epel-devel July 2017

epel-devel@lists.fedoraproject.org

15 participants
78 discussions

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 19 Jul '17

19 Jul '17

The following Fedora EPEL 6 Security updates need testing: Age URL 741 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 735 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 625 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 597 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 207 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 37 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02 lxc-1.0.10-2.el6 19 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed nagios-4.3.2-5.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c GraphicsMagick-1.3.26-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f cacti-1.1.12-2.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a putty-0.70-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-428858445a jabberd-2.6.1-2.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f7d737f93d phpldapadmin-1.2.3-10.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0ca79e82a3 yara-3.6.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing R-Rcpp-0.12.12-1.el6 arprec-2.2.19-1.el6 qpid-dispatch-0.8.0-1.el6 Details about builds: ================================================================================ R-Rcpp-0.12.12-1.el6 (FEDORA-EPEL-2017-aa74bb7ea1) Seamless R and C++ Integration -------------------------------------------------------------------------------- Update Information: New release 0.12.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471609 - Please update to 0.12.12 https://bugzilla.redhat.com/show_bug.cgi?id=1471609 -------------------------------------------------------------------------------- ================================================================================ arprec-2.2.19-1.el6 (FEDORA-EPEL-2017-6791d7599c) Software package for performing arbitrary precision arithmetic -------------------------------------------------------------------------------- Update Information: * New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1472013 - arprec-2.2.19 is available https://bugzilla.redhat.com/show_bug.cgi?id=1472013 -------------------------------------------------------------------------------- ================================================================================ qpid-dispatch-0.8.0-1.el6 (FEDORA-EPEL-2017-b8fa2d4c0e) Dispatch router for Qpid -------------------------------------------------------------------------------- Update Information: Rebased to 0.8.0. --------------------------------------------------------------------------------

1 0

Meeting tomorrow
by Stephen John Smoogen 18 Jul '17

18 Jul '17

There will be an EPEL meeting at 1800 UTC in #fedora-meeting. The agenda will be the following: 1. Cleaning out old packages in epel-testing. What should the policy be 2. Moving documents to epel pagure or deleting https://fedoraproject.org/wiki/EPEL_Updates_Policy https://fedoraproject.org/wiki/EPEL-meeting-process 3. Getting a list of active problems and who can fix them 4. ... -- Stephen J Smoogen.

1 0

Question about using yum to install epel package on CentOS 7
by Claessen, Paul 18 Jul '17

18 Jul '17

While testing a script that installs packages, I ran into a situation where I seem to have to (or can) install the epel package twice in a row (and get different results). This may actually be a package handler (rpm, yum) issue, but it only happens with epel-release, so maybe someone in the epel community can explain this to me. Normally when one tries to install a package that's already installed, yum will tell you "package already installed, nothing to do". However, when I do that with epel-release, after a first install, it will accept a second install as well (details below), installing something different, and only on the 3rd install it will say "package already installed, nothing to do". To demonstrate this I will first do (so as to start from scratch): sudo yum -y remove epel-release (this will remove the package, and it tells you it has done so. I actually did this twice, but the 2nd time it told me there was nothing to remove). Then run sudo yum -y install epel-release It will tell you: "Installed: epel-release.noarch 0:7-9" I would have expected it to install whatever is the latest release, however if I then immediately run the SAME command: sudo yum -y install epel-release It tells me: " Updating : epel-release-7-10.noarch Cleanup : epel-release-7-9.noarch Verifying : epel-release-7-10.noarch Verifying : epel-release-7-9.noarch Updated: epel-release.noarch 0:7-10 " Why didn't it install 7-10 the very first time I ran yum install? Why do I, seeminly, have to run yum install twice to get the latest version? Can someone shed a light on this? Log file of this all attached, ~ Paul Claessen

4 5

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 17 Jul '17

17 Jul '17

The following Fedora EPEL 7 Security updates need testing: Age URL 862 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 624 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 206 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 104 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 36 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1 lxc-1.0.10-2.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b mosquitto-1.4.13-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7678ea423a jabberd-2.6.1-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-86125e7897 GraphicsMagick-1.3.26-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7 globus-gridftp-server-12.2-1.el7 globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d13b9e8413 cacti-1.1.12-2.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843 heimdal-7.4.0-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.27-9.el7.1 cross-gcc-4.8.5-16.el7.1 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-93f422baa0 nodejs-6.11.1-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-491dd51db6 phpldapadmin-1.2.3-10.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-64c36b5282 rubygem-rack-cors-0.4.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0e0fd785bc yara-3.6.3-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing python-abclient-0.2.3-4.el7 python-bitstring-3.1.5-1.el7 python-modestmaps-1.4.6-4.el7 Details about builds: ================================================================================ python-abclient-0.2.3-4.el7 (FEDORA-EPEL-2017-d61e2e47b5) Python client library for EISOO AnyBackup API -------------------------------------------------------------------------------- Update Information: Fixed setuptools package name -------------------------------------------------------------------------------- References: [ 1 ] Bug #1470980 - Review Request: python-abclient - Python client library for EISOO AnyBackup API https://bugzilla.redhat.com/show_bug.cgi?id=1470980 -------------------------------------------------------------------------------- ================================================================================ python-bitstring-3.1.5-1.el7 (FEDORA-EPEL-2017-f11bfea78a) Simple construction, analysis and modification of binary data -------------------------------------------------------------------------------- Update Information: Initial package release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1330833 - Review Request: python-bitstring - Simple construction, analysis and modification of binary data https://bugzilla.redhat.com/show_bug.cgi?id=1330833 -------------------------------------------------------------------------------- ================================================================================ python-modestmaps-1.4.6-4.el7 (FEDORA-EPEL-2017-81c8facd0c) Modest Maps python port -------------------------------------------------------------------------------- Update Information: Fix bad installation requirement ---- Update to latest Fedora packaging guidelines --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 17 Jul '17

17 Jul '17

The following Fedora EPEL 6 Security updates need testing: Age URL 740 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 734 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 624 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 596 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 206 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 36 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02 lxc-1.0.10-2.el6 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed nagios-4.3.2-5.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c GraphicsMagick-1.3.26-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f cacti-1.1.12-2.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a putty-0.70-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-428858445a jabberd-2.6.1-2.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f7d737f93d phpldapadmin-1.2.3-10.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0ca79e82a3 yara-3.6.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing python-modestmaps-1.4.6-4.el6 Details about builds: ================================================================================ python-modestmaps-1.4.6-4.el6 (FEDORA-EPEL-2017-b46bcd6bdb) Modest Maps python port -------------------------------------------------------------------------------- Update Information: Fix bad installation requirement ---- Update to latest Fedora packaging guidelines --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 16 Jul '17

16 Jul '17

The following Fedora EPEL 7 Security updates need testing: Age URL 861 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 623 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 205 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 100 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 35 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1 lxc-1.0.10-2.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b mosquitto-1.4.13-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7678ea423a jabberd-2.6.1-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-86125e7897 GraphicsMagick-1.3.26-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7 globus-gridftp-server-12.2-1.el7 globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d13b9e8413 cacti-1.1.12-2.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843 heimdal-7.4.0-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.27-9.el7.1 cross-gcc-4.8.5-16.el7.1 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-93f422baa0 nodejs-6.11.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-491dd51db6 phpldapadmin-1.2.3-10.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-64c36b5282 rubygem-rack-cors-0.4.1-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0e0fd785bc yara-3.6.3-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing git-extras-4.4.0-1.el7 rubygem-rack-cors-0.4.1-1.el7 yara-3.6.3-1.el7 zstd-1.3.0-1.el7 Details about builds: ================================================================================ git-extras-4.4.0-1.el7 (FEDORA-EPEL-2017-7adf128772) Little git extras -------------------------------------------------------------------------------- Update Information: git-extras-4.4.0 is available -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471372 - git-extras-4.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1471372 -------------------------------------------------------------------------------- ================================================================================ rubygem-rack-cors-0.4.1-1.el7 (FEDORA-EPEL-2017-64c36b5282) Middleware for enabling Cross-Origin Resource Sharing in Rack apps -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-11173, new upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1470688 - CVE-2017-11173 rubygem-rack-cors: Missing anchor in generated regex in rack/cors.rb#L256 may permit forged malicious requests [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1470688 -------------------------------------------------------------------------------- ================================================================================ yara-3.6.3-1.el7 (FEDORA-EPEL-2017-0e0fd785bc) Pattern matching Swiss knife for malware researchers -------------------------------------------------------------------------------- Update Information: bump to 3.6.3 release - bugfix CVE-2017-11328 ---- Security fix for CVE-2017-9304, CVE-2017-9465 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 -------------------------------------------------------------------------------- ================================================================================ zstd-1.3.0-1.el7 (FEDORA-EPEL-2017-e8af27910d) Zstd compression library -------------------------------------------------------------------------------- Update Information: Latest upstream --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 16 Jul '17

16 Jul '17

The following Fedora EPEL 6 Security updates need testing: Age URL 739 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 733 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 623 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 595 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 205 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 35 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02 lxc-1.0.10-2.el6 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed nagios-4.3.2-5.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c GraphicsMagick-1.3.26-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f cacti-1.1.12-2.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a putty-0.70-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-428858445a jabberd-2.6.1-2.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f7d737f93d phpldapadmin-1.2.3-10.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0ca79e82a3 yara-3.6.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing git-extras-4.4.0-1.el6 yara-3.6.3-1.el6 zstd-1.3.0-1.el6 Details about builds: ================================================================================ git-extras-4.4.0-1.el6 (FEDORA-EPEL-2017-31f6b33452) Little git extras -------------------------------------------------------------------------------- Update Information: git-extras-4.4.0 is available -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471372 - git-extras-4.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1471372 -------------------------------------------------------------------------------- ================================================================================ yara-3.6.3-1.el6 (FEDORA-EPEL-2017-0ca79e82a3) Pattern matching Swiss knife for malware researchers -------------------------------------------------------------------------------- Update Information: bump to 3.6.3 release - bugfix CVE-2017-11328 ---- Security fix for CVE-2017-9304, CVE-2017-9465, CVE-2017-9438, CVE-2017-8929 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 [ 2 ] Bug #1451382 - CVE-2017-8929 yara: Use-after-free in sized_string_cmp function https://bugzilla.redhat.com/show_bug.cgi?id=1451382 -------------------------------------------------------------------------------- ================================================================================ zstd-1.3.0-1.el6 (FEDORA-EPEL-2017-ce41d9f21b) Zstd compression library -------------------------------------------------------------------------------- Update Information: Latest upstream --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 15 Jul '17

15 Jul '17

The following Fedora EPEL 7 Security updates need testing: Age URL 859 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 622 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 204 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 100 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 99 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1 lxc-1.0.10-2.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b mosquitto-1.4.13-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a427bcb775 yara-3.6.2-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7678ea423a jabberd-2.6.1-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-86125e7897 GraphicsMagick-1.3.26-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7 globus-gridftp-server-12.2-1.el7 globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d13b9e8413 cacti-1.1.12-2.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843 heimdal-7.4.0-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.27-9.el7.1 cross-gcc-4.8.5-16.el7.1 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-93f422baa0 nodejs-6.11.1-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-491dd51db6 phpldapadmin-1.2.3-10.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing lynis-2.5.2-1.el7 nodejs-6.11.1-1.el7 phpldapadmin-1.2.3-10.el7 uptimed-0.4.0-6.el7 xosd-2.2.14-24.el7 Details about builds: ================================================================================ lynis-2.5.2-1.el7 (FEDORA-EPEL-2017-07f310c73a) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: Update to 2.5.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1469320 - lynis-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1469320 -------------------------------------------------------------------------------- ================================================================================ nodejs-6.11.1-1.el7 (FEDORA-EPEL-2017-93f422baa0) JavaScript runtime -------------------------------------------------------------------------------- Update Information: [Security update](https://nodejs.org/en/blog/vulnerability/july-2017-security- releases/) ---- Fix typo from previous update. ---- Update to new version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1463137 - CVE-2017-1000381 nodejs: c-ares: NAPTR parser out of bounds access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1463137 -------------------------------------------------------------------------------- ================================================================================ phpldapadmin-1.2.3-10.el7 (FEDORA-EPEL-2017-491dd51db6) Web-based tool for managing LDAP servers -------------------------------------------------------------------------------- Update Information: Fix CVE-2017-11107 (#1471112) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471112 - CVE-2017-11107 phpldapadmin: XSS in htdocs/entry_chooser.php via form, element, rdn, or container parameter https://bugzilla.redhat.com/show_bug.cgi?id=1471112 -------------------------------------------------------------------------------- ================================================================================ uptimed-0.4.0-6.el7 (FEDORA-EPEL-2017-89b8f93f46) A daemon to record and keep track of system up times -------------------------------------------------------------------------------- Update Information: Uptimed is an up time record daemon keeping track of the highest up times the system ever had. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1470857 - Make package also available in EPEL7 for RHEL and CentOS 7 https://bugzilla.redhat.com/show_bug.cgi?id=1470857 -------------------------------------------------------------------------------- ================================================================================ xosd-2.2.14-24.el7 (FEDORA-EPEL-2017-203bf9e58e) On-screen display library for X -------------------------------------------------------------------------------- Update Information: This is a tool for displaying messages in X11 displays. -------------------------------------------------------------------------------- References: [ 1 ] Bug #756780 - Review Request: xosd - On-screen display library for X https://bugzilla.redhat.com/show_bug.cgi?id=756780 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 15 Jul '17

15 Jul '17

The following Fedora EPEL 6 Security updates need testing: Age URL 738 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 732 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 622 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 593 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 204 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 100 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02 lxc-1.0.10-2.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed nagios-4.3.2-5.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-58b5b1f166 yara-3.6.2-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c GraphicsMagick-1.3.26-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f cacti-1.1.12-2.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a putty-0.70-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-428858445a jabberd-2.6.1-2.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f7d737f93d phpldapadmin-1.2.3-10.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing jabberd-2.6.1-2.el6 lynis-2.5.2-1.el6 phpldapadmin-1.2.3-10.el6 Details about builds: ================================================================================ jabberd-2.6.1-2.el6 (FEDORA-EPEL-2017-428858445a) OpenSource server implementation of the Jabber protocols -------------------------------------------------------------------------------- Update Information: added patch to fix build errors with mariadb 10.2 (#1470036) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1470036 - mariadb library upgrade to 10.2 causes jabberd FTBFS https://bugzilla.redhat.com/show_bug.cgi?id=1470036 [ 2 ] Bug #1468567 - CVE-2017-10807 jabberd: CVE-2017-10807 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1468567 -------------------------------------------------------------------------------- ================================================================================ lynis-2.5.2-1.el6 (FEDORA-EPEL-2017-6b86eda4c0) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: Update to 2.5.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1469320 - lynis-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1469320 -------------------------------------------------------------------------------- ================================================================================ phpldapadmin-1.2.3-10.el6 (FEDORA-EPEL-2017-f7d737f93d) Web-based tool for managing LDAP servers -------------------------------------------------------------------------------- Update Information: Fix CVE-2017-11107 (#1471112) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471112 - CVE-2017-11107 phpldapadmin: XSS in htdocs/entry_chooser.php via form, element, rdn, or container parameter https://bugzilla.redhat.com/show_bug.cgi?id=1471112 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 14 Jul '17

14 Jul '17

The following Fedora EPEL 6 Security updates need testing: Age URL 737 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 731 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 621 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 593 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 203 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 99 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02 lxc-1.0.10-2.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed nagios-4.3.2-5.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-58b5b1f166 yara-3.6.2-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c GraphicsMagick-1.3.26-1.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f cacti-1.1.12-2.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a putty-0.70-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing gen-oath-safe-0.10.1-1.el6 youtube-dl-2017.07.09-1.el6 Details about builds: ================================================================================ gen-oath-safe-0.10.1-1.el6 (FEDORA-EPEL-2017-26c82c8349) Script for generating HOTP/TOTP keys (and QR code) -------------------------------------------------------------------------------- Update Information: Tiny bugfix update �� missing ``-h`` and ``--help`` options. -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2017.07.09-1.el6 (FEDORA-EPEL-2017-8586fec834) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Update to the latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467126 - youtube-dl-2017.07.09 is available https://bugzilla.redhat.com/show_bug.cgi?id=1467126 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel July 2017