The following Fedora EPEL 6 Security updates need testing: Age URL 51 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5aca1d385d remctl-3.14-1.el6 48 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-dd6e4a3f0b python34-3.4.8-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-9bdc4006c3 gifsicle-1.91-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-fca9555db1 cobbler-2.6.11-7.git95749a6.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

clamav-0.100.0-1.el6 fedfind-4.1.3-1.el6

Details about builds:

================================================================================ clamav-0.100.0-1.el6 (FEDORA-EPEL-2018-88c0c447a4) Anti-virus software -------------------------------------------------------------------------------- Update Information:

ClamAV 0.100.0 ============== ClamAV 0.100.0 is a feature release which includes many code submissions from the ClamAV community. Some of the more prominent submissions include: * Interfaces to the Prelude SIEM open source package for collecting ClamAV virus events. * Support for Visual Studio 2015 for Windows builds. Please note that we have deprecated support for Windows XP, and while Vista may still work, we no longer test ClamAV on Windows XP or Vista. * Support libmspack internal code or as a shared object library. The internal library is the default and includes modifications to enable parsing of CAB files that do not entirely adhere to the CAB file format. * Linking with OpenSSL 1.1.0. * Deprecation of the AllowSupplementaryGroups parameter statement in clamd, clamav-milter, and freshclam. Use of supplementary is now in effect by default. * Numerous bug fixes, typo corrections, and compiler warning fixes. Additionally, upstream introduced important changes and new features in ClamAV 0.100, including but not limited to: * Deprecating internal LLVM code support. The configure script has changed to search the system for an installed instance of the LLVM development libraries, and to otherwise use the bytecode interpreter for ClamAV bytecode signatures. To use the LLVM Just-In-Time compiler for executing bytecode signatures, please ensure that the LLVM development package at version 3.6 or lower is installed. Using the deprecated LLVM code is possible with the command: `./configure --with-system-llvm=no`, but it no longer compiles on all platforms. * Compute and check PE import table hash (a.k.a. "imphash") signatures. * Support file property collection and analysis for MHTML files. * Raw scanning of PostScript files. * Fix clamsubmit to use the new virus and false positive submission web interface. * Optionally, flag files with the virus "Heuristic.Limits.Exceeded" when size limitations are exceeded. * Improved decoders for PDF files. * Reduced number of compile time warnings. * Improved support for C++11. * Improved detection of system installed libraries. * Fixes to ClamAV's Container system and the introduction of Intermediates for more descriptive signatures. * Improvements to clamd's On-Access scanning capabilities for Linux. -------------------------------------------------------------------------------- ChangeLog:

* Mon May 28 2018 Robert Scheck robert@fedoraproject.org - 0.100.0-1 - Upgrade to 0.100.0 (#1565381) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1526628 - please backport OnAccessExcludeRootUID from clamav-master https://bugzilla.redhat.com/show_bug.cgi?id=1526628 [ 2 ] Bug #1565381 - clamav-0.100.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1565381 [ 3 ] Bug #1579829 - clamav-0.100.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1579829 --------------------------------------------------------------------------------

================================================================================ fedfind-4.1.3-1.el6 (FEDORA-EPEL-2018-3b86604295) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information:

This update fixes a couple of issues in handling of the [semi-official live respin](https://dl.fedoraproject.org/pub/alt/live-respins/) releases, which prevented openQA from testing them. It also updates fedfind for an unexpected move of the Docker and Cloud nightly composes by release engineering. -------------------------------------------------------------------------------- ChangeLog:

* Mon May 28 2018 Adam Williamson awilliam@redhat.com - 4.1.3-1 - New release 4.1.3: handle unexpected nightly compose move * Mon May 21 2018 Adam Williamson awilliam@redhat.com - 4.1.2-1 - New release 4.1.2: fixes for live-respins releases --------------------------------------------------------------------------------