The following Fedora EPEL 7 Security updates need testing:
Age URL
850
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
612
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
194
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
92
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
90
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4
tnef-1.4.14-1.el7
89
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378
python-XStatic-jquery-ui-1.12.0.1-1.el7
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1
lxc-1.0.10-2.el7
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-30baf73207
chromium-59.0.3071.104-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-abfcb66c76
python-djblets-0.9.8-1.el7 ReviewBoard-2.5.13.1-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5ab90c7180
zabbix20-2.0.21-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-eb357ac3b3
zabbix22-2.2.18-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7c2e699925
catdoc-0.95-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bcfa38e123
drupal7-7.56-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ee32a5ffa
libtomcrypt-1.17-25.el7 libtommath-0.42.0-5.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2b04537603
phpMyAdmin-4.4.15.10-2.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2ba20eeb97
php-horde-Horde-Image-2.5.1-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e
cross-binutils-2.25.1-31.el7.1 cross-gcc-4.8.5-16.el7.1
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b
mosquitto-1.4.13-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a427bcb775
yara-3.6.2-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1
globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7
globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7
globus-gram-job-manager-14.36-1.el7 globus-gridftp-server-12.2-1.el7
globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7
globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7
globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7678ea423a
jabberd-2.6.1-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-86125e7897
GraphicsMagick-1.3.26-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
GraphicsMagick-1.3.26-1.el7
abrt-addon-python3-2.1.11-49.el7
cacti-1.1.12-1.el7
cvechecker-3.7-3.el7
globus-ftp-client-8.36-1.el7
globus-gass-cache-program-6.7-1.el7
globus-gass-copy-9.27-1.el7
globus-gram-client-13.18-1.el7
globus-gram-job-manager-14.36-1.el7
globus-gridftp-server-12.2-1.el7
globus-gssapi-gsi-12.17-1.el7
globus-io-11.9-1.el7
globus-net-manager-0.17-1.el7
globus-xio-5.16-1.el7
globus-xio-gsi-driver-3.11-1.el7
globus-xio-pipe-driver-3.10-1.el7
globus-xio-udt-driver-1.28-1.el7
gnucash-2.6.17-1.el7
gnucash-docs-2.6.17-1.el7
jabberd-2.6.1-1.el7
libdxflib-3.17.0-2.el7
myproxy-6.1.28-1.el7
nagios-plugins-2.2.1-2git.el7
nrpe-3.1.1-2.el7
php-horde-Horde-Icalendar-2.1.7-1.el7
rkhunter-1.4.4-2.el7
thermald-1.6-6.el7
trustedqsl-2.3.1-1.el7
Details about builds:
================================================================================
GraphicsMagick-1.3.26-1.el7 (FEDORA-EPEL-2017-86125e7897)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
New stable upstream release, primarily includes security fixes for
CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also
http://www.graphicsmagick.org/NEWS.html#july-4-2017
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467378 - CVE-2017-10800 GraphicsMagick: out of memory in ReadMATImage()
function
https://bugzilla.redhat.com/show_bug.cgi?id=1467378
[ 2 ] Bug #1467372 - CVE-2017-10799 GraphicsMagick: out of memory in ReadDPXImage()
function
https://bugzilla.redhat.com/show_bug.cgi?id=1467372
[ 3 ] Bug #1467655 - CVE-2017-10794 GraphicsMagick: buffer overflow in
QuantumTransferMode
https://bugzilla.redhat.com/show_bug.cgi?id=1467655
--------------------------------------------------------------------------------
================================================================================
abrt-addon-python3-2.1.11-49.el7 (FEDORA-EPEL-2017-5c1cdaa826)
ABRT's addon for catching and analyzing Python 3 exceptions
--------------------------------------------------------------------------------
Update Information:
Introduce abrt-addon-python3 package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445615 - abrt part missing
https://bugzilla.redhat.com/show_bug.cgi?id=1445615
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.12-1.el7 (FEDORA-EPEL-2017-d13b9e8413)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.12 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.11 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.12
--------------------------------------------------------------------------------
================================================================================
cvechecker-3.7-3.el7 (FEDORA-EPEL-2017-146693c8dc)
Tool for compare packages installed in your system with CVE database
--------------------------------------------------------------------------------
Update Information:
Add cvechecker
--------------------------------------------------------------------------------
================================================================================
globus-ftp-client-8.36-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - GridFTP Client Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-gass-cache-program-6.7-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Tools to manipulate local and remote GASS caches
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-gass-copy-9.27-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Globus Gass Copy
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-gram-client-13.18-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - GRAM Client Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-14.36-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - GRAM Jobmanager
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-12.2-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-12.17-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-io-11.9-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - uniform I/O interface
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-net-manager-0.17-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Network Manager
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-xio-5.16-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Globus XIO Framework
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-xio-gsi-driver-3.11-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Globus XIO GSI Driver
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-xio-pipe-driver-3.10-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Globus Pipe Driver
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
globus-xio-udt-driver-1.28-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Globus Toolkit - Globus XIO UDT Driver
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
gnucash-2.6.17-1.el7 (FEDORA-EPEL-2017-be64013a1c)
Finance management application
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest upstream bugfix release. For more information
on changes in this release, see the upstream release notes at:
https://gnucash.org/#n-170702-2.6.17.news
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467327 - gnucash-2.6.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467327
--------------------------------------------------------------------------------
================================================================================
gnucash-docs-2.6.17-1.el7 (FEDORA-EPEL-2017-be64013a1c)
Help files and documentation for the GnuCash personal finance manager
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest upstream bugfix release. For more information
on changes in this release, see the upstream release notes at:
https://gnucash.org/#n-170702-2.6.17.news
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467327 - gnucash-2.6.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467327
--------------------------------------------------------------------------------
================================================================================
jabberd-2.6.1-1.el7 (FEDORA-EPEL-2017-7678ea423a)
OpenSource server implementation of the Jabber protocols
--------------------------------------------------------------------------------
Update Information:
updated to 2.6.1 (security bugfix release)
--------------------------------------------------------------------------------
================================================================================
libdxflib-3.17.0-2.el7 (FEDORA-EPEL-2017-04d6090cf2)
A C++ library for reading and writing DXF files
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1457949 - Review Request: libdxflib - A C++ library for reading and writing
DXF files
https://bugzilla.redhat.com/show_bug.cgi?id=1457949
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.28-1.el7 (FEDORA-EPEL-2017-52b6bc17c1)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *
Remove some redundant tests to reduce test time globus-gass-cache-program *
GT6 update globus-gass-copy * Don't attempt sshftp data protection without
creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix
uninitialized field related crash (9.25) * Remove checksum data from public
handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *
Default to running personal gatekeeper on an ephemeral port globus-gridftp-
server * New error message format (12.0) * Configuration database (12.0) *
Better delay for end of session ref check (12.1) * Fix tests when getgroups()
does not return effective gid (12.2) globus-gram-client * GT6 update globus-
gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support
(12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex-
unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support
globus-net-manager * Fix .pc typo * Drop patch globus-net-manager-
pkgconfig.patch (fixed upstream) globus-xio * Don't rely on
globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling
in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for
anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc
typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop
some BuildRequires no longer needed with above change * Fix undefined symbols
during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3
support (6.1.27)
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.2.1-2git.el7 (FEDORA-EPEL-2017-cc0aeaca30)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
Update to git for 20170703
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465784 - nagios http plugin is old and buggy
https://bugzilla.redhat.com/show_bug.cgi?id=1465784
[ 2 ] Bug #1463674 - check_http segfaults once Lenovo IMM controllers are checked
https://bugzilla.redhat.com/show_bug.cgi?id=1463674
[ 3 ] Bug #1427925 - check_http 2.2.0-4 fails if Transfer-Encoding ends the header
https://bugzilla.redhat.com/show_bug.cgi?id=1427925
[ 4 ] Bug #1256848 - nagios-plugins-log has incorrect paths to egrep/tail (EL6)
https://bugzilla.redhat.com/show_bug.cgi?id=1256848
[ 5 ] Bug #1210380 - SELinux prevents check_mailq from executing postfix when run via
NRPE
https://bugzilla.redhat.com/show_bug.cgi?id=1210380
[ 6 ] Bug #1052740 - SELinux is preventing check_log via NRPE from read and open
var_log_t files
https://bugzilla.redhat.com/show_bug.cgi?id=1052740
--------------------------------------------------------------------------------
================================================================================
nrpe-3.1.1-2.el7 (FEDORA-EPEL-2017-0ff431e36d)
Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:
Fix bug due to /etc/nrpe.d/ includes was above other defined entries BZ# 1467971
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467971 - Regression to Bug 963703 - nrpe.cfg sets config values after
including user configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1467971
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Icalendar-2.1.7-1.el7 (FEDORA-EPEL-2017-caf941dacd)
iCalendar API
--------------------------------------------------------------------------------
Update Information:
**Horde_Icalendar 2.1.7** * [jan] Fix unescaping of commas in ADR, N, and ORG
attributes.
--------------------------------------------------------------------------------
================================================================================
rkhunter-1.4.4-2.el7 (FEDORA-EPEL-2017-1150c5994f)
A host-based tool to scan for rootkits, backdoors and local exploits
--------------------------------------------------------------------------------
Update Information:
Correct some rebasing errors on config. ---- New upstream release with various
fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284403 - Logger is not being used correctly in /usr/bin/rkhunter
https://bugzilla.redhat.com/show_bug.cgi?id=1284403
[ 2 ] Bug #1466318 - rkhunter-1.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1466318
--------------------------------------------------------------------------------
================================================================================
thermald-1.6-6.el7 (FEDORA-EPEL-2017-12147e793e)
Thermal Management daemon
--------------------------------------------------------------------------------
Update Information:
* Replace fix for rhbz#1464548 from upstream commit * Add upstream patch to fix
README * Add upstreamed patch to silence compiler warnings ---- * Add upstream
patch to fix ThermalMonitor * Add several fixes from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464548 - [abrt] thermald-monitor:
ThermaldInterface::getLowestValidTripTempForZone(): ThermalMonitor killed by signal 11
https://bugzilla.redhat.com/show_bug.cgi?id=1464548
--------------------------------------------------------------------------------
================================================================================
trustedqsl-2.3.1-1.el7 (FEDORA-EPEL-2017-2658a2cc93)
TrustedQSL ham-radio applications
--------------------------------------------------------------------------------
Update Information:
Defects Corrected: = * Added 'Saving QSOs' to the messages to be translated. *
When renewing a callsign certificate and backing up to earlier pages in the
wizard, TQSL could display an unexpected page for selecting the certificate
type, which is not needed for renewals. TQSL will no longer display the
unexpected page. * When editing an ADIF file that has an invalid mode setting,
TQSL now notifies the user that the mode is being ignored. * For Unix systems,
fix a defect that could cause the password prompt to not appear when the system
has built the wxWidgets system with debug assertions enabled. Correct the
invocation of the Windows Installer when an update is available. * Correct the
counts reported when duplicate QSOs are found along with QSOs with other errors.
* Fix formatting of the messages that appear when QSOs change values in the
station location for duplicate QSOs. * Correct improperly formatted frequencies
from ADIF files (values like '7.010.20') to remove the extra periods. * Revert
the change that stripped spaces in the TQSL configuration file as that caused
newlines to be removed in places like the station_data file. * Fix "OpenSSL
error - bad end line" by ensuring that there's always a newline starting a new
certificate. Feature Additions: = * Add Finnish translation from Juhani,
OH8MXL. * Add the ADIF satellite name to the pulldown menu in the ADIF editor to
allow satellites to be more easily looked up. * Allow 'LIGHT' in a Cabrillo file
to represent 300 GHz and above. * Allow TQSL to build against OpenSSL 1.1.0. *
Add the ability to pull DXCC Entity valid date ranges from the TQSL
configuration file.
--------------------------------------------------------------------------------