Fedora EPEL 7 updates-testing report

The following Fedora EPEL 7 Security updates need testing:
 Age  URL
 1124  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087  
dokuwiki-0-0.24.20140929c.el7
 886  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f  
mcollective-2.8.4-1.el7
 469  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d  
libbsd-0.8.3-1.el7
 366  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe  
mod_cluster-1.3.3-10.el7
 198  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23  
libmspack-0.6-0.1.alpha.el7
 135  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece  
nagios-4.3.4-5.el7
  13  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1fbdf7f103  
chromium-65.0.3325.181-1.el7
  11  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-86171fce03  
python-paramiko-2.1.1-0.4.el7
   7  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2074629ed3  
drupal7-7.58-1.el7
   7  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e12bc7bed5  
nodejs-6.14.0-1.el7 libuv-1.19.2-1.el7
   3  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7c95e7ac21  
libofx-0.9.9-2.el7
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-13062a4d15  
wordpress-4.9.5-1.el7
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e56f478565  
koji-1.15.1-1.el7


The following builds have been pushed to Fedora EPEL 7 updates-testing

    certbot-0.23.0-1.el7
    collectd-5.8.0-3.el7
    dmlite-1.10.1-4.el7
    python-acme-0.23.0-1.el7
    python-certbot-apache-0.23.0-1.el7
    python-certbot-dns-cloudflare-0.23.0-1.el7
    python-certbot-dns-cloudxns-0.23.0-1.el7
    python-certbot-dns-digitalocean-0.23.0-1.el7
    python-certbot-dns-dnsimple-0.23.0-1.el7
    python-certbot-dns-dnsmadeeasy-0.23.0-1.el7
    python-certbot-dns-google-0.23.0-1.el7
    python-certbot-dns-luadns-0.23.0-1.el7
    python-certbot-dns-nsone-0.23.0-1.el7
    python-certbot-dns-rfc2136-0.23.0-1.el7
    python-certbot-dns-route53-0.23.0-1.el7
    python-certbot-nginx-0.23.0-1.el7
    python-jwt-1.6.1-1.el7
    python-resultsdb_api-2.1.1-1.el7
    python3-requests-2.12.5-1.el7
    trustedqsl-2.4-1.el7
    vim-toml-0-0.1.20180306git624f024.el7

Details about builds:


================================================================================
 certbot-0.23.0-1.el7 (FEDORA-EPEL-2018-d67486fc2e)
 A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563899 - certbot-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563899
--------------------------------------------------------------------------------


================================================================================
 collectd-5.8.0-3.el7 (FEDORA-EPEL-2018-b833aeaa28)
 Statistics collection daemon for filling RRD files
--------------------------------------------------------------------------------
Update Information:

Fix segfault in Ceph plugin
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1531596 - segfault collectd/collectd-ceph plugin
        https://bugzilla.redhat.com/show_bug.cgi?id=1531596
--------------------------------------------------------------------------------


================================================================================
 dmlite-1.10.1-4.el7 (FEDORA-EPEL-2018-1128a8264a)
 Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:

* new upstream release  ----  dmlite 1.10 is a major update to DPM internals
including Dome.  ----  dmlite 1.10 is a major update to DPM internals including
Dome.  ----  dmlite 1.10 is a major update to DPM internals including Dome.
----  * new upstream release
--------------------------------------------------------------------------------


================================================================================
 python-acme-0.23.0-1.el7 (FEDORA-EPEL-2018-181a652b26)
 Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563878 - python-acme-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563878
--------------------------------------------------------------------------------


================================================================================
 python-certbot-apache-0.23.0-1.el7 (FEDORA-EPEL-2018-383499ee6b)
 The apache plugin for certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563900 - python-certbot-apache-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563900
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-cloudflare-0.23.0-1.el7 (FEDORA-EPEL-2018-a25e6a320d)
 Cloudflare DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563901 - python-certbot-dns-cloudflare-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563901
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-cloudxns-0.23.0-1.el7 (FEDORA-EPEL-2018-7648500d36)
 CloudXNS DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563902 - python-certbot-dns-cloudxns-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563902
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-digitalocean-0.23.0-1.el7 (FEDORA-EPEL-2018-995992026e)
 DigitalOcean DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563903 - python-certbot-dns-digitalocean-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563903
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-dnsimple-0.23.0-1.el7 (FEDORA-EPEL-2018-ea9f87c877)
 DNSimple DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563904 - python-certbot-dns-dnsimple-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563904
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-dnsmadeeasy-0.23.0-1.el7 (FEDORA-EPEL-2018-efca6a3cbb)
 DNS Made Easy DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563905 - python-certbot-dns-dnsmadeeasy-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563905
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-google-0.23.0-1.el7 (FEDORA-EPEL-2018-e8da9a6ca7)
 Google Cloud DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563906 - python-certbot-dns-google-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563906
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-luadns-0.23.0-1.el7 (FEDORA-EPEL-2018-6bfbd5ebed)
 LuaDNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563907 - python-certbot-dns-luadns-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563907
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-nsone-0.23.0-1.el7 (FEDORA-EPEL-2018-5971629fca)
 NS1 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563908 - python-certbot-dns-nsone-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563908
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-rfc2136-0.23.0-1.el7 (FEDORA-EPEL-2018-eff313e150)
 RFC 2136 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563909 - python-certbot-dns-rfc2136-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563909
--------------------------------------------------------------------------------


================================================================================
 python-certbot-dns-route53-0.23.0-1.el7 (FEDORA-EPEL-2018-8d56b9b750)
 Route53 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563910 - python-certbot-dns-route53-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563910
--------------------------------------------------------------------------------


================================================================================
 python-certbot-nginx-0.23.0-1.el7 (FEDORA-EPEL-2018-907ed3d99b)
 The nginx plugin for certbot
--------------------------------------------------------------------------------
Update Information:

Update to 0.23.0.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1563911 - python-certbot-nginx-0.23.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1563911
--------------------------------------------------------------------------------


================================================================================
 python-jwt-1.6.1-1.el7 (FEDORA-EPEL-2018-9f8e93d154)
 JSON Web Token implementation in Python
--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2017-11424  - Latest upstream - Add patch0 to remove
pytest-{cov,runner} deps - Share doc and license dir between subpackages -
Enable EPEL PY3 build
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1482530 - CVE-2017-11424 python-jwt: Incorrect handling of PEM-encoded public
keys [epel-7]
        https://bugzilla.redhat.com/show_bug.cgi?id=1482530
  [ 2 ] Bug #1551251 - python-jwt-1.6.1 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1551251
--------------------------------------------------------------------------------


================================================================================
 python-resultsdb_api-2.1.1-1.el7 (FEDORA-EPEL-2018-7b0251e841)
 Interface api to ResultsDB
--------------------------------------------------------------------------------
Update Information:

Fix the python.six interaction with non-string inputs  ----  - Add support for
auth token - Retry on HTTP 500 errors by default - py3: Updates to work with
Python 3
--------------------------------------------------------------------------------


================================================================================
 python3-requests-2.12.5-1.el7 (FEDORA-EPEL-2018-d4b11c646b)
 HTTP library, written in Python, for human beings
--------------------------------------------------------------------------------
Update Information:

 -  Fixed an issue with JSON encoding detection, specifically detecting big-
endian UTF-32 with BOM. - Fixed regression from 2.12.2 where non-string types
were rejected in the basic auth parameters. While support for this behaviour has
been readded, the behaviour is deprecated and will be removed in the future.
--------------------------------------------------------------------------------


================================================================================
 trustedqsl-2.4-1.el7 (FEDORA-EPEL-2018-f76bfa7c6a)
 Tool for digitally signing Amateur Radio QSO records
--------------------------------------------------------------------------------
Update Information:

Update to 2.4.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1562655 - trustedqsl-2.4 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1562655
--------------------------------------------------------------------------------


================================================================================
 vim-toml-0-0.1.20180306git624f024.el7 (FEDORA-EPEL-2018-4baa6ade07)
 Vim syntax for TOML
--------------------------------------------------------------------------------
Update Information:

Initial package
--------------------------------------------------------------------------------

[Christopher]

On Fri, Apr 6, 2018 at 12:14 PM <updates(a)fedoraproject.org&gt; wrote:

>  The following Fedora EPEL 7 Security updates need testing:
>   Age  URL
>   1124  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
>   dokuwiki-0-0.24.20140929c.el7
>   886  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
>   mcollective-2.8.4-1.el7
>   469  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
>   libbsd-0.8.3-1.el7
>   366  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
>   mod_cluster-1.3.3-10.el7
>   198  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
>   libmspack-0.6-0.1.alpha.el7
>   135  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
>   nagios-4.3.4-5.el7
>  
Some of these are several years old. Do we really need to get regular
updates about these? Clearly, neither the users nor the maintainers care
about these updates. Should there be a time limit in bodhi before it just
gets deleted? Or... can somebody with elevated privileges just push the
packages to stable to clear them out? Maybe if they introduce a bug,
somebody will at least pay attention to them.

[Kevin Fenzi]

On 04/06/2018 01:32 PM, Christopher wrote:
>  On Fri, Apr 6, 2018 at 12:14 PM <updates(a)fedoraproject.org&gt;
> wrote:
>  
> > The following Fedora EPEL 7 Security updates need testing:
> >  Age  URL
> >  1124  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
> >  dokuwiki-0-0.24.20140929c.el7
> >  886  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
> >  mcollective-2.8.4-1.el7
> >  469  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
> >  libbsd-0.8.3-1.el7
> >  366  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
> >  mod_cluster-1.3.3-10.el7
> >  198  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
> >  libmspack-0.6-0.1.alpha.el7
> >  135  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
> >  nagios-4.3.4-5.el7
> >
>  
>  Some of these are several years old. Do we really need to get regular
>  updates about these? Clearly, neither the users nor the maintainers care
>  about these updates. Should there be a time limit in bodhi before it just
>  gets deleted? Or... can somebody with elevated privileges just push the
>  packages to stable to clear them out? Maybe if they introduce a bug,
>  somebody will at least pay attention to them. 
I went and unpushed those of these that had -karma and pushed to stable
those that didn't.

kevin