The following Fedora EPEL 6 Security updates need testing:
Age URL
285
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
267
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
261
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
192
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6
192
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
151
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
123
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-44de0606ef
python-tgcaptcha2-0.3.1-1.el6
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8fbd838843
dropbear-2016.72-1.el6
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7640e3144a
proftpd-1.3.3g-9.el6
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a83c92dee3
seamonkey-2.40-1.el6
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-30a8346813
vtun-3.0.1-10.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c463c181f1
MUMPS-5.0.1-18.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-292f24b5c5
exim-4.84.2-1.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c3550220fe
python-rsa-3.4.1-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0d0163d5fd
latex2rtf-2.3.10-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
epel-rpm-macros-6-6
latex2rtf-2.3.10-1.el6
perl-Net-SSLGlue-1.055-4.el6
sslh-1.18-1.el6
trustedqsl-2.2.1-1.el6
Details about builds:
================================================================================
epel-rpm-macros-6-6 (FEDORA-EPEL-2016-7c8a4eb5b6)
Extra Packages for Enterprise Linux RPM macros
--------------------------------------------------------------------------------
Update Information:
Adds the following macros: * %epel * %rpmmacrodir macros. * %autosetup (and
various accompanying macros)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1320497 - RFE: implement %epel macro
https://bugzilla.redhat.com/show_bug.cgi?id=1320497
--------------------------------------------------------------------------------
================================================================================
latex2rtf-2.3.10-1.el6 (FEDORA-EPEL-2016-0d0163d5fd)
LaTeX to RTF converter that handles equations, figures, and cross-references
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.10 for CVE-2015-8106
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1282492 - CVE-2015-8106 latex2rtf: Format string vulnerability in
CmdKeywords
https://bugzilla.redhat.com/show_bug.cgi?id=1282492
--------------------------------------------------------------------------------
================================================================================
perl-Net-SSLGlue-1.055-4.el6 (FEDORA-EPEL-2016-d6ea31e69d)
Add/extend SSL support for common perl modules
--------------------------------------------------------------------------------
Update Information:
Fixing harmless warning caused $LWP::Protocol::https::VERSION missing in el6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1322572 - Version bump to 1.055 causes warnings on el6
https://bugzilla.redhat.com/show_bug.cgi?id=1322572
--------------------------------------------------------------------------------
================================================================================
sslh-1.18-1.el6 (FEDORA-EPEL-2016-0801e02c8f)
Applicative protocol(SSL/SSH) multiplexer
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1322188 - sslh-v1.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1322188
--------------------------------------------------------------------------------
================================================================================
trustedqsl-2.2.1-1.el6 (FEDORA-EPEL-2016-12b5acf8ff)
TrustedQSL ham-radio applications
--------------------------------------------------------------------------------
Update Information:
TQSL changes Defects Corrected: When installing a .TQ6 file succeeded, TQSL
would delete any other certificate files for that callsign, under the assumption
that they were no longer needed. If an operator with a pending callsign
certificate request would then install a TQ6 file for their former callsign
certificate (one that was being renewed), the private key for the pending
renewal could be deleted. This would cause the subsequent TQ6 file to fail to
install. TQSL no longer deletes anything unless it can verfify on-line with LoTW
that the installed certificate is the current one. When uploading logs, TQSL
would always display the progress bar. This should not have been done when
signing via the command line when batch mode (-x or -q) was enabled. TQSL 2.2.1
no longer displays the progress bar for these operations. When using the
language selection dialog, TQSL could cause the main window to close and re-
appear on a different area of the screen. The window location is now preserved
when the language is changed. In addition, TQSL doesn't destroy and re-create
the main window when the language is not changed. Updating the LoTW
configuration file could fail if the user's home directory contained non-ASCII
characters (Windows only). TQSL now handles this properly for such users. TQSL
now ensures that the password prompt window appears on top of other windows when
a password is requested while signing a log. This will cause the main TQSL
window to appear along with the password prompt. No change will be seen if there
is no password set on the associated callsign certificate. TQSL would reject
Cabrillo "Light" mode QSOs (300 GHz) as having an invalid frequency. TQSL now
accepts these as valid. TQSL could misinterpret unrecognized ADIF MODE/SUBMODE
entries in an ADIF file by not using the user���s ADIF mode settings. TQSL now
will use the mode maps when a mode/submode is not recognized. There was a
defect on OSX that would cause an incorrect error message to be displayed when
an incorrect password was entered for a callsign certificate. TQSL now displays
an appropriate error message in this circumstance. Restoring an incorrect .TQ6
file when there was a pending callsign certificate request could cause the
pending request to be deleted. TQSL now rejects the invalid TQ6 file and takes
no other action. Major feature Additions: The callsign certificate properties
displays now include "Replaced" and "Expired" indicators. TQSL now
attempts to
cleanly close out the duplicates database when the window is closed while a
signing operation is underway. TQSL now allows an alternate layout for the user
interface that moves the status log to a separate tab. This is useful for users
with long lists of station locations or callsign certificates. The TQSL
duplicate QSO tracking was updated to allow reporting of station location
changes when the same QSO is signed from more than one station location. This
makes it less likely that an operator will mistakenly re-upload an already QSLd
contact with incorrect station location information. The TQSL ADIF editor was
updated to automatically select the appropriate band when a frequency is
entered.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1304113 - trustedqsl-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1304113
--------------------------------------------------------------------------------