The following Fedora EPEL 6 Security updates need testing: Age URL 150 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6c663378c unrtf-0.21.9-8.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4b684248e8 drupal7-7.60-2.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d6940a3da3 php-pear-CAS-1.3.6-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1ab12c426a ansible-2.6.7-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing icecast-2.4.4-1.el6 twa-1.6.2-1.el6 Details about builds: ================================================================================ icecast-2.4.4-1.el6 (FEDORA-EPEL-2018-018b328024) ShoutCast compatible streaming media server -------------------------------------------------------------------------------- Update Information: This release fixes buffer overflows in URL authentication code (CVE-2018-18820), a crash in htpasswd authentication if no filename is set, a crash on xsltApplyStylesheet() error, and a crash on malformed Opus streams. It also corrects global listener counter. It stops displaying hashed user passwords for security concerns. It adds support for announcing Opus streams to YP catalogs. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 2 2018 Petr Pisar <ppisar@xxxxxxxxxx> - 2.4.4-1 - 2.4.4 bump - License declaration corrected from "GPLv2+" to "GPLv2+ and GPLv2 and BSD and MIT and FSFULLR and FSFUL" - Fix CVE-2018-18820 (buffer overflow in URL auth code) (#1646721) - Regenerate build scripts * Fri Jul 13 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.4.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.4.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1646721 - CVE-2018-18820 icecast: buffer overflow in URL auth code https://bugzilla.redhat.com/show_bug.cgi?id=1646721 -------------------------------------------------------------------------------- ================================================================================ twa-1.6.2-1.el6 (FEDORA-EPEL-2018-a1f75b976e) Tiny web auditor with strong opinions -------------------------------------------------------------------------------- Update Information: Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 6 2018 Artur Iwicki <fedora@xxxxxxxxxx> - 1.6.2-1 - Update to latest upstream version * Sat Oct 20 2018 Artur Iwicki <fedora@xxxxxxxxxx> - 1.6.0-1 - Update to latest upstream version - Update upstream URL (repo owner change) -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx
