The following Fedora EPEL 7 Security updates need testing: Age URL 226 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binutils... 110 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1087/dokuwiki-0-0.2... 94 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1421/quassel-0.11.0... 31 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6262/cabal-install-... 18 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1545/strongswan-5.3... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6782/cups-x2go-3.0.... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6829/php-htmLawed-1... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6813/chicken-4.9.0.... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6835/drupal7-7.38-1... 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6862/trafficserver-... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6935/ansible-1.9.2-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6942/openvas-gsa-6....

The following builds have been pushed to Fedora EPEL 7 updates-testing

canl-c-2.1.6-1.el7 light-locker-1.6.0-2.el7 nordugrid-arc-5.0.1-2.el7 nordugrid-arc-doc-2.0.1-1.el7 openvas-cli-1.4.1-2.el7 openvas-gsa-6.0.3-4.el7 openvas-libraries-8.0.3-2.el7 openvas-manager-6.0.3-3.el7 openvas-scanner-5.0.3-5.el7 oz-0.14.0-1.el7 php-doctrine-doctrine-bundle-1.5.0-3.el7 python-monotonic-0.1-1.el7 python-pylibravatar-1.6-6.el7

Details about builds:

================================================================================ canl-c-2.1.6-1.el7 (FEDORA-EPEL-2015-6941) EMI Common Authentication library - bindings for C -------------------------------------------------------------------------------- Update Information:

Proper works with openssl in multi-thread environment, fixed usage of serial numbers in RFC proxies. -------------------------------------------------------------------------------- ChangeLog:

* Sat Jun 27 2015 František Dvořák valtri@civ.zcu.cz - 2.1.6-1 - New upstream version - Removed gcc 4.9.0 patch merged upstream * Wed Jun 17 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Aug 15 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.1.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ light-locker-1.6.0-2.el7 (FEDORA-EPEL-2015-6948) A simple session-locker for lightdm -------------------------------------------------------------------------------- Update Information:

Initial package (rhbz#1225229) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1225229 - Review Request: light-locker - A simple session-locker for lightdm https://bugzilla.redhat.com/show_bug.cgi?id=1225229 --------------------------------------------------------------------------------

================================================================================ nordugrid-arc-5.0.1-2.el7 (FEDORA-EPEL-2015-6932) Advanced Resource Connector Grid Middleware -------------------------------------------------------------------------------- Update Information:

Release Notes for **NorduGrid ARC 15.03 update 1** June 25, 2015

This is a bugfix release, addressing an issue with excessive logging in A-REX as well as fixing a number of bugs.

NorduGrid ARC 15.03 has received an update to: * core, clients, CE, Infosys and gridftp - from version 5.0.0 to 5.0.1 * documents - from 2.0.0 to 2.0.1

**Detailed notes**

* ARC Server and core components * * The following issues were fixed in the ARC core: * * Excessive logging in A-REX (note that underlying problem still exists, only logging is reduced). * * Changed priority calculation for SGE jobs to only negative priorities. * * Fixed file permission filter in submit-condor-job. * * Added correct free slot number to SLURM partition. * Accounting * * Extended JURA's log to long format * * Added mistakenly omitted accounting records re-report functionality to JURA. * Information system * * Restored use of defaulttl from arc.conf in infoproviders. * * Fixed an issue where infosys_heartbeat file was not deleted. * * Fixed an issue with GLUE2 having negative ComputingShareLocalRunningJobs. * ARC Clients * * Improved checking of python examples. * * Re-enabled WS interface submission with string-based credentials.

-------------------------------------------------------------------------------- ChangeLog:

* Fri Jun 26 2015 Mattias Ellert mattias.ellert@fysast.uu.se - 5.0.1-2 - Fix unbalanced quotes in scan-SLURM-job * Fri Jun 26 2015 Mattias Ellert mattias.ellert@fysast.uu.se - 5.0.1-1 - 5.0.1 Final Release - Drop patch nordugrid-arc-pytest.patch * Wed Jun 17 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 5.0.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat May 2 2015 Kalev Lember kalevlember@gmail.com - 5.0.0-3 - Rebuilt for GCC 5 C++11 ABI change --------------------------------------------------------------------------------

================================================================================ nordugrid-arc-doc-2.0.1-1.el7 (FEDORA-EPEL-2015-6932) Advanced Resource Connector Documentation -------------------------------------------------------------------------------- Update Information:

Release Notes for **NorduGrid ARC 15.03 update 1** June 25, 2015

This is a bugfix release, addressing an issue with excessive logging in A-REX as well as fixing a number of bugs.

NorduGrid ARC 15.03 has received an update to: * core, clients, CE, Infosys and gridftp - from version 5.0.0 to 5.0.1 * documents - from 2.0.0 to 2.0.1

**Detailed notes**

* ARC Server and core components * * The following issues were fixed in the ARC core: * * Excessive logging in A-REX (note that underlying problem still exists, only logging is reduced). * * Changed priority calculation for SGE jobs to only negative priorities. * * Fixed file permission filter in submit-condor-job. * * Added correct free slot number to SLURM partition. * Accounting * * Extended JURA's log to long format * * Added mistakenly omitted accounting records re-report functionality to JURA. * Information system * * Restored use of defaulttl from arc.conf in infoproviders. * * Fixed an issue where infosys_heartbeat file was not deleted. * * Fixed an issue with GLUE2 having negative ComputingShareLocalRunningJobs. * ARC Clients * * Improved checking of python examples. * * Re-enabled WS interface submission with string-based credentials.

-------------------------------------------------------------------------------- ChangeLog:

* Fri Jun 26 2015 Mattias Ellert mattias.ellert@fysast.uu.se - 2.0.1-1 - 2.0.1 Final Release * Wed Jun 17 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ openvas-cli-1.4.1-2.el7 (FEDORA-EPEL-2015-6942) Command-line tool to drive OpenVAS Manager -------------------------------------------------------------------------------- Update Information:

Update to OpenVAS8. Fixing several bugs in previous versions. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 18 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri May 29 2015 Michal Ambroz <rebus at, seznam.cz> - 1.4.1-1 - bump to OpenVAS-8 openvas-cli version 1.4.1 * Sat May 23 2015 Michal Ambroz <rebus at, seznam.cz> - 1.4.0-1 - bump to OpenVAS-8 openvas-cli version 1.4.0 * Tue Nov 4 2014 Michal Ambroz <rebus at, seznam.cz> - 1.3.1-1 - bump to OpenVAS7 openvas-cli version 1.3.1 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1169170 - openvas-manager: SQL injection related to the timezone parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1169170 --------------------------------------------------------------------------------

================================================================================ openvas-gsa-6.0.3-4.el7 (FEDORA-EPEL-2015-6942) Greenbone Security Assistant (GSA) is GUI to the OpenVAS -------------------------------------------------------------------------------- Update Information:

Update to OpenVAS8. Fixing several bugs in previous versions. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1169170 - openvas-manager: SQL injection related to the timezone parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1169170 --------------------------------------------------------------------------------

================================================================================ openvas-libraries-8.0.3-2.el7 (FEDORA-EPEL-2015-6942) Support libraries for Open Vulnerability Assessment (OpenVAS) Scanner -------------------------------------------------------------------------------- Update Information:

Update to OpenVAS8. Fixing several bugs in previous versions. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 18 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 8.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat May 23 2015 Michal Ambroz <rebus at, seznam.cz> - 8.0.3-1 - bump to OpenVas-8 version 8.0.3 * Sat Apr 4 2015 Michal Ambroz <rebus at, seznam.cz> - 7.0.9-1 - bump to OpenVas-7 version 7.0.9 * Sat Dec 6 2014 Michal Ambroz <rebus at, seznam.cz> - 7.0.6-1 - bump to OpenVas-7 version 7.0.6 * Tue Nov 4 2014 Michal Ambroz <rebus at, seznam.cz> - 7.0.5-1 - bump to OpenVas-7 version 7.0.5 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1169170 - openvas-manager: SQL injection related to the timezone parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1169170 --------------------------------------------------------------------------------

================================================================================ openvas-manager-6.0.3-3.el7 (FEDORA-EPEL-2015-6942) Manager Module for the Open Vulnerability Assessment System (OpenVAS) -------------------------------------------------------------------------------- Update Information:

Update to OpenVAS8. Fixing several bugs in previous versions. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1169170 - openvas-manager: SQL injection related to the timezone parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1169170 --------------------------------------------------------------------------------

================================================================================ openvas-scanner-5.0.3-5.el7 (FEDORA-EPEL-2015-6942) Open Vulnerability Assessment (OpenVAS) Scanner -------------------------------------------------------------------------------- Update Information:

Update to OpenVAS8. Fixing several bugs in previous versions. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 25 2015 Michal Ambroz <rebus at, seznam.cz> - 5.0.3-5 - fix for epel * Thu Jun 25 2015 Michal Ambroz <rebus at, seznam.cz> - 5.0.3-4 - add example redis configs * Thu Jun 18 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 5.0.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri May 29 2015 Michal Ambroz <rebus at, seznam.cz> - 5.0.3-2 - fixing build error with gcrypt when RPM_OPT_FLAGS not used * Tue May 26 2015 Michal Ambroz <rebus at, seznam.cz> - 5.0.3-1 - Update to OpenVAS-8 openvas-scanner release 5.0.3 * Sat Apr 4 2015 Michal Ambroz <rebus at, seznam.cz> - 4.0.6-1 - Update to OpenVAS-7 openvas-scanner release 4.0.6 * Sat Dec 6 2014 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-1 - Update to OpenVAS-7 openvas-scanner release 4.0.5 * Fri Nov 7 2014 Michal Ambroz <rebus at, seznam.cz> - 4.0.4-2 - removed sysvinit subpackage - not needed anymore * Wed Nov 5 2014 Michal Ambroz <rebus at, seznam.cz> - 4.0.4-1 - Update to OpenVAS-7 openvas-scanner release 4.0.4 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1169170 - openvas-manager: SQL injection related to the timezone parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1169170 --------------------------------------------------------------------------------

================================================================================ oz-0.14.0-1.el7 (FEDORA-EPEL-2015-6947) Library and utilities for automated guest OS installs -------------------------------------------------------------------------------- Update Information:

Release 0.14.0 -------------------------------------------------------------------------------- ChangeLog:

* Fri Jun 26 2015 Chris Lalancette clalancette@gmail.com - 0.14.0-1 - Release 0.14.0 --------------------------------------------------------------------------------

================================================================================ php-doctrine-doctrine-bundle-1.5.0-3.el7 (FEDORA-EPEL-2015-6940) Symfony Bundle for Doctrine -------------------------------------------------------------------------------- Update Information:

Symfony Bundle for Doctrine -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1230967 - Review Request: php-doctrine-doctrine-bundle - Symfony Bundle for Doctrine https://bugzilla.redhat.com/show_bug.cgi?id=1230967 --------------------------------------------------------------------------------

================================================================================ python-monotonic-0.1-1.el7 (FEDORA-EPEL-2015-6943) An implementation of time.monotonic() for Python 2 & < 3.3 -------------------------------------------------------------------------------- Update Information:

Initial package --------------------------------------------------------------------------------

================================================================================ python-pylibravatar-1.6-6.el7 (FEDORA-EPEL-2015-6946) Python module for Libravatar -------------------------------------------------------------------------------- Update Information:

Use tcp for dns srv lookups, making things generally faster. -------------------------------------------------------------------------------- ChangeLog:

* Fri Jun 26 2015 Ralph Bean rbean@redhat.com - 1.6-6 - Apply patch to use tcp for dns srv queries. * Thu Jun 18 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --------------------------------------------------------------------------------