The following Fedora EPEL 7 Security updates need testing: Age URL 727 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 490 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 208 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7 192 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 72 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-759dd56b65 firebird-2.5.7.27050.0-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-af1e2c321c phpMyAdmin-4.4.15.10-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-20968c98b8 nodejs-6.9.5-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-cf89632a6e canl-c-2.1.8-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d5fe44714a cacti-1.0.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0e81fa293f drupal7-metatag-1.21-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f1dce07331 drupal7-views-3.15-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f99defddc3 munin-2.0.30-5.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-18d82f816f breeze-icon-theme-5.31.0-1.el7 extra-cmake-modules-5.31.0-3.el7 kf5-5.31.0-1.el7 kf5-attica-5.31.0-1.el7 kf5-baloo-5.31.0-1.el7 kf5-bluez-qt-5.31.0-1.el7 kf5-frameworkintegration-5.31.0-1.el7 kf5-kactivities-5.31.0-1.el7 kf5-kactivities-stats-5.31.0-1.el7 kf5-kapidox-5.31.0-1.el7 kf5-karchive-5.31.0-1.el7 kf5-kauth-5.31.0-1.el7 kf5-kbookmarks-5.31.0-1.el7 kf5-kcmutils-5.31.0-1.el7 kf5-kcodecs-5.31.0-1.el7 kf5-kcompletion-5.31.0-1.el7 kf5-kconfig-5.31.0-1.el7 kf5-kconfigwidgets-5.31.0-1.el7 kf5-kcoreaddons-5.31.0-1.el7 kf5-kcrash-5.31.0-1.el7 kf5-kdbusaddons-5.31.0-1.el7 kf5-kdeclarative-5.31.0-1.el7 kf5-kded-5.31.0-1.el7 kf5-kdelibs4support-5.31.0-1.el7 kf5-kdesignerplugin-5.31.0-1.el7 kf5-kdesu-5.31.0-1.el7 kf5-kdewebkit-5.31.0-1.el7 kf5-kdnssd-5.31.0-1.el7 kf5-kdoctools-5.31.0-1.el7 kf5-kemoticons-5.31.0-1.el7 kf5-kfilemetadata-5.31.0-1.el7 kf5-kglobalaccel-5.31.0-1.el7 kf5-kguiaddons-5.31.0-1.el7 kf5-khtml -5.31.0-1.el7 kf5-ki18n-5.31.0-1.el7 kf5-kiconthemes-5.31.0-1.el7 kf5-kidletime-5.31.0-1.el7 kf5-kimageformats-5.31.0-1.el7 kf5-kinit-5.31.0-1.el7 kf5-kio-5.31.0-2.el7 kf5-kitemmodels-5.31.0-1.el7 kf5-kitemviews-5.31.0-1.el7 kf5-kjobwidgets-5.31.0-1.el7 kf5-kjs-5.31.0-1.el7 kf5-kjsembed-5.31.0-1.el7 kf5-kmediaplayer-5.31.0-1.el7 kf5-knewstuff-5.31.0-1.el7 kf5-knotifications-5.31.0-1.el7 kf5-knotifyconfig-5.31.0-1.el7 kf5-kpackage-5.31.0-1.el7 kf5-kparts-5.31.0-1.el7 kf5-kpeople-5.31.0-1.el7 kf5-kplotting-5.31.0-1.el7 kf5-kpty-5.31.0-1.el7 kf5-kross-5.31.0-1.el7 kf5-krunner-5.31.0-1.el7 kf5-kservice-5.31.0-1.el7 kf5-ktexteditor-5.31.0-2.el7 kf5-ktextwidgets-5.31.0-1.el7 kf5-kunitconversion-5.31.0-1.el7 kf5-kwallet-5.31.0-1.el7 kf5-kwidgetsaddons-5.31.0-1.el7 kf5-kwindowsystem-5.31.0-1.el7 kf5-kxmlgui-5.31.0-1.el7 kf5-kxmlrpcclient-5.31.0-1.el7 kf5-modemmanager-qt-5.31.0-1.el7 kf5-networkmanager-qt-5.31.0-1.el7 kf5-plasma-5.31.0-1.el7 kf5-solid-5.31.0-1.el7 kf5-sonnet-5.31.0-1.el7 kf5 -syntax-highlighting-5.31.0-1.el7 kf5-threadweaver-5.31.0-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c01d41d83 php-pear-PHP-CodeSniffer-2.8.1-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9701d0e0dd GraphicsMagick-1.3.25-6.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d2049ca0d4 tor-0.2.9.10-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19578898e6 w3m-0.5.3-30.git20170102.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing psysh-0.8.2-1.el7 w3m-0.5.3-30.git20170102.el7 Details about builds: ================================================================================ psysh-0.8.2-1.el7 (FEDORA-EPEL-2017-ea386d281c) A runtime developer console, interactive debugger and REPL for PHP -------------------------------------------------------------------------------- Update Information: ### v0.8.2 #### New * Add a `startupMessage` config option (Thanks @gitetsu!) * Reflecting commands (`dump`, `ls`, `show`, `doc`) now add magic variables so you can do fun things with them: `$__class`, `$__file`, `$__method`, etc. #### Improved * Fix some mistyped annotations and add a phan config (Thanks @zonuexe!) * Handle file permissions errors for update checks and history files more gracefully (Thanks @zonuexe!) * Handle PHP 7.x `\Error`s thrown while serializing the shell return value (Thanks @damiankloip!) * Deal with variables named `$this` (like if you started your shell session from inside a class method) without exploding in PHP 7.1+. * Improve the accuracy of info returned by `Psy\info()`. * Fix an error preventing `Psy\info()` from doing anything at all in the last release :-( * Don't let local configuration interfere with config unit tests. * Make reflecting commands superglobals-aware. `dump` is the only one that actually does anything useful with a superglobal, but now the others have reasonable output. * Fix fatal error when trying to extend final classes. * Make a few things reference `static` instead of `self` to make extension easier (Thanks @castarco!) * Fix a handful of bugs around escaping special characters (and `<`) while dumping values. ### v0.8.1 * Add support for `use` statement groups. * Don't throw fatal errors when conditionally redefining classes and functions. * Fix `parse` command for older PHP Parser versions. * Add `bin/package`, to hopefully make our automatic releases go a bit smoother. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1413429 - psysh-0.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1413429 -------------------------------------------------------------------------------- ================================================================================ w3m-0.5.3-30.git20170102.el7 (FEDORA-EPEL-2017-19578898e6) A pager with Web browsing abilities -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-9422, CVE-2016-9423, CVE-2016-9424, CVE-2016-9425, CVE-2016-9428, CVE-2016-9426, CVE-2016-9429, CVE-2016-9430, CVE-2016-9431, CVE-2016-9432, CVE-2016-9433, CVE-2016-9434, CVE-2016-9435, CVE-2016-9436, CVE-2016-9437, CVE-2016-9438, CVE-2016-9439, CVE-2016-9440, CVE-2016-9441, CVE-2016-9442, CVE-2016-9443, CVE-2016-9622, CVE-2016-9623, CVE-2016-9624, CVE-2016-9625, CVE-2016-9626, CVE-2016-9627, CVE-2016-9628, CVE-2016-9629, CVE-2016-9631, CVE-2016-9630, CVE-2016-9632, CVE-2016-9633 And new upstream 20170102 as well -------------------------------------------------------------------------------- References: [ 1 ] Bug #1399740 - CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '<table>' https://bugzilla.redhat.com/show_bug.cgi?id=1399740 [ 2 ] Bug #1399739 - CVE-2016-9632 w3m: Buffer-overflow in wc_any_to_ucs() https://bugzilla.redhat.com/show_bug.cgi?id=1399739 [ 3 ] Bug #1399737 - CVE-2016-9630 w3m: Buffer-overflow in parseURL() https://bugzilla.redhat.com/show_bug.cgi?id=1399737 [ 4 ] Bug #1399734 - CVE-2016-9631 w3m: Null pointer dereference in HTMLlineproc0() https://bugzilla.redhat.com/show_bug.cgi?id=1399734 [ 5 ] Bug #1399732 - CVE-2016-9629 w3m: Null pointer dereference in shiftAnchorPosition() https://bugzilla.redhat.com/show_bug.cgi?id=1399732 [ 6 ] Bug #1399730 - CVE-2016-9628 w3m: Null pointer dereference due to bad form id in HTMLlineproc2body() https://bugzilla.redhat.com/show_bug.cgi?id=1399730 [ 7 ] Bug #1399728 - CVE-2016-9627 w3m: Array index out of bounds in display.c https://bugzilla.redhat.com/show_bug.cgi?id=1399728 [ 8 ] Bug #1399723 - CVE-2016-9626 w3m: Infinite recursion in HTMLlineproc0 https://bugzilla.redhat.com/show_bug.cgi?id=1399723 [ 9 ] Bug #1399720 - CVE-2016-9625 w3m: HTMLlineproc0 infinite recursion https://bugzilla.redhat.com/show_bug.cgi?id=1399720 [ 10 ] Bug #1399718 - CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer https://bugzilla.redhat.com/show_bug.cgi?id=1399718 [ 11 ] Bug #1399715 - CVE-2016-9623 w3m: Integer overflow resulting in segmentation fault https://bugzilla.redhat.com/show_bug.cgi?id=1399715 [ 12 ] Bug #1399713 - CVE-2016-9622 w3m: Null pointer dereference in HTMLlineproc2body https://bugzilla.redhat.com/show_bug.cgi?id=1399713 [ 13 ] Bug #1399710 - CVE-2016-9443 w3m: Null pointer dereference in formUpdateBuffer https://bugzilla.redhat.com/show_bug.cgi?id=1399710 [ 14 ] Bug #1399707 - CVE-2016-9442 w3m: Potential heap-buffer corruption due to Strgrow https://bugzilla.redhat.com/show_bug.cgi?id=1399707 [ 15 ] Bug #1399705 - CVE-2016-9441 w3m: Null pointer dereference in do_refill https://bugzilla.redhat.com/show_bug.cgi?id=1399705 [ 16 ] Bug #1399702 - CVE-2016-9440 w3m: Null pointer dereference in formUpdateBuffer https://bugzilla.redhat.com/show_bug.cgi?id=1399702 [ 17 ] Bug #1399701 - CVE-2016-9439 w3m: Infinite recursion with nested table and textarea https://bugzilla.redhat.com/show_bug.cgi?id=1399701 [ 18 ] Bug #1399699 - CVE-2016-9438 w3m: Null pointer dereference with input_alt tag https://bugzilla.redhat.com/show_bug.cgi?id=1399699 [ 19 ] Bug #1399697 - CVE-2016-9437 w3m: Write access violation with '<button type=radio>' https://bugzilla.redhat.com/show_bug.cgi?id=1399697 [ 20 ] Bug #1399695 - CVE-2016-9436 w3m: Unitialised value in parsetagx.c https://bugzilla.redhat.com/show_bug.cgi?id=1399695 [ 21 ] Bug #1399694 - CVE-2016-9435 w3m: Unitialised value in file.c https://bugzilla.redhat.com/show_bug.cgi?id=1399694 [ 22 ] Bug #1399691 - CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid https://bugzilla.redhat.com/show_bug.cgi?id=1399691 [ 23 ] Bug #1399690 - CVE-2016-9433 w3m: Segmentation fault when parsing iso2022 characters https://bugzilla.redhat.com/show_bug.cgi?id=1399690 [ 24 ] Bug #1399689 - CVE-2016-9432 w3m: Segmentation fault due to bcopy with negative size https://bugzilla.redhat.com/show_bug.cgi?id=1399689 [ 25 ] Bug #1399687 - CVE-2016-9431 w3m: Stack buffer overflow in deleteFrameSet() https://bugzilla.redhat.com/show_bug.cgi?id=1399687 [ 26 ] Bug #1399685 - CVE-2016-9430 w3m: Segmentation fault with malformed input tag https://bugzilla.redhat.com/show_bug.cgi?id=1399685 [ 27 ] Bug #1399682 - CVE-2016-9429 w3m: Global-buffer-overflow write in formUpdateBuffer https://bugzilla.redhat.com/show_bug.cgi?id=1399682 [ 28 ] Bug #1399668 - CVE-2016-9426 w3m: Heap corruption due to integer overflow in renderTable() https://bugzilla.redhat.com/show_bug.cgi?id=1399668 [ 29 ] Bug #1399667 - CVE-2016-9428 w3m: Out-of-bounds write in addMultirowsForm() https://bugzilla.redhat.com/show_bug.cgi?id=1399667 [ 30 ] Bug #1399666 - CVE-2016-9425 w3m: Segmentation fault due to write to lineBuf[-1] in addMultirowsForm https://bugzilla.redhat.com/show_bug.cgi?id=1399666 [ 31 ] Bug #1399665 - CVE-2016-9424 w3m: Out-of-bounds heap write due to negative array index https://bugzilla.redhat.com/show_bug.cgi?id=1399665 [ 32 ] Bug #1399664 - CVE-2016-9423 w3m: Malformed html tag heap-buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=1399664 [ 33 ] Bug #1399662 - CVE-2016-9422 w3m: Stack smashed with large image inside table https://bugzilla.redhat.com/show_bug.cgi?id=1399662 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
