The following Fedora EPEL 7 Security updates need testing: Age URL 318 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 80 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 43 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-f82c6fc04a p7zip-15.09-4.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dd35749dd3 wordpress-4.4.1-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-43613cf75a keepassx-0.4.4-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e34ffdd692 prosody-0.9.9-2.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-273a82f7db owncloud-8.0.10-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-551b68b67a moodle-3.0.2-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8da165e1bb mbedtls-2.2.1-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6f526f521d python-rsa-3.3-2.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-043f77342d cgit-0.12-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-418a480529 gsi-openssh-6.6.1p1-3.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

gsi-openssh-6.6.1p1-3.el7 libmediainfo-0.7.81-1.el7 mediainfo-0.7.81-1.el7 metis-5.1.0-9.el7 nsd-4.1.7-4.el7 php-pear-PHP-CodeSniffer-2.5.1-1.el7 php-pecl-propro-1.0.2-1.el7 php-pecl-raphf-1.1.2-1.el7 pidgin-window-merge-0.3-5.el7 python-scandir-1.2-3.el7 python-sqlalchemy-1.0.11-1.el7 retrace-server-1.13-1.el7 scalapack-2.0.2-12.el7 voms-2.0.12-7.el7

Details about builds:

================================================================================ gsi-openssh-6.6.1p1-3.el7 (FEDORA-EPEL-2016-418a480529) An implementation of the SSH protocol with GSI authentication -------------------------------------------------------------------------------- Update Information:

Sync with latest openssh package. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1298033 - CVE-2016-0778 OpenSSH: Client buffer-overflow when using roaming connections https://bugzilla.redhat.com/show_bug.cgi?id=1298033 [ 2 ] Bug #1298032 - CVE-2016-0777 OpenSSH: Client Information leak due to use of roaming connection feature https://bugzilla.redhat.com/show_bug.cgi?id=1298032 --------------------------------------------------------------------------------

================================================================================ libmediainfo-0.7.81-1.el7 (FEDORA-EPEL-2016-54b6555f7a) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information:

Update to 0.7.81. --------------------------------------------------------------------------------

================================================================================ mediainfo-0.7.81-1.el7 (FEDORA-EPEL-2016-54b6555f7a) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information:

Update to 0.7.81. --------------------------------------------------------------------------------

================================================================================ metis-5.1.0-9.el7 (FEDORA-EPEL-2016-1ba012bba4) Serial Graph Partitioning and Fill-reducing Matrix Ordering -------------------------------------------------------------------------------- Update Information:

- Removed ExcludeArch - Defined OpenMP support - Some cleanups of the SPEC file --------------------------------------------------------------------------------

================================================================================ nsd-4.1.7-4.el7 (FEDORA-EPEL-2016-bd7402c08d) Fast and lean authoritative DNS Name Server -------------------------------------------------------------------------------- Update Information:

Remove cronjob, enable zonefiles-write: in nsd.conf, don't delete xfrd.state --------------------------------------------------------------------------------

================================================================================ php-pear-PHP-CodeSniffer-2.5.1-1.el7 (FEDORA-EPEL-2016-f39b933afd) PHP coding standards enforcement tool -------------------------------------------------------------------------------- Update Information:

**Version 2.5.1** Upstream changelog: - The PHP-supplied T_SPACESHIP token has been replicated for PHP versions before 7.0 - T_SPACESHIP is now correctly identified as an operator, Thanks to Alexander Obuhovich for the patch - Generic LowerCaseKeyword now ensures array type hints are lowercase as well, Thanks to Mathieu Rochette for the patch - Squiz ComparisonOperatorUsageSniff no longer hangs on JS FOR loops that don't use semicolons - PHP_CodesSniffer now includes the composer autoload.php file, if there is one, Thanks to Klaus Purer for the patch. Added error Squiz.Commenting.FunctionComment.ScalarTypeHintMissing for PHP7 only (request #858). These errors were previously reported as Squiz.Commenting.FunctionComment.TypeHintMissing on PHP7. Disable this error message in a ruleset.xml file if your code needs to run on both PHP5 and PHP7 - The PHP 5.6 __debugInfo magic method no longer produces naming convention errors. Thanks to Michael Nowack for the patch - PEAR and Squiz FunctionComment sniffs now support variadic functions (request #841) - Fixed bug #622 : Wrong detection of Squiz.CSS.DuplicateStyleDefinition with media queries - Fixed bug #752 : The missing exception error is reported in first found DocBlock - Fixed bug #794 : PSR2 MultiLineFunctionDeclaration forbids comments after opening parenthesis of a multiline call - Fixed bug #820 : PEAR/PSR2 FunctionCallSignature sniffs suggest wrong indent when there are multiple arguments on a line - Fixed bug #822 : Ruleset hard-coded file paths are not used if not running from the same directory as the ruleset - Fixed bug #825 : FunctionCallArgumentSpacing sniff complains about more than one space before comment in multi-line function call - Fixed bug #828 : Null classname is tokenized as T_NULL instead of T_STRING - Fixed bug #829 : Short array argument not fixed correctly when multiple function arguments are on the same line - Fixed bug #831 : PHPCS freezes in an infinite loop under Windows if no standard is passed - Fixed bug #832 : Tokenizer does not support context sensitive parsing. Thanks to Jaroslav Hansl��k for the patch - Fixed bug #835 : PEAR.Functions.FunctionCallSignature broken when closure uses return types - Fixed bug #838 : CSS indentation fixer changes color codes. Thanks to Klaus Purer for the patch - Fixed bug #839 : "__()" method is marked as not camel caps. Thanks to Tim Bezhashvyly for the patch - Fixed bug #852 : Generic.Commenting.DocComment not finding errors when long description is omitted - Fixed bug #854 : Return typehints in interfaces are not reported as T_RETURN_TYPE. Thanks to Jaroslav Hansl��k for the patch - Fixed bug #855 : Capital letter detection for multibyte strings doesn't work correctly - Fixed bug #857 : PSR2.ControlStructure.SwitchDeclaration shouldn't check indent of curly brace closers - Fixed bug #859 : Switch statement indention issue when returning function call with closure - Fixed bug #861 : Single-line arrays and function calls can generate incorrect indentation errors - Fixed bug #867 : Squiz.Strings.DoubleQuoteUsage broken for some escape codes. Thanks to Jack Blower for the help with the fix - Fixed bug #21005 : Incorrect indent detection when multiple properties are initialized to arrays - Fixed bug #21010 : Incorrect missing colon detection in CSS when first style is not on new line - Fixed bug #21011 : Incorrect error message text when newline found after opening brace --------------------------------------------------------------------------------

================================================================================ php-pecl-propro-1.0.2-1.el7 (FEDORA-EPEL-2016-fd3a3208a4) Property proxy -------------------------------------------------------------------------------- Update Information:

** Version 1.0.2** * Internals documentation at http://m6w6.github.io/ext- propro/v1.0.x/ * Travis support * Fix package.xml's maximum and minimum PHP version --------------------------------------------------------------------------------

================================================================================ php-pecl-raphf-1.1.2-1.el7 (FEDORA-EPEL-2016-e3d8cbda03) Resource and persistent handles factory -------------------------------------------------------------------------------- Update Information:

**Version 1.1.1** * Source code documentation available at http://m6w6.github.io/ext-raphf/v1.1.x * Travis support * Fix package.xml's maximum and minimum PHP version **Version 1.1.2** * Fixed release stability to stable --------------------------------------------------------------------------------

================================================================================ pidgin-window-merge-0.3-5.el7 (FEDORA-EPEL-2016-2e2ef692da) Pidgin plugin for single window mode -------------------------------------------------------------------------------- Update Information:

Initial build of the package. --------------------------------------------------------------------------------

================================================================================ python-scandir-1.2-3.el7 (FEDORA-EPEL-2016-7bafab63d3) A better directory iterator and faster os.walk() for Python -------------------------------------------------------------------------------- Update Information:

Update to version 1.2. Build Python3 package for el7+ --------------------------------------------------------------------------------

================================================================================ python-sqlalchemy-1.0.11-1.el7 (FEDORA-EPEL-2016-c1eb98d18b) Modular and flexible ORM library for python -------------------------------------------------------------------------------- Update Information:

Please test extensively. This update will stay in testing for an extended period to check for regressions. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1296875 - Package in EPEL7 is 0.9.7 when 1.0.10 is now available in Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1296875 --------------------------------------------------------------------------------

================================================================================ retrace-server-1.13-1.el7 (FEDORA-EPEL-2016-83dee232b6) Application for remote coredump analysis -------------------------------------------------------------------------------- Update Information:

New upstream release that fixes several usability issues. --------------------------------------------------------------------------------

================================================================================ scalapack-2.0.2-12.el7 (FEDORA-EPEL-2016-f6fe732c8c) A subset of LAPACK routines redesigned for heterogeneous computing -------------------------------------------------------------------------------- Update Information:

Make blacs-openmpi require blacs-common (bug #1299939) ---- Apply bug fixes from trunk,.rebuild against current openmpi in EL7. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1299939 - blacs-openmpi-devel doesn't install Bdef.h https://bugzilla.redhat.com/show_bug.cgi?id=1299939 [ 2 ] Bug #1299143 - rebuild blacs/scalapack against new openmpi https://bugzilla.redhat.com/show_bug.cgi?id=1299143 --------------------------------------------------------------------------------

================================================================================ voms-2.0.12-7.el7 (FEDORA-EPEL-2016-238de46db9) Virtual Organization Membership Service -------------------------------------------------------------------------------- Update Information:

- Disable SSLv3. - Fix compilation with gcc 6. --------------------------------------------------------------------------------