epel-devel February 2018

epel-devel@lists.fedoraproject.org

12 participants
55 discussions

[Fedocal] Reminder meeting : EPEL Steering Committee
by smooge＠fedoraproject.org 20 Feb '18

20 Feb '18

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2018-02-21 from 18:00:00 to 19:00:00 GMT At fedora-meeting(a)irc.freenode.net The meeting will be about: The EPEL Steering Committee will have a weekly meeting to cover current tasks and problems needed to keep EPEL going. Source: https://apps.fedoraproject.org/calendar/meeting/8724/

1 0

Intent to update openjpeg2 from 2.1.0 to 2.3.0
by Richard Shaw 20 Feb '18

20 Feb '18

Openjpeg2 has MANY CVE bugs reported against it and most are fixed with the current release. I have run abi-compliance-checker on the packages and it shows 100% binary compatibility so there should not be a problem. Thanks, Richard

2 1

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 20 Feb '18

20 Feb '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1079 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 842 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 424 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 321 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 153 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 40 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-069884a87f p7zip-16.02-10.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-72e5d3ef89 suricata-4.0.4-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-276ec6ee2b exim-4.90.1-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e50c94a832 seamonkey-2.49.2-2.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-525417d3d4 mbedtls-2.7.0-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cee77fc9b3 knot-resolver-2.1.0-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing adapta-gtk-theme-3.93.0.119-1.el7 boinc-client-7.9.2-2.el7 dislocker-0.7.1-7.el7 dpm-contrib-admintools-0.2.4-1.el7 libdvbpsi-1.3.2-1.el7 openjpeg2-2.3.0-6.el7 perl-IO-Socket-Socks-0.74-2.el7 perl-Locale-Maketext-Lexicon-1.00-14.el7 perl-Text-Haml-0.990118-5.el7 php-phpseclib-2.0.10-1.el7 root-6.12.06-1.el7 rpkg-client-0.14-1.el7 strongswan-5.6.1-2.el7 zerofree-1.1.1-1.el7 Details about builds: ================================================================================ adapta-gtk-theme-3.93.0.119-1.el7 (FEDORA-EPEL-2018-8a525972e5) An adaptive Gtk+ theme based on Material Design Guidelines -------------------------------------------------------------------------------- Update Information: - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1544740 - adapta-gtk-theme-3.93.0.119 is available https://bugzilla.redhat.com/show_bug.cgi?id=1544740 -------------------------------------------------------------------------------- ================================================================================ boinc-client-7.9.2-2.el7 (FEDORA-EPEL-2018-7ed58d7254) The BOINC client -------------------------------------------------------------------------------- Update Information: New upstream release of the BOINC client + added fix for #1494241 "Use mariadb- connector-c instead of mysql-libs or mariadb-libs" -------------------------------------------------------------------------------- References: [ 1 ] Bug #1494241 - Use mariadb-connector-c instead of mysql-libs or mariadb-libs https://bugzilla.redhat.com/show_bug.cgi?id=1494241 -------------------------------------------------------------------------------- ================================================================================ dislocker-0.7.1-7.el7 (FEDORA-EPEL-2018-c0d4c9a3a1) Utility to access BitLocker encrypted volumes -------------------------------------------------------------------------------- Update Information: - Rebuilt for mbed TLS 2.7.0 -------------------------------------------------------------------------------- ================================================================================ dpm-contrib-admintools-0.2.4-1.el7 (FEDORA-EPEL-2018-c051725b3d) DPM administration toolkit (contrib from GridPP) -------------------------------------------------------------------------------- Update Information: * new upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1545172 - dpm-contrib-admintools is using arch-dependent BuildRequires https://bugzilla.redhat.com/show_bug.cgi?id=1545172 -------------------------------------------------------------------------------- ================================================================================ libdvbpsi-1.3.2-1.el7 (FEDORA-EPEL-2018-808885803c) Library for MPEG TS and DVB PSI tables decoding and generation -------------------------------------------------------------------------------- Update Information: The 1.3.2 bugfix release of libdvbpsi is available. It resolves several descriptor bugs. Changes between 1.3.1 and 1.3.2: * Fix bug in dvbpsi_decoder_psi_section_add() set i_last_section_number * Fix bug in descriptor 0x8a that prevented it from being parsed properly * Fix bug in descriptor 0x56 generation with multiple teletext page entries * Fix bug in descriptor 0x41 correct maximum service count -------------------------------------------------------------------------------- ================================================================================ openjpeg2-2.3.0-6.el7 (FEDORA-EPEL-2018-b7a74678b1) C-Library for JPEG 2000 -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-8332 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 and many others. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1487393 - CVE-2017-14151 CVE-2017-14152 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487393 [ 2 ] Bug #1487381 - CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487381 [ 3 ] Bug #1418152 - CVE-2016-9112 openjpeg2: Floating point exception vulnerability in openjpeg2 when processing untrusted images [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1418152 [ 4 ] Bug #1335486 - CVE-2016-4796 CVE-2016-4797 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1335486 [ 5 ] Bug #1487769 - CVE-2017-14039 CVE-2017-14164 CVE-2017-17479 CVE-2017-17480 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487769 [ 6 ] Bug #1487366 - CVE-2017-14040 CVE-2017-14041 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487366 [ 7 ] Bug #1435069 - CVE-2016-9573 openjpeg2: openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm() [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1435069 [ 8 ] Bug #1422754 - CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg2: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1422754 [ 9 ] Bug #1422753 - CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg2: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1422753 [ 10 ] Bug #1405140 - CVE-2016-9580 CVE-2016-9581 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1405140 [ 11 ] Bug #1402722 - CVE-2016-9573 CVE-2016-9572 openjpeg2: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1402722 [ 12 ] Bug #1377771 - CVE-2016-1923 CVE-2016-1924 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1377771 [ 13 ] Bug #1381271 - CVE-2016-8332 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1381271 [ 14 ] Bug #1377348 - CVE-2016-7445 openjpeg2: Null pointer dereference in convert.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1377348 [ 15 ] Bug #1374343 - CVE-2016-7163 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1374343 [ 16 ] Bug #1335773 - CVE-2015-8871 openjpeg2: openjpeg: Use-after-free in opj_j2k_write_mco function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1335773 [ 17 ] Bug #1317832 - CVE-2016-3181 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1317832 -------------------------------------------------------------------------------- ================================================================================ perl-IO-Socket-Socks-0.74-2.el7 (FEDORA-EPEL-2018-47c3d57d25) Provides a way to create socks (4 or 5) client or server -------------------------------------------------------------------------------- Update Information: This is the first Fedora/EPEL release of perl-IO-Socket-Socks. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1546648 - Review Request: perl-IO-Socket-Socks - Provides a way to create socks (4 or 5) client or server https://bugzilla.redhat.com/show_bug.cgi?id=1546648 -------------------------------------------------------------------------------- ================================================================================ perl-Locale-Maketext-Lexicon-1.00-14.el7 (FEDORA-EPEL-2018-3b856ae7a7) Extract translatable strings from source -------------------------------------------------------------------------------- Update Information: Remove NO_PACKLIST for EPEL -------------------------------------------------------------------------------- References: [ 1 ] Bug #1542721 - Please provide a package for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1542721 -------------------------------------------------------------------------------- ================================================================================ perl-Text-Haml-0.990118-5.el7 (FEDORA-EPEL-2018-3d4ca5935a) Haml Perl implementation -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ php-phpseclib-2.0.10-1.el7 (FEDORA-EPEL-2018-65fe0f969c) PHP Secure Communications Library -------------------------------------------------------------------------------- Update Information: **Version 2.0.10** - 2018-02-08 - BigInteger: fix issue with bitwise_xor (#1245) - Crypt: some of the minimum lengths were off - SFTP: update stat cache accordingly when file becomes a directory (#1235) - SFTP: fix issue with extended attributes on 64-bit PHP installs (#1248) - SSH2: more channel handling updates (#1200) - X509: use anonymous functions in PHP >= 5.3.0 - X509: revise logic for validateLogic (#1213) - X509: fix 7.2 error when extensions were removed and new ones added (#1243) - fix float to int conversions on ARM CPU's (#1220) -------------------------------------------------------------------------------- ================================================================================ root-6.12.06-1.el7 (FEDORA-EPEL-2018-9cadc17977) Numerical data analysis framework -------------------------------------------------------------------------------- Update Information: Update to root 6.12.06. https://root.cern.ch/content/release-61206 -------------------------------------------------------------------------------- ================================================================================ rpkg-client-0.14-1.el7 (FEDORA-EPEL-2018-6c1b2e0f34) RPM packaging utitility -------------------------------------------------------------------------------- Update Information: - fix error when redownloading sources - do not invoke parent's module_name in load_ns_module_name - fix python builddeps naming -------------------------------------------------------------------------------- ================================================================================ strongswan-5.6.1-2.el7 (FEDORA-EPEL-2018-2eeab01942) An OpenSource IPsec-based VPN and TNC solution -------------------------------------------------------------------------------- Update Information: Updated to 5.6.1 (major upgrade) -------------------------------------------------------------------------------- ================================================================================ zerofree-1.1.1-1.el7 (FEDORA-EPEL-2018-7f6f68003e) Utility to force unused ext2/3/4 inodes and blocks to zero -------------------------------------------------------------------------------- Update Information: zerofree 1.1.1 ============== * 2017-02-22: Lift call to ext2fs_free_blocks_count out of loop. Suggested by Thanassis Tsiodras. zerofree 1.1.0 ============== * 2016-02-18: Add support for 64-bit block numbers. * 2015-10-18: Use memcmp. Suggested by Damien Clark. --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 20 Feb '18

20 Feb '18

The following Fedora EPEL 6 Security updates need testing: Age URL 952 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 842 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 813 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 424 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 153 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 72 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 44 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 39 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bc1949f307 p7zip-16.02-10.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be69c94866 clamav-0.99.3-8.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-87b20f1b26 exim-4.90.1-2.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-76121890f9 seamonkey-2.49.2-2.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c8346d8e5 mbedtls-2.7.0-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing dislocker-0.7.1-7.el6 dpm-contrib-admintools-0.2.4-1.el6 openjpeg2-2.3.0-6.el6 php-phpseclib-2.0.10-2.el6 zerofree-1.1.1-1.el6 Details about builds: ================================================================================ dislocker-0.7.1-7.el6 (FEDORA-EPEL-2018-3f5982aa74) Utility to access BitLocker encrypted volumes -------------------------------------------------------------------------------- Update Information: - Rebuilt for mbed TLS 2.7.0 -------------------------------------------------------------------------------- ================================================================================ dpm-contrib-admintools-0.2.4-1.el6 (FEDORA-EPEL-2018-afd955e947) DPM administration toolkit (contrib from GridPP) -------------------------------------------------------------------------------- Update Information: * new upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1545172 - dpm-contrib-admintools is using arch-dependent BuildRequires https://bugzilla.redhat.com/show_bug.cgi?id=1545172 -------------------------------------------------------------------------------- ================================================================================ openjpeg2-2.3.0-6.el6 (FEDORA-EPEL-2018-6ac908eac8) C-Library for JPEG 2000 -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-8332 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 and many others. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1487393 - CVE-2017-14151 CVE-2017-14152 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487393 [ 2 ] Bug #1487381 - CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487381 [ 3 ] Bug #1418152 - CVE-2016-9112 openjpeg2: Floating point exception vulnerability in openjpeg2 when processing untrusted images [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1418152 [ 4 ] Bug #1335486 - CVE-2016-4796 CVE-2016-4797 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1335486 [ 5 ] Bug #1487769 - CVE-2017-14039 CVE-2017-14164 CVE-2017-17479 CVE-2017-17480 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487769 [ 6 ] Bug #1487366 - CVE-2017-14040 CVE-2017-14041 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487366 [ 7 ] Bug #1435069 - CVE-2016-9573 openjpeg2: openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm() [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1435069 [ 8 ] Bug #1422754 - CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg2: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1422754 [ 9 ] Bug #1422753 - CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg2: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1422753 [ 10 ] Bug #1405140 - CVE-2016-9580 CVE-2016-9581 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1405140 [ 11 ] Bug #1402722 - CVE-2016-9573 CVE-2016-9572 openjpeg2: various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1402722 [ 12 ] Bug #1377771 - CVE-2016-1923 CVE-2016-1924 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1377771 [ 13 ] Bug #1381271 - CVE-2016-8332 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1381271 [ 14 ] Bug #1377348 - CVE-2016-7445 openjpeg2: Null pointer dereference in convert.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1377348 [ 15 ] Bug #1374343 - CVE-2016-7163 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1374343 [ 16 ] Bug #1335773 - CVE-2015-8871 openjpeg2: openjpeg: Use-after-free in opj_j2k_write_mco function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1335773 [ 17 ] Bug #1317832 - CVE-2016-3181 openjpeg2: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1317832 -------------------------------------------------------------------------------- ================================================================================ php-phpseclib-2.0.10-2.el6 (FEDORA-EPEL-2018-0c0daea4e3) PHP Secure Communications Library -------------------------------------------------------------------------------- Update Information: **Version 2.0.10** - 2018-02-08 - BigInteger: fix issue with bitwise_xor (#1245) - Crypt: some of the minimum lengths were off - SFTP: update stat cache accordingly when file becomes a directory (#1235) - SFTP: fix issue with extended attributes on 64-bit PHP installs (#1248) - SSH2: more channel handling updates (#1200) - X509: use anonymous functions in PHP >= 5.3.0 - X509: revise logic for validateLogic (#1213) - X509: fix 7.2 error when extensions were removed and new ones added (#1243) - fix float to int conversions on ARM CPU's (#1220) -------------------------------------------------------------------------------- ================================================================================ zerofree-1.1.1-1.el6 (FEDORA-EPEL-2018-c164420664) Utility to force unused ext2/3/4 inodes and blocks to zero -------------------------------------------------------------------------------- Update Information: zerofree 1.1.1 ============== * 2017-02-22: Lift call to ext2fs_free_blocks_count out of loop. Suggested by Thanassis Tsiodras. zerofree 1.1.0 ============== * 2016-02-18: Add support for 64-bit block numbers. * 2015-10-18: Use memcmp. Suggested by Damien Clark. --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 19 Feb '18

19 Feb '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1078 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 841 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 423 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 320 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 152 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 39 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-069884a87f p7zip-16.02-10.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-72e5d3ef89 suricata-4.0.4-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-276ec6ee2b exim-4.90.1-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e50c94a832 seamonkey-2.49.2-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beecrypt-4.2.1-20.el7 boinc-client-7.9.2-1.el7 cmrt-1.0.6-7.el7 dislocker-0.7.1-6.el7 dist-git-1.6-1.el7 drbdlinks-1.28-3.el7 f2c-20160102-1.el7 fedrepo-req-1.11.1-1.el7 knot-resolver-2.1.0-1.el7 ldapvi-1.7-29.el7 mbedtls-2.7.0-1.el7 perl-Data-Float-0.013-2.el7 pwkickstart-1.0.2-3.el7 python-certbot-dns-digitalocean-0.21.1-1.el7 python-cloudflare-2.0.4-1.el7 spectre-meltdown-checker-0.35-1.el7 ucx-1.2.2-1.el7 Details about builds: ================================================================================ beecrypt-4.2.1-20.el7 (FEDORA-EPEL-2018-2cf57e0262) An open source cryptography library -------------------------------------------------------------------------------- Update Information: Update python 2 dependency declarations to new packaging standards, see https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 -------------------------------------------------------------------------------- ================================================================================ boinc-client-7.9.2-1.el7 (FEDORA-EPEL-2018-7ed58d7254) The BOINC client -------------------------------------------------------------------------------- Update Information: New upstream release of the BOINC client -------------------------------------------------------------------------------- ================================================================================ cmrt-1.0.6-7.el7 (FEDORA-EPEL-2018-c974ef14ee) C for Media Runtime -------------------------------------------------------------------------------- Update Information: Add missing BR for gcc-c++ -------------------------------------------------------------------------------- ================================================================================ dislocker-0.7.1-6.el7 (FEDORA-EPEL-2018-c0d4c9a3a1) Utility to access BitLocker encrypted volumes -------------------------------------------------------------------------------- Update Information: - Rebuilt for mbed TLS 2.7.0 -------------------------------------------------------------------------------- ================================================================================ dist-git-1.6-1.el7 (FEDORA-EPEL-2018-50a505e816) Package source version control system -------------------------------------------------------------------------------- Update Information: - add 'fedmsgs', 'old_paths', and 'default_namespace' config options - remove domain_read_all_domains_state SELinux rule - require dist-git-selinux - give optional map permission to git_system_t on git_user_content_t - update requires to work for all environments - make the package completely distribution-agnostic -------------------------------------------------------------------------------- ================================================================================ drbdlinks-1.28-3.el7 (FEDORA-EPEL-2018-aff2d15cc3) Program for managing links into a DRBD shared partition -------------------------------------------------------------------------------- Update Information: - Update python 2 dependency declarations to new packaging standards, see https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 -------------------------------------------------------------------------------- ================================================================================ f2c-20160102-1.el7 (FEDORA-EPEL-2018-a5d0d7f603) A Fortran 77 to C/C++ conversion program -------------------------------------------------------------------------------- Update Information: Update to 20160102. -------------------------------------------------------------------------------- ================================================================================ fedrepo-req-1.11.1-1.el7 (FEDORA-EPEL-2018-059175a818) CLI for Fedora package repo requests -------------------------------------------------------------------------------- Update Information: The admin tool now casts the incoming bug IDs as strings (fixes a bug that occurs when the incoming bug ID is an integer). ---- Adds a deprecation warning and tells users to use `fedpkg` instead. -------------------------------------------------------------------------------- ================================================================================ knot-resolver-2.1.0-1.el7 (FEDORA-EPEL-2018-cee77fc9b3) Caching full DNS Resolver -------------------------------------------------------------------------------- Update Information: Knot Resolver 2.1.0 (2018-02-16) ================================ Incompatible changes -------------------- - stats: remove tracking of expiring records (predict uses another way) - systemd: re-use a single kresd.socket and kresd- tls.socket - ta_sentinel: implement protocol draft-ietf-dnsop-kskroll- sentinel-01 (our draft-ietf-dnsop-kskroll-sentinel-00 implementation had inverted logic) - libknot: require version 2.6.4 or newer to get bugfixes for DNS-over-TLS Bugfixes -------- - detect_time_jump module: don't clear cache on suspend-resume (#284) - stats module: fix stats.list() returning nothing, regressed in 2.0.0 - policy.TLS_FORWARD: refusal when configuring with multiple IPs (#306) - cache: fix broken refresh of insecure records that were about to expire - fix the hints module on some systems, e.g. Fedora (came back on 2.0.0) - build with older gnutls (conditionally disable features) - fix the predict module to work with insecure records & cleanup code Knot Resolver 2.0.0 (2018-01-31) ================================ Incompatible changes -------------------- - systemd: change unit files to allow running multiple instances, deployments with single instance now must use `kresd(a)1.service` instead of `kresd.service`; see kresd.systemd(7) for details - systemd: the directory for cache is now /var/cache/knot-resolver - unify default directory and user to `knot-resolver` - directory with trust anchor file specified by -k option must be writeable - policy module is now loaded by default to enforce RFC 6761; see documentation for policy.PASS if you use locally-served DNS zones - drop support for alternative cache backends memcached, redis, and for Lua bindings for some specific cache operations - REORDER_RR option is not implemented (temporarily) New features ------------ - aggressive caching of validated records (RFC 8198) for NSEC zones; thanks to ICANN for sponsoring this work. - forwarding over TLS, authenticated by SPKI pin or certificate. policy.TLS_FORWARD pipelines queries out-of-order over shared TLS connection Beware: Some resolvers do not support out-of-order query processing. TLS forwarding to such resolvers will lead to slower resolution or failures. - trust anchors: you may specify a read-only file via -K or --keyfile-ro - trust anchors: at build-time you may set KEYFILE_DEFAULT (read-only) - ta_sentinel module implements draft ietf-dnsop-kskroll-sentinel-00, enabled by default - serve_stale module is prototype, subject to change - extended API for Lua modules Bugfixes -------- - fix build on osx - regressed in 1.5.3 (different linker option name) ---- Knot Resolver 1.5.3 (2018-01-23) ================================ Bugfixes -------- - fix the hints module on some systems, e.g. Fedora. Symptom: `undefined symbol: engine_hint_root_file` Knot Resolver 1.5.2 (2018-01-22) ================================ Security -------- - fix CVE-2018-1000002: insufficient DNSSEC validation, allowing attackers to deny existence of some data by forging packets. Some combinations pointed out in RFC 6840 sections 4.1 and 4.3 were not taken into account. Bugfixes -------- - memcached: fix fallout from module rename in 1.5.1 Knot Resolver 1.5.1 (2017-12-12) ================================ Incompatible changes -------------------- - script supervisor.py was removed, please migrate to a real process manager - module ketcd was renamed to etcd for consistency - module kmemcached was renamed to memcached for consistency Bugfixes -------- - fix SIGPIPE crashes (#271) - tests: work around out-of-space for platforms with larger memory pages - lua: fix mistakes in bindings affecting 1.4.0 and 1.5.0 (and 1.99.1-alpha), potentially causing problems in dns64 and workarounds modules - predict module: various fixes (!399) Improvements ------------ - add priming module to implement RFC 8109, enabled by default (#220) - add modules helping with system time problems, enabled by default; for details see documentation of detect_time_skew and detect_time_jump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1537462 - CVE-2018-1000002 knot-resolver: Insufficient DNSSEC validation https://bugzilla.redhat.com/show_bug.cgi?id=1537462 -------------------------------------------------------------------------------- ================================================================================ ldapvi-1.7-29.el7 (FEDORA-EPEL-2018-6a0e112717) An interactive LDAP client -------------------------------------------------------------------------------- Update Information: First build for EPEL7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1236778 - Ldapvi is not yet packaged or available for EL7 https://bugzilla.redhat.com/show_bug.cgi?id=1236778 -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.7.0-1.el7 (FEDORA-EPEL-2018-525417d3d4) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.7.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.7.0-2.1.10-and-1.3.22-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2018-01 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1544730 - CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 mbedtls: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1544730 -------------------------------------------------------------------------------- ================================================================================ perl-Data-Float-0.013-2.el7 (FEDORA-EPEL-2018-c1d675a7fe) Details of the floating point data type -------------------------------------------------------------------------------- Update Information: This package provides details of the Perl floating point data type. -------------------------------------------------------------------------------- References: [ 1 ] Bug #919110 - Review Request: perl-Data-Float - Details of the floating point data type https://bugzilla.redhat.com/show_bug.cgi?id=919110 -------------------------------------------------------------------------------- ================================================================================ pwkickstart-1.0.2-3.el7 (FEDORA-EPEL-2018-3053770bc1) Helps to generate kickstart passwords -------------------------------------------------------------------------------- Update Information: Password kickstart generator -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543813 - Review Request: pwkickstart - generate kickstart passwords https://bugzilla.redhat.com/show_bug.cgi?id=1543813 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-digitalocean-0.21.1-1.el7 (FEDORA-EPEL-2018-a0cef0c53f) DigitalOcean DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Initial package of python-certbot-dns-digitalocean -------------------------------------------------------------------------------- References: [ 1 ] Bug #1545969 - Review Request: python-certbot-dns-digitalocean - DigitalOcean DNS Authenticator plugin for Certbot https://bugzilla.redhat.com/show_bug.cgi?id=1545969 -------------------------------------------------------------------------------- ================================================================================ python-cloudflare-2.0.4-1.el7 (FEDORA-EPEL-2018-234443e846) Python wrapper for the Cloudflare Client API v4 -------------------------------------------------------------------------------- Update Information: Initial package of python-cloudflare -------------------------------------------------------------------------------- References: [ 1 ] Bug #1546297 - Review Request: python-cloudflare - Python wrapper for the Cloudflare Client API v4 https://bugzilla.redhat.com/show_bug.cgi?id=1546297 -------------------------------------------------------------------------------- ================================================================================ spectre-meltdown-checker-0.35-1.el7 (FEDORA-EPEL-2018-96f5413796) Spectre & Meltdown vulnerability/mitigation checker for Linux -------------------------------------------------------------------------------- Update Information: Update to 0.35 - Feature: correctly detect specific Red Hat/Ubuntu patch for Spectre Variant 1 - Update: new list of blacklisted microcodes (from Intel document) - Enhancement: detect disrepancy between found kernel image and running kernel - Enhancement: speed up execution by not decompressing kernel in --sysfs-only mode - Enhancement: find images installed by systemd kernel-install - Enhancement: better explanation when kernel supports IBRS but CPU doesn't - Misc: other minor changes and bugfixes -------------------------------------------------------------------------------- ================================================================================ ucx-1.2.2-1.el7 (FEDORA-EPEL-2018-b1a3ad29aa) A communication library implementing high-performance messaging -------------------------------------------------------------------------------- Update Information: Initial submit --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 19 Feb '18

19 Feb '18

The following Fedora EPEL 6 Security updates need testing: Age URL 951 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 841 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 812 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 423 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 152 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 71 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 43 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 38 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc6e2820ab tomcat-7.0.84-1.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bc1949f307 p7zip-16.02-10.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be69c94866 clamav-0.99.3-8.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-87b20f1b26 exim-4.90.1-2.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-76121890f9 seamonkey-2.49.2-2.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing beecrypt-4.2.1-20.el6 dislocker-0.7.1-6.el6 drbdlinks-1.28-3.el6 mbedtls-2.7.0-1.el6 spectre-meltdown-checker-0.35-1.el6 Details about builds: ================================================================================ beecrypt-4.2.1-20.el6 (FEDORA-EPEL-2018-2f1390d19c) An open source cryptography library -------------------------------------------------------------------------------- Update Information: Update python 2 dependency declarations to new packaging standards, see https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 -------------------------------------------------------------------------------- ================================================================================ dislocker-0.7.1-6.el6 (FEDORA-EPEL-2018-3f5982aa74) Utility to access BitLocker encrypted volumes -------------------------------------------------------------------------------- Update Information: - Rebuilt for mbed TLS 2.7.0 -------------------------------------------------------------------------------- ================================================================================ drbdlinks-1.28-3.el6 (FEDORA-EPEL-2018-627f98033d) Program for managing links into a DRBD shared partition -------------------------------------------------------------------------------- Update Information: - Update python 2 dependency declarations to new packaging standards, see https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.7.0-1.el6 (FEDORA-EPEL-2018-3c8346d8e5) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.7.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.7.0-2.1.10-and-1.3.22-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2018-01 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1544730 - CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 mbedtls: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1544730 -------------------------------------------------------------------------------- ================================================================================ spectre-meltdown-checker-0.35-1.el6 (FEDORA-EPEL-2018-391b77a353) Spectre & Meltdown vulnerability/mitigation checker for Linux -------------------------------------------------------------------------------- Update Information: Update to 0.35 - Feature: correctly detect specific Red Hat/Ubuntu patch for Spectre Variant 1 - Update: new list of blacklisted microcodes (from Intel document) - Enhancement: detect disrepancy between found kernel image and running kernel - Enhancement: speed up execution by not decompressing kernel in --sysfs-only mode - Enhancement: find images installed by systemd kernel-install - Enhancement: better explanation when kernel supports IBRS but CPU doesn't - Misc: other minor changes and bugfixes --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 18 Feb '18

18 Feb '18

The following Fedora EPEL 6 Security updates need testing: Age URL 950 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 840 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 812 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 422 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 151 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 71 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 43 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 37 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc6e2820ab tomcat-7.0.84-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bc1949f307 p7zip-16.02-10.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be69c94866 clamav-0.99.3-8.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-87b20f1b26 exim-4.90.1-2.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing libidn2-2.0.4-3.el6 percolator-3.02.00-1.el6 seamonkey-2.49.2-2.el6 Details about builds: ================================================================================ libidn2-2.0.4-3.el6 (FEDORA-EPEL-2018-8651f03a5a) Library to support IDNA2008 internationalized domain names -------------------------------------------------------------------------------- Update Information: - Added upstream patch to fix STD3 ASCII rules (#1543021) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543021 - libidn2: Guidance needed for avoiding STD3 rules https://bugzilla.redhat.com/show_bug.cgi?id=1543021 -------------------------------------------------------------------------------- ================================================================================ percolator-3.02.00-1.el6 (FEDORA-EPEL-2018-9bd0b4a689) Software for postprocessing of shotgun proteomics data -------------------------------------------------------------------------------- Update Information: - Update to 3.02.0 - Drop old patches - Link to libtirpc on fedora -------------------------------------------------------------------------------- ================================================================================ seamonkey-2.49.2-2.el6 (FEDORA-EPEL-2018-76121890f9) Web browser, e-mail, news, IRC client, HTML editor -------------------------------------------------------------------------------- Update Information: Update to 2.49.2 Based on the Firefox/Thunderbird ESR (extension support release) code version 52.6.1 Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ and https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ for more info. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1545970 - seamonkey-2.49.2.source is available https://bugzilla.redhat.com/show_bug.cgi?id=1545970 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 18 Feb '18

18 Feb '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1077 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 840 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 422 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 319 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 151 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 38 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-069884a87f p7zip-16.02-10.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-72e5d3ef89 suricata-4.0.4-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-276ec6ee2b exim-4.90.1-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing ddupdate-0.6.0-2.el7 libidn2-2.0.4-3.el7 percolator-3.02.00-1.el7 python-biopython-1.70-10.el7 seamonkey-2.49.2-2.el7 Details about builds: ================================================================================ ddupdate-0.6.0-2.el7 (FEDORA-EPEL-2018-842be2e212) Tool updating DNS data for dynamic IP addresses -------------------------------------------------------------------------------- Update Information: New package in epel -------------------------------------------------------------------------------- ================================================================================ libidn2-2.0.4-3.el7 (FEDORA-EPEL-2018-823d88dfeb) Library to support IDNA2008 internationalized domain names -------------------------------------------------------------------------------- Update Information: - Added upstream patch to fix STD3 ASCII rules (#1543021) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543021 - libidn2: Guidance needed for avoiding STD3 rules https://bugzilla.redhat.com/show_bug.cgi?id=1543021 -------------------------------------------------------------------------------- ================================================================================ percolator-3.02.00-1.el7 (FEDORA-EPEL-2018-d1af041341) Software for postprocessing of shotgun proteomics data -------------------------------------------------------------------------------- Update Information: - Update to 3.02.0 - Drop old patches - Link to libtirpc on fedora -------------------------------------------------------------------------------- ================================================================================ python-biopython-1.70-10.el7 (FEDORA-EPEL-2018-5daa80df62) Python tools for computational molecular biology -------------------------------------------------------------------------------- Update Information: - Fix Python2 required package on rhel - Fix Python2 mysql-connector packages on fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1546089 - python2-biopython-1.70-2.el7: Summary is shown as %{sum} https://bugzilla.redhat.com/show_bug.cgi?id=1546089 -------------------------------------------------------------------------------- ================================================================================ seamonkey-2.49.2-2.el7 (FEDORA-EPEL-2018-e50c94a832) Web browser, e-mail, news, IRC client, HTML editor -------------------------------------------------------------------------------- Update Information: Update to 2.49.2 Based on the Firefox/Thunderbird ESR (extension support release) code version 52.6.1 Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ and https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ for more info. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1545970 - seamonkey-2.49.2.source is available https://bugzilla.redhat.com/show_bug.cgi?id=1545970 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 17 Feb '18

17 Feb '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1076 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 839 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 421 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 319 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 150 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 37 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 23 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-069884a87f p7zip-16.02-10.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-72e5d3ef89 suricata-4.0.4-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing OpenStego-0.7.2-1.el7 exim-4.90.1-2.el7 koji-1.15.0-4.el7 llvm5.0-5.0.1-5.el7 python-pyside-1.2.4-1.el7 rust-1.24.0-1.el7 shiboken-1.2.4-9.el7 vim-vimoutliner-0.4.0-8.el7 Details about builds: ================================================================================ OpenStego-0.7.2-1.el7 (FEDORA-EPEL-2018-9a37b84d40) Free Steganography solution -------------------------------------------------------------------------------- Update Information: New package - Free Steganography solution OpenStego is a tool implemented in Java for generic steganography, with support for password-based encryption of the data. It supports plugins for various steganographic algorithms. -------------------------------------------------------------------------------- ================================================================================ exim-4.90.1-2.el7 (FEDORA-EPEL-2018-276ec6ee2b) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is an update fixing undefined symbols in mysql module. ---- This is new version fixing CVE-2018-6789. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543268 - CVE-2018-6789 exim: buffer overflow in b64decode() function, possibly leading to remote code execution https://bugzilla.redhat.com/show_bug.cgi?id=1543268 -------------------------------------------------------------------------------- ================================================================================ koji-1.15.0-4.el7 (FEDORA-EPEL-2018-748be86dfe) Build system tools -------------------------------------------------------------------------------- Update Information: Rebase to koji 1.15. Backports included for PR#735 and PR#794. Changelog: - Display license Info - Keytabs for GSSAPI authentication - Add krb_canon_host option - Watch-task return code - New runroot options - New watch-logs options -------------------------------------------------------------------------------- ================================================================================ llvm5.0-5.0.1-5.el7 (FEDORA-EPEL-2018-592dd11f3d) The Low Level Virtual Machine -------------------------------------------------------------------------------- Update Information: New version of Rust -- see the release notes for [1.24](https://blog.rust- lang.org/2018/02/15/Rust-1.24.html). -------------------------------------------------------------------------------- ================================================================================ python-pyside-1.2.4-1.el7 (FEDORA-EPEL-2018-2341acd2bd) Python bindings for Qt4 -------------------------------------------------------------------------------- Update Information: - Update to 1.2.4 - Ship python3 version (bug #1320653) - Fix scriptlet packages - Drop deprecated provides filter -------------------------------------------------------------------------------- ================================================================================ rust-1.24.0-1.el7 (FEDORA-EPEL-2018-592dd11f3d) The Rust Programming Language -------------------------------------------------------------------------------- Update Information: New version of Rust -- see the release notes for [1.24](https://blog.rust- lang.org/2018/02/15/Rust-1.24.html). -------------------------------------------------------------------------------- ================================================================================ shiboken-1.2.4-9.el7 (FEDORA-EPEL-2018-3bb0a88e7f) CPython bindings generator for C++ libraries -------------------------------------------------------------------------------- Update Information: - Build for python 3 - Add BR for libxslt to enable support for doc strings -------------------------------------------------------------------------------- ================================================================================ vim-vimoutliner-0.4.0-8.el7 (FEDORA-EPEL-2018-3c27a78d2b) Script for building an outline editor on top of Vim -------------------------------------------------------------------------------- Update Information: Taking over the package and adding AppStream metadata. ---- Just rebuild upon clean-up and taking over the maintenance of the package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1128821 - Add Addon metadata for GNOME Software https://bugzilla.redhat.com/show_bug.cgi?id=1128821 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 17 Feb '18

17 Feb '18

The following Fedora EPEL 6 Security updates need testing: Age URL 949 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 839 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 811 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 421 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 150 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 70 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 42 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 36 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc6e2820ab tomcat-7.0.84-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bc1949f307 p7zip-16.02-10.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be69c94866 clamav-0.99.3-8.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing exim-4.90.1-2.el6 koji-1.15.0-4.el6 Details about builds: ================================================================================ exim-4.90.1-2.el6 (FEDORA-EPEL-2018-87b20f1b26) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is new version fixing undefined symbols in mysql module. ---- This is new version fixing CVE-2018-6789. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543268 - CVE-2018-6789 exim: buffer overflow in b64decode() function, possibly leading to remote code execution https://bugzilla.redhat.com/show_bug.cgi?id=1543268 -------------------------------------------------------------------------------- ================================================================================ koji-1.15.0-4.el6 (FEDORA-EPEL-2018-41a99c0f97) Build system tools -------------------------------------------------------------------------------- Update Information: Rebase to koji 1.15. Backports included for PR#735 and PR#794. Changelog: - Display license Info - Keytabs for GSSAPI authentication - Add krb_canon_host option - Watch-task return code - New runroot options - New watch-logs options --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel February 2018