epel-devel November 2015

epel-devel@lists.fedoraproject.org

31 participants
94 discussions

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 11 Nov '15

11 Nov '15

The following Fedora EPEL 5 Security updates need testing: Age URL 753 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893 libguestfs-1.20.12-1.el5 517 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5 367 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849 sblim-sfcb-1.3.8-2.el5 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516 mcollective-2.8.4-1.el5 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1cb7f30ae9 perl-HTML-Scrubber-0.15-1.el5.1 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-10d919912b git-1.8.2.1-2.el5 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4a0a62b289 drupal7-jquery_update-2.7-1.el5 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-38c5cc1eab libsndfile-1.0.17-7.el5 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-9e8d76ee45 putty-0.63-5.el5 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-49d2e8a4cb php53-mapi-7.1.14-1.el5 zarafa-7.1.14-1.el5 The following builds have been pushed to Fedora EPEL 5 updates-testing clustershell-1.7-1.el5 perl-Time-ParseDate-2015.103-1.el5 php53-mapi-7.1.14-1.el5 stompclt-1.3-3.el5 zarafa-7.1.14-1.el5 Details about builds: ================================================================================ clustershell-1.7-1.el5 (FEDORA-EPEL-2015-4df8e4095b) Python framework for efficient cluster administration -------------------------------------------------------------------------------- Update Information: clustershell-1.7-1.el5 - update to 1.7 -------------------------------------------------------------------------------- ================================================================================ perl-Time-ParseDate-2015.103-1.el5 (FEDORA-EPEL-2015-72443054b3) Perl modules for parsing dates and times -------------------------------------------------------------------------------- Update Information: 2015.1030 2015-10-30 * Not requirement for Time::Piece for tests. 2015.0925 2015-09-25 * https://rt.cpan.org/Ticket/Display.html?id=96453 * fix epoch second 0 with timezone. 2015.0925 2015-09-25 * apply patch from bug https://rt.cpan.org/Ticket/Display.html?id=90367 * use Time::Piece in place of POSIX tzset for better compatibility with Windows. 2015.0925 2015-09-25 * apply patch from bug https://rt.cpan.org/Ticket/Display.html?id=96031 * manpage typo patch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279907 - perl-Time-ParseDate-2015.103 is available https://bugzilla.redhat.com/show_bug.cgi?id=1279907 -------------------------------------------------------------------------------- ================================================================================ php53-mapi-7.1.14-1.el5 (FEDORA-EPEL-2015-49d2e8a4cb) The PHP MAPI extension by Zarafa -------------------------------------------------------------------------------- Update Information: Zarafa Collaboration Platform 7.1.14 final [51822] ================================================== - ZCP-13581: update fck- editor (for webaccess) to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local privilege escalation - ZCP-13087: Meeting requests are not being sent with Thunderbird Lightning due to new functionality - ZCP-13608: Attachments are missing in the Sent items folder when using a cache profile - ZCP-13243: ser_safe_mode falsely reports that it would delete users -------------------------------------------------------------------------------- References: [ 1 ] Bug #1263006 - CVE-2015-6566 zarafa: Potential local privilege escalation in zarafa-autorespond https://bugzilla.redhat.com/show_bug.cgi?id=1263006 -------------------------------------------------------------------------------- ================================================================================ stompclt-1.3-3.el5 (FEDORA-EPEL-2015-1fdc06f78d) Versatile STOMP client -------------------------------------------------------------------------------- Update Information: stompclt-1.3-3.el5 - Added missing package: EPEL5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1209748 - Upgrade to new upstream version https://bugzilla.redhat.com/show_bug.cgi?id=1209748 -------------------------------------------------------------------------------- ================================================================================ zarafa-7.1.14-1.el5 (FEDORA-EPEL-2015-49d2e8a4cb) Open Source Edition of the Zarafa Collaboration Platform -------------------------------------------------------------------------------- Update Information: Zarafa Collaboration Platform 7.1.14 final [51822] ================================================== - ZCP-13581: update fck- editor (for webaccess) to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local privilege escalation - ZCP-13087: Meeting requests are not being sent with Thunderbird Lightning due to new functionality - ZCP-13608: Attachments are missing in the Sent items folder when using a cache profile - ZCP-13243: ser_safe_mode falsely reports that it would delete users -------------------------------------------------------------------------------- References: [ 1 ] Bug #1263006 - CVE-2015-6566 zarafa: Potential local privilege escalation in zarafa-autorespond https://bugzilla.redhat.com/show_bug.cgi?id=1263006 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 11 Nov '15

11 Nov '15

The following Fedora EPEL 6 Security updates need testing: Age URL 143 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6 126 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 120 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 51 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6 51 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6 39 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36 python-pymongo-3.0.3-1.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ba19b1c7eb php-horde-horde-5.2.8-1.el6 php-horde-imp-6.2.11-1.el6 php-horde-ingo-3.2.7-1.el6 php-horde-passwd-5.0.4-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-28606b6d1d perl-HTML-Scrubber-0.15-1.el6.1 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-5d63583df0 metis-5.1.0-7.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e195439195 drupal7-jquery_update-2.7-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-967595b7c1 wildmagic5-5.13-12.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8fc6f35cc9 MUMPS-5.0.1-4.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d47ae2d16b owncloud-7.0.11-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-a7d37297d4 telegram-cli-1.3.1-7.20150730git2052f4.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-0ae4daf2d6 tubo-5.0.15-3.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b4ebe76583 putty-0.63-5.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-20cb365c26 zarafa-7.1.14-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing clustershell-1.7-1.el6 livecd-tools-13.4.9-1.el6 sec-2.7.7-3.el6 zarafa-7.1.14-1.el6 Details about builds: ================================================================================ clustershell-1.7-1.el6 (FEDORA-EPEL-2015-597f247f89) Python framework for efficient cluster administration -------------------------------------------------------------------------------- Update Information: clustershell-1.7-1.el6 - update to 1.7 - add explicit file attributes required for ghost groups file -------------------------------------------------------------------------------- ================================================================================ livecd-tools-13.4.9-1.el6 (FEDORA-EPEL-2015-b5ec93dc2b) Tools for building live CDs -------------------------------------------------------------------------------- Update Information: livecd-tools-13.4.9-1.el6 - Version 13.4.9 (bcl) - python-imgcreate: remove -f from second lokkit call (#769457) (bcl) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259864 - firewall rules in kickstart script are overwritten due to lokkit -f call in /usr/lib/python2.6/site-packages/imgcreate/kickstart.py https://bugzilla.redhat.com/show_bug.cgi?id=1259864 -------------------------------------------------------------------------------- ================================================================================ sec-2.7.7-3.el6 (FEDORA-EPEL-2015-70084b08e9) Simple Event Correlator script to filter log file entries -------------------------------------------------------------------------------- Update Information: Add an optional timeout to the init script rule stop ---- Update init script in order to send SIGTERM instead of SIGKILL for stop rule ---- While rotating logfiles do not do a full restart of the sec instance -------------------------------------------------------------------------------- ================================================================================ zarafa-7.1.14-1.el6 (FEDORA-EPEL-2015-20cb365c26) Open Source Edition of the Zarafa Collaboration Platform -------------------------------------------------------------------------------- Update Information: Zarafa Collaboration Platform 7.1.14 final [51822] ================================================== - ZCP-13581: update fck- editor (for webaccess) to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local privilege escalation - ZCP-13087: Meeting requests are not being sent with Thunderbird Lightning due to new functionality - ZCP-13608: Attachments are missing in the Sent items folder when using a cache profile - ZCP-13243: ser_safe_mode falsely reports that it would delete users -------------------------------------------------------------------------------- References: [ 1 ] Bug #1263006 - CVE-2015-6566 zarafa: Potential local privilege escalation in zarafa-autorespond https://bugzilla.redhat.com/show_bug.cgi?id=1263006 --------------------------------------------------------------------------------

1 0

Orphaned Packages in epel7 (2015-11-10)
by Till Maas 10 Nov '15

10 Nov '15

The following packages are orphaned and will be retired when they are orphaned for six weeks, unless someone adopts them. If you know for sure that the package should be retired, please do so now with a proper reason: https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life Note: If you received this mail directly you (co)maintain one of the affected packages or a package that depends on one. Please adopt the affected package or retire your depending package to avoid broken dependencies, otherwise your package will be retired when the affected package gets retired. Package (co)maintainers Status Change ========================================================================== bouncycastle orphan, stevetraylen 1 weeks ago bouncycastle-pkix orphan, java-sig, msrb 3 weeks ago electronics-menu orphan, chitlesh 4 weeks ago gfal2-plugin-xrootd orphan, aalvarez, adev 0 weeks ago passenger orphan, orion 1 weeks ago reflections orphan, gil 2 weeks ago shutter orphan 4 weeks ago supervisor orphan, arg, jlaska, kevin, nphilipp 1 weeks ago The following packages require above mentioned packages: Depending on: bouncycastle (5), status change: 2015-11-03 (1 weeks ago) bouncycastle-mail (maintained by: s4504kr) bouncycastle-mail-1.50-3.el7.noarch requires bouncycastle = 1.50-1.el7 bouncycastle-mail-1.50-3.el7.src requires bouncycastle = 1.50-1.el7 canl-java (maintained by: ellert) canl-java-2.1.1-4.el7.noarch requires mvn(org.bouncycastle:bcprov-jdk15on) = 1.50 canl-java-2.1.1-4.el7.src requires mvn(org.bouncycastle:bcprov-jdk15on) = 1.50 jglobus (maintained by: ellert) jglobus-2.1.0-3.el7.src requires mvn(org.bouncycastle:bcprov-jdk15on) = 1.50 jglobus-ssl-proxies-2.1.0-3.el7.noarch requires mvn(org.bouncycastle:bcprov-jdk15on) = 1.50 voms-api-java (maintained by: ellert) voms-api-java-3.0.5-3.el7.noarch requires mvn(eu.eu-emi.security:canl) = 2.1.1 voms-api-java-3.0.5-3.el7.src requires mvn(eu.eu-emi.security:canl) = 2.1.1 voms-clients-java (maintained by: ellert) voms-clients-java-3.0.6-3.el7.noarch requires mvn(org.italiangrid:voms-api-java) = 3.0.5 voms-clients-java-3.0.6-3.el7.src requires mvn(org.italiangrid:voms-api-java) = 3.0.5 Depending on: electronics-menu (2), status change: 2015-10-07 (4 weeks ago) kicad (maintained by: jcapik) kicad-2015.03.21-2.rev5528.el7.1.x86_64 requires electronics-menu = 1.0-12.el7 qelectrotech (maintained by: remi) qelectrotech-0.40-1.el7.x86_64 requires electronics-menu = 1.0-12.el7 Affected (co)maintainers aalvarez: gfal2-plugin-xrootd adev: gfal2-plugin-xrootd arg: supervisor chitlesh: electronics-menu ellert: bouncycastle gil: reflections java-sig: bouncycastle-pkix jcapik: electronics-menu jlaska: supervisor kevin: supervisor msrb: bouncycastle-pkix nphilipp: supervisor orion: passenger remi: electronics-menu s4504kr: bouncycastle stevetraylen: bouncycastle Orphans (8): bouncycastle bouncycastle-pkix electronics-menu gfal2-plugin-xrootd passenger reflections shutter supervisor Orphans (dependend on) (2): bouncycastle electronics-menu Orphans (epel7) for at least 6 weeks (dependend on) (0): Orphans (epel7)(not depended on) (6): bouncycastle-pkix gfal2-plugin-xrootd passenger reflections shutter supervisor Orphans (epel7) for at least 6 weeks (not dependend on) (0): Depending packages (epel7) (7): bouncycastle-mail canl-java jglobus kicad qelectrotech voms-api-java voms-clients-java Packages depending on packages orphaned (epel7) for more than 6 weeks (0): Not found in repo (epel7) (3): passenger reflections shutter -- The script creating this output is run and developed by Fedora Release Engineering. Please report issues at its trac instance: https://fedorahosted.org/rel-eng/ The sources of this script can be found at: https://pagure.io/releng/blob/master/f/scripts/find_unblocked_orphans.py

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 10 Nov '15

10 Nov '15

The following Fedora EPEL 6 Security updates need testing: Age URL 142 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6 125 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 119 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 50 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6 50 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6 38 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36 python-pymongo-3.0.3-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ba19b1c7eb php-horde-horde-5.2.8-1.el6 php-horde-imp-6.2.11-1.el6 php-horde-ingo-3.2.7-1.el6 php-horde-passwd-5.0.4-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22dfcb9feb drupal7-7.41-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-cb0897945f lxc-1.0.7-4.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-28606b6d1d perl-HTML-Scrubber-0.15-1.el6.1 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-5d63583df0 metis-5.1.0-7.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e195439195 drupal7-jquery_update-2.7-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-967595b7c1 wildmagic5-5.13-12.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8fc6f35cc9 MUMPS-5.0.1-4.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d47ae2d16b owncloud-7.0.11-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-a7d37297d4 telegram-cli-1.3.1-7.20150730git2052f4.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-0ae4daf2d6 tubo-5.0.15-3.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b4ebe76583 putty-0.63-5.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing php-latte-2.3.7-1.el6 php-nette-neon-2.3.3-1.el6 php-nette-safe-stream-2.3.1-2.el6 php-nette-utils-2.3.6-1.el6 Details about builds: ================================================================================ php-latte-2.3.7-1.el6 (FEDORA-EPEL-2015-088e7755a4) Latte: the amazing template engine for PHP -------------------------------------------------------------------------------- Update Information: Latte is a template engine for PHP which eases your work and ensures the output is protected against vulnerabilities, such as XSS. Latte is fast: it compiles templates to plain optimized PHP code. Latte is secure: it is the first PHP engine introducing content-aware escaping. Latte speaks your language: it has intuitive syntax and helps you to build better websites easily. To use this library, you just have to add, in your project: require_once '/usr/share/php/Latte/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277407 - Review Request: php-latte - Latte: the amazing template engine for PHP https://bugzilla.redhat.com/show_bug.cgi?id=1277407 -------------------------------------------------------------------------------- ================================================================================ php-nette-neon-2.3.3-1.el6 (FEDORA-EPEL-2015-4588228af8) Nette NEON: parser and generator for Nette Object Notation -------------------------------------------------------------------------------- Update Information: Nette NEON: parser and generator for Nette Object Notation. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/Neon/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277376 - Review Request: php-nette-neon - Nette NEON: parser and generator for Nette Object Notation https://bugzilla.redhat.com/show_bug.cgi?id=1277376 -------------------------------------------------------------------------------- ================================================================================ php-nette-safe-stream-2.3.1-2.el6 (FEDORA-EPEL-2015-965b7a0aee) Nette SafeStream: Atomic Operations -------------------------------------------------------------------------------- Update Information: The Nette\Utils\SafeStram protocol for file manipulation guarantees atomicity and isolation of every file operation. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/SafeStream/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277441 - Review Request: php-nette-safe-stream - Nette SafeStream: Atomic Operations https://bugzilla.redhat.com/show_bug.cgi?id=1277441 -------------------------------------------------------------------------------- ================================================================================ php-nette-utils-2.3.6-1.el6 (FEDORA-EPEL-2015-033fc61bf0) Nette Utility Classes -------------------------------------------------------------------------------- Update Information: Nette Utility Classes. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/Utils/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277377 - Review Request: php-nette-utils - Nette Utility Classes https://bugzilla.redhat.com/show_bug.cgi?id=1277377 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 10 Nov '15

10 Nov '15

The following Fedora EPEL 7 Security updates need testing: Age URL 246 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 142 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813 chicken-4.9.0.1-4.el7 50 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7 38 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9 python-pymongo-3.0.3-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060 mediawiki123-1.23.11-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b3471305ee php-horde-horde-5.2.8-1.el7 php-horde-imp-6.2.11-1.el7 php-horde-ingo-3.2.7-1.el7 php-horde-passwd-5.0.4-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-02bd65205b drupal7-7.41-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d php-ZendFramework-1.12.16-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-3cdbf28493 lxc-1.0.7-4.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19 perl-HTML-Scrubber-0.15-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b qemu-2.0.0-1.el7.6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f5273e10c1 rabbitmq-server-3.3.5-12.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f75cdd1774 metis-5.1.0-7.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4b33ee7c84 wildmagic5-5.13-12.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6eaf22c8d MUMPS-5.0.1-4.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e1379fc854 owncloud-8.0.9-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-693544258f telegram-cli-1.3.1-7.20150730git2052f4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7b2b7d02df quassel-0.11.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8a26d71e56 pdns-3.4.7-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing php-composer-semver-1.2.0-1.el7 php-latte-2.3.7-1.el7 php-nette-neon-2.3.3-1.el7 php-nette-safe-stream-2.3.1-2.el7 php-nette-utils-2.3.6-1.el7 php-pear-DB-DataObject-1.11.5-1.el7 Details about builds: ================================================================================ php-composer-semver-1.2.0-1.el7 (FEDORA-EPEL-2015-2b9cff6c5f) Semver library that offers utilities, version constraint parsing and validation -------------------------------------------------------------------------------- Update Information: **Version 1.2.0** * Changed: allow multiple numerical identifiers in 'pre- release' version part. * Changed: add more 'v' prefix support. **Version 1.1.0** * Changed: dropped redundant test namespace. * Changed: minor adjustment in datetime parsing normalization. * Changed: ConstraintInterface relaxed, setPrettyString is not required anymore. * Changed: AbstractConstraint marked deprecated, will be removed in 2.0. * Changed: Constraint is now extensible. -------------------------------------------------------------------------------- ================================================================================ php-latte-2.3.7-1.el7 (FEDORA-EPEL-2015-14cef12ea2) Latte: the amazing template engine for PHP -------------------------------------------------------------------------------- Update Information: Latte is a template engine for PHP which eases your work and ensures the output is protected against vulnerabilities, such as XSS. Latte is fast: it compiles templates to plain optimized PHP code. Latte is secure: it is the first PHP engine introducing content-aware escaping. Latte speaks your language: it has intuitive syntax and helps you to build better websites easily. To use this library, you just have to add, in your project: require_once '/usr/share/php/Latte/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277407 - Review Request: php-latte - Latte: the amazing template engine for PHP https://bugzilla.redhat.com/show_bug.cgi?id=1277407 -------------------------------------------------------------------------------- ================================================================================ php-nette-neon-2.3.3-1.el7 (FEDORA-EPEL-2015-97289108ce) Nette NEON: parser and generator for Nette Object Notation -------------------------------------------------------------------------------- Update Information: Nette NEON: parser and generator for Nette Object Notation. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/Neon/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277376 - Review Request: php-nette-neon - Nette NEON: parser and generator for Nette Object Notation https://bugzilla.redhat.com/show_bug.cgi?id=1277376 -------------------------------------------------------------------------------- ================================================================================ php-nette-safe-stream-2.3.1-2.el7 (FEDORA-EPEL-2015-d3ee7b2be2) Nette SafeStream: Atomic Operations -------------------------------------------------------------------------------- Update Information: The Nette\Utils\SafeStram protocol for file manipulation guarantees atomicity and isolation of every file operation. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/SafeStream/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277441 - Review Request: php-nette-safe-stream - Nette SafeStream: Atomic Operations https://bugzilla.redhat.com/show_bug.cgi?id=1277441 -------------------------------------------------------------------------------- ================================================================================ php-nette-utils-2.3.6-1.el7 (FEDORA-EPEL-2015-fb614f31c4) Nette Utility Classes -------------------------------------------------------------------------------- Update Information: Nette Utility Classes. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/Utils/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277377 - Review Request: php-nette-utils - Nette Utility Classes https://bugzilla.redhat.com/show_bug.cgi?id=1277377 -------------------------------------------------------------------------------- ================================================================================ php-pear-DB-DataObject-1.11.5-1.el7 (FEDORA-EPEL-2015-583d48833e) An SQL Builder, Object Interface to Database Tables -------------------------------------------------------------------------------- Update Information: **Version 1.11.5** Minor feature and fix release. Changes * force usage of tableName - rather than direct access to __table * autoJoin: check joined tables against database structure Bugs * pear#20536 - generator spaces after dataobject variables Feature requests * pear#20540 - support empty extends_location so that no require_once is generated by Generator --------------------------------------------------------------------------------

1 0

Darktable major update
by Germano Massullo 09 Nov '15

09 Nov '15

Hi, I am one of the Darktable maintainers. Darktable 2.0 is going too be released soon. According to EPEL policies, I could not release such major release for EPEL/RHEL 7. Do you usually apply this rule strictly or sometimes you make an exception? New version of Darktable will rely on GTK3, but concerning the remaining libraries, there will not be a great change.

2 2

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 09 Nov '15

09 Nov '15

The following Fedora EPEL 7 Security updates need testing: Age URL 245 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 141 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813 chicken-4.9.0.1-4.el7 49 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7 37 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9 python-pymongo-3.0.3-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060 mediawiki123-1.23.11-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b3471305ee php-horde-horde-5.2.8-1.el7 php-horde-imp-6.2.11-1.el7 php-horde-ingo-3.2.7-1.el7 php-horde-passwd-5.0.4-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-02bd65205b drupal7-7.41-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d php-ZendFramework-1.12.16-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-3cdbf28493 lxc-1.0.7-4.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19 perl-HTML-Scrubber-0.15-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b qemu-2.0.0-1.el7.6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f5273e10c1 rabbitmq-server-3.3.5-12.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f75cdd1774 metis-5.1.0-7.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4b33ee7c84 wildmagic5-5.13-12.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6eaf22c8d MUMPS-5.0.1-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e1379fc854 owncloud-8.0.9-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-693544258f telegram-cli-1.3.1-7.20150730git2052f4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7b2b7d02df quassel-0.11.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8a26d71e56 pdns-3.4.7-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing dl-0.17-2.el7 gfal2-python-1.8.4-1.el7 gfal2-util-1.3.1-1.el7 hawkey-0.5.3-3.el7 libtorrent-0.13.6-1.el7 php-composer-installers-1.0.22-2.el7 php-nette-tokenizer-2.2.1-1.el7 python-qutepart-2.2.2-3.el7 rtorrent-0.9.6-2.el7 rubygem-jmespath-1.1.3-1.el7 srm-ifce-1.23.3-1.el7 tor-0.2.6.10-5.el7 tor-0.2.6.10-6.el7 Details about builds: ================================================================================ dl-0.17-2.el7 (FEDORA-EPEL-2015-fac12d81ed) Download Ticket Service -------------------------------------------------------------------------------- Update Information: Use conditional macros for proper policycoreutils-python dependency ---- dl 0.17 (#1197397) -------------------------------------------------------------------------------- ================================================================================ gfal2-python-1.8.4-1.el7 (FEDORA-EPEL-2015-d67f5dc01a) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: Upstream release 1.8.4 -------------------------------------------------------------------------------- ================================================================================ gfal2-util-1.3.1-1.el7 (FEDORA-EPEL-2015-e2a2dd194d) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information: Upstream release 1.3.1 -------------------------------------------------------------------------------- ================================================================================ hawkey-0.5.3-3.el7 (FEDORA-EPEL-2015-839c65c8f9) Library providing simplified C and Python API to libsolv -------------------------------------------------------------------------------- Update Information: Backport ignore_weak_deps option -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258916 - hawkey: RFE: add support for ignoring weak deps https://bugzilla.redhat.com/show_bug.cgi?id=1258916 -------------------------------------------------------------------------------- ================================================================================ libtorrent-0.13.6-1.el7 (FEDORA-EPEL-2015-0a59d9fc0e) BitTorrent library with a focus on high performance & good code -------------------------------------------------------------------------------- Update Information: Not a lot of changes in rtorrent itself: https://github.com/rakshasa/rtorrent/compare/0.9.4...0.9.6 Nor in libtorrent. Mostly changes thread names to include rtorrent: https://github.com/rakshasa/libtorrent/compare/0.13.4...0.13.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1264689 - libtorrent and rtorrent update for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1264689 -------------------------------------------------------------------------------- ================================================================================ php-composer-installers-1.0.22-2.el7 (FEDORA-EPEL-2015-0b869ef1bf) A multi-framework Composer library installer -------------------------------------------------------------------------------- Update Information: 1.0.21 to 1.0.22 diff: https://github.com/composer/installers/compare/v1.0.21...v1.0.22 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276816 - php-composer-installers-v1.0.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1276816 -------------------------------------------------------------------------------- ================================================================================ php-nette-tokenizer-2.2.1-1.el7 (FEDORA-EPEL-2015-5ad793fe45) Nette Tokenizer -------------------------------------------------------------------------------- Update Information: Tokenizer is a tool that uses regular expressions to split given string into tokens. What the hell is that good for, you might ask? Well, you can create your own languages! Tokenizer is used in Latte for example. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/Tokenizer/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277379 - Review Request: php-nette-tokenizer - Nette Tokenizer https://bugzilla.redhat.com/show_bug.cgi?id=1277379 -------------------------------------------------------------------------------- ================================================================================ python-qutepart-2.2.2-3.el7 (FEDORA-EPEL-2015-c3e2a2e9f9) Code editor widget -------------------------------------------------------------------------------- Update Information: initial package (rhbz#1273601) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1273601 - Review Request: python-qutepart - Code editor widget https://bugzilla.redhat.com/show_bug.cgi?id=1273601 -------------------------------------------------------------------------------- ================================================================================ rtorrent-0.9.6-2.el7 (FEDORA-EPEL-2015-0a59d9fc0e) BitTorrent client based on libtorrent -------------------------------------------------------------------------------- Update Information: Not a lot of changes in rtorrent itself: https://github.com/rakshasa/rtorrent/compare/0.9.4...0.9.6 Nor in libtorrent. Mostly changes thread names to include rtorrent: https://github.com/rakshasa/libtorrent/compare/0.13.4...0.13.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1264689 - libtorrent and rtorrent update for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1264689 -------------------------------------------------------------------------------- ================================================================================ rubygem-jmespath-1.1.3-1.el7 (FEDORA-EPEL-2015-b1df57b8c0) JMESPath - Ruby Edition -------------------------------------------------------------------------------- Update Information: Updated to version 1.1.3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1263880 - rubygem-jmespath-1.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1263880 -------------------------------------------------------------------------------- ================================================================================ srm-ifce-1.23.3-1.el7 (FEDORA-EPEL-2015-51c163c581) SRM client side library -------------------------------------------------------------------------------- Update Information: Upstream release 1.23.3 -------------------------------------------------------------------------------- ================================================================================ tor-0.2.6.10-5.el7 (FEDORA-EPEL-2015-c8974b11be) Anonymizing overlay network for TCP (The onion router) -------------------------------------------------------------------------------- Update Information: allow group read of DataDirectory and change owner to root (#1279222), -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279222 - Tor can't access /var/lib/tor/hidden_service/ even with setenforce 0 https://bugzilla.redhat.com/show_bug.cgi?id=1279222 -------------------------------------------------------------------------------- ================================================================================ tor-0.2.6.10-6.el7 (FEDORA-EPEL-2015-34ec9e73f3) Anonymizing overlay network for TCP (The onion router) -------------------------------------------------------------------------------- Update Information: amend patch so that the default of 0700 doesn't change, but allow 0750 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 09 Nov '15

09 Nov '15

The following Fedora EPEL 6 Security updates need testing: Age URL 141 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6 124 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 118 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 49 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6 49 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6 37 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36 python-pymongo-3.0.3-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ba19b1c7eb php-horde-horde-5.2.8-1.el6 php-horde-imp-6.2.11-1.el6 php-horde-ingo-3.2.7-1.el6 php-horde-passwd-5.0.4-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22dfcb9feb drupal7-7.41-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-cb0897945f lxc-1.0.7-4.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-28606b6d1d perl-HTML-Scrubber-0.15-1.el6.1 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-5d63583df0 metis-5.1.0-7.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e195439195 drupal7-jquery_update-2.7-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-967595b7c1 wildmagic5-5.13-12.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8fc6f35cc9 MUMPS-5.0.1-4.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d47ae2d16b owncloud-7.0.11-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-a7d37297d4 telegram-cli-1.3.1-7.20150730git2052f4.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-0ae4daf2d6 tubo-5.0.15-3.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b4ebe76583 putty-0.63-5.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing dl-0.17-2.el6 filezilla-3.7.3-3.el6 gfal2-python-1.8.4-1.el6 gfal2-util-1.3.1-1.el6 golang-github-smartystreets-assertions-0-0.5.git4727d76.el6 golang-github-smartystreets-goconvey-0-0.3.git43652d6.el6 php-nette-tokenizer-2.2.1-1.el6 putty-0.63-5.el6 srm-ifce-1.23.3-1.el6 tor-0.2.6.10-2.el6 Details about builds: ================================================================================ dl-0.17-2.el6 (FEDORA-EPEL-2015-62b936e8fd) Download Ticket Service -------------------------------------------------------------------------------- Update Information: Use conditional macros for proper policycoreutils-python dependency ---- dl 0.17 (#1197397) -------------------------------------------------------------------------------- ================================================================================ filezilla-3.7.3-3.el6 (FEDORA-EPEL-2015-e180c5b56d) FTP, FTPS and SFTP client -------------------------------------------------------------------------------- Update Information: Fix patch application ---- filezilla-3.7.3-2.el6 - Add patch to allow NORMAL ciphers - fix rhbz#1029485 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1029485 - Filezilla 3.7.3 is unable to connect to FTP over explicit SSL https://bugzilla.redhat.com/show_bug.cgi?id=1029485 -------------------------------------------------------------------------------- ================================================================================ gfal2-python-1.8.4-1.el6 (FEDORA-EPEL-2015-b7d4a6c8e6) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: Upstream release 1.8.4 -------------------------------------------------------------------------------- ================================================================================ gfal2-util-1.3.1-1.el6 (FEDORA-EPEL-2015-078d837a13) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information: Upstream release 1.3.1 -------------------------------------------------------------------------------- ================================================================================ golang-github-smartystreets-assertions-0-0.5.git4727d76.el6 (FEDORA-EPEL-2015-0d3ffc21da) Fluent assertion-style functions -------------------------------------------------------------------------------- Update Information: Update for mongo-tools ---- internal packages can not be provided since go-1.5 Update spec file to spec-2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1250509 - Tracker for golang-github-smartystreets-assertions https://bugzilla.redhat.com/show_bug.cgi?id=1250509 -------------------------------------------------------------------------------- ================================================================================ golang-github-smartystreets-goconvey-0-0.3.git43652d6.el6 (FEDORA-EPEL-2015-562b5e1ba5) Behavioral testing in the browser, integrates with go test -------------------------------------------------------------------------------- Update Information: Update for mongo-tools ---- Update spec file to spec-2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1250511 - Tracker for golang-github-smartystreets-goconvey https://bugzilla.redhat.com/show_bug.cgi?id=1250511 -------------------------------------------------------------------------------- ================================================================================ php-nette-tokenizer-2.2.1-1.el6 (FEDORA-EPEL-2015-acc2881c8d) Nette Tokenizer -------------------------------------------------------------------------------- Update Information: Tokenizer is a tool that uses regular expressions to split given string into tokens. What the hell is that good for, you might ask? Well, you can create your own languages! Tokenizer is used in Latte for example. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/Tokenizer/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277379 - Review Request: php-nette-tokenizer - Nette Tokenizer https://bugzilla.redhat.com/show_bug.cgi?id=1277379 -------------------------------------------------------------------------------- ================================================================================ putty-0.63-5.el6 (FEDORA-EPEL-2015-b4ebe76583) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information: This is an update fixing integer overflow and buffer underrun in erase characters (ECH) handling. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279425 - CVE-2015-5309 putty: Integer overflow and buffer underrun in terminal emulator's ECH handling https://bugzilla.redhat.com/show_bug.cgi?id=1279425 -------------------------------------------------------------------------------- ================================================================================ srm-ifce-1.23.3-1.el6 (FEDORA-EPEL-2015-923226741b) SRM client side library -------------------------------------------------------------------------------- Update Information: Upstream release 1.23.3 -------------------------------------------------------------------------------- ================================================================================ tor-0.2.6.10-2.el6 (FEDORA-EPEL-2015-b8bc9fb4dc) Anonymizing overlay network for TCP (The onion router) -------------------------------------------------------------------------------- Update Information: remove --hush option ---- update to upstream release 0.2.6.9 --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 09 Nov '15

09 Nov '15

The following Fedora EPEL 5 Security updates need testing: Age URL 750 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893 libguestfs-1.20.12-1.el5 515 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5 365 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849 sblim-sfcb-1.3.8-2.el5 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-07f3c26175 drupal7-7.41-1.el5 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516 mcollective-2.8.4-1.el5 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1cb7f30ae9 perl-HTML-Scrubber-0.15-1.el5.1 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-10d919912b git-1.8.2.1-2.el5 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4a0a62b289 drupal7-jquery_update-2.7-1.el5 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-38c5cc1eab libsndfile-1.0.17-7.el5 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-9e8d76ee45 putty-0.63-5.el5 The following builds have been pushed to Fedora EPEL 5 updates-testing gfal2-python-1.8.4-1.el5 gfal2-util-1.3.1-1.el5 putty-0.63-5.el5 srm-ifce-1.23.3-1.el5 Details about builds: ================================================================================ gfal2-python-1.8.4-1.el5 (FEDORA-EPEL-2015-2b998fbbb6) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: Upstream release 1.8.4 -------------------------------------------------------------------------------- ================================================================================ gfal2-util-1.3.1-1.el5 (FEDORA-EPEL-2015-b00729d4e0) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information: Upstream release 1.3.1 -------------------------------------------------------------------------------- ================================================================================ putty-0.63-5.el5 (FEDORA-EPEL-2015-9e8d76ee45) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information: This is an update fixing integer overflow and buffer underrun in erase characters (ECH) handling. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279425 - CVE-2015-5309 putty: Integer overflow and buffer underrun in terminal emulator's ECH handling https://bugzilla.redhat.com/show_bug.cgi?id=1279425 -------------------------------------------------------------------------------- ================================================================================ srm-ifce-1.23.3-1.el5 (FEDORA-EPEL-2015-479e0fbbf3) SRM client side library -------------------------------------------------------------------------------- Update Information: Upstream release 1.23.3 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 08 Nov '15

08 Nov '15

The following Fedora EPEL 7 Security updates need testing: Age URL 244 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 140 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813 chicken-4.9.0.1-4.el7 48 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7 36 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9 python-pymongo-3.0.3-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060 mediawiki123-1.23.11-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b3471305ee php-horde-horde-5.2.8-1.el7 php-horde-imp-6.2.11-1.el7 php-horde-ingo-3.2.7-1.el7 php-horde-passwd-5.0.4-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-02bd65205b drupal7-7.41-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d php-ZendFramework-1.12.16-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-3cdbf28493 lxc-1.0.7-4.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19 perl-HTML-Scrubber-0.15-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-22f9be240b qemu-2.0.0-1.el7.6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f5273e10c1 rabbitmq-server-3.3.5-12.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f75cdd1774 metis-5.1.0-7.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4b33ee7c84 wildmagic5-5.13-12.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6eaf22c8d MUMPS-5.0.1-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e1379fc854 owncloud-8.0.9-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-693544258f telegram-cli-1.3.1-7.20150730git2052f4.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7b2b7d02df quassel-0.11.1-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing adobe-source-code-pro-fonts-2.010.1.030-1.el7 atril-1.10.2-2.el7 calligra-2.9.9-1.el7 calligra-l10n-2.9.9-1.el7 carbon-c-relay-0.45-1.el7 cppcheck-1.70-2.el7 darktable-1.6.9-5.el7 dpm-dsi-1.9.5-12.el7 dpm-dsi-1.9.5-9.el7 gfal2-2.10.2-1.el7 globus-gridftp-server-8.9-1.el7 globus-gridftp-server-9.1-1.el7 globus-xio-5.10-1.el7 globus-xio-udt-driver-1.19-1.el7 mate-power-manager-1.10.2-2.el7 matio-1.5.2-1.el7 mozilla-adblockplus-2.6.11-1.el7 myrepos-1.20151022-1.el7 nautilus-image-converter-0.3.1-0.10.git430afce31.el7 nodejs-arrify-1.0.0-1.el7 nodejs-std-mocks-1.0.0-1.el7 nordugrid-arc-nagios-plugins-1.8.4-3.el7 nwchem-6.6.27746-22.el7 pdns-3.4.7-1.el7 php-kukulich-fshl-2.1.0-2.el7 py4j-0.9-1.el7 quassel-0.11.1-1.el7 relval-1.11.6-2.el7 telegram-cli-1.3.1-7.20150730git2052f4.el7 xsd-4.0.0-10.el7 Details about builds: ================================================================================ adobe-source-code-pro-fonts-2.010.1.030-1.el7 (FEDORA-EPEL-2015-f4378bd60f) A set of mono-spaced OpenType fonts designed for coding environments -------------------------------------------------------------------------------- Update Information: initial package -------------------------------------------------------------------------------- ================================================================================ atril-1.10.2-2.el7 (FEDORA-EPEL-2015-4d27bcff62) Document viewer -------------------------------------------------------------------------------- Update Information: atril-1.10.2-2.el7 - update to 1.12.0 release - fix regression with dvi documents, https://github.com/mate-desktop/atril/issues/164 -------------------------------------------------------------------------------- ================================================================================ calligra-2.9.9-1.el7 (FEDORA-EPEL-2015-1be55b45e6) An integrated office suite -------------------------------------------------------------------------------- Update Information: Calligra 2.9.9 bugfix release, see also https://www.calligra.org/news/calligra-2-9-9-released/ -------------------------------------------------------------------------------- ================================================================================ calligra-l10n-2.9.9-1.el7 (FEDORA-EPEL-2015-1be55b45e6) Language files for calligra -------------------------------------------------------------------------------- Update Information: Calligra 2.9.9 bugfix release, see also https://www.calligra.org/news/calligra-2-9-9-released/ -------------------------------------------------------------------------------- ================================================================================ carbon-c-relay-0.45-1.el7 (FEDORA-EPEL-2015-c7e9550280) Enhanced C implementation of Carbon relay, aggregator and rewriter -------------------------------------------------------------------------------- Update Information: Update to new version -------------------------------------------------------------------------------- ================================================================================ cppcheck-1.70-2.el7 (FEDORA-EPEL-2015-438e2f2111) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information: Added -gui package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1278318 - cppcheck gui package is missing https://bugzilla.redhat.com/show_bug.cgi?id=1278318 -------------------------------------------------------------------------------- ================================================================================ darktable-1.6.9-5.el7 (FEDORA-EPEL-2015-e14a6e59fb) Utility to organize and develop raw images -------------------------------------------------------------------------------- Update Information: darktable-1.6.9-5.fc23 - Removed i386 support darktable-1.6.9-5.fc21 - Added Removed i386 support darktable-1.6.9-5.fc22 - Added Removed i386 support darktable-1.6.9-5.el7 - Removed i386 support ---- darktable-1.6.9-2.el7 - Rework bundled opencl-headers handling in %prep (RHBZ#1264933). ---- darktable-1.6.9-1.el7 - Update to 1.6.9 ---- darktable-1.6.9-3.fc23 - Removed x86 32 bit CPU support darktable-1.6.9-3.fc21 - Removed x86 32 bit CPU support darktable-1.6.9-3.fc22 - Removed x86 32 bit CPU support darktable-1.6.9-3.el7 - Removed x86 32 bit CPU support ---- darktable-1.6.9-1.el7 - Update to 1.6.9 -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.5-12.el7 (FEDORA-EPEL-2015-4f583d172a) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: globus-gridftp-server-9.1-1 - fix for thread race crash between sequential transfers - fix for partial stat punting when passed a single entry - fix for double free on transfer failure race dpm-dsi-1.9.5-12 - Rebuilt for globus- gridftp-server 9.1 -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.5-9.el7 (FEDORA-EPEL-2015-70f2d35019) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's attempts at ipv6 negotiation) -------------------------------------------------------------------------------- ================================================================================ gfal2-2.10.2-1.el7 (FEDORA-EPEL-2015-8b9c8308a8) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Update for upstream release 2.10.2 -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-8.9-1.el7 (FEDORA-EPEL-2015-70f2d35019) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's attempts at ipv6 negotiation) -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-9.1-1.el7 (FEDORA-EPEL-2015-4f583d172a) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: globus-gridftp-server-9.1-1 - fix for thread race crash between sequential transfers - fix for partial stat punting when passed a single entry - fix for double free on transfer failure race dpm-dsi-1.9.5-12 - Rebuilt for globus- gridftp-server 9.1 -------------------------------------------------------------------------------- ================================================================================ globus-xio-5.10-1.el7 (FEDORA-EPEL-2015-70f2d35019) Globus Toolkit - Globus XIO Framework -------------------------------------------------------------------------------- Update Information: globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's attempts at ipv6 negotiation) -------------------------------------------------------------------------------- ================================================================================ globus-xio-udt-driver-1.19-1.el7 (FEDORA-EPEL-2015-70f2d35019) Globus Toolkit - Globus XIO UDT Driver -------------------------------------------------------------------------------- Update Information: globus-xio-5.10-1.el7 - Clarify documentation for timeouts - Remove NET+OS fragments globus-xio-udt-driver-1.19-1.el7 - GT6 update (Ignore other end's attempts at ipv6 negotiation) -------------------------------------------------------------------------------- ================================================================================ mate-power-manager-1.10.2-2.el7 (FEDORA-EPEL-2015-de9102f144) MATE power management service -------------------------------------------------------------------------------- Update Information: mate-power-manager-1.10.2-2.el7 - fix handle backlight in different cases - add an option to disable power button -------------------------------------------------------------------------------- ================================================================================ matio-1.5.2-1.el7 (FEDORA-EPEL-2015-52ce6855c7) Library for reading/writing Matlab MAT files -------------------------------------------------------------------------------- Update Information: initial package for EPEL7 -------------------------------------------------------------------------------- ================================================================================ mozilla-adblockplus-2.6.11-1.el7 (FEDORA-EPEL-2015-e802769724) Adblocking extension for Mozilla Firefox, Thunderbird, and SeaMonkey -------------------------------------------------------------------------------- Update Information: - Fixed: Findbar in Filter Preferences was slightly broken when using Firefox 42 and above (issue 2832). - Fixed: Notification pop-up shouldn’t disappear if somebody clicks outside it (issue 3060). - Fixed: Toolbar icon broken in SeaMonkey 2.40 and above (issue 3072). - Added promotional message for Adblock Browser to the first-run page (issue 3031). Some users may object to the last one. I do not consider this to be a significant change in the user experience, or a change at all, really. It does not impact usage, only a minor change to the first run screen. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1265859 - mozilla-adblockplus-2.6.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1265859 -------------------------------------------------------------------------------- ================================================================================ myrepos-1.20151022-1.el7 (FEDORA-EPEL-2015-8bb56d6198) A multiple SCM repository management tool -------------------------------------------------------------------------------- Update Information: Update to new upstream version 1.20151022 (rhbz#1278814) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1278814 - myrepos is outdated https://bugzilla.redhat.com/show_bug.cgi?id=1278814 -------------------------------------------------------------------------------- ================================================================================ nautilus-image-converter-0.3.1-0.10.git430afce31.el7 (FEDORA-EPEL-2015-9ad5f62288) Nautilus extension to mass resize images -------------------------------------------------------------------------------- Update Information: Initial build for EPEL7 -------------------------------------------------------------------------------- ================================================================================ nodejs-arrify-1.0.0-1.el7 (FEDORA-EPEL-2015-f7dd91fd67) Convert a value to an array -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272668 - Review Request: nodejs-arrify - Convert a value to an array https://bugzilla.redhat.com/show_bug.cgi?id=1272668 -------------------------------------------------------------------------------- ================================================================================ nodejs-std-mocks-1.0.0-1.el7 (FEDORA-EPEL-2015-659a964be0) Mock node stdout and stderr without pain -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1275000 - Review Request: nodejs-std-mocks - Mock node stdout and stderr without pain https://bugzilla.redhat.com/show_bug.cgi?id=1275000 -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc-nagios-plugins-1.8.4-3.el7 (FEDORA-EPEL-2015-7600fcdec0) Nagios plugins for ARC -------------------------------------------------------------------------------- Update Information: Nagios plugins for ARC. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1274493 - Review Request: nordugrid-arc-nagios-plugins - Nagios plugins for ARC https://bugzilla.redhat.com/show_bug.cgi?id=1274493 -------------------------------------------------------------------------------- ================================================================================ nwchem-6.6.27746-22.el7 (FEDORA-EPEL-2015-58d7c8e310) Delivering High-Performance Computational Chemistry to Science -------------------------------------------------------------------------------- Update Information: upstream update -------------------------------------------------------------------------------- ================================================================================ pdns-3.4.7-1.el7 (FEDORA-EPEL-2015-8a26d71e56) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: - Update to 3.4.7 Release notes: https://doc.powerdns.com/md/changelog /#powerdns-authoritative-server-347 -------------------------------------------------------------------------------- ================================================================================ php-kukulich-fshl-2.1.0-2.el7 (FEDORA-EPEL-2015-4e5f130916) FSHL: fast syntax highlighter -------------------------------------------------------------------------------- Update Information: FSHL is a free, open source, universal, fast syntax highlighter written in PHP. A very fast parser performs syntax highlighting for few languages and produces a HTML output. To use this library, you just have to add, in your project: require_once '/usr/share/php/FSHL/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277487 - Review Request: php-kukulich-fshl - FSHL: fast syntax highlighter https://bugzilla.redhat.com/show_bug.cgi?id=1277487 -------------------------------------------------------------------------------- ================================================================================ py4j-0.9-1.el7 (FEDORA-EPEL-2015-9ae36e9e80) Dynamically access in Python programs to arbitrary Java objects -------------------------------------------------------------------------------- Update Information: official upstream release (v0.9) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1215762 - Review Request: py4j - Dynamically access in Python programs to arbitrary Java objects (for Python 2 and 3) https://bugzilla.redhat.com/show_bug.cgi?id=1215762 -------------------------------------------------------------------------------- ================================================================================ quassel-0.11.1-1.el7 (FEDORA-EPEL-2015-7b2b7d02df) A modern distributed IRC system -------------------------------------------------------------------------------- Update Information: upgraded to 0.11.1, fixes CVE-2015-3427 set severity to "high" because CVE-2015-3427 bug allows remote attackers SQL injection -------------------------------------------------------------------------------- ================================================================================ relval-1.11.6-2.el7 (FEDORA-EPEL-2015-09db862e14) Tool for interacting with Fedora QA wiki pages -------------------------------------------------------------------------------- Update Information: This update introduces the 'relval' package. relval is a tool for interacting with the Fedora wiki pages related to release validation testing: it can create new pages, enter results into existing pages, generate various statistics, and more. See the [upstream page](https://www.happyassassin.net/wikitcms) for details. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1173798 - Review Request: relval - Tool for interacting with Fedora QA wiki pages https://bugzilla.redhat.com/show_bug.cgi?id=1173798 -------------------------------------------------------------------------------- ================================================================================ telegram-cli-1.3.1-7.20150730git2052f4.el7 (FEDORA-EPEL-2015-693544258f) Linux Command-line interface for Telegram -------------------------------------------------------------------------------- Update Information: telegram-cli-1.3.1-7.20150730git2052f4.fc22 - Hardened builds on <F23 telegram-cli-1.3.1-7.20150730git2052f4.fc23 - Hardened builds on <F23 telegram-cli-1.3.1-7.20150730git2052f4.el7 - Hardened builds on <F23 telegram-cli-1.3.1-7.20150730git2052f4.el6 - Hardened builds on <F23 -------------------------------------------------------------------------------- ================================================================================ xsd-4.0.0-10.el7 (FEDORA-EPEL-2015-7172d2b48e) W3C XML schema to C++ data binding compiler -------------------------------------------------------------------------------- Update Information: xsd-4.0.0-10.fc23 - Add patch to fix bug in C++/Parser Expat Support in EPEL builds xsd-4.0.0-10.fc21 - Add patch to fix bug in C++/Parser Expat Support in EPEL builds xsd-4.0.0-10.fc22 - Add patch to fix bug in C++/Parser Expat Support in EPEL builds xsd-4.0.0-10.el6 - Add patch to fix bug in C++/Parser Expat Support in EPEL builds xsd-4.0.0-10.el7 - Add patch to fix bug in C++/Parser Expat Support in EPEL builds -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098622 - Request build for epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1098622 [ 2 ] Bug #1270346 - XSD Additional review https://bugzilla.redhat.com/show_bug.cgi?id=1270346 --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel November 2015