The following Fedora EPEL 6 Security updates need testing:
Age URL
150 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6c663378c
unrtf-0.21.9-8.el6
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4b684248e8
drupal7-7.60-2.el6
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d6940a3da3
php-pear-CAS-1.3.6-1.el6
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1ab12c426a
ansible-2.6.7-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
icecast-2.4.4-1.el6
twa-1.6.2-1.el6
Details about builds:
================================================================================
icecast-2.4.4-1.el6 (FEDORA-EPEL-2018-018b328024)
ShoutCast compatible streaming media server
--------------------------------------------------------------------------------
Update Information:
This release fixes buffer overflows in URL authentication code (CVE-2018-18820),
a crash in htpasswd authentication if no filename is set, a crash on
xsltApplyStylesheet() error, and a crash on malformed Opus streams. It also
corrects global listener counter. It stops displaying hashed user passwords for
security concerns. It adds support for announcing Opus streams to YP catalogs.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 2 2018 Petr Pisar <ppi...@redhat.com> - 2.4.4-1
- 2.4.4 bump
- License declaration corrected from "GPLv2+" to "GPLv2+ and GPLv2 and BSD and
MIT and FSFULLR and FSFUL"
- Fix CVE-2018-18820 (buffer overflow in URL auth code) (#1646721)
- Regenerate build scripts
* Fri Jul 13 2018 Fedora Release Engineering <rel...@fedoraproject.org> -
2.4.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <rel...@fedoraproject.org> -
2.4.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646721 - CVE-2018-18820 icecast: buffer overflow in URL auth code
https://bugzilla.redhat.com/show_bug.cgi?id=1646721
--------------------------------------------------------------------------------
================================================================================
twa-1.6.2-1.el6 (FEDORA-EPEL-2018-a1f75b976e)
Tiny web auditor with strong opinions
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Artur Iwicki <fed...@svgames.pl> - 1.6.2-1
- Update to latest upstream version
* Sat Oct 20 2018 Artur Iwicki <fed...@svgames.pl> - 1.6.0-1
- Update to latest upstream version
- Update upstream URL (repo owner change)
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
