The following Fedora EPEL 6 Security updates need testing:
Age URL
214
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6c663378c
unrtf-0.21.9-8.el6
40
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-61fe7c6e70
nagios-4.4.2-3.el6
26
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7556983e8
tomcat-7.0.92-1.el6
22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a0ddb153b8
game-music-emu-0.6.2-1.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-721b35969d
php-horde-Horde-Image-2.5.4-1.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c61cb3eb1d
perl-Email-Address-1.912-1.el6
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f49d74241e
php-horde-Horde-Form-2.0.19-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
gitolite3-3.6.11-1.el6
golang-1.11.4-1.el6
openblas-0.3.5-1.el6
Details about builds:
================================================================================
gitolite3-3.6.11-1.el6 (FEDORA-EPEL-2019-5fba945293)
Highly flexible server for git directory version tracker
--------------------------------------------------------------------------------
Update Information:
3.6.11:
https://github.com/sitaramc/gitolite/commit/b49133dc5f49b12807165ed2503
07213c1ac0a53
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 1:3.6.11-1
- 3.6.11.
--------------------------------------------------------------------------------
================================================================================
golang-1.11.4-1.el6 (FEDORA-EPEL-2019-13717fa751)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to 1.11.4 * Security fix for CVE-2018-16875, CVE-2018-16874 and
CVE-2018-16873
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Jakub ��ajka <jcajka(a)redhat.com> - 1.11.4-1
- Rebase to go1.11.4
- Fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873
- Resolves: BZ#1664332
* Fri Nov 30 2018 Jakub ��ajka <jcajka(a)redhat.com> - 1.11.2-3
- add ppc64le proper
* Mon Nov 26 2018 Jakub ��ajka <jcajka(a)redhat.com> - 1.11.2-2
- fix up macros file for aarch64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1657565 - CVE-2018-16875 golang: crypto/x509 allows for denial of service via
crafted TLS client certificate
https://bugzilla.redhat.com/show_bug.cgi?id=1657565
[ 2 ] Bug #1657564 - CVE-2018-16874 golang: "go get" vulnerable to directory
traversal via malicious package
https://bugzilla.redhat.com/show_bug.cgi?id=1657564
[ 3 ] Bug #1657563 - CVE-2018-16873 golang: "go get" command vulnerable to RCE
via import of malicious package
https://bugzilla.redhat.com/show_bug.cgi?id=1657563
--------------------------------------------------------------------------------
================================================================================
openblas-0.3.5-1.el6 (FEDORA-EPEL-2019-19c8c58321)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.5 with runtime CPU detection on aarch64. See full list of changes
at
https://github.com/xianyi/OpenBLAS/releases.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 0.3.5-1
- Update to 0.3.5, enabling dynamic CPU detection on aarch64.
--------------------------------------------------------------------------------