The following Fedora EPEL 7 Security updates need testing: Age URL 262 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 158 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6813 chicken-4.9.0.1-4.el7 65 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8155 nagios-4.0.8-1.el7 54 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9 python-pymongo-3.0.3-1.el7 30 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-234553a060 mediawiki123-1.23.11-1.el7 30 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ad1b660a4d php-ZendFramework-1.12.16-1.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-97e247eb19 perl-HTML-Scrubber-0.15-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-da5a65c143 zarafa-7.1.14-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-c399ccf199 sundials-2.6.2-11.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-914de61c66 potrace-1.13-2.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-ed2e71927f imapsync-1.644-2.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dfc3cd3b50 knot-1.6.6-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

GMT-5.2.1-1.el7 MUMPS-5.0.1-8.el7 NetworkManager-fortisslvpn-1.0.8-1.el7 NetworkManager-openvpn-1.0.8-1.el7 NetworkManager-vpnc-1.0.8-1.el7 amavisd-new-2.10.1-5.el7 fedmsg-0.16.2-6.el7 fldigi-3.23.05-1.el7 fwknop-2.6.7-1.el7 hitch-1.1.0-1.el7 java-dirq-1.6-4.el7 knot-1.6.6-1.el7 libinput-1.1.1-1.el7 mkdocs-0.14.0-10.el7 mock-1.2.14-1.el7 nodejs-boolbase-1.0.0-2.el7 nodejs-generate-object-property-1.2.0-1.el7 nodejs-unpipe-1.0.0-2.el7 packagedb-cli-2.10-2.el7 perl-Lingua-Translit-0.23-1.el7 python-alembic-0.8.3-3.el7 python-editor-0.4-4.el7 python-pyrax-1.9.5-1.el7 rubber-1.3-1.el7 umlgraph-5.7.2-12.el7 xdotool-3.20150503.1-1.el7

Details about builds:

================================================================================ GMT-5.2.1-1.el7 (FEDORA-EPEL-2015-4e909135d9) Generic Mapping Tools -------------------------------------------------------------------------------- Update Information:

Update to 5.2.1. See http://gmt.soest.hawaii.edu/doc/5.2.1/GMT_Docs.html#new- features-in-gmt-5-2 for details. --------------------------------------------------------------------------------

================================================================================ MUMPS-5.0.1-8.el7 (FEDORA-EPEL-2015-d20c4ae3b9) A MUltifrontal Massively Parallel sparse direct Solver -------------------------------------------------------------------------------- Update Information:

- Fixed links to OpenMPI libraries ---- MUMPS-5.0.1-5.el7 - Set MPI libraries by using pkgconfig - ExcludeArch s390x s390 ---- MUMPS-5.0.1-4.fc23 - Hardened builds on <F23 MUMPS-5.0.1-4.fc21 - Hardened builds on <F23 MUMPS-5.0.1-4.fc22 - Hardened builds on <F23 MUMPS-5.0.1-4.el6 - Hardened builds on <F23 MUMPS-5.0.1-4.el7 - Hardened builds on <F23 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1282460 - MUMPS build failed because libmpi_f77 is missing with last openmpi-1.10.0-10 used in rhel72-2015-10-15 snapshot https://bugzilla.redhat.com/show_bug.cgi?id=1282460 --------------------------------------------------------------------------------

================================================================================ NetworkManager-fortisslvpn-1.0.8-1.el7 (FEDORA-EPEL-2015-2919d6d7d9) NetworkManager VPN plugin for Fortinet compatible SSLVPN -------------------------------------------------------------------------------- Update Information:

VPN plugin update. ---- This update disables client renegotiation by default, leaving the value up to the server or user override. This fixes frequent renegotiation failures when using two-factor authentication when the client has a much lower value than the server. This update disables client renegotiation by default, leaving the value up to the server or user override. This fixes frequent renegotiation failures when using two-factor authentication when the client has a much lower value than the server. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1148910 - Please Build/Release for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1148910 [ 2 ] Bug #969433 - OpenVPN frequently disconnects https://bugzilla.redhat.com/show_bug.cgi?id=969433 --------------------------------------------------------------------------------

================================================================================ NetworkManager-openvpn-1.0.8-1.el7 (FEDORA-EPEL-2015-2919d6d7d9) NetworkManager VPN plugin for OpenVPN -------------------------------------------------------------------------------- Update Information:

VPN plugin update. ---- This update disables client renegotiation by default, leaving the value up to the server or user override. This fixes frequent renegotiation failures when using two-factor authentication when the client has a much lower value than the server. This update disables client renegotiation by default, leaving the value up to the server or user override. This fixes frequent renegotiation failures when using two-factor authentication when the client has a much lower value than the server. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1148910 - Please Build/Release for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1148910 [ 2 ] Bug #969433 - OpenVPN frequently disconnects https://bugzilla.redhat.com/show_bug.cgi?id=969433 --------------------------------------------------------------------------------

================================================================================ NetworkManager-vpnc-1.0.8-1.el7 (FEDORA-EPEL-2015-2919d6d7d9) NetworkManager VPN plugin for vpnc -------------------------------------------------------------------------------- Update Information:

VPN plugin update. ---- This update disables client renegotiation by default, leaving the value up to the server or user override. This fixes frequent renegotiation failures when using two-factor authentication when the client has a much lower value than the server. This update disables client renegotiation by default, leaving the value up to the server or user override. This fixes frequent renegotiation failures when using two-factor authentication when the client has a much lower value than the server. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1148910 - Please Build/Release for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1148910 [ 2 ] Bug #969433 - OpenVPN frequently disconnects https://bugzilla.redhat.com/show_bug.cgi?id=969433 --------------------------------------------------------------------------------

================================================================================ amavisd-new-2.10.1-5.el7 (FEDORA-EPEL-2015-501bd58eaf) Email filter with virus scanner and spamassassin support -------------------------------------------------------------------------------- Update Information:

Drop clamav dependency and co-own /etc/clamd.d -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1265922 - amavisd and clamav dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1265922 --------------------------------------------------------------------------------

================================================================================ fedmsg-0.16.2-6.el7 (FEDORA-EPEL-2015-1085543340) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information:

Fix python_provide macro. ---- Explicit python2 subpackages. --------------------------------------------------------------------------------

================================================================================ fldigi-3.23.05-1.el7 (FEDORA-EPEL-2015-6411acee07) Digital modem program for Linux -------------------------------------------------------------------------------- Update Information:

Version 3.23.05 Maintenance release * kml disable * disabled kml services unless user enables on kml configuration tab. - default is ON * dock macros * add dockable macros in a 4x12 matrix - provides access to all 48 macros. - group of 48 can be dragged to/from it's default position just below the main menu bar * change vertical raster height to 20 vice 60 - decreased minimum vertical main dialog dimension for small netbook screens * update to documentation * ADIF record repairs * Add code to allow on the fly correction of corrupt ADIF records during file read. * gpio ptt * Added gpio support for PTT. - used primarily by Pi experimenters - submitted by Lior, KK6KWA * NAVTEX/SYNOP/KML * suppress info messages during prog start - prodigiuous use of LOG_INFO increases difficulty of debugging other aspects of fldigi - enable the INFO messages for debugging or to observe program flow by setting command line flag "-more-info" ; case is significant * Add 8PSK 125FL 250FL * Lowered CPU requirements to allow for use on Android/Netbook devices: - Added modes 125FL and 250FL with constraint length 13 FEC - Adjusted maximum traceback memory for viterbi decoder - Set traceback to an optimally-high value in viterbi.cxx constructor - 8PSK - 500F 1000F & 1200F now use only 1 viterbi decoder without voting - Assigned secondary RsID codes to 125FL and 250FL. * Code cleanups in psk.cxx --------------------------------------------------------------------------------

================================================================================ fwknop-2.6.7-1.el7 (FEDORA-EPEL-2015-604819ec39) A Single Packet Authorization (SPA) implementation -------------------------------------------------------------------------------- Update Information:

New upstram release --------------------------------------------------------------------------------

================================================================================ hitch-1.1.0-1.el7 (FEDORA-EPEL-2015-41d2fefbd8) Network proxy that terminates TLS/SSL connections -------------------------------------------------------------------------------- Update Information:

New upstream release hitch-1.1.0. This is mainly a bugfix release, fixing a couple of memory leaks and bugs related to ipv6, and with wildcard cert matching. Also, hitch can now reload certificates without restarting. For a full list of changes, see https://github.com/varnish/hitch/blob/master/CHANGES.rst -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1284139 - hitch-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1284139 --------------------------------------------------------------------------------

================================================================================ java-dirq-1.6-4.el7 (FEDORA-EPEL-2015-7c841160e6) Directory based queue -------------------------------------------------------------------------------- Update Information:

The java-dirq-1.6-4.el7 package fixes the problems found on ARM and is now again a noarch rpm. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1270012 - [epel7s390x] java-dirq SRPM does not build correctly on s390x https://bugzilla.redhat.com/show_bug.cgi?id=1270012 [ 2 ] Bug #1240637 - java-dirq-debuginfo-1.4-7 is empty https://bugzilla.redhat.com/show_bug.cgi?id=1240637 --------------------------------------------------------------------------------

================================================================================ knot-1.6.6-1.el7 (FEDORA-EPEL-2015-dfc3cd3b50) An authoritative DNS daemon -------------------------------------------------------------------------------- Update Information:

New upstream release: - security fix: out-of-bound read in packet parser for malformed NAPTR record - fix: systemd startup notifications --------------------------------------------------------------------------------

================================================================================ libinput-1.1.1-1.el7 (FEDORA-EPEL-2015-b6bc217359) Input device library -------------------------------------------------------------------------------- Update Information:

libinput 1.1.1 --------------------------------------------------------------------------------

================================================================================ mkdocs-0.14.0-10.el7 (FEDORA-EPEL-2015-48f1c2f3ff) Python tool to create HTML documentation from markdown sources -------------------------------------------------------------------------------- Update Information:

Remove especific click 4 requires. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1265828 - mkdocs: please build for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1265828 --------------------------------------------------------------------------------

================================================================================ mock-1.2.14-1.el7 (FEDORA-EPEL-2015-a295f19cae) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information:

Just bugfix release. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1264462 - resolvedep using repoquery doesn't use yum.conf from chroot https://bugzilla.redhat.com/show_bug.cgi?id=1264462 [ 2 ] Bug #1241827 - mock --new-chroot does not work https://bugzilla.redhat.com/show_bug.cgi?id=1241827 [ 3 ] Bug #1266453 - RFE: allow to set number of inodes for tmpfs plugin https://bugzilla.redhat.com/show_bug.cgi?id=1266453 [ 4 ] Bug #1267161 - TypeError: 'str' does not support the buffer interface https://bugzilla.redhat.com/show_bug.cgi?id=1267161 [ 5 ] Bug #1272123 - [RFE] Add %(resultdir) placeholder for sign plugin. https://bugzilla.redhat.com/show_bug.cgi?id=1272123 [ 6 ] Bug #1281355 - Disable deltarpm with package manager dnf https://bugzilla.redhat.com/show_bug.cgi?id=1281355 [ 7 ] Bug #1281369 - mock <options> <localpath>/my.srpm fails if <localpath>/my.srpm is on nfs filesytem https://bugzilla.redhat.com/show_bug.cgi?id=1281369 --------------------------------------------------------------------------------

================================================================================ nodejs-boolbase-1.0.0-2.el7 (FEDORA-EPEL-2015-a849a794ac) Two functions: One that returns true, one that returns false -------------------------------------------------------------------------------- Update Information:

Initial packaging -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1271802 - Review Request: nodejs-boolbase - Two functions: One that returns true, one that returns false https://bugzilla.redhat.com/show_bug.cgi?id=1271802 --------------------------------------------------------------------------------

================================================================================ nodejs-generate-object-property-1.2.0-1.el7 (FEDORA-EPEL-2015-e59c183277) Generate safe JS code that can used to reference a object property -------------------------------------------------------------------------------- Update Information:

Initial package --------------------------------------------------------------------------------

================================================================================ nodejs-unpipe-1.0.0-2.el7 (FEDORA-EPEL-2015-513fce577c) Unpipe a stream from all destinations -------------------------------------------------------------------------------- Update Information:

Initial packaging -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1270385 - Review Request: nodejs-unpipe - Unpipe a stream from all destinations https://bugzilla.redhat.com/show_bug.cgi?id=1270385 --------------------------------------------------------------------------------

================================================================================ packagedb-cli-2.10-2.el7 (FEDORA-EPEL-2015-b55f26df1f) A CLI for pkgdb -------------------------------------------------------------------------------- Update Information:

- Backport patch from upstream fixing processing all the actions requested to the admins in one go ---- - Update to 2.10 - Update the README - In pkgdb- admin, if the action isn't supported, move on to the next one - Fix PEP8 compliance and remove unused imports - Allow to process all admin requests in one go ---- Update to 2.9.1 - Fix interacting with bugzilla.redhat.com (fixes RHBZ#1267821 - Show review URL when showing request.package Update to 2.9.2 - Comment on the bugzilla ticket when processing a package request (Update 2.9.1 has never really seen the light of day) ---- - Update to 2.9 - Set default BeautifulSoup parser (Till Maas) - Add the `koschei` action to toggle the koschei status of a package - Add the `monitoring` action to toggle the monitoring status of a package - Raise an exception when unable to decode JSON. (Ralph Bean) - Start py3 support --------------------------------------------------------------------------------

================================================================================ perl-Lingua-Translit-0.23-1.el7 (FEDORA-EPEL-2015-8bc29ecc34) Transliterates text between writing systems -------------------------------------------------------------------------------- Update Information:

0.23 -- 2015-11-23 - Added "ISO 8859-16 RON" transliteration. Thanks to ��tefan Suciu for contributing this table! ---- (Initial submission) --- 0.22 -- 2015-07-07 - Added "ISO/R 9" transliteration (ISO/R 9:1954). Thanks to Dusan Vuckovic for contributing this table! 0.21 -- 2014-10-24 - Added "Common ARA" Arabic transliteration. Thanks to Ahmed Elsheshtawy for suggesting this transliteration and his help implementing it! 0.20 -- 2014-05-22 - lib/Lingua/Translit/Tables.pm: Added sub to handle Perl's "Unicode Bug", see perlunicode for details (v0.10). This fixes the errors reported by Perl v5.18.0. - MANIFEST: Added missing "ALA-LC RUS" files to distribution. - xml/: Removed "Common Classical MON" transliteration due to errors and contributors lack of time to fix these. - Code cleanups -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1284461 - perl-Lingua-Translit-0.23 is available https://bugzilla.redhat.com/show_bug.cgi?id=1284461 [ 2 ] Bug #1282914 - Review Request: perl-Lingua-Translit - Transliterates text between writing systems https://bugzilla.redhat.com/show_bug.cgi?id=1282914 --------------------------------------------------------------------------------

================================================================================ python-alembic-0.8.3-3.el7 (FEDORA-EPEL-2015-9b2a9f807c) Database migration tool for SQLAlchemy -------------------------------------------------------------------------------- Update Information:

Initial packaging. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1285017 - New requirement in alembic 0.8.0: python-editor https://bugzilla.redhat.com/show_bug.cgi?id=1285017 [ 2 ] Bug #1274168 - python-alembic broken, missing dependency https://bugzilla.redhat.com/show_bug.cgi?id=1274168 [ 3 ] Bug #1256353 - Review Request: python-editor - Programmatically open an editor, capture the result. https://bugzilla.redhat.com/show_bug.cgi?id=1256353 --------------------------------------------------------------------------------

================================================================================ python-editor-0.4-4.el7 (FEDORA-EPEL-2015-9b2a9f807c) Programmatically open an editor, capture the result. -------------------------------------------------------------------------------- Update Information:

Initial packaging. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1285017 - New requirement in alembic 0.8.0: python-editor https://bugzilla.redhat.com/show_bug.cgi?id=1285017 [ 2 ] Bug #1274168 - python-alembic broken, missing dependency https://bugzilla.redhat.com/show_bug.cgi?id=1274168 [ 3 ] Bug #1256353 - Review Request: python-editor - Programmatically open an editor, capture the result. https://bugzilla.redhat.com/show_bug.cgi?id=1256353 --------------------------------------------------------------------------------

================================================================================ python-pyrax-1.9.5-1.el7 (FEDORA-EPEL-2015-b14a8cce64) Python language bindings for OpenStack Clouds -------------------------------------------------------------------------------- Update Information:

Updated to 1.9.5 ---- SPEC change to add missing macros for EPEL 6 builds --------------------------------------------------------------------------------

================================================================================ rubber-1.3-1.el7 (FEDORA-EPEL-2015-e94a2394f8) An automated system for building LaTeX documents -------------------------------------------------------------------------------- Update Information:

Updated to latest version --------------------------------------------------------------------------------

================================================================================ umlgraph-5.7.2-12.el7 (FEDORA-EPEL-2015-71410066fe) Automated Drawing of UML Diagrams -------------------------------------------------------------------------------- Update Information:

- unretire - add compatibility with epel7 (java7) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1281538 - Review Request: umlgraph - Automated Drawing of UML Diagrams https://bugzilla.redhat.com/show_bug.cgi?id=1281538 --------------------------------------------------------------------------------

================================================================================ xdotool-3.20150503.1-1.el7 (FEDORA-EPEL-2015-fbe9548db2) Fake keyboard/mouse input -------------------------------------------------------------------------------- Update Information:

new upstream realese ---- rebuild for EPEL 7 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1272695 - Please update xdotool to 3.20150503.1 https://bugzilla.redhat.com/show_bug.cgi?id=1272695 --------------------------------------------------------------------------------