The following Fedora EPEL 7 Security updates need testing:
Age URL
373
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
135
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1613bc2a80
php-htmLawed-1.1.21-1.el7
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-07b9ae23da
qpid-cpp-0.34-6.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e79091a3b8
ReviewBoard-2.5.3-1.el7 python-djblets-0.9.2-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-60ae263220
exim-4.84.2-1.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8fd1e13dd2
python-django-1.6.11-5.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0fc6ac67c6
websvn-2.3.3-12.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bfdc2d9e96
php-pecl-http-2.5.6-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3c6d565eff
proftpd-1.3.5b-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea
dropbear-2016.72-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
bugwarrior-1.4.0-1.el7
distribution-gpg-keys-1.4-1.el7
easytag-2.4.2-2.el7
efl-1.17.0-4.el7
git-xcleaner-1.5-1.el7
globus-common-16.2-1.el7
globus-proxy-utils-6.15-1.el7
libbson-1.3.4-1.el7
libtranslate-0.99-100.el7
mock-1.2.17-1.el7
moodle-3.0.3-1.el7
myproxy-6.1.17-1.el7
perl-Canary-Stability-2011-1.el7
php-di-5.2.2-2.el7
php-paragonie-random-compat-1.2.2-1.el7
php-phpunit-PHPUnit-4.8.24-1.el7
python-productmd-1.0-13.el7
suricata-3.0-1.el7
Details about builds:
================================================================================
bugwarrior-1.4.0-1.el7 (FEDORA-EPEL-2016-f78e69b265)
Sync github, bitbucket, and trac issues with taskwarrior
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
https://github.com/ralphbean/bugwarrior/blob/develop/CHANGELOG.rst#140
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1317164 - bugwarrior-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317164
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.4-1.el7 (FEDORA-EPEL-2016-39875b6756)
Keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
* updated Copr keys * added mageia keys
--------------------------------------------------------------------------------
================================================================================
easytag-2.4.2-2.el7 (FEDORA-EPEL-2016-4677ac9a70)
Tag editor for MP3, Ogg, FLAC and other music files
--------------------------------------------------------------------------------
Update Information:
Fix crash in the load filenames dialog (#1312163)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312163 - [abrt] easytag: g_type_check_instance_cast(): easytag killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1312163
--------------------------------------------------------------------------------
================================================================================
efl-1.17.0-4.el7 (FEDORA-EPEL-2016-29ef2bc54e)
Collection of Enlightenment libraries
--------------------------------------------------------------------------------
Update Information:
- Disable wayland for Fedora 22 and EPEL, as they do not have dependencies
--------------------------------------------------------------------------------
================================================================================
git-xcleaner-1.5-1.el7 (FEDORA-EPEL-2016-f06af08ea0)
Interactive git branch removal TUI
--------------------------------------------------------------------------------
Update Information:
Updated man page (lzap+git(a)redhat.com) ---- New package - git TUI branch
cleaner
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122577 - Review Request: git-xcleaner - TUI interface for git branch
removal
https://bugzilla.redhat.com/show_bug.cgi?id=1122577
--------------------------------------------------------------------------------
================================================================================
globus-common-16.2-1.el7 (FEDORA-EPEL-2016-b20fa6d243)
Globus Toolkit - Common Library
--------------------------------------------------------------------------------
Update Information:
globus-proxy-utils - Better support for checking cert names. globus-common -
Minor documentation fix. myproxy - Handle error returns from OCSP_parse_url.
--------------------------------------------------------------------------------
================================================================================
globus-proxy-utils-6.15-1.el7 (FEDORA-EPEL-2016-b20fa6d243)
Globus Toolkit - Globus GSI Proxy Utility Programs
--------------------------------------------------------------------------------
Update Information:
globus-proxy-utils - Better support for checking cert names. globus-common -
Minor documentation fix. myproxy - Handle error returns from OCSP_parse_url.
--------------------------------------------------------------------------------
================================================================================
libbson-1.3.4-1.el7 (FEDORA-EPEL-2016-fcfb357ab5)
Building, parsing, and iterating BSON documents
--------------------------------------------------------------------------------
Update Information:
This release improves build script. We deliver it only to provide latest version
string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1317713 - libbson-1.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317713
--------------------------------------------------------------------------------
================================================================================
libtranslate-0.99-100.el7 (FEDORA-EPEL-2016-0311629521)
Natural language translation library
--------------------------------------------------------------------------------
Update Information:
Update services.xml file
--------------------------------------------------------------------------------
================================================================================
mock-1.2.17-1.el7 (FEDORA-EPEL-2016-23c93722c3)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
* Bugfix release * removed the sparc config
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312820 - Lots of WARNING: unable to delete selinux filesystems
https://bugzilla.redhat.com/show_bug.cgi?id=1312820
[ 2 ] Bug #1311796 - --new-chroot causes incorrect $PATH
https://bugzilla.redhat.com/show_bug.cgi?id=1311796
[ 3 ] Bug #1301953 - mock builds fail with nspawn, buildroot missing /bin/su
https://bugzilla.redhat.com/show_bug.cgi?id=1301953
--------------------------------------------------------------------------------
================================================================================
moodle-3.0.3-1.el7 (FEDORA-EPEL-2016-2543e27c56)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
3.0.3.
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.17-1.el7 (FEDORA-EPEL-2016-b20fa6d243)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
globus-proxy-utils - Better support for checking cert names. globus-common -
Minor documentation fix. myproxy - Handle error returns from OCSP_parse_url.
--------------------------------------------------------------------------------
================================================================================
perl-Canary-Stability-2011-1.el7 (FEDORA-EPEL-2016-c6861c25c6)
Canary to check perl compatibility for Schmorp's modules
--------------------------------------------------------------------------------
Update Information:
This release fixes color printing. It also improves the message text.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1317254 - perl-Canary-Stability-2011 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317254
--------------------------------------------------------------------------------
================================================================================
php-di-5.2.2-2.el7 (FEDORA-EPEL-2016-fe9050b877)
The dependency injection container for humans
--------------------------------------------------------------------------------
Update Information:
### 5.2.2 * Fix [#379](https://github.com/PHP-DI/PHP-DI/issues/379) Wrong match
when using wildcards (by @HexSource and @mnapoli) ### 5.2.1 * Fix
[#366](https://github.com/PHP-DI/PHP-DI/issues/366): Handle collisions between
identical parent and child private properties ([#367](https://github.com/PHP-DI
/PHP-DI/issues/367) by @mnapoli)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1298928 - php-di-5.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1298928
--------------------------------------------------------------------------------
================================================================================
php-paragonie-random-compat-1.2.2-1.el7 (FEDORA-EPEL-2016-188345a394)
PHP 5.x polyfill for random_bytes() and random_int() from PHP 7
--------------------------------------------------------------------------------
Update Information:
### Version 1.2.2 - 2016-03-11 * To prevent applications from hanging, if
`/dev/urandom` is not accessible to PHP, skip mcrypt (which just fails before
giving OpenSSL a chance and was morally equivalent to not offering OpenSSL at
all). ### Version 1.2.1 - 2016-02-29 * PHP 5.6.10 - 5.6.12 will hang when
mcrypt is used on Unix-based operating systems ([PHP bug
69833](https://bugs.php.net/bug.php?id=69833)). If you are running one of
these versions, please upgrade (or make sure `/dev/urandom` is readable)
otherwise you're relying on OpenSSL. ### Version 1.2.0 - 2016-02-05 *
Whitespace and other cosmetic changes * Added a changelog. ### Version 1.1.6 -
2016-01-29 * Eliminate `open_basedir` warnings by detecting this configuration
setting. (Thanks [@oucil](https://github.com/oucil) for reporting this.) *
Added install instructions to the README. * Documentation cleanup (there is, in
fact, no `MCRYPT_CREATE_IV` constant, I meant to write `MCRYPT_DEV_URANDOM`)
### Version 1.1.5 - 2016-01-06 * Prevent fatal errors on platforms with older
versions of libsodium.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1296738 - php-paragonie-random-compat-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1296738
[ 2 ] Bug #1317102 - php-paragonie-random-compat-1.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317102
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-4.8.24-1.el7 (FEDORA-EPEL-2016-5702cab5b0)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 4.8.24** - 2016-03-14 * Fixed #1959: Prophecy errors are not
handled correctly * Fixed #2039: TestDox does not handle snake_case test
methods properly * Fixed #2109: Process isolation leaks global variable
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.0-13.el7 (FEDORA-EPEL-2016-c7c12a2660)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
add patch for supporting subvariant
--------------------------------------------------------------------------------
================================================================================
suricata-3.0-1.el7 (FEDORA-EPEL-2016-59d44f4fd2)
Intrusion Detection System
--------------------------------------------------------------------------------
Update Information:
This is the initial release on EPEL 7 of the suricata package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1107770 - Is it possible to build suricata for EPEL?
https://bugzilla.redhat.com/show_bug.cgi?id=1107770
--------------------------------------------------------------------------------