The following Fedora EPEL 7 Security updates need testing:
Age URL
766
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
528
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
231
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3
chicken-4.11.0-3.el7
111
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-05ac8b1dc4
php-onelogin-php-saml-2.10.5-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e9e451db03
chromium-57.0.2987.133-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ae79d206b
ReviewBoard-2.5.10-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d9e3bfe77d
php-horde-Horde-Crypt-2.7.6-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7889b3b509
libupnp-1.6.21-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-45845d256f
python-django-1.6.11.6-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99c7c2f382
xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-5.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b9db4ff3ec
proftpd-1.3.5e-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5e2d792c06
php-pear-CAS-1.3.5-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3972e1c525
ansible-2.3.0.0-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.3.0.0-1.el7
dist-git-1.0-1.el7
fedmsg-0.18.3-1.el7
httpd-itk-2.4.7.04-2.el7
kicad-4.0.6-1.el7.2
mate-panel-1.16.2-1.el7
mozilla-https-everywhere-5.2.14-1.el7
php-myclabs-deep-copy-1.6.1-1.el7
python-pygit2-0.24.2-1.el7
rsync-bpc-3.0.9.6-1.el7
testssl-2.8-1.el7
Details about builds:
================================================================================
ansible-2.3.0.0-1.el7 (FEDORA-EPEL-2017-3972e1c525)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Many bugfixes and improvements. See
https://github.com/ansible/ansible/blob/stable-2.3/CHANGELOG.md for full list of
changes. rst and html docs have been split out into a ansible-docs subpackage.
Includes fix for CVE-2017-7466 ---- Update to upstream 2.2.2.0 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441357 - CVE-2017-7466 ansible: Arbitrary code execution on control node
(incomplete fix for CVE-2016-9587) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1441357
[ 2 ] Bug #1436461 - ansible-2.2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1436461
--------------------------------------------------------------------------------
================================================================================
dist-git-1.0-1.el7 (FEDORA-EPEL-2017-f8b7204cfb)
Package source version control system
--------------------------------------------------------------------------------
Update Information:
- Major version bump release - Gitolite access control dropped, just filysystem
permission are used now - Pkgdb intergation scripts dropped but they can be
plugged-in quite easily - Default storage path of Git repositories is now
/var/lib/dist-git/git (before there was one more level rpms and repositories
symlink to it) - The storage paths for lookaside cache and Git repositories are
now configurable in dist-git configuration file - SElinux policy updates for
git-daemon and git-smart-httpd to work - slight upgrades in remaining scripts
setup_git_package, mkbranch, and mkbranch_branching (mainly Git author is also
configurable in the config file)
--------------------------------------------------------------------------------
================================================================================
fedmsg-0.18.3-1.el7 (FEDORA-EPEL-2017-30b7930176)
Tools for Fedora Infrastructure real-time messaging
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
================================================================================
httpd-itk-2.4.7.04-2.el7 (FEDORA-EPEL-2017-4f8e561d50)
MPM Itk for Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
Add BR libcap-devel to compile with Linux capabilities support (fix bz#1432881).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432881 - httpd-itk not compiled with Linux capabilities support
https://bugzilla.redhat.com/show_bug.cgi?id=1432881
--------------------------------------------------------------------------------
================================================================================
kicad-4.0.6-1.el7.2 (FEDORA-EPEL-2017-d8feb2d6b4)
EDA software suite for creation of schematic diagrams and PCBs
--------------------------------------------------------------------------------
Update Information:
Update to version 4.0.6.
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.16.2-1.el7 (FEDORA-EPEL-2017-e49b72b159)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
-update to 1.16.2
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.2.14-1.el7 (FEDORA-EPEL-2017-6901d9d3d6)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
More bugfixes. Upstream isn't putting the specific bugfixes in the changelogs
anymore. Did you know that you're supposed to turn the car off when you go into
a restaurant? I hear it helps prevent carjacking.
--------------------------------------------------------------------------------
================================================================================
php-myclabs-deep-copy-1.6.1-1.el7 (FEDORA-EPEL-2017-2b74d469b0)
Create deep copies (clones) of your objects
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.1** * Fix #61 #64 Un-deprecated PropertyTypeMatcher
--------------------------------------------------------------------------------
================================================================================
python-pygit2-0.24.2-1.el7 (FEDORA-EPEL-2017-d00d781835)
Python 2.x bindings for libgit2
--------------------------------------------------------------------------------
Update Information:
Update to 0.24.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426035 - UserWarning: 'git_checkout_notify_t'
https://bugzilla.redhat.com/show_bug.cgi?id=1426035
--------------------------------------------------------------------------------
================================================================================
rsync-bpc-3.0.9.6-1.el7 (FEDORA-EPEL-2017-5a198bef1d)
A customized version of rsync that is used as part of BackupPC
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
================================================================================
testssl-2.8-1.el7 (FEDORA-EPEL-2017-105f27476e)
Testing TLS/SSL encryption
--------------------------------------------------------------------------------
Update Information:
Update to 2.8
--------------------------------------------------------------------------------