The following Fedora EPEL 6 Security updates need testing:
Age URL
736
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
730
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
620
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
591
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
202
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
98
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f
tnef-1.4.14-1.el6
31
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02
lxc-1.0.10-2.el6
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6489eec271
golang-1.7.6-1.el6
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-328a23d1ed
nagios-4.3.2-5.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-58b5b1f166
yara-3.6.2-1.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb86b52c2c
GraphicsMagick-1.3.26-1.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1d8b4aed9
globus-ftp-client-8.36-1.el6 globus-gass-cache-program-6.7-1.el6
globus-gass-copy-9.27-1.el6 globus-gram-client-13.18-1.el6
globus-gram-job-manager-14.36-1.el6 globus-gram-job-manager-condor-2.6-5.el6
globus-gridftp-server-12.2-1.el6 globus-gssapi-gsi-12.17-1.el6 globus-io-11.9-1.el6
globus-net-manager-0.17-1.el6 globus-xio-5.16-1.el6 globus-xio-gsi-driver-3.11-1.el6
globus-xio-pipe-driver-3.10-1.el6 globus-xio-udt-driver-1.28-1.el6 myproxy-6.1.28-1.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9098af995f
cacti-1.1.12-2.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63ab34560a
putty-0.70-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8
heimdal-7.4.0-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
distribution-gpg-keys-1.12-1.el6
heimdal-7.4.0-1.el6
nagios-plugins-2.2.1-3git.el6
Details about builds:
================================================================================
distribution-gpg-keys-1.12-1.el6 (FEDORA-EPEL-2017-75c930e6ca)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
Updated Copr gpg keys.
--------------------------------------------------------------------------------
================================================================================
heimdal-7.4.0-1.el6 (FEDORA-EPEL-2017-e8124f23c8)
A Kerberos 5 implementation without export restrictions
--------------------------------------------------------------------------------
Update Information:
Update to 7.4.0 GA release (CVE-2017-11103)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469998 - CVE-2017-11103 heimdal: krb5: Metadata taken from the
unauthenticated plaintext [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1469998
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.2.1-3git.el6 (FEDORA-EPEL-2017-76229ef8c9)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
Updated patches to fix check_http problems ---- Update to git for 20170703
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1427925 - check_http 2.2.0-4 fails if Transfer-Encoding ends the header
https://bugzilla.redhat.com/show_bug.cgi?id=1427925
[ 2 ] Bug #1423008 - nagios-plugins-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1423008
[ 3 ] Bug #1210380 - SELinux prevents check_mailq from executing postfix when run via
NRPE
https://bugzilla.redhat.com/show_bug.cgi?id=1210380
[ 4 ] Bug #1204683 - check_ide_smart cannot be started by nrpe
https://bugzilla.redhat.com/show_bug.cgi?id=1204683
[ 5 ] Bug #1465784 - nagios http plugin is old and buggy
https://bugzilla.redhat.com/show_bug.cgi?id=1465784
[ 6 ] Bug #1463674 - check_http segfaults once Location header terminates with
additional 0x0a and is last header line
https://bugzilla.redhat.com/show_bug.cgi?id=1463674
[ 7 ] Bug #1256848 - nagios-plugins-log has incorrect paths to egrep/tail (EL6)
https://bugzilla.redhat.com/show_bug.cgi?id=1256848
[ 8 ] Bug #1052740 - SELinux is preventing check_log via NRPE from read and open
var_log_t files
https://bugzilla.redhat.com/show_bug.cgi?id=1052740
--------------------------------------------------------------------------------