The following Fedora EPEL 7 Security updates need testing: Age URL 450 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 212 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 79 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea dropbear-2016.72-1.el7 31 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4f1d69369e openvas-cli-1.4.4-1.el7 openvas-gsa-6.0.10-3.el7 openvas-libraries-8.0.7-2.el7 openvas-manager-6.0.8-2.el7 openvas-scanner-5.0.5-3.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e5732b714e phpMyAdmin-4.4.15.6-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-804b7430fd GraphicsMagick-1.3.24-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-70e05c7285 nginx-1.6.3-9.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing GraphicsMagick-1.3.24-1.el7 certbot-0.7.0-1.el7 composer-1.1.2-1.el7 fldigi-3.23.10-1.el7 libkscreen-qt5-5.6.4-2.el7 liblxqt-0.10.0-7.el7 libqtxdg-1.3.0-2.el7 libstatgrab-0.91-4.el7 libsysstat-0.3.1-4.el7 lxqt-about-0.10.0-4.el7 lxqt-common-0.10.0-11.el7 lxqt-config-0.10.0-5.el7 lxqt-globalkeys-0.10.0-4.el7 lxqt-notificationd-0.10.0-4.el7 lxqt-openssh-askpass-0.10.0-3.el7 lxqt-panel-0.10.0-6.el7 lxqt-policykit-0.10.0-3.el7 lxqt-powermanagement-0.10.0-3.el7 lxqt-qtplugin-0.10.0-2.el7 lxqt-runner-0.10.0-5.el7 lxqt-session-0.10.0-3.el7 lxqt-sudo-0.10.0-4.el7 nginx-1.6.3-9.el7 pagure-2.2-1.el7 php-nette-database-2.3.9-1.el7 php-nette-forms-2.3.9-1.el7 python-acme-0.7.0-1.el7 salt-2015.5.10-2.el7 Details about builds: ================================================================================ GraphicsMagick-1.3.24-1.el7 (FEDORA-EPEL-2016-804b7430fd) An ImageMagick fork, offering faster image generation and better quality -------------------------------------------------------------------------------- Update Information: New GraphicsMagick bugfix/security release, see also: http://www.graphicsmagick.org/NEWS.html#may-30-2016 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1306148 - CVE-2016-2317 CVE-2016-2318 GraphicsMagick: SVG parsing issues https://bugzilla.redhat.com/show_bug.cgi?id=1306148 [ 2 ] Bug #1333410 - GraphicsMagick: SVG converting issues https://bugzilla.redhat.com/show_bug.cgi?id=1333410 [ 3 ] Bug #1340814 - CVE-2016-5118 ImageMagick: Remote code execution via filename https://bugzilla.redhat.com/show_bug.cgi?id=1340814 -------------------------------------------------------------------------------- ================================================================================ certbot-0.7.0-1.el7 (FEDORA-EPEL-2016-97f896566e) A free, automated certificate authority client -------------------------------------------------------------------------------- Update Information: Update to 0.7.0 -------------------------------------------------------------------------------- ================================================================================ composer-1.1.2-1.el7 (FEDORA-EPEL-2016-46f0f1deae) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: **Version 1.1.2** - 2016-05-31 * Fixed degraded mode issue when accessing packagist.org * Fixed GitHub access_token being added on subsequent requests in case of redirections * Fixed exclude-from-classmap not working in some circumstances * Fixed openssl warning preventing the use of config command for disabling tls ---- **Version 1.1.1** - 2016-05-17 * Fixed regression in handling of #reference which made it update every time * Fixed dev platform requirements being required even in --no-dev install from a lock file * Fixed parsing of extension versions that do not follow valid numbers, we now try to parse x.y.z and ignore the rest * Fixed exact constraints warnings appearing for 0.x versions * Fixed regression in the `remove` command --- **Version 1.1.0** - 2016-05-10 * Added fallback to SSH for https bitbucket URLs * Added BaseCommand::isProxyCommand that can be overriden to mark a command as being a mere proxy, which helps avoid duplicate warnings etc on composer startup * Fixed archiving generating long paths in zip files on Windows --- **Version 1.1.0-RC** - 2016-04-29 * Added ability for plugins to register their own composer commands * Optimized the autoloader initialization using static loading on PHP 5.6 and above, this reduces the load time for large classmaps to almost nothing * Added `--latest` to `show` command to show the latest version available of your dependencies * Added `--outdated` to `show` command an `composer outdated` alias for it, to show only packages in need of update * Added `--direct` to `show` and `outdated` commands to show only your direct dependencies in the listing * Added support for editing all top-level properties (name, minimum-stability, ...) as well as extra values via the `config` command * Added abandoned state warning to the `show` and `outdated` commands when listing latest packages * Added support for `~/` and `$HOME/` in the path repository paths * Added support for wildcards in the `show` command package filter, e.g. `composer show seld/*` * Added ability to call composer itself from scripts via `@composer ...` * Added untracked files detection to the `status` command * Added warning to `validate` command when using exact- version requires * Added warning once per domain when accessing insecure URLs with secure-http disabled * Added a dependency on composer/ca-bundle (extracted CA bundle management to a standalone lib) * Added support for empty directories when archiving to tar * Added an `init` event for plugins to react to, which occurs right after a Composer instance is fully initialized * Added many new detections of problems in the `why-not`/`prohibits` command to figure out why something does not get installed in the expected version * Added a deprecation notice for script event listeners that use legacy script classes * Fixed abandoned state not showing up if you had a package installed before it was marked abandoned * Fixed --no-dev updates creating an incomplete lock file, everything is now always resolved on update * Fixed partial updates in case the vendor dir was not up to date with the lock file -------------------------------------------------------------------------------- ================================================================================ fldigi-3.23.10-1.el7 (FEDORA-EPEL-2016-1d2ae2f444) Digital modem program for Linux -------------------------------------------------------------------------------- Update Information: =Version 3.23.10= 2016-05-23 David Freese <iam_w1...@w1hkj.com> 33ad2e6: logger c184758: Restore focus af25ef7: RsID button ae93f9c: flmsg keepalive 5b367fb: 4bars b4b8df4: ASCII ctl chars 759e6cf: Suppress dockable macros 065ead7: Packet Prep 2016-04-13 Edouard Lafargue W6ELA <edou...@lafargue.name> 505c8b3: Portaudio Mono 2016-04-13 David Freese <iam_w1...@w1hkj.com> 68d9b32: FSQ message files 2016-04-12 Robert Stiles <kk...@yahoo.com> 4ab48d4: KISS, 8PSK, FLARQ icon Modifications 2016-04-12 David Freese <iam_w1...@w1hkj.com> 76ab77c: FLARQ 9c04f07: focus behavior 2a3f4d4: PTT delays -------------------------------------------------------------------------------- References: [ 1 ] Bug #1314945 - fldigi-3.23.10.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1314945 -------------------------------------------------------------------------------- ================================================================================ libkscreen-qt5-5.6.4-2.el7 (FEDORA-EPEL-2016-7864befa97) KDE display configuration library -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ liblxqt-0.10.0-7.el7 (FEDORA-EPEL-2016-7864befa97) Core shared library for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ libqtxdg-1.3.0-2.el7 (FEDORA-EPEL-2016-7864befa97) QtXdg, a Qt5 implementation of XDG standards -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ libstatgrab-0.91-4.el7 (FEDORA-EPEL-2016-7864befa97) A library that provides cross platform access to statistics of the system -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ libsysstat-0.3.1-4.el7 (FEDORA-EPEL-2016-7864befa97) Library used to query system info and statistics -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-about-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97) About application for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-common-0.10.0-11.el7 (FEDORA-EPEL-2016-7864befa97) Common resources for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-config-0.10.0-5.el7 (FEDORA-EPEL-2016-7864befa97) Config tools for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-globalkeys-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97) Global keys utility for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-notificationd-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97) Notification daemon for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-openssh-askpass-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97) Askpass openssh transition dialog for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-panel-0.10.0-6.el7 (FEDORA-EPEL-2016-7864befa97) Main panel bar for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-policykit-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97) PolicyKit agent for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-powermanagement-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97) Powermanagement daemon for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-qtplugin-0.10.0-2.el7 (FEDORA-EPEL-2016-7864befa97) Qt plugin framework for LXQt Desktop Suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-runner-0.10.0-5.el7 (FEDORA-EPEL-2016-7864befa97) Application runner agent for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-session-0.10.0-3.el7 (FEDORA-EPEL-2016-7864befa97) Main session for LXQt desktop suite -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ lxqt-sudo-0.10.0-4.el7 (FEDORA-EPEL-2016-7864befa97) GUI frontend for sudo/su -------------------------------------------------------------------------------- Update Information: update lxqt 0.10.0 -------------------------------------------------------------------------------- ================================================================================ nginx-1.6.3-9.el7 (FEDORA-EPEL-2016-70e05c7285) A high performance web server and reverse proxy server -------------------------------------------------------------------------------- Update Information: fix CVE-2016-4450 -------------------------------------------------------------------------------- ================================================================================ pagure-2.2-1.el7 (FEDORA-EPEL-2016-928d5ee916) A git-centered forge -------------------------------------------------------------------------------- Update Information: Update to 2.2 ---- Update to 2.1.1 -------------------------------------------------------------------------------- ================================================================================ php-nette-database-2.3.9-1.el7 (FEDORA-EPEL-2016-0c8ffe4219) Nette Database Component -------------------------------------------------------------------------------- Update Information: **Released version 2.3.9** * Helpers::detectType() detects DATERANGE as text * Structure::analyzeForeignKeys() fixed lowercased name #122 -------------------------------------------------------------------------------- ================================================================================ php-nette-forms-2.3.9-1.el7 (FEDORA-EPEL-2016-42e32e0f6c) Nette Forms: greatly facilitates web forms -------------------------------------------------------------------------------- Update Information: **Released version 2.3.9** * UploadControl: added isOK() * Helpers::exportRules() skips empty branches * netteForms.js: Nette.noInit = true disables auto initialization -------------------------------------------------------------------------------- ================================================================================ python-acme-0.7.0-1.el7 (FEDORA-EPEL-2016-97f896566e) Python library for the ACME protocol -------------------------------------------------------------------------------- Update Information: Update to 0.7.0 -------------------------------------------------------------------------------- ================================================================================ salt-2015.5.10-2.el7 (FEDORA-EPEL-2016-3dca8ed97a) A parallel remote execution system -------------------------------------------------------------------------------- Update Information: Updated patch ---- Update to bugfix release 2015.5.10 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list epel-devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/epel-devel@lists.fedoraproject.org