Fedora EPEL 7 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
121 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a unrtf-0.21.9-8.el7
71 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
55 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7
46 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3a3c72c5e5 chromium-68.0.3440.106-3.el7
27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896 myrepos-1.20180726-1.el7
18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bc87c43cdd libbson-1.3.5-6.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-31ccd7aee3 php-tcpdf-6.2.25-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c906338b6b libmad-0.15.1b-26.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f13feb5e4b sensible-utils-0.0.12-2.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1345280fd0 php-horde-Horde-Core-2.31.6-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a59cab95c9 rust-1.29.1-2.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c1f95f55fd php-horde-horde-5.2.20-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9209f8af0b php-horde-kronolith-4.2.25-1.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-59650a08fe zchunk-0.9.11-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aa0030f9a1 php-horde-nag-4.2.19-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e8e2e2acac strongswan-5.7.1-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6e8b488d2 clamav-0.100.2-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
docker-compose-1.18.0-2.el7
fmf-0.6-1.el7
inxi-3.0.26-1.el7
json-3.3.0-1.el7
libgit2-0.26.7-1.el7
numix-icon-theme-square-0.1.0-2.20180829.git307e742.el7
python-dns-lexicon-2.7.9-1.el7
zstd-1.3.6-1.el7
Details about builds:
================================================================================
docker-compose-1.18.0-2.el7 (FEDORA-EPEL-2018-33a4b596ca)
Multi-container orchestration for Docker
--------------------------------------------------------------------------------
Update Information:
- Add patch3 to remove pip warning rhbz#1636882
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Carl George <carl(a)george.computer> - 1.18.0-2
- Add patch3 to remove pip warning rhbz#1636882
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1636882 - docker-compose throws bogus warning about multiple docker-py versions being installed
https://bugzilla.redhat.com/show_bug.cgi?id=1636882
--------------------------------------------------------------------------------
================================================================================
fmf-0.6-1.el7 (FEDORA-EPEL-2018-421993267d)
Flexible Metadata Format
--------------------------------------------------------------------------------
Update Information:
Hierarchy fixes, deep get, test coverage * Ignore directories with no metadata
defined * Give a nice error when .fmf file exists [fix #37] * Ignore metadata
subtrees [fix #43] * Support for direct deep dictionary value retrieval *
Separate exception for missing tree root [fix #42] * Move data merging into a
separate method [fix #41] * Ensure that data or parent are provided for Tree *
Test coverage for yaml syntax and finding root * Do not walk through the whole
directory hierarchy * Example typo, handle yaml parse errors [fix #38] * Require
the same version of the rpm package
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Petr ��pl��chal <psplicha(a)redhat.com> 0.6-1
- Ignore directories with no metadata defined
- Give a nice error when .fmf file exists [fix #37]
- Ignore metadata subtrees [fix #43]
- Support for direct deep dictionary value retrieval
- Separate exception for missing tree root [fix #42]
- Move data merging into a separate method [fix #41]
- Ensure that data or parent are provided for Tree
- Test coverage for yaml syntax and finding root
- Do not walk through the whole directory hierarchy
- Example typo, handle yaml parse errors [fix #38]
- Require the same version of the rpm package
--------------------------------------------------------------------------------
================================================================================
inxi-3.0.26-1.el7 (FEDORA-EPEL-2018-3e327e0af2)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.26.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> 3.0.26-1
- Update to 3.0.26
--------------------------------------------------------------------------------
================================================================================
json-3.3.0-1.el7 (FEDORA-EPEL-2018-230f34197d)
JSON for Modern C++
--------------------------------------------------------------------------------
Update Information:
New Features =========================== * The library can now also built with
GCC 4.8. Though this compiler does not fully support C++11, it can successfully
compile and run the test suite. Note that bug 57824 in GCC 4.8 still forbids to
use multiline raw strings in arguments to macros. #1257 * Added new function
get_to to write a JSON value to a passed reference. The destination type is
automatically derived which allows more succinct code compared to the get
function. #1227 #1231 Bug Fixes =============== * Fixed a bug in the CMake file
that made target_link_libraries to not properly include nlohmann_json. #1243
#1245 #1260 * Fixed a warning in MSVC 2017 complaining about a constexpr if.
#1204 #1268 #1272 * Fixed a bug that prevented compilation with ICPC. #755
#1222 * Improved the SFINAE correctness to fix a bug in the conversion
operator. #1237 #1238 * Fixed a -Wctor-dtor-privacy warning. #1224 * Fixed a
warning on a lambda in unevaluated context. #1225 #1230 * Fixed a bug
introduced in version 3.2.0 where defining JSON_CATCH_USER led to duplicate
macro definition of JSON_INTERNAL_CATCH. #1213 #1214 * Fixed a bug that
prevented compilation with Clang 3.4.2 in RHEL 7. #1179 #1249 Improvements
==================== * Added documentation on CMake integration of the library.
#1270 * Changed the CMake file to use find_package(nlohmann_json) without
installing the library. #1202 * Improved error messages in case operator[] is
used with the wrong combination (json.exception.type_error.305) of JSON
container type and argument type. Example: "cannot use operator[] with a string
argument". #1220 #1221 * Added a license and version information to the Meson
build file. #1252 * Removed static assertions to indicated missing to_json or
from_json functions as such assertions do not play well with SFINAE. These
assertions also led to problems with GMock. #960 #1212 #1228 * The test suite
now does not wait forever if run in a wrong directory and input files are not
found. #1262 * The test suite does not show deprecation warnings for deprecated
functions which frequently led to confusion. #1271 Further Changes
======================= * GCC 4.8 and Xcode 10 were added to the continuous
integration suite at Travis. * Added lgtm checks to pull requests. * Added
tests for CMake integration. #1260 Deprecated functions
======================== This release does not deprecate any functions. As an
overview, the following functions have been deprecated in earlier versions and
will be removed in the next major version (i.e., 4.0.0): * Function
iterator_wrapper are deprecated. Please use the member function items() instead.
* Functions friend std::istream& operator<<(basic_json&, std::istream&) and
friend std::ostream& operator>>(const basic_json&, std::ostream&) are
deprecated. Please use friend std::istream& operator>>(std::istream&,
basic_json&) and friend operator<<(std::ostream&, const basic_json&) instead.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.3.0-1
- Updated to version 3.3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1636945 - v3.2 of nlohmann json doesn't support GCC v4.8
https://bugzilla.redhat.com/show_bug.cgi?id=1636945
--------------------------------------------------------------------------------
================================================================================
libgit2-0.26.7-1.el7 (FEDORA-EPEL-2018-a9ac6a18d2)
C implementation of the Git core methods as a library with a solid API
--------------------------------------------------------------------------------
Update Information:
Update to 0.26.7 (CVE-2018-17456)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Pete Walter <pwalter(a)fedoraproject.org> - 0.26.7-1
- Update to 0.26.7 (CVE-2018-17456)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1636619 - CVE-2018-17456 git: arbitrary code execution via .gitmodules
https://bugzilla.redhat.com/show_bug.cgi?id=1636619
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-square-0.1.0-2.20180829.git307e742.el7 (FEDORA-EPEL-2018-65ff4039d6)
Numix Project square icon theme
--------------------------------------------------------------------------------
Update Information:
Release 18.08.29
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530084 - Review Request: numix-icon-theme-square - Numix Project square icon theme
https://bugzilla.redhat.com/show_bug.cgi?id=1530084
--------------------------------------------------------------------------------
================================================================================
python-dns-lexicon-2.7.9-1.el7 (FEDORA-EPEL-2018-49aac014a3)
Manipulate DNS records on various DNS providers in a standardized/agnostic way
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.9.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Eli Young <elyscape(a)gmail.com> - 2.7.9-1
- Update to 2.7.9 (#1637142)
--------------------------------------------------------------------------------
================================================================================
zstd-1.3.6-1.el7 (FEDORA-EPEL-2018-130a37bb85)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 P��draig Brady <P(a)draigBrady.com> - 1.3.6-1
- Latest upstream
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------