The following Fedora EPEL 6 Security updates need testing:
Age URL
715 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
709 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
599 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
571 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
181 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
77 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f
tnef-1.4.14-1.el6
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f70a51bd19
tomcat-7.0.78-1.el6
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-23f4cb5d02
lxc-1.0.10-2.el6
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-16880697fe
nagios-4.3.2-3.el6
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6489eec271
golang-1.7.6-1.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74
openvpn-2.4.3-1.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-5782443e0d
php-horde-Horde-Image-2.5.0-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
golang-github-godbus-dbus-3-0.7.git3725288.el6
openvpn-2.4.3-1.el6
php-horde-Horde-Image-2.5.0-1.el6
Details about builds:
================================================================================
golang-github-godbus-dbus-3-0.7.git3725288.el6 (FEDORA-EPEL-2017-46dffb36e1)
Go client bindings for D-Bus
--------------------------------------------------------------------------------
Update Information:
Fix support for s390x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463511 - update to a newer snapshot to include big endian fix
https://bugzilla.redhat.com/show_bug.cgi?id=1463511
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.3-1.el6 (FEDORA-EPEL-2017-9ec615ff74)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream OpenVPN 2.4.3, containing security updates for
CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. ---- This update brings in the
latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated
remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479). For more
information see the upstream [security announcement](http://community.openvpn.ne
t/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits). In addition the plug-in
location which got removed by an accident during the clean-up is also back
again.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463644 - CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522
openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1463644
[ 2 ] Bug #1463647 - openvpn-2.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463647
[ 3 ] Bug #1444535 - Plugin symlinks missing in openvpn-2.4.1-3.el6
https://bugzilla.redhat.com/show_bug.cgi?id=1444535
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Image-2.5.0-1.el6 (FEDORA-EPEL-2017-5782443e0d)
Horde Image API
--------------------------------------------------------------------------------
Update Information:
**Horde_Image 2.5.0** * [mjr] **SECURITY**: Prevent DOS attack by preventing an
infinite loop in certain conditions (CVE-2017-9773, reported by Fariskhi
Vidyan). * [mjr] **SECURITY**: Prevent RCE attacks by properly sanitizing shell
arguments (CVE-2017-9774, reported by Fariskhi Vidyan). * [jan] Add blur effect.
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
