The following Fedora EPEL 6 Security updates need testing: Age URL 715 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 709 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 599 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 571 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 181 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 77 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f70a51bd19 tomcat-7.0.78-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02 lxc-1.0.10-2.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-16880697fe nagios-4.3.2-3.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6489eec271 golang-1.7.6-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74 openvpn-2.4.3-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5782443e0d php-horde-Horde-Image-2.5.0-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing golang-github-godbus-dbus-3-0.7.git3725288.el6 openvpn-2.4.3-1.el6 php-horde-Horde-Image-2.5.0-1.el6 Details about builds: ================================================================================ golang-github-godbus-dbus-3-0.7.git3725288.el6 (FEDORA-EPEL-2017-46dffb36e1) Go client bindings for D-Bus -------------------------------------------------------------------------------- Update Information: Fix support for s390x -------------------------------------------------------------------------------- References: [ 1 ] Bug #1463511 - update to a newer snapshot to include big endian fix https://bugzilla.redhat.com/show_bug.cgi?id=1463511 -------------------------------------------------------------------------------- ================================================================================ openvpn-2.4.3-1.el6 (FEDORA-EPEL-2017-9ec615ff74) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. ---- This update brings in the latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479). For more information see the upstream [security announcement](http://community.openvpn.ne t/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits). In addition the plug-in location which got removed by an accident during the clean-up is also back again. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1463644 - CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1463644 [ 2 ] Bug #1463647 - openvpn-2.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1463647 [ 3 ] Bug #1444535 - Plugin symlinks missing in openvpn-2.4.1-3.el6 https://bugzilla.redhat.com/show_bug.cgi?id=1444535 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Image-2.5.0-1.el6 (FEDORA-EPEL-2017-5782443e0d) Horde Image API -------------------------------------------------------------------------------- Update Information: **Horde_Image 2.5.0** * [mjr] **SECURITY**: Prevent DOS attack by preventing an infinite loop in certain conditions (CVE-2017-9773, reported by Fariskhi Vidyan). * [mjr] **SECURITY**: Prevent RCE attacks by properly sanitizing shell arguments (CVE-2017-9774, reported by Fariskhi Vidyan). * [jan] Add blur effect. -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
