The following Fedora EPEL 7 Security updates need testing: Age URL 783 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 545 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 247 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7 127 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 25 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 23 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 22 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 19 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b9db4ff3ec proftpd-1.3.5e-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e4d67c8654 collectd-5.7.1-2.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fdcd61a2be pcre2-10.21-18.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e2fae7fb04 squirrelmail-1.4.22-16.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-502ba1e21d roundcubemail-1.1.9-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing cargo-0.18.0-1.el7 certbot-0.13.0-2.el7 copr-builder-0-13.el7 jboss-batch-1.0-api-1.0.0-6.el7 jboss-interceptors-1.2-api-1.0.0-6.el7 jboss-jaxb-intros-1.0.2-11.el7 llvm3.9-3.9.1-7.el7 loopabull-0.0.6-1.el7 moarvm-0.2017.04-1.el7 nqp-0.0.2017.04-1.el7 php-psr-simple-cache-1.0.0-1.el7 php-react-dns-0.4.8-1.el7 php-react-event-loop-0.4.3-1.el7 purple-hangouts-0-47.20170427hg0dc1213.el7 purple-skypeweb-1.3-3.20170420git31222f4.el7 rakudo-0.2017.04.2-1.el7 roundcubemail-1.1.9-1.el7 rpmdeplint-1.3-1.el7 rubygem-ox-2.4.13-1.el7 rubygem-rdiscount-2.1.8-1.el7 rubygem-sinatra-1.4.8-1.el7 rubygem-tilt-2.0.7-1.el7 rust-1.17.0-1.el7 slf4j-jboss-logmanager-1.0.3-2.el7 yad-0.39.0-1.el7 Details about builds: ================================================================================ cargo-0.18.0-1.el7 (FEDORA-EPEL-2017-39c54287c2) Rust's package manager and build tool -------------------------------------------------------------------------------- Update Information: New versions of Rust and Cargo -- see the release notes for [1.17](https://blog .rust-lang.org/2017/04/27/Rust-1.17.html). LLVM is included in this update to fix a bug with ARM codegen. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438031 - File conflicts between rust-gdb and rust-lldb https://bugzilla.redhat.com/show_bug.cgi?id=1438031 -------------------------------------------------------------------------------- ================================================================================ certbot-0.13.0-2.el7 (FEDORA-EPEL-2017-acdfbe8cfa) A free, automated certificate authority client -------------------------------------------------------------------------------- Update Information: Fix to timer target -------------------------------------------------------------------------------- ================================================================================ copr-builder-0-13.el7 (FEDORA-EPEL-2017-8e95d79227) Build package from Copr dist-git -------------------------------------------------------------------------------- Update Information: Build package from Copr dist-git -------------------------------------------------------------------------------- References: [ 1 ] Bug #1441588 - Review Request: copr-builder - build package from copr dist-git https://bugzilla.redhat.com/show_bug.cgi?id=1441588 -------------------------------------------------------------------------------- ================================================================================ jboss-batch-1.0-api-1.0.0-6.el7 (FEDORA-EPEL-2017-180a5a88bd) Batch Applications 1.0 API -------------------------------------------------------------------------------- Update Information: for wildfly -------------------------------------------------------------------------------- ================================================================================ jboss-interceptors-1.2-api-1.0.0-6.el7 (FEDORA-EPEL-2017-e6b46ab20c) Java EE Interceptors 1.2 API -------------------------------------------------------------------------------- Update Information: for wildfly -------------------------------------------------------------------------------- ================================================================================ jboss-jaxb-intros-1.0.2-11.el7 (FEDORA-EPEL-2017-a72628e7fe) JBoss JAXB Intros -------------------------------------------------------------------------------- Update Information: for wildfly -------------------------------------------------------------------------------- ================================================================================ llvm3.9-3.9.1-7.el7 (FEDORA-EPEL-2017-39c54287c2) The Low Level Virtual Machine Version 3.9 -------------------------------------------------------------------------------- Update Information: New versions of Rust and Cargo -- see the release notes for [1.17](https://blog .rust-lang.org/2017/04/27/Rust-1.17.html). LLVM is included in this update to fix a bug with ARM codegen. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438031 - File conflicts between rust-gdb and rust-lldb https://bugzilla.redhat.com/show_bug.cgi?id=1438031 -------------------------------------------------------------------------------- ================================================================================ loopabull-0.0.6-1.el7 (FEDORA-EPEL-2017-cfe29cebae) Event loop driven Ansible playbook execution engine -------------------------------------------------------------------------------- Update Information: Update to latest upstream - 0.0.6 -------------------------------------------------------------------------------- ================================================================================ moarvm-0.2017.04-1.el7 (FEDORA-EPEL-2017-e409308d33) Meta-model On A Runtime Virtual Machine -------------------------------------------------------------------------------- Update Information: update to 2017.04 -------------------------------------------------------------------------------- ================================================================================ nqp-0.0.2017.04-1.el7 (FEDORA-EPEL-2017-e409308d33) Not Quite Perl (6) -------------------------------------------------------------------------------- Update Information: update to 2017.04 -------------------------------------------------------------------------------- ================================================================================ php-psr-simple-cache-1.0.0-1.el7 (FEDORA-EPEL-2017-ea329c14a3) Common interfaces for simple caching (PSR-16) -------------------------------------------------------------------------------- Update Information: This repository holds all interfaces related to PSR-16. Note that this is not a cache implementation of its own. It is merely an interface that describes a cache implementation. See the specification [1] for more details. You can find implementations of the specification by looking for packages providing the psr /simple-cache-implementation [2] virtual package. Autoloader: /usr/share/php/Psr/SimpleCache/autoload.php [1] https://github.com/php-fig/fig- standards/blob/master/accepted/PSR-16-simple-cache.md [2] https://packagist.org/providers/psr/simple-cache-implementation -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442469 - Review Request: php-psr-simple-cache - Common interfaces for simple caching (PSR-16) https://bugzilla.redhat.com/show_bug.cgi?id=1442469 -------------------------------------------------------------------------------- ================================================================================ php-react-dns-0.4.8-1.el7 (FEDORA-EPEL-2017-fb8f6377b1) Async DNS resolver -------------------------------------------------------------------------------- Update Information: ## 0.4.8 (2017-04-16) * Feature: Add support for the AAAA record type to the protocol parser (#58 by @othillo) * Feature: Add support for the PTR record type to the protocol parser (#59 by @othillo) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1443522 - php-react-dns-0.4.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1443522 -------------------------------------------------------------------------------- ================================================================================ php-react-event-loop-0.4.3-1.el7 (FEDORA-EPEL-2017-3c888c8dd2) Event loop abstraction layer that libraries can use for evented I/O -------------------------------------------------------------------------------- Update Information: ## 0.4.3 (2017-04-27) * Bug fix: Bugfix in the usage sample code #57 (@dandelionred) * Improvement: Remove branch-alias definition #53 (@WyriHaximus) * Improvement: StreamSelectLoop: Use fresh time so Timers added during stream events are accurate #51 (@andrewminerd) * Improvement: Avoid deprecation warnings in test suite due to deprecation of getMock() in PHPUnit #68 (@martinschroeder) * Improvement: Add PHPUnit 4.8 to require-dev #69 (@shaunbramley) * Improvement: Increase test timeouts for HHVM and unify timeout handling #70 (@clue) * Improvement: Travis improvements (backported from #74) #75 (@clue) * Improvement: Test suite now uses socket pairs instead of memory streams #66 (@martinschroeder) * Improvement: StreamSelectLoop: Test suite uses signal constant names in data provider #67 (@martinschroeder) * Improvement: ExtEventLoop: No longer suppress all errors #65 (@mamciek) * Improvement: Readme cleanup #89 (@jsor) * Improvement: Restructure and improve README #90 (@jsor) * Bug fix: StreamSelectLoop: Fix erroneous zero-time sleep (backport to 0.4) #94 (@jsor) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1446188 - php-react-event-loop-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1446188 -------------------------------------------------------------------------------- ================================================================================ purple-hangouts-0-47.20170427hg0dc1213.el7 (FEDORA-EPEL-2017-473c14a9a5) Hangouts plugin for libpurple -------------------------------------------------------------------------------- Update Information: Updated plugins to latest snapshots. -------------------------------------------------------------------------------- ================================================================================ purple-skypeweb-1.3-3.20170420git31222f4.el7 (FEDORA-EPEL-2017-473c14a9a5) Adds support for Skype to Pidgin -------------------------------------------------------------------------------- Update Information: Updated plugins to latest snapshots. -------------------------------------------------------------------------------- ================================================================================ rakudo-0.2017.04.2-1.el7 (FEDORA-EPEL-2017-e409308d33) Perl 6 compiler implementation that runs on MoarVM -------------------------------------------------------------------------------- Update Information: update to 2017.04 -------------------------------------------------------------------------------- ================================================================================ roundcubemail-1.1.9-1.el7 (FEDORA-EPEL-2017-502ba1e21d) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: **Roundcube Webmail 1.1.9** This is a security update to the stable version 1.1. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of Roundcube 1.1.x with this version. Please do backup your data before updating! CHANGELOG * Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114] * Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713) * Fix bug where base_dn setting was ignored inside group_filters (#5720) -------------------------------------------------------------------------------- ================================================================================ rpmdeplint-1.3-1.el7 (FEDORA-EPEL-2017-85aa7e4f51) Tool to find errors in RPM packages in the context of their dependency graph -------------------------------------------------------------------------------- Update Information: Upstream bug fix release 1.3: https://rpmdeplint.readthedocs.io/en/latest/CHANGES.html -------------------------------------------------------------------------------- ================================================================================ rubygem-ox-2.4.13-1.el7 (FEDORA-EPEL-2017-bda5272403) Fast XML parser and object serializer -------------------------------------------------------------------------------- Update Information: Fixed special characters handling -------------------------------------------------------------------------------- References: [ 1 ] Bug #1441440 - rubygem-ox-2.4.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1441440 -------------------------------------------------------------------------------- ================================================================================ rubygem-rdiscount-2.1.8-1.el7 (FEDORA-EPEL-2017-c725ecc60a) Converts documents in Markdown syntax to HTML -------------------------------------------------------------------------------- Update Information: update to 2.8.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1445767 - Native library rdiscount.so can't be found https://bugzilla.redhat.com/show_bug.cgi?id=1445767 -------------------------------------------------------------------------------- ================================================================================ rubygem-sinatra-1.4.8-1.el7 (FEDORA-EPEL-2017-18b2d130e1) Ruby-based web application framework -------------------------------------------------------------------------------- Update Information: Tilt is a generic interface to multiple Ruby template engines. Sinatra is a DSL intended for quickly creating web-applications in Ruby with minimal effort. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1389733 - EPEL7 support https://bugzilla.redhat.com/show_bug.cgi?id=1389733 [ 2 ] Bug #1096203 - Build rubygem-sinatra for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1096203 -------------------------------------------------------------------------------- ================================================================================ rubygem-tilt-2.0.7-1.el7 (FEDORA-EPEL-2017-18b2d130e1) Generic interface to multiple Ruby template engines -------------------------------------------------------------------------------- Update Information: Tilt is a generic interface to multiple Ruby template engines. Sinatra is a DSL intended for quickly creating web-applications in Ruby with minimal effort. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1389733 - EPEL7 support https://bugzilla.redhat.com/show_bug.cgi?id=1389733 [ 2 ] Bug #1096203 - Build rubygem-sinatra for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1096203 -------------------------------------------------------------------------------- ================================================================================ rust-1.17.0-1.el7 (FEDORA-EPEL-2017-39c54287c2) The Rust Programming Language -------------------------------------------------------------------------------- Update Information: New versions of Rust and Cargo -- see the release notes for [1.17](https://blog .rust-lang.org/2017/04/27/Rust-1.17.html). LLVM is included in this update to fix a bug with ARM codegen. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438031 - File conflicts between rust-gdb and rust-lldb https://bugzilla.redhat.com/show_bug.cgi?id=1438031 -------------------------------------------------------------------------------- ================================================================================ slf4j-jboss-logmanager-1.0.3-2.el7 (FEDORA-EPEL-2017-e160388aa2) SLF4J backend for JBoss LogManager -------------------------------------------------------------------------------- Update Information: for wildfly-elytron -------------------------------------------------------------------------------- ================================================================================ yad-0.39.0-1.el7 (FEDORA-EPEL-2017-f20ed8c015) Display graphical dialogs from shell scripts or command line -------------------------------------------------------------------------------- Update Information: update yad to version 0.39.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1446197 - yad-0.39.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1446197 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx