The following Fedora EPEL 7 Security updates need testing: Age URL 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2573/pdns-recursor-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2657/python-oauth2-...
The following builds have been pushed to Fedora EPEL 7 updates-testing
inotify-tools-3.14-8.el7 mawk-1.3.4-6.20131226.el7 mg-20140414-2.el7 nawk-20121220-4.el7 perl-CDB_File-0.97-7.el7 python-msgpack-0.4.2-4.el7 python-oauth2-1.5.211-7.el7
Details about builds:
================================================================================ inotify-tools-3.14-8.el7 (FEDORA-EPEL-2014-2660) Command line utilities for inotify -------------------------------------------------------------------------------- Update Information:
build inotify-tools for epel7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1110354 - inotify-tools isn't in epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1110354 --------------------------------------------------------------------------------
================================================================================ mawk-1.3.4-6.20131226.el7 (FEDORA-EPEL-2014-2658) Interpreter for the AWK programming language -------------------------------------------------------------------------------- Update Information:
new package for epel7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #635875 - Review Request: mawk - An interpreter for the AWK programming language https://bugzilla.redhat.com/show_bug.cgi?id=635875 --------------------------------------------------------------------------------
================================================================================ mg-20140414-2.el7 (FEDORA-EPEL-2014-2659) Tiny Emacs-like editor -------------------------------------------------------------------------------- Update Information:
new package for epel7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #586473 - Review Request: mg - Tiny Emacs-like editor https://bugzilla.redhat.com/show_bug.cgi?id=586473 --------------------------------------------------------------------------------
================================================================================ nawk-20121220-4.el7 (FEDORA-EPEL-2014-2653) "The one true awk" descended from UNIX V7 -------------------------------------------------------------------------------- Update Information:
new package for epel7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #638425 - Review Request: nawk - "The one true awk" descended from UNIX V7 https://bugzilla.redhat.com/show_bug.cgi?id=638425 --------------------------------------------------------------------------------
================================================================================ perl-CDB_File-0.97-7.el7 (FEDORA-EPEL-2014-2661) Perl extension for access to cdb databases -------------------------------------------------------------------------------- Update Information:
new package for epel7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #656084 - Review Request: perl-CDB_File - Perl extension for access to cdb databases https://bugzilla.redhat.com/show_bug.cgi?id=656084 --------------------------------------------------------------------------------
================================================================================ python-msgpack-0.4.2-4.el7 (FEDORA-EPEL-2014-2654) A Python MessagePack (de)serializer -------------------------------------------------------------------------------- Update Information:
Introduce python3- subpackage -------------------------------------------------------------------------------- ChangeLog:
* Wed Sep 10 2014 Nejc Saje nsaje@redhat.com - 0.4.2-4 - Introduce python3- subpackage * Sun Aug 17 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed Mar 26 2014 Fabian Affolter mail@fabian-affolter.ch - 0.4.2-1 - Update to latest upstream version 0.4.2 * Wed Feb 26 2014 Fabian Affolter mail@fabian-affolter.ch - 0.4.1-1 - Update to latest upstream version 0.4.1 * Tue Jan 7 2014 Fabian Affolter mail@fabian-affolter.ch - 0.4.0-1 - Update to latest upstream version 0.4.0 * Mon Jan 6 2014 Fabian Affolter mail@fabian-affolter.ch - 0.1.13-5 - Update spec file and python macros * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.13-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1140073 - [PATCH] Introduce python3-msgpack subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1140073 --------------------------------------------------------------------------------
================================================================================ python-oauth2-1.5.211-7.el7 (FEDORA-EPEL-2014-2657) Python support for improved oauth -------------------------------------------------------------------------------- Update Information:
Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. -------------------------------------------------------------------------------- ChangeLog:
* Fri Sep 12 2014 Tom Callaway spot@fedoraproject.org - 1.5.211-7 - Fix CVE-2013-4346 and CVE-2013-4347 (thanks to Philippe Makowski) * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.211-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.211-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1007746 - CVE-2013-4346 python-oauth2: _check_signature() ignores the nonce value when validating signed urls https://bugzilla.redhat.com/show_bug.cgi?id=1007746 [ 2 ] Bug #1007758 - CVE-2013-4347 python-oauth2: Uses poor PRNG in nonce https://bugzilla.redhat.com/show_bug.cgi?id=1007758 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org