The following Fedora EPEL 7 Security updates need testing:
Age URL
103
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binut...
19
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0626/perl-Gtk2-1...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0924/qpid-cpp-0....
The following builds have been pushed to Fedora EPEL 7 updates-testing
engauge-digitizer-5.2-8.20150115git28de7d.el7
ferm-2.2-2.el7
freeradius-client-1.1.7-4.el7
libuecc-5-2.el7
perl-Math-Int64-0.34-1.el7
php-ZendFramework2-2.3.5-1.el7
php-kolab-net-ldap3-1.0.2-2.el7
php-pear-Net-LDAP2-2.1.0-1.el7
php-phpdocumentor-reflection-docblock-2.0.4-1.el7
php-phpspec-php-diff-1.0.2-1.el7
php-phpspec-prophecy-1.3.1-1.el7
postgresql-pgpool-II-3.4.1-1.el7
python-fedmsg-meta-fedora-infrastructure-0.4.3-1.el7
qpid-cpp-0.30-11.el7
socket_wrapper-1.1.3-1.el7
Details about builds:
================================================================================
engauge-digitizer-5.2-8.20150115git28de7d.el7 (FEDORA-EPEL-2015-0920)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- **Fixed Keywords key in .desktop file**
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 23 2015 Antonio Trande <sagitter(a)fedoraproject.org> -
5.2-8.20150115git28de7d
- Fixed Keywords key in .desktop file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1183333 - engague-digitizer: keywords in .desktop file
https://bugzilla.redhat.com/show_bug.cgi?id=1183333
--------------------------------------------------------------------------------
================================================================================
ferm-2.2-2.el7 (FEDORA-EPEL-2015-0941)
For Easy Rule Making
--------------------------------------------------------------------------------
Update Information:
Update in epel7 to version 2.2 with systemd .service file by mail request from Steve
Jacobs. It should be there initially.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon Jan 6 2014 Pavel Alexeev <Pahan(a)Hubbitus.info> - 2.2-1
- Update to 2.2 (bz#1045607)
- Add .service file.
- Clear some quirks.
* Wed Aug 21 2013 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 2.1.2-4
- Reflect docdir changes (FTBFS, RHBZ#992258).
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.1.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Petr Pisar <ppisar(a)redhat.com> - 2.1.2-2
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
================================================================================
freeradius-client-1.1.7-4.el7 (FEDORA-EPEL-2015-0934)
RADIUS protocol client library
--------------------------------------------------------------------------------
Update Information:
Corrected paths of files includes in config file
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 23 2015 Nikos Mavrogiannopoulos - 1.1.7-4
- Corrected paths of files includes in config file
--------------------------------------------------------------------------------
================================================================================
libuecc-5-2.el7 (FEDORA-EPEL-2015-0939)
Very small Elliptic Curve Cryptography library
--------------------------------------------------------------------------------
Update Information:
New package libuecc added
--------------------------------------------------------------------------------
================================================================================
perl-Math-Int64-0.34-1.el7 (FEDORA-EPEL-2015-0935)
Manipulate 64 bits integers in Perl
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1194032 - Review Request: perl-Math-Int64 - Manipulate 64 bits integers in
Perl
https://bugzilla.redhat.com/show_bug.cgi?id=1194032
--------------------------------------------------------------------------------
================================================================================
php-ZendFramework2-2.3.5-1.el7 (FEDORA-EPEL-2015-0921)
Zend Framework 2
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog:
http://framework.zend.com/changelog/2.3.5/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 24 2015 Remi Collet <remi(a)fedoraproject.org> - 2.3.5-1
- Update to 2.3.5
- add patch for icu 54, FTBFS detected by Koschei
--------------------------------------------------------------------------------
================================================================================
php-kolab-net-ldap3-1.0.2-2.el7 (FEDORA-EPEL-2015-0922)
Advanced functionality for accessing LDAP directories
--------------------------------------------------------------------------------
Update Information:
A successor of the PEAR:Net_LDAP2 module providing advanced functionality for accessing
LDAP directories.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1195058 - Review Request: php-kolab-net-ldap3 - Advanced functionality for
accessing LDAP directories
https://bugzilla.redhat.com/show_bug.cgi?id=1195058
--------------------------------------------------------------------------------
================================================================================
php-pear-Net-LDAP2-2.1.0-1.el7 (FEDORA-EPEL-2015-0928)
Object oriented interface for searching and manipulating LDAP-entries
--------------------------------------------------------------------------------
Update Information:
Net_LDAP2 is the successor of Net_LDAP (which is a clone of Perls Net::LDAP) object
interface to directory servers. It does contain most of Net::LDAP's features but has
some own too.
With Net_LDAP2 you have:
* A simple object-oriented interface to connections, searches entries and filters.
* Support for TLS and LDAP v3.
* Simple modification, deletion and creation of LDAP entries.
* Support for schema handling.
Net_LDAP2 layers itself on top of PHP's existing ldap extensions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1195054 - Review Request: php-pear-Net-LDAP2 - Object oriented interface for
searching and manipulating LDAP-entries
https://bugzilla.redhat.com/show_bug.cgi?id=1195054
--------------------------------------------------------------------------------
================================================================================
php-phpdocumentor-reflection-docblock-2.0.4-1.el7 (FEDORA-EPEL-2015-0926)
DocBlock parser
--------------------------------------------------------------------------------
Update Information:
The ReflectionDocBlock component of phpDocumentor provides a DocBlock parser that is fully
compatible with the PHPDoc standard.
With this component, a library can provide support for annotations via DocBlocks or
otherwise retrieve information that is embedded in a DocBlock.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1188530 - Review Request: php-phpdocumentor-reflection-docblock - DocBlock
parser
https://bugzilla.redhat.com/show_bug.cgi?id=1188530
--------------------------------------------------------------------------------
================================================================================
php-phpspec-php-diff-1.0.2-1.el7 (FEDORA-EPEL-2015-0927)
A library for generating differences between two hashable objects
--------------------------------------------------------------------------------
Update Information:
A comprehensive library for generating differences between two hashable objects (strings
or arrays). Generated differences can be rendered in all of the standard formats
including:
* Unified
* Context
* Inline HTML
* Side by Side HTML
The logic behind the core of the diff engine (ie, the sequence matcher) is primarily based
on the Python difflib package. The reason for doing so is primarily because of its high
degree of accuracy.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1193481 - Review Request: php-phpspec-php-diff - A library for generating
differences between two hashable objects
https://bugzilla.redhat.com/show_bug.cgi?id=1193481
--------------------------------------------------------------------------------
================================================================================
php-phpspec-prophecy-1.3.1-1.el7 (FEDORA-EPEL-2015-0931)
Highly opinionated mocking framework for PHP
--------------------------------------------------------------------------------
Update Information:
Prophecy is a highly opinionated yet very powerful and flexible PHP object mocking
framework.
Though initially it was created to fulfil phpspec2 needs, it is flexible enough to be used
inside any testing framework out there with minimal effort.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1192493 - Review Request: php-phpspec-prophecy - Highly opinionated mocking
framework for PHP
https://bugzilla.redhat.com/show_bug.cgi?id=1192493
--------------------------------------------------------------------------------
================================================================================
postgresql-pgpool-II-3.4.1-1.el7 (FEDORA-EPEL-2015-0940)
Pgpool is a connection pooling/replication server for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
- Update to 3.4.1, per changes described at:
http://www.pgpool.net/docs/pgpool-II-3.4.1/NEWS.txt
Fixes bz#1192859
- Add memcached support
- Add OpenSSL support
rebase to 3.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1166463 - Please build postgresql-pgpool-II for epel 7
https://bugzilla.redhat.com/show_bug.cgi?id=1166463
[ 2 ] Bug #1192859 - Please build 3.4.1 for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1192859
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.4.3-1.el7 (FEDORA-EPEL-2015-0936)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
New long-form implementations for lookaside, koji, and trac.
Fixes to github, hotness, and elections messages. New longform output for github and irc
meessages. Improved debug logging.
Handle future bodhi2 messages. rpm.sign messages now indicate the key id.
Handle new sigul messages.
Bugfix for new pkgdb messages.
Latest upstream.
Handle a new message type from the-new-hotness. Change the way usernames are returned
from pkgdb messages.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 24 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.3-1
- new version
* Tue Feb 24 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.2-1
- new version
* Wed Feb 18 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- new version
* Tue Feb 10 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.0-1
- new version
* Tue Feb 10 2015 Ralph Bean <rbean(a)redhat.com> - 0.3.12-2
- Disable tests for now since they require the latest fedmsg.
* Wed Jan 28 2015 Ralph Bean <rbean(a)redhat.com> - 0.3.12-1
- Handle new sigul messages.
* Mon Jan 26 2015 Ralph Bean <rbean(a)redhat.com> - 0.3.11-1
- Bugfix for new pkgdb messages.
* Thu Jan 15 2015 Ralph Bean <rbean(a)redhat.com> - 0.3.10-1
- Handle a new message from the-new-hotness.
- Change the way usernames are returned from pkgdb messages.
--------------------------------------------------------------------------------
================================================================================
qpid-cpp-0.30-11.el7 (FEDORA-EPEL-2015-0924)
Libraries for Qpid C++ client applications
--------------------------------------------------------------------------------
Update Information:
Fixed path to qpid-ha in the systemd service descriptor.
Resolves: BZ#1186308
Apply patch 10.
Resolves: BZ#1184488
Resolves: BZ#1181721
Enabled building the linear store.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 20 2015 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-11
- Fixed path to qpid-ha in the systemd service descriptor.
* Wed Feb 4 2015 Petr Machata <pmachata(a)redhat.com> - 0.30-10
- Bump for rebuild.
* Mon Feb 2 2015 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-9
- Resolves: BZ#1186308
* Tue Jan 27 2015 Petr Machata <pmachata(a)redhat.com> - 0.30-8
- Rebuild for boost 1.57.0
* Thu Jan 22 2015 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-7
- Apply patch 10.
* Wed Jan 21 2015 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-6
- Resolves: BZ#1184488
* Fri Jan 16 2015 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-5
- Resolves: BZ#1181721
* Wed Oct 29 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-4
- QPID-6170: Fixes builds on aarch64 and ppc64le architectures.
* Tue Oct 14 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-3
- Enabled building the linear store.
- Added qpid-cpp-server-linearstore package.
- QPID-6150: qpid-qls-analyze tool cannot find Python modules
* Wed Oct 8 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-2
- Readded the qpid-tools subpackage rather than moving it to a new package.
* Thu Oct 2 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.30-1
- Rebased on Qpid 0.30.
- Upstream tarball filename changed from qpid-##.#.tar.gz to qpid-cpp-##.#.tar.gz.
- qpid-tools moved out to a separate package.
- Moved qpid-send and qpid-receive to the qpid-cpp-client-devel package.
* Mon Aug 25 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.28-9
- Removed the linear store block that was commented out.
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.28-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Fri Aug 15 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.28-7
- Removed ssl package references.
* Thu Aug 14 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.28-6
- Renamed the virtual provides to conform with project needs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1181721 - CVE-2015-0203 qpid-cpp: qpidd can be crashed by unauthenticated
user
https://bugzilla.redhat.com/show_bug.cgi?id=1181721
[ 2 ] Bug #1186308 - CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be
prevented
https://bugzilla.redhat.com/show_bug.cgi?id=1186308
--------------------------------------------------------------------------------
================================================================================
socket_wrapper-1.1.3-1.el7 (FEDORA-EPEL-2015-0938)
A library passing all socket communications through Unix sockets
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.3.
Fix format of changelog entries and dependencies.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 23 2015 Andreas Schneider <asn(a)redhat.com> - 1.1.3-1
- Update to version 1.1.3.
o Added support for address sanitizer.
o Fixed leaking of memory and fds of stale sockets.
o Fixed the library loading code.
* Mon Dec 15 2014 Michael Adam <madam(a)redhat.com> - 1.1.2-2
- Fix format of changelog entries.
- Require cmake.
- Require pkgconfig instead of owning {_libdir}/pkgconfig
* Fri Dec 12 2014 Michael Adam <madam(a)redhat.com> - 1.1.2-2
- Fix typos.
--------------------------------------------------------------------------------