epel-devel August 2017

epel-devel@lists.fedoraproject.org

27 participants
60 discussions

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 09 Aug '17

09 Aug '17

The following Fedora EPEL 7 Security updates need testing: Age URL 884 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 647 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 229 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 126 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 125 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 124 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843 heimdal-7.4.0-1.el7 26 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.27-9.el7.1 cross-gcc-4.8.5-16.el7.1 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c39b9065fa GraphicsMagick-1.3.26-3.el7 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c4e53cc90d chicken-4.12.0-3.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b50572c103 sscep-0.6.1-5.20160525git2052ee1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4908d32c3c python-dbusmock-0.11.1-6.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-017fbc40e8 supervisor-3.1.4-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-ftp-control-7.8-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.19-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7 globus-gridftp-server-12.2-1.el7 globus-gridftp-server-control-5.1-1.el7 globus-gssapi-gsi-12.17-3.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-37e736147d knot-2.5.3-2.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-94c168d702 php-horde-Horde-Core-2.30.0-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7d6b89ab36 php-horde-Horde-Form-2.0.18-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-359039e1f1 php-horde-Horde-Url-2.2.6-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-aebd466ffa php-horde-horde-5.2.16-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-531b8ee43e php-horde-kronolith-4.2.22-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-055fdcdee7 php-horde-nag-4.2.15-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bad0726ae5 php-horde-turba-4.2.20-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-886e003d48 gsoap-2.8.16-9.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8683c5e591 potrace-1.15-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing openscap-daemon-0.1.7-1.el7 Details about builds: ================================================================================ openscap-daemon-0.1.7-1.el7 (FEDORA-EPEL-2017-58425c5e4b) Manages continuous SCAP scans of your infrastructure -------------------------------------------------------------------------------- Update Information: Update to the latest upstream release. Changes: - New features: - Scanning of any XCCDF profile in oscapd-evaluate - Detecting XCCDF profiles applicable to a given target - Generating remediation scripts based on scan results - Shortened profile IDs are accepted - Maintenance: - Several exceptions are caught - Fixed JSON output - Better error messages --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 09 Aug '17

09 Aug '17

The following Fedora EPEL 6 Security updates need testing: Age URL 763 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 757 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 647 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 618 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 229 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 125 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-515cca9a02 GraphicsMagick-1.3.26-3.el6 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99fb0d61b0 chicken-4.12.0-3.el6 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ab5ed7f894 python-tablib-0.11.5-1.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-70562ba4d2 python-django-ckeditor-5.3.0-1.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-ftp-control-7.8-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.19-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gridftp-server-control-5.1-1.el6 globus-gssapi-gsi-12.17-3.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-72e0f4a914 php-horde-Horde-Core-2.30.0-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2a557f0b9c php-horde-Horde-Form-2.0.18-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3e60244bf3 php-horde-Horde-Url-2.2.6-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4340a6e0a8 php-horde-horde-5.2.16-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4654acd4ee php-horde-kronolith-4.2.22-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19c0b8ff89 php-horde-nag-4.2.15-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5b8e6e0279 php-horde-turba-4.2.20-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d015ef3016 gsoap-2.7.16-5.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-87be2d4d20 potrace-1.15-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing python-hwdata-2.3.5-1.el6 xnec2c-3.5.1-1.el6 Details about builds: ================================================================================ python-hwdata-2.3.5-1.el6 (FEDORA-EPEL-2017-2d0c8f0f3d) Python bindings to hwdata package -------------------------------------------------------------------------------- Update Information: added python2 subpackage -------------------------------------------------------------------------------- ================================================================================ xnec2c-3.5.1-1.el6 (FEDORA-EPEL-2017-bff59448c1) GTK based graphical wrapper for nec2c -------------------------------------------------------------------------------- Update Information: * Modified the NEC2 Editor code so that when a Geometry or Command editor window is opened, activating Apply or OK will save data in the editor window to the treeview, even if the default data is not edited. * Modified the NEC2 Editor code so that if a treeview row is removed while the relevant editor window is open, then activating Apply or OK will not attempt to save data to the treeview, since this will cause an illegal memory access and will crash xnec2c. * Fixed a bug in the Helix editor which caused incorrect calculation of the segment length as a percentage of wavelength or of the number of segments/turn that correspond to a given segment length as a percentage of wavelength. --------------------------------------------------------------------------------

1 0

EPEL Steering Committee Meeting for 1800 UTC 2017-08-09
by Stephen John Smoogen 08 Aug '17

08 Aug '17

We did not have the meeting last week. Could I get an RSVP or something similar from committee members for this weeks meeting? #startmeeting EPEL (2017-08-09) #meetingname EPEL #topic aloha #chair avij bstinson Evolution nirik smooge #topic Announcements #info RHEL-7.4 released #info FLOCK 2017 in 2 weeks #topic Ticket https://pagure.io/epel/issue/4 #topic Ticket https://pagure.io/epel/issue/7 #topic Ticket https://pagure.io/epel/issue/39 #topic Document https://pagure.io/epel/blob/master/f/docs/source/EPEL-meeting-process.rst #topic Document https://pagure.io/epel/blob/master/f/docs/source/EPEL-policy-updates.rst #topic Document https://fedoraproject.org/wiki/About_EPEL #topic Document https://fedoraproject.org/wiki/Joining_EPEL #topic Next Meeting Business #info ??? #topic Open Floor #endmeeting -- Stephen J Smoogen.

2 1

recent builds of glusterfs in epel-7
by Kaleb S. KEITHLEY 08 Aug '17

08 Aug '17

I've noticed that puiterwijk and kevin have done builds recently of glusterfs. It's unclear to me why anyone would do that. I don't mind really, but I want remind everyone that glusterfs was retired from EPEL when RHEL started to ship glusterfs client-side RPMs. The correct place to get el7 rpms for RHEL and CentOS is from the CentOS Storage SIG. If I failed somehow to fully retire glusterfs from EPEL, please let me know so that I can clean up any remaining bits that I missed the first time around. Regards, -- Kaleb

2 1

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Aug '17

07 Aug '17

The following Fedora EPEL 7 Security updates need testing: Age URL 882 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 645 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 227 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 125 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 123 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 122 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 25 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843 heimdal-7.4.0-1.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.27-9.el7.1 cross-gcc-4.8.5-16.el7.1 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c39b9065fa GraphicsMagick-1.3.26-3.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c4e53cc90d chicken-4.12.0-3.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b39314b704 mingw-c-ares-1.13.0-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2c3a1062a0 seamonkey-2.48-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b50572c103 sscep-0.6.1-5.20160525git2052ee1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4908d32c3c python-dbusmock-0.11.1-6.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-017fbc40e8 supervisor-3.1.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-ftp-control-7.8-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.19-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7 globus-gridftp-server-12.2-1.el7 globus-gridftp-server-control-5.1-1.el7 globus-gssapi-gsi-12.17-3.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-37e736147d knot-2.5.3-2.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-94c168d702 php-horde-Horde-Core-2.30.0-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7d6b89ab36 php-horde-Horde-Form-2.0.18-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-359039e1f1 php-horde-Horde-Url-2.2.6-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-aebd466ffa php-horde-horde-5.2.16-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-531b8ee43e php-horde-kronolith-4.2.22-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-055fdcdee7 php-horde-nag-4.2.15-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bad0726ae5 php-horde-turba-4.2.20-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-886e003d48 gsoap-2.8.16-9.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-816da4b59a ReviewBoard-2.5.14-2.el7 python-djblets-0.9.9-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8683c5e591 potrace-1.15-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing composer-1.4.3-1.el7 fusioninventory-agent-2.3.21-1.el7 gnome-shell-extension-freon-25-1.el7 mate-themes-3.22.13-1.el7 mock-1.4.3-1.el7 openblas-0.2.20-2.el7 php-bartlett-PHP-CompatInfo-5.0.8-1.el7 php-bartlett-php-compatinfo-db-1.23.0-1.el7 potrace-1.15-1.el7 sysusage-5.5-3.el7 Details about builds: ================================================================================ composer-1.4.3-1.el7 (FEDORA-EPEL-2017-36063cb93a) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: **Version 1.4.3** - 2017-08-06 * Fixed GitLab URLs * Fixed root package version detection using latest git versions * Fixed inconsistencies in date format in composer.lock when installing from source * Fixed Mercurial support regression * Fixed exclude-from-classmap not being applied when autoloading files for Composer plugins * Fixed exclude-from-classmap being ignored when cwd has the wrong case on case insensitive filesystems * Fixed several other minor issues -------------------------------------------------------------------------------- ================================================================================ fusioninventory-agent-2.3.21-1.el7 (FEDORA-EPEL-2017-fdccca0b40) FusionInventory agent -------------------------------------------------------------------------------- Update Information: Last upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477175 - fusioninventory-agent-2.3.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1477175 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-freon-25-1.el7 (FEDORA-EPEL-2017-0ccf6c15f4) GNOME Shell extension to display system temperature, voltage, and fan speed -------------------------------------------------------------------------------- Update Information: Bump to upstream version 25, which adds German localization. -------------------------------------------------------------------------------- ================================================================================ mate-themes-3.22.13-1.el7 (FEDORA-EPEL-2017-a0cddc52c9) MATE Desktop themes -------------------------------------------------------------------------------- Update Information: - update to 3.22.13 for gtk+-3.22 for rhel7.4 -------------------------------------------------------------------------------- ================================================================================ mock-1.4.3-1.el7 (FEDORA-EPEL-2017-53f9c9cb51) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: * --nocheck macro was not properly escaped [[RHBZ#1473359](https://bugzilla.redhat.com/show_bug.cgi?id=1473359)]. * Use python3 and dnf module on Fedoras to guess architecture in %post scriptlet [[RHBZ#1462310](https://bugzilla.redhat.com/show_bug.cgi?id=1462310)]. * enhanced detection of RHEL [[RHBZ#1470189](https://bugzilla.redhat.com/show_bug.cgi?id=1470189)]. * scm: define `_sourcedir` to checkout directory [[PR#98](https://github.com/rpm- software-management/mock/pull/98)]. * Mageia Cauldron releasever is now 7 [[PR#95](https://github.com/rpm-software-management/mock/pull/95)] * Create /dev nodes even when using nspawn [[RHBZ#1467299](https://bugzilla.redhat.com/show_bug.cgi?id=1467299)]. * selinux: do not try to import yum when PM is dnf [[RHBZ#1474513](https://bugzilla.redhat.com/show_bug.cgi?id=1474513)]. * When you have hundreds of volumes in LVM you can tell mock to wait longer using `config_opts['plugin_conf']['lvm_root_opts']['sleep_time'] = 1`. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1473359 - mock --nocheck -r fedora-26-x86_64 <whatever>.src.rpm consistently fails https://bugzilla.redhat.com/show_bug.cgi?id=1473359 [ 2 ] Bug #1470189 - Mock crashes because there is no dnf https://bugzilla.redhat.com/show_bug.cgi?id=1470189 [ 3 ] Bug #1462310 - missing default cfg on rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1462310 [ 4 ] Bug #1467299 - /dev/null dissapper for rpm scriptlet during mock build https://bugzilla.redhat.com/show_bug.cgi?id=1467299 [ 5 ] Bug #1474513 - Using --old-chroot, selinux plugin crashes if yum is not installed https://bugzilla.redhat.com/show_bug.cgi?id=1474513 -------------------------------------------------------------------------------- ================================================================================ openblas-0.2.20-2.el7 (FEDORA-EPEL-2017-4e3642d37a) An optimized BLAS library based on GotoBLAS2 -------------------------------------------------------------------------------- Update Information: Update to the newest release, including fixes to several race and locking bugs, a newer version of LAPACK, as well as support for several more processors on the x86_64 architecture. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1474554 - openblas-0.2.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=1474554 -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-CompatInfo-5.0.8-1.el7 (FEDORA-EPEL-2017-c08075c316) Find out version and the extensions required for a piece of code to run -------------------------------------------------------------------------------- Update Information: **Version 5.0.8** * Fix #232 Support class constants -------------------------------------------------------------------------------- ================================================================================ php-bartlett-php-compatinfo-db-1.23.0-1.el7 (FEDORA-EPEL-2017-f3c1ab3a43) Reference Database to be used with php-compatinfo library -------------------------------------------------------------------------------- Update Information: **Version 1.23.0** - 2017-07-17 * **Added** - Support to PHP 7.0.21 - Support to PHP 5.6.31 - New `db:build:ext` command to generate a draft (json format) of each components in one extension. - New `db:list` command to see what are extensions supported by the database. - New `ExtensionFactory::getExtensions()` method to retrieve all extensions informations (status/versions) - New `db:show` command to see details of extensions supported by the database. * **Changed** - Amqp reference updated to version 1.9.1 (stable) - Lzf reference updated to version 1.6.6 (stable) - Redis reference updated to version 3.1.2 (stable) - Ssh2 reference updated to version 1.1 (alpha) - Stomp reference updated to version 2.0.1 (stable) - Zip reference updated to version 1.15.1 (stable) - DataBase `compatinfo.sqlite` is copied in same directory (<user>\.bartlett) for both phar and non phar versions. - Console `db:backup` command did not used anymore the system temporary folder to save DB backup files (save in same folder as DB) -------------------------------------------------------------------------------- ================================================================================ potrace-1.15-1.el7 (FEDORA-EPEL-2017-8683c5e591) Transform bitmaps into vector graphics -------------------------------------------------------------------------------- Update Information: This release consists of bugfixes and minor portability improvements. Some potential buffer overflows and arithmetic overflows were fixed, including CVE-2017-12067. A bug triggered by very large bitmaps has been fixed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477104 - CVE-2017-12067 potrace: heap-based buffer over-read in the interpolate_cubic function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1477104 [ 2 ] Bug #1385513 - CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701 CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple security issues [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1385513 [ 3 ] Bug #1477105 - CVE-2017-12067 potrace: heap-based buffer over-read in the interpolate_cubic function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1477105 [ 4 ] Bug #1385512 - CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701 CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple security issues [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1385512 -------------------------------------------------------------------------------- ================================================================================ sysusage-5.5-3.el7 (FEDORA-EPEL-2017-158cea28af) System monitoring based on Perl, rrdtool, and sysstat -------------------------------------------------------------------------------- Update Information: Unretire package and upgrade to new upstream version --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 07 Aug '17

07 Aug '17

The following Fedora EPEL 6 Security updates need testing: Age URL 761 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 755 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 645 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 617 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 227 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 123 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 25 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-515cca9a02 GraphicsMagick-1.3.26-3.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99fb0d61b0 chicken-4.12.0-3.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ab5ed7f894 python-tablib-0.11.5-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-70562ba4d2 python-django-ckeditor-5.3.0-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f4a2132f26 seamonkey-2.48-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-ftp-control-7.8-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.19-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gridftp-server-control-5.1-1.el6 globus-gssapi-gsi-12.17-3.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-72e0f4a914 php-horde-Horde-Core-2.30.0-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2a557f0b9c php-horde-Horde-Form-2.0.18-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3e60244bf3 php-horde-Horde-Url-2.2.6-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4340a6e0a8 php-horde-horde-5.2.16-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4654acd4ee php-horde-kronolith-4.2.22-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19c0b8ff89 php-horde-nag-4.2.15-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5b8e6e0279 php-horde-turba-4.2.20-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d015ef3016 gsoap-2.7.16-5.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-87be2d4d20 potrace-1.15-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing fusioninventory-agent-2.3.21-1.el6 potrace-1.15-1.el6 qpdf-5.1.1-4.el6 Details about builds: ================================================================================ fusioninventory-agent-2.3.21-1.el6 (FEDORA-EPEL-2017-a10b4719f7) FusionInventory agent -------------------------------------------------------------------------------- Update Information: Last upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477175 - fusioninventory-agent-2.3.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1477175 -------------------------------------------------------------------------------- ================================================================================ potrace-1.15-1.el6 (FEDORA-EPEL-2017-87be2d4d20) Transform bitmaps into vector graphics -------------------------------------------------------------------------------- Update Information: This release consists of bugfixes and minor portability improvements. Some potential buffer overflows and arithmetic overflows were fixed, including CVE-2017-12067. A bug triggered by very large bitmaps has been fixed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477104 - CVE-2017-12067 potrace: heap-based buffer over-read in the interpolate_cubic function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1477104 [ 2 ] Bug #1385513 - CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701 CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple security issues [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1385513 [ 3 ] Bug #1477105 - CVE-2017-12067 potrace: heap-based buffer over-read in the interpolate_cubic function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1477105 [ 4 ] Bug #1385512 - CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701 CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple security issues [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1385512 -------------------------------------------------------------------------------- ================================================================================ qpdf-5.1.1-4.el6 (FEDORA-EPEL-2017-d0ebce885c) Command-line tools and library for transforming PDF files -------------------------------------------------------------------------------- Update Information: revert previous commit --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Aug '17

07 Aug '17

The following Fedora EPEL 7 Security updates need testing: Age URL 882 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 644 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 226 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 124 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 122 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 121 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-47be021843 heimdal-7.4.0-1.el7 23 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.27-9.el7.1 cross-gcc-4.8.5-16.el7.1 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c39b9065fa GraphicsMagick-1.3.26-3.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c4e53cc90d chicken-4.12.0-3.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b39314b704 mingw-c-ares-1.13.0-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2c3a1062a0 seamonkey-2.48-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b50572c103 sscep-0.6.1-5.20160525git2052ee1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4908d32c3c python-dbusmock-0.11.1-6.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-017fbc40e8 supervisor-3.1.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-ftp-control-7.8-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.19-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gram-job-manager-condor-2.6-5.el7 globus-gridftp-server-12.2-1.el7 globus-gridftp-server-control-5.1-1.el7 globus-gssapi-gsi-12.17-3.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-37e736147d knot-2.5.3-2.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-94c168d702 php-horde-Horde-Core-2.30.0-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7d6b89ab36 php-horde-Horde-Form-2.0.18-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-359039e1f1 php-horde-Horde-Url-2.2.6-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-aebd466ffa php-horde-horde-5.2.16-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-531b8ee43e php-horde-kronolith-4.2.22-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-055fdcdee7 php-horde-nag-4.2.15-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bad0726ae5 php-horde-turba-4.2.20-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-886e003d48 gsoap-2.8.16-9.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-816da4b59a ReviewBoard-2.5.14-2.el7 python-djblets-0.9.9-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing bindfs-1.13.7-3.el7 cvechecker-3.8-1.el7 fedrepo-req-0.5.0-1.el7 google-api-python-client-1.6.2-2.el7 imaptest-20151005-1.el7 libdirq-0.5-1.el7 nrpe-3.2.0-6.el7 php-libvirt-0.5.4-1.el7 php-mikey179-vfsstream-1.6.5-1.el7 Details about builds: ================================================================================ bindfs-1.13.7-3.el7 (FEDORA-EPEL-2017-7a06f2ef26) Fuse filesystem to mirror a directory -------------------------------------------------------------------------------- Update Information: - Rebuilt for new upstream release, spec cleanup, fixes rhbz#1423275 - Fixes #1282073 RFE; Build for epel7 ---- Initial package for EPEL 7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282073 - RFE; Build for epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1282073 -------------------------------------------------------------------------------- ================================================================================ cvechecker-3.8-1.el7 (FEDORA-EPEL-2017-146693c8dc) Tool for compare packages installed in your system with CVE database -------------------------------------------------------------------------------- Update Information: Add cvechecker -------------------------------------------------------------------------------- ================================================================================ fedrepo-req-0.5.0-1.el7 (FEDORA-EPEL-2017-9af646d738) CLI for Fedora package repo requests -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1469331 - Review Request: fedrepo-req - A CLI tool that provides an easy way to submit ticket requests for packaging tasks in Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1469331 -------------------------------------------------------------------------------- ================================================================================ google-api-python-client-1.6.2-2.el7 (FEDORA-EPEL-2017-2f281be7ca) Google APIs Client Library for Python -------------------------------------------------------------------------------- Update Information: Update to 1.6.2 -------------------------------------------------------------------------------- ================================================================================ imaptest-20151005-1.el7 (FEDORA-EPEL-2017-0d0e8b766a) A generic IMAP server compliancy tester -------------------------------------------------------------------------------- Update Information: ImapTest 20151005 ================= * Connect to LMTP server using all of the IP addresses, not just the first. ImapTest 20151004 ================= * profile: When secs=n is used, stop all the clients immediately after that. * Instead of waiting for the client's next action timestamp. ImapTest 20151002 ================= * Don't create new random clients when running with profile. * The profile code is responsible for the client creations. ImapTest 20150831 ================= * tests: Added initial simple test for NOTIFY ImapTest 20150815 ================= * profile: Don't re-add users timeout back immediately * The user timestamp is normally suppose to be growing, so this maybe isn't exactly the right fix, but anyway more or less implements what is intended. The users' work should be done only once per second. ImapTest 20150811 ================= * Renamed username_prefix to username_format in profile.conf. This allows using e.g. %03n to add zero- padding. * Added users=n and domains=n parameters. So they're no longer hardcoded to 99. ImapTest 20150809 ================= * tests: Fixed BINARY tests to not use <partial> without the ".size" suffix. I seem to have always assumed that the .size was optional. ImapTest 20150619 ================= * test-parser: Allow giving full paths to test=directory. Patch by Bron Gondwana * Send CRLF instead of just LF after {literal+} ImapTest 20150612 ================= * Fixes to ctrl-c handling. We need to stop only when there are no IMAP and no LMTP clients. Also don't wait forever if there aren't actually any IMAP or LMTP clients at all at the time of ctrl-c. ImapTest 20150604 ================= * imaptest: Show earlier if some commands are stalling for over 3 secs. * Fixed test=<dir> - we need to free users between tests to reset mailbox_sources. This is a bit kludgy fix. I'm still not sure what's the right way to handle multiple mailbox_sources. * Added users_free_all() * mailbox_source refcounting fix. * Minor cleanup ImapTest 20150603 ================= * Give names to iostreams. * imaptest: Fixed test=<dir> to not complain about unexpected BYE * Fixed test=<dir> to append mails from the correct source mbox. ImapTest 20150524 ================= * imaptest: If secs=n timeout triggers twice, stop immediately. ImapTest 20150520 ================= * profile: Avoid excessive sorting of users. ImapTest 20150519 ================= * Free profile timeout at deinit * Avoid using one timeout per user - it was using way too much CPU. Simply tracking the next global timestamp (practically the next second always) and then sorting through the users seems to be fast enough. * Free user timeouts at deinit ImapTest 20150518 ================= * Fixed non-profile imaptest runs. * imap: Fixed unnecessary "Unexpected BYE" warnings ImapTest 20150517 ================= * profile: Enforce connection_max_count setting * profile: Fixed rampup time handling. * Added login_interval setting to profile (especially for POP3 users). * This also changes LMTP deliveries to be done to non-logged in users. * Added POP3 client support. Currently it's expected to be used with the profile parameter. See the included pop3-profile.conf * Initial commit for splitting struct client into a generic client and imap_client. Allowing other protocols to be implemented later on. Most of the code is still very IMAP-specific, but this give a starting point. * Removed unused code. ImapTest 20141030 ================= * Highlight latency lines if running on terminal. ImapTest 20140926 ================= * profile: Fixed to work with secs=n parameter ImapTest 20140925 ================= * Ignore SIGPIPE instead of killing ourself. * Log some messages on Ctrl-C * tests/esearch-condstore: We can't use ENABLE CONDSTORE in selected state * profile: Don't go to rapid login+logout loop. ImapTest 20140829 ================= * If COPY fails with NO [EXPUNGEISSUED], hide the error. Because it's not really an error, just expected behavior. -------------------------------------------------------------------------------- ================================================================================ libdirq-0.5-1.el7 (FEDORA-EPEL-2017-3e8b0eebcd) C implementation of the simple directory queue algorithm -------------------------------------------------------------------------------- Update Information: Upgraded to upstream version 0.5. -------------------------------------------------------------------------------- ================================================================================ nrpe-3.2.0-6.el7 (FEDORA-EPEL-2017-030b96c51c) Host/service/network monitoring agent for Nagios -------------------------------------------------------------------------------- Update Information: Found the problem. Fixed and ready to push ---- Put in fixes for 1204683,1318773,1467808,1467971,1469210 ---- Fix patch name. Silly human. Do a fedpkg srpm before build. ---- Fix bug due to /etc/nrpe.d/ includes was above other defined entries BZ# 1467971 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476298 - NRPE selinux module broken https://bugzilla.redhat.com/show_bug.cgi?id=1476298 [ 2 ] Bug #1204683 - check_ide_smart cannot be started by nrpe https://bugzilla.redhat.com/show_bug.cgi?id=1204683 [ 3 ] Bug #1318773 - nrpe.service sets User/Group, prevents normal .cfg user/group setting https://bugzilla.redhat.com/show_bug.cgi?id=1318773 [ 4 ] Bug #1467808 - Segfault when starting epel https://bugzilla.redhat.com/show_bug.cgi?id=1467808 [ 5 ] Bug #1467971 - Regression to Bug 963703 - nrpe.cfg sets config values after including user configuration https://bugzilla.redhat.com/show_bug.cgi?id=1467971 [ 6 ] Bug #1469210 - NRPE behavior changed, include_dir no longer overrides commands defined in /etc/nagios/nrpe.cfg https://bugzilla.redhat.com/show_bug.cgi?id=1469210 -------------------------------------------------------------------------------- ================================================================================ php-libvirt-0.5.4-1.el7 (FEDORA-EPEL-2017-6fa8ff9701) PHP language bindings for Libvirt -------------------------------------------------------------------------------- Update Information: Upgrade to 0.5.4 -------------------------------------------------------------------------------- ================================================================================ php-mikey179-vfsstream-1.6.5-1.el7 (FEDORA-EPEL-2017-4e273e9e72) PHP stream wrapper for a virtual file system -------------------------------------------------------------------------------- Update Information: **Version 1.6.5** (2017-08-01) * fixed #157 seeking before beginning of file should fail, reported and fixed by merijnvdk * structure array in `vfsStream::create()` and `vfsStream::setup()` now can contain instances of `org\bovigo\vfs\content\FileContent` and `org\bovigo\vfs\vfsStreamFile`, patch provided by Joshua Smith (jsmitty12) --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 06 Aug '17

06 Aug '17

The following Fedora EPEL 6 Security updates need testing: Age URL 760 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 754 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 644 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 616 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 226 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 122 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-515cca9a02 GraphicsMagick-1.3.26-3.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99fb0d61b0 chicken-4.12.0-3.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ab5ed7f894 python-tablib-0.11.5-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-70562ba4d2 python-django-ckeditor-5.3.0-1.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f4a2132f26 seamonkey-2.48-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-ftp-control-7.8-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.19-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gridftp-server-control-5.1-1.el6 globus-gssapi-gsi-12.17-3.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-72e0f4a914 php-horde-Horde-Core-2.30.0-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2a557f0b9c php-horde-Horde-Form-2.0.18-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3e60244bf3 php-horde-Horde-Url-2.2.6-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4340a6e0a8 php-horde-horde-5.2.16-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4654acd4ee php-horde-kronolith-4.2.22-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19c0b8ff89 php-horde-nag-4.2.15-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5b8e6e0279 php-horde-turba-4.2.20-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d015ef3016 gsoap-2.7.16-5.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-cbc54495c7 qpdf-5.1.1-3.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-22a20c457f libarchive3-3.3.1-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing libarchive3-3.3.1-1.el6 nrpe-3.2.0-6.el6 Details about builds: ================================================================================ libarchive3-3.3.1-1.el6 (FEDORA-EPEL-2017-22a20c457f) A library for handling streaming archive formats -------------------------------------------------------------------------------- Update Information: - Update to 3.3.1 - Drop obsolete patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #1449532 - CVE-2016-10349 CVE-2016-10350 libarchive3: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1449532 [ 2 ] Bug #1439704 - CVE-2016-10209 libarchive3: libarchive: NULL pointer dereference in archive_wstring_append_from_mbs function [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1439704 [ 3 ] Bug #1417917 - CVE-2017-5601 libarchive: Out of bounds read in lha_read_file_header_1() function [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1417917 [ 4 ] Bug #1385676 - CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 libarchive3: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1385676 [ 5 ] Bug #1375280 - CVE-2016-5418 libarchive3: libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1375280 -------------------------------------------------------------------------------- ================================================================================ nrpe-3.2.0-6.el6 (FEDORA-EPEL-2017-bb989d629b) Host/service/network monitoring agent for Nagios -------------------------------------------------------------------------------- Update Information: Found the problem. Fixed and ready to push ---- Put in fix for 1204683 ---- Fix patch name. Silly human. Do a fedpkg srpm before build. ---- Fix bug due to /etc/nrpe.d/ includes was above other defined entries BZ# 1467971 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476298 - NRPE selinux module broken https://bugzilla.redhat.com/show_bug.cgi?id=1476298 [ 2 ] Bug #1204683 - check_ide_smart cannot be started by nrpe https://bugzilla.redhat.com/show_bug.cgi?id=1204683 [ 3 ] Bug #1318773 - nrpe.service sets User/Group, prevents normal .cfg user/group setting https://bugzilla.redhat.com/show_bug.cgi?id=1318773 [ 4 ] Bug #1467808 - Segfault when starting epel https://bugzilla.redhat.com/show_bug.cgi?id=1467808 [ 5 ] Bug #1467971 - Regression to Bug 963703 - nrpe.cfg sets config values after including user configuration https://bugzilla.redhat.com/show_bug.cgi?id=1467971 [ 6 ] Bug #1469210 - NRPE behavior changed, include_dir no longer overrides commands defined in /etc/nagios/nrpe.cfg https://bugzilla.redhat.com/show_bug.cgi?id=1469210 --------------------------------------------------------------------------------

1 0

Stub python packages for EPEL
by Jason L Tibbitts III 05 Aug '17

05 Aug '17

One of things I've invested some time towards over the years is cutting down on the amount of %if spaghetti needed to share spec files between Fedora and EPEL. Earlier in the discussion about the mass python-X -> python2-X move I volunteered to maintain a number of "stub packages" in EPEL which have the sole purpose of letting packagers uniformly have dependencies on python2-X. A couple of people told me they thought I was being facetious, so I wanted to try again and assure everyone that I was indeed serious. Here's a rough, in-progress draft: https://fedoraproject.org/wiki/User:Tibbs/EPELPythonStubPackages Basically: create some EPEL-specific python2-X packages that do nothing besides depend on the base RHEL python-X packages. If anyone can think of a reason why this would be problematic, please let me know. I'm especially concerned about situations where the existence of these packages could cause problems for RHEL. I've tried to be careful about detailing how version and release would be maintained and how the dependencies will be versioned so that RHEL can be updated without the EPEL package being immediately updated to match. - J<

2 3

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 04 Aug '17

04 Aug '17

The following Fedora EPEL 6 Security updates need testing: Age URL 758 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 752 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 642 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 614 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 224 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 120 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 22 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-515cca9a02 GraphicsMagick-1.3.26-3.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99fb0d61b0 chicken-4.12.0-3.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ab5ed7f894 python-tablib-0.11.5-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-70562ba4d2 python-django-ckeditor-5.3.0-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f4a2132f26 seamonkey-2.48-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9 globus-ftp-client-8.36-1.el6 globus-ftp-control-7.8-1.el6 globus-gass-cache-program-6.7-1.el6 globus-gass-copy-9.27-1.el6 globus-gram-client-13.19-1.el6 globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6 globus-gridftp-server-12.2-1.el6 globus-gridftp-server-control-5.1-1.el6 globus-gssapi-gsi-12.17-3.el6 globus-io-11.9-1.el6 globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6 globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-72e0f4a914 php-horde-Horde-Core-2.30.0-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2a557f0b9c php-horde-Horde-Form-2.0.18-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3e60244bf3 php-horde-Horde-Url-2.2.6-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4340a6e0a8 php-horde-horde-5.2.16-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4654acd4ee php-horde-kronolith-4.2.22-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19c0b8ff89 php-horde-nag-4.2.15-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5b8e6e0279 php-horde-turba-4.2.20-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d015ef3016 gsoap-2.7.16-5.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-cbc54495c7 qpdf-5.1.1-3.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing libdirq-0.5-1.el6 Details about builds: ================================================================================ libdirq-0.5-1.el6 (FEDORA-EPEL-2017-cef1a3c96f) C implementation of the simple directory queue algorithm -------------------------------------------------------------------------------- Update Information: Upgraded to upstream version 0.5. --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel August 2017