The following Fedora EPEL 6 Security updates need testing:
Age URL
772
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
766
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
656
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
627
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
238
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
134
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f
tnef-1.4.14-1.el6
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8
heimdal-7.4.0-1.el6
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99fb0d61b0
chicken-4.12.0-3.el6
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ab5ed7f894
python-tablib-0.11.5-1.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-87be2d4d20
potrace-1.15-1.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-938c876edd
php-PHPMailer-5.2.24-1.el6
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-035ed8efb3
qpdf-5.1.1-5.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3f527c60d9
firebird-2.5.7.27050.0-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0ad4c424f0
redis-3.2.10-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
configsnap-0.13-1.el6
fedfind-3.6.0-1.el6
fedpkg-1.29-1.el6
firebird-2.5.7.27050.0-1.el6
golang-github-russross-blackfriday-1.2-20.el6
libmediainfo-0.7.98-1.el6
libzen-0.4.36-1.el6
mediainfo-0.7.98-1.el6
php-horde-nag-4.2.16-1.el6
redis-3.2.10-2.el6
rpkg-1.50-1.el6
youtube-dl-2017.08.13-1.el6
Details about builds:
================================================================================
configsnap-0.13-1.el6 (FEDORA-EPEL-2017-c32d22da83)
Record and compare system state
--------------------------------------------------------------------------------
Update Information:
Update to 0.13
--------------------------------------------------------------------------------
================================================================================
fedfind-3.6.0-1.el6 (FEDORA-EPEL-2017-11f5498c56)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This update adds support for the new modular composes, with 'Fedora-Modular' as
their shortnames. Currently only Rawhide and Branched nightly modular composes
are supported. ---- This new version of fedfind handles an unusual situation
where its local cache directory (which is usually `~/.cache/fedfind`, but can be
a temporary directory if that location is not writeable) disappears during the
lifetime of a fedfind-using process. Previously, this would cause the process to
crash, as fedfind wasn't written to handle this eventuality. There are no other
changes in this update.
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.29-1.el6 (FEDORA-EPEL-2017-1c685ce277)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
# Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
# rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and
description of new-sources and upload commands - 1248737 (cqi) - Set
autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals
(cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode
with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) -
Make tests and covered code compatible with Py3 (cqi) - Add requirements files
(cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests
(cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when
rpmbuild fails in local command (cqi) - Report deprecation of config via logger
(lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
firebird-2.5.7.27050.0-1.el6 (FEDORA-EPEL-2017-3f527c60d9)
SQL relational database management system
--------------------------------------------------------------------------------
Update Information:
update to 2.5.7, Security fix for CVE-2017-6369
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1425330 - CVE-2017-6369 firebird: Access to undesired external modules during
'Restrict' configuration mode
https://bugzilla.redhat.com/show_bug.cgi?id=1425330
--------------------------------------------------------------------------------
================================================================================
golang-github-russross-blackfriday-1.2-20.el6 (FEDORA-EPEL-2017-187eb3e5c4)
Markdown processor implemented in Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 0ba0f2b6ed7c475a92e4df8641825cb7a11d1fa3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222338 - Tracker for golang-github-russross-blackfriday
https://bugzilla.redhat.com/show_bug.cgi?id=1222338
--------------------------------------------------------------------------------
================================================================================
libmediainfo-0.7.98-1.el6 (FEDORA-EPEL-2017-a8b9732138)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.98.
--------------------------------------------------------------------------------
================================================================================
libzen-0.4.36-1.el6 (FEDORA-EPEL-2017-a8b9732138)
Shared library for libmediainfo and medianfo*
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.98.
--------------------------------------------------------------------------------
================================================================================
mediainfo-0.7.98-1.el6 (FEDORA-EPEL-2017-a8b9732138)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.98.
--------------------------------------------------------------------------------
================================================================================
php-horde-nag-4.2.16-1.el6 (FEDORA-EPEL-2017-2a7bc9a153)
A web based task list manager
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.16** * [jan] Fix parsing sub-tasks from the quick enter dialog (Bug
#14681). * [jan] Fix positioning of due time drop down list (Bug #12288). *
[jan] Improve compatibilty when synchronizing tasks via CalDAV/ICS (Bug #14057).
* [jan] Fix exporting multiple tags to iCalendar CATEGORIES (Bug #14057). *
[jan] Don't include external tasks into drop down list for parent tasks. * [jan]
Fix redirecting to task list after completing a task (Bug #14678). ---- **nag
4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed
start dates (Bug #14634).
--------------------------------------------------------------------------------
================================================================================
redis-3.2.10-2.el6 (FEDORA-EPEL-2017-0ad4c424f0)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream Redis and backport packaging fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1140366 - redis EPEL6 version is old
https://bugzilla.redhat.com/show_bug.cgi?id=1140366
[ 2 ] Bug #1123629 - Init script rely on configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1123629
[ 3 ] Bug #909083 - Missing LSB header in redis init script
https://bugzilla.redhat.com/show_bug.cgi?id=909083
--------------------------------------------------------------------------------
================================================================================
rpkg-1.50-1.el6 (FEDORA-EPEL-2017-1c685ce277)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
# Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
# rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and
description of new-sources and upload commands - 1248737 (cqi) - Set
autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals
(cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode
with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) -
Make tests and covered code compatible with Py3 (cqi) - Add requirements files
(cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests
(cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when
rpmbuild fails in local command (cqi) - Report deprecation of config via logger
(lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.08.13-1.el6 (FEDORA-EPEL-2017-9c9375262b)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to latest release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476633 - youtube-dl-2017.08.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476633
[ 2 ] Bug #1476989 - [abrt] youtube-dl: write_string():
utils.py:1400:write_string:OSError: [Errno 5] Input/output error
https://bugzilla.redhat.com/show_bug.cgi?id=1476989
--------------------------------------------------------------------------------