The following Fedora EPEL 5 Security updates need testing:
Age URL
772 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849 sblim-sfcb-1.3.8-2.el5
415 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516 mcollective-2.8.4-1.el5
386 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6 thttpd-2.25b-24.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
opendmarc-1.3.2-0.12.el5
rsnapshot-1.4.2-2.el5
Details about builds:
================================================================================
opendmarc-1.3.2-0.12.el5 (FEDORA-EPEL-2016-16c55d3061)
A Domain-based Message Authentication, Reporting & Conformance (DMARC) milter and library
--------------------------------------------------------------------------------
Update Information:
This update providees version 1.3.2 Beta 1. See See:
https://sourceforge.net/p/opendmarc/activity/ for details on changes in 1.3.2
Beta 0 and 1. It contains additional bug fixes from Juri Haberland's [tracking
page](http://batleth.sapienti-sat.org/projects/opendmarc/). It fixes a bug that
would cause opendmarc to crash soon after starting up. See [RHBZ
#1398444](https://bugzilla.redhat.com/show_bug.cgi?id=1398444) and upstream
[#185](https://sourceforge.net/p/opendmarc/tickets/185/).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1398444 - [abrt] opendmarc: mlfi_connect(): opendmarc killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1398444
[ 2 ] Bug #1293279 - opendkim miss LDAP support
https://bugzilla.redhat.com/show_bug.cgi?id=1293279
[ 3 ] Bug #1287176 - OpenDMARC does not accept valid mail size limiting syntax in DMARC record
https://bugzilla.redhat.com/show_bug.cgi?id=1287176
[ 4 ] Bug #1331971 - wrong result with self SPF check
https://bugzilla.redhat.com/show_bug.cgi?id=1331971
[ 5 ] Bug #1332521 - opendmarc always adds spf=pass
https://bugzilla.redhat.com/show_bug.cgi?id=1332521
--------------------------------------------------------------------------------
================================================================================
rsnapshot-1.4.2-2.el5 (FEDORA-EPEL-2016-220a6d678c)
Local and remote filesystem snapshot utility
--------------------------------------------------------------------------------
Update Information:
Revised update for EPEL with LVM functionality not broken ---- Update to 1.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375289 - rsnapshot out of date, new 1.4.2 version and new upstream source
https://bugzilla.redhat.com/show_bug.cgi?id=1375289
[ 2 ] Bug #1117966 - rsnapshot.conf using deprecated "interval" instead of new "retain" keyword
https://bugzilla.redhat.com/show_bug.cgi?id=1117966
--------------------------------------------------------------------------------
Dear all,
You are kindly invited to the meeting:
EPSCO meeting on 2016-12-21 from 18:00:00 to 19:00:00 GMT
At fedora-meeting(a)irc.freenode.net
The meeting will be about:
Extra Packages for Enterprise Linux Steering COmmittee (EPSCO) has a weekly meeting to go over concerns and problems in the EPEL distribution.
You are kindly invited to come and meet with us
Source: https://apps.fedoraproject.org/calendar/meeting/4639/
This package now explicitly requires kmod(l2tp_ppp.ko)
That does not appear to be available in CentOS 7.3 as far as I can see,
unless a bug in yum is preventing resolution of that kernel module.
The following Fedora EPEL 7 Security updates need testing:
Age URL
652 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
414 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
133 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7
116 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7
59 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6 compat-guile18-1.8.8-14.el7
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-090cbd0a83 botan-1.10.14-3.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-73b4fc1c78 chromium-55.0.2883.87-1.el7.1
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d21e337184 hdf5-1.8.12-8.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0899019edf game-music-emu-0.6.1-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-911ea9b639 fedfind-3.2.3-1.el7 python-wikitcms-2.1.9-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-17165c490b nagios-plugins-2.1.4-2.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-857dac8710 tarantool-1.6.9.52-2.el7 msgpuck-1.1.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
am-utils-6.2.0-23.el7
cowsay-3.04-2.el7
fedpkg-1.26-4.el7
gnucash-2.6.15-1.el7
gnucash-docs-2.6.15-1.el7
lugaru-1.1-1.el7
osm2pgsql-0.92.0-1.el7
radcli-1.2.7-1.el7
rpkg-1.47-7.el7
sscep-0.6.1-2.20160525git2052ee1.el7
Details about builds:
================================================================================
am-utils-6.2.0-23.el7 (FEDORA-EPEL-2016-3d4ce43237)
Automount utilities including an updated version of Amd
--------------------------------------------------------------------------------
Update Information:
- fix fix-umount-to-mount-race patch (bug 1399213).
--------------------------------------------------------------------------------
================================================================================
cowsay-3.04-2.el7 (FEDORA-EPEL-2016-8e8047c897)
Configurable speaking/thinking cow
--------------------------------------------------------------------------------
Update Information:
___________________________________ / This updates cowsay to the latest
\ \ release. /
----------------------------------- \ ^__^ \
(oo)\_______ (__)\ )\/\ ||----w |
|| ||
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1350114 - Full commit history of cowsay available on GitHub, with links to source bundle download
https://bugzilla.redhat.com/show_bug.cgi?id=1350114
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.26-4.el7 (FEDORA-EPEL-2016-14415f0f51)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
This build contains changes needed for flag day on December 12. - Once you use
this version to upload new sources, older versions of `fedpkg` will not be able
to work with the package. - pkgs and lookaside site URL are changed. The new
URL uses ``https``. You can see the new URls with ``-d`` and ``-v`` when
``clone`` and ``sources``. Changelog - rpkg,
https://pagure.io/rpkg/blob/master/f/CHANGELOG.rst - fedpkg,
https://pagure.io/fedpkg/blob/master/f/CHANGELOG.rst Additional issue fixed in
fedpkg-1.26-4, - [#87](https://pagure.io/fedpkg/issue/87) - fedpkg is
incompatible with bodhi 2.x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714726 - change --root option to --mock-config to fedpkg mockbuild
https://bugzilla.redhat.com/show_bug.cgi?id=714726
[ 2 ] Bug #841516 - fedpkg scratch-build error message should be improved to tell you how to do a scratch build without pushing
https://bugzilla.redhat.com/show_bug.cgi?id=841516
[ 3 ] Bug #1325775 - Working on branch without remote tracking branch fails due to unpushed changes
https://bugzilla.redhat.com/show_bug.cgi?id=1325775
[ 4 ] Bug #1203757 - The description of fedpkg verify-files in the man page and help text is misleading
https://bugzilla.redhat.com/show_bug.cgi?id=1203757
[ 5 ] Bug #1169663 - Build stops with "Could not execute scratch_build: There are unpushed changes in your repo" when there are no unpushed changes in the current branch
https://bugzilla.redhat.com/show_bug.cgi?id=1169663
[ 6 ] Bug #1402882 - fedpkg local fails
https://bugzilla.redhat.com/show_bug.cgi?id=1402882
[ 7 ] Bug #1404724 - ���fedpkg update��� fails when the last git log message contains non-ASCII.
https://bugzilla.redhat.com/show_bug.cgi?id=1404724
[ 8 ] Bug #1241059 - Could not execute new_sources: unsupported second type in tuple
https://bugzilla.redhat.com/show_bug.cgi?id=1241059
[ 9 ] Bug #1404102 - __init__.py:237 (login_koji_session): AttributeError: 'module' object has no attribute 'ssl'
https://bugzilla.redhat.com/show_bug.cgi?id=1404102
--------------------------------------------------------------------------------
================================================================================
gnucash-2.6.15-1.el7 (FEDORA-EPEL-2016-9a353397e1)
Finance management application
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest upstream bugfix release, 2.6.15. For the
upstream release notes, see http://gnucash.org/#n-161218-2.6.15.news.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405859 - gnucash-2.6.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1405859
--------------------------------------------------------------------------------
================================================================================
gnucash-docs-2.6.15-1.el7 (FEDORA-EPEL-2016-9a353397e1)
Help files and documentation for the GnuCash personal finance manager
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest upstream bugfix release, 2.6.15. For the
upstream release notes, see http://gnucash.org/#n-161218-2.6.15.news.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405859 - gnucash-2.6.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1405859
--------------------------------------------------------------------------------
================================================================================
lugaru-1.1-1.el7 (FEDORA-EPEL-2016-82e3f8a7bf)
Ninja rabbit fighting game
--------------------------------------------------------------------------------
Update Information:
Initial packaging for Fedora (#1405708)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405708 - Review Request: lugaru - Ninja rabbit fighting game
https://bugzilla.redhat.com/show_bug.cgi?id=1405708
--------------------------------------------------------------------------------
================================================================================
osm2pgsql-0.92.0-1.el7 (FEDORA-EPEL-2016-6121f4ee7a)
Imports map data from OpenStreetMap to a PostgreSQL database
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version 0.92.0 (rhbz#1403406)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1403406 - osm2pgsql-0.92.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1403406
--------------------------------------------------------------------------------
================================================================================
radcli-1.2.7-1.el7 (FEDORA-EPEL-2016-5dfbe02fb1)
RADIUS protocol client library
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
================================================================================
rpkg-1.47-7.el7 (FEDORA-EPEL-2016-14415f0f51)
Utility for interacting with rpm+git packaging systems
--------------------------------------------------------------------------------
Update Information:
This build contains changes needed for flag day on December 12. - Once you use
this version to upload new sources, older versions of `fedpkg` will not be able
to work with the package. - pkgs and lookaside site URL are changed. The new
URL uses ``https``. You can see the new URls with ``-d`` and ``-v`` when
``clone`` and ``sources``. Changelog - rpkg,
https://pagure.io/rpkg/blob/master/f/CHANGELOG.rst - fedpkg,
https://pagure.io/fedpkg/blob/master/f/CHANGELOG.rst Additional issue fixed in
fedpkg-1.26-4, - [#87](https://pagure.io/fedpkg/issue/87) - fedpkg is
incompatible with bodhi 2.x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714726 - change --root option to --mock-config to fedpkg mockbuild
https://bugzilla.redhat.com/show_bug.cgi?id=714726
[ 2 ] Bug #841516 - fedpkg scratch-build error message should be improved to tell you how to do a scratch build without pushing
https://bugzilla.redhat.com/show_bug.cgi?id=841516
[ 3 ] Bug #1325775 - Working on branch without remote tracking branch fails due to unpushed changes
https://bugzilla.redhat.com/show_bug.cgi?id=1325775
[ 4 ] Bug #1203757 - The description of fedpkg verify-files in the man page and help text is misleading
https://bugzilla.redhat.com/show_bug.cgi?id=1203757
[ 5 ] Bug #1169663 - Build stops with "Could not execute scratch_build: There are unpushed changes in your repo" when there are no unpushed changes in the current branch
https://bugzilla.redhat.com/show_bug.cgi?id=1169663
[ 6 ] Bug #1402882 - fedpkg local fails
https://bugzilla.redhat.com/show_bug.cgi?id=1402882
[ 7 ] Bug #1404724 - ���fedpkg update��� fails when the last git log message contains non-ASCII.
https://bugzilla.redhat.com/show_bug.cgi?id=1404724
[ 8 ] Bug #1241059 - Could not execute new_sources: unsupported second type in tuple
https://bugzilla.redhat.com/show_bug.cgi?id=1241059
[ 9 ] Bug #1404102 - __init__.py:237 (login_koji_session): AttributeError: 'module' object has no attribute 'ssl'
https://bugzilla.redhat.com/show_bug.cgi?id=1404102
--------------------------------------------------------------------------------
================================================================================
sscep-0.6.1-2.20160525git2052ee1.el7 (FEDORA-EPEL-2016-2f591b5050)
Simple SCEP client with modifications for engine support & more
--------------------------------------------------------------------------------
Update Information:
Issue 49: fixed getCA issue ---- Rebase on 0.6.1 release
--------------------------------------------------------------------------------
Hi folks,
Do you have any plans to update the Nagios server package, RE:
https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-20…
?
(Or, would it be faster to roll my own RPM?)
Love your work on EPEL; we've been fans for many years.
--
-Neil
780-492-3155
University of Alberta Libraries
4-30 Cameron Library