The following Fedora EPEL 7 Security updates need testing: Age URL 617 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 379 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 98 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7 82 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-03fb3c1531 banshee-2.6.2-11.el7 dbus-sharp-0.7.0-15.el7 dbus-sharp-glib-0.5.0-13.el7 gdata-sharp-1.4.0.2-18.el7 gio-sharp-0.3-14.el7 gkeyfile-sharp-0.1-19.el7 gnome-sharp-2.24.2-12.el7 gtk-sharp-beans-2.14.0-17.el7 gtk-sharp2-2.12.26-3.el7 gtk-sharp3-2.99.3-16.el7 gudev-sharp-0.1-18.el7 libappindicator-12.10.0-11.el7 libgpod-0.8.3-14.el7 libyui-bindings-1.1.0-7.el7 mono-4.2.4-7.el7 mono-addins-1.1-3.el7 mono-cecil-0.9.6-6.el7 mono-zeroconf-0.9.0-16.el7 notify-sharp-0.4.0-0.26.20100411svn.el7 notify-sharp3-3.0.3-2.el7 nunit-3.5-1.el7 nunit2-2.6.4-14.el7 pinta-1.6-5.el7 taglib-sharp-2.1.0.0-3.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6 compat-guile18-1.8.8-14.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-181efcf9c4 tre-0.8.0-18.20140228gitc2f5d13.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e26faf9489 python-simplejson-3.5.3-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2fcbc39837 chromium-54.0.2840.90-3.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-88e8651e7f mingw-gnutls-3.3.24-2.el7 mingw-nettle-3.3-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9672a02dba moodle-3.1.3-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0f8120bfcf moin-1.9.9-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing auter-0.8-1.el7 dmenu-4.6-2.el7 fts-3.5.7-1.el7 gfal2-2.12.3-2.el7 gfal2-python-1.8.4-2.el7 kiss-fft-1.3.0-1.el7 lensfun-0.3.2-2.el7 libdirq-0.4-1.el7 libxsmm-1.5.2-2.el7 mbuffer-20160613-1.el7 moin-1.9.9-1.el7 moodle-3.1.3-1.el7 mozjs38-38.8.0-2.el7 ovirt-engine-cli-3.6.9.2-1.el7 ovirt-engine-sdk-java-3.6.10.0-1.el7 ovirt-engine-sdk-python-3.6.9.1-1.el7 php-simplesamlphp-saml2-2.3.2-1.el7 php-simplesamlphp-saml2_1-1.10.2-1.el7 python-netifaces-0.10.5-2.el7 python-requestbuilder-0.6.0-1.el7 python3-netaddr-0.7.18-2.el7 qm-dsp-1.7.1-1.el7 qm-vamp-plugins-1.7.1-1.el7 siege-4.0.2-2.el7 stompclt-1.5-1.el7 thunderbird-enigmail-1.9.6-1.el7 trustedqsl-2.3-1.el7 Details about builds: ================================================================================ auter-0.8-1.el7 (FEDORA-EPEL-2016-b1a2f53a33) Prepare and apply updates -------------------------------------------------------------------------------- Update Information: Release version 0.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1394985 - auter-0.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1394985 -------------------------------------------------------------------------------- ================================================================================ dmenu-4.6-2.el7 (FEDORA-EPEL-2016-1621887f0f) Generic menu for X -------------------------------------------------------------------------------- Update Information: Update to dmenu 4.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1392029 - Please upgrade dmenu to 4.6+ https://bugzilla.redhat.com/show_bug.cgi?id=1392029 -------------------------------------------------------------------------------- ================================================================================ fts-3.5.7-1.el7 (FEDORA-EPEL-2016-69f5826a3a) File Transfer Service V3 -------------------------------------------------------------------------------- Update Information: New upstream release [3.5](https://gitlab.cern.ch/fts/fts3/blob/develop/doc/v3.5.md) -------------------------------------------------------------------------------- ================================================================================ gfal2-2.12.3-2.el7 (FEDORA-EPEL-2016-77dc4e39a0) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Build mock plugin. ---- New upstream release 2.12.3 -------------------------------------------------------------------------------- ================================================================================ gfal2-python-1.8.4-2.el7 (FEDORA-EPEL-2016-71ae615183) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: Rebuild to generate gfal2-python on ppc64le -------------------------------------------------------------------------------- ================================================================================ kiss-fft-1.3.0-1.el7 (FEDORA-EPEL-2016-078a10dcfc) Fast Fourier Transform library -------------------------------------------------------------------------------- Update Information: New release of qm-vamp-plugins 1.7.1 and new required package kiss-fft. kiss- fft description: A Fast Fourier Transform based up on the principle, "Keep It Simple, Stupid". Kiss FFT is a very small, reasonably efficient, mixed radix FFT library that can use either fixed or floating point data types. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279112 - Review Request: kiss-fft - Fast Fourier Transform library https://bugzilla.redhat.com/show_bug.cgi?id=1279112 [ 2 ] Bug #1261681 - qm-vamp-plugins-1.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1261681 -------------------------------------------------------------------------------- ================================================================================ lensfun-0.3.2-2.el7 (FEDORA-EPEL-2016-3b88974158) Library to rectify defects introduced by photographic lenses -------------------------------------------------------------------------------- Update Information: 0.3.2-2 release -------------------------------------------------------------------------------- ================================================================================ libdirq-0.4-1.el7 (FEDORA-EPEL-2016-693fad51b5) C implementation of the simple directory queue algorithm -------------------------------------------------------------------------------- Update Information: Initial packaging of latest upstream. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1393899 - Review Request: libdirq - C implementation of the simple directory queue algorithm https://bugzilla.redhat.com/show_bug.cgi?id=1393899 -------------------------------------------------------------------------------- ================================================================================ libxsmm-1.5.2-2.el7 (FEDORA-EPEL-2016-02fb3b4515) Small dense or sparse matrix multiplications and convolutions for x86_64 -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1389016 - Review Request: libxsmm - Library for small matrix-matrix multiplications on Intel x86_64 (e.g. for cp2k) https://bugzilla.redhat.com/show_bug.cgi?id=1389016 -------------------------------------------------------------------------------- ================================================================================ mbuffer-20160613-1.el7 (FEDORA-EPEL-2016-a438acd644) Measuring Buffer is an enhanced version of buffer -------------------------------------------------------------------------------- Update Information: * Mon Nov 14 2016 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 20160613-1 - Update to new upstream version 20160613 -------------------------------------------------------------------------------- ================================================================================ moin-1.9.9-1.el7 (FEDORA-EPEL-2016-0f8120bfcf) MoinMoin is a WikiEngine to collaborate on easily editable web pages -------------------------------------------------------------------------------- Update Information: Update to 1.9.9 (bugfix release for CVE-2016-7146, CVE-2016-7148) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1394684 - CVE-2016-7146 CVE-2016-7148 moin: Javascript injection via page creation https://bugzilla.redhat.com/show_bug.cgi?id=1394684 -------------------------------------------------------------------------------- ================================================================================ moodle-3.1.3-1.el7 (FEDORA-EPEL-2016-9672a02dba) A Course Management System -------------------------------------------------------------------------------- Update Information: 3.1.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1392336 - CVE-2016-9186 CVE-2016-9187 CVE-2016-9188 moodle: Multiple vulnerabilities in 3.1.2 and before [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1392336 [ 2 ] Bug #1392335 - CVE-2016-9186 CVE-2016-9187 CVE-2016-9188 moodle: Multiple vulnerabilities in 3.1.2 and before [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1392335 -------------------------------------------------------------------------------- ================================================================================ mozjs38-38.8.0-2.el7 (FEDORA-EPEL-2016-6aca6223c2) JavaScript interpreter and libraries -------------------------------------------------------------------------------- Update Information: Rebuild Fedora master branch for EPEL7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1393249 - please build mozjs38 for epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1393249 -------------------------------------------------------------------------------- ================================================================================ ovirt-engine-cli-3.6.9.2-1.el7 (FEDORA-EPEL-2016-dd5bf397f2) oVirt Engine Command Line Interface -------------------------------------------------------------------------------- Update Information: Update to upstream 3.6.9.2. -------------------------------------------------------------------------------- ================================================================================ ovirt-engine-sdk-java-3.6.10.0-1.el7 (FEDORA-EPEL-2016-70f4744523) oVirt Engine Software Development Kit (Java) -------------------------------------------------------------------------------- Update Information: Update to upstream 3.6.10.0. ---- Update to upstream 3.6.0.3. ---- Update to upstream 3.5.4.0 -------------------------------------------------------------------------------- ================================================================================ ovirt-engine-sdk-python-3.6.9.1-1.el7 (FEDORA-EPEL-2016-f2155d65c9) oVirt Engine Software Development Kit (Python) -------------------------------------------------------------------------------- Update Information: Update to upstream 3.6.9.1. -------------------------------------------------------------------------------- ================================================================================ php-simplesamlphp-saml2-2.3.2-1.el7 (FEDORA-EPEL-2016-5dcae4f165) SAML2 PHP library from SimpleSAMLphp -------------------------------------------------------------------------------- Update Information: ### 1.10.2 / 2.3.2 * Fix namespace bug that made it unable to parse ePTID attributes as NameIDs ### 1.10.1 / 2.3.1 * Bugfix release to stop assuming ePTIDs to be always arrays -------------------------------------------------------------------------------- References: [ 1 ] Bug #1379182 - php-simplesamlphp-saml2_1-1.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1379182 [ 2 ] Bug #1393368 - php-simplesamlphp-saml2-2.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1393368 -------------------------------------------------------------------------------- ================================================================================ php-simplesamlphp-saml2_1-1.10.2-1.el7 (FEDORA-EPEL-2016-5dcae4f165) SAML2 PHP library from SimpleSAMLphp (version 1) -------------------------------------------------------------------------------- Update Information: ### 1.10.2 / 2.3.2 * Fix namespace bug that made it unable to parse ePTID attributes as NameIDs ### 1.10.1 / 2.3.1 * Bugfix release to stop assuming ePTIDs to be always arrays -------------------------------------------------------------------------------- References: [ 1 ] Bug #1379182 - php-simplesamlphp-saml2_1-1.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1379182 [ 2 ] Bug #1393368 - php-simplesamlphp-saml2-2.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1393368 -------------------------------------------------------------------------------- ================================================================================ python-netifaces-0.10.5-2.el7 (FEDORA-EPEL-2016-9af5f4ff2b) Python library to retrieve information about network interfaces -------------------------------------------------------------------------------- Update Information: Ship python3 package Update to 0.10.5: * Fixed a potential one-byte stack overwrite (thanks Doug Horn). * Fixed possible null pointer deference (thanks bastiak). * Respect interface priorities when determining default gateway * Use CIDR notation for IPv6 netmasks. * Ignore broadcast addresses in the 169.254.0.0/16 range (it appears Cygwin's getaddrinfo() may erroneously generate these). * Fixed a problem with multi-part Netlink messages on Linux. * When using Netlink (i.e. Linux), check for the constant NLM_F_DUMP_INTR, since it only appeared in kernel version 3.1 * Fixed a problem with the gateways() function that caused it a crash on PyPy. * Added gateway detection via gateways() function. * Removed empty 'addr' entries for interfaces that don't provide any addresses. * Added a verion property to the module that you can test at runtime. * Added address_families dictionary to allow code to look up the symbolic name corresponding to a given numberic address family code. -------------------------------------------------------------------------------- ================================================================================ python-requestbuilder-0.6.0-1.el7 (FEDORA-EPEL-2016-5500cdfbb1) Command line-driven HTTP request builder -------------------------------------------------------------------------------- Update Information: This update fixes several bugs in commands' help output formatting and adds a NOTICE logging level. -------------------------------------------------------------------------------- ================================================================================ python3-netaddr-0.7.18-2.el7 (FEDORA-EPEL-2016-58bea500fe) A pure Python network address representation and manipulation library -------------------------------------------------------------------------------- Update Information: A network address manipulation library for Python Provides support for: Layer 3 addresses * IPv4 and IPv6 addresses, subnets, masks, prefixes * iterating, slicing, sorting, summarizing and classifying IP networks * dealing with various ranges formats (CIDR, arbitrary ranges and globs, nmap) * set based operations (unions, intersections etc) over IP addresses and subnets * parsing a large variety of different formats and notations * looking up IANA IP block information * generating DNS reverse lookups * supernetting and subnetting Layer 2 addresses * representation and manipulation MAC addresses and EUI-64 identifiers * looking up IEEE organisational information (OUI, IAB) * generating derived IPv6 addresses -------------------------------------------------------------------------------- References: [ 1 ] Bug #1394046 - Review Request: python3-netaddr - A pure Python network address representation and manipulation library https://bugzilla.redhat.com/show_bug.cgi?id=1394046 -------------------------------------------------------------------------------- ================================================================================ qm-dsp-1.7.1-1.el7 (FEDORA-EPEL-2016-078a10dcfc) Library for DSP and Music Informatics purposes -------------------------------------------------------------------------------- Update Information: New release of qm-vamp-plugins 1.7.1 and new required package kiss-fft. kiss- fft description: A Fast Fourier Transform based up on the principle, "Keep It Simple, Stupid". Kiss FFT is a very small, reasonably efficient, mixed radix FFT library that can use either fixed or floating point data types. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279112 - Review Request: kiss-fft - Fast Fourier Transform library https://bugzilla.redhat.com/show_bug.cgi?id=1279112 [ 2 ] Bug #1261681 - qm-vamp-plugins-1.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1261681 -------------------------------------------------------------------------------- ================================================================================ qm-vamp-plugins-1.7.1-1.el7 (FEDORA-EPEL-2016-078a10dcfc) Vamp audio feature extraction plugin -------------------------------------------------------------------------------- Update Information: New release of qm-vamp-plugins 1.7.1 and new required package kiss-fft. kiss- fft description: A Fast Fourier Transform based up on the principle, "Keep It Simple, Stupid". Kiss FFT is a very small, reasonably efficient, mixed radix FFT library that can use either fixed or floating point data types. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1279112 - Review Request: kiss-fft - Fast Fourier Transform library https://bugzilla.redhat.com/show_bug.cgi?id=1279112 [ 2 ] Bug #1261681 - qm-vamp-plugins-1.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1261681 -------------------------------------------------------------------------------- ================================================================================ siege-4.0.2-2.el7 (FEDORA-EPEL-2016-e7b71fd3d6) A HTTP regression testing and benchmarking utility -------------------------------------------------------------------------------- Update Information: Rebuild -------------------------------------------------------------------------------- ================================================================================ stompclt-1.5-1.el7 (FEDORA-EPEL-2016-c5569532bd) Versatile STOMP client -------------------------------------------------------------------------------- Update Information: Update to upstream version 1.5. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1395138 - stompclt-1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1395138 -------------------------------------------------------------------------------- ================================================================================ thunderbird-enigmail-1.9.6-1.el7 (FEDORA-EPEL-2016-366957b1aa) Authentication and encryption extension for Mozilla Thunderbird -------------------------------------------------------------------------------- Update Information: new version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1361630 - enigmail refuses to import any public key https://bugzilla.redhat.com/show_bug.cgi?id=1361630 -------------------------------------------------------------------------------- ================================================================================ trustedqsl-2.3-1.el7 (FEDORA-EPEL-2016-123a7ba3f2) TrustedQSL ham-radio applications -------------------------------------------------------------------------------- Update Information: Update to latest upstream release. See release notes for more information: http://www.arrl.org/files/file/LoTW%20Instructions/TrustedQSL-2-3-release.pdf -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx