The following Fedora EPEL 7 Security updates need testing: Age URL 850 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 612 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 194 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 92 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5f9a6163b4 tnef-1.4.14-1.el7 89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7ecb12e378 python-XStatic-jquery-ui-1.12.0.1-1.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4aae1e22f1 lxc-1.0.10-2.el7 16 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-30baf73207 chromium-59.0.3071.104-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-abfcb66c76 python-djblets-0.9.8-1.el7 ReviewBoard-2.5.13.1-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5ab90c7180 zabbix20-2.0.21-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-eb357ac3b3 zabbix22-2.2.18-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7c2e699925 catdoc-0.95-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bcfa38e123 drupal7-7.56-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ee32a5ffa libtomcrypt-1.17-25.el7 libtommath-0.42.0-5.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2b04537603 phpMyAdmin-4.4.15.10-2.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-2ba20eeb97 php-horde-Horde-Image-2.5.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8886eb42e cross-binutils-2.25.1-31.el7.1 cross-gcc-4.8.5-16.el7.1 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ffb0e00f3b mosquitto-1.4.13-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a427bcb775 yara-3.6.2-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-52b6bc17c1 globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gridftp-server-12.2-1.el7 globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 myproxy-6.1.28-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7678ea423a jabberd-2.6.1-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-86125e7897 GraphicsMagick-1.3.26-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing GraphicsMagick-1.3.26-1.el7 abrt-addon-python3-2.1.11-49.el7 cacti-1.1.12-1.el7 cvechecker-3.7-3.el7 globus-ftp-client-8.36-1.el7 globus-gass-cache-program-6.7-1.el7 globus-gass-copy-9.27-1.el7 globus-gram-client-13.18-1.el7 globus-gram-job-manager-14.36-1.el7 globus-gridftp-server-12.2-1.el7 globus-gssapi-gsi-12.17-1.el7 globus-io-11.9-1.el7 globus-net-manager-0.17-1.el7 globus-xio-5.16-1.el7 globus-xio-gsi-driver-3.11-1.el7 globus-xio-pipe-driver-3.10-1.el7 globus-xio-udt-driver-1.28-1.el7 gnucash-2.6.17-1.el7 gnucash-docs-2.6.17-1.el7 jabberd-2.6.1-1.el7 libdxflib-3.17.0-2.el7 myproxy-6.1.28-1.el7 nagios-plugins-2.2.1-2git.el7 nrpe-3.1.1-2.el7 php-horde-Horde-Icalendar-2.1.7-1.el7 rkhunter-1.4.4-2.el7 thermald-1.6-6.el7 trustedqsl-2.3.1-1.el7 Details about builds: ================================================================================ GraphicsMagick-1.3.26-1.el7 (FEDORA-EPEL-2017-86125e7897) An ImageMagick fork, offering faster image generation and better quality -------------------------------------------------------------------------------- Update Information: New stable upstream release, primarily includes security fixes for CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also http://www.graphicsmagick.org/NEWS.html#july-4-2017 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467378 - CVE-2017-10800 GraphicsMagick: out of memory in ReadMATImage() function https://bugzilla.redhat.com/show_bug.cgi?id=1467378 [ 2 ] Bug #1467372 - CVE-2017-10799 GraphicsMagick: out of memory in ReadDPXImage() function https://bugzilla.redhat.com/show_bug.cgi?id=1467372 [ 3 ] Bug #1467655 - CVE-2017-10794 GraphicsMagick: buffer overflow in QuantumTransferMode https://bugzilla.redhat.com/show_bug.cgi?id=1467655 -------------------------------------------------------------------------------- ================================================================================ abrt-addon-python3-2.1.11-49.el7 (FEDORA-EPEL-2017-5c1cdaa826) ABRT's addon for catching and analyzing Python 3 exceptions -------------------------------------------------------------------------------- Update Information: Introduce abrt-addon-python3 package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1445615 - abrt part missing https://bugzilla.redhat.com/show_bug.cgi?id=1445615 -------------------------------------------------------------------------------- ================================================================================ cacti-1.1.12-1.el7 (FEDORA-EPEL-2017-d13b9e8413) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.1.12 Release notes: https://www.cacti.net/release_notes.php?version=1.1.11 Release notes: https://www.cacti.net/release_notes.php?version=1.1.12 -------------------------------------------------------------------------------- ================================================================================ cvechecker-3.7-3.el7 (FEDORA-EPEL-2017-146693c8dc) Tool for compare packages installed in your system with CVE database -------------------------------------------------------------------------------- Update Information: Add cvechecker -------------------------------------------------------------------------------- ================================================================================ globus-ftp-client-8.36-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - GridFTP Client Library -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-gass-cache-program-6.7-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Tools to manipulate local and remote GASS caches -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-gass-copy-9.27-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Globus Gass Copy -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-gram-client-13.18-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - GRAM Client Library -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-gram-job-manager-14.36-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - GRAM Jobmanager -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-12.2-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-gssapi-gsi-12.17-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-io-11.9-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - uniform I/O interface -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-net-manager-0.17-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Network Manager -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-xio-5.16-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Globus XIO Framework -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-xio-gsi-driver-3.11-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Globus XIO GSI Driver -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-xio-pipe-driver-3.10-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Globus Pipe Driver -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ globus-xio-udt-driver-1.28-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Globus Toolkit - Globus XIO UDT Driver -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ gnucash-2.6.17-1.el7 (FEDORA-EPEL-2017-be64013a1c) Finance management application -------------------------------------------------------------------------------- Update Information: This updates GnuCash to the latest upstream bugfix release. For more information on changes in this release, see the upstream release notes at: https://gnucash.org/#n-170702-2.6.17.news -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467327 - gnucash-2.6.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1467327 -------------------------------------------------------------------------------- ================================================================================ gnucash-docs-2.6.17-1.el7 (FEDORA-EPEL-2017-be64013a1c) Help files and documentation for the GnuCash personal finance manager -------------------------------------------------------------------------------- Update Information: This updates GnuCash to the latest upstream bugfix release. For more information on changes in this release, see the upstream release notes at: https://gnucash.org/#n-170702-2.6.17.news -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467327 - gnucash-2.6.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1467327 -------------------------------------------------------------------------------- ================================================================================ jabberd-2.6.1-1.el7 (FEDORA-EPEL-2017-7678ea423a) OpenSource server implementation of the Jabber protocols -------------------------------------------------------------------------------- Update Information: updated to 2.6.1 (security bugfix release) -------------------------------------------------------------------------------- ================================================================================ libdxflib-3.17.0-2.el7 (FEDORA-EPEL-2017-04d6090cf2) A C++ library for reading and writing DXF files -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1457949 - Review Request: libdxflib - A C++ library for reading and writing DXF files https://bugzilla.redhat.com/show_bug.cgi?id=1457949 -------------------------------------------------------------------------------- ================================================================================ myproxy-6.1.28-1.el7 (FEDORA-EPEL-2017-52b6bc17c1) Manage X.509 Public Key Infrastructure (PKI) security credentials -------------------------------------------------------------------------------- Update Information: globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available * Remove some redundant tests to reduce test time globus-gass-cache-program * GT6 update globus-gass-copy * Don't attempt sshftp data protection without creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix uninitialized field related crash (9.25) * Remove checksum data from public handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager * Default to running personal gatekeeper on an ephemeral port globus-gridftp- server * New error message format (12.0) * Configuration database (12.0) * Better delay for end of session ref check (12.1) * Fix tests when getgroups() does not return effective gid (12.2) globus-gram-client * GT6 update globus- gssapi-gsi * Don't unlock unlocked mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16/12.17) * Drop patch globus-gssapi-gsi-mutex- unlock.patch (fixed upstream 12.14) globus-io * Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch globus-net-manager- pkgconfig.patch (fixed upstream) globus-xio * Don't rely on globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop some BuildRequires no longer needed with above change * Fix undefined symbols during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3 support (6.1.27) -------------------------------------------------------------------------------- ================================================================================ nagios-plugins-2.2.1-2git.el7 (FEDORA-EPEL-2017-cc0aeaca30) Host/service/network monitoring program plugins for Nagios -------------------------------------------------------------------------------- Update Information: Update to git for 20170703 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1465784 - nagios http plugin is old and buggy https://bugzilla.redhat.com/show_bug.cgi?id=1465784 [ 2 ] Bug #1463674 - check_http segfaults once Lenovo IMM controllers are checked https://bugzilla.redhat.com/show_bug.cgi?id=1463674 [ 3 ] Bug #1427925 - check_http 2.2.0-4 fails if Transfer-Encoding ends the header https://bugzilla.redhat.com/show_bug.cgi?id=1427925 [ 4 ] Bug #1256848 - nagios-plugins-log has incorrect paths to egrep/tail (EL6) https://bugzilla.redhat.com/show_bug.cgi?id=1256848 [ 5 ] Bug #1210380 - SELinux prevents check_mailq from executing postfix when run via NRPE https://bugzilla.redhat.com/show_bug.cgi?id=1210380 [ 6 ] Bug #1052740 - SELinux is preventing check_log via NRPE from read and open var_log_t files https://bugzilla.redhat.com/show_bug.cgi?id=1052740 -------------------------------------------------------------------------------- ================================================================================ nrpe-3.1.1-2.el7 (FEDORA-EPEL-2017-0ff431e36d) Host/service/network monitoring agent for Nagios -------------------------------------------------------------------------------- Update Information: Fix bug due to /etc/nrpe.d/ includes was above other defined entries BZ# 1467971 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467971 - Regression to Bug 963703 - nrpe.cfg sets config values after including user configuration https://bugzilla.redhat.com/show_bug.cgi?id=1467971 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Icalendar-2.1.7-1.el7 (FEDORA-EPEL-2017-caf941dacd) iCalendar API -------------------------------------------------------------------------------- Update Information: **Horde_Icalendar 2.1.7** * [jan] Fix unescaping of commas in ADR, N, and ORG attributes. -------------------------------------------------------------------------------- ================================================================================ rkhunter-1.4.4-2.el7 (FEDORA-EPEL-2017-1150c5994f) A host-based tool to scan for rootkits, backdoors and local exploits -------------------------------------------------------------------------------- Update Information: Correct some rebasing errors on config. ---- New upstream release with various fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1284403 - Logger is not being used correctly in /usr/bin/rkhunter https://bugzilla.redhat.com/show_bug.cgi?id=1284403 [ 2 ] Bug #1466318 - rkhunter-1.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466318 -------------------------------------------------------------------------------- ================================================================================ thermald-1.6-6.el7 (FEDORA-EPEL-2017-12147e793e) Thermal Management daemon -------------------------------------------------------------------------------- Update Information: * Replace fix for rhbz#1464548 from upstream commit * Add upstream patch to fix README * Add upstreamed patch to silence compiler warnings ---- * Add upstream patch to fix ThermalMonitor * Add several fixes from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464548 - [abrt] thermald-monitor: ThermaldInterface::getLowestValidTripTempForZone(): ThermalMonitor killed by signal 11 https://bugzilla.redhat.com/show_bug.cgi?id=1464548 -------------------------------------------------------------------------------- ================================================================================ trustedqsl-2.3.1-1.el7 (FEDORA-EPEL-2017-2658a2cc93) TrustedQSL ham-radio applications -------------------------------------------------------------------------------- Update Information: Defects Corrected: = * Added 'Saving QSOs' to the messages to be translated. * When renewing a callsign certificate and backing up to earlier pages in the wizard, TQSL could display an unexpected page for selecting the certificate type, which is not needed for renewals. TQSL will no longer display the unexpected page. * When editing an ADIF file that has an invalid mode setting, TQSL now notifies the user that the mode is being ignored. * For Unix systems, fix a defect that could cause the password prompt to not appear when the system has built the wxWidgets system with debug assertions enabled. Correct the invocation of the Windows Installer when an update is available. * Correct the counts reported when duplicate QSOs are found along with QSOs with other errors. * Fix formatting of the messages that appear when QSOs change values in the station location for duplicate QSOs. * Correct improperly formatted frequencies from ADIF files (values like '7.010.20') to remove the extra periods. * Revert the change that stripped spaces in the TQSL configuration file as that caused newlines to be removed in places like the station_data file. * Fix "OpenSSL error - bad end line" by ensuring that there's always a newline starting a new certificate. Feature Additions: = * Add Finnish translation from Juhani, OH8MXL. * Add the ADIF satellite name to the pulldown menu in the ADIF editor to allow satellites to be more easily looked up. * Allow 'LIGHT' in a Cabrillo file to represent 300 GHz and above. * Allow TQSL to build against OpenSSL 1.1.0. * Add the ability to pull DXCC Entity valid date ranges from the TQSL configuration file. -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
