The following Fedora EPEL 6 Security updates need testing: Age URL 616 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 610 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 500 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 471 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 202 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53 chicken-4.11.0-3.el6 82 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 66 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-8c6c7bf06e dbus-sharp-0.7.0-16.el6 dbus-sharp-glib-0.5.0-14.el6 mono-4.2.4-9.el6 32 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-acd2c2af0d nagios-4.2.4-4.el6 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c3b112eb9e tomcat-7.0.75-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e4e18670f5 drupal7-views-3.15-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23896f34bd munin-2.0.30-5.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6f8067610a GraphicsMagick-1.3.25-6.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1e1f31ce42 tor-0.2.9.10-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-27a44b4bbf tcpreplay-4.1.2-3.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-50cbc23498 wordpress-4.7.3-1.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23481d5e1a icoutils-0.31.2-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-1ad70123a8 R-3.3.3-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-75190374ce moodle-2.7.19-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-eb18b4839a mbedtls-2.4.2-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-b1bba0f99d roundcubemail-1.0.9-2.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing golang-github-beorn7-perks-0-0.10.git4c0e845.el6 golang-github-coreos-pkg-0-0.12.git3ac0863.el6 golang-github-golang-sys-0-0.11.git478fcf5.el6 golang-github-jonboulle-clockwork-0-0.10.git2eee05e.el6 golang-github-mattn-go-runewidth-0-0.5.git737072b.el6 golang-github-russross-blackfriday-1.2-17.el6 golang-github-shurcooL-sanitized_anchor_name-0-0.13.git1dba4b3.el6 golang-github-xiang90-probing-0-0.6.git07dd2e8.el6 mbedtls-2.4.2-1.el6 moodle-2.7.19-1.el6 nedit-5.7-1.el6 roundcubemail-1.0.9-2.el6 Details about builds: ================================================================================ golang-github-beorn7-perks-0-0.10.git4c0e845.el6 (FEDORA-EPEL-2017-a73c1dbde8) Effective Computation of Things -------------------------------------------------------------------------------- Update Information: Bump to upstream 4c0e84591b9aa9e6dcfdf3e020114cd81f89d5f9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248633 - Tracker for golang-github-beorn7-perks https://bugzilla.redhat.com/show_bug.cgi?id=1248633 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-pkg-0-0.12.git3ac0863.el6 (FEDORA-EPEL-2017-72814742dd) A collection of go utility packages -------------------------------------------------------------------------------- Update Information: Bump to upstream 3ac0863d7acf3bc44daf49afef8919af12f704ef -------------------------------------------------------------------------------- References: [ 1 ] Bug #1245958 - Review Request: golang-github-coreos-pkg - A collection of go utility packages https://bugzilla.redhat.com/show_bug.cgi?id=1245958 -------------------------------------------------------------------------------- ================================================================================ golang-github-golang-sys-0-0.11.git478fcf5.el6 (FEDORA-EPEL-2017-24f2f921e7) Go packages for low-level interaction with the operating system -------------------------------------------------------------------------------- Update Information: Bump to upstream 478fcf54317e52ab69f40bb4c7a1520288d7f7ea -------------------------------------------------------------------------------- References: [ 1 ] Bug #1360748 - update for s390x support https://bugzilla.redhat.com/show_bug.cgi?id=1360748 -------------------------------------------------------------------------------- ================================================================================ golang-github-jonboulle-clockwork-0-0.10.git2eee05e.el6 (FEDORA-EPEL-2017-879cc10773) A fake clock for golang -------------------------------------------------------------------------------- Update Information: Bump to upstream 2eee05ed794112d45db504eb05aa693efd2b8b09 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1250489 - Tracker for golang-github-jonboulle-clockwork https://bugzilla.redhat.com/show_bug.cgi?id=1250489 -------------------------------------------------------------------------------- ================================================================================ golang-github-mattn-go-runewidth-0-0.5.git737072b.el6 (FEDORA-EPEL-2017-f229442d46) Functions for getting fixed width of the character or string -------------------------------------------------------------------------------- Update Information: Bump to upstream 737072b4e32b7a5018b4a7125da8d12de90e8045 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1405690 - Tracker for golang-github-mattn-go-runewidth https://bugzilla.redhat.com/show_bug.cgi?id=1405690 -------------------------------------------------------------------------------- ================================================================================ golang-github-russross-blackfriday-1.2-17.el6 (FEDORA-EPEL-2017-70215e5cd9) Markdown processor implemented in Go -------------------------------------------------------------------------------- Update Information: Bump to upstream 5f33e7b7878355cd2b7e6b8eefc48a5472c69f70 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1222338 - Tracker for golang-github-russross-blackfriday https://bugzilla.redhat.com/show_bug.cgi?id=1222338 -------------------------------------------------------------------------------- ================================================================================ golang-github-shurcooL-sanitized_anchor_name-0-0.13.git1dba4b3.el6 (FEDORA-EPEL-2017-0a2dc39090) Package sanitized_anchor_name provides a func to create sanitized anchor names -------------------------------------------------------------------------------- Update Information: Bump to upstream 1dba4b3954bc059efc3991ec364f9f9a35f597d2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1222336 - Tracker for golang-github-shurcooL-sanitized_anchor_name https://bugzilla.redhat.com/show_bug.cgi?id=1222336 -------------------------------------------------------------------------------- ================================================================================ golang-github-xiang90-probing-0-0.6.git07dd2e8.el6 (FEDORA-EPEL-2017-f466ec7dd2) Golang project for probing -------------------------------------------------------------------------------- Update Information: Bump to upstream 07dd2e8dfe18522e9c447ba95f2fe95262f63bb2 ---- First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1432066 - Tracker for golang-github-xiang90-probing https://bugzilla.redhat.com/show_bug.cgi?id=1432066 [ 2 ] Bug #1262351 - Review Request: golang-github-xiang90-probing - Golang project for probing https://bugzilla.redhat.com/show_bug.cgi?id=1262351 -------------------------------------------------------------------------------- ================================================================================ mbedtls-2.4.2-1.el6 (FEDORA-EPEL-2017-eb18b4839a) Light-weight cryptographic and SSL/TLS library -------------------------------------------------------------------------------- Update Information: - Update to 2.4.2 - CVE-2017-2784 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.4.2-2.1.7-and-1.3.19-released Security notes: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2017-01 -------------------------------------------------------------------------------- ================================================================================ moodle-2.7.19-1.el6 (FEDORA-EPEL-2017-75190374ce) A Course Management System -------------------------------------------------------------------------------- Update Information: Multiple CVE fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336730 - CVE-2016-3729 CVE-2016-3731 CVE-2016-3732 CVE-2016-3733 CVE-2016-3734 moodle: Multiple vulnerabilities fixed in 3.0.4, 2.9.6, 2.8.12 and 2.7.14 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1336730 [ 2 ] Bug #1319681 - CVE-2016-2151 CVE-2016-2152 CVE-2016-2153 CVE-2016-2154 CVE-2016-2155 CVE-2016-2156 CVE-2016-2157 CVE-2016-2158 CVE-2016-2159 CVE-2016-2190 moodle: multiple security issues fixed in 3.0.3, 2.9.5, 2.8.11, 2.7.13 [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1319681 [ 3 ] Bug #1299361 - CVE-2016-0724 moodle: two enrolment-related web services don't check course visibility [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1299361 -------------------------------------------------------------------------------- ================================================================================ nedit-5.7-1.el6 (FEDORA-EPEL-2017-e7c7b8d010) A GUI text editor for systems with X -------------------------------------------------------------------------------- Update Information: update to 5.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1106275 - nedit: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1106275 -------------------------------------------------------------------------------- ================================================================================ roundcubemail-1.0.9-2.el6 (FEDORA-EPEL-2017-b1bba0f99d) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Fix for CVE-2016-5103 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1339656 - CVE-2016-5103 roundcubemail: roundcube: XSS vulnerability in mail content page [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1339656 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
