epel-devel March 2018

epel-devel@lists.fedoraproject.org

12 participants
68 discussions

Looking for testers: Clamav 0.99.4 EL-6
by Stephen John Smoogen 12 Mar '18

12 Mar '18

There is a security update waiting in epel-testing for 0.99.4. I have tested it in my setup and it looks to be working but it needs more testing https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7e91105260 -- Stephen J Smoogen.

2 2

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 12 Mar '18

12 Mar '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1099 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 862 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 444 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 341 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 173 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 111 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 60 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 34 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 19 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-50566f0a39 uwsgi-2.0.16-1.el7 16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4 drupal7-7.57-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aacf1b47d6 clamav-0.99.4-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-815e0064e9 tor-0.2.9.15-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f7a629b46f python-django16-1.6.11.7-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-635348eab4 php-simplesamlphp-saml2_1-1.10.6-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7150fa5dce php-simplesamlphp-saml2-2.3.8-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing datagrepper-0.9.3-1.el7 getdns-1.4.1-1.el7 gfal2-2.15.3-1.el7 libprelude-4.1.0-1.el7 lighttpd-1.4.49-1.el7 lynis-2.6.3-1.el7 Details about builds: ================================================================================ datagrepper-0.9.3-1.el7 (FEDORA-EPEL-2018-5a36ac4246) A webapp to query fedmsg history -------------------------------------------------------------------------------- Update Information: Fix a [500 error](https://http.cat/500) when using `contains`. ---- Latest upstream. -------------------------------------------------------------------------------- ================================================================================ getdns-1.4.1-1.el7 (FEDORA-EPEL-2018-87137dfcd8) Modern asynchronous API to the DNS -------------------------------------------------------------------------------- Update Information: Resolves rhbz#1551810 Updated to 1.4.1 ---- Updated to 1.4.0 (which includes previous patch) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1551810 - getdns-1.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1551810 -------------------------------------------------------------------------------- ================================================================================ gfal2-2.15.3-1.el7 (FEDORA-EPEL-2018-10be37260b) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: * new upstream release ---- * new upstream release -------------------------------------------------------------------------------- ================================================================================ libprelude-4.1.0-1.el7 (FEDORA-EPEL-2018-32ba0e78be) Secure Connections between all Sensors and the Prelude Manager -------------------------------------------------------------------------------- Update Information: Bump to 4.1 -------------------------------------------------------------------------------- ================================================================================ lighttpd-1.4.49-1.el7 (FEDORA-EPEL-2018-2a3d51dc83) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information: https://www.lighttpd.net/2018/3/11/1.4.49/ ---- Require psmisc -------------------------------------------------------------------------------- References: [ 1 ] Bug #1554317 - lighttpd-1.4.49 is available https://bugzilla.redhat.com/show_bug.cgi?id=1554317 [ 2 ] Bug #1546558 - lighttpd should depend on psmisc for logrotate https://bugzilla.redhat.com/show_bug.cgi?id=1546558 -------------------------------------------------------------------------------- ================================================================================ lynis-2.6.3-1.el7 (FEDORA-EPEL-2018-1e85622c30) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: Update to 2.6.3 (rhbz #1552963) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552963 - lynis-2.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552963 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 12 Mar '18

12 Mar '18

The following Fedora EPEL 6 Security updates need testing: Age URL 972 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 862 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 833 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 444 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 173 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 93 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 65 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 59 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 28 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136 drupal7-7.57-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7e91105260 clamav-0.99.4-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a27d71c715 pax-utils-1.2.3-1.el6 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4bcfff2d5e tor-0.2.9.15-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0f3319c1ea php-simplesamlphp-saml2_1-1.10.6-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-57cbc61216 php-simplesamlphp-saml2-2.3.8-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing gfal2-2.15.3-1.el6 lynis-2.6.3-1.el6 Details about builds: ================================================================================ gfal2-2.15.3-1.el6 (FEDORA-EPEL-2018-86af7c1863) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: * new upstream release ---- * new upstream release -------------------------------------------------------------------------------- ================================================================================ lynis-2.6.3-1.el6 (FEDORA-EPEL-2018-33125cdbd5) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: Update to 2.6.3 (rhbz #1552963) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552963 - lynis-2.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552963 --------------------------------------------------------------------------------

1 0

check mirror s3-mirror-eu-west-1.fedoraproject.org
by Eg. Bo. 12 Mar '18

12 Mar '18

Hello, who could help in resolving an issue with an AWS S3 mirror ? I'd like to download the epel release package using this URL: 'http://download.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm'. On my PC (proxy) I can download the file however if I run wget on EC2 instances (tried different accounts) in region eu-west-1 this ends up in 404. [ec2-user@ip ~]$ wget 'http://download.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm' --2018-03-10 03:30:12-- http://download.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm Resolving download.fedoraproject.org (download.fedoraproject.org)... 185.141.165.254, 8.43.85.67, 152.19.134.142, ... Connecting to download.fedoraproject.org (download.fedoraproject.org)|185.141.165.254|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://s3-mirror-eu-west-1.fedoraproject.org/pub/epel/epel-release-latest-7… [following] --2018-03-10 03:30:12-- http://s3-mirror-eu-west-1.fedoraproject.org/pub/epel/epel-release-latest-7… Resolving s3-mirror-eu-west-1.fedoraproject.org (s3-mirror-eu-west-1.fedoraproject.org)... 52.218.64.194 Connecting to s3-mirror-eu-west-1.fedoraproject.org (s3-mirror-eu-west-1.fedoraproject.org)|52.218.64.194|:80... connected. HTTP request sent, awaiting response... 404 Not Found 2018-03-10 03:30:12 ERROR 404: Not Found. [ec2-user@ip ~]$ The link http://s3-mirror-eu-west-1.fedoraproject.org/pub/epel/epel-release-latest-7… isn't also valid on my PC. Please help/fix. Eg. Bo.

2 1

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 11 Mar '18

11 Mar '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1098 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 861 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 443 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 340 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 172 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 110 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 59 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-50566f0a39 uwsgi-2.0.16-1.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4 drupal7-7.57-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aacf1b47d6 clamav-0.99.4-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-815e0064e9 tor-0.2.9.15-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f7a629b46f python-django16-1.6.11.7-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing adapta-gtk-theme-3.93.0.153-1.el7 certbot-0.22.0-1.el7 gnome-shell-extension-windowoverlay-icons-31-1.el7 lzma-sdk-4.6.5-21.el7 mate-terminal-1.16.3-2.el7 nmh-1.7.1-3.el7 nulib2-3.1.0-1.el7 perl-Time-Moment-0.43-1.el7 php-paragonie-constant-time-encoding-1.0.2-1.el7 php-simplesamlphp-saml2-2.3.8-1.el7 php-simplesamlphp-saml2_1-1.10.6-1.el7 python-acme-0.22.0-1.el7 python-certbot-apache-0.22.0-1.el7 python-certbot-dns-cloudflare-0.22.0-1.el7 python-certbot-dns-cloudxns-0.22.0-1.el7 python-certbot-dns-digitalocean-0.22.0-1.el7 python-certbot-dns-dnsimple-0.22.0-1.el7 python-certbot-dns-dnsmadeeasy-0.22.0-1.el7 python-certbot-dns-google-0.22.0-1.el7 python-certbot-dns-luadns-0.22.0-1.el7 python-certbot-dns-nsone-0.22.0-1.el7 python-certbot-dns-rfc2136-0.22.0-1.el7 python-certbot-dns-route53-0.22.0-1.el7 python-certbot-nginx-0.22.0-1.el7 ucl-1.03-24.el7 upx-3.94-2.el7 yadifa-2.3.8-1.el7 Details about builds: ================================================================================ adapta-gtk-theme-3.93.0.153-1.el7 (FEDORA-EPEL-2018-08514a0300) An adaptive Gtk+ theme based on Material Design Guidelines -------------------------------------------------------------------------------- Update Information: - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1551163 - adapta-gtk-theme-3.93.0.153 is available https://bugzilla.redhat.com/show_bug.cgi?id=1551163 -------------------------------------------------------------------------------- ================================================================================ certbot-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) A free, automated certificate authority client -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-windowoverlay-icons-31-1.el7 (FEDORA-EPEL-2018-92bcc8eeda) Show app icons on top of the windows thumbnails in Activities Overview -------------------------------------------------------------------------------- Update Information: Upstream made several releases in a short amount of time, which collectively provide improvements to the default visual styles, optimizations for icon animation, and general cleanup of the code base, including a fix for an error that could happen if the user locks the Shell in overview mode. -------------------------------------------------------------------------------- ================================================================================ lzma-sdk-4.6.5-21.el7 (FEDORA-EPEL-2018-5c27d04218) SDK for lzma compression -------------------------------------------------------------------------------- Update Information: First EL-7 build -------------------------------------------------------------------------------- ================================================================================ mate-terminal-1.16.3-2.el7 (FEDORA-EPEL-2018-7c2531be5a) Terminal emulator for MATE -------------------------------------------------------------------------------- Update Information: - rebuild for rhbz (#1553209) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553209 - mate-terminal crash when using drag-n-drop tabs https://bugzilla.redhat.com/show_bug.cgi?id=1553209 -------------------------------------------------------------------------------- ================================================================================ nmh-1.7.1-3.el7 (FEDORA-EPEL-2018-f97e14128a) A capable MIME-email-handling system with a command-line interface -------------------------------------------------------------------------------- Update Information: Fixed files %doc to match configure --docdir. -------------------------------------------------------------------------------- ================================================================================ nulib2-3.1.0-1.el7 (FEDORA-EPEL-2018-37ebe4bcb0) Disk and file archive program for NuFX (.SDK, .BXY) archives -------------------------------------------------------------------------------- Update Information: Disk and file archive program for NuFX (.SDK, .BXY) archives. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1551107 - Review Request: nulib2 - Disk and file archive program for NuFX (.SDK, .BXY) archives https://bugzilla.redhat.com/show_bug.cgi?id=1551107 -------------------------------------------------------------------------------- ================================================================================ perl-Time-Moment-0.43-1.el7 (FEDORA-EPEL-2018-4f5dc51fe6) Represents a date and time of day with an offset from UTC -------------------------------------------------------------------------------- Update Information: 0.43 2018-03-08 - Correct commification of epoch seconds in documentation. PR #26, by Tim Heaney (oylenshpeegul). - The macro test around the inclusion of stdbool.h was too broad and didn't account for compiler abilities. PR #28 by Dale Ghent (daleghent). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553503 - perl-Time-Moment-0.43 is available https://bugzilla.redhat.com/show_bug.cgi?id=1553503 -------------------------------------------------------------------------------- ================================================================================ php-paragonie-constant-time-encoding-1.0.2-1.el7 (FEDORA-EPEL-2018-c9847194b3) Constant-Time Character Encoding in PHP Projects -------------------------------------------------------------------------------- Update Information: update to 1.0.2 -------------------------------------------------------------------------------- ================================================================================ php-simplesamlphp-saml2-2.3.8-1.el7 (FEDORA-EPEL-2018-7150fa5dce) SAML2 PHP library from SimpleSAMLphp -------------------------------------------------------------------------------- Update Information: * [SSPSA 201803-01 / CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01 / CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA 201801-01 / CVE-2018-6519](https://simplesamlphp.org/security/201801-01) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the signature validation utilities https://bugzilla.redhat.com/show_bug.cgi?id=1553357 [ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass https://bugzilla.redhat.com/show_bug.cgi?id=1553352 [ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in xs:DateTime timestamp in SAML2 library https://bugzilla.redhat.com/show_bug.cgi?id=1542244 -------------------------------------------------------------------------------- ================================================================================ php-simplesamlphp-saml2_1-1.10.6-1.el7 (FEDORA-EPEL-2018-635348eab4) SAML2 PHP library from SimpleSAMLphp (version 1) -------------------------------------------------------------------------------- Update Information: * [SSPSA 201803-01 / CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01 / CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA 201801-01 / CVE-2018-6519](https://simplesamlphp.org/security/201801-01) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the signature validation utilities https://bugzilla.redhat.com/show_bug.cgi?id=1553357 [ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass https://bugzilla.redhat.com/show_bug.cgi?id=1553352 [ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in xs:DateTime timestamp in SAML2 library https://bugzilla.redhat.com/show_bug.cgi?id=1542244 -------------------------------------------------------------------------------- ================================================================================ python-acme-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) Python library for the ACME protocol -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-apache-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) The apache plugin for certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-cloudflare-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) Cloudflare DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-cloudxns-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) CloudXNS DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-digitalocean-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) DigitalOcean DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-dnsimple-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) DNSimple DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-dnsmadeeasy-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) DNS Made Easy DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-google-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) Google Cloud DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-luadns-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) LuaDNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-nsone-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) NS1 DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-rfc2136-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) RFC 2136 DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-dns-route53-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) Route53 DNS Authenticator plugin for Certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ python-certbot-nginx-0.22.0-1.el7 (FEDORA-EPEL-2018-d4a7ea4adc) The nginx plugin for certbot -------------------------------------------------------------------------------- Update Information: Update to 0.22.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552951 - python-acme-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552951 [ 2 ] Bug #1552953 - certbot-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552953 [ 3 ] Bug #1552954 - python-certbot-apache-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552954 [ 4 ] Bug #1552955 - python-certbot-dns-rfc2136-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552955 [ 5 ] Bug #1552956 - python-certbot-nginx-0.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552956 -------------------------------------------------------------------------------- ================================================================================ ucl-1.03-24.el7 (FEDORA-EPEL-2018-5c27d04218) Portable lossless data compression library -------------------------------------------------------------------------------- Update Information: First EL-7 build -------------------------------------------------------------------------------- ================================================================================ upx-3.94-2.el7 (FEDORA-EPEL-2018-5c27d04218) Ultimate Packer for eXecutables -------------------------------------------------------------------------------- Update Information: First EL-7 build -------------------------------------------------------------------------------- ================================================================================ yadifa-2.3.8-1.el7 (FEDORA-EPEL-2018-039132b581) Lightweight authoritative Name Server with DNSSEC capabilities -------------------------------------------------------------------------------- Update Information: 20180214: YADIFA 2.3.8 Fixes the OPT record Z flags not being cleared in server answers. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1545227 - yadifa-2.3.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1545227 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 11 Mar '18

11 Mar '18

The following Fedora EPEL 6 Security updates need testing: Age URL 971 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 861 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 832 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 443 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 172 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 92 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 64 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 58 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136 drupal7-7.57-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7e91105260 clamav-0.99.4-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a27d71c715 pax-utils-1.2.3-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4bcfff2d5e tor-0.2.9.15-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing nmh-1.7.1-3.el6 php-simplesamlphp-saml2-2.3.8-1.el6 php-simplesamlphp-saml2_1-1.10.6-1.el6 pidgin-sipe-1.23.2-1.el6 python-antlr-2.7.7-5.el6 Details about builds: ================================================================================ nmh-1.7.1-3.el6 (FEDORA-EPEL-2018-eae0de1c6b) A capable MIME-email-handling system with a command-line interface -------------------------------------------------------------------------------- Update Information: Replaced /usr/bin/vi with /bin/vi. -------------------------------------------------------------------------------- ================================================================================ php-simplesamlphp-saml2-2.3.8-1.el6 (FEDORA-EPEL-2018-57cbc61216) SAML2 PHP library from SimpleSAMLphp -------------------------------------------------------------------------------- Update Information: * [SSPSA 201803-01 / CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01 / CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA 201801-01 / CVE-2018-6519](https://simplesamlphp.org/security/201801-01) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the signature validation utilities https://bugzilla.redhat.com/show_bug.cgi?id=1553357 [ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass https://bugzilla.redhat.com/show_bug.cgi?id=1553352 [ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in xs:DateTime timestamp in SAML2 library https://bugzilla.redhat.com/show_bug.cgi?id=1542244 -------------------------------------------------------------------------------- ================================================================================ php-simplesamlphp-saml2_1-1.10.6-1.el6 (FEDORA-EPEL-2018-0f3319c1ea) SAML2 PHP library from SimpleSAMLphp (version 1) -------------------------------------------------------------------------------- Update Information: * [SSPSA 201803-01 / CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01 / CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA 201801-01 / CVE-2018-6519](https://simplesamlphp.org/security/201801-01) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the signature validation utilities https://bugzilla.redhat.com/show_bug.cgi?id=1553357 [ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass https://bugzilla.redhat.com/show_bug.cgi?id=1553352 [ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in xs:DateTime timestamp in SAML2 library https://bugzilla.redhat.com/show_bug.cgi?id=1542244 -------------------------------------------------------------------------------- ================================================================================ pidgin-sipe-1.23.2-1.el6 (FEDORA-EPEL-2018-a1b231db0b) Pidgin protocol plugin to connect to MS Office Communicator -------------------------------------------------------------------------------- Update Information: New upstream release: * add support for IPv6 addresses in SIP & SDP messages * extend libpurple D-Bus interface * don't load buddy photos from unknown sites by default * add support for user redirect in Lync autodiscover * enable audio/video calls for Office365 cloud-based accounts * fix some HTTP requests that were not sent -------------------------------------------------------------------------------- ================================================================================ python-antlr-2.7.7-5.el6 (FEDORA-EPEL-2018-2a2c9fbdde) Python runtime support for ANTLR-generated parsers -------------------------------------------------------------------------------- Update Information: This package contains the Python runtime support for ANTLR-generated parsers. **NOTE:** this EL6-only package supplements RHEL6 package antlr, which is missing the Python runtime support. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1189171 - Review Request: python-antlr - Python runtime support for ANTLR-generated parsers https://bugzilla.redhat.com/show_bug.cgi?id=1189171 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 09 Mar '18

09 Mar '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1096 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 858 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 441 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 338 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 170 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 107 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 57 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 31 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-50566f0a39 uwsgi-2.0.16-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9111777f91 freexl-1.0.5-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4 drupal7-7.57-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aacf1b47d6 clamav-0.99.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-815e0064e9 tor-0.2.9.15-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f7a629b46f python-django16-1.6.11.7-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing boinc-client-7.9.3-1.el7 nmh-1.7.1-2.el7 pdc-updater-0.8.1-1.el7 Details about builds: ================================================================================ boinc-client-7.9.3-1.el7 (FEDORA-EPEL-2018-59651d6c4c) The BOINC client -------------------------------------------------------------------------------- Update Information: 7.9.3 release ---- added macros to use mariadb-connector-c instead of mysql-* only for Fedora > 26 -------------------------------------------------------------------------------- ================================================================================ nmh-1.7.1-2.el7 (FEDORA-EPEL-2018-16d88b185e) A capable MIME-email-handling system with a command-line interface -------------------------------------------------------------------------------- Update Information: Restored --docdir, and set %doc to match. -------------------------------------------------------------------------------- ================================================================================ pdc-updater-0.8.1-1.el7 (FEDORA-EPEL-2018-8f83237ee4) Update the product definition center in response to fedmsg -------------------------------------------------------------------------------- Update Information: Latest upstream. --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 09 Mar '18

09 Mar '18

The following Fedora EPEL 6 Security updates need testing: Age URL 968 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 858 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 830 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 441 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 170 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 61 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2ffe688829 freexl-1.0.5-1.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136 drupal7-7.57-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7e91105260 clamav-0.99.4-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a27d71c715 pax-utils-1.2.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing fedmsg-0.18.3-1.el6 nmh-1.7.1-2.el6 python-fedmsg-meta-fedora-infrastructure-0.23.1-1.el6 tor-0.2.9.15-1.el6 Details about builds: ================================================================================ fedmsg-0.18.3-1.el6 (FEDORA-EPEL-2018-db0d9b646b) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: Update fedmsg to 0.18.3 Changelog is at: https://github.com/fedora- infra/fedmsg/blob/develop/doc/changelog.rst#0183 Update fedmsg-meta-fedora- infrastructure to its latest version -------------------------------------------------------------------------------- ================================================================================ nmh-1.7.1-2.el6 (FEDORA-EPEL-2018-1b9e2e7748) A capable MIME-email-handling system with a command-line interface -------------------------------------------------------------------------------- Update Information: Restored --docdir, and set %doc to match. -------------------------------------------------------------------------------- ================================================================================ python-fedmsg-meta-fedora-infrastructure-0.23.1-1.el6 (FEDORA-EPEL-2018-db0d9b646b) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information: Update fedmsg to 0.18.3 Changelog is at: https://github.com/fedora- infra/fedmsg/blob/develop/doc/changelog.rst#0183 Update fedmsg-meta-fedora- infrastructure to its latest version -------------------------------------------------------------------------------- ================================================================================ tor-0.2.9.15-1.el6 (FEDORA-EPEL-2018-4bcfff2d5e) Anonymizing overlay network for TCP -------------------------------------------------------------------------------- Update Information: Update to latest version. Security-Fixes TROVE-2018-001, TROVE-2018-002, -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553355 - CVE-2018-0490 tor: NULL pointer dereference via a misformatted relay descriptor https://bugzilla.redhat.com/show_bug.cgi?id=1553355 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 08 Mar '18

08 Mar '18

The following Fedora EPEL 7 Security updates need testing: Age URL 1095 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 858 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 440 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 337 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 169 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 106 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 30 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1 jhead-3.00-7.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-50566f0a39 uwsgi-2.0.16-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0296296d7c mingw-wavpack-5.1.0-4.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9111777f91 freexl-1.0.5-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4 drupal7-7.57-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aacf1b47d6 clamav-0.99.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-815e0064e9 tor-0.2.9.15-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f7a629b46f python-django16-1.6.11.7-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing fedfind-4.1.1-1.el7 gpaste-3.22.6-1.el7 lcgdm-dav-0.20.0-1.el7 nmh-1.7.1-1.el7 php-cs-fixer-2.2.18-1.el7 php-pecl-psr-0.4.0-2.el7 python-ddt-1.1.2-1.el7 xalan-c-1.11.0-4.el7 xml-security-c-1.7.3-4.el7 Details about builds: ================================================================================ fedfind-4.1.1-1.el7 (FEDORA-EPEL-2018-8d4e936882) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This update provides a new release of fedfind, which adapts the `expected_images` for a few `Release` classes, and `const.SUBVARIANTS`, for the renaming of the `Atomic` and `Workstation Ostree` (sub)variants in Fedora 28+ (see [this pull request](https://pagure.io/pungi-fedora/pull-request/498)). -------------------------------------------------------------------------------- ================================================================================ gpaste-3.22.6-1.el7 (FEDORA-EPEL-2018-2a0f117f18) Clipboard management system -------------------------------------------------------------------------------- Update Information: * fix regression in gnome-shell extension * fix memory leaks in images support * silence a warnings in the gnome-shell extension -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552961 - gpaste-3.26.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552961 -------------------------------------------------------------------------------- ================================================================================ lcgdm-dav-0.20.0-1.el7 (FEDORA-EPEL-2018-f4f265f1ad) HTTP/DAV front end to the DPM/LFC services -------------------------------------------------------------------------------- Update Information: Bugfixes and improvements. Includes an important fix for the Dynafed usecase related to Auth headers. -------------------------------------------------------------------------------- ================================================================================ nmh-1.7.1-1.el7 (FEDORA-EPEL-2018-0e4ac8d2df) A capable MIME-email-handling system with a command-line interface -------------------------------------------------------------------------------- Update Information: Updated nmh to 1.7.1. -------------------------------------------------------------------------------- ================================================================================ php-cs-fixer-2.2.18-1.el7 (FEDORA-EPEL-2018-6d14780d7e) A tool to automatically fix PHP code style -------------------------------------------------------------------------------- Update Information: Changelog for v2.2.18 --------------------- * bug #3446 Add PregWrapper (kubawerlos) * bug #3464 IncludeFixer - fix incorrect order of fixing (kubawerlos, SpacePossum) * bug #3496 Bug in Tokens::removeLeadingWhitespace (kubawerlos, SpacePossum, keradus) * bug #3557 AbstractDoctrineAnnotationFixer: edge case bugfix (Slamdunk) * bug #3574 GeneralPhpdocAnnotationRemoveFixer - remove PHPDoc if no content is left (SpacePossum) * minor #3563 DX add missing covers annotations (keradus) * minor #3565 Use EventDispatcherInterface instead of EventDispatcher when possible (keradus) * minor #3572 DX: allow for more phpunit-speedtrap versions to support more PHPUnit versions (keradus) * minor #3576 Fix Doctrine Annotation test cases merging (julienfalque) ---- Changelog for v2.2.17 --------------------- * bug #3504 NoBlankLinesAfterPhpdocFixer - allow blank line before declare statement (julienfalque) * bug #3522 Remove LOCK_EX (SpacePossum) * bug #3560 SelfAccessorFixer is risky (Slamdunk) * minor #3435 Add tests for general_phpdoc_annotation_remove (BackEndTea) * minor #3484 Create Tokens::findBlockStart (ntzm) * minor #3512 Add missing array typehints (ntzm) * minor #3516 Use null|type instead of ?type in PHPDocs (ntzm) * minor #3518 FixerFactoryTest - Test each priority test file is listed as test (SpacePossum) * minor #3520 Fix typos: ran vs. run (SpacePossum) * minor #3521 Use HTTPS (carusogabriel) * minor #3526 Remove gecko dependency (SpacePossum, keradus, julienfalque) * minor #3531 Backport PHPMD to LTS version to ease maintainability (keradus) * minor #3532 Implement Tokens::findOppositeBlockEdge (ntzm) * minor #3533 DX: SCA - drop src/Resources exclusion (keradus) * minor #3538 Don't use third parameter of Tokens::findBlockStart (ntzm) * minor #3542 Enhancement: Run composer-normalize on Travis CI (localheinz, keradus) * minor #3555 DX: composer.json - drop branch-alias, branch is already following the version (keradus) * minor #3556 DX: Add AutoReview/ComposerTest (keradus) * minor #3559 Don't expose new files under Test namespace (keradus) -------------------------------------------------------------------------------- ================================================================================ php-pecl-psr-0.4.0-2.el7 (FEDORA-EPEL-2018-830a4f8613) PSR interfaces -------------------------------------------------------------------------------- Update Information: This extension provides the accepted PSR interfaces, so they can be used in an extension. See http://www.php-fig.org/psr/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1551913 - Review Request: php-pecl-psr - PSR interfaces https://bugzilla.redhat.com/show_bug.cgi?id=1551913 -------------------------------------------------------------------------------- ================================================================================ python-ddt-1.1.2-1.el7 (FEDORA-EPEL-2018-579dfa0280) Python library to multiply test cases -------------------------------------------------------------------------------- Update Information: - Latest upstream - Enable EPEL python3 subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552347 - python-ddt-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552347 -------------------------------------------------------------------------------- ================================================================================ xalan-c-1.11.0-4.el7 (FEDORA-EPEL-2018-20b37842f2) Xalan XSLT processor for C -------------------------------------------------------------------------------- Update Information: Provide the package on the ppc64le architecture. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1550370 - Rebuild to fix missing ppc64le/epel7 package https://bugzilla.redhat.com/show_bug.cgi?id=1550370 -------------------------------------------------------------------------------- ================================================================================ xml-security-c-1.7.3-4.el7 (FEDORA-EPEL-2018-0903d1a99e) C++ Implementation of W3C security standards for XML -------------------------------------------------------------------------------- Update Information: I've been asked to push xml-security-c-1.7.3 to EPEL7. --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 08 Mar '18

08 Mar '18

The following Fedora EPEL 6 Security updates need testing: Age URL 968 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 858 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 829 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 440 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 169 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 60 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 55 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 23 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2ffe688829 freexl-1.0.5-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136 drupal7-7.57-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7e91105260 clamav-0.99.4-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a27d71c715 pax-utils-1.2.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing fedfind-4.1.1-1.el6 lcgdm-dav-0.20.0-1.el6 nmh-1.7.1-1.el6 Details about builds: ================================================================================ fedfind-4.1.1-1.el6 (FEDORA-EPEL-2018-8f1ce5d95e) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This update provides a new release of fedfind, which adapts the `expected_images` for a few `Release` classes, and `const.SUBVARIANTS`, for the renaming of the `Atomic` and `Workstation Ostree` (sub)variants in Fedora 28+ (see [this pull request](https://pagure.io/pungi-fedora/pull-request/498)). -------------------------------------------------------------------------------- ================================================================================ lcgdm-dav-0.20.0-1.el6 (FEDORA-EPEL-2018-04f9fa55e5) HTTP/DAV front end to the DPM/LFC services -------------------------------------------------------------------------------- Update Information: Bugfixes and improvements. Includes an important fix for the Dynafed usecase related to Auth headers. -------------------------------------------------------------------------------- ================================================================================ nmh-1.7.1-1.el6 (FEDORA-EPEL-2018-a097db48ad) A capable MIME-email-handling system with a command-line interface -------------------------------------------------------------------------------- Update Information: Updated nmh to 1.7.1. --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel March 2018