The following Fedora EPEL 6 Security updates need testing:
Age URL
980
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
870
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
842
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
453
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
182
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92
libmspack-0.6-0.1.alpha.el6
101
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e
optipng-0.7.6-6.el6
73
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462
heimdal-7.5.0-1.el6
68
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4
rootsh-1.5.3-17.el6
24
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136
drupal7-7.57-1.el6
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a27d71c715
pax-utils-1.2.3-1.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4bcfff2d5e
tor-0.2.9.15-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0f3319c1ea
php-simplesamlphp-saml2_1-1.10.6-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-57cbc61216
php-simplesamlphp-saml2-2.3.8-1.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-910749f9c8
exim-4.90.1-3.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-10ff026fa8
monitorix-3.10.1-1.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f5cd94db4e
tomcat-7.0.85-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
golang-1.9.4-1.el6
purple-facebook-0.9.5-3.9ff9acf9fa14.el6
Details about builds:
================================================================================
golang-1.9.4-1.el6 (FEDORA-EPEL-2018-a67ea8c563)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to 1.9.4 * Security fix for CVE-2018-7187 and CVE-2018-6574
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543561 - CVE-2018-6574 golang: arbitrary code execution during "go
get" via C compiler options
https://bugzilla.redhat.com/show_bug.cgi?id=1543561
[ 2 ] Bug #1546386 - CVE-2018-7187 golang: arbitrary command execution via VCS path
https://bugzilla.redhat.com/show_bug.cgi?id=1546386
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.5-3.9ff9acf9fa14.el6 (FEDORA-EPEL-2018-0dc8b45283)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
This fixes a [crash in Pidgin after Facebook
login](https://github.com/dequis
/purple-facebook/issues/403).
--------------------------------------------------------------------------------