The following Fedora EPEL 7 Security updates need testing: Age URL 301 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 93 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9 python-pymongo-3.0.3-1.el7 64 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f82c6fc04a p7zip-15.09-4.el7 23 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-67166d0519 shellinabox-2.19-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-fe8f5408df moodle-3.0.1-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e943f1deb9 mediawiki123-1.23.13-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-5538691958 roundcubemail-1.1.4-2.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-864da6c179 nghttp2-1.6.0-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e21e03e52f mono-2.10.8-9.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3e181e41ca openvpn-2.3.10-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing mono-2.10.8-9.el7 nghttp2-1.6.0-1.el7 nodejs-fs2-0.2.3-1.el7 ola-0.10.0-1.el7 openpgpkey-milter-0.5-1.el7 openvpn-2.3.10-1.el7 pcre2-10.20-3.el7 perl-Crypt-ScryptKDF-0.010-1.el7 perl-Schedule-Cron-Events-1.94-1.el7 perl-Set-Crontab-1.03-12.el7 perl-URI-Find-20140709-5.el7 python-vxi11-0.8-1.el7 Details about builds: ================================================================================ mono-2.10.8-9.el7 (FEDORA-EPEL-2016-e21e03e52f) A .NET runtime environment -------------------------------------------------------------------------------- Update Information: apply patch for security issue CVE-2009-0689 (#1293640) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1293640 - mono: Converting specially crafted string to float causes crash and possible code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1293640 -------------------------------------------------------------------------------- ================================================================================ nghttp2-1.6.0-1.el7 (FEDORA-EPEL-2016-864da6c179) Experimental HTTP/2 client, server and proxy -------------------------------------------------------------------------------- Update Information: - update to nghttp2-1.6.0 (fixes CVE-2015-8659) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1295351 - CVE-2015-8659 nghttp2: heap-use-after-free flaw in idle stream handling code https://bugzilla.redhat.com/show_bug.cgi?id=1295351 -------------------------------------------------------------------------------- ================================================================================ nodejs-fs2-0.2.3-1.el7 (FEDORA-EPEL-2016-47eee51d4e) Node.js fs (file system package) extensions -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1293058 - Review Request: nodejs-fs2 - Node.js fs (file system package) extensions https://bugzilla.redhat.com/show_bug.cgi?id=1293058 -------------------------------------------------------------------------------- ================================================================================ ola-0.10.0-1.el7 (FEDORA-EPEL-2016-74e1ba2a21) Open Lighting Architecture -------------------------------------------------------------------------------- Update Information: This is a version upgrade from 0.9.8 to 0.10.0. For the full changelog look [here](https://github.com/OpenLightingProject/ola/releases/tag/0.10.0) ---- This is a new package. The Open Lighting Architecture is a framework for lighting control information. It supports a range of protocols and over a dozen USB devices. It can run as a standalone service, which is useful for converting signals between protocols, or alternatively using the OLA API, it can be used as the back-end for lighting control software. OLA runs on many different platforms including ARM, which makes it a perfect fit for low cost Ethernet to DMX gateways. -------------------------------------------------------------------------------- ================================================================================ openpgpkey-milter-0.5-1.el7 (FEDORA-EPEL-2016-408bd25334) OPENPGPKEY basd automatic encryption of emails using the milter API -------------------------------------------------------------------------------- Update Information: Updated to 0.5 which implements draft 06, uses lowercased LHS -------------------------------------------------------------------------------- ================================================================================ openvpn-2.3.10-1.el7 (FEDORA-EPEL-2016-3e181e41ca) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23 -------------------------------------------------------------------------------- ================================================================================ pcre2-10.20-3.el7 (FEDORA-EPEL-2016-621ab27d5b) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information: This new package provides next-generation reimplmenation of Perl-Compatible Regular Expression library. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1194781 - Review Request: pcre2 - Perl-compatible regular expression library https://bugzilla.redhat.com/show_bug.cgi?id=1194781 -------------------------------------------------------------------------------- ================================================================================ perl-Crypt-ScryptKDF-0.010-1.el7 (FEDORA-EPEL-2016-cd16fcb0e1) Scrypt password based key derivation function -------------------------------------------------------------------------------- Update Information: Update to 0.010 version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1287337 - perl-Crypt-ScryptKDF-0.010 is available https://bugzilla.redhat.com/show_bug.cgi?id=1287337 -------------------------------------------------------------------------------- ================================================================================ perl-Schedule-Cron-Events-1.94-1.el7 (FEDORA-EPEL-2016-155fe74f51) Take a line from a crontab and find out when events will occur -------------------------------------------------------------------------------- Update Information: Given a line from a crontab, tells you the time at which cron will next run the line, or when the last event occurred, relative to any date you choose. The object keeps that reference date internally, and updates it when you call nextEvent() or previousEvent() - such that successive calls will give you a sequence of events going forward, or backwards, in time. -------------------------------------------------------------------------------- ================================================================================ perl-Set-Crontab-1.03-12.el7 (FEDORA-EPEL-2016-0ac72ce5f3) Expand crontab(5)-style integer lists -------------------------------------------------------------------------------- Update Information: Set::Crontab parses crontab-style lists of integers and defines some utility functions to make it easier to deal with them. -------------------------------------------------------------------------------- ================================================================================ perl-URI-Find-20140709-5.el7 (FEDORA-EPEL-2016-6e026f6e91) Find URIs in plain text -------------------------------------------------------------------------------- Update Information: This module does one thing: Finds URIs and URLs in plain text. It finds them quickly and it finds them *all* (or what URI::URL considers a URI to be.) It only finds URIs which include a scheme (http:// or the like), for something a bit less strict have a look at URI::Find::Schemeless. For a command-line interface, see Darren Chamberlain's 'urifind' script. It's available from his CPAN directory: http://www.cpan.org/authors/id/D/DA/DARREN/ -------------------------------------------------------------------------------- ================================================================================ python-vxi11-0.8-1.el7 (FEDORA-EPEL-2016-5c59b40903) Python implementation of the VXI-11 protocol -------------------------------------------------------------------------------- Update Information: - New Python package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1294277 - Review Request: python-vxi11 - Python implementation of the VXI-11 protocol https://bugzilla.redhat.com/show_bug.cgi?id=1294277 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list epel-devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/epel-devel@lists.fedoraproject.org