The following Fedora EPEL 6 Security updates need testing: Age URL 38 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7556983e8 tomcat-7.0.92-1.el6 33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a0ddb153b8 game-music-emu-0.6.2-1.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f49d74241e php-horde-Horde-Form-2.0.19-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-5fba945293 gitolite3-3.6.11-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-13717fa751 golang-1.11.4-1.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-17b388679b nagios-4.4.3-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing geoipupdate-3.1.1-2.el6 gsoap-2.7.16-7.el6 Details about builds: ================================================================================ geoipupdate-3.1.1-2.el6 (FEDORA-EPEL-2019-9aaf10bf2e) Update GeoIP2 and GeoIP Legacy binary databases from MaxMind -------------------------------------------------------------------------------- Update Information: This update drops support for the free legacy GeoIP databases, which are no longer being distributed by MaxMind. The geoipupdate-cron6 package is now obsolete (and not built) as the files it attempts to download are no longer available. The default configuration is now to download the free GeoIP2 databases, which are supported by libmaxminddb. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2019 Paul Howarth <paul@xxxxxxxxxxxx> - 3.1.1-2 - Don't try to update the free legacy GeoIP databases as they are no longer distributed by upstream - Drop the cron6 sub-package as the files it tries to download are no longer distributed by upstream * Tue Sep 11 2018 Paul Howarth <paul@xxxxxxxxxxxx> - 3.1.1-1 - Update to 3.1.1 - Allow parsing of license keys longer than 12 characters * Fri Aug 17 2018 Paul Howarth <paul@xxxxxxxxxxxx> - 3.1.0-1 - Update to 3.1.0 Changes in version 3.0.0: - BREAKING CHANGE: When downloading the free databases without a MaxMind account, you must either not have 'AccountID', 'UserId', or 'LicenseKey' set in your configuration file or they must be set to the zero values previously recommended in our documentation; any other value will cause an authorization error - BREAKING CHANGE: The configuration options 'Protocol', 'SkipPeerVerification', and `SkipHostnameVerification` are no longer supported; if they are present in the configuration file, they will be ignored - HTTPS with peer and hostname verification will be used on all requests - BREAKING CHANGE: The configuration file must have the 'AccountID' or the deprecated 'UserId' when downloading a paid database; previously, when downloading the GeoIP Legacy Country database, you were able to only provide the 'LicenseKey' - IMPORTANT: 'geoipupdate-pureperl.pl' has been removed and will no longer be distributed with 'geoipupdate'; this Perl script had known issues and did not have feature parity with the C implementation - This program no longer uses the following endpoints: '/app/update_getipaddr', '/app/update', and '/app/update_secure'; '/geoip/databases/{edition_id}/update' is now used instead - Fixed issue in 'gu_strnlen()' dereferencing a pointer before checking that it was in array bounds - We now update the default GeoIP.conf during installation so that directory paths match build parameters; previously this config always said the data directory was under /usr/local/share which was not always accurate - Improve the error checking and display the underlying reason for the error when possible (GH#82) - Document that the 'LockFile' is not removed from the filesystem after a successful exit from the program (GH#79) - Make default configuration directory agree with default installation directory Changes in version 3.0.1: - When there were no updates available, 3.0.0 incorrectly returned an exit code of 1 instead of 0; this release reverts to the pre-3.0.0 behavior, returning an exit code of 0 in this case Changes in version 3.1.0: - This version restores the ability to use the 'AccountID'/'UserId' 999999 along with an all-zero license key when downloading free databases; however, the use of this combination is not recommended and may break in future versions - When printing verbose output, only the first four characters of the 'LicenseKey' will now be displayed * Fri Jul 13 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.5.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Tue Oct 31 2017 Paul Howarth <paul@xxxxxxxxxxxx> - 2.5.0-1 - Update to 2.5.0 - Replace use of strnlen() due to lack of universal availability (GH#71) - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64) - Remove unused base64 library (GH#68) - Add the new configuration option 'PreserveFileTimes'; if set, the downloaded files will get the same modification times as their original on the server (default is '0') (GH#63) - Use the correct types when calling 'curl_easy_setopt()'; this fixes warnings generated by libcurl's 'typecheck-gcc.h' (GH#61) - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the 'ProductIds' option was renamed to 'EditionIDs'; the old options will continue to work, but upgrading to the new names is recommended for forward compatibility * Wed Aug 2 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.4.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri May 26 2017 Paul Howarth <paul@xxxxxxxxxxxx> - 2.4.0-1 - Update to 2.4.0 - geoipupdate now checks that the database directory is writable: if it is not, it reports the problem and aborts - geoipupdate now acquires a lock when starting up to ensure only one instance may run at a time: a new option, 'LockFile', exists to set the file to use as a lock ('.geoipupdate.lock' in the database directory by default) - geoipupdate now prints out additional information from the server when a download request results in something other than HTTP status 2xx; this provides more information when the API does not respond with a database file - ${datarootdir}/GeoIP is now created on 'make install' (GH#29) - Previously, a variable named 'ERROR' was used, which caused issues building on Windows (GH#36) - Drop EL-5 support - Drop BuildRoot: and Group: tags - Drop explicit buildroot cleaning in %install section - Drop explicit %clean section - noarch subpackages always available now - libcurl-devel always available now * Fri Feb 10 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Jan 5 2017 Paul Howarth <paul@xxxxxxxxxxxx> - 2.3.1-1 - Update to 2.3.1 - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or greater - Previously, on an invalid gzip file, geoipupdate would output binary data to stderr; it now displays an appropriate error message - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33) - $(sysconfdir) is now created if it doesn't exist (GH#33) - The sample config file is now usable (GH#33) * Wed Feb 3 2016 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Fri Jan 22 2016 Paul Howarth <paul@xxxxxxxxxxxx> - 2.2.2-1 - Update to 2.2.2 - geoipupdate now calls fsync on the database directory after a rename to make it durable in the event of a crash - Update autotools patch * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ gsoap-2.7.16-7.el6 (FEDORA-EPEL-2019-43c33ec765) Generator Tools for Coding SOAP/XML Web Services in C and C++ -------------------------------------------------------------------------------- Update Information: This update addresses an advisory published by upstream. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 18 2019 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 2.7.16-7 - Apply fix for advisory regarding abort with cookies enabled -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx
