The following Fedora EPEL 7 Security updates need testing: Age URL 156 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a unrtf-0.21.9-8.el7 107 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7 90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 62 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896 myrepos-1.20180726-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bdb21ebc3f drupal7-7.60-2.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-29716ed12f php-pear-CAS-1.3.6-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8876f503ce libgit2-0.26.8-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9091f95cd5 zchunk-0.9.14-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dea9ade8c1 icecast-2.4.4-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cbfa290941 mkvtoolnix-28.2.0-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-be918c58c6 SDL2_image-2.0.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-df2d5af2fe mingw-SDL2-2.0.9-1.el7 mingw-SDL2_mixer-2.0.4-1.el7 mingw-SDL2_image-2.0.4-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-32e0cee0bb perl-Mojolicious-7.94-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9051b49e75 suricata-4.0.6-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

blosc-1.11.3-1.el7 boinc-client-7.14.2-2.el7 cjdns-20.2-5.el7 libabigail-1.5-2.el7 pdns-4.0.6-2.el7 rust-1.30.1-7.el7

Details about builds:

================================================================================ blosc-1.11.3-1.el7 (FEDORA-EPEL-2018-6b173e95bf) A high performance compressor optimized for binary data -------------------------------------------------------------------------------- Update Information:

Update to a version which is required for newer python-tables. No need to log out or reboot. -------------------------------------------------------------------------------- ChangeLog:

* Sat Mar 11 2017 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 1.11.3-1 - Update to latest version (#1545060) - Build against external zstd - A pkgconfig file is now provided * Mon Nov 7 2016 Than Ngo than@redhat.com - 1.11.1-2 - Fix the bigendian issue which causes build failure in PyTables (bz#1379123) * Sun Nov 6 2016 Orion Poplawski orion@cora.nwra.com - 1.11.1-1 - Update to 1.11.1 (#1361777) - Run cmake in %build * Thu Jul 28 2016 Zbigniew J��drzejewski-Szmek zbyszek@bupkis - 1.10.1-1 - Update to latest version (#1323008) * Thu Jul 14 2016 Thibault North tnorth@fedoraproject.org - 1.9.3-1 - Update to 1.9.3 (#1211599) - Remove 32-bits test patch now integrated * Mon May 16 2016 Orion Poplawski orion@cora.nwra.com - 1.9.0-1 - Update to 1.9.0 (#1211599) - Update URL - Disable parallel build - Run all tests - Ship license files -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1545060 - Update it to 1.11.3 or newer to build python-tables-3.4.2 https://bugzilla.redhat.com/show_bug.cgi?id=1545060 --------------------------------------------------------------------------------

================================================================================ boinc-client-7.14.2-2.el7 (FEDORA-EPEL-2018-4fb7d4754c) The BOINC client -------------------------------------------------------------------------------- Update Information:

7.14.2 release -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 12 2018 Germano Massullo germano.massullo@cern.ch - 7.14.2-2 - EPEL7 only: added ExcludeArch: ppc64, read https://bugzilla.redhat.com/show_bug.cgi?id=1648290 * Thu Nov 8 2018 Germano Massullo germano.massullo@gmail.com - 7.14.2-1 - 7.14.2 release - Hardcoded Source0 URL, read https://bugzilla.redhat.com/show_bug.cgi?id=1647945 * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 7.10.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Jul 11 2018 Germano Massullo germano.massullo@gmail.com - 7.10.2-2 - Added BuildRequires: gcc-c++ --------------------------------------------------------------------------------

================================================================================ cjdns-20.2-5.el7 (FEDORA-EPEL-2018-c726fec101) The privacy-friendly network without borders -------------------------------------------------------------------------------- Update Information:

The issue is with an old version of python-networkx on EL7. It now installs, and dumpgraph and graphStats run - but drawgraph fails because the old version of networkx is missing spring-layout. This release also puts the cjdnsadmin python module in site-packages. That change will be hitting Fedora as well. -------------------------------------------------------------------------------- ChangeLog:

* Thu Nov 8 2018 Stuart Gathman stuart@gathman.org - 20.2-5 - Install cjdnsadmin python module in site-packages - Work around missing python2-networkx Provides in python-networkx bz#1647987 - Fix deprecated Buffer ctor in nodejs tools except on el6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1647987 - EPEL7 - cjdns-graph won't install on RHEL 7.6 https://bugzilla.redhat.com/show_bug.cgi?id=1647987 --------------------------------------------------------------------------------

================================================================================ libabigail-1.5-2.el7 (FEDORA-EPEL-2018-95aca05efb) Set of ABI analysis tools -------------------------------------------------------------------------------- Update Information:

Apply patches ---- Remove dpkg from buildrequires -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 12 2018 Dodji Seketeli dodji@redhat.com - 1.5-2 - Apply patches Support-having-several-debuginfo-search-dirs-for-a-b.patch and Add-a-fail-no-debug-info-to-abidiff.patch * Fri Oct 26 2018 Dodji Seketeli dodji@seketeli.org - 1.5-1 - Remove dpkg from buildrequires * Thu Oct 25 2018 Dodji Seketeli dodji@seketeli.org - 1.5-1 - Update to upstream 1.5 tarball -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1638554 - abipkgdiff: abg-comp-filter.cc:902: bool abigail::comparison::filtering::is_mostly_distinct_diff(const abigail::comparison::diff*): Assertion `td' failed. https://bugzilla.redhat.com/show_bug.cgi?id=1638554 --------------------------------------------------------------------------------

================================================================================ pdns-4.0.6-2.el7 (FEDORA-EPEL-2018-fc29932f12) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information:

- Rebase to 4.0.6 - Backend geo and lmdb has been deprecated - PowerDNS Security Advisory 2018-03 (CVE-2018-10851) Release notes: https://blog.powerdns.com/2018/11/06/powerdns-authoritative-server-4-0-6-4-1... -and-recursor-4-0-9-4-1-5-released/ Security Advisory: https://doc.powerdns.com/authoritative/security-advisories/powerdns- advisory-2018-03.html -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 12 2018 Morten Stevens mstevens@fedoraproject.org - 4.0.6-2 - Obsoletes backend geo and lmdb * Fri Nov 9 2018 Morten Stevens mstevens@fedoraproject.org - 4.0.6-1 - Rebase to 4.0.6 - Backend geo and lmdb has been deprecated - PowerDNS Security Advisory 2018-03 (CVE-2018-10851) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1649028 - CVE-2018-14626 pdns: Packet cache pollution via crafted query https://bugzilla.redhat.com/show_bug.cgi?id=1649028 [ 2 ] Bug #1588185 - CVE-2018-10851 pdns: Memory leak while parsing malformed records https://bugzilla.redhat.com/show_bug.cgi?id=1588185 --------------------------------------------------------------------------------

================================================================================ rust-1.30.1-7.el7 (FEDORA-EPEL-2018-56ae103eff) The Rust Programming Language -------------------------------------------------------------------------------- Update Information:

New versions of Rust and related tools -- see the release notes for [1.30](https://blog.rust-lang.org/2018/10/25/Rust-1.30.0.html). -------------------------------------------------------------------------------- ChangeLog:

* Thu Nov 8 2018 Josh Stone jistone@redhat.com - 1.30.1-7 - Update to 1.30.1. * Thu Nov 1 2018 Josh Stone jistone@redhat.com - 1.30.0-6.1 - Rebuild without bootstrap binaries. * Thu Oct 25 2018 Josh Stone jistone@redhat.com - 1.30.0-6 - Update to 1.30.0. - Re-bootstrap ppc64le for rust#54545 --------------------------------------------------------------------------------