The following Fedora EPEL 7 Security updates need testing:
Age URL
1057 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
820 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f
mcollective-2.8.4-1.el7
402 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d
libbsd-0.8.3-1.el7
299 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe
mod_cluster-1.3.3-10.el7
131 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23
libmspack-0.6-0.1.alpha.el7
68 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece
nagios-4.3.4-5.el7
32 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b
monit-5.25.1-1.el7
18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65
rootsh-1.5.3-17.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73feedd767
wordpress-4.9.2-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ce6223e559
GraphicsMagick-1.3.28-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9eb18da891
moodle-3.1.10-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0d5d190b0
transmission-2.92-12.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df
knot-resolver-1.5.3-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7
konversation-1.5.1-4.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fuse-encfs-1.9.4-1.el7
mongodb-2.6.12-6.el7
pdns-3.4.11-3.el7
python-socksipychain-2.0.15-1.el7
timeshift-18.1.1-4.el7
w3m-0.5.3-36.git20180125.el7
yaml-cpp-0.5.1-1.el7.1
Details about builds:
================================================================================
fuse-encfs-1.9.4-1.el7 (FEDORA-EPEL-2018-64ebf1c9ea)
Encrypted pass-thru filesystem in userspace
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.4.
--------------------------------------------------------------------------------
================================================================================
mongodb-2.6.12-6.el7 (FEDORA-EPEL-2018-adb6af896b)
High-performance, schema-free document-oriented database
--------------------------------------------------------------------------------
Update Information:
Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against
older versions
https://bugzilla.redhat.com/show_bug.cgi?id=1539386
--------------------------------------------------------------------------------
================================================================================
pdns-3.4.11-3.el7 (FEDORA-EPEL-2018-adb6af896b)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against
older versions
https://bugzilla.redhat.com/show_bug.cgi?id=1539386
--------------------------------------------------------------------------------
================================================================================
python-socksipychain-2.0.15-1.el7 (FEDORA-EPEL-2018-2cf21e719f)
A Python SOCKS/HTTP Proxy module
--------------------------------------------------------------------------------
Update Information:
New dependency from Fedora and EPEL6 for pagekite.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #910146 - Review Request: python-socksipychain - Python SOCKS/HTTP
Proxy module
https://bugzilla.redhat.com/show_bug.cgi?id=910146
--------------------------------------------------------------------------------
================================================================================
timeshift-18.1.1-4.el7 (FEDORA-EPEL-2018-2034535a48)
System restore tool for Linux
--------------------------------------------------------------------------------
Update Information:
- Properly apply system LDFLAGS and thus enable full hardening - Generate useful
-debugsource package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534446 - Review Request: timeshift - System restore tool for Linux
https://bugzilla.redhat.com/show_bug.cgi?id=1534446
--------------------------------------------------------------------------------
================================================================================
w3m-0.5.3-36.git20180125.el7 (FEDORA-EPEL-2018-fb68becde7)
A pager with Web browsing abilities
--------------------------------------------------------------------------------
Update Information:
Rebase to latest upstream gitrev 20180125 and Security fix for CVE-2018-6196,
CVE-2018-6197, CVE-2018-6198
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539157 - CVE-2018-6196 w3m: Infinite recursion in HTMLlineproc0
https://bugzilla.redhat.com/show_bug.cgi?id=1539157
[ 2 ] Bug #1539151 - CVE-2018-6197 w3m: Null pointer dereference in
formUpdateBuffer in form.c
https://bugzilla.redhat.com/show_bug.cgi?id=1539151
[ 3 ] Bug #1539127 - CVE-2018-6198 w3m: insecure temporary files creation
when ~/.w3m is unwritable
https://bugzilla.redhat.com/show_bug.cgi?id=1539127
--------------------------------------------------------------------------------
================================================================================
yaml-cpp-0.5.1-1.el7.1 (FEDORA-EPEL-2018-adb6af896b)
A YAML parser and emitter for C++
--------------------------------------------------------------------------------
Update Information:
Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against
older versions
https://bugzilla.redhat.com/show_bug.cgi?id=1539386
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
