The following Fedora EPEL 6 Security updates need testing:
Age URL
390
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
384
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
315
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
274
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
245
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
131
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-30a8346813
vtun-3.0.1-10.el6
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-db7e78fac7
php-PHPMailer-5.2.16-2.el6
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d0e444c5f2
pypy-5.0.1-4.el6
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7a25f65890
nginx-1.10.1-1.el6
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-225fc51f32
chicken-4.11.0-2.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d1c7111779
p7zip-16.02-1.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1cbd9dc578
drupal7-views-3.14-1.el6
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-823164477b
php-doctrine-orm-2.4.8-1.el6 php-doctrine-dbal-2.4.5-1.el6
php-doctrine-common-2.4.3-2.el6
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6e8996ae73
php-ZendFramework2-2.2.10-2.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2d00357bc8
dietlibc-0.33-8.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-66eb498b93
v8-3.14.5.10-25.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-af2033a524
cryptopp-5.6.2-10.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d8fc3f17ea
libarchive3-3.2.1-1.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-b191f5d359
collectd-4.10.9-3.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-36216b1c0b
nodejs-0.10.46-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
drupal7-crumbs-2.5-1.el6
drupal7-entity-1.7-1.el6
drupal7-feeds-2.0-0.15.beta2.el6
drupal7-job_scheduler-2.0-0.10.alpha3.el6
drupal7-link-1.4-1.el6
drupal7-login_destination-1.4-2.el6
drupal7-potx-3.0-0.1.alpha2.el6
fvwm-2.6.6-1.el6
golang-github-boltdb-bolt-1.2.1-0.1.gitdfb2120.el6
golang-github-coreos-pkg-0-0.8.gitfa29b1d.el6
golang-github-golang-groupcache-0-0.8.git02826c3.el6
golang-github-google-btree-0-0.6.git7d79101.el6
golang-googlecode-goauth2-0-0.17.git1364adb.el6
libstroke-0.5.1-33.el6
nodejs-0.10.46-1.el6
php-doctrine-datafixtures-1.0.2-3.el6
php-nette-di-2.3.12-1.el6
php-simplesamlphp-saml2-2.2-2.el6
php-simplesamlphp-saml2_1-1.9-1.el6
xrootd-4.4.0-1.el6
Details about builds:
================================================================================
drupal7-crumbs-2.5-1.el6 (FEDORA-EPEL-2016-ce628be06a)
The ultimate breadcrumbs module
--------------------------------------------------------------------------------
Update Information:
* [
7.x-2.5](https://www.drupal.org/project/crumbs/releases/7.x-2.5) *
[
7.x-2.4](https://www.drupal.org/project/crumbs/releases/7.x-2.4)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1322633 - drupal7-crumbs-2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1322633
--------------------------------------------------------------------------------
================================================================================
drupal7-entity-1.7-1.el6 (FEDORA-EPEL-2016-2f64bb7f79)
Extends the entity API to provide a unified way to deal with entities
--------------------------------------------------------------------------------
Update Information:
* [
7.x-1.7](https://www.drupal.org/project/entity/releases/7.x-1.7)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1318827 - drupal7-entity-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1318827
--------------------------------------------------------------------------------
================================================================================
drupal7-feeds-2.0-0.15.beta2.el6 (FEDORA-EPEL-2016-e9ab4640d3)
Aggregates RSS/Atom/RDF feeds, imports CSV files and more
--------------------------------------------------------------------------------
Update Information:
* [
7.x-2.0-beta2](https://www.drupal.org/project/feeds/releases/7.x-2.0-beta2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310474 - drupal7-feeds-2.0-beta2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1310474
--------------------------------------------------------------------------------
================================================================================
drupal7-job_scheduler-2.0-0.10.alpha3.el6 (FEDORA-EPEL-2016-34ce2227ef)
Simple API for scheduling tasks
--------------------------------------------------------------------------------
Update Information:
RPM-only release: Additional spec cleanup. No end-user changes.
--------------------------------------------------------------------------------
================================================================================
drupal7-link-1.4-1.el6 (FEDORA-EPEL-2016-d1d34e4b8a)
Defines simple link field types
--------------------------------------------------------------------------------
Update Information:
* [
7.x-1.4](https://www.drupal.org/project/link/releases/7.x-1.4)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1298909 - drupal7-link-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1298909
--------------------------------------------------------------------------------
================================================================================
drupal7-login_destination-1.4-2.el6 (FEDORA-EPEL-2016-32721da864)
Customize the destination that the user is redirected to after login
--------------------------------------------------------------------------------
Update Information:
* [
7.x-1.4](https://www.drupal.org/project/login_destination/releases/7.x-1.4) *
[
7.x-1.3](https://www.drupal.org/project/login_destination/releases/7.x-1.3) *
[
7.x-1.2](https://www.drupal.org/project/login_destination/releases/7.x-1.2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1289951 - drupal7-login_destination-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1289951
--------------------------------------------------------------------------------
================================================================================
drupal7-potx-3.0-0.1.alpha2.el6 (FEDORA-EPEL-2016-f52a2acc28)
Translation template extractor
--------------------------------------------------------------------------------
Update Information:
* [
7.x-3.0-alpha2](https://www.drupal.org/project/potx/releases/7.x-3.0-alpha2)
* [
7.x-3.0-alpha1](https://www.drupal.org/project/potx/releases/7.x-3.0-alpha1)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277745 - drupal7-potx-3.0-alpha2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1277745
--------------------------------------------------------------------------------
================================================================================
fvwm-2.6.6-1.el6 (FEDORA-EPEL-2016-541e8eddf2)
Highly configurable multiple virtual desktop window manager
--------------------------------------------------------------------------------
Update Information:
Update FVWM to 2.6.6
--------------------------------------------------------------------------------
================================================================================
golang-github-boltdb-bolt-1.2.1-0.1.gitdfb2120.el6 (FEDORA-EPEL-2016-00d8366802)
A low-level key/value database for Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream dfb21201d9270c1082d5fb0f07f500311ff72f18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246207 - Tracker for golang-github-boltdb-bolt
https://bugzilla.redhat.com/show_bug.cgi?id=1246207
--------------------------------------------------------------------------------
================================================================================
golang-github-coreos-pkg-0-0.8.gitfa29b1d.el6 (FEDORA-EPEL-2016-b6c3b941dd)
A collection of go utility packages
--------------------------------------------------------------------------------
Update Information:
Bump to upstream fa29b1d70f0beaddd4c7021607cc3c3be8ce94b8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1245958 - Review Request: golang-github-coreos-pkg - A collection of go
utility packages
https://bugzilla.redhat.com/show_bug.cgi?id=1245958
--------------------------------------------------------------------------------
================================================================================
golang-github-golang-groupcache-0-0.8.git02826c3.el6 (FEDORA-EPEL-2016-d4a26df315)
Caching and cache-filling library as a replacement for memcached in many cases
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 02826c3e79038b59d737d3b1c0a1d937f71a4433
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249058 - Tracker for golang-github-golang-groupcache
https://bugzilla.redhat.com/show_bug.cgi?id=1249058
--------------------------------------------------------------------------------
================================================================================
golang-github-google-btree-0-0.6.git7d79101.el6 (FEDORA-EPEL-2016-7ee83d3ad7)
BTree implementation for Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 7d79101e329e5a3adf994758c578dab82b90c017
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250460 - Tracker for golang-github-google-btree
https://bugzilla.redhat.com/show_bug.cgi?id=1250460
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-goauth2-0-0.17.git1364adb.el6 (FEDORA-EPEL-2016-2574d25fbe)
OAuth 2.0 for Go clients
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 1364adb2c63445016c5ed4518fc71f6a3cda6169 ---- Update spec
file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1227273 - Tracker for golang-googlecode-goauth2
https://bugzilla.redhat.com/show_bug.cgi?id=1227273
--------------------------------------------------------------------------------
================================================================================
libstroke-0.5.1-33.el6 (FEDORA-EPEL-2016-541e8eddf2)
A stroke interface library
--------------------------------------------------------------------------------
Update Information:
Update FVWM to 2.6.6
--------------------------------------------------------------------------------
================================================================================
nodejs-0.10.46-1.el6 (FEDORA-EPEL-2016-36216b1c0b)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.46(security fix)
--------------------------------------------------------------------------------
================================================================================
php-doctrine-datafixtures-1.0.2-3.el6 (FEDORA-EPEL-2015-7067)
Data Fixtures for all Doctrine Object Managers
--------------------------------------------------------------------------------
Update Information:
## v1.0.2 Fixes a BC break * Revert "#166: Use EntityManagerInterface instead
of EntityManager"' (#186) ## v1.0.1 * Added Travis: 69c2230 * Now supports
table quoting for dropping joined tables: #180 * Fixed ProxyReferenceRepository
which was forcing to have a getId: 8ffac1c * Fixed identifiers retrieval on
ReferenceRepository if Entity is not yet managed my UnitOfWork: dfc0dc9 *
Doctrine dependencies relaxed: 83a910f * Fix purging non-public schema tables:
#171
--------------------------------------------------------------------------------
================================================================================
php-nette-di-2.3.12-1.el6 (FEDORA-EPEL-2016-648ef1c336)
Nette Dependency Injection Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.12** * `ContainerLoader::load()` allows swapped
arguments
--------------------------------------------------------------------------------
================================================================================
php-simplesamlphp-saml2-2.2-2.el6 (FEDORA-EPEL-2016-9c4a3a8b05)
SAML2 PHP library from SimpleSAMLphp
--------------------------------------------------------------------------------
Update Information:
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp [1],
used by OpenConext [2]. This library started as a collaboration between UNINETT
[3] and SURFnet [4] but everyone is invited to contribute. Autoloader:
/usr/share/php/SAML2/autoload.php [1]
https://www.simplesamlphp.org/ [2]
https://www.openconext.org/ [3]
https://www.uninett.no/ [4]
https://www.surfnet.nl/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356587 - Review Request: php-simplesamlphp-saml2 - SAML2 PHP library from
SimpleSAMLphp
https://bugzilla.redhat.com/show_bug.cgi?id=1356587
--------------------------------------------------------------------------------
================================================================================
php-simplesamlphp-saml2_1-1.9-1.el6 (FEDORA-EPEL-2016-0cbc3534a4)
SAML2 PHP library from SimpleSAMLphp (version 1)
--------------------------------------------------------------------------------
Update Information:
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp [1],
used by OpenConext [2]. This library started as a collaboration between UNINETT
[3] and SURFnet [4] but everyone is invited to contribute. Autoloader:
/usr/share/php/SAML2/autoload.php [1]
https://www.simplesamlphp.org/ [2]
https://www.openconext.org/ [3]
https://www.uninett.no/ [4]
https://www.surfnet.nl/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356595 - Review Request: php-simplesamlphp-saml2_1 - SAML2 PHP library from
SimpleSAMLphp (version 1)
https://bugzilla.redhat.com/show_bug.cgi?id=1356595
--------------------------------------------------------------------------------
================================================================================
xrootd-4.4.0-1.el6 (FEDORA-EPEL-2016-19a4b6de30)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
Release Notes ============= Version 4.4.0 ------------- **New Features** *
**[Server]** Add new [no]rpipa option to xrd.network directive. * **[Server]**
Allow objectid's to be specified in the authorization file. * **[Server]** Add
new logging plugin interface. * **[Server]** Fixes #345 - add sid to TOD
structure (ABI compliant). * **[Server]** Implement resource selection
affinity (primarily for ssi). * **[XrdCl]** Add Metalink support (xrdcp &
API). * **[XrdCl]** Enable metalink processing on default. * **[XrdCl]**
xrdcp: use cks.type cgi tag to select the checksum type. * **[XrdCl]** Support
local metalink files. * **[XrdCl]** Add support for GLFN redirector of last
resort. * **[XrdCeph]** Implemented pools of ceph objects. **Major bug
fixes** * **[Posix]** Remove double unlock of a mutex. * **[Client]**
Serialize security protocol manager to allow MT loads. *
**[Authentication/sss]** Fix dynamic id incompatability introduced in 4.0. *
**[XtdHttp]** Removed the deprecated cipher SSLv3, in favor of TLS1.2 *
**[XrdCl]** Close file on open timeout. * **[XrdCl]** Differentiate between a
handshake and an xrootd request/response while processing an incoming/outgoing
message. * **[XrdCl]** Fix dangling pointer issue that occurs while forking.
* **[XrdCl]** Ensure DefaultEnv is finalized after last use of the object.
**Minor bug fixes** * **[Proxy]** Avoid SEGV when printing memory cache
statistics. * **[Server]** Avoid XrdNetIF static initialization issues. *
**[Server]** Honor DFS setting when forwarding operations. * **[Server]** Make
sure lockfile time is updated in deprecated runmodeold. * **[Server]** Fixes
#344 - squash path before checking for static redirect. * **[Server]** Free
Entity before replacing it from the cache (memleak). * **[XrdCl]** xrdfs ls
does not include opaque info in a listing. * **[XrdCl]** Eliminate unnecessary
write notifications. * **[XrdCl]** Forward xrd.* parameters from the original
to the redirection URL. * **[XrdCl]** Do not preset CWD in batch mode. *
**[XrdCl]** Be complaint with file URI scheme. * **[XrdCl]** Fix wrong query
string used for opaquefile code. * **[XrdCl]** Translate XRootD error code to
errno before passing to strerror. * **[XrdCeph]** Fixed thread safety of
filedescriptors in the ceph plugin. * **[XrdCeph]** Protected initialization
of ioCtx object and striper objects by mutex in the ceph plugin. *
**[XrdCeph]** Fixed memory corruption in asynchronous read from ceph. *
**[XrdXml]** Make sure c-string buffes are properly terminated. *
**[XtdHttp]** Don't trim printable characters. **Miscellaneous** *
**[XrdCl]** Change the way handlers and messages are matched (use maps). *
**[Apps]** Add xrdacctest to the tools set to test access control databases. *
**[Packaging/RPM]** Set max open files limit to 65k for systemd services.
--------------------------------------------------------------------------------