The following Fedora EPEL 7 Security updates need testing: Age URL 59 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a unrtf-0.21.9-8.el7 54 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-15b7dc35af pass-1.7.2-1.el7 27 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d2e0971e9b uwsgi-2.0.17.1-1.el7 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f19460105c pam_yubico-2.26-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5b5c4b0050 rust-1.27.2-3.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-e9a8615099 mbedtls-2.7.5-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-52b5b56d0a seamonkey-2.49.4-2.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5346e2123a dpkg-1.18.25-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4f0963b857 moodle-3.1.13-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f5e90bb2b libmspack-0.7-0.1.alpha.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7b6fa936b1 knot-resolver-2.4.1-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-38987c542e cgit-1.1-11.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aec074825a thunderbird-enigmail-2.0.8-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0be0127779 libgit2-0.26.6-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

js-jsroot-5.5.0-1.el7 libmodulemd-1.6.2-1.el7 python-moksha-hub-1.5.12-1.el7 python-pluginlib-0.6.1-1.el7 ravada-0.3.0-0.6.beta6.el7 root-6.14.02-1.el7 singularity-2.6.0-1.1.el7 spectre-meltdown-checker-0.38-1.el7

Details about builds:

================================================================================ js-jsroot-5.5.0-1.el7 (FEDORA-EPEL-2018-ea6d93938d) JavaScript ROOT - Interactive numerical data analysis graphics -------------------------------------------------------------------------------- Update Information:

* https://root.cern.ch/doc/v614/release-notes.html#release-6.1402 * https://github.com/root-project/jsroot/releases/tag/5.5.0 -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 20 2018 Mattias Ellert mattias.ellert@physics.uu.se - 5.5.0-1 - Update to version 5.5.0 - Change dependency to js-jquery since js-jquery2 is orphaned * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 5.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1586022 - ROOTConfig-targets.cmake need to be adopted to the actually installed root packages. https://bugzilla.redhat.com/show_bug.cgi?id=1586022 --------------------------------------------------------------------------------

================================================================================ libmodulemd-1.6.2-1.el7 (FEDORA-EPEL-2018-b0e421ca89) Module metadata manipulation library -------------------------------------------------------------------------------- Update Information:

Make buildorder a signed integer to match the modulemd specification -------------------------------------------------------------------------------- ChangeLog:

* Tue Aug 7 2018 Stephen Gallagher sgallagh@redhat.com - 1.6.2-1 - Update to 1.6.2 - Make buildorder a signed integer to match modulemd specification * Mon Jul 23 2018 Stephen Gallagher sgallagh@redhat.com - 1.6.1-2 - Obsolete unsupported pythonX-modulemd packages --------------------------------------------------------------------------------

================================================================================ python-moksha-hub-1.5.12-1.el7 (FEDORA-EPEL-2018-9b0f7829d9) Hub components for Moksha -------------------------------------------------------------------------------- Update Information:

Hub shuts down now on errors from a STOMP broker. ---- Latest upstream. -------------------------------------------------------------------------------- ChangeLog:

* Tue Aug 7 2018 Ralph Bean rbean@redhat.com - 1.5.12-1 - new version * Thu Aug 2 2018 Ralph Bean rbean@redhat.com - 1.5.11-1 - new version * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 1.5.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Jun 18 2018 Miro Hron��ok mhroncok@redhat.com - 1.5.10-2 - Rebuilt for Python 3.7 * Mon Jun 18 2018 Ralph Bean rbean@redhat.com - 1.5.10-1 - new version --------------------------------------------------------------------------------

================================================================================ python-pluginlib-0.6.1-1.el7 (FEDORA-EPEL-2018-437510cf18) A framework for creating and importing plugins in Python -------------------------------------------------------------------------------- Update Information:

0.6.1 Release ---- EL6 build requirements should only apply to Python 2 ---- Change with_pythonX to use bcond_with(out) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1607543 - Review Request: python-pluginlib - A framework for creating and importing plugins in Python https://bugzilla.redhat.com/show_bug.cgi?id=1607543 --------------------------------------------------------------------------------

================================================================================ ravada-0.3.0-0.6.beta6.el7 (FEDORA-EPEL-2018-bea042947c) Remote Virtual Desktops Manager -------------------------------------------------------------------------------- Update Information:

Remove vmport in templates, which is not supported in EPEL qemu ---- Fix qemu- kvm path for EPEL ---- Fix _unique_uuid call ---- Fix SQL for MariaDB 5.5 ---- Add a patch for compatibility with Perl 5.16 ---- Pre-release 0.3.0 beta6 -------------------------------------------------------------------------------- ChangeLog:

* Tue Aug 7 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.3.0-0.6.beta6 - Remove vmport in templates, which is not supported in EPEL qemu * Sun Aug 5 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.3.0-0.5.beta6 - Fix qemu-kvm path for EPEL * Sat Aug 4 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.3.0-0.4.beta6 - Fix _unique_uuid call * Thu Aug 2 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.3.0-0.3.beta6 - Fix SQL for MariaDB 5.5 * Wed Aug 1 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.3.0-0.2.beta6 - Add a patch for compatibility with Perl 5.16 * Fri Jul 27 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.3.0-0.1.beta6 - Pre-release 0.3.0 beta6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1610588 - ravada post-install setup missing some dependencies: https://bugzilla.redhat.com/show_bug.cgi?id=1610588 [ 2 ] Bug #1609338 - RFE - Please provide update to Ravada Ravada 0.3.0-rc1 https://bugzilla.redhat.com/show_bug.cgi?id=1609338 --------------------------------------------------------------------------------

================================================================================ root-6.14.02-1.el7 (FEDORA-EPEL-2018-ea6d93938d) Numerical data analysis framework -------------------------------------------------------------------------------- Update Information:

* https://root.cern.ch/doc/v614/release-notes.html#release-6.1402 * https://github.com/root-project/jsroot/releases/tag/5.5.0 -------------------------------------------------------------------------------- ChangeLog:

* Mon Aug 6 2018 Mattias Ellert mattias.ellert@physics.uu.se - 6.14.02-1 - Update to 6.14.02 - Make python3 the preferred python for Fedora 29+: - Give python3 libPyROOT higher priority than python2 libPyROOT - The python scripts in root-cli use python3-root - Let root-tmva-python use python3-numpy - Fix build issue with undefined symbols in libSrvAuth - Make ROOTConfig-targets.cmake not error on missing files to work better with subpackages * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 6.14.00-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1586022 - ROOTConfig-targets.cmake need to be adopted to the actually installed root packages. https://bugzilla.redhat.com/show_bug.cgi?id=1586022 --------------------------------------------------------------------------------

================================================================================ singularity-2.6.0-1.1.el7 (FEDORA-EPEL-2018-c189fbeea1) Application and environment virtualization -------------------------------------------------------------------------------- Update Information:

Update to released upstream 2.6.0. Includes the underlay option (pr #1817), enables python3 by default (pr #1818), and enables docker:// and shub:// URLs to work in the singularity-runtime subpackage (pr #1819). ---- Updates to upstream 2.6.0-rc2, internal version 2.5.999. Disables underlay feature by default. Adds upstream PR #1324 which makes docker:// and shub:// work with just singularity-runtime package. Fixes python3 dependencies. ---- Update to upstream 2.5.99, which is tagged as 2.6.0-rc1. Get python3 patch from PR #1762 instead of custom defined. Move /usr/bin/python3 BuildRequires to singularity- runtime subpackage. Apply PR #1638, which adds the underlay feature. -------------------------------------------------------------------------------- ChangeLog:

* Tue Aug 7 2018 Dave Dykstra dwd@fnal.gov - 2.6.0-1.1 - Update to released upstream 2.6.0 - Rename PR 1638 to 1817 - Rename PR 1762 to 1818 - Note that PR 1324 was also renamed, to 1819 * Tue Jul 24 2018 Dave Dykstra dwd@fnal.gov - 2.5.999-1.4 - Move the Requires /usr/bin/python3 to be under %package runtime instead of under its %description. * Tue Jul 24 2018 Dave Dykstra dwd@fnal.gov - 2.5.999-1.3 - Move the BuildRequires /usr/bin/python3 back to the primary package, because otherwise it doesn't get installed at build time. Leave the Requires on the runtime subpackage. - Add singularity.abignore to avoid warnings from abipkgdiff. * Tue Jul 24 2018 Dave Dykstra dwd@fnal.gov - 2.5.999-1.2 - Add PR #1324 which makes the docker:// and shub:// URLs work with only the runtime subpackage. All the changes are to this file so it does not add a patch. Moves python files to the runtime subpackage, so the BuildRequires & Requires /usr/bin/python3 go back there as well. - Improve the underlay option comment in singularity.conf as found in the current version of PR #1638. * Tue Jul 24 2018 Dave Dykstra dwd@fnal.gov - 2.5.999-1.1 - Update to upstream 2.5.999, which is tagged as 2.6.0-rc2. - Disable the underlay feature by default - Move the BuildRequires: /usr/bin/python3 back to the singularity package because there is no python in singularity-runtime. - Add an additional Requires: /usr/bin/python3 for install time. * Mon Jul 16 2018 Dave Dykstra dwd@fnal.gov - 2.5.99-1.1 - Update to upstream 2.5.99, which is tagged as 2.6.0-rc1. - Switch to using internally defined require_python3, which is true unless %{osg} is defined, to decide whether or not to require python3. - Get python3 patch from PR #1762 instead of custom defined. - Move /usr/bin/python3 BuildRequires to singularity-runtime subpackage. - Apply PR #1638, which adds the underlay feature.

- Only require python3 if macro defined -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1600319 - singularity-2.6.0-rc2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1600319 [ 2 ] Bug #1762 - screen and Gnome-Terminal https://bugzilla.redhat.com/show_bug.cgi?id=1762 [ 3 ] Bug #1638 - text editors on starbuck rescue disks don't work https://bugzilla.redhat.com/show_bug.cgi?id=1638 --------------------------------------------------------------------------------

================================================================================ spectre-meltdown-checker-0.38-1.el7 (FEDORA-EPEL-2018-6ccb89d827) Spectre & Meltdown vulnerability/mitigation checker for Linux -------------------------------------------------------------------------------- Update Information:

* Feature: support detection for Variant 3a (CVE-2018-3640) and Variant 4 (CVE-2018-3639) * Feature: add Spectre v1 mitigation detection for ARM 32 bits * Feature: add Cavium CPU support and correct vulnerability information * Feature: add guess for kernel image location on Raspberry Pi 3 * Feature: ability to run the script inside a Docker container * Change: omit explanations by default to avoid cluttering the output, use `--explain` to get detailed mitigation help * Enhancement: explain mode: suggest to set VM CPU to an IBRS-capable one for hypervisors * Enhancement: avoid use of `iflag=skip_bytes` for compat with old `dd` versions * Fix: no longer unload msr or cpuid modules on exit if they were loaded before we started * Fix: when we can't determine if IBRS is enabled or not, report it as NO instead of UNKNOWN when we know that the CPU can't support it * Fix: variant2: detection now works under SLES kernels * Fix: ARM: update vulnerability info to latest vendor statement * Fix: ARM: ARMv8 models under Cortex A57 correctly marked as non-vulnerable (also fixes Raspberry Pi 3) * Fix: prometheus output wouldn't format `\n` correctly under some systems -------------------------------------------------------------------------------- ChangeLog:

* Tue Aug 7 2018 Reto Gantenbein reto.gantenbein@linuxmonk.ch - 0.38-1 - Update to 0.38 * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 0.37-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------