The following Fedora EPEL 7 Security updates need testing: Age URL 745 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 508 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 210 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 17 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-19578898e6 w3m-0.5.3-30.git20170102.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6950a0884d R-3.3.3-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-956d05f9c4 mbedtls-2.4.2-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-05ac8b1dc4 php-onelogin-php-saml-2.10.5-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b639a46822 tcpreplay-4.2.0-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d518cd4b9 libgit2-0.24.6-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5794ee2486 moodle-3.1.5-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing apcupsd-3.14.12-2.el7 duplicity-0.7.12-1.el7 libgit2-0.24.6-1.el7 module-build-service-1.3.14-1.el7 moodle-3.1.5-1.el7 perl-Boulder-1.30-26.el7 perl-Cflow-1.053-32.el7 php-cs-fixer-2.1.2-1.el7 php-justinrainbow-json-schema5-5.2.0-1.el7 python-ansible-tower-cli-3.1.3-1.el7 python-packaging-16.8-5.el7 rktime-0.6-3.el7 youtube-dl-2017.03.22-1.el7 Details about builds: ================================================================================ apcupsd-3.14.12-2.el7 (FEDORA-EPEL-2017-8acb6bcc5c) APC UPS Power Control Daemon for Linux -------------------------------------------------------------------------------- Update Information: - reduce amount of debug messages (#1053324, #1284600) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1284600 - apcupsd filling log with debug messages https://bugzilla.redhat.com/show_bug.cgi?id=1284600 -------------------------------------------------------------------------------- ================================================================================ duplicity-0.7.12-1.el7 (FEDORA-EPEL-2017-e2a88ecdc7) Encrypted bandwidth-efficient backup using rsync algorithm -------------------------------------------------------------------------------- Update Information: https://launchpad.net/duplicity/+announcement/14536 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1434625 - duplicity-0.7.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1434625 -------------------------------------------------------------------------------- ================================================================================ libgit2-0.24.6-1.el7 (FEDORA-EPEL-2017-3d518cd4b9) C implementation of the Git core methods as a library with a solid API -------------------------------------------------------------------------------- Update Information: Update to 0.24.6, fixing CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1411857 - CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 libgit2: Two vulnerabilities fixed in libgit 0.25.1 and 0.24.6 https://bugzilla.redhat.com/show_bug.cgi?id=1411857 -------------------------------------------------------------------------------- ================================================================================ module-build-service-1.3.14-1.el7 (FEDORA-EPEL-2017-741dccac7f) The Module Build Service for Modularity -------------------------------------------------------------------------------- Update Information: Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Latest upstream. ---- Include fedmsg.d/mbs-scheduler.py by default. ---- Branch for EPEL7. ---- Latest upstream. -------------------------------------------------------------------------------- ================================================================================ moodle-3.1.5-1.el7 (FEDORA-EPEL-2017-5794ee2486) A Course Management System -------------------------------------------------------------------------------- Update Information: Update for multiple CVEs -------------------------------------------------------------------------------- References: [ 1 ] Bug #1434721 - CVE-2017-2641 CVE-2017-2643 CVE-2017-2644 CVE-2017-2645 moodle: Multiple security vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1434721 -------------------------------------------------------------------------------- ================================================================================ perl-Boulder-1.30-26.el7 (FEDORA-EPEL-2017-41cd2f7540) An API for hierarchical tag/value structures -------------------------------------------------------------------------------- Update Information: Boulder provides a simple stream-oriented format for transmitting data objects between one or more processes. It does not provide for the serialization of Perl objects the way FreezeThaw or Data::Dumper do, but it does provide the advantage of being language independent. -------------------------------------------------------------------------------- ================================================================================ perl-Cflow-1.053-32.el7 (FEDORA-EPEL-2017-923b46d38d) Find flows in raw IP flow files -------------------------------------------------------------------------------- Update Information: Cflow with flow-tools support. This module implements an API for processing IP flow accounting information which as been collected from routers and written into flow files. -------------------------------------------------------------------------------- ================================================================================ php-cs-fixer-2.1.2-1.el7 (FEDORA-EPEL-2017-8d8a6dc66e) A tool to automatically fix PHP code style -------------------------------------------------------------------------------- Update Information: **Changelog for v2.1.2** * bug #2580 NoSpacesAfterFunctionNameFixer - Fix after dynamic call (SpacePossum, keradus) * bug #2586 NoUnusedImportsFixerTest - handle FQCN import (keradus) * bug #2587 NoClosingTagFixerTest - handle file without operations (keradus, SpacePossum) * minor #2552 Initial compatibility with PHP 7.2-DEV (keradus) * minor #2582 Improve AppVeyor and Travis CI build time (julienfalque) * minor #2584 NoUnreachableDefaultArgumentValueFixer - fix typo (chadburrus) * minor #2593 PhpUnitFqcnAnnotationFixer - move test to proper namespace (keradus) * minor #2596 AppVeyor - update PHP versions (keradus) **Changelog for v2.1.1** * bug #2547 NoUnneededControlParenthesesFixer - Handle T_COALESCE in clone (keksa) * bug #2557 BracesFixer - Better comments handling (SpacePossum) * bug #2558 require symfony/polyfill-xml (SpacePossum) * bug #2560 PhpdocNoAliasTagFixer - Fix circular replacements detection (julienfalque) * bug #2567 Filename with spaces usage (jaymecd) * bug #2572 NoUnreachableDefaultArgumentValueFixer - Mark as risky (SpacePossum) * minor #2533 AppVeyor - adjust phpunit version (keradus) * minor #2535 Make .gitignore entries more specific (julienfalque) * minor #2541 README.rst - provide download link for latest version (keradus) * minor #2562 Add schema.json (keradus) * minor #2563 Add deprecation notices tests (julienfalque) * minor #2564 Add rules configuration by passing json encode config by CLI (SpacePossum) * minor #2569 Make symfony/phpunit-bridge a dev dependency only (julienfalque) * minor #2574 Add xml.xsd (keradus) -------------------------------------------------------------------------------- ================================================================================ php-justinrainbow-json-schema5-5.2.0-1.el7 (FEDORA-EPEL-2017-4534b24bc7) A library to validate a json schema -------------------------------------------------------------------------------- Update Information: A PHP Implementation for validating JSON Structures against a given Schema. This package provides the library version 5. See http://json-schema.org/ Autoloader: /usr/share/php/JsonSchema5/autoload.php -------------------------------------------------------------------------------- References: [ 1 ] Bug #1428926 - Review Request: php-justinrainbow-json-schema5 - A library to validate a json schema https://bugzilla.redhat.com/show_bug.cgi?id=1428926 -------------------------------------------------------------------------------- ================================================================================ python-ansible-tower-cli-3.1.3-1.el7 (FEDORA-EPEL-2017-7248a9a459) A CLI tool for Ansible Tower -------------------------------------------------------------------------------- Update Information: update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1434636 - python-ansible-tower-cli-v3.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1434636 -------------------------------------------------------------------------------- ================================================================================ python-packaging-16.8-5.el7 (FEDORA-EPEL-2017-346f47abad) Core utilities for Python packages -------------------------------------------------------------------------------- Update Information: Epel7 compatible spec/package -------------------------------------------------------------------------------- ================================================================================ rktime-0.6-3.el7 (FEDORA-EPEL-2017-18a5ed8f15) Multi-zone time display utility -------------------------------------------------------------------------------- Update Information: A command-line utility which displays the time in multiple timezones in an easy- to-read way, using color to help indicate which locations are currently in business hours. -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2017.03.22-1.el7 (FEDORA-EPEL-2017-8ae8d5b01f) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Updates to the latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1424672 - youtube-dl-2017.03.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1424672 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx