The following Fedora EPEL 7 Security updates need testing:
Age URL
239
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
135
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813
chicken-4.9.0.1-4.el7
43
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7
31
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-a18f5f924d
ganglia-3.7.2-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060
mediawiki123-1.23.11-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b3471305ee
php-horde-horde-5.2.8-1.el7 php-horde-imp-6.2.11-1.el7 php-horde-ingo-3.2.7-1.el7
php-horde-passwd-5.0.4-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-02bd65205b
drupal7-7.41-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d
php-ZendFramework-1.12.16-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-3cdbf28493
lxc-1.0.7-4.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19
perl-HTML-Scrubber-0.15-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b
qemu-2.0.0-1.el7.6
The following builds have been pushed to Fedora EPEL 7 updates-testing
Zim-0.65-1.el7
cmake-fedora-2.4.3-1.el7
composer-1.0.0-0.14.20151030git5a5088e.el7
libntirpc-1.3.1-1.el7
qemu-2.0.0-1.el7.6
socket_wrapper-1.1.5-1.el7
Details about builds:
================================================================================
Zim-0.65-1.el7 (FEDORA-EPEL-2015-500569dda9)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
Zim-0.65-1.el7 - Update to 0.65 ---- Zim-0.64-1.el7 - Update to 0.64
(BZ#1275861)
--------------------------------------------------------------------------------
================================================================================
cmake-fedora-2.4.3-1.el7 (FEDORA-EPEL-2015-4ddc46b06c)
CMake helper modules for fedora developers
--------------------------------------------------------------------------------
Update Information:
- Enhancement: * cmake-fedora-pkgdb: New script: pkgdb helper script. *
cmake-fedora-zanata: New script: zanata helper script. - Fixed: * Resolves:
RHBZ 1194797: find -printf is not portable - Changed: * Support zanata-server
and zanata-client 3.7. * Add additional path to cmake-fedora.conf * cmake-
fedora.conf: Remove bodhi branch, use whatever cmake-fedora-pkgdb found.
* ManageFile: New function: MANAGE_FILE_COMMON_DIR * ManageString: Macro to
function: STRING_UNQUOTE * koji-build-scratch: Use fedpkg backend instead *
cmake-fedora-fedpkg: Fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1194797 - find -printf is not portable
https://bugzilla.redhat.com/show_bug.cgi?id=1194797
--------------------------------------------------------------------------------
================================================================================
composer-1.0.0-0.14.20151030git5a5088e.el7 (FEDORA-EPEL-2015-589034bd4d)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
Monthly refresh
--------------------------------------------------------------------------------
================================================================================
libntirpc-1.3.1-1.el7 (FEDORA-EPEL-2015-7a89c19544)
New Transport Independent RPC Library
--------------------------------------------------------------------------------
Update Information:
libntirpc 1.3.1 GA
--------------------------------------------------------------------------------
================================================================================
qemu-2.0.0-1.el7.6 (FEDORA-EPEL-2015-22f9be240b)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
qemu-2.0.0-1.el7.6 - CVE-2015-5154: ide: Check array bounds before writing to
io_buffer (bz #1247143) - CVE-2015-3214: i8254: fix out-of-bounds memory access
in pit_ioport_read() (bz #1243729) - CVE-2015-3209: pcnet: force the buffer
access to be in bounds during tx (bz #1230538)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1230538 - CVE-2015-3209 qemu: pcnet: multi-tmd buffer overflow in the tx path
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1230538
[ 2 ] Bug #1243729 - CVE-2015-3214 qemu: qemu/kvm: i8254: out-of-bounds memory access in
pit_ioport_read function [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1243729
[ 3 ] Bug #1247143 - CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer
memory access [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1247143
--------------------------------------------------------------------------------
================================================================================
socket_wrapper-1.1.5-1.el7 (FEDORA-EPEL-2015-ec6321e5a2)
A library passing all socket communications through Unix sockets
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.5
--------------------------------------------------------------------------------