The following Fedora EPEL 6 Security updates need testing:
Age URL
653
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
647
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
537
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
509
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
240
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53
chicken-4.11.0-3.el6
120
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
70
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-acd2c2af0d
nagios-4.2.4-4.el6
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f
tnef-1.4.14-1.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0f5b6c547b
php-pear-CAS-1.3.5-1.el6.1
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fb8532fb2d
tomcat-7.0.77-1.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-7c22614b28
collectd-4.10.9-4.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-58105a4f7f
pcre2-10.21-18.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a8c6a87d20
ansible-2.3.0.0-3.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fc964c5731
roundcubemail-1.0.9-3.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
ansible-lint-3.4.12-1.el6
cacti-1.1.3-1.el6
copr-cli-1.59-1.el6
mozilla-https-everywhere-5.2.15-1.el6
nagios-plugins-2.2.1-1.el6
nrpe-3.1.0-1.el6
perl-Image-ExifTool-10.50-1.el6
python-copr-1.77-1.el6
python-multilib-1.2-2.el6
roundcubemail-1.0.9-3.el6
Details about builds:
================================================================================
ansible-lint-3.4.12-1.el6 (FEDORA-EPEL-2017-ba22444c08)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.12 version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444064 - Update the branches to current
https://bugzilla.redhat.com/show_bug.cgi?id=1444064
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.3-1.el6 (FEDORA-EPEL-2017-fe49958514)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.3 Release notes:
http://www.cacti.net/release_notes_1_1_3.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442607 - cacti-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442607
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.59-1.el6 (FEDORA-EPEL-2017-59d1a1af00)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
copr-cli: - when building module --url or --yaml needs to be selected - remove
make-module command - update man for build-module command - allow to submit
optional params to mbs - frontend act as a gateway between user and mbs -
possibility to submit yaml file to mbs - compose auth url more prettier -
describe module actions in man - rename method for making module to match cli
naming - split module building into two separate commands - add possibility to
build module via MBS or not - add command for building modules - more similar
mock-config with real builder's config - put errors/warnings on stderr - fix
trace in 'copr-cli --debug' - replace fedorahosted links - use 'avg' api
from
python-progress python-copr: - allow to submit optional params to mbs -
frontend act as a gateway between user and mbs - allow to create module and it's
action separately - possibility to submit yaml file to mbs - update auth for
current MBS package - rename method for making module to match cli naming - add
command for building modules - files can be uploaded via simple MultipartEncoder
(RhBug: 1440480) - fix proxyuser when creating modules - replace fedorahosted
links - fix setting username on multipart data - proxyuser feature (RhBug:
1381574) ---- EPEL6 fix
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.2.15-1.el6 (FEDORA-EPEL-2017-698d3bd6aa)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
More unspecified ruleset updates. ---- More bugfixes. Upstream isn't putting
the specific bugfixes in the changelogs anymore. Did you know that you're
supposed to turn the car off when you go into a restaurant? I hear it helps
prevent carjacking.
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-2.2.1-1.el6 (FEDORA-EPEL-2017-306cbf64b0)
Host/service/network monitoring program plugins for Nagios
--------------------------------------------------------------------------------
Update Information:
New version of plugins. Remove old patches ---- Fix the patch order to get the
code working again. ---- Consolidate the patches from patrick and git ----
OK so it turns out writing to a non initialized pointer is bad. mmmkay. ----
Try to put in a logic fix for http. It gives answer expected but may not work
for upstream ---- Got feedback on bz 1422993. Put in fix from github ----
Start collecting and fixing bugzilla reports. This one fixes ipv6 for check_snmp
---- Grab other fixes from git maintenance branch to fix other check_ problems.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1422993 - check_snmp missing support for IPv6
https://bugzilla.redhat.com/show_bug.cgi?id=1422993
[ 2 ] Bug #771245 - nagios-plugins-disk fails when checking /boot on RHEL6.2 boxes
https://bugzilla.redhat.com/show_bug.cgi?id=771245
[ 3 ] Bug #1067399 - nagios-plugins-icmp with nrpe - not working out of the box.
https://bugzilla.redhat.com/show_bug.cgi?id=1067399
[ 4 ] Bug #1259381 - check_snmp lacks support for SNMPv3 context
https://bugzilla.redhat.com/show_bug.cgi?id=1259381
[ 5 ] Bug #1259458 - Potentially misconfigured libcrypto capability requirement for
nagios-plugins rpm package.
https://bugzilla.redhat.com/show_bug.cgi?id=1259458
[ 6 ] Bug #1412016 - check_http segfaults on a specific (CGI-bin generated) web page
https://bugzilla.redhat.com/show_bug.cgi?id=1412016
[ 7 ] Bug #1422197 - nagios-pluggins-http segfaults when using -p for a four-digit port
https://bugzilla.redhat.com/show_bug.cgi?id=1422197
--------------------------------------------------------------------------------
================================================================================
nrpe-3.1.0-1.el6 (FEDORA-EPEL-2017-4b4962389a)
Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:
update to 3.1.0 ---- Fixed pid location ---- Update to 3.0.1. Major update
but upstream is no longer supporting old code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1190708 - nrpe.service does not support reload for systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1190708
[ 2 ] Bug #1275870 - NRPE initscript does not read PID file when calling
status/killproc
https://bugzilla.redhat.com/show_bug.cgi?id=1275870
[ 3 ] Bug #1411705 - allowed_hosts doesn't work, if one of the hostnames can't
be resolved by dns
https://bugzilla.redhat.com/show_bug.cgi?id=1411705
--------------------------------------------------------------------------------
================================================================================
perl-Image-ExifTool-10.50-1.el6 (FEDORA-EPEL-2017-a4c6192df5)
Utility for reading and writing image meta info
--------------------------------------------------------------------------------
Update Information:
Update to 10.50 (latest stable).
--------------------------------------------------------------------------------
================================================================================
python-copr-1.77-1.el6 (FEDORA-EPEL-2017-59d1a1af00)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
copr-cli: - when building module --url or --yaml needs to be selected - remove
make-module command - update man for build-module command - allow to submit
optional params to mbs - frontend act as a gateway between user and mbs -
possibility to submit yaml file to mbs - compose auth url more prettier -
describe module actions in man - rename method for making module to match cli
naming - split module building into two separate commands - add possibility to
build module via MBS or not - add command for building modules - more similar
mock-config with real builder's config - put errors/warnings on stderr - fix
trace in 'copr-cli --debug' - replace fedorahosted links - use 'avg' api
from
python-progress python-copr: - allow to submit optional params to mbs -
frontend act as a gateway between user and mbs - allow to create module and it's
action separately - possibility to submit yaml file to mbs - update auth for
current MBS package - rename method for making module to match cli naming - add
command for building modules - files can be uploaded via simple MultipartEncoder
(RhBug: 1440480) - fix proxyuser when creating modules - replace fedorahosted
links - fix setting username on multipart data - proxyuser feature (RhBug:
1381574) ---- EPEL6 fix
--------------------------------------------------------------------------------
================================================================================
python-multilib-1.2-2.el6 (FEDORA-EPEL-2017-dd7b7e8fcb)
A module for determining if a package is multilib or not
--------------------------------------------------------------------------------
Update Information:
New upstream version that transparently supports DNF package objects (as well as
yum package objects). There are no functional changes.
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.0.9-3.el6 (FEDORA-EPEL-2017-fc964c5731)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2017-6820.
--------------------------------------------------------------------------------