epel-devel April 2017

epel-devel@lists.fedoraproject.org

17 participants
78 discussions

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 07 Apr '17

07 Apr '17

The following Fedora EPEL 7 Security updates need testing: Age URL 760 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 523 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 225 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 105 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 21 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-05ac8b1dc4 php-onelogin-php-saml-2.10.5-1.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d518cd4b9 libgit2-0.24.6-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7e4f45cad3 tcpreplay-4.2.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e9e451db03 chromium-57.0.2987.133-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ae79d206b ReviewBoard-2.5.10-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d9e3bfe77d php-horde-Horde-Crypt-2.7.6-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7889b3b509 libupnp-1.6.21-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99c7c2f382 xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-4.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-45845d256f python-django-1.6.11.6-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beaker-24.2-1.el7 fedfind-3.5.3-1.el7 golang-github-milochristiansen-axis2-0-0.3.git20ad745.el7 libidn2-2.0.0-1.el7 pam_mapi-0.3.2-1.el7 python-XStatic-jquery-ui-1.12.0.1-1.el7 sysbench-1.0.5-1.el7 xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-4.el7 Details about builds: ================================================================================ beaker-24.2-1.el7 (FEDORA-EPEL-2017-4c4a4bcd77) Full-stack software and hardware integration testing system -------------------------------------------------------------------------------- Update Information: Upstream release 24.2 -------------------------------------------------------------------------------- ================================================================================ fedfind-3.5.3-1.el7 (FEDORA-EPEL-2017-6962510d2b) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This update provides a new release of fedfind. It adds the PowerPC, S390 and ARM secondary arch compose locations to the 'known URL prefixes' whitelist, which means that if you pass `get_release` a URL in one of these locations, it will return a generic `Pungi4Compose` instance. `get_release` would always return a generic `Pungi4Compose` instance for any URL it could not match to a known release type prior to fedfind 3.4.0, but this was changed in 3.4.0 to only do so for 'known' URL prefixes, as a security measure. Also, `helpers.parse_cid` now accepts compose IDs for composes with 'FACD' as their short name. This will prevent relvalconsumer throwing exceptions whenever one of these composes appears. -------------------------------------------------------------------------------- ================================================================================ golang-github-milochristiansen-axis2-0-0.3.git20ad745.el7 (FEDORA-EPEL-2017-fe6485afd2) A simple virtual filesystem API -------------------------------------------------------------------------------- Update Information: A simple virtual filesystem API -------------------------------------------------------------------------------- References: [ 1 ] Bug #1411961 - Review Request: golang-github-milochristiansen-axis2 - A simple virtual filesystem API https://bugzilla.redhat.com/show_bug.cgi?id=1411961 -------------------------------------------------------------------------------- ================================================================================ libidn2-2.0.0-1.el7 (FEDORA-EPEL-2017-41e18fbc17) Library to support IDNA2008 internationalized domain names -------------------------------------------------------------------------------- Update Information: Libidn2 2.0.0 (released 2017-03-29) =================================== * Added to ASCII conversion functions corresponding to libidn1 functions: - idn2_to_ascii_4i - idn2_to_ascii_4z - idn2_to_ascii_8z - idn2_to_ascii_lz * Added to unicode conversion functions corresponding to libidn1 functions: - idn2_to_unicode_8z4z - idn2_to_unicode_4z4z - idn2_to_unicode_44i - idn2_to_unicode_8z8z - idn2_to_unicode_8zlz - idn2_to_unicode_lzlz * The idn2 manual page is generated from markdown text instead of utilizing help2man on the generated tool. * Including idn2.h will provide libidn1 compatibility functions unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting applications from libidn1 (which offers IDNA2003) to libidn2 (which offers IDNA2008) by replacing idna.h to idn2.h in the applications' source. * API and ABI is backwards compatible with the previous version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1439727 - update libidn2 to 2.0.0 https://bugzilla.redhat.com/show_bug.cgi?id=1439727 -------------------------------------------------------------------------------- ================================================================================ pam_mapi-0.3.2-1.el7 (FEDORA-EPEL-2017-da5de45de8) PAM module for authentication via MAPI against a Zarafa server -------------------------------------------------------------------------------- Update Information: Update to pam_mapi 0.3.1 -------------------------------------------------------------------------------- ================================================================================ python-XStatic-jquery-ui-1.12.0.1-1.el7 (FEDORA-EPEL-2017-7ecb12e378) jquery-ui (XStatic packaging standard) -------------------------------------------------------------------------------- Update Information: Security fix for `CVE-2016-7103 ` -------------------------------------------------------------------------------- References: [ 1 ] Bug #1360286 - CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText https://bugzilla.redhat.com/show_bug.cgi?id=1360286 -------------------------------------------------------------------------------- ================================================================================ sysbench-1.0.5-1.el7 (FEDORA-EPEL-2017-c929a8c5fa) System performance benchmark -------------------------------------------------------------------------------- Update Information: sysbench 1.0.5 contains additional fixes ---- Update to version 1.0.x : - Lua scripts instead of hard-coded C tests for database ("oltp") benchmarks + ability to create custom workloads - much better single-threaded performance - much better scalability - improvements and cleanups in command line syntax and options - latency histograms in cumulative statistic reports -report hooks to print statistics in custom formats (CSV/JSON/XML/etc.) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1424670 - sysbench-1.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1424670 [ 2 ] Bug #1419273 - Rebase to the version 1.0.0 https://bugzilla.redhat.com/show_bug.cgi?id=1419273 [ 3 ] Bug #1439713 - sysbench-1.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1439713 -------------------------------------------------------------------------------- ================================================================================ xorgxrdp-0.2.1-1.el7 (FEDORA-EPEL-2017-99c7c2f382) Implementation of xrdp backend as Xorg modules -------------------------------------------------------------------------------- Update Information: New upstream version of xorgxrdp and xrdp: New features in xrdp: - RemoteFX codec support is now enabled by default. - Bitmap updates support is now enabled by default. - TLS ciphers suites and version is now logged. - Connected computer name is now logged. - Switched to Xorg (xorgxrdp) as the default backend now. - Miscellaneous RemoteFX codec mode improvements. - Socket directory is configurable at the compile time. Bugfixes in xrdp: - Parallels client for MacOS / iOS can now connect (audio redirection must be disabled on client or xrdp server though). - MS RDP client for iOS can now connect using TLS security layer. - MS RDP client for Android can now connect to xrdp. - Large resolutions (4K) can be used with RemoteFX graphics. - Multiple RemoteApps can be opened throguh NeutrinoRDP proxy. - tls_ciphers in xrdp.ini is not limited to 63 chars anymore, it's variable-length. - Fixed an issue where tls_ciphers were ignored and rdp security layer could be used instead. - Kill disconnected sessions feature is working with Xorg (xorgxrdp) backend. - Miscellaneous code cleanup and memory issues fixes. Rebuild of xrdp requiring both xorgxrdp and tigervnc- minimal. VNC is still the default. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1433958 - CVE-2017-6967 xrdp: Incorrect placement of auth_start_session() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1433958 -------------------------------------------------------------------------------- ================================================================================ xrdp-0.9.2-4.el7 (FEDORA-EPEL-2017-99c7c2f382) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information: New upstream version of xorgxrdp and xrdp: New features in xrdp: - RemoteFX codec support is now enabled by default. - Bitmap updates support is now enabled by default. - TLS ciphers suites and version is now logged. - Connected computer name is now logged. - Switched to Xorg (xorgxrdp) as the default backend now. - Miscellaneous RemoteFX codec mode improvements. - Socket directory is configurable at the compile time. Bugfixes in xrdp: - Parallels client for MacOS / iOS can now connect (audio redirection must be disabled on client or xrdp server though). - MS RDP client for iOS can now connect using TLS security layer. - MS RDP client for Android can now connect to xrdp. - Large resolutions (4K) can be used with RemoteFX graphics. - Multiple RemoteApps can be opened throguh NeutrinoRDP proxy. - tls_ciphers in xrdp.ini is not limited to 63 chars anymore, it's variable-length. - Fixed an issue where tls_ciphers were ignored and rdp security layer could be used instead. - Kill disconnected sessions feature is working with Xorg (xorgxrdp) backend. - Miscellaneous code cleanup and memory issues fixes. Rebuild of xrdp requiring both xorgxrdp and tigervnc- minimal. VNC is still the default. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1433958 - CVE-2017-6967 xrdp: Incorrect placement of auth_start_session() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1433958 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 06 Apr '17

06 Apr '17

The following Fedora EPEL 7 Security updates need testing: Age URL 759 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 522 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 224 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 104 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-05ac8b1dc4 php-onelogin-php-saml-2.10.5-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d518cd4b9 libgit2-0.24.6-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5794ee2486 moodle-3.1.5-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7e4f45cad3 tcpreplay-4.2.1-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e9e451db03 chromium-57.0.2987.133-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99c7c2f382 xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ae79d206b ReviewBoard-2.5.10-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d9e3bfe77d php-horde-Horde-Crypt-2.7.6-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7889b3b509 libupnp-1.6.21-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-45845d256f python-django-1.6.11.6-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing bean-validation-api-1.1.0-8.el7 cacti-1.1.2-1.el7 dictd-1.12.1-14.el7 dkms-2.3-4.20170313git974d838.el7 gnuchess-6.2.4-2.el7 google-gson-2.3.1-7.el7 jboss-annotations-1.2-api-1.0.0-3.el7 jboss-ejb3-ext-api-2.2.0-3.el7 jboss-el-3.0-api-1.0.5-3.el7 jboss-jms-2.0-api-1.0.0-3.el7 jboss-jsp-2.3-api-1.0.1-3.el7 jboss-servlet-3.1-api-1.0.0-3.el7 kompose-0.5.0-0.1.el7 libmediainfo-0.7.94-1.el7 libzen-0.4.35-1.el7 lldpd-0.9.7-5.el7 mediainfo-0.7.94-1.el7 mingw-libidn2-2.0.0-1.el7 mote-0.6.1-4.el7 oneko-1.2-18.el7 pdc-updater-0.5.5-1.el7 pylint-1.6.5-4.el7 python-django-1.6.11.6-1.el7 tnef-1.4.14-1.el7 tripwire-2.4.3.5-1.el7 xonotic-0.8.2-2.el7 Details about builds: ================================================================================ bean-validation-api-1.1.0-8.el7 (FEDORA-EPEL-2017-7d25e7fd78) Bean Validation API (JSR 349) -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ cacti-1.1.2-1.el7 (FEDORA-EPEL-2017-f6a96218be) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.1.2 Release notes: http://www.cacti.net/release_notes_1_1_2.php ---- - Update to 1.1.1 Release notes: http://www.cacti.net/release_notes_1_0_5.php http://www.cacti.net/release_notes_1_0_6.php http://www.cacti.net/release_notes_1_1_0.php http://www.cacti.net/release_notes_1_1_1.php -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438425 - cacti-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1438425 [ 2 ] Bug #1430893 - cacti package is missing requires php-gd php-posix https://bugzilla.redhat.com/show_bug.cgi?id=1430893 [ 3 ] Bug #1431597 - cacti-1.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1431597 [ 4 ] Bug #1432443 - cacti-1.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432443 [ 5 ] Bug #1433932 - cacti-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1433932 [ 6 ] Bug #1436665 - cacti-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1436665 -------------------------------------------------------------------------------- ================================================================================ dictd-1.12.1-14.el7 (FEDORA-EPEL-2017-c043a26467) DICT protocol (RFC 2229) server and command-line client -------------------------------------------------------------------------------- Update Information: Unify SPEC file to one version for all distributions. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1116553 - Make available for EPEL-6 https://bugzilla.redhat.com/show_bug.cgi?id=1116553 -------------------------------------------------------------------------------- ================================================================================ dkms-2.3-4.20170313git974d838.el7 (FEDORA-EPEL-2017-70ba4182c0) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Do not attempt to always install the "base" kernel-devel package even if the correct variant is already installed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1421106 - Switch from Requires kernel-devel to kernel-devel-uname-r https://bugzilla.redhat.com/show_bug.cgi?id=1421106 [ 2 ] Bug #1436840 - on i386, dkms specifically requires kernel-devel and not kernel-PAE-devel https://bugzilla.redhat.com/show_bug.cgi?id=1436840 -------------------------------------------------------------------------------- ================================================================================ gnuchess-6.2.4-2.el7 (FEDORA-EPEL-2017-3cc309d8e8) The GNU chess program -------------------------------------------------------------------------------- Update Information: New branch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1439719 - Please add EPEL7 branch https://bugzilla.redhat.com/show_bug.cgi?id=1439719 -------------------------------------------------------------------------------- ================================================================================ google-gson-2.3.1-7.el7 (FEDORA-EPEL-2017-11a0f1df4d) Java lib for conversion of Java objects into JSON representation -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ jboss-annotations-1.2-api-1.0.0-3.el7 (FEDORA-EPEL-2017-5d6485031e) Common Annotations 1.2 API -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ jboss-ejb3-ext-api-2.2.0-3.el7 (FEDORA-EPEL-2017-310455d38f) JBoss EJB 3 Extension API -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ jboss-el-3.0-api-1.0.5-3.el7 (FEDORA-EPEL-2017-cd8f0c1d53) JSR-341 Expression Language 3.0 API -------------------------------------------------------------------------------- Update Information: Source 1.7 for diamond support operator -------------------------------------------------------------------------------- ================================================================================ jboss-jms-2.0-api-1.0.0-3.el7 (FEDORA-EPEL-2017-0486d949cc) JBoss JMS API 2.0 Spec -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ jboss-jsp-2.3-api-1.0.1-3.el7 (FEDORA-EPEL-2017-61044d7f10) JavaServer Pages 2.3 API (JSP) -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ jboss-servlet-3.1-api-1.0.0-3.el7 (FEDORA-EPEL-2017-cafee6b49c) Java Servlet 3.1 API -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ kompose-0.5.0-0.1.el7 (FEDORA-EPEL-2017-e402bf9b5a) Tool to move from 'docker-compose' to Kubernetes -------------------------------------------------------------------------------- Update Information: Update to kompose version 0.5.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1435032 - kompose-v0.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1435032 -------------------------------------------------------------------------------- ================================================================================ libmediainfo-0.7.94-1.el7 (FEDORA-EPEL-2017-4b93792bfa) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Updae to last MediaInfo release. -------------------------------------------------------------------------------- ================================================================================ libzen-0.4.35-1.el7 (FEDORA-EPEL-2017-4b93792bfa) Shared library for libmediainfo and medianfo* -------------------------------------------------------------------------------- Update Information: Updae to last MediaInfo release. -------------------------------------------------------------------------------- ================================================================================ lldpd-0.9.7-5.el7 (FEDORA-EPEL-2017-fe76c20831) ISC-licensed implementation of LLDP -------------------------------------------------------------------------------- Update Information: New package for the LLDP daemon -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438853 - Review Request: lldpd - an ISC-licensed implementation of LLDP https://bugzilla.redhat.com/show_bug.cgi?id=1438853 -------------------------------------------------------------------------------- ================================================================================ mediainfo-0.7.94-1.el7 (FEDORA-EPEL-2017-4b93792bfa) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Updae to last MediaInfo release. -------------------------------------------------------------------------------- ================================================================================ mingw-libidn2-2.0.0-1.el7 (FEDORA-EPEL-2017-7426f27045) MinGW Windows Internationalized Domain Name 2008 support library -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ================================================================================ mote-0.6.1-4.el7 (FEDORA-EPEL-2017-47926d2699) A MeetBot log wrangler, providing a user-friendly interface for Fedora's logs -------------------------------------------------------------------------------- Update Information: Fixes exception logging, adds deep links, adds more descriptive icons. -------------------------------------------------------------------------------- References: [ 1 ] Bug #94 - script 'rc' glob is too general https://bugzilla.redhat.com/show_bug.cgi?id=94 -------------------------------------------------------------------------------- ================================================================================ oneko-1.2-18.el7 (FEDORA-EPEL-2017-d62503c52f) Cat chases the cursor -------------------------------------------------------------------------------- Update Information: Introduction of the package into EPEL-7 -------------------------------------------------------------------------------- ================================================================================ pdc-updater-0.5.5-1.el7 (FEDORA-EPEL-2017-af6176ad55) Update the product definition center in response to fedmsg -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ================================================================================ pylint-1.6.5-4.el7 (FEDORA-EPEL-2017-a40f89d2de) Analyzes Python code looking for bugs and signs of poor quality -------------------------------------------------------------------------------- Update Information: Provide python major version links (bug #1439070) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1439070 - New name for pylint binaries makes it unusable for automatic testing https://bugzilla.redhat.com/show_bug.cgi?id=1439070 -------------------------------------------------------------------------------- ================================================================================ python-django-1.6.11.6-1.el7 (FEDORA-EPEL-2017-45845d256f) A high-level Python Web framework -------------------------------------------------------------------------------- Update Information: Update to the latest Django 1.6.11.6 security release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1390687 - CVE-2016-9013 CVE-2016-9014 python-django: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1390687 [ 2 ] Bug #1379489 - CVE-2016-7401 python-django: CSRF protection bypass on a site with Google Analytics [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1379489 -------------------------------------------------------------------------------- ================================================================================ tnef-1.4.14-1.el7 (FEDORA-EPEL-2017-5f9a6163b4) Extract files from email attachments like WINMAIL.DAT -------------------------------------------------------------------------------- Update Information: Release 1.4.14 includes security bug fixes introduced in 1.4.13 and a further bug fix. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1427435 - CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 tnef: Multiple vulnerabilities fixed in 1.4.13 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1427435 -------------------------------------------------------------------------------- ================================================================================ tripwire-2.4.3.5-1.el7 (FEDORA-EPEL-2017-aa5ed15389) IDS (Intrusion Detection System) -------------------------------------------------------------------------------- Update Information: update to 2.4.3.5 -------------------------------------------------------------------------------- ================================================================================ xonotic-0.8.2-2.el7 (FEDORA-EPEL-2017-e1707361ba) Multiplayer, deathmatch oriented first person shooter -------------------------------------------------------------------------------- Update Information: Build dedicated server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1203793 - xonotic-dedicated fails to build https://bugzilla.redhat.com/show_bug.cgi?id=1203793 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 06 Apr '17

06 Apr '17

The following Fedora EPEL 6 Security updates need testing: Age URL 638 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 632 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 522 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 493 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 224 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53 chicken-4.11.0-3.el6 104 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 54 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-acd2c2af0d nagios-4.2.4-4.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-da3e5ef08f tcpreplay-4.2.1-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-68aef427a4 php-horde-Horde-Crypt-2.7.6-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-def12f5099 libupnp-1.6.21-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing cacti-1.1.2-1.el6 dictd-1.12.1-14.el6 dkms-2.3-4.20170313git974d838.el6 libmediainfo-0.7.94-1.el6 libzen-0.4.35-1.el6 lldpd-0.9.7-5.el6 mediainfo-0.7.94-1.el6 tnef-1.4.14-1.el6 tripwire-2.4.3.5-1.el6 Details about builds: ================================================================================ cacti-1.1.2-1.el6 (FEDORA-EPEL-2017-c881aa09b7) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.1.2 Release notes: http://www.cacti.net/release_notes_1_1_2.php ---- - Update to 1.1.1 Release notes: http://www.cacti.net/release_notes_1_0_5.php http://www.cacti.net/release_notes_1_0_6.php http://www.cacti.net/release_notes_1_1_0.php http://www.cacti.net/release_notes_1_1_1.php -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438425 - cacti-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1438425 [ 2 ] Bug #1430893 - cacti package is missing requires php-gd php-posix https://bugzilla.redhat.com/show_bug.cgi?id=1430893 [ 3 ] Bug #1431597 - cacti-1.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1431597 [ 4 ] Bug #1432443 - cacti-1.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432443 [ 5 ] Bug #1433932 - cacti-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1433932 [ 6 ] Bug #1436665 - cacti-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1436665 -------------------------------------------------------------------------------- ================================================================================ dictd-1.12.1-14.el6 (FEDORA-EPEL-2017-b63afc615b) DICT protocol (RFC 2229) server and command-line client -------------------------------------------------------------------------------- Update Information: Unify SPEC file to one version for all distributions. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1116553 - Make available for EPEL-6 https://bugzilla.redhat.com/show_bug.cgi?id=1116553 -------------------------------------------------------------------------------- ================================================================================ dkms-2.3-4.20170313git974d838.el6 (FEDORA-EPEL-2017-3e0c43e558) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Do not attempt to always install the "base" kernel-devel package even if the correct variant is already installed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1421106 - Switch from Requires kernel-devel to kernel-devel-uname-r https://bugzilla.redhat.com/show_bug.cgi?id=1421106 [ 2 ] Bug #1436840 - on i386, dkms specifically requires kernel-devel and not kernel-PAE-devel https://bugzilla.redhat.com/show_bug.cgi?id=1436840 -------------------------------------------------------------------------------- ================================================================================ libmediainfo-0.7.94-1.el6 (FEDORA-EPEL-2017-9fb0000276) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Updae to last MediaInfo release. -------------------------------------------------------------------------------- ================================================================================ libzen-0.4.35-1.el6 (FEDORA-EPEL-2017-9fb0000276) Shared library for libmediainfo and medianfo* -------------------------------------------------------------------------------- Update Information: Updae to last MediaInfo release. -------------------------------------------------------------------------------- ================================================================================ lldpd-0.9.7-5.el6 (FEDORA-EPEL-2017-6ab500b6b5) ISC-licensed implementation of LLDP -------------------------------------------------------------------------------- Update Information: New package for the LLDP daemon -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438853 - Review Request: lldpd - an ISC-licensed implementation of LLDP https://bugzilla.redhat.com/show_bug.cgi?id=1438853 -------------------------------------------------------------------------------- ================================================================================ mediainfo-0.7.94-1.el6 (FEDORA-EPEL-2017-9fb0000276) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Updae to last MediaInfo release. -------------------------------------------------------------------------------- ================================================================================ tnef-1.4.14-1.el6 (FEDORA-EPEL-2017-c0d33ae70f) Extract files from email attachments like WINMAIL.DAT -------------------------------------------------------------------------------- Update Information: Release 1.4.14 includes security bug fixes introduced in 1.4.13 and a further bug fix. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1427435 - CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 tnef: Multiple vulnerabilities fixed in 1.4.13 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1427435 -------------------------------------------------------------------------------- ================================================================================ tripwire-2.4.3.5-1.el6 (FEDORA-EPEL-2017-847c9f757c) IDS (Intrusion Detection System) -------------------------------------------------------------------------------- Update Information: update to 2.4.3.5 --------------------------------------------------------------------------------

1 0

Orphaned Packages in epel7 (2017-04-02)
by till＠fedoraproject.org 06 Apr '17

06 Apr '17

1 0

Orphaned Packages in epel6 (2017-04-02)
by till＠fedoraproject.org 06 Apr '17

06 Apr '17

The following packages are orphaned and will be retired when they are orphaned for six weeks, unless someone adopts them. If you know for sure that the package should be retired, please do so now with a proper reason: https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life Note: If you received this mail directly you (co)maintain one of the affected packages or a package that depends on one. Please adopt the affected package or retire your depending package to avoid broken dependencies, otherwise your package will be retired when the affected package gets retired. Package (co)maintainers Status Change =========================================================================== elfinfo orphan, pnemade 5 weeks ago eventlog orphan, jpo, mrunge 2 weeks ago golang-launchpad-go-xdg-v0 orphan, agoode 4 weeks ago greadelf orphan, pnemade 5 weeks ago gtranslator orphan, muhammetk, pnemade 5 weeks ago ivykis orphan, jpo 2 weeks ago jai-imageio-core orphan, agoode 4 weeks ago libyui-gtk orphan 8 weeks ago libyui-ncurses orphan 8 weeks ago libyui-qt orphan 8 weeks ago mkdst orphan, enslaver, wtogami 2 weeks ago mx orphan, bcl, pfj 15 weeks ago nodejs-posix-get orphan, pnemade 6 weeks ago openpgm orphan, jpo, kaptk2 2 weeks ago par2cmdline orphan, epienbro 12 weeks ago php-fpdf orphan, ke4qqq 12 weeks ago postr orphan, timlau 1 weeks ago python-cement orphan, derks 4 weeks ago python-compositor orphan, fonts-sig, i18n- 5 weeks ago team, pnemade python-ctypesgen orphan, athmane 6 weeks ago python-fontMath orphan, fonts-sig, i18n- 5 weeks ago team, pnemade python-logilab-common orphan, bcl 15 weeks ago python-pytg orphan, sagitter 2 weeks ago python-robofab orphan, fonts-sig, i18n- 5 weeks ago team, jpokorny, pnemade python-ufo2fdk orphan, fonts-sig, i18n- 5 weeks ago team, pnemade rmanage orphan, ashokdas, pnemade 5 weeks ago rubygem-json_pure orphan, mfojtik, tdawson 11 weeks ago rubygem-parseconfig orphan, derks 4 weeks ago s3ql orphan, athmane, cicku, maci 6 weeks ago sticky-notes orphan, dcr226 6 weeks ago telegram-cli orphan, sagitter 2 weeks ago tktable orphan, wart 4 weeks ago trac-condfieldsgenshi-plugin orphan, adamwill 3 weeks ago trac-defaultcc-plugin orphan, adamwill, kevin 3 weeks ago tubo orphan, sagitter 4 weeks ago yumex orphan, timlau 1 weeks ago The following packages require above mentioned packages: Depending on: eventlog (1), status change: 2017-03-17 (2 weeks ago) syslog-ng (maintained by: marcusk, czanik, jpo, mrunge, rayvd) syslog-ng-3.2.5-4.el6.i686 requires libevtlog.so.0 syslog-ng-3.2.5-4.el6.src requires eventlog-devel = 0.2.13-1.el6 syslog-ng-3.2.5-4.el6.x86_64 requires libevtlog.so.0()(64bit) Depending on: mx (53), status change: 2016-12-16 (15 weeks ago) smolt (maintained by: wwoods) smolt-server-1.4.2.2-8.el6.noarch requires mx = 3.1.3-1.el6 tryton (maintained by: sharkcz) tryton-1.8.8-1.el6.noarch requires mx = 3.1.3-1.el6 trytond (maintained by: sharkcz) trytond-1.8.10-1.el6.noarch requires mx = 3.1.3-1.el6 neso (maintained by: sharkcz) neso-1.8.1-1.el6.noarch requires tryton = 1.8.8-1.el6 python-proteus (maintained by: sharkcz) python-proteus-1.8.4-1.el6.noarch requires tryton(kernel) = 1.8 trytond-account (maintained by: sharkcz, heffer) trytond-account-1.8.7-1.el6.noarch requires tryton(kernel) = 1.8 trytond-account-be (maintained by: sharkcz, heffer) trytond-account-be-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-account-de-skr03 (maintained by: sharkcz, heffer) trytond-account-de-skr03-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-account-invoice (maintained by: sharkcz, heffer) trytond-account-invoice-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-account-invoice-history (maintained by: sharkcz, heffer) trytond-account-invoice-history-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-account-invoice-line-standalone (maintained by: sharkcz, heffer) trytond-account-invoice-line-standalone-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-account-product (maintained by: sharkcz, heffer) trytond-account-product-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-account-statement (maintained by: sharkcz, heffer) trytond-account-statement-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-analytic-account (maintained by: sharkcz, heffer) trytond-analytic-account-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-analytic-invoice (maintained by: sharkcz, heffer) trytond-analytic-invoice-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-analytic-purchase (maintained by: sharkcz, heffer) trytond-analytic-purchase-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-analytic-sale (maintained by: sharkcz, heffer) trytond-analytic-sale-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-calendar (maintained by: sharkcz, heffer) trytond-calendar-1.8.4-1.el6.noarch requires tryton(kernel) = 1.8 trytond-calendar-classification (maintained by: sharkcz, heffer) trytond-calendar-classification-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-calendar-scheduling (maintained by: sharkcz, heffer) trytond-calendar-scheduling-1.8.3-1.el6.noarch requires tryton(kernel) = 1.8 trytond-calendar-todo (maintained by: sharkcz, heffer) trytond-calendar-todo-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-company (maintained by: sharkcz, heffer) trytond-company-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-company-work-time (maintained by: sharkcz, heffer) trytond-company-work-time-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-country (maintained by: sharkcz, heffer) trytond-country-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-currency (maintained by: sharkcz, heffer) trytond-currency-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-dashboard (maintained by: sharkcz, heffer) trytond-dashboard-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-google-maps (maintained by: sharkcz, heffer) trytond-google-maps-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-google-translate (maintained by: sharkcz, heffer) trytond-google-translate-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-ldap-authentication (maintained by: sharkcz, heffer) trytond-ldap-authentication-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-ldap-connection (maintained by: sharkcz, heffer) trytond-ldap-connection-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-party (maintained by: sharkcz, heffer) trytond-party-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-party-siret (maintained by: sharkcz, heffer) trytond-party-siret-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-party-vcarddav (maintained by: sharkcz, heffer) trytond-party-vcarddav-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-product (maintained by: sharkcz, heffer) trytond-product-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-product-cost-fifo (maintained by: sharkcz, heffer) trytond-product-cost-fifo-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-product-cost-history (maintained by: sharkcz, heffer) trytond-product-cost-history-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-product-price-list (maintained by: sharkcz, heffer) trytond-product-price-list-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-project (maintained by: sharkcz, heffer) trytond-project-1.8.3-1.el6.noarch requires tryton(kernel) = 1.8 trytond-project-plan (maintained by: sharkcz, heffer) trytond-project-plan-1.8.3-1.el6.noarch requires tryton(kernel) = 1.8 trytond-project-revenue (maintained by: sharkcz, heffer) trytond-project-revenue-1.8.3-1.el6.noarch requires tryton(kernel) = 1.8 trytond-purchase (maintained by: sharkcz, heffer) trytond-purchase-1.8.6-1.el6.noarch requires tryton(kernel) = 1.8 trytond-purchase-invoice-line-standalone (maintained by: sharkcz, heffer) trytond-purchase-invoice-line-standalone-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-sale (maintained by: sharkcz, heffer) trytond-sale-1.8.5-1.el6.noarch requires tryton(kernel) = 1.8 trytond-sale-opportunity (maintained by: sharkcz, heffer) trytond-sale-opportunity-1.8.4-1.el6.noarch requires tryton(kernel) = 1.8 trytond-sale-price-list (maintained by: sharkcz, heffer) trytond-sale-price-list-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-stock (maintained by: sharkcz, heffer) trytond-stock-1.8.5-1.el6.noarch requires tryton(kernel) = 1.8 trytond-stock-forecast (maintained by: sharkcz, heffer) trytond-stock-forecast-1.8.1-1.el6.noarch requires tryton(kernel) = 1.8 trytond-stock-inventory-location (maintained by: sharkcz, heffer) trytond-stock-inventory-location-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-stock-location-sequence (maintained by: sharkcz, heffer) trytond-stock-location-sequence-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-stock-product-location (maintained by: sharkcz, heffer) trytond-stock-product-location-1.8.0-3.el6.noarch requires tryton(kernel) = 1.8 trytond-stock-supply (maintained by: sharkcz, heffer) trytond-stock-supply-1.8.4-1.el6.noarch requires tryton(kernel) = 1.8 trytond-stock-supply-day (maintained by: sharkcz, heffer) trytond-stock-supply-day-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 trytond-timesheet (maintained by: sharkcz, heffer) trytond-timesheet-1.8.2-1.el6.noarch requires tryton(kernel) = 1.8 Too many dependencies for mx, not all listed here Depending on: openpgm (32), status change: 2017-03-17 (2 weeks ago) zeromq (maintained by: tomspur, kaptk2) zeromq-2.2.0-4.el6.i686 requires libpgm-5.1.so.0 zeromq-2.2.0-4.el6.src requires openpgm-devel = 5.1.118-3.el6 zeromq-2.2.0-4.el6.x86_64 requires libpgm-5.1.so.0()(64bit) zeromq3 (maintained by: tomspur, jpo, kaptk2, mrunge) zeromq3-3.2.5-1.el6.i686 requires libpgm-5.1.so.0 zeromq3-3.2.5-1.el6.src requires openpgm-devel = 5.1.118-3.el6 zeromq3-3.2.5-1.el6.x86_64 requires libpgm-5.1.so.0()(64bit) airinv (maintained by: denisarnaud) airinv-1.00.1-1.el6.i686 requires libzmq.so.1 airinv-1.00.1-1.el6.x86_64 requires libzmq.so.1()(64bit) simcrs (maintained by: denisarnaud) simcrs-1.01.1-1.el6.i686 requires libzmq.so.1 simcrs-1.01.1-1.el6.x86_64 requires libzmq.so.1()(64bit) czmq (maintained by: denisarnaud, jpo) czmq-1.4.1-1.el6.i686 requires libzmq.so.3 czmq-1.4.1-1.el6.x86_64 requires libzmq.so.3()(64bit) czmq-devel-1.4.1-1.el6.i686 requires libzmq.so.3 czmq-devel-1.4.1-1.el6.x86_64 requires libzmq.so.3()(64bit) perl-ZMQ-LibZMQ3 (maintained by: ppisar, jpo, perl-sig) perl-ZMQ-LibZMQ3-1.12-1.el6.1.x86_64 requires libzmq.so.3()(64bit) php-zmq (maintained by: group::infra-sig, ralph) php-zmq-1.0.8-2.el6.x86_64 requires libzmq.so.3()(64bit) python-zmq (maintained by: group::infra-sig, mrunge, tomspur) python-zmq-14.3.1-1.el6.x86_64 requires libzmq.so.3()(64bit) fedmsg (maintained by: group::infra-sig, bowlofeggs, lmacken, ralph) fedmsg-0.13.1-1.el6.noarch requires python-zmq = 14.3.1-1.el6 ipython (maintained by: dcantrel, cstratak, group::python-sig, mrunge, orion, salimma, tomspur) ipython-0.13.2-7.el6.src requires python-zmq = 14.3.1-1.el6 python-ipython-console-0.13.2-7.el6.noarch requires python-zmq = 14.3.1-1.el6 python-narcissus-common (maintained by: ralph) python-narcissus-common-0.9.0.1-1.el6.noarch requires python-zmq = 14.3.1-1.el6 python-narcissus-common-0.9.0.1-1.el6.src requires python-zmq = 14.3.1-1.el6 python-txzmq (maintained by: group::infra-sig, ralph) python-txzmq-0.6.2-4.el6.noarch requires python-zmq = 14.3.1-1.el6 python-txzmq-0.6.2-4.el6.src requires python-zmq = 14.3.1-1.el6 salt (maintained by: herlo, dmurphy18, jcollie, kaptk2, terminalmage) salt-2015.5.10-2.el6.noarch requires python-zmq = 14.3.1-1.el6 bodhi (maintained by: lmacken) bodhi-server-0.9.12.2-1.el6.noarch requires fedmsg = 0.13.1-1.el6 datagrepper (maintained by: group::infra-sig, ianweller, ralph) datagrepper-0.4.2-1.el6.noarch requires fedmsg = 0.13.1-1.el6 datagrepper-0.4.2-1.el6.src requires fedmsg = 0.13.1-1.el6 datanommer-commands (maintained by: group::infra-sig, ralph) datanommer-commands-0.4.3-1.el6.noarch requires fedmsg = 0.13.1-1.el6 datanommer-commands-0.4.3-1.el6.src requires fedmsg = 0.13.1-1.el6 fedwatch (maintained by: sochotni) fedwatch-0.4-2.el6.noarch requires fedmsg = 0.13.1-1.el6 fedwatch-0.4-2.el6.src requires fedmsg = 0.13.1-1.el6 github2fedmsg (maintained by: group::infra-sig, ralph) github2fedmsg-0.3.3-2.el6.noarch requires fedmsg = 0.13.1-1.el6 github2fedmsg-0.3.3-2.el6.src requires fedmsg = 0.13.1-1.el6 mailman3-fedmsg-plugin (maintained by: group::infra-sig, ralph) mailman3-fedmsg-plugin-0.1.1-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-askbot-fedmsg (maintained by: group::infra-sig, ralph) python-askbot-fedmsg-0.1.1-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-askbot-fedmsg-0.1.1-1.el6.src requires fedmsg = 0.13.1-1.el6 python-bugzilla2fedmsg (maintained by: group::infra-sig, ralph) python-bugzilla2fedmsg-0.2.1-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-bugzilla2fedmsg-0.2.1-1.el6.src requires fedmsg = 0.13.1-1.el6 python-datanommer-consumer (maintained by: group::infra-sig, ralph) python-datanommer-consumer-0.6.0-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-datanommer-consumer-0.6.0-1.el6.src requires fedmsg = 0.13.1-1.el6 python-datanommer-models (maintained by: group::infra-sig, ralph) python-datanommer-models-0.6.4-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-datanommer-models-0.6.4-1.el6.src requires fedmsg = 0.13.1-1.el6 python-fedbadges (maintained by: group::infra-sig, ralph) python-fedbadges-0.4.3-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-fedbadges-0.4.3-1.el6.src requires fedmsg = 0.13.1-1.el6 python-fedmsg-genacls (maintained by: group::infra-sig, ralph) python-fedmsg-genacls-0.4-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-fedmsg-genacls-0.4-1.el6.src requires fedmsg = 0.13.1-1.el6 python-fedmsg-meta-fedora-infrastructure (maintained by: group::infra-sig, ianweller, lmacken, ralph, sayanchowdhury) python-fedmsg-meta-fedora-infrastructure-0.5.10-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-fedmsg-meta-fedora-infrastructure-0.5.10-1.el6.src requires fedmsg = 0.13.1-1.el6 python-fmn-consumer (maintained by: group::infra-sig, ralph, sayanchowdhury) python-fmn-consumer-0.3.0-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-fmn-consumer-0.3.0-1.el6.src requires fedmsg = 0.13.1-1.el6 python-fmn-rules (maintained by: group::infra-sig, ralph, sayanchowdhury) python-fmn-rules-0.4.5-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-fmn-rules-0.4.5-1.el6.src requires fedmsg = 0.13.1-1.el6 python-summershum (maintained by: group::infra-sig, pingou) python-summershum-0.1.5-1.el6.noarch requires fedmsg = 0.13.1-1.el6 python-summershum-0.1.5-1.el6.src requires fedmsg = 0.13.1-1.el6 python-tahrir (maintained by: group::infra-sig, rossdylan, sayanchowdhury) python-tahrir-0.7.0-2.el6.noarch requires fedmsg = 0.13.1-1.el6 supybot-fedmsg (maintained by: group::infra-sig, ralph) supybot-fedmsg-0.1.0-1.el6.noarch requires fedmsg = 0.13.1-1.el6 trac-fedmsg-plugin (maintained by: group::infra-sig, ralph) trac-fedmsg-plugin-0.4.0-1.el6.noarch requires fedmsg = 0.13.1-1.el6 Too many dependencies for openpgm, not all listed here Depending on: par2cmdline (1), status change: 2017-01-05 (12 weeks ago) dar (maintained by: lbazan) dar-2.4.18-1.el6.x86_64 requires par2cmdline = 0.4.tbb.20100203-3.el6 Depending on: php-fpdf (1), status change: 2017-01-06 (12 weeks ago) phoronix-test-suite (maintained by: lotharlutz) phoronix-test-suite-6.6.0-1.el6.noarch requires php-fpdf = 1.6-4.el6 Depending on: python-logilab-common (4), status change: 2016-12-16 (15 weeks ago) python-astroid (maintained by: lupinix, bcl, mrunge) python-astroid-1.2.1-2.el6.noarch requires python-logilab-common = 0.62.1-2.el6 python-astroid-1.2.1-2.el6.src requires python-logilab-common = 0.62.1-2.el6 pylint (maintained by: lupinix, bcl) pylint-1.3.1-1.el6.noarch requires python-astroid = 1.2.1-2.el6 pylint-1.3.1-1.el6.src requires python-astroid = 1.2.1-2.el6 django-lint (maintained by: mrunge) django-lint-0.13-5.el6.noarch requires pylint = 1.3.1-1.el6 spacewalk-pylint (maintained by: msuchy) spacewalk-pylint-0.5-1.el6.noarch requires pylint = 1.3.1-1.el6 Depending on: rubygem-json_pure (1), status change: 2017-01-12 (11 weeks ago) rubygem-jgrep (maintained by: domcleal, lkundrak, stevetraylen) rubygem-jgrep-1.4.1-1.el6.noarch requires rubygem(json_pure) = 1.6.3 Affected (co)maintainers adamwill: trac-condfieldsgenshi-plugin, trac-defaultcc-plugin agoode: jai-imageio-core, golang-launchpad-go-xdg-v0 ashokdas: rmanage athmane: python-ctypesgen, s3ql bcl: python-logilab-common, mx bowlofeggs: openpgm cicku: s3ql cstratak: openpgm czanik: eventlog dcantrel: openpgm dcr226: sticky-notes denisarnaud: openpgm derks: python-cement, rubygem-parseconfig dmurphy18: openpgm domcleal: rubygem-json_pure enslaver: mkdst epienbro: par2cmdline fonts-sig: python-robofab, python-compositor, python-ufo2fdk, python-fontMath group::infra-sig: openpgm group::python-sig: openpgm heffer: mx herlo: openpgm i18n-team: python-robofab, python-compositor, python-ufo2fdk, python-fontMath ianweller: openpgm jcollie: openpgm jpo: ivykis, eventlog, openpgm jpokorny: python-robofab kaptk2: openpgm ke4qqq: php-fpdf kevin: trac-defaultcc-plugin lbazan: par2cmdline lkundrak: rubygem-json_pure lmacken: openpgm lotharlutz: php-fpdf lupinix: python-logilab-common maci: s3ql marcusk: eventlog mfojtik: rubygem-json_pure mrunge: python-logilab-common, eventlog, openpgm msuchy: python-logilab-common muhammetk: gtranslator orion: openpgm perl-sig: openpgm pfj: mx pingou: openpgm pnemade: rmanage, python-ufo2fdk, python-fontMath, elfinfo, greadelf, python-robofab, python-compositor, nodejs-posix-get, gtranslator ppisar: openpgm ralph: openpgm rayvd: eventlog rossdylan: openpgm sagitter: telegram-cli, tubo, python-pytg salimma: openpgm sayanchowdhury: openpgm sharkcz: mx sochotni: openpgm stevetraylen: rubygem-json_pure tdawson: rubygem-json_pure terminalmage: openpgm timlau: postr, yumex tomspur: openpgm wart: tktable wtogami: mkdst wwoods: mx Orphans (36): elfinfo eventlog golang-launchpad-go-xdg-v0 greadelf gtranslator ivykis jai-imageio-core libyui-gtk libyui-ncurses libyui-qt mkdst mx nodejs-posix-get openpgm par2cmdline php-fpdf postr python-cement python-compositor python-ctypesgen python-fontMath python-logilab-common python-pytg python-robofab python-ufo2fdk rmanage rubygem-json_pure rubygem-parseconfig s3ql sticky-notes telegram-cli tktable trac-condfieldsgenshi-plugin trac-defaultcc-plugin tubo yumex Orphans (dependend on) (7): eventlog mx openpgm par2cmdline php-fpdf python-logilab-common rubygem-json_pure Orphans (epel6) for at least 6 weeks (dependend on) (5): mx par2cmdline php-fpdf python-logilab-common rubygem-json_pure Orphans (epel6)(not depended on) (29): elfinfo golang-launchpad-go-xdg-v0 greadelf gtranslator ivykis jai-imageio-core libyui-gtk libyui-ncurses libyui-qt mkdst nodejs-posix-get postr python-cement python-compositor python-ctypesgen python-fontMath python-pytg python-robofab python-ufo2fdk rmanage rubygem-parseconfig s3ql sticky-notes telegram-cli tktable trac-condfieldsgenshi-plugin trac-defaultcc-plugin tubo yumex Orphans (epel6) for at least 6 weeks (not dependend on) (7): libyui-gtk libyui-ncurses libyui-qt nodejs-posix-get python-ctypesgen s3ql sticky-notes Depending packages (epel6) (93): airinv bodhi czmq dar datagrepper datanommer-commands django-lint fedmsg fedwatch github2fedmsg ipython mailman3-fedmsg-plugin neso perl-ZMQ-LibZMQ3 phoronix-test-suite php-zmq pylint python-askbot-fedmsg python-astroid python-bugzilla2fedmsg python-datanommer-consumer python-datanommer-models python-fedbadges python-fedmsg-genacls python-fedmsg-meta-fedora-infrastructure python-fmn-consumer python-fmn-rules python-narcissus-common python-proteus python-summershum python-tahrir python-txzmq python-zmq rubygem-jgrep salt simcrs smolt spacewalk-pylint supybot-fedmsg syslog-ng trac-fedmsg-plugin tryton trytond trytond-account trytond-account-be trytond-account-de-skr03 trytond-account-invoice trytond-account-invoice-history trytond-account-invoice-line-standalone trytond-account-product trytond-account-statement trytond-analytic-account trytond-analytic-invoice trytond-analytic-purchase trytond-analytic-sale trytond-calendar trytond-calendar-classification trytond-calendar-scheduling trytond-calendar-todo trytond-company trytond-company-work-time trytond-country trytond-currency trytond-dashboard trytond-google-maps trytond-google-translate trytond-ldap-authentication trytond-ldap-connection trytond-party trytond-party-siret trytond-party-vcarddav trytond-product trytond-product-cost-fifo trytond-product-cost-history trytond-product-price-list trytond-project trytond-project-plan trytond-project-revenue trytond-purchase trytond-purchase-invoice-line-standalone trytond-sale trytond-sale-opportunity trytond-sale-price-list trytond-stock trytond-stock-forecast trytond-stock-inventory-location trytond-stock-location-sequence trytond-stock-product-location trytond-stock-supply trytond-stock-supply-day trytond-timesheet zeromq zeromq3 Packages depending on packages orphaned (epel6) for more than 6 weeks (60): dar django-lint neso phoronix-test-suite pylint python-astroid python-proteus rubygem-jgrep smolt spacewalk-pylint tryton trytond trytond-account trytond-account-be trytond-account-de-skr03 trytond-account-invoice trytond-account-invoice-history trytond-account-invoice-line-standalone trytond-account-product trytond-account-statement trytond-analytic-account trytond-analytic-invoice trytond-analytic-purchase trytond-analytic-sale trytond-calendar trytond-calendar-classification trytond-calendar-scheduling trytond-calendar-todo trytond-company trytond-company-work-time trytond-country trytond-currency trytond-dashboard trytond-google-maps trytond-google-translate trytond-ldap-authentication trytond-ldap-connection trytond-party trytond-party-siret trytond-party-vcarddav trytond-product trytond-product-cost-fifo trytond-product-cost-history trytond-product-price-list trytond-project trytond-project-plan trytond-project-revenue trytond-purchase trytond-purchase-invoice-line-standalone trytond-sale trytond-sale-opportunity trytond-sale-price-list trytond-stock trytond-stock-forecast trytond-stock-inventory-location trytond-stock-location-sequence trytond-stock-product-location trytond-stock-supply trytond-stock-supply-day trytond-timesheet Not found in repo (epel6) (9): golang-launchpad-go-xdg-v0 gtranslator libyui-gtk libyui-ncurses libyui-qt mkdst nodejs-posix-get postr s3ql -- The script creating this output is run and developed by Fedora Release Engineering. Please report issues at its pagure instance: https://pagure.io/releng/ The sources of this script can be found at: https://pagure.io/releng/blob/master/f/scripts/find_unblocked_orphans.py

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 05 Apr '17

05 Apr '17

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 05 Apr '17

05 Apr '17

The following Fedora EPEL 6 Security updates need testing: Age URL 637 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 631 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 521 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 493 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 223 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53 chicken-4.11.0-3.el6 103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 53 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-acd2c2af0d nagios-4.2.4-4.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-da3e5ef08f tcpreplay-4.2.1-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-68aef427a4 php-horde-Horde-Crypt-2.7.6-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-def12f5099 libupnp-1.6.21-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing a52dec-0.7.4-27.el6 guacamole-server-0.9.12-1.el6 Details about builds: ================================================================================ a52dec-0.7.4-27.el6 (FEDORA-EPEL-2017-94da5b4633) Small test program for liba52 -------------------------------------------------------------------------------- Update Information: Fix upgrade path for 3rd part repos using a52dec-libs instead of liba52 ---- Fix multilibs transition ---- Moved to Fedora as the AC-3 patent has expired. -------------------------------------------------------------------------------- ================================================================================ guacamole-server-0.9.12-1.el6 (FEDORA-EPEL-2017-4df1f5bee8) Server-side native components that form the Guacamole proxy -------------------------------------------------------------------------------- Update Information: Update to 0.9.12 release --------------------------------------------------------------------------------

1 0

EPEL Steering Committee Meeting Canceled for 2017-04-05
by Stephen John Smoogen 05 Apr '17

05 Apr '17

There will be no EPSCO meeting this week. Things that have happened since the last meeting: 1. EPEL-5 has been end of lifed with no builds still happening. 2. EPEL-5 has been archived over to /pub/archive/epel/5/ 3. EPEL-4 has been archived over to /pub/archive/epel/4/ 4. CentOS-6.9 has been released. We are now in the process of working through packages which need to be removed or can be put into EPEL-6. 5. Some updates to documentation have happened in the EPEL git repository. If there are issues which need to be looked at for next week, please reply to this message. -- Stephen J Smoogen.

2 2

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 04 Apr '17

04 Apr '17

The following Fedora EPEL 7 Security updates need testing: Age URL 757 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 520 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 222 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-05ac8b1dc4 php-onelogin-php-saml-2.10.5-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d518cd4b9 libgit2-0.24.6-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5794ee2486 moodle-3.1.5-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7e4f45cad3 tcpreplay-4.2.1-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e9e451db03 chromium-57.0.2987.133-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99c7c2f382 xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-3.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ae79d206b ReviewBoard-2.5.10-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d9e3bfe77d php-horde-Horde-Crypt-2.7.6-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7889b3b509 libupnp-1.6.21-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing ReviewBoard-2.5.10-1.el7 apache-commons-fileupload-1.3.2-3.1.el7 colm-0.13.0.4-2.el7 geronimo-interceptor-1.0.1-16.el7 hibernate-commons-annotations-5.0.1-3.el7 hibernate-jpa-2.0-api-1.0.1-20.el7 hibernate-jpa-2.1-api-1.0.0-3.el7 jboss-logging-tools-2.0.1-5.el7 libglvnd-0.2.999-14.20170308git8e6e102.el7 libupnp-1.6.21-1.el7 maven-processor-plugin-2.2.4-8.el7 mod_cluster-1.3.3-10.el7 nodejs-6.10.1-2.el7 php-composer-spdx-licenses-1.1.6-1.el7 php-horde-Horde-Crypt-2.7.6-1.el7 python-xml2rfc-2.5.2-1.el7 xorgxrdp-0.2.1-1.el7 xrdp-0.9.2-3.el7 Details about builds: ================================================================================ ReviewBoard-2.5.10-1.el7 (FEDORA-EPEL-2017-1ae79d206b) Web-based code review tool -------------------------------------------------------------------------------- Update Information: * https://www.reviewboard.org/docs/releasenotes/reviewboard/2.5.10/ * Addresses an XSS vulnerability -------------------------------------------------------------------------------- ================================================================================ apache-commons-fileupload-1.3.2-3.1.el7 (FEDORA-EPEL-2017-a73d7e35e2) API to work with HTML file upload -------------------------------------------------------------------------------- Update Information: This update brings back obsoletes for jakarta-commons-fileupload. -------------------------------------------------------------------------------- ================================================================================ colm-0.13.0.4-2.el7 (FEDORA-EPEL-2017-d17ec283a8) Programming language designed for the analysis of computer languages -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ geronimo-interceptor-1.0.1-16.el7 (FEDORA-EPEL-2017-7e8558deda) Java EE: Interceptor API v3.0 -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ hibernate-commons-annotations-5.0.1-3.el7 (FEDORA-EPEL-2017-5a8f735a2e) Hibernate Annotations -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ hibernate-jpa-2.0-api-1.0.1-20.el7 (FEDORA-EPEL-2017-26479d119f) Java Persistence 2.0 (JSR 317) API -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ hibernate-jpa-2.1-api-1.0.0-3.el7 (FEDORA-EPEL-2017-76f9e631a1) Java Persistence 2.1 (JSR 338) API -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ jboss-logging-tools-2.0.1-5.el7 (FEDORA-EPEL-2017-a9cb1f17d0) JBoss Logging I18n Annotation Processor -------------------------------------------------------------------------------- Update Information: Invocation of plugins for target configured to 1.7 and doclint disabling -------------------------------------------------------------------------------- ================================================================================ libglvnd-0.2.999-14.20170308git8e6e102.el7 (FEDORA-EPEL-2017-26a97d4743) The GL Vendor-Neutral Dispatch library -------------------------------------------------------------------------------- Update Information: * Fix conditionals for _without_mesa_glvnd_default * Fix other RHEL- conditionals, too * Update RPM filters for private libraries (includes GLX, fixes RHEL 6). * Update to latest snapshot, remove upstreamed patches. * Update release to packaging guidelines format. * Make sure that for Fedora 24 and RHEL the libraries are always private. -------------------------------------------------------------------------------- ================================================================================ libupnp-1.6.21-1.el7 (FEDORA-EPEL-2017-7889b3b509) Universal Plug and Play (UPnP) SDK -------------------------------------------------------------------------------- Update Information: Long standing security bugs fixed through update to version 1.6.21. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1437143 - Plans for EPEL 6 https://bugzilla.redhat.com/show_bug.cgi?id=1437143 [ 2 ] Bug #1388774 - CVE-2016-8863 libupnp: Heap buffer overflow in the create_url_list function [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1388774 [ 3 ] Bug #1358614 - CVE-2016-6255 libupnp: Unhandled POSTs can write to the filesystem by default [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1358614 [ 4 ] Bug #1358352 - libupnp: Upload arbitrary file via POST [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1358352 [ 5 ] Bug #1146033 - libupnp: security and critical bug fixes [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1146033 [ 6 ] Bug #905578 - CVE-2012-5958 CVE-2012-5959 CVE-2012-5960 CVE-2012-5961 CVE-2012-5962 CVE-2012-5963 CVE-2012-5964 CVE-2012-5965 ibupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=905578 -------------------------------------------------------------------------------- ================================================================================ maven-processor-plugin-2.2.4-8.el7 (FEDORA-EPEL-2017-1fe03ca888) Maven Processor Plugin -------------------------------------------------------------------------------- Update Information: Disable doclint -------------------------------------------------------------------------------- ================================================================================ mod_cluster-1.3.3-10.el7 (FEDORA-EPEL-2017-d241156dfe) Apache HTTP Server dynamic load balancer with Wildfly and Tomcat libraries -------------------------------------------------------------------------------- Update Information: Upgrade to 1.3.3 (current rawhide) and patch to change catalina deps -------------------------------------------------------------------------------- ================================================================================ nodejs-6.10.1-2.el7 (FEDORA-EPEL-2017-9d4f011d75) JavaScript runtime -------------------------------------------------------------------------------- Update Information: Fix a segfault with SSL and the placement of manpages ---- Update to 6.10.1 ---- https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md# 2017-02-21-version-6100-boron-lts-mylesborins ---- Update to v6.9.5(security) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1436445 - Segfault with ssl with 6.10.1 el7 https://bugzilla.redhat.com/show_bug.cgi?id=1436445 [ 2 ] Bug #1433403 - npm man pages appearing in the nodejs package https://bugzilla.redhat.com/show_bug.cgi?id=1433403 -------------------------------------------------------------------------------- ================================================================================ php-composer-spdx-licenses-1.1.6-1.el7 (FEDORA-EPEL-2017-13087e70ed) SPDX licenses list and validation library -------------------------------------------------------------------------------- Update Information: **Version 1.1.6** - 2017-04-03 * Changed: updated licenses list. -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Crypt-2.7.6-1.el7 (FEDORA-EPEL-2017-d9e3bfe77d) Horde Cryptography API -------------------------------------------------------------------------------- Update Information: **Horde_Crypt 2.7.6** * [mjr] SECURITY: Fix remote code execution vulnerability (**CVE-2017-7413**, and **CVE-2017-7414**). -------------------------------------------------------------------------------- ================================================================================ python-xml2rfc-2.5.2-1.el7 (FEDORA-EPEL-2017-60dfbde5b7) Convert IETF RFC-2629 XML into txt format -------------------------------------------------------------------------------- Update Information: Updated to 2.5.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438375 - xml2rfc: incorrect dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1438375 -------------------------------------------------------------------------------- ================================================================================ xorgxrdp-0.2.1-1.el7 (FEDORA-EPEL-2017-99c7c2f382) Implementation of xrdp backend as Xorg modules -------------------------------------------------------------------------------- Update Information: New upstream version of xorgxrdp and xrdp: New features in xrdp: - RemoteFX codec support is now enabled by default. - Bitmap updates support is now enabled by default. - TLS ciphers suites and version is now logged. - Connected computer name is now logged. - Switched to Xorg (xorgxrdp) as the default backend now. - Miscellaneous RemoteFX codec mode improvements. - Socket directory is configurable at the compile time. Bugfixes in xrdp: - Parallels client for MacOS / iOS can now connect (audio redirection must be disabled on client or xrdp server though). - MS RDP client for iOS can now connect using TLS security layer. - MS RDP client for Android can now connect to xrdp. - Large resolutions (4K) can be used with RemoteFX graphics. - Multiple RemoteApps can be opened throguh NeutrinoRDP proxy. - tls_ciphers in xrdp.ini is not limited to 63 chars anymore, it's variable-length. - Fixed an issue where tls_ciphers were ignored and rdp security layer could be used instead. - Kill disconnected sessions feature is working with Xorg (xorgxrdp) backend. - Miscellaneous code cleanup and memory issues fixes. Rebuild of xrdp requiring both xorgxrdp and tigervnc- minimal. VNC is still the default. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1433958 - CVE-2017-6967 xrdp: Incorrect placement of auth_start_session() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1433958 -------------------------------------------------------------------------------- ================================================================================ xrdp-0.9.2-3.el7 (FEDORA-EPEL-2017-99c7c2f382) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information: New upstream version of xorgxrdp and xrdp: New features in xrdp: - RemoteFX codec support is now enabled by default. - Bitmap updates support is now enabled by default. - TLS ciphers suites and version is now logged. - Connected computer name is now logged. - Switched to Xorg (xorgxrdp) as the default backend now. - Miscellaneous RemoteFX codec mode improvements. - Socket directory is configurable at the compile time. Bugfixes in xrdp: - Parallels client for MacOS / iOS can now connect (audio redirection must be disabled on client or xrdp server though). - MS RDP client for iOS can now connect using TLS security layer. - MS RDP client for Android can now connect to xrdp. - Large resolutions (4K) can be used with RemoteFX graphics. - Multiple RemoteApps can be opened throguh NeutrinoRDP proxy. - tls_ciphers in xrdp.ini is not limited to 63 chars anymore, it's variable-length. - Fixed an issue where tls_ciphers were ignored and rdp security layer could be used instead. - Kill disconnected sessions feature is working with Xorg (xorgxrdp) backend. - Miscellaneous code cleanup and memory issues fixes. Rebuild of xrdp requiring both xorgxrdp and tigervnc- minimal. VNC is still the default. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1433958 - CVE-2017-6967 xrdp: Incorrect placement of auth_start_session() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1433958 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 04 Apr '17

04 Apr '17

The following Fedora EPEL 6 Security updates need testing: Age URL 636 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 630 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 520 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 491 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 222 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53 chicken-4.11.0-3.el6 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 52 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-acd2c2af0d nagios-4.2.4-4.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-da3e5ef08f tcpreplay-4.2.1-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-68aef427a4 php-horde-Horde-Crypt-2.7.6-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-def12f5099 libupnp-1.6.21-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing libglvnd-0.2.999-14.20170308git8e6e102.el6 libupnp-1.6.21-1.el6 open-vm-tools-10.1.5-6.el6 php-horde-Horde-Crypt-2.7.6-1.el6 Details about builds: ================================================================================ libglvnd-0.2.999-14.20170308git8e6e102.el6 (FEDORA-EPEL-2017-fe81b727ea) The GL Vendor-Neutral Dispatch library -------------------------------------------------------------------------------- Update Information: * Fix conditionals for _without_mesa_glvnd_default * Fix other RHEL- conditionals, too * Update RPM filters for private libraries (includes GLX, fixes RHEL 6). * Update to latest snapshot, remove upstreamed patches. * Update release to packaging guidelines format. * Make sure that for Fedora 24 and RHEL the libraries are always private. -------------------------------------------------------------------------------- ================================================================================ libupnp-1.6.21-1.el6 (FEDORA-EPEL-2017-def12f5099) Universal Plug and Play (UPnP) SDK -------------------------------------------------------------------------------- Update Information: Long standing security bugs fixed through update to version 1.6.21. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1437143 - Plans for EPEL 6 https://bugzilla.redhat.com/show_bug.cgi?id=1437143 [ 2 ] Bug #1388774 - CVE-2016-8863 libupnp: Heap buffer overflow in the create_url_list function [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1388774 [ 3 ] Bug #1358614 - CVE-2016-6255 libupnp: Unhandled POSTs can write to the filesystem by default [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1358614 [ 4 ] Bug #1358352 - libupnp: Upload arbitrary file via POST [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1358352 [ 5 ] Bug #1146033 - libupnp: security and critical bug fixes [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1146033 [ 6 ] Bug #905578 - CVE-2012-5958 CVE-2012-5959 CVE-2012-5960 CVE-2012-5961 CVE-2012-5962 CVE-2012-5963 CVE-2012-5964 CVE-2012-5965 ibupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=905578 -------------------------------------------------------------------------------- ================================================================================ open-vm-tools-10.1.5-6.el6 (FEDORA-EPEL-2017-cdcc212f16) Open Virtual Machine Tools for virtual machines hosted on VMware -------------------------------------------------------------------------------- Update Information: Fix incorrect udev rules installation. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438481 - open-vm-tools 10.1.5 installs 99-vmware-scsi-udev.rules to wrong location https://bugzilla.redhat.com/show_bug.cgi?id=1438481 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Crypt-2.7.6-1.el6 (FEDORA-EPEL-2017-68aef427a4) Horde Cryptography API -------------------------------------------------------------------------------- Update Information: **Horde_Crypt 2.7.6** * [mjr] SECURITY: Fix remote code execution vulnerability (**CVE-2017-7413**, and **CVE-2017-7414**). --------------------------------------------------------------------------------

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel April 2017