The following Fedora EPEL 6 Security updates need testing: Age URL 980 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 870 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 842 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 453 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 182 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 101 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 73 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 68 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136 drupal7-7.57-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a27d71c715 pax-utils-1.2.3-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4bcfff2d5e tor-0.2.9.15-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-0f3319c1ea php-simplesamlphp-saml2_1-1.10.6-1.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-57cbc61216 php-simplesamlphp-saml2-2.3.8-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-910749f9c8 exim-4.90.1-3.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-10ff026fa8 monitorix-3.10.1-1.el6 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f5cd94db4e tomcat-7.0.85-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing golang-1.9.4-1.el6 purple-facebook-0.9.5-3.9ff9acf9fa14.el6 Details about builds: ================================================================================ golang-1.9.4-1.el6 (FEDORA-EPEL-2018-a67ea8c563) The Go Programming Language -------------------------------------------------------------------------------- Update Information: * Rebase to 1.9.4 * Security fix for CVE-2018-7187 and CVE-2018-6574 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543561 - CVE-2018-6574 golang: arbitrary code execution during "go get" via C compiler options https://bugzilla.redhat.com/show_bug.cgi?id=1543561 [ 2 ] Bug #1546386 - CVE-2018-7187 golang: arbitrary command execution via VCS path https://bugzilla.redhat.com/show_bug.cgi?id=1546386 -------------------------------------------------------------------------------- ================================================================================ purple-facebook-0.9.5-3.9ff9acf9fa14.el6 (FEDORA-EPEL-2018-0dc8b45283) Facebook protocol plugin for purple2 -------------------------------------------------------------------------------- Update Information: This fixes a [crash in Pidgin after Facebook login](https://github.com/dequis /purple-facebook/issues/403). -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx