The following Fedora EPEL 7 Security updates need testing:
Age URL
68
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
63
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af
pass-1.7.2-1.el7
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d2e0971e9b
uwsgi-2.0.17.1-1.el7
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5346e2123a
dpkg-1.18.25-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7b6fa936b1
knot-resolver-2.4.1-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-38987c542e
cgit-1.1-11.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aec074825a
thunderbird-enigmail-2.0.8-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0be0127779
libgit2-0.26.6-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-33f460bd9c
moodle-3.1.13-2.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dce803ff0d
lighttpd-1.4.50-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-69993b3f45
sleuthkit-4.6.2-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-6f182ddbf7
python34-3.4.9-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
composer-1.7.2-1.el7
distribution-gpg-keys-1.22-1.el7
globus-gridftp-server-12.9-1.el7
globus-gridftp-server-control-7.0-1.el7
globus-gsi-sysconfig-8.1-3.el7
mock-1.4.13-1.el7
mock-core-configs-29.2-1.el7
openarc-1.0.0-0.1.Beta0.el7
opensmtpd-6.0.3p1-5.el7
php-composer-xdebug-handler-1.2.0-1.el7
php-horde-Horde-Core-2.31.5-1.el7
php-swiftmailer-5.4.12-1.el7
python-distroinfo-0.1.1-1.el7
Details about builds:
================================================================================
composer-1.7.2-1.el7 (FEDORA-EPEL-2018-eb41844d78)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.7.2** 2018-08-16 * Fixed reporting of authentication/rate
limiting issues for GitHub API access * Fixed `create-project` not checking
the checking the latest commit out when a cache was already present * Fixed
reporting of errors when `global` command can not switch the working directory
* Fixed PHP 5.3 JSON encoding issues with complex unicode character sequences
* Updated to latest ca-bundle and xdebug-handler projects, see related
changelogs ---- **Version 1.7.1** 2018-08-07 * Fixed issue autoloading
plugins in require-dev in some conditions * Fixed handling of SSL to
repo.packagist.org on very old PHP versions ---- **Version 1.7.0** 2018-08-03
* Added the overridden platform config's PHP version in the `diagnose` command
output * Fixed --no-plugins not being respected in a few commands * Fixed
1.7.0-RC regression in output showing <warn> instead of proper colors * Fixed
1.7.0-RC regression in output missing "Loading from cache" output on package
install ---- **Version 1.7.0-RC** 2018-07-24 * Changed default repository
URL from
packagist.org to
repo.packagist.org, this might affect people with
strict firewall rules * Changed output from Updating to Downgrading when
performing package downgrades, this might affect anything parsing output *
Several minor performance improvements * Added basic authentication support
for mercurial repos * Added explicit `i` and `u` aliases for the `install` and
`update` commands * Added support for `show` command to output json format
with --tree * Added support for {glob,braces} support in the path repository's
path argument * Added support in `status` command for showing diffs in vendor
dir even for packages installed as dist/zip archives * Added `--remove-vcs`
flag to `create-project` command to avoid prompting for keeping VCS files *
Added `--no-secure-http` flag to `create-project` command to bypass https (use
at your own risk) * Added `pre-command-run` event that lets plugins modify
arguments * Added RemoteFilesystem::getRemoteContents extension point *
Fixed setting scripts via `config` command
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 17 2018 Remi Collet <remi(a)remirepo.net> - 1.7.2-1
- update to 1.7.2
- drop dependency on seld/cli-prompt
- add dependency on composer/xdebug-handler
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.22-1.el7 (FEDORA-EPEL-2018-68b5e45991)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
## Features: - Starting with mock-core-configs version 29.1 the gpg keys for
rawhide are checked now. - There is a new config option `print_main_output`,
which allows you to override default behavior: # By default, mock only
prints the build log to stderr if it is a tty; you can # force it on here
(for CI builds where there is no tty, for example) by # setting this to
True, or force it off by setting it to False. #
config_opts['print_main_output'] = None - Following new environment variables
are passed to mock from user environment: `http_proxy`, `ftp_proxy`,
`https_proxy`, `no_proxy`. - bash completion has been reworked and is now much
simple and hopefully better ## Bugfixes: - Mockchain will again stop after the
first failure if -c or --recurse is not used. - Commands started by mock will
be using `C.UTF-8` locale instead of `en_US.UTF-8`, which does not need to be
available. - There is new default for `nspawn_args`:
`config_opts['nspawn_args'] = ['--capability=cap_ipc_lock']`. This will
enable
cap_ipc_lock in nspawn container, which will allow to use `mlock()`
[
RHBZ#1580435](https://bugzilla.redhat.com/show_bug.cgi?id=1580435). - Do not
get spec from the command line when using scm [
GH#203](https://github.com/rpm-
software-management/mock/issues/203) - use host's resolv.conf when --enable-
network is set on cml
[
RHBZ#1593212](https://bugzilla.redhat.com/show_bug.cgi?id=1593212)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 12 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.22-1
- update copr keys
- add fedora 30
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593212 - --enable-network got broken by commit disabling host_resolv
https://bugzilla.redhat.com/show_bug.cgi?id=1593212
[ 2 ] Bug #1580435 - rubygem-mongo: "Inappropriate ioctl for device" for only
mock new chroot
https://bugzilla.redhat.com/show_bug.cgi?id=1580435
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-12.9-1.el7 (FEDORA-EPEL-2018-9f75c91294)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-gsi-sysconfig-8.1-3 * Package /etc/grid-security/certificates globus-
gridftp-server-12.9-1 * GT6 update: Add support for x.abspath globus-gridftp-
server-control-7.0-1 * GT6 update: Fix initscript status return codes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 12.9-1
- GT6 update: Fix initscript status return codes
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-control-7.0-1.el7 (FEDORA-EPEL-2018-9f75c91294)
Globus Toolkit - Globus GridFTP Server Library
--------------------------------------------------------------------------------
Update Information:
globus-gsi-sysconfig-8.1-3 * Package /etc/grid-security/certificates globus-
gridftp-server-12.9-1 * GT6 update: Add support for x.abspath globus-gridftp-
server-control-7.0-1 * GT6 update: Fix initscript status return codes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 7.0-1
- GT6 update: Add support for x.abspath
--------------------------------------------------------------------------------
================================================================================
globus-gsi-sysconfig-8.1-3.el7 (FEDORA-EPEL-2018-9f75c91294)
Globus Toolkit - Globus GSI System Config Library
--------------------------------------------------------------------------------
Update Information:
globus-gsi-sysconfig-8.1-3 * Package /etc/grid-security/certificates globus-
gridftp-server-12.9-1 * GT6 update: Add support for x.abspath globus-gridftp-
server-control-7.0-1 * GT6 update: Fix initscript status return codes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 16 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 8.1-3
- Package /etc/grid-security/certificates
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mock-1.4.13-1.el7 (FEDORA-EPEL-2018-68b5e45991)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
## Features: - Starting with mock-core-configs version 29.1 the gpg keys for
rawhide are checked now. - There is a new config option `print_main_output`,
which allows you to override default behavior: # By default, mock only
prints the build log to stderr if it is a tty; you can # force it on here
(for CI builds where there is no tty, for example) by # setting this to
True, or force it off by setting it to False. #
config_opts['print_main_output'] = None - Following new environment variables
are passed to mock from user environment: `http_proxy`, `ftp_proxy`,
`https_proxy`, `no_proxy`. - bash completion has been reworked and is now much
simple and hopefully better ## Bugfixes: - Mockchain will again stop after the
first failure if -c or --recurse is not used. - Commands started by mock will
be using `C.UTF-8` locale instead of `en_US.UTF-8`, which does not need to be
available. - There is new default for `nspawn_args`:
`config_opts['nspawn_args'] = ['--capability=cap_ipc_lock']`. This will
enable
cap_ipc_lock in nspawn container, which will allow to use `mlock()`
[
RHBZ#1580435](https://bugzilla.redhat.com/show_bug.cgi?id=1580435). - Do not
get spec from the command line when using scm [
GH#203](https://github.com/rpm-
software-management/mock/issues/203) - use host's resolv.conf when --enable-
network is set on cml
[
RHBZ#1593212](https://bugzilla.redhat.com/show_bug.cgi?id=1593212)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.4.13-1
- fix python_sitelib macro
* Mon Aug 13 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.4.12-1
- Don't try to use a spec we've already cleaned up (otaylor(a)fishsoup.net)
- only set print_main_output when not set in configs
(chuck.wilson+github(a)gmail.com)
- Try to get the proxy from environment (brunovern.a(a)gmail.com)
- stop after first failure if -c or --recurse is not used
- fallback to C.UTF-8 locale (tomek(a)pipebreaker.pl)
- completion: improve --copy(in|out), --cwd, --macro-file, --rootdir, and
--sources (tmz(a)pobox.com)
- do not get spec from command line when using scm [GH#203]
- enable cap_ipc_lock in nspawn container [RHBZ#1580435]
- use host's resolv.conf when --enable-network is set on cml [RHBZ#1593212]
(jskarvad(a)redhat.com)
- add --forcearch to bash_completion
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593212 - --enable-network got broken by commit disabling host_resolv
https://bugzilla.redhat.com/show_bug.cgi?id=1593212
[ 2 ] Bug #1580435 - rubygem-mongo: "Inappropriate ioctl for device" for only
mock new chroot
https://bugzilla.redhat.com/show_bug.cgi?id=1580435
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-29.2-1.el7 (FEDORA-EPEL-2018-68b5e45991)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
## Features: - Starting with mock-core-configs version 29.1 the gpg keys for
rawhide are checked now. - There is a new config option `print_main_output`,
which allows you to override default behavior: # By default, mock only
prints the build log to stderr if it is a tty; you can # force it on here
(for CI builds where there is no tty, for example) by # setting this to
True, or force it off by setting it to False. #
config_opts['print_main_output'] = None - Following new environment variables
are passed to mock from user environment: `http_proxy`, `ftp_proxy`,
`https_proxy`, `no_proxy`. - bash completion has been reworked and is now much
simple and hopefully better ## Bugfixes: - Mockchain will again stop after the
first failure if -c or --recurse is not used. - Commands started by mock will
be using `C.UTF-8` locale instead of `en_US.UTF-8`, which does not need to be
available. - There is new default for `nspawn_args`:
`config_opts['nspawn_args'] = ['--capability=cap_ipc_lock']`. This will
enable
cap_ipc_lock in nspawn container, which will allow to use `mlock()`
[
RHBZ#1580435](https://bugzilla.redhat.com/show_bug.cgi?id=1580435). - Do not
get spec from the command line when using scm [
GH#203](https://github.com/rpm-
software-management/mock/issues/203) - use host's resolv.conf when --enable-
network is set on cml
[
RHBZ#1593212](https://bugzilla.redhat.com/show_bug.cgi?id=1593212)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 16 2018 Miroslav Such�� <msuchy(a)redhat.com> 29.2-1
- add gpg keys for release rawhide-1 (msuchy(a)redhat.com)
* Mon Aug 13 2018 Miroslav Such�� <msuchy(a)redhat.com> 29.1-1
- add fedora 29 configs and change rawhide to F30
- defattr is not needed since rpm 4.2
- Replace armv5tl with aarch64 for Mageia Cauldron (ngompa13(a)gmail.com)
- check gpg keys for rawhide
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593212 - --enable-network got broken by commit disabling host_resolv
https://bugzilla.redhat.com/show_bug.cgi?id=1593212
[ 2 ] Bug #1580435 - rubygem-mongo: "Inappropriate ioctl for device" for only
mock new chroot
https://bugzilla.redhat.com/show_bug.cgi?id=1580435
--------------------------------------------------------------------------------
================================================================================
openarc-1.0.0-0.1.Beta0.el7 (FEDORA-EPEL-2018-81bb24fe00)
An open source library and milter for providing ARC service
--------------------------------------------------------------------------------
Update Information:
New package. ARC is a technology proposal, put forward by a consortium of
organizations, intended to allow a chain of message handlers (typically email
operators) to confirm handling by trusted upstream handlers in an attempt to
confirm the valid use of certain identifiers in the message.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1615162 - Review Request: openarc - An open source library and milter for
providing ARC service
https://bugzilla.redhat.com/show_bug.cgi?id=1615162
--------------------------------------------------------------------------------
================================================================================
opensmtpd-6.0.3p1-5.el7 (FEDORA-EPEL-2018-825313111f)
Free implementation of the server-side SMTP protocol as defined by RFC 5321
--------------------------------------------------------------------------------
Update Information:
opensmtpd-6.0.3p1-5 --- - Fixed initscript and service files - Switched from
libdb4 to libdb where possible
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 16 2018 Denis Fateyev <denis(a)fateyev.com> - 6.0.3p1-5
- Fixed initscript and service files
- Switched from libdb4 to libdb where possible
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.3p1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri May 4 2018 Denis Fateyev <denis(a)fateyev.com> - 6.0.3p1-3
- Rebuild to fix libevent version bump
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.3p1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576033 - Systemd unit file incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1576033
--------------------------------------------------------------------------------
================================================================================
php-composer-xdebug-handler-1.2.0-1.el7 (FEDORA-EPEL-2018-dd78eb3d65)
Restarts a process without xdebug
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.0** - 2018-08-16 * Added: debug information using
`XDEBUG_HANDLER_DEBUG`. * Added: fluent interface for setters. * Added:
`PhpConfig` helper class for calling PHP sub-processes. * Added: `PHPRC`
original value to restart stettings, for use in a restarted process. *
Changed: internal procedure to disable ini-scanning, using `-n` command-line
option. * Fixed: replaced `escapeshellarg` usage to avoid locale problems. *
Fixed: improved color-option handling to respect double-dash delimiter. *
Fixed: color-option handling regression from main script changes. * Fixed:
improved handling when checking main script. * Fixed: handling for standard
input, that never actually did anything. * Fixed: fatal error when ctype
extension is not available.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 17 2018 Remi Collet <remi(a)remirepo.net> - 1.2.0-1
- update to 1.2.0
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.31.5-1.el7 (FEDORA-EPEL-2018-0f3ccbf158)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.31.5** * [mjr] Work around buggy EAS clients that send badly
formed HTML in SMARTREPLY (Bug #14841). ---- **Horde_Core 2.31.4** * [mjr]
Fix returning EAS GAL search results (Bug #14843). * [jan] Avoid fatal error if
an ActiveSync message has empty categories.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 16 2018 Remi Collet <remi(a)remirepo.net> - 2.31.5-1
- update to 2.31.5
--------------------------------------------------------------------------------
================================================================================
php-swiftmailer-5.4.12-1.el7 (FEDORA-EPEL-2018-cde3ef66bf)
Free Feature-rich PHP Mailer
--------------------------------------------------------------------------------
Update Information:
**Version 5.4.12** (2018-07-31) * fixed typo ---- **Version 5.4.11**
(2018-07-31) * fixed startTLS support for PHP 5.6- ---- **Version 5.4.10**
(2018-07-27) * fixed startTLS only allowed tls1.0, now allowed: tls1.0,
tls1.1, tls1.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 17 2018 Remi Collet <remi(a)remirepo.net> - 5.4.12-1
- update to 5.4.12
--------------------------------------------------------------------------------
================================================================================
python-distroinfo-0.1.1-1.el7 (FEDORA-EPEL-2018-03ddf06327)
Parsing and querying distribution metadata stored in text/YAML files
--------------------------------------------------------------------------------
Update Information:
- Enable import of remote info files. - Enable packages and releases
inheritance.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2018 Jakub Ru��i��ka <jruzicka(a)redhat.com> 0.1.1-1
- Enable import of remote info files.
- Enable packages and releases inheritance.
--------------------------------------------------------------------------------