Fedora EPEL 7 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
1104 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
867 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
449 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d libbsd-0.8.3-1.el7
346 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-d241156dfe mod_cluster-1.3.3-10.el7
178 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e27758bd23 libmspack-0.6-0.1.alpha.el7
116 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e64eeb6ece nagios-4.3.4-5.el7
65 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-73ee944e65 rootsh-1.5.3-17.el7
21 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3e70a38ad4 drupal7-7.57-1.el7
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-815e0064e9 tor-0.2.9.15-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f7a629b46f python-django16-1.6.11.7-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-635348eab4 php-simplesamlphp-saml2_1-1.10.6-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7150fa5dce php-simplesamlphp-saml2-2.3.8-1.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-673b3314a1 exim-4.90.1-3.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f41541339 monitorix-3.10.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
auter-0.11-2.el7
glpi-0.90.5-2.el7
mosquitto-1.4.15-1.el7
nodejs-rhea-0.2.10-1.el7
pdc-updater-0.8.4-2.el7
python-pyngus-2.2.2-1.el7
python-qpid-1.37.0-4.el7
python-yara-3.7.0-5.el7
qpid-cpp-1.37.0-2.el7
qpid-dispatch-1.0.1-1.el7
qpid-proton-0.21.0-2.el7
rubygem-qpid_proton-0.21.0-1.el7
Details about builds:
================================================================================
auter-0.11-2.el7 (FEDORA-EPEL-2018-00612777c1)
Prepare and apply updates
--------------------------------------------------------------------------------
Update Information:
Update to 0.11
--------------------------------------------------------------------------------
================================================================================
glpi-0.90.5-2.el7 (FEDORA-EPEL-2018-ae3a1eae7e)
Free IT asset management software
--------------------------------------------------------------------------------
Update Information:
escape get keys to prevent possible xss CVE-2018-7563
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1554755 - CVE-2018-7563 glpi: XSS vulnerability in the query string to front/preference.php
https://bugzilla.redhat.com/show_bug.cgi?id=1554755
--------------------------------------------------------------------------------
================================================================================
mosquitto-1.4.15-1.el7 (FEDORA-EPEL-2018-add4fc19d8)
An Open Source MQTT v3.1/v3.1.1 Broker
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2017-7651 (rhbz#1551755, rhbz#1551754)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551743 - CVE-2017-7652 mosquitto: configuration reload fails when no free sockets/file descriptors are available
https://bugzilla.redhat.com/show_bug.cgi?id=1551743
--------------------------------------------------------------------------------
================================================================================
nodejs-rhea-0.2.10-1.el7 (FEDORA-EPEL-2018-ebd370905e)
A reactive messaging library based on the AMQP protocol
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.2.10. ---- Rebased to 0.2.9.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523897 - nodejs-rhea-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523897
--------------------------------------------------------------------------------
================================================================================
pdc-updater-0.8.4-2.el7 (FEDORA-EPEL-2018-f7e0237724)
Update the product definition center in response to fedmsg
--------------------------------------------------------------------------------
Update Information:
Latest upstream. ---- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
python-pyngus-2.2.2-1.el7 (FEDORA-EPEL-2018-7144beead2)
Callback API implemented over Proton
--------------------------------------------------------------------------------
Update Information:
Rebased to 2.2.2.
--------------------------------------------------------------------------------
================================================================================
python-qpid-1.37.0-4.el7 (FEDORA-EPEL-2018-08f2624d0f)
Python client library for AMQP
--------------------------------------------------------------------------------
Update Information:
Updated python requires.
--------------------------------------------------------------------------------
================================================================================
python-yara-3.7.0-5.el7 (FEDORA-EPEL-2018-453b3badcc)
Python binding for the YARA pattern matching tool
--------------------------------------------------------------------------------
Update Information:
Rebuild the python-yara with the recent yara version.
--------------------------------------------------------------------------------
================================================================================
qpid-cpp-1.37.0-2.el7 (FEDORA-EPEL-2018-77b2a7b9cc)
Libraries for Qpid C++ client applications
--------------------------------------------------------------------------------
Update Information:
Updated pyton packages.
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.0.1-1.el7 (FEDORA-EPEL-2018-3f92ca70dd)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.0.1.
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.21.0-2.el7 (FEDORA-EPEL-2018-355078a357)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.21.0.
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.21.0-1.el7 (FEDORA-EPEL-2018-e87d79f7ea)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.21.0.
--------------------------------------------------------------------------------