The following Fedora EPEL 6 Security updates need testing:
Age URL
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-244e8468f8
t1utils-1.41-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-b3dc1811a1
rssh-2.3.4-15.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
golang-1.13.3-1.el6
php-horde-Horde-Core-2.31.11-1.el6
php-horde-Horde-Util-2.5.9-1.el6
proftpd-1.3.3g-12.el6
putty-0.73-1.el6
python-productmd-1.23-1.el6
Details about builds:
================================================================================
golang-1.13.3-1.el6 (FEDORA-EPEL-2019-755c983846)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to 1.13.3 * Security fix for CVE-2019-17596
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Jakub ��ajka <jcajka(a)redhat.com> - 1.13.3-1
- Rebase to go1.13.3
- Fix for CVE-2019-17596
- Resolves: BZ#1763311
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763310 - CVE-2019-17596 golang: invalid public key causes panic in
dsa.Verify
https://bugzilla.redhat.com/show_bug.cgi?id=1763310
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.31.11-1.el6 (FEDORA-EPEL-2019-0f5f42db23)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.31.11** * [mjr] Fix UTF-8 encoding of ActiveSync SmartReply
requests (Bug #14957).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 4 2019 Remi Collet <remi(a)remirepo.net> - 2.31.11-1
- update to 2.31.11
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Util-2.5.9-1.el6 (FEDORA-EPEL-2019-e726736d47)
Horde Utility Libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Util 2.5.9** * [mjr] PHP 7.4 compatibility fixes (Remi Collet , PR #2).
* [jan] Fix wrapping if the wrapping break adds indention.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 4 2019 Remi Collet <remi(a)remirepo.net> - 2.5.9-1
- update to 2.5.9
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.3g-12.el6 (FEDORA-EPEL-2019-c4ac108f8d)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This update includes a back-ported fix from upstream to support rebuilding the
package to work with MySQL version 8. Note that this updated build is not linked
with MySQL 8 itself but will work with the existing MySQL version in the base
operating system, i.e. will not work out of the box with MySQL 8.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 23 2019 Paul Howarth <paul(a)city-fan.org> - 1.3.3g-12
- Fix build compatibility with MySQL 8 (#1764401)
https://github.com/proftpd/proftpd/issues/824
https://github.com/proftpd/proftpd/pull/825
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1764401 - Please build an EPEL7 build of proftpd version 1.3.6b
https://bugzilla.redhat.com/show_bug.cgi?id=1764401
--------------------------------------------------------------------------------
================================================================================
putty-0.73-1.el6 (FEDORA-EPEL-2019-cd52ee3c1e)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
This is new version fixing multiple vulnerabilities.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 4 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.73-1
- New version
Resolves: rhbz#1767986
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767984 - putty: multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1767984
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.23-1.el6 (FEDORA-EPEL-2019-1b18651034)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
New upstream version with support for metadata about extra files.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.23-1
- Add class for representing extra files in the compose (lsedlar(a)redhat.com)
- Add tests for multiple variants in one .treeinfo (riehecky(a)fnal.gov)
--------------------------------------------------------------------------------