The following Fedora EPEL 6 Security updates need testing:
Age URL
739
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
733
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
623
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
595
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
205
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
101
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f
tnef-1.4.14-1.el6
35
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02
lxc-1.0.10-2.el6
17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed
nagios-4.3.2-5.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c
GraphicsMagick-1.3.26-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9
globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6
globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6
globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6
globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6
globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6
globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f
cacti-1.1.12-2.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a
putty-0.70-1.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8
heimdal-7.4.0-1.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-428858445a
jabberd-2.6.1-2.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f7d737f93d
phpldapadmin-1.2.3-10.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0ca79e82a3
yara-3.6.3-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
git-extras-4.4.0-1.el6
yara-3.6.3-1.el6
zstd-1.3.0-1.el6
Details about builds:
================================================================================
git-extras-4.4.0-1.el6 (FEDORA-EPEL-2017-31f6b33452)
Little git extras
--------------------------------------------------------------------------------
Update Information:
git-extras-4.4.0 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471372 - git-extras-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471372
--------------------------------------------------------------------------------
================================================================================
yara-3.6.3-1.el6 (FEDORA-EPEL-2017-0ca79e82a3)
Pattern matching Swiss knife for malware researchers
--------------------------------------------------------------------------------
Update Information:
bump to 3.6.3 release - bugfix CVE-2017-11328 ---- Security fix for
CVE-2017-9304, CVE-2017-9465, CVE-2017-9438, CVE-2017-8929
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data
function
https://bugzilla.redhat.com/show_bug.cgi?id=1459490
[ 2 ] Bug #1451382 - CVE-2017-8929 yara: Use-after-free in sized_string_cmp function
https://bugzilla.redhat.com/show_bug.cgi?id=1451382
--------------------------------------------------------------------------------
================================================================================
zstd-1.3.0-1.el6 (FEDORA-EPEL-2017-ce41d9f21b)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------