The following Fedora EPEL 6 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5aca1d385d
remctl-3.14-1.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-158680d651
python-gunicorn-18.0-2.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd6e4a3f0b
python34-3.4.8-1.el6
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-7f5fafed52
gsoap-2.7.16-6.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
debmirror-2.26-2.el6
dmlite-1.10.2-1.el6
hitch-1.4.8-1.el6
python-django-ajax-selects-1.7.0-1.el6
qpdf-5.1.1-6.el6
xxhash-0.6.5-1.el6
Details about builds:
================================================================================
debmirror-2.26-2.el6 (FEDORA-EPEL-2018-42b2c52b84)
Debian partial mirror script, with ftp and package pool support
--------------------------------------------------------------------------------
Update Information:
Requires /usr/bin/pod2man instead perl-podlators (need it for el6) Add
License tag Add Requires: perl-Net-INET6Glue
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 S��rgio Basto <sergio(a)serjux.com> - 2.26-2
- Requires /usr/bin/pod2man instead perl-podlators (need it for el6)
- Add License tag
- Add Requires: perl-Net-INET6Glue
* Thu Apr 19 2018 S��rgio Basto <sergio(a)serjux.com> - 2.26-1
- Update to Debian stable version
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.16-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.16-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon Sep 2 2013 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 2.16-1
- Rebase to upstream 2.16
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.15-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Petr Pisar <ppisar(a)redhat.com> - 2.15-2
- Perl 5.18 rebuild
* Mon May 6 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 2.15-1
- Rebase to upstream 2.15
* Fri Feb 22 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 2.14-5
- Added BuildRequires: perl-podlators for pod2man
* Thu Feb 14 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 2.14-4
- Add BuildRequires perl
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.14-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568654 - debmirror not syncing required components
https://bugzilla.redhat.com/show_bug.cgi?id=1568654
[ 2 ] Bug #1258928 - No epel7 build of debmirror available
https://bugzilla.redhat.com/show_bug.cgi?id=1258928
--------------------------------------------------------------------------------
================================================================================
dmlite-1.10.2-1.el6 (FEDORA-EPEL-2018-a289926d3a)
Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:
* new upstream release ---- * new upstream release ---- dmlite 1.10 is a
major update to DPM internals including Dome. ---- dmlite 1.10 is a major
update to DPM internals including Dome. ---- dmlite 1.10 is a major update to
DPM internals including Dome. ---- * new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Andrea Manzi <amanzi(a)cern.ch> - 1.10.2-1
- new upstream release
* Thu Apr 5 2018 Oliver Keeble <oliver.keeble(a)cern.ch> - 1.10.1-4
- Fix dependency on epel7/el6
* Fri Mar 23 2018 Oliver Keeble <oliver.keeble(a)cern.ch> - 1.10.1-3
- New upstream 1.10.1l
* Mon Mar 12 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 1.10.0-2
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 16 2018 Andrea Manzi <amanzi(a)cern.ch> - 1.10.0-1
- new upstream release
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.8-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Nov 29 2017 Igor Gnatenko <ignatenko(a)redhat.com> - 0.8.8-5
- Rebuild for protobuf 3.5
* Tue Nov 14 2017 Andrea Manzi <amanzi(a)cern.ch> - 0.8.8-4
- new version to fix build with rawhide
* Mon Nov 13 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.8.8-3
- Rebuild for protobuf 3.4
* Thu Sep 21 2017 Andrea Manzi <amanzi(a)cern.ch> - 0.8.8-2
- change mysql-devel to mariadb-connector-c-devel
* Sat Aug 19 2017 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.8.7-6
- Python 2 binary package renamed to python2-dmlite
See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
hitch-1.4.8-1.el6 (FEDORA-EPEL-2018-ad7ced6866)
Network proxy that terminates TLS/SSL connections
--------------------------------------------------------------------------------
Update Information:
New upstream release hitch-1.4.8. Collected update for 1.4.7 and 1.4.8. See
https://github.com/varnish/hitch/blob/master/CHANGES.rst for detailed changelog.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 1.4.8-1
- New upstream release 1.4.8, closes bz 1569501
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Sep 4 2017 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 1.4.6-4
- Rebuilt against openssl-1.0.2k for epel7
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569501 - hitch-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569501
--------------------------------------------------------------------------------
================================================================================
python-django-ajax-selects-1.7.0-1.el6 (FEDORA-EPEL-2018-8cb62a6852)
Enables editing of ForeignKey, ManyToMany and simple text fields
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Luis Bazan <lbazan(a)fedoraproject.org> - 1.7.0-1
- new upstream version
--------------------------------------------------------------------------------
================================================================================
qpdf-5.1.1-6.el6 (FEDORA-EPEL-2018-e3b98be78a)
Command-line tools and library for transforming PDF files
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-11625, CVE-2017-11624, CVE-2017-12595, CVE-2018-9918.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 5.1.1-6
- 1485850 - CVE-2017-12595 qpdf: Stack overflow when processing deeply nested arrays and
dictionaries
- 1566758 - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary
classes in libqpdf.a
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1566756 - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and
QPDF_Dictionary classes in libqpdf.a
https://bugzilla.redhat.com/show_bug.cgi?id=1566756
[ 2 ] Bug #1485847 - CVE-2017-12595 qpdf: Stack overflow when processing deeply nested
arrays and dictionaries
https://bugzilla.redhat.com/show_bug.cgi?id=1485847
[ 3 ] Bug #1475507 - CVE-2017-11624 qpdf: Infinite loop in QPDFTokenizer::resolveLiteral
function in QPDFTokenizer.cc
https://bugzilla.redhat.com/show_bug.cgi?id=1475507
[ 4 ] Bug #1475510 - CVE-2017-11625 qpdf: Infinite loop in QPDF::resolveObjectsInStream
function in QPDF.cc
https://bugzilla.redhat.com/show_bug.cgi?id=1475510
--------------------------------------------------------------------------------
================================================================================
xxhash-0.6.5-1.el6 (FEDORA-EPEL-2018-1ebf22b7a6)
Extremely fast hash algorithm
--------------------------------------------------------------------------------
Update Information:
Version 0.6.5.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.6.5-1
- Update to version 0.6.5
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------