The following Fedora EPEL 6 Security updates need testing: Age URL 813 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 807 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 697 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 669 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 279 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 175 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e50abdd3d5 python3-numpy-1.10.4-6.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e563119ec9 php-horde-Horde-Image-2.5.2-1.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-bfeae1e322 wordpress-4.8.2-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5b8684c487 php-horde-passwd-5.0.7-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e6c88309c0 php-horde-wicked-2.0.8-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a981889220 php-horde-nag-4.2.17-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-be95216c3a MySQL-zrm-3.0-6.el6.2 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ad63a060a6 freexl-1.0.4-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing ansible-2.4.0.0-2.el6 freexl-1.0.4-1.el6 globus-ftp-control-8.1-1.el6 globus-gass-copy-9.28-1.el6 globus-gridftp-server-12.3-1.el6 globus-gssapi-gsi-13.1-1.el6 golang-github-go-ini-ini-1.21.1-0.5.git3d73f4b.el6 golang-github-howeyc-gopass-0-0.10.git3ca2347.el6 nmon-16g-3.el6 redis-3.2.11-1.el6 Details about builds: ================================================================================ ansible-2.4.0.0-2.el6 (FEDORA-EPEL-2017-c64e477a67) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to 2.4.0 for EPEL6. Additionally drop the python-jmespath requirement here because it causes conflicts on amazon linux. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1494640 - Ansible 2.3.2 conflict with python27-jmespath https://bugzilla.redhat.com/show_bug.cgi?id=1494640 -------------------------------------------------------------------------------- ================================================================================ freexl-1.0.4-1.el6 (FEDORA-EPEL-2017-ad63a060a6) Library to extract data from within an Excel spreadsheet -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-2923 and CVE-2017-2924 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1490896 - CVE-2017-2924 freexl: Heap-based buffer overflow in the read_legacy_biff function https://bugzilla.redhat.com/show_bug.cgi?id=1490896 [ 2 ] Bug #1490898 - CVE-2017-2923 freexl: Heap-based buffer overflow in the read_biff_next_record function https://bugzilla.redhat.com/show_bug.cgi?id=1490898 -------------------------------------------------------------------------------- ================================================================================ globus-ftp-control-8.1-1.el6 (FEDORA-EPEL-2017-2128941ec1) Globus Toolkit - GridFTP Control Library -------------------------------------------------------------------------------- Update Information: Globus Toolkit update. * globus-ftp-control 8.1 * globus-gass-copy 9.28 * globus-gridftp-server 12.3 * globus-gssapi-gsi 13.1 -------------------------------------------------------------------------------- ================================================================================ globus-gass-copy-9.28-1.el6 (FEDORA-EPEL-2017-2128941ec1) Globus Toolkit - Globus Gass Copy -------------------------------------------------------------------------------- Update Information: Globus Toolkit update. * globus-ftp-control 8.1 * globus-gass-copy 9.28 * globus-gridftp-server 12.3 * globus-gssapi-gsi 13.1 -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-12.3-1.el6 (FEDORA-EPEL-2017-2128941ec1) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: Globus Toolkit update. * globus-ftp-control 8.1 * globus-gass-copy 9.28 * globus-gridftp-server 12.3 * globus-gssapi-gsi 13.1 -------------------------------------------------------------------------------- ================================================================================ globus-gssapi-gsi-13.1-1.el6 (FEDORA-EPEL-2017-2128941ec1) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information: Globus Toolkit update. * globus-ftp-control 8.1 * globus-gass-copy 9.28 * globus-gridftp-server 12.3 * globus-gssapi-gsi 13.1 -------------------------------------------------------------------------------- ================================================================================ golang-github-go-ini-ini-1.21.1-0.5.git3d73f4b.el6 (FEDORA-EPEL-2017-adb8591f1c) Package ini provides INI file read and write functionality in Go -------------------------------------------------------------------------------- Update Information: Bump to upstream 3d73f4b845efdf9989fffd4b4e562727744a34ba -------------------------------------------------------------------------------- References: [ 1 ] Bug #1412590 - Tracker for golang-github-go-ini-ini https://bugzilla.redhat.com/show_bug.cgi?id=1412590 -------------------------------------------------------------------------------- ================================================================================ golang-github-howeyc-gopass-0-0.10.git3ca2347.el6 (FEDORA-EPEL-2017-e06b9dce17) Getpasswd for Go -------------------------------------------------------------------------------- Update Information: Bump to upstream 3ca23474a7c7203e0a0a070fd33508f6efdb9b3d ---- Update spec to spec-2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1250479 - Tracker for golang-github-howeyc-gopass https://bugzilla.redhat.com/show_bug.cgi?id=1250479 -------------------------------------------------------------------------------- ================================================================================ nmon-16g-3.el6 (FEDORA-EPEL-2017-fbedb12ba4) Nigel's performance Monitor for Linux -------------------------------------------------------------------------------- Update Information: Unretiring EPEL branches -------------------------------------------------------------------------------- ================================================================================ redis-3.2.11-1.el6 (FEDORA-EPEL-2017-92561ef37d) A persistent key-value database -------------------------------------------------------------------------------- Update Information: Upstream 3.2.11 bug-fix-only release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1491728 - EPEL 6 brought in incompatible version of redis https://bugzilla.redhat.com/show_bug.cgi?id=1491728 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
