The following Fedora EPEL 7 Security updates need testing: Age URL 671 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 433 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 151 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7 135 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 78 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6 compat-guile18-1.8.8-14.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-61ae084204 seamonkey-2.46-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-b2e637ff5a python-wikitcms-2.1.10-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0fa3a954b0 borgbackup-1.0.9-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-edab07e39a php-PHPMailer-5.2.21-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bb32162e83 php-swiftmailer-5.4.5-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-92129d651d exim-4.88-2.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-770d2afc7d mingw-flac-1.3.2-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing bindfs-1.13.5-3.el7 fail2ban-0.9.6-1.el7 inxi-2.3.7-1.el7 koji-1.11.0-3.el7 loopabull-0.0.5-1.el7 pdc-updater-0.4.6-1.el7 perl-Sys-Mmap-0.17-6.el7 php-nikic-fast-route-1.1.0-1.el7 python-djblets-0.9.4-3.el7 python-httpretty-0.8.14-1.20161011git70af1f8.el7 python3-urllib3-1.19.1-3.el7 Details about builds: ================================================================================ bindfs-1.13.5-3.el7 (FEDORA-EPEL-2017-779718fcf9) Fuse filesystem to mirror a directory -------------------------------------------------------------------------------- Update Information: Initial package for EPEL 7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282073 - RFE; Build for epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1282073 -------------------------------------------------------------------------------- ================================================================================ fail2ban-0.9.6-1.el7 (FEDORA-EPEL-2017-57b616d0bb) Daemon to ban hosts that cause multiple authentication errors -------------------------------------------------------------------------------- Update Information: Update to 0.9.6: * Misleading add resp. enable of (already available) jail in database, that induced a subsequent error: last position of log file will be never retrieved (gh-795) * Fixed a distribution related bug within testReadStockJailConfForceEnabled (e.g. test-cases faults on Fedora, see gh-1353) * Fixed pythonic filters and test scripts (running via wrong python version, uses "fail2ban-python" now); * Fixed test case "testSetupInstallRoot" for not default python version (also using direct call, out of virtualenv); * Fixed ambiguous wrong recognized date pattern resp. its optional parts (see gh-1512); * FIPS compliant, use sha1 instead of md5 if it not allowed (see gh-1540) * Monit config: scripting is not supported in path (gh-1556) * `filter.d/apache-modsecurity.conf` - Fixed for newer version (one space, gh-1626), optimized: non-greedy catch-all replaced for safer match, unneeded catch-all anchoring removed, non-capturing * `filter.d/asterisk.conf` - Fixed to match different asterisk log prefix (source file: method:) * `filter.d/dovecot.conf` - Fixed failregex ignores failures through some not relevant info (gh-1623) * `filter.d/ignorecommands/apache-fakegooglebot` - Fixed error within apache-fakegooglebot, that will be called with wrong python version (gh-1506) * `filter.d/assp.conf` - Extended failregex and test cases to handle ASSP V1 and V2 (gh-1494) * `filter.d/postfix-sasl.conf` - Allow for having no trailing space after 'failed:' (gh-1497) * `filter.d/vsftpd.conf` - Optional reason part in message after FAIL LOGIN (gh-1543) * `filter.d/sendmail-reject.conf` - removed mandatory double space (if dns-host available, gh-1579) * filter.d/sshd.conf - recognized "Failed publickey for" (gh-1477); - optimized failregex to match all of "Failed any- method for ... from <HOST>" (gh-1479) - eliminated possible complex injections (on user-name resp. auth-info, see gh-1479) - optional port part after host (see gh-1533, gh-1581) * New Actions: - `action.d/npf.conf` for NPF, the latest packet filter for NetBSD * New Filters: - `filter.d/mongodb- auth.conf` for MongoDB (document-oriented NoSQL database engine) (gh-1586, gh-1606 and gh-1607) * DateTemplate regexp extended with the word-end boundary, additionally to word-start boundary * Introduces new command "fail2ban- python", as automatically created symlink to python executable, where fail2ban currently installed (resp. its modules are located): - allows to use the same version, fail2ban currently running, e.g. in external scripts just via replace python with fail2ban-python: ```diff -#!/usr/bin/env python +#!/usr/bin/env fail2ban-python ``` - always the same pickle protocol - the same (and also guaranteed available) fail2ban modules - simplified stand-alone install, resp. stand-alone installation possibility via setup (like gh-1487) is getting closer * Several test cases rewritten using new methods assertIn, assertNotIn * New forward compatibility method assertRaisesRegexp (normally python >= 2.7). Methods assertIn, assertNotIn, assertRaisesRegexp, assertLogged, assertNotLogged are test covered now * Jail configuration extended with new syntax to pass options to the backend (see gh-1408), examples: - `backend = systemd[journalpath=/run/log/journal/machine-1]` - `backend = systemd[journalfiles="/run/log/journal/machine-1/system.journal, /run/log/journal/machine-1/user.journal"]` - `backend = systemd[journalflags=2]` Fix sendmail-auth filter (bug #1329919) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1329919 - sendmail-auth.conf filter never matchs on failregex condition https://bugzilla.redhat.com/show_bug.cgi?id=1329919 -------------------------------------------------------------------------------- ================================================================================ inxi-2.3.7-1.el7 (FEDORA-EPEL-2017-8091d80f0d) A full featured system information script -------------------------------------------------------------------------------- Update Information: Update to 2.3.7. -------------------------------------------------------------------------------- ================================================================================ koji-1.11.0-3.el7 (FEDORA-EPEL-2017-e04d644972) Build system tools -------------------------------------------------------------------------------- Update Information: Add proxy support to hub ---- Fix kerberos support for koji-gc -------------------------------------------------------------------------------- ================================================================================ loopabull-0.0.5-1.el7 (FEDORA-EPEL-2017-49d0813f6f) Event loop driven Ansible playbook execution engine -------------------------------------------------------------------------------- Update Information: Update to latest upstream. -------------------------------------------------------------------------------- ================================================================================ pdc-updater-0.4.6-1.el7 (FEDORA-EPEL-2017-f5eeedc179) Update the product definition center in response to fedmsg -------------------------------------------------------------------------------- Update Information: Flatten a misbehaving generator. ---- Use the container_build_user to find docker builds in a tag.. -------------------------------------------------------------------------------- ================================================================================ perl-Sys-Mmap-0.17-6.el7 (FEDORA-EPEL-2017-d4749f87d2) Use mmap to map in a file as a Perl variable -------------------------------------------------------------------------------- Update Information: Perl 5.24 rebuild -------------------------------------------------------------------------------- ================================================================================ php-nikic-fast-route-1.1.0-1.el7 (FEDORA-EPEL-2017-ed4dff94a5) Fast implementation of a regular expression based router -------------------------------------------------------------------------------- Update Information: Last upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1408886 - php-nikic-fast-route-v1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1408886 -------------------------------------------------------------------------------- ================================================================================ python-djblets-0.9.4-3.el7 (FEDORA-EPEL-2017-92bd66a505) A collection of useful classes and functions for Django -------------------------------------------------------------------------------- Update Information: Fix missing dependencies breaking Review Board -------------------------------------------------------------------------------- ================================================================================ python-httpretty-0.8.14-1.20161011git70af1f8.el7 (FEDORA-EPEL-2017-fb7e41f3a7) HTTP request mock tool for Python -------------------------------------------------------------------------------- Update Information: This update provides version 0.8.14 of httpretty. This is a significant update over the previous 0.8.3, but so far as I am aware, there are no backward- incompatible changes (please comment if you find any). The package now has its test suite enabled (aside from a few tests that require remote trips), and all tests pass for all releases, so we have some confidence this in fact works correctly now. Python 3 compatibility is also greatly improved. 0.8.3 was entirely broken with more recent urllib3, requests, and openssl versions, and had many compatibility issues with Python 3. -------------------------------------------------------------------------------- ================================================================================ python3-urllib3-1.19.1-3.el7 (FEDORA-EPEL-2017-c0adf476bd) Python 3 HTTP library with thread-safe connection pooling and file post -------------------------------------------------------------------------------- Update Information: Install symlink to system six.py -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx