The following Fedora EPEL 7 Security updates need testing: Age URL 339 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-69b4d0e57c prosody-0.9.10-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-5aba523f53 phpMyAdmin-4.4.15.4-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a65d7ed780 python-pymongo-2.5.2-4.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-638137e4de wordpress-4.4.2-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c8f005b596 mingw-curl-7.47.0-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a140bf655b mingw-libpng-1.6.21-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6a9bb3d488 mingw-libxml2-2.9.3-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6d2a530b12 mingw-pcre-8.38-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2d8fa2e036 firebird-2.5.5.26952.0-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23f4cb12a2 php-horde-horde-5.2.9-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-50304d1e1f nodejs-0.10.42-4.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

easytag-2.4.1-1.el7 enca-1.18-1.el7 erlang-R16B-03.14.el7 globus-gram-job-manager-14.27-3.el7 knot-1.6.7-1.el7 libecb-0.20160209-1.el7 lmdb-0.9.18-1.el7 miniz-1.15-3.r4.el7 nodejs-0.10.42-4.el7 perl-File-Edit-Portable-1.18-1.el7 perl-Tie-Hash-Method-0.02-2.el7 python-pg8000-1.10.3-3.el7 python-tinydb-3.1.2-3.el7 rednotebook-1.11-1.el7 rubygem-net-ping-1.7.7-3.el7 shogun-data-0.10-1.el7 woff-0.20091126-3.el7 woffTools-0.1-0.14.20160211git.el7

Details about builds:

================================================================================ easytag-2.4.1-1.el7 (FEDORA-EPEL-2016-b61ddee3b0) Tag editor for MP3, Ogg, FLAC and other music files -------------------------------------------------------------------------------- Update Information:

Update to 2.4.1 --------------------------------------------------------------------------------

================================================================================ enca-1.18-1.el7 (FEDORA-EPEL-2016-d09ccb80ca) Character set analyzer and detector -------------------------------------------------------------------------------- Update Information:

Update to 1.18 --------------------------------------------------------------------------------

================================================================================ erlang-R16B-03.14.el7 (FEDORA-EPEL-2016-601dba6e95) General-purpose programming language and runtime environment -------------------------------------------------------------------------------- Update Information:

* Enable error_logger depth fine tuning --------------------------------------------------------------------------------

================================================================================ globus-gram-job-manager-14.27-3.el7 (FEDORA-EPEL-2016-85ee6aec84) Globus Toolkit - GRAM Jobmanager -------------------------------------------------------------------------------- Update Information:

Adjust build requires due to perl package split. --------------------------------------------------------------------------------

================================================================================ knot-1.6.7-1.el7 (FEDORA-EPEL-2016-737a36e368) An authoritative DNS daemon -------------------------------------------------------------------------------- Update Information:

new upstream release: - improvement: Log change of the zone serial number after IXFR transfer - improvement: Document operational impact of various RRL settings - improvement: Add support for rate-limit-slip zero - improvement: Add 'timer- db' configuration option --------------------------------------------------------------------------------

================================================================================ libecb-0.20160209-1.el7 (FEDORA-EPEL-2016-cec411908d) Compiler built-ins -------------------------------------------------------------------------------- Update Information:

This package provides a header library with compiler built-ins. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1305847 - libecb: please provide el6, epel7 branches https://bugzilla.redhat.com/show_bug.cgi?id=1305847 --------------------------------------------------------------------------------

================================================================================ lmdb-0.9.18-1.el7 (FEDORA-EPEL-2016-c4a90d21de) Memory-mapped key-value database -------------------------------------------------------------------------------- Update Information:

new upstream release -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1305190 - lmdb-0.9.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1305190 --------------------------------------------------------------------------------

================================================================================ miniz-1.15-3.r4.el7 (FEDORA-EPEL-2016-8d374df79f) Compression library implementing the zlib and Deflate -------------------------------------------------------------------------------- Update Information:

This package implements zlib and Deflate compression and decompression. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1305241 - miniz: please provide epel branches https://bugzilla.redhat.com/show_bug.cgi?id=1305241 --------------------------------------------------------------------------------

================================================================================ nodejs-0.10.42-4.el7 (FEDORA-EPEL-2016-50304d1e1f) JavaScript runtime -------------------------------------------------------------------------------- Update Information:

Security fix for CVE-2016-2216, CVE-2016-2086 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1306203 - CVE-2016-2216 nodejs: Response splitting vulnerability using Unicode characters https://bugzilla.redhat.com/show_bug.cgi?id=1306203 [ 2 ] Bug #1306200 - CVE-2016-2086 nodejs: Request smuggling vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1306200 --------------------------------------------------------------------------------

================================================================================ perl-File-Edit-Portable-1.18-1.el7 (FEDORA-EPEL-2016-7721aaae83) Read and write files while keeping the original line-endings intact -------------------------------------------------------------------------------- Update Information:

1.18 2016-01-28 - flock() now disabled for all FreeBSD amd64 versions 1.17 2016-01-26 - dir() in write mode now does the transform with a file handle instead of slurping the entire file into an array (performance) (closes #16) - fixed bugtracker link in POD (fixes #17) - bumped prereq version of Mock::Sub to 1.06 due to new efficiencies - FreeBSD 10.1 and 9.2 amd64 fail on flock() in write(), so we check for these versions and skip over the lock (prereq POSIX) 1.16 2016-01-22 - removed the write() lock test completely (closes #15) - platform_recsep() can be used as the custom recsep to write(). Added tests to confirm this (closes #12) - splice() now croaks if the 'line' param is sent in, and it doesn't consist of only an integer (closes #10) - RHEL vendor .list build files now ignored in MANIFEST (closes #14) - splice() now accepts both quoted strings and qr// objects in the 'find' parameter (closes #13) - major POD updates/fixes (closes #11) 1.15 2016-01-18 - we now LOCK_EX in write() (prereq Fcntl) - new build prereqs File::Tempdir and File::Spec for tests - cleaned up test data files - all temporary test files created with File::Tempdir, removed several unlink()s within tests (and their accompanying tests) 1.14 20160115 - build prereq Mock::Sub 1.01 added - test coverage now at 100% 1.13 20151229 - closes #3; splice() now warns if both 'find' and 'line' params are sent in, and 'line' takes precedence (and find isn't used) - closes #4; in dir()s write() call, the recsep is now checked with defined-or, not for truth 1.12 20151209 - closes #1; Changes didn't contain 1.10 update - POD updates -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1285518 - Review Request: perl-File-Edit-Portable - Read and write files while keeping the original line-endings intact https://bugzilla.redhat.com/show_bug.cgi?id=1285518 --------------------------------------------------------------------------------

================================================================================ perl-Tie-Hash-Method-0.02-2.el7 (FEDORA-EPEL-2016-e3995a5404) Tied hash with specific methods overridden by callbacks -------------------------------------------------------------------------------- Update Information:

0.01 2008-07-24T21:59:18 CEST - Initial release 0.02 2008-07-25T00:04:22 CEST - Fixup release. Liz made some points which were compelling enough I rewrote a chunk of the code. Some of the previous interface changes, but hopefully for the better. And considering its only been released for a few hours i think it shouldn't matter anyway. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1306198 - perl-Tie-Hash-Method: please provide el6, epel7 branch https://bugzilla.redhat.com/show_bug.cgi?id=1306198 --------------------------------------------------------------------------------

================================================================================ python-pg8000-1.10.3-3.el7 (FEDORA-EPEL-2016-b47cefd0a3) Pure Python PostgreSQL Driver -------------------------------------------------------------------------------- Update Information:

New package --------------------------------------------------------------------------------

================================================================================ python-tinydb-3.1.2-3.el7 (FEDORA-EPEL-2016-afeb226343) TinyDB is a tiny, document oriented database -------------------------------------------------------------------------------- Update Information:

EPEL specific changes -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1303819 - Review Request: python-tinydb - A tiny, document oriented database https://bugzilla.redhat.com/show_bug.cgi?id=1303819 --------------------------------------------------------------------------------

================================================================================ rednotebook-1.11-1.el7 (FEDORA-EPEL-2016-5672b800c3) Daily journal with calendar, templates and keyword searching -------------------------------------------------------------------------------- Update Information:

Build for epel7 ---- Update to new upstream version 1.9.0 --------------------------------------------------------------------------------

================================================================================ rubygem-net-ping-1.7.7-3.el7 (FEDORA-EPEL-2016-f7c69b73d8) A ping interface for Ruby -------------------------------------------------------------------------------- Update Information:

Remove branch-specific requires to clear up EPEL7 ---- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ shogun-data-0.10-1.el7 (FEDORA-EPEL-2016-205d8ceed8) Data-files for the SHOGUN machine learning toolbox -------------------------------------------------------------------------------- Update Information:

new upstream release --------------------------------------------------------------------------------

================================================================================ woff-0.20091126-3.el7 (FEDORA-EPEL-2016-3f1f914d58) Encoding and Decoding for Web Open Font Format(Woff) -------------------------------------------------------------------------------- Update Information:

Clean the spec file -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1303717 - [RFE] EPEL7 branch of woff https://bugzilla.redhat.com/show_bug.cgi?id=1303717 --------------------------------------------------------------------------------

================================================================================ woffTools-0.1-0.14.20160211git.el7 (FEDORA-EPEL-2016-3c60ee1070) Tool for manipulating and examining WOFF files -------------------------------------------------------------------------------- Update Information:

Update to latest snapshot 20160211 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1303718 - [RFE] EPEL7 branch of woffTools https://bugzilla.redhat.com/show_bug.cgi?id=1303718 --------------------------------------------------------------------------------