The following Fedora EPEL 7 Security updates need testing: Age URL 170 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a unrtf-0.21.9-8.el7 121 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7 104 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 76 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896 myrepos-1.20180726-1.el7 26 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bdb21ebc3f drupal7-7.60-2.el7 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9051b49e75 suricata-4.0.6-1.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fc29932f12 pdns-4.0.6-2.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9270bbaec pdns-recursor-4.1.7-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a09ace87bb php-PHPMailer-5.2.27-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0e73364530 python-paramiko-2.1.1-0.9.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c25e48ded1 bird-1.6.4-2.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2206653eb9 python-django-1.11.13-4.el7 python-django16-1.6.11.7-5.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3f65916e08 moodle-3.1.15-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cf66ab47c5 dnsdist-1.3.3-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

cobbler-2.8.4-4.el7 did-0.11-1.el7 egl-wayland-1.1.0-0.2.20181015git0eb29d4.el7 golang-1.11.2-2.el7 golang-github-Sirupsen-logrus-1.1.1-2.el7 golang-github-vbatts-tar-split-0.11.1-1.el7 golang-googlecode-go-crypto-0-0.14.20181125git3d3f9f4.el7 php-fig-http-message-util-1.1.3-1.el7 python-productmd-1.18-1.el7 rpm-mpi-hooks-5-4.el7

Details about builds:

================================================================================ cobbler-2.8.4-4.el7 (FEDORA-EPEL-2018-a4f72b6533) Boot server configurator -------------------------------------------------------------------------------- Update Information:

- Revert bind_manage_ipmi feature that is broken on 2.8 - Use pathfix.py to fix python shebangs ---- - Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931) - Make koan require python2-ethtool (BZ 1638933) -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 26 2018 Orion Poplawski orion@nwra.com - 2.8.4-4 - Revert bind_manage_ipmi feature that is broken on 2.8 * Sun Nov 25 2018 Orion Poplawski orion@nwra.com - 2.8.4-3 - Use pathfix.py to fix python shebangs * Sun Nov 25 2018 Orion Poplawski orion@nwra.com - 2.8.4-2 - Make koan require python2-ethtool (BZ 1638933) * Sat Nov 24 2018 Orion Poplawski orion@nwra.com - 2.8.4-1 - Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931) * Wed May 30 2018 Orion Poplawski orion@nwra.com - 2.8.3-3 - koan requires urlgrabber -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1643860 - Kickstart generation is broken https://bugzilla.redhat.com/show_bug.cgi?id=1643860 [ 2 ] Bug #1614433 - CVE-2018-10931 cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1614433 [ 3 ] Bug #1613292 - cobbler: XMLRPC API endpoints are not correctly validating security tokens [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1613292 [ 4 ] Bug #1638933 - koan RPM should require python-ethtool https://bugzilla.redhat.com/show_bug.cgi?id=1638933 --------------------------------------------------------------------------------

================================================================================ did-0.11-1.el7 (FEDORA-EPEL-2018-ab30b38ebc) What did you do last week, month, year? -------------------------------------------------------------------------------- Update Information:

Pagure, Sentry, Redmine, gssapi, packaging... -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 26 2018 Petr ��pl��chal psplicha@redhat.com 0.11-1 - Validate plugin types in config [fix #148] - Use email for searching Jira issues [fix #122] - Handle authentication errors in the Jira plugin - Update shebang to explicitly use python2 - Add a new section Questions to docs [fix #155] - Raise error on unsuccessful request [fix #154] - New plugin for Pagure stats [fix #153] - Use requests-gssapi for Jira stats - Fix problems with the Sentry plugin - Merge configurable ssl verify for gitlab [#136] - Merge the improved gitlab search [#137] - Merge the new redmine plugin [#135] - Some minor adjustments for the redmine plugin - GitHub stats about reviewed PRs [#127] - Remove zero-fill from Jira issues [fix #149] - Add oauth2client to docs requirements [fix #152] - Adjust until limit of the sentry plugin [fix #151] - Update test data for the sentry & google plugins - Update Python macros to new packaging standards - Port to python-gssapi - Fixed issue with failing tests - Remove the idonethis plugin - Merge the new sentry plugin - Add basic Redmine support - Add basic GitLab support - Add search for subscribed bugs - Add did.spec to MANIFEST.in - Merge fix for bugs patched when created [#109] - Merge the new Bugzilla query syntax [#111] - Fetch only needed stats during GitHub testing - Merge support for pull request separation [#114] - Show month name / week number by default [#106] * Wed Jan 11 2017 Martin Frodl mfrodl@redhat.com 0.10-1 - New plugin for Google Apps - Document how to generate documentation locally - Mock C modules while building documentation - Make all make versions happy - Add requirements.txt to fix docs building - Properly handle GitHub issues with Unicode names - Add login key to github section in example config - Update install docs with fresh Fedora instructions - Update coveralls links in README - List install dependencies for Debian-based systems - Use another Trac instance in plugin test - Move kerberos to extra requires -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1264876 - did-0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1264876 [ 2 ] Bug #1634529 - [abrt] did: main(): cli.py:209:main:AttributeError: 'GSSError' object has no attribute 'gen_msg' https://bugzilla.redhat.com/show_bug.cgi?id=1634529 [ 3 ] Bug #1635156 - None https://bugzilla.redhat.com/show_bug.cgi?id=1635156 --------------------------------------------------------------------------------

================================================================================ egl-wayland-1.1.0-0.2.20181015git0eb29d4.el7 (FEDORA-EPEL-2018-96341b0e25) Wayland EGL External Platform library -------------------------------------------------------------------------------- Update Information:

- Bug fix -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 26 2018 Leigh Scott leigh123linux@googlemail.com - 1.1.0-0.2.20181015git0eb29d4 - Update to latest git snapshot (rhbz#1653118) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1653118 - libnvidia-egl-wayland.so lacks wl_eglstream_interface symbol https://bugzilla.redhat.com/show_bug.cgi?id=1653118 --------------------------------------------------------------------------------

================================================================================ golang-1.11.2-2.el7 (FEDORA-EPEL-2018-ba8845b83b) The Go Programming Language -------------------------------------------------------------------------------- Update Information:

* Un-retiring of the epel7 package branch * Rebase to 1.11.2 --------------------------------------------------------------------------------

================================================================================ golang-github-Sirupsen-logrus-1.1.1-2.el7 (FEDORA-EPEL-2018-34e70733ac) Structured logger for Go -------------------------------------------------------------------------------- Update Information:

Provide old import path ---- Release 1.1.1 --------------------------------------------------------------------------------

================================================================================ golang-github-vbatts-tar-split-0.11.1-1.el7 (FEDORA-EPEL-2018-63a72cc9e6) Tar archive assembly/dis-assembly -------------------------------------------------------------------------------- Update Information:

rebuilt for upstream 0.11.1 --------------------------------------------------------------------------------

================================================================================ golang-googlecode-go-crypto-0-0.14.20181125git3d3f9f4.el7 (FEDORA-EPEL-2018-ff7b64fd64) Supplementary Go cryptography libraries -------------------------------------------------------------------------------- Update Information:

Bump to upstream 3d3f9f413869b949e48070b5bc593aa22cc2b8f2 ---- Bump to upstream 81372b2fc2f10bef2a7f338da115c315a56b2726 ---- Polish the spec file -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1231618 - Tracker for golang-googlecode-go-crypto https://bugzilla.redhat.com/show_bug.cgi?id=1231618 --------------------------------------------------------------------------------

================================================================================ php-fig-http-message-util-1.1.3-1.el7 (FEDORA-EPEL-2018-6ba7f16c09) PSR Http Message Util -------------------------------------------------------------------------------- Update Information:

**Version 1.1.3** - 2018-11-19 * **Added** - [#10](https://github.com/php- fig/http-message-util/pull/10) adds the constants `StatusCodeInterface::STATUS_EARLY_HINTS` (103) and `StatusCodeInterface::STATUS_TOO_EARLY` (425). -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 26 2018 Remi Collet remi@remirepo.net - 1.1.3-1 - update to 1.1.3 --------------------------------------------------------------------------------

================================================================================ python-productmd-1.18-1.el7 (FEDORA-EPEL-2018-e95cdff5bb) Library providing parsers for metadata related to OS installation -------------------------------------------------------------------------------- Update Information:

- Add SecurityFix label - Fix `get_major_version` on inputs with more than two components -------------------------------------------------------------------------------- ChangeLog:

* Fri Nov 23 2018 Lubom��r Sedl���� lsedlar@redhat.com - 1.18-1 - Add SecurityFix label - Fix get_major_version on inputs with more than two components --------------------------------------------------------------------------------

================================================================================ rpm-mpi-hooks-5-4.el7 (FEDORA-EPEL-2018-39e7eed24a) RPM dependency generator hooks for MPI packages -------------------------------------------------------------------------------- Update Information:

RPM dependency generator hooks for MPI packages. --------------------------------------------------------------------------------