The following Fedora EPEL 7 Security updates need testing:
Age URL
1066
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
828
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
411
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
308
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
140
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
77
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
nagios-4.3.4-5.el7
41
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b
monit-5.25.1-1.el7
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65
rootsh-1.5.3-17.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df
knot-resolver-1.5.3-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7
konversation-1.5.1-4.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fb68becde7
w3m-0.5.3-36.git20180125.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-18ea640f19
tomcat-native-1.2.16-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f09712d924
pdns-3.4.11-4.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7134fc92a1
jhead-3.00-7.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cacti-1.1.34-1.el7
gen-oath-safe-0.10.1-3.el7
mbedtls-2.7.0-1.el7
mozilla-https-everywhere-2018.1.29-1.el7
odcs-0.1.7-2.el7
p7zip-16.02-10.el7
petsc-3.8.3-4.el7
petsc4py-3.8.1-5.el7
php-cs-fixer-2.2.16-1.el7
wordpress-4.9.4-1.el7
Details about builds:
================================================================================
cacti-1.1.34-1.el7 (FEDORA-EPEL-2018-ce2a9f86b7)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.34 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.34
--------------------------------------------------------------------------------
================================================================================
gen-oath-safe-0.10.1-3.el7 (FEDORA-EPEL-2018-dd0ca17daf)
Script for generating HOTP/TOTP keys (and QR code)
--------------------------------------------------------------------------------
Update Information:
Update Python dependencies to ``python2-`` names.
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.7.0-1.el7 (FEDORA-EPEL-2018-525417d3d4)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.0 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.7.0-2.1.10-and-1.3.22-released Security Advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-
advisory-2018-01
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2018.1.29-1.el7 (FEDORA-EPEL-2018-9037430137)
HTTPS enforcement extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
- More unspecified ruleset updates
--------------------------------------------------------------------------------
================================================================================
odcs-0.1.7-2.el7 (FEDORA-EPEL-2018-8e4530ce63)
The On Demand Compose Service
--------------------------------------------------------------------------------
Update Information:
Update to new version 0.1.7-2.
--------------------------------------------------------------------------------
================================================================================
p7zip-16.02-10.el7 (FEDORA-EPEL-2018-069884a87f)
Very high compression ratio file archiver
--------------------------------------------------------------------------------
Update Information:
Improved security patch ---- Security fix for CVE-2017-17969 (from Debian)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538457 - CVE-2017-17969 p7zip: heap-based buffer overflow in
7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a
crash
https://bugzilla.redhat.com/show_bug.cgi?id=1538457
--------------------------------------------------------------------------------
================================================================================
petsc-3.8.3-4.el7 (FEDORA-EPEL-2018-fc36db3960)
Portable Extensible Toolkit for Scientific Computation
--------------------------------------------------------------------------------
Update Information:
- Update to petsc-3.8.3 - Petsc4py rebuilds - Fix pkgconfig request on rhel
--------------------------------------------------------------------------------
================================================================================
petsc4py-3.8.1-5.el7 (FEDORA-EPEL-2018-fc36db3960)
Python bindings for MPI PETSc
--------------------------------------------------------------------------------
Update Information:
- Update to petsc-3.8.3 - Petsc4py rebuilds - Fix pkgconfig request on rhel
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.2.16-1.el7 (FEDORA-EPEL-2018-b8e6ca66be)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.2.16** * bug #3502 Fix missing file in export (keradus)
--------------------- **Changelog for v2.2.15** * bug #3367
NoUnusedImportsFixer - fix comment handling (SpacePossum, keradus) * bug #3455
NoEmptyCommentFixer - comment block detection for line ending different than LF
(kubawerlos, SpacePossum) * bug #3458 SilencedDeprecationErrorFixer - fix edge
cases (kubawerlos) * bug #3466 no_whitespace_in_blank_line and
no_blank_lines_after_phpdoc fixers bug (kubawerlos, keradus) * minor #3354 Added
missing types to the PhpdocTypesFixer (GrahamCampbell) * minor #3406 Fix for
escaping in README (kubawerlos) * minor #3431 Add missing tests (SpacePossum) *
minor #3440 Add a handful of integration tests (BackEndTea) * minor #3444
IntegrationTest - ensure tests in priority dir are priority tests indeed
(keradus) * minor #3494 Add missing PHPDoc param type (ntzm) * minor #3495 Swap
@var type and element (ntzm) * minor #3498 NoUnusedImportsFixer - fix
deprecation (keradus)
--------------------------------------------------------------------------------
================================================================================
wordpress-4.9.4-1.el7 (FEDORA-EPEL-2018-98bba6484f)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Upstream announcements: * [WordPress 4.9.4 Maintenance
Release](https://wordpress.org/news/2018/02/wordpress-4-9-4-maintenance-
release/) * [WordPress 4.9.3 Maintenance
Release](https://wordpress.org/news/2018/02/wordpress-4-9-3-maintenance-
release/)
--------------------------------------------------------------------------------