The following Fedora EPEL 6 Security updates need testing: Age URL 963 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 853 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 824 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 435 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 164 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-4c76ddcc92 libmspack-0.6-0.1.alpha.el6 83 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6aaee32b7e optipng-0.7.6-6.el6 55 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-8c9006d462 heimdal-7.5.0-1.el6 50 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-752a7c9ad4 rootsh-1.5.3-17.el6 18 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f742513635 jhead-3.00-9.el6 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-87b20f1b26 exim-4.90.1-2.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-76121890f9 seamonkey-2.49.2-2.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c8346d8e5 mbedtls-2.7.0-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-6ac908eac8 openjpeg2-2.3.0-6.el6 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2ffe688829 freexl-1.0.5-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-5d12c76136 drupal7-7.57-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
clamav-0.99.4-1.el6
Details about builds:
================================================================================ clamav-0.99.4-1.el6 (FEDORA-EPEL-2018-7e91105260) Anti-virus software -------------------------------------------------------------------------------- Update Information:
Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It includes fixes for: - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423 - CVE-2018-1000085 There are also a few bug fixes that were not assigned CVE���s, but were important enough to address while we had the chance. One of these was the notorious file descriptor exhaustion bug that caused outages late last January. In addition to the above, 0.99.4 fixes: - CVE-2018-0202: Two newly reported vulnerabilities in the PDF parsing code. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1549071 - CVE-2018-1000085 clamav: Out-of-bounds heap read in XAR parser [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1549071 [ 2 ] Bug #1550747 - clamav-0.99.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1550747 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org