The following Fedora EPEL 7 Security updates need testing: Age URL 481 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 244 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 110 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-785fc9a2ea dropbear-2016.72-1.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c57f2c7e47 drupal7-7.44-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d3e4c82ed7 squidGuard-1.4-26.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3126135a39 wordpress-4.5.3-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cd7ade5b28 phpMyAdmin-4.4.15.7-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e0c08a1414 php-PHPMailer-5.2.16-2.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ce0d3be037 gsi-openssh-6.6.1p1-4.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a01cdab420 nodejs-ws-1.1.1-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3adfacd2eb mbedtls-2.3.0-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8acc519a65 pypy-5.0.1-3.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing atoum-2.8.1-1.el7 bcrypt-1.1-14.el7 copr-cli-1.53-1.el7 deja-dup-34.2-3.el7 duplicity-0.7.07.1-2.el7 dynafed-1.2.2-2.el7 freeciv-2.5.4-1.el7 ggz-base-libs-0.99.5-19.el7 ggz-gtk-client-0.99.5-14.el7 json-parser-1.1.0-4.el7 lzma-sdk457-4.57-12.el7 mate-notification-daemon-1.14.1-1.el7 mbedtls-2.3.0-1.el7 mosquitto-1.4.9-2.el7 mp-3.1.0-3.el7 nvml-1.0-3.el7 openarena-0.8.8-7.el7 php-nette-forms-2.3.10-1.el7 physfs-2.0.3-6.el7 pypy-5.0.1-3.el7 python-cloudfiles-1.7.11-1.el7 python-copr-1.72-1.el7 python-pyngus-2.0.3-3.el7 python-stem-1.4.1b-1.el7 qpid-cpp-0.34-7.el7 qpid-dispatch-0.6.0-1.el7 qpid-proton-0.13.0-1.el7 quake3-1.36-27.svn2102.el7 quesoglc-0.7.2-14.el7 retrace-server-1.16-2.el7 rubygem-qpid_proton-0.13.0-1.el7 singularity-2.0-9.el7 smokeping-2.6.10-3.el7 warzone2100-3.1.5-1.el7 Details about builds: ================================================================================ atoum-2.8.1-1.el7 (FEDORA-EPEL-2016-f9b7fa122a) PHP Unit Testing framework -------------------------------------------------------------------------------- Update Information: **Version 2.8.1** - 2016-07-01 * [#611](https://github.com/atoum/atoum/pull/611) Exclude vendor and composer.lock from phar (jubianchi, agallou) **Version 2.8.0** - 2016-07-01 * [#605](https://github.com/atoum/atoum/pull/605) Automatically include Composer's autoloader if it exists (jubianchi, agallou) * [#605](https://github.com/atoum/atoum/pull/605) Handle `.autoloader.atoum.php` files to define tests autoloader (jubianchi) * [#605](https://github.com/atoum/atoum/pull/605) Add the `--autoloader- file`/`-af` CLI argument to define which autoloader file to user (jubianchi) * [#596](https://github.com/atoum/atoum/pull/596) Test methods' tags are inherited from test classes (jubianchi) -------------------------------------------------------------------------------- ================================================================================ bcrypt-1.1-14.el7 (FEDORA-EPEL-2016-bd5ba01da3) File encryption utility -------------------------------------------------------------------------------- Update Information: Fix memory allocation error. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1351022 - bcrypt: "realloc invalid pointer" error for very small files https://bugzilla.redhat.com/show_bug.cgi?id=1351022 -------------------------------------------------------------------------------- ================================================================================ copr-cli-1.53-1.el7 (FEDORA-EPEL-2016-02b2cdcf6c) Command line interface for COPR -------------------------------------------------------------------------------- Update Information: This version of copr-cli and python-copr is backwards compatible (in contrast to python-copr 1.70 and copr-cli 1.51) with old copr-frontends (1.92 and older), which means that the standard copr-cli build command works for frontends of these versions (no "got unknown parameter 'source_type' error). Note, however, that these versions (1.72 + 1.53) are incompatible with frontend-1.93 (and only this one). Please, if you employ COPR, do not use frontend-1.93. Additionally, this release fixes building error of python-copr 1.71 and copr-cli 1.52 on el7 and el6 distros caused by added pylint checks. ---- This release mainly fixes bug Bug 1340650 - SRPM builds submitted from CLI fail: "invalid request". ---- Support for package manipulation as a main new feature. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1346945 - Project List filled with automated builds https://bugzilla.redhat.com/show_bug.cgi?id=1346945 [ 2 ] Bug #1335236 - Internet access during builds flag needed in CLI create/modify commands https://bugzilla.redhat.com/show_bug.cgi?id=1335236 [ 3 ] Bug #1335237 - copr create command missing --disable_createrepo https://bugzilla.redhat.com/show_bug.cgi?id=1335237 [ 4 ] Bug #1335163 - Add fork subcommand to Copr CLI https://bugzilla.redhat.com/show_bug.cgi?id=1335163 [ 5 ] Bug #1340650 - SRPM builds submitted from CLI fail: "invalid request" https://bugzilla.redhat.com/show_bug.cgi?id=1340650 -------------------------------------------------------------------------------- ================================================================================ deja-dup-34.2-3.el7 (FEDORA-EPEL-2016-6e2ecccf79) Simple backup tool and frontend for duplicity -------------------------------------------------------------------------------- Update Information: Initial deja-dup build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ duplicity-0.7.07.1-2.el7 (FEDORA-EPEL-2016-18d4547a34) Encrypted bandwidth-efficient backup using rsync algorithm -------------------------------------------------------------------------------- Update Information: Add Requires for python-pexpect ---- Update to current release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1351471 - When trying to restore files, duplicity hands and complains about missing python2-pexpect https://bugzilla.redhat.com/show_bug.cgi?id=1351471 [ 2 ] Bug #1336378 - Warning message even when backup went well https://bugzilla.redhat.com/show_bug.cgi?id=1336378 -------------------------------------------------------------------------------- ================================================================================ dynafed-1.2.2-2.el7 (FEDORA-EPEL-2016-d907326b6b) Ultra-scalable dynamic system for federating HTTP-based storage resources -------------------------------------------------------------------------------- Update Information: * new upstream release -------------------------------------------------------------------------------- ================================================================================ freeciv-2.5.4-1.el7 (FEDORA-EPEL-2016-658ec1d611) A multi-player strategy game -------------------------------------------------------------------------------- Update Information: Initial freeciv build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ ggz-base-libs-0.99.5-19.el7 (FEDORA-EPEL-2016-658ec1d611) Base libraries for GGZ gaming zone -------------------------------------------------------------------------------- Update Information: Initial freeciv build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ ggz-gtk-client-0.99.5-14.el7 (FEDORA-EPEL-2016-658ec1d611) Gtk+ client libraries for GGZ gaming zone -------------------------------------------------------------------------------- Update Information: Initial freeciv build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ json-parser-1.1.0-4.el7 (FEDORA-EPEL-2016-5b93521514) Very low footprint JSON parser written in portable ANSI C -------------------------------------------------------------------------------- Update Information: Backport Fedora package to EPEL -------------------------------------------------------------------------------- ================================================================================ lzma-sdk457-4.57-12.el7 (FEDORA-EPEL-2016-9242b59f23) SDK for lzma compression -------------------------------------------------------------------------------- Update Information: Initial warzone2100 build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ mate-notification-daemon-1.14.1-1.el7 (FEDORA-EPEL-2016-01ae58a426) Notification daemon for MATE Desktop -------------------------------------------------------------------------------- Update Information: - update to 1.14.1 release -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.3.0-1.el7 (FEDORA-EPEL-2016-3adfacd2eb) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.3.0 https://tls.mbed.org/tech- updates/releases/mbedtls-2.3.0-2.1.5-and-1.3.17-released -------------------------------------------------------------------------------- ================================================================================ mosquitto-1.4.9-2.el7 (FEDORA-EPEL-2016-462e3d081f) An Open Source MQTT v3.1/v3.1.1 Broker -------------------------------------------------------------------------------- Update Information: Fix configuration example -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272342 - Mosquitto daemon does not load any config file https://bugzilla.redhat.com/show_bug.cgi?id=1272342 [ 2 ] Bug #1197678 - Upgrade mosquitto to 1.4.x version. https://bugzilla.redhat.com/show_bug.cgi?id=1197678 -------------------------------------------------------------------------------- ================================================================================ mp-3.1.0-3.el7 (FEDORA-EPEL-2016-9308333f6d) An open-source library for mathematical programming -------------------------------------------------------------------------------- Update Information: - New builds for EPEL - Fix cmake version for EPEL - libmp installed in a private lib directory on epel6 - Pached to remove gtest - Set to disable tests on EPEL6 -------------------------------------------------------------------------------- ================================================================================ nvml-1.0-3.el7 (FEDORA-EPEL-2016-cbcf16b270) Non-Volatile Memory Library -------------------------------------------------------------------------------- Update Information: Switch to ExclusiveArch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1351698 - nvml FTBFS on aarch64 epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1351698 -------------------------------------------------------------------------------- ================================================================================ openarena-0.8.8-7.el7 (FEDORA-EPEL-2016-3a35687baf) Open source first person shooter -------------------------------------------------------------------------------- Update Information: Initial openarena build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ php-nette-forms-2.3.10-1.el7 (FEDORA-EPEL-2016-397104a4d3) Nette Forms: greatly facilitates web forms -------------------------------------------------------------------------------- Update Information: **Released version 2.3.10** * BaseControl::setValue() marked as internal #114 * Container: calls validate() only for IControl & Container #86 * Rename Html:add() to Html:addHtml() to follow nette/utils#111 (#120) * netteForms.js: validates fucking HTML5 type 'number' -------------------------------------------------------------------------------- ================================================================================ physfs-2.0.3-6.el7 (FEDORA-EPEL-2016-9242b59f23) Library to provide abstract access to various archives -------------------------------------------------------------------------------- Update Information: Initial warzone2100 build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ pypy-5.0.1-3.el7 (FEDORA-EPEL-2016-8acc519a65) Python implementation with a Just-In-Time compiler -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-0772 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303647 - CVE-2016-0772 python: smtplib StartTLS stripping attack https://bugzilla.redhat.com/show_bug.cgi?id=1303647 -------------------------------------------------------------------------------- ================================================================================ python-cloudfiles-1.7.11-1.el7 (FEDORA-EPEL-2016-6e2ecccf79) Python language bindings for Rackspace CloudFiles API -------------------------------------------------------------------------------- Update Information: Initial deja-dup build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ python-copr-1.72-1.el7 (FEDORA-EPEL-2016-02b2cdcf6c) Python interface for Copr -------------------------------------------------------------------------------- Update Information: This version of copr-cli and python-copr is backwards compatible (in contrast to python-copr 1.70 and copr-cli 1.51) with old copr-frontends (1.92 and older), which means that the standard copr-cli build command works for frontends of these versions (no "got unknown parameter 'source_type' error). Note, however, that these versions (1.72 + 1.53) are incompatible with frontend-1.93 (and only this one). Please, if you employ COPR, do not use frontend-1.93. Additionally, this release fixes building error of python-copr 1.71 and copr-cli 1.52 on el7 and el6 distros caused by added pylint checks. ---- This release mainly fixes bug Bug 1340650 - SRPM builds submitted from CLI fail: "invalid request". ---- Support for package manipulation as a main new feature. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1346945 - Project List filled with automated builds https://bugzilla.redhat.com/show_bug.cgi?id=1346945 [ 2 ] Bug #1335236 - Internet access during builds flag needed in CLI create/modify commands https://bugzilla.redhat.com/show_bug.cgi?id=1335236 [ 3 ] Bug #1335237 - copr create command missing --disable_createrepo https://bugzilla.redhat.com/show_bug.cgi?id=1335237 [ 4 ] Bug #1335163 - Add fork subcommand to Copr CLI https://bugzilla.redhat.com/show_bug.cgi?id=1335163 [ 5 ] Bug #1340650 - SRPM builds submitted from CLI fail: "invalid request" https://bugzilla.redhat.com/show_bug.cgi?id=1340650 -------------------------------------------------------------------------------- ================================================================================ python-pyngus-2.0.3-3.el7 (FEDORA-EPEL-2016-23fd74e982) Callback API implemented over Proton -------------------------------------------------------------------------------- Update Information: Rebuilt against qpid-proton 0.13.0. -------------------------------------------------------------------------------- ================================================================================ python-stem-1.4.1b-1.el7 (FEDORA-EPEL-2016-02720358ac) Python controller library for Tor -------------------------------------------------------------------------------- Update Information: Version 1.4.1b -------------------------------------------------------------------------------- ================================================================================ qpid-cpp-0.34-7.el7 (FEDORA-EPEL-2016-35885627ba) Libraries for Qpid C++ client applications -------------------------------------------------------------------------------- Update Information: Rebuilt against proton 0.13.0. -------------------------------------------------------------------------------- ================================================================================ qpid-dispatch-0.6.0-1.el7 (FEDORA-EPEL-2016-98927c069e) Dispatch router for Qpid -------------------------------------------------------------------------------- Update Information: Rebased to 0.6.0. -------------------------------------------------------------------------------- ================================================================================ qpid-proton-0.13.0-1.el7 (FEDORA-EPEL-2016-08de998477) A high performance, lightweight messaging library -------------------------------------------------------------------------------- Update Information: Rebased to 0.13.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1317356 - qpid-proton-c package includes CMake files that should only be in qpid-proton-c-devel https://bugzilla.redhat.com/show_bug.cgi?id=1317356 -------------------------------------------------------------------------------- ================================================================================ quake3-1.36-27.svn2102.el7 (FEDORA-EPEL-2016-3a35687baf) Quake 3 Arena engine (ioquake3 version) -------------------------------------------------------------------------------- Update Information: Initial openarena build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ quesoglc-0.7.2-14.el7 (FEDORA-EPEL-2016-9242b59f23) The OpenGL Character Renderer -------------------------------------------------------------------------------- Update Information: Initial warzone2100 build for EPEL 7. -------------------------------------------------------------------------------- ================================================================================ retrace-server-1.16-2.el7 (FEDORA-EPEL-2016-2e49e9538e) Application for remote coredump analysis -------------------------------------------------------------------------------- Update Information: New upstream release 1.16 which fixes bugs listed and adds: - Logging of tasks failed to start - Graceful handling of the worker errors - Correction to eu- unstrip parser if FILE is '-' -------------------------------------------------------------------------------- References: [ 1 ] Bug #1124462 - do not display all ftp files on web UI by default - manager page is slow and/or may hang or crash browser if there's a lot of ftp files https://bugzilla.redhat.com/show_bug.cgi?id=1124462 [ 2 ] Bug #1340158 - email notifications no longer working https://bugzilla.redhat.com/show_bug.cgi?id=1340158 -------------------------------------------------------------------------------- ================================================================================ rubygem-qpid_proton-0.13.0-1.el7 (FEDORA-EPEL-2016-7c943df5e2) Ruby language bindings for the Qpid Proton messaging framework -------------------------------------------------------------------------------- Update Information: Rebased to 0.13.0. -------------------------------------------------------------------------------- ================================================================================ singularity-2.0-9.el7 (FEDORA-EPEL-2016-7d10faed99) Enabling "Mobility of Compute" with container based applications -------------------------------------------------------------------------------- Update Information: Licence fix, patches ---- New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1331818 - Review Request: singularity - Portable application stack packaging and runtime utility https://bugzilla.redhat.com/show_bug.cgi?id=1331818 -------------------------------------------------------------------------------- ================================================================================ smokeping-2.6.10-3.el7 (FEDORA-EPEL-2016-05e96c583b) Latency Logging and Graphing System -------------------------------------------------------------------------------- Update Information: Initial clone of f24 branch (0e2b28fa8feefccc7017210d90f61daaf32140de) to EPEL7 -------------------------------------------------------------------------------- ================================================================================ warzone2100-3.1.5-1.el7 (FEDORA-EPEL-2016-9242b59f23) Innovative 3D real-time strategy -------------------------------------------------------------------------------- Update Information: Initial warzone2100 build for EPEL 7. --------------------------------------------------------------------------------