[EPEL-devel] Fedora EPEL 7 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Sun Sep 6 17:53:20 UTC 2015


The following Fedora EPEL 7 Security updates need testing:
 Age  URL
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3989   cross-binutils-2.23.88.0.1-2.el7.1
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087   dokuwiki-0-0.24.20140929c.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813   chicken-4.9.0.1-4.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7613   zabbix20-2.0.15-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7800   python-django-1.6.11-3.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7845   php-guzzle-Guzzle-3.9.3-5.el7 php-ZendFramework2-2.4.7-2.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7874   onionshare-0.7.1-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7909   pdns-3.4.6-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7960   php-doctrine-cache-1.4.2-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7962   php-doctrine-annotations-1.2.7-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7964   php-doctrine-doctrine-bundle-1.5.2-1.el7


The following builds have been pushed to Fedora EPEL 7 updates-testing

    carbon-c-relay-0.44-3.el7
    cgit-0.11.2-3.el7
    ipv6calc-0.99.1-13.el7
    libnetfilter_log-1.0.1-7.el7
    mozilla-https-everywhere-5.1.1-1.el7
    nodejs-ast-types-0.4.5-2.el7
    nrpe-2.15-6.el7
    php-aws-sdk-2.8.20-1.el7
    php-doctrine-annotations-1.2.7-1.el7
    php-doctrine-cache-1.4.2-1.el7
    php-doctrine-doctrine-bundle-1.5.2-1.el7
    php-icewind-streams-0.2.0-1.el7
    php-jeremeamia-superclosure-2.1.0-1.el7
    php-php-gettext-1.0.11-12.el7
    xfoil-6.99-1.el7

Details about builds:


================================================================================
 carbon-c-relay-0.44-3.el7 (FEDORA-EPEL-2015-7955)
 Enhanced C implementation of Carbon relay, aggregator and rewriter
--------------------------------------------------------------------------------
Update Information:

Exclude 32 bit arches
--------------------------------------------------------------------------------


================================================================================
 cgit-0.11.2-3.el7 (FEDORA-EPEL-2015-7948)
 A fast web interface for git
--------------------------------------------------------------------------------
Update Information:

Fix up logic around webserver and httpd.  ----  Update to 0.11.2
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258552 - EPEL6 build of cgit-0.11.2
        https://bugzilla.redhat.com/show_bug.cgi?id=1258552
--------------------------------------------------------------------------------


================================================================================
 ipv6calc-0.99.1-13.el7 (FEDORA-EPEL-2015-7945)
 IPv6 address format change and calculation utility
--------------------------------------------------------------------------------
Update Information:

new release 0.99.1 (introduces new subpackage mod_ipv6calc)
--------------------------------------------------------------------------------


================================================================================
 libnetfilter_log-1.0.1-7.el7 (FEDORA-EPEL-2015-7944)
 Netfilter logging userspace library
--------------------------------------------------------------------------------
Update Information:

  libnetfilter_log-1.0.1-7.el6  - Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
libnetfilter_log-1.0.1-7.el7  - Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 mozilla-https-everywhere-5.1.1-1.el7 (FEDORA-EPEL-2015-7952)
 HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:

- Ruleset fixes - Remove the AMO signature - Fix the "not appearing" problem
----    mozilla-https-everywhere-5.1.0-1.el5  - Ruleset fixes - AMO signature
mozilla-https-everywhere-5.1.0-1.el6  - Ruleset fixes - AMO signature   mozilla-
https-everywhere-5.1.0-1.el7  - Ruleset fixes - AMO signature
--------------------------------------------------------------------------------


================================================================================
 nodejs-ast-types-0.4.5-2.el7 (FEDORA-EPEL-2015-7947)
 Esprima-compatible implementation of the Mozilla JS Parser API
--------------------------------------------------------------------------------
Update Information:

package missing def dir
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1260268 - def directory not packaged
        https://bugzilla.redhat.com/show_bug.cgi?id=1260268
--------------------------------------------------------------------------------


================================================================================
 nrpe-2.15-6.el7 (FEDORA-EPEL-2015-7939)
 Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:

  nrpe-2.15-6.el7  - Fix spec file for missing
/usr/share/libtool/config/config.guess   nrpe-2.15-6.el6  - Fix spec file for
missing /usr/share/libtool/config/config.guess   nrpe-2.15-6.fc23  - Fix spec
file for missing /usr/share/libtool/config/config.guess   nrpe-2.15-6.fc22  -
Fix spec file for missing /usr/share/libtool/config/config.guess
nrpe-2.15-6.fc21  - Fix spec file for missing
/usr/share/libtool/config/config.guess
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1089880 - CVE-2014-2913 nrpe: remote command execution when command arguments are enabled [epel-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1089880
  [ 2 ] Bug #1239738 - nrpe: FTBFS in rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=1239738
--------------------------------------------------------------------------------


================================================================================
 php-aws-sdk-2.8.20-1.el7 (FEDORA-EPEL-2015-7958)
 Amazon Web Services framework for PHP
--------------------------------------------------------------------------------
Update Information:

## 2.8.20 - 2015-09-03  * `Aws\CodePipeline` - Added support for using
encryption keys with artifact   stores. * `Aws\ConfigService` - Added support
for the `ListDiscoveredResources`   operation and new resource types. *
`Aws\Ec2` - Added support for using instance weights with the
`RequestSpotFleet` API. * `Aws\Sns` - Added support for configurable
SigningCertURL host patterns. * `Aws\StorageGateway` - Added support for tagging
and untagging resources. * Fixed issue with loading the phar from opcache.  ##
2.8.19 - 2015-08-20  * `Aws\S3` - Added support for event notification filters.
## 2.8.18 - 2015-08-12  * `Aws\ElasticBeanstalk` - Added support for enhanced
health reporting. * `Aws\Glacier` - Fixed an issue where content bodies that
equaled false (e.g.,   '0') would not be uploaded.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1253094 - php-aws-sdk-2.8.20 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1253094
--------------------------------------------------------------------------------


================================================================================
 php-doctrine-annotations-1.2.7-1.el7 (FEDORA-EPEL-2015-7962)
 PHP docblock annotations parser library
--------------------------------------------------------------------------------
Update Information:

CVE-2015-5723  http://www.doctrine-project.org/2015/08/31/security_misconfigurat
ion_vulnerability_in_various_doctrine_projects.html
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258669 - php-doctrine-annotations-v1.2.7 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1258669
--------------------------------------------------------------------------------


================================================================================
 php-doctrine-cache-1.4.2-1.el7 (FEDORA-EPEL-2015-7960)
 Doctrine Cache
--------------------------------------------------------------------------------
Update Information:

CVE-2015-5723  http://www.doctrine-project.org/2015/08/31/security_misconfigurat
ion_vulnerability_in_various_doctrine_projects.html
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258670 - php-doctrine-cache-v1.4.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1258670
--------------------------------------------------------------------------------


================================================================================
 php-doctrine-doctrine-bundle-1.5.2-1.el7 (FEDORA-EPEL-2015-7964)
 Symfony Bundle for Doctrine
--------------------------------------------------------------------------------
Update Information:

## 1.5.2 (2015-08-31)  ### Security:  * Fix Security Misconfiguration
Vulnerability, allowing potential local arbitrary code execution     *
CVE-2015-5723     * http://www.doctrine-project.org/2015/08/31/security_misconfi
guration_vulnerability_in_various_doctrine_projects.html  ## 1.5.1 (2015-08-12)
### Bugfix:  * Fixed the JS expanding all queries in the profiler in case of
multiple connections * Fixed the retrieval of the namespace in
DisconnectedMetadataFactory * Changed the composer constraint to allow Symfony
3.0 for people wanting to do early testing
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1253092 - php-doctrine-doctrine-bundle-v1.5.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1253092
--------------------------------------------------------------------------------


================================================================================
 php-icewind-streams-0.2.0-1.el7 (FEDORA-EPEL-2015-7942)
 A set of generic stream wrappers
--------------------------------------------------------------------------------
Update Information:

Generic stream wrappers for php.  To use this library, you just have to add, in
your project:      require-once '/usr/share/php/Icewind/Streams/autoload.php';
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258955 - Review Request: php-icewind-streams -  A set of generic stream wrappers
        https://bugzilla.redhat.com/show_bug.cgi?id=1258955
--------------------------------------------------------------------------------


================================================================================
 php-jeremeamia-superclosure-2.1.0-1.el7 (FEDORA-EPEL-2015-7941)
 Serialize Closure objects, including their context and binding
--------------------------------------------------------------------------------
Update Information:

Even though serializing closures is "not allowed" by PHP, the SuperClosure
library makes it possible  To use this library, you just have to add, in your
project:      require-once '/usr/share/php/SuperClosure/autoload.php';
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258899 - Review Request: php-jeremeamia-superclosure - Serialize Closure objects, including their context and binding
        https://bugzilla.redhat.com/show_bug.cgi?id=1258899
--------------------------------------------------------------------------------


================================================================================
 php-php-gettext-1.0.11-12.el7 (FEDORA-EPEL-2015-7935)
 Gettext emulation in PHP
--------------------------------------------------------------------------------
Update Information:

Added a patch for compatibility with PHP 7
--------------------------------------------------------------------------------


================================================================================
 xfoil-6.99-1.el7 (FEDORA-EPEL-2015-7953)
 Subsonic Airfoil Development System
--------------------------------------------------------------------------------
Update Information:

Update to version 6.99, see
http://web.mit.edu/drela/Public/web/xfoil/version_notes.txt for details.
--------------------------------------------------------------------------------



More information about the epel-devel mailing list