libraqm-0.1.1-1.el7 (FEDORA-EPEL-2016-31501b1f76)
Complex Textlayout Library
--------------------------------------------------------------------------------
Update Information:
Raqm is a small library that encapsulates the logic for complex text layout
and provide a convenient API. It currently provides bidirectional text support
(using FriBiDi), shaping (using HarfBuzz), and proper script itemization. As a
result, Raqm can support most writing systems covered by Unicode. The
documentation can be accessed on the web at:
http://host-
oman.github.io/libraqm/ Raqm (Arabic: ����������) is writing, also number or digit
and the Arabic word for digital (����������������) shares the same root, so it is a play
on ���digital writing���.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329807 - Review Request: libraqm - Complex Textlayout Library
https://bugzilla.redhat.com/show_bug.cgi?id=1329807
--------------------------------------------------------------------------------
================================================================================
php-ZendFramework-1.12.18-1.el7 (FEDORA-EPEL-2016-b5e1f4e4b7)
Leading open-source PHP framework
--------------------------------------------------------------------------------
Update Information:
Zend Framework 1.12.18 (2016-04-13) =================================== *
Please Remove YouTube Zend GData Page * PHP7 debug_backtrace BC break *
Solve problem with subqueries in SELECT block * List-separator attribute is
not being unset for MultiCheckboxes due to a typo. * Wrong regex pattern in
Zend_Validate_Iban class * VERSION constant incorrect for 1.12.17 release tag.
* ZF2015-09: The Zend_Crypt_MathTest should run on PHP 5.2/5.3 * Update
Vagrantfile to use Rasmus' php7 box * ZF2015-08 breaks binary data *
zf1-extra is missing in release-1.12.17 * Fix for 655 issue * Wrong PHPDoc
in Zend_Mail * Non-existing method getRequired() in Zend_Form-Elements docs
* Zend_Form_Element_Button::isChecked has wrong documentation Zend Framework
1.12.17 (2015-11-23) =================================== * Fixes null byte
tests in `Zend_Db_Adapter_Pdo` * Updates the TLD list for
`Zend_Validate_Hostname` to version 2015102801.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328032 - ZF2015-08 breaks binary data
https://bugzilla.redhat.com/show_bug.cgi?id=1328032
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.6.0-13.el7 (FEDORA-EPEL-2016-d542a893b1)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
-devel: Provides: qt5-qtbase-private-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1233829 - Qt5: private headers/interfaces
https://bugzilla.redhat.com/show_bug.cgi?id=1233829
--------------------------------------------------------------------------------
================================================================================
tinc-1.0.28-1.el7 (FEDORA-EPEL-2016-74c0c91ef9)
A virtual private network daemon
--------------------------------------------------------------------------------
Update Information:
Use upstream service units
--------------------------------------------------------------------------------
================================================================================
yad-0.36.2-1.el7 (FEDORA-EPEL-2016-973b6e33bf)
Display graphical dialogs from shell scripts or command line
--------------------------------------------------------------------------------
Update Information:
update to 0.36.2 ---- Yad update to 0.36.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1331995 - yad-0.36.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1331995
[ 2 ] Bug #1330795 - yad-0.36.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1330795
--------------------------------------------------------------------------------