The following Fedora EPEL 6 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-d5bbc97415
json-c12-0.12.1-4.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-db3d7a1399
exim-4.92.3-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
golang-1.13.11-1.el6
nodejs-rhea-1.0.21-1.el6
qpid-dispatch-1.12.0-1.el6
qpid-proton-0.31.0-1.el6
rubygem-qpid_proton-0.31.0-1.el6
zstd-1.4.5-1.el6
Details about builds:
================================================================================
golang-1.13.11-1.el6 (FEDORA-EPEL-2020-fe619e5492)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to go1.13.11 * Security fix for CVE-2020-7919
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 18 2020 ��lex S��ez <asm(a)redhat.com> - 1.13.11-1
- Rebase to go1.13.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808041 - CVE-2020-7919 golang: Integer overflow on 32bit architectures via
crafted certificate allows for denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1808041
--------------------------------------------------------------------------------
================================================================================
nodejs-rhea-1.0.21-1.el6 (FEDORA-EPEL-2020-57eb35011b)
A reactive messaging library based on the AMQP protocol
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.0.21.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 1.0.21-1
- Rebased to 1.0.21
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.12.0-1.el6 (FEDORA-EPEL-2020-4e9519b7b7)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.12.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 1.12.0-1
- Rebased to 1.12.0
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.31.0-1.el6 (FEDORA-EPEL-2020-5d60a400b6)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.31.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 0.31.0-1
- Rebased to 0.31.0
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.31.0-1.el6 (FEDORA-EPEL-2020-34d926de9e)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.31.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Irina Boverman <iboverma(a)redhat.com> - 0.31.0-1
- Rebased to 0.31.0
--------------------------------------------------------------------------------
================================================================================
zstd-1.4.5-1.el6 (FEDORA-EPEL-2020-88829925e4)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2020 P��draig Brady <P(a)draigBrady.com> - 1.4.5-1
- Latest upstream
* Fri May 22 2020 Avi Kivity <avi(a)scylladb.com> - 1.4.4-3
- Added static library subpackage
--------------------------------------------------------------------------------