The following Fedora EPEL 6 Security updates need testing:
Age URL
877
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
871
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
761
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
733
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
343
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
73
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92
libmspack-0.6-0.1.alpha.el6
25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ed87c07972
hostapd-2.6-6.el6
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b18745f45c
mrbs-1.7.0-1.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4436e94a54
python-werkzeug-0.8.3-3.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9882374b91
wordpress-4.9.1-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-678916467d
exim-4.89-4.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
ansible-2.4.2.0-1.el6
ansible-lint-3.4.17-1.el6
copr-cli-1.65-1.el6
exim-4.89-4.el6
keychecker-1.0-3.el6
liblxi-1.7-1.el6
lxi-tools-1.12-1.el6
php-phpseclib-2.0.9-1.el6
python-enlighten-1.0.7-1.el6
python-psutil-2.2.1-1.el6
qpid-dispatch-1.0.0-1.el6
qpid-proton-0.18.1-1.el6
qtools-0.3.0-1.el6
rubygem-qpid_proton-0.18.1-1.el6
tio-1.27-1.el6
wordpress-4.9.1-1.el6
Details about builds:
================================================================================
ansible-2.4.2.0-1.el6 (FEDORA-EPEL-2017-c03767128f)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.2 upstream bugfix release. See
https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md for full
details.
--------------------------------------------------------------------------------
================================================================================
ansible-lint-3.4.17-1.el6 (FEDORA-EPEL-2017-23782de3fe)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.17 version (rh#1518162)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518162 - Version bump to at least 3.4.14
https://bugzilla.redhat.com/show_bug.cgi?id=1518162
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.65-1.el6 (FEDORA-EPEL-2017-93916bf5e9)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- allow to set use_bootstrap_container via API
--------------------------------------------------------------------------------
================================================================================
exim-4.89-4.el6 (FEDORA-EPEL-2017-678916467d)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is an update fixing denial of service (CVE-2017-16944). ---- This is an
update fixing use-after-free (CVE-2017-16943).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1517566 - Exim: remote code execution if chunking is enabled
(CVE-2017-16943)
https://bugzilla.redhat.com/show_bug.cgi?id=1517566
--------------------------------------------------------------------------------
================================================================================
keychecker-1.0-3.el6 (FEDORA-EPEL-2017-28e3f57b71)
Generate list of installed packages sorted by GPG key
--------------------------------------------------------------------------------
Update Information:
``` - Use python3 on Fedora - Add requirement for python rpm module - Properly
handle license file ```
--------------------------------------------------------------------------------
================================================================================
liblxi-1.7-1.el6 (FEDORA-EPEL-2017-a157bc6e7c)
Library with simple API for communication with LXI devices
--------------------------------------------------------------------------------
Update Information:
liblxi v1.7 =========== * Update to new URL * Update README * Update
AUTHORS * Use HTTPS in the configure script * Jakub Wilk: Fix typos liblxi
v1.6 =========== * Update README * Add authors section in README * Add
README.md to prettify GitHub page liblxi v1.5 =========== * Add support for
mDNS/DNS-SD discovery * Add parameter to lxi_discover() so it is possible to
select discovery using VXI-11 or mDNS/DNS-SD. * If detected available, Avahi
is used as the mDNS/DNS-SD backend implementation. * Print errors to stderr
* Update README liblxi v1.4 =========== * Fix discover output strings *
Discovery of multiple LXI instruments revealed a bug in the id string handling
which results in garbled output strings. Adding missing string termination fixes
this. * Add timeout handling for raw/TCP * Update examples * Cleanup *
Update README * Add support for configurable protocol backends * Reworked
the code to support configurable protocol backends. Currently supported
protocols include VXI11 and raw TCP. In the future support for HiSlip can be
added.
--------------------------------------------------------------------------------
================================================================================
lxi-tools-1.12-1.el6 (FEDORA-EPEL-2017-c4809337d7)
Tools collection to control LXI enabled instruments
--------------------------------------------------------------------------------
Update Information:
lxi-tools v1.12 =============== * Update to new URL * Add snap status *
Fix redirection of output to file * Update README * Cleanup configure.ac *
Jakub Wilk: Use HTTPS in the configure script lxi-tools v1.11 ===============
* Update README * Update man page * Update AUTHORS * Expand tested
instruments list * Rename screenshot plugin rigol-1000 -> rigol-1000z * Add
various Rigol screenshot plugins * Add the following Rigol screenshot plugins:
* rigol-dg4000 Rigol DG4000 series function generator * rigol-dm3000 Rigol
DM3000 series digital multimeter * rigol-dp800 Rigol DP800 series power
supply * rigol-dsa800 Rigol DSA800 series spectrum analyzer * rigol-
dsa700 Rigol DSA700 series spectrum analyzer The code is added on behalf of
PeDre from the EEVBlog forum. * Add authors section in README * Add
README.md to prettify GitHub page * The original README is still preserved
because it is more readable when not reading it via GitHub. * Jakub Wilk:
Strip trailing spaces * Fix typo * Fix grammar and typos lxi-tools v1.10
=============== * Add support for mDNS/DNS-SD discovery * Add "--mdns"
option which enables the discover command to search for LXI devices/services
using mDNS/DNS-SD. * Fix Siglent screenshot plugins * Write correct response
buffer to file. Improve .regex match expression. lxi-tools v1.9 ==============
* Update README * Fix newlines when redirecting to file or terminal * Rename
--dump-hex to --hex * Fix missing error message when no SCPI command defined
* Update man page * Remove --dump-file option * The correct way to dump
response to file is to use pipe output redirection. For example: * lxi scpi
--address 192.168.1.210 "*IDN?" > response.txt * This way it is possible
to
dump any binary reponse to file. * Fix missing error message when no IP
address defined * Print errors to stderr * Cleanup Siglent SDS1000 plugin
name * Add Siglent SSA 3000X screenshot plugin * Cleanup script examples *
Correct default SCPI raw/TCP port * By default use port 5025 as described
here:
http://www.lxistandard.org/About/LXI-Protocols.aspx * If a different
port is needed use the '--raw-port' option. * Apparently Rigol is not using
the recommended port for raw SCPI commands. * Update descriptions of the
plugin options lxi-tools v1.8 ============== * Update README * Add
Siglent SDS 1000 screenshot plugin lxi-tools v1.7 ============== * Update
README * Cleanup * Update .regex for Tektronix plugin * Update .regex for
R&S plugin * Update .regex for Keysight plugin * Update man page * Embed
instrument IP address in screenshot filename * This helps identify
screenshot files when capturing screenshots from multiple instruments. * It
also allows to simplify the APIs used by the screenshot plugins. * Change
option '--model' to '--plugin' * Lets remove any model vs. plugin
confusion
and only deal with plugin names. Each plugin includes support for one or more
instruments models as described in the plugin description. * Add automatic
loading of screenshot plugin feature * If no screenshot plugin is specified
the tool will automatically try to select the best plugin by matching the
instruments ID string against the regular expressions defined in each plugin.
* Each screenshot plugin defines a .regex string entry containing space
separated regular expressions. Each regular expression is matched against the
instrument ID string. The plugin with most matches is selected. * Note: This
mechanism is slightly slower than manually specifying which screenshot plugin
because it needs to retrieve the instruments ID string first. * Improve
description of Rigol plugins * Fix Rigol 2000 screenshot plugin * Remove
trailing newline in received image data. * Add screenshot plugin for Rigol
2000 series * Also, make existing Rigol plugin only apply for 1000z series.
lxi-tools v1.6 ============== * Add date-time stamp to screenshot filename
* Improve command handling * In case of a misspelled command the tool would
misleadingly respond: "Error: No IP address specified" * With this fix, it
now responds: "Error: Unknown command" * Update README * Added screenshot
plugin for Tektronix 2000 series scopes * Improve scpi response output * Add
--raw and --raw-port options to scpi command * One can now use choose to use
raw/TCP instead of VXI11 when firing SCPI commands. Simply append the --raw
option like so: * lxi scpi --raw --address 192.168.0.42 "*IDN?" * By
default raw/TCP port 5555 is used but it can be changed using the --raw-port
option. * Warning: Using raw/TCP is faster than VXI11 but does not provide
any timeout/control mechanisms so if your command somehow stalls it will stall
forever. * Use new lxi_connect() function * Cleanup * Make screenshot
filename optional * In case no screenshot filename is provided the tool will
write the screenshot image to an automatically resolved and incremented filename
on the form screenshot-###.. For example, screenshot-000.png,
screenshot-001.png, etc.. * Improve screenshot model listing * Increase
default timeout for screenshot command * Transferring screenshot image data
takes time so lets increase the timeout so we do not easily interrupt a good but
slow transfer. * Collapse Rigol screenshot plugin * Support all Rigol
oscilloscope models via one model name. * Add screenshot support for Keysight
IV 2000 X * Cleanup plugins * Add screenshot support for R&S HMO1000 series
* Add screenshot support for Rigol 2000/4000 * Create directory for screenshot
plugins
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.9-1.el6 (FEDORA-EPEL-2017-efa6c338d9)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.9** - 2017-11-29 - 2.0.8 tag was done off of master branch - not
2.0 branch ---- **Version 2.0.8** - 2017-11-29 - SSH2: fix issue with key re-
exchange - SSH2: updates to dealing with extraneous channel packets - X509: URL
validation didn't work (#1203)
--------------------------------------------------------------------------------
================================================================================
python-enlighten-1.0.7-1.el6 (FEDORA-EPEL-2017-c47ab67be7)
Enlighten Progress Bar
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.7
--------------------------------------------------------------------------------
================================================================================
python-psutil-2.2.1-1.el6 (FEDORA-EPEL-2017-1290b498a8)
A process and system utilities module for Python
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.1. Fixes bug #1479740
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479740 - import psutil fails frequently
https://bugzilla.redhat.com/show_bug.cgi?id=1479740
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.0.0-1.el6 (FEDORA-EPEL-2017-7748b7fa8a)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.0.0.
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.18.1-1.el6 (FEDORA-EPEL-2017-5c516d7c0f)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.18.1.
--------------------------------------------------------------------------------
================================================================================
qtools-0.3.0-1.el6 (FEDORA-EPEL-2017-394cfff3bd)
Command-line tools for AMQP
--------------------------------------------------------------------------------
Update Information:
Initial build for version 0.3.0.
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.18.1-1.el6 (FEDORA-EPEL-2017-7ab5b6761b)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.18.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508236 - rubygem-qpid_proton-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508236
--------------------------------------------------------------------------------
================================================================================
tio-1.27-1.el6 (FEDORA-EPEL-2017-6a8f952a33)
Simple TTY terminal I/O application
--------------------------------------------------------------------------------
Update Information:
tio v1.27 ========= * Update man page * Add support for setting non-
standard baudrates * Support for non-standard baudrate settings will be
automatically enabled if the termios2 interface is detected available. However,
to play it safe, the old and widely supported termios interface will still be
used when setting standard baudrates. * Cleanup * Update AUTHORS tio v1.26
========= * Reconfigure stdin * Make stdin behave more raw'ish. In
particular, don't translate CR -> NL on input. * Add special character map
feature * Add a --map option which allows to map special characters, in
particular CR and NL characters which are used in various combinations on varios
platforms. * Cleanup * Update AUTHORS * Update README * Mention website
* Update man page
--------------------------------------------------------------------------------
================================================================================
wordpress-4.9.1-1.el6 (FEDORA-EPEL-2017-9882374b91)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Upstream annoucement: [WordPress 4.9.1 Security and Maintenance
Release](https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-
maintenance-release/) ---- Read upstream announcement: [WordPress 4.9
���Tipton���](https://wordpress.org/news/2017/11/tipton/)
--------------------------------------------------------------------------------