The following Fedora EPEL 7 Security updates need testing: Age URL 1057 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 820 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 402 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7 299 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7 131 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7 68 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7 32 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8d57a2487b monit-5.25.1-1.el7 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73feedd767 wordpress-4.9.2-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ce6223e559 GraphicsMagick-1.3.28-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9eb18da891 moodle-3.1.10-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0d5d190b0 transmission-2.92-12.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-24ac4ff7df knot-resolver-1.5.3-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd0bc449d7 konversation-1.5.1-4.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing fuse-encfs-1.9.4-1.el7 mongodb-2.6.12-6.el7 pdns-3.4.11-3.el7 python-socksipychain-2.0.15-1.el7 timeshift-18.1.1-4.el7 w3m-0.5.3-36.git20180125.el7 yaml-cpp-0.5.1-1.el7.1 Details about builds: ================================================================================ fuse-encfs-1.9.4-1.el7 (FEDORA-EPEL-2018-64ebf1c9ea) Encrypted pass-thru filesystem in userspace -------------------------------------------------------------------------------- Update Information: Update to 1.9.4. -------------------------------------------------------------------------------- ================================================================================ mongodb-2.6.12-6.el7 (FEDORA-EPEL-2018-adb6af896b) High-performance, schema-free document-oriented database -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- ================================================================================ pdns-3.4.11-3.el7 (FEDORA-EPEL-2018-adb6af896b) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- ================================================================================ python-socksipychain-2.0.15-1.el7 (FEDORA-EPEL-2018-2cf21e719f) A Python SOCKS/HTTP Proxy module -------------------------------------------------------------------------------- Update Information: New dependency from Fedora and EPEL6 for pagekite. -------------------------------------------------------------------------------- References: [ 1 ] Bug #910146 - Review Request: python-socksipychain - Python SOCKS/HTTP Proxy module https://bugzilla.redhat.com/show_bug.cgi?id=910146 -------------------------------------------------------------------------------- ================================================================================ timeshift-18.1.1-4.el7 (FEDORA-EPEL-2018-2034535a48) System restore tool for Linux -------------------------------------------------------------------------------- Update Information: - Properly apply system LDFLAGS and thus enable full hardening - Generate useful -debugsource package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1534446 - Review Request: timeshift - System restore tool for Linux https://bugzilla.redhat.com/show_bug.cgi?id=1534446 -------------------------------------------------------------------------------- ================================================================================ w3m-0.5.3-36.git20180125.el7 (FEDORA-EPEL-2018-fb68becde7) A pager with Web browsing abilities -------------------------------------------------------------------------------- Update Information: Rebase to latest upstream gitrev 20180125 and Security fix for CVE-2018-6196, CVE-2018-6197, CVE-2018-6198 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539157 - CVE-2018-6196 w3m: Infinite recursion in HTMLlineproc0 https://bugzilla.redhat.com/show_bug.cgi?id=1539157 [ 2 ] Bug #1539151 - CVE-2018-6197 w3m: Null pointer dereference in formUpdateBuffer in form.c https://bugzilla.redhat.com/show_bug.cgi?id=1539151 [ 3 ] Bug #1539127 - CVE-2018-6198 w3m: insecure temporary files creation when ~/.w3m is unwritable https://bugzilla.redhat.com/show_bug.cgi?id=1539127 -------------------------------------------------------------------------------- ================================================================================ yaml-cpp-0.5.1-1.el7.1 (FEDORA-EPEL-2018-adb6af896b) A YAML parser and emitter for C++ -------------------------------------------------------------------------------- Update Information: Downgraded (0.5.3->0.5.1) yaml-cpp due to breaking of binaries built with it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539386 - yaml-cpp 0.5.3 breaks existing binaries compiled against older versions https://bugzilla.redhat.com/show_bug.cgi?id=1539386 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
