The following Fedora EPEL 6 Security updates need testing:
Age URL
38
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7556983e8
tomcat-7.0.92-1.el6
33
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a0ddb153b8
game-music-emu-0.6.2-1.el6
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f49d74241e
php-horde-Horde-Form-2.0.19-1.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-5fba945293
gitolite3-3.6.11-1.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-13717fa751
golang-1.11.4-1.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-17b388679b
nagios-4.4.3-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
geoipupdate-3.1.1-2.el6
gsoap-2.7.16-7.el6
Details about builds:
================================================================================
geoipupdate-3.1.1-2.el6 (FEDORA-EPEL-2019-9aaf10bf2e)
Update GeoIP2 and GeoIP Legacy binary databases from MaxMind
--------------------------------------------------------------------------------
Update Information:
This update drops support for the free legacy GeoIP databases, which are no
longer being distributed by MaxMind. The geoipupdate-cron6 package is now
obsolete (and not built) as the files it attempts to download are no longer
available. The default configuration is now to download the free GeoIP2
databases, which are supported by libmaxminddb.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Paul Howarth <paul(a)city-fan.org> - 3.1.1-2
- Don't try to update the free legacy GeoIP databases as they are no longer
distributed by upstream
- Drop the cron6 sub-package as the files it tries to download are no longer
distributed by upstream
* Tue Sep 11 2018 Paul Howarth <paul(a)city-fan.org> - 3.1.1-1
- Update to 3.1.1
- Allow parsing of license keys longer than 12 characters
* Fri Aug 17 2018 Paul Howarth <paul(a)city-fan.org> - 3.1.0-1
- Update to 3.1.0
Changes in version 3.0.0:
- BREAKING CHANGE: When downloading the free databases without a MaxMind
account, you must either not have 'AccountID', 'UserId', or
'LicenseKey'
set in your configuration file or they must be set to the zero values
previously recommended in our documentation; any other value will cause an
authorization error
- BREAKING CHANGE: The configuration options 'Protocol',
'SkipPeerVerification', and `SkipHostnameVerification` are no longer
supported; if they are present in the configuration file, they will be
ignored - HTTPS with peer and hostname verification will be used on all
requests
- BREAKING CHANGE: The configuration file must have the 'AccountID' or the
deprecated 'UserId' when downloading a paid database; previously, when
downloading the GeoIP Legacy Country database, you were able to only
provide the 'LicenseKey'
- IMPORTANT: 'geoipupdate-pureperl.pl' has been removed and will no longer be
distributed with 'geoipupdate'; this Perl script had known issues and did
not have feature parity with the C implementation
- This program no longer uses the following endpoints:
'/app/update_getipaddr', '/app/update', and
'/app/update_secure';
'/geoip/databases/{edition_id}/update' is now used instead
- Fixed issue in 'gu_strnlen()' dereferencing a pointer before checking that
it was in array bounds
- We now update the default GeoIP.conf during installation so that directory
paths match build parameters; previously this config always said the data
directory was under /usr/local/share which was not always accurate
- Improve the error checking and display the underlying reason for the error
when possible (GH#82)
- Document that the 'LockFile' is not removed from the filesystem after a
successful exit from the program (GH#79)
- Make default configuration directory agree with default installation
directory
Changes in version 3.0.1:
- When there were no updates available, 3.0.0 incorrectly returned an exit
code of 1 instead of 0; this release reverts to the pre-3.0.0 behavior,
returning an exit code of 0 in this case
Changes in version 3.1.0:
- This version restores the ability to use the 'AccountID'/'UserId'
999999
along with an all-zero license key when downloading free databases;
however, the use of this combination is not recommended and may break in
future versions
- When printing verbose output, only the first four characters of the
'LicenseKey' will now be displayed
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Oct 31 2017 Paul Howarth <paul(a)city-fan.org> - 2.5.0-1
- Update to 2.5.0
- Replace use of strnlen() due to lack of universal availability (GH#71)
- Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
- Remove unused base64 library (GH#68)
- Add the new configuration option 'PreserveFileTimes'; if set, the
downloaded files will get the same modification times as their original on
the server (default is '0') (GH#63)
- Use the correct types when calling 'curl_easy_setopt()'; this fixes
warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
- In 'GeoIP.conf', the 'UserId' option was renamed to
'AccountID' and the
'ProductIds' option was renamed to 'EditionIDs'; the old options will
continue to work, but upgrading to the new names is recommended for
forward compatibility
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri May 26 2017 Paul Howarth <paul(a)city-fan.org> - 2.4.0-1
- Update to 2.4.0
- geoipupdate now checks that the database directory is writable: if it is
not, it reports the problem and aborts
- geoipupdate now acquires a lock when starting up to ensure only one
instance may run at a time: a new option, 'LockFile', exists to set the
file to use as a lock ('.geoipupdate.lock' in the database directory by
default)
- geoipupdate now prints out additional information from the server when a
download request results in something other than HTTP status 2xx; this
provides more information when the API does not respond with a database
file
- ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
- Previously, a variable named 'ERROR' was used, which caused issues building
on Windows (GH#36)
- Drop EL-5 support
- Drop BuildRoot: and Group: tags
- Drop explicit buildroot cleaning in %install section
- Drop explicit %clean section
- noarch subpackages always available now
- libcurl-devel always available now
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Jan 5 2017 Paul Howarth <paul(a)city-fan.org> - 2.3.1-1
- Update to 2.3.1
- geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
greater
- Previously, on an invalid gzip file, geoipupdate would output binary data
to stderr; it now displays an appropriate error message
- Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
- $(sysconfdir) is now created if it doesn't exist (GH#33)
- The sample config file is now usable (GH#33)
* Wed Feb 3 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Fri Jan 22 2016 Paul Howarth <paul(a)city-fan.org> - 2.2.2-1
- Update to 2.2.2
- geoipupdate now calls fsync on the database directory after a rename to
make it durable in the event of a crash
- Update autotools patch
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.2.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gsoap-2.7.16-7.el6 (FEDORA-EPEL-2019-43c33ec765)
Generator Tools for Coding SOAP/XML Web Services in C and C++
--------------------------------------------------------------------------------
Update Information:
This update addresses an advisory published by upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 18 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.7.16-7
- Apply fix for advisory regarding abort with cookies enabled
--------------------------------------------------------------------------------