The following Fedora EPEL 6 Security updates need testing:
Age URL
31
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6c663378c
unrtf-0.21.9-8.el6
16
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-98ff28b9d0
drupal7-backup_migrate-3.5-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c4ebc0d2d
wordpress-4.9.7-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
ergo-3.7-1.el6
libmediainfo-18.05-1.el6
mbedtls-2.7.4-1.el6
mediainfo-18.05-2.el6
prettyping-1.0.1-1.el6
pythia8-8.2.35-2.el6
python-rpm-macros-3-13.el6
python-sphinxcontrib-httpdomain-1.7.0-1.el6
root-5.34.38-1.el6
uwsgi-2.0.17.1-1.el6
xrootd-4.8.4-1.el6
Details about builds:
================================================================================
ergo-3.7-1.el6 (FEDORA-EPEL-2018-ade757416b)
A program for large-scale self-consistent field calculations
--------------------------------------------------------------------------------
Update Information:
Changes since 3.4: - Bugfixes and code cleanup. - Improved method for on-the-
fly computation of HOMO and LUMO orbitals during purification procedure (see
http://dx.doi.org/10.1021/acs.jctc.7b00968). - New parameterless stopping
criterion for purification (see
http://arxiv.org/abs/1507.02087). -
Accelerated purification method implemented (see
http://dx.doi.org/10.1021/ct2001705). - New HOMO/LUMO eigenvalue estimates
implemented (see
http://dx.doi.org/10.1137/130911585). - Improved method for
computation of HOMO and LUMO orbitals.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 10 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.7-1
- Update to 3.7, trying to fix issues.
* Sat Jun 23 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.6-2
- Fix FTBFS.
* Wed Feb 28 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.6-1
- Added gcc-c++ buildrequires.
- Update to 3.6.
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon May 15 2017 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Mon Sep 21 2015 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.4-1
- Update to 3.4.
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.3.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 3.3.1-4
- Rebuilt for GCC 5 C++11 ABI change
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.3.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Sep 25 2013 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3.1-1
- Update to 3.3.1.
* Sun Sep 22 2013 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3-1
- Update to 3.3.
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555731 - ergo: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1555731
--------------------------------------------------------------------------------
================================================================================
libmediainfo-18.05-1.el6 (FEDORA-EPEL-2018-6d5086187d)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Rebuild to use Qt5 and wxGTK3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> - 18.05-1
- Update to 18.05
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.7.4-1.el6 (FEDORA-EPEL-2018-04163d5dc7)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.4 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.11.0-2.7.4-and-2.1.13-released
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 9 2018 Morten Stevens <mstevens(a)fedoraproject.org> - 2.7.4-1
- Update to 2.7.4
--------------------------------------------------------------------------------
================================================================================
mediainfo-18.05-2.el6 (FEDORA-EPEL-2018-6d5086187d)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Rebuild to use Qt5 and wxGTK3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 10 2018 Scott Talbert <swt(a)techie.net> - 18.05-2
- Rebuild with wxWidgets 3.0
* Thu May 10 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> - 18.05-1
- Update to 18.05
--------------------------------------------------------------------------------
================================================================================
prettyping-1.0.1-1.el6 (FEDORA-EPEL-2018-ff04bff916)
Compact, colorful ping tool for your terminal
--------------------------------------------------------------------------------
Update Information:
New package - first build & update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1598486 - Review Request: prettyping - compact, colorful ping tool
https://bugzilla.redhat.com/show_bug.cgi?id=1598486
--------------------------------------------------------------------------------
================================================================================
pythia8-8.2.35-2.el6 (FEDORA-EPEL-2018-95ee64dd06)
Pythia Event Generator for High Energy Physics
--------------------------------------------------------------------------------
Update Information:
root 5.34.38 *
https://d35c7d8c.web.cern.ch/root-version-v5-34-00-patch-
release-notes pythia8 8.2.35 *
http://home.thep.lu.se/~torbjorn/pythia82html/UpdateHistory.html
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 8 2018 Mattias Ellert <mattia.ellert(a)yphysics.uu.se> - 8.2.35-2
- Create empty .dist-info files so that rpm auto-generates provides
* Wed Jul 4 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 8.2.35-1
- Update to version 8.2.35
- Add python bindings (except on ppc64 for EPEL 6)
- Change license tag from GPLv2 to GPLv2+
* Wed Mar 7 2018 Adam Williamson <awilliam(a)redhat.com> - 8.2.15-7
- Rebuild to fix GCC 8 mis-compilation
See
https://da.gd/YJVwk ("GCC 8 ABI change on x86_64")
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.2.15-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.2.15-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.2.15-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.2.15-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-rpm-macros-3-13.el6 (FEDORA-EPEL-2018-182d34f437)
The unversioned Python RPM macros
--------------------------------------------------------------------------------
Update Information:
Adds the %python3_platform macro.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 9 2018 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 3-13
- Backport %python3_platform macro.
--------------------------------------------------------------------------------
================================================================================
python-sphinxcontrib-httpdomain-1.7.0-1.el6 (FEDORA-EPEL-2018-a29f764a2f)
Sphinx domain for documenting HTTP APIs
--------------------------------------------------------------------------------
Update Information:
New enhancement releases 1.7.0:
https://sphinxcontrib-
httpdomain.readthedocs.io/en/stable/#version-1-7-0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 10 2018 Dan Callaghan <dcallagh(a)redhat.com> - 1.7.0-1
- upstream release 1.7.0:
https://sphinxcontrib-httpdomain.readthedocs.io/en/stable/#version-1-7-0
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.1-2
- Rebuilt for Python 3.7
* Mon Mar 5 2018 Dan Callaghan <dcallagh(a)redhat.com> - 1.6.1-1
- Update to 1.6.1 bug fix release (RHBZ#1551209)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Jan 15 2018 Dan Callaghan <dcallagh(a)redhat.com> - 1.6.0-1
- Update to 1.6.0 bug fix release (RHBZ#1534132)
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon Jul 24 2017 Dan Callaghan <dcallagh(a)redhat.com> - 1.5.0-4
- fix for Sphinx 1.6 compatibility (RHBZ#1473447)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1597015 - python-sphinxcontrib-httpdomain-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1597015
--------------------------------------------------------------------------------
================================================================================
root-5.34.38-1.el6 (FEDORA-EPEL-2018-95ee64dd06)
Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:
root 5.34.38 *
https://d35c7d8c.web.cern.ch/root-version-v5-34-00-patch-
release-notes pythia8 8.2.35 *
http://home.thep.lu.se/~torbjorn/pythia82html/UpdateHistory.html
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 9 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.34.38-1
- Update to 5.34.38
- Drop patch root-ftgl.patch (used only on EPEL 5)
- Drop patch root-gfal2.patch (accepted upstream)
- Remove compatibility with EPEL 5 (Group tags, BuildRoot tag, etc.)
- New subpackages due to package splits
- root-gui-html from root-gui
- root-gui-qtgsi from root-gui-qt
- root-io-xmlparser from root-io-xml
- root-proof-player from root-proof
- Rename root-guibuilder package to root-gui-builder
- Rename the python package to python2-root
- Add BuildRequires on lz4-devel and xxhash-devel
- Add the packages providing the libraries listed by "root-config --libs"
as dependencies to root-core
- Make root-vdt package noarch
--------------------------------------------------------------------------------
================================================================================
uwsgi-2.0.17.1-1.el6 (FEDORA-EPEL-2018-d801e05f92)
Fast, self-healing, application container server
--------------------------------------------------------------------------------
Update Information:
--- - Modernize and generalize building of Python subpackages: - replace
python with python2 - use appropriate macros for when refering to Python 3 -
prefix Python-dependent plugins with the version of Python they are built
with - Also build Python 3 subpackages for the other Python 3 version in EPEL7
--- - Build Python 3 version(s) of gevent plugin on Fedora and EPEL7 - Build
Python 3 version of greenlet plugin on Fedora and EPEL7 - Build Python 2 version
of greenlet plugin on EPEL7 - Always build Python 3 version of tornado plugin
when building with Python 3 (drop python3_tornado build conditional) --- -
Latest upstream (rhbz#1549354) - Enable uwsgi-plugin-coroae on EL7 - Use systemd
tmpfiles to create /run/uwsgi with group write permissions (rhbz#1427303) - Use
/var/run/uwsgi when not using systemd - Build with versioned python command -
Remove %%config from systemd unit file - Disable greenlet plugin on EL7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 9 2018 Carl George <carl(a)george.computer> - 2.0.17.1-1
- Latest upstream (rhbz#1549354)
- Enable uwsgi-plugin-coroae on EL7
- Use systemd tmpfiles to create /run/uwsgi with group write permissions (rhbz#1427303)
- Use /var/run/uwsgi when not using systemd
- Build with versioned python command
- Remove %config from systemd unit file
- Disable greenlet plugin on EL7
* Tue Jul 3 2018 Petr Pisar <ppisar(a)redhat.com> - 2.0.16-7
- Perl 5.28 rebuild
* Fri Jun 29 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.0.16-6
- Perl 5.28 rebuild
* Wed Jun 27 2018 Tadej Jane�� <tadej.j(a)nez.si> - 2.0.16-5
- Build Python 3 version(s) of gevent plugin on Fedora and EPEL7
- Build Python 3 version of greenlet plugin on Fedora and EPEL7
- Build Python 2 version of greenlet plugin on EPEL7
- Always build Python 3 version of tornado plugin when building with Python 3
(drop python3_tornado build conditional)
* Tue Jun 26 2018 Tadej Jane�� <tadej.j(a)nez.si> - 2.0.16-4
- Modernize and generalize building of Python subpackages:
- replace python with python2
- use appropriate macros for when refering to Python 3
- prefix Python-dependent plugins with the version of Python they are built
with
- Also build Python 3 subpackages for the other Python 3 version in EPEL7
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.16-3
- Rebuilt for Python 3.7
* Tue Apr 3 2018 Till Maas <opensource(a)till.name> - 2.0.16-2
- Fix building in Rawhide (#1556525) (Jakub Jelen)
- Disable tcp_wrappers for Fedora 28 and newer (Jakub Jelen)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1549439 - CVE-2018-7490 uWSGI: Mishandled DOCUMENT_ROOT check with use of
--php-docroot option allows for directory traversal [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549439
[ 2 ] Bug #1427303 - Add group write permission to socket directory
https://bugzilla.redhat.com/show_bug.cgi?id=1427303
[ 3 ] Bug #1549354 - uwsgi-2.0.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1549354
--------------------------------------------------------------------------------
================================================================================
xrootd-4.8.4-1.el6 (FEDORA-EPEL-2018-9e3e0eea9b)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
### Version 4.8.4 **Major bug fixes** * **[XrdCrypto]** Use consistently
time_t. * **[XrdCl]** Treat empty redirect response as error. **Minor bug
fixes** * **[XrdCl]** [XrdCl] Use NEED2SECURE macro properly.
**Miscellaneous** * **[XrdSecgsi]** Improving checking of CA expiration. *
**[XrdCl]** Improve TPC key generation, fixes #662
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 6 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.8.4-1
- Update to version 4.8.4
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1:4.8.3-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------