The following Fedora EPEL 6 Security updates need testing:
Age URL
441
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
435
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
366
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
325
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
297
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
182
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-30a8346813
vtun-3.0.1-10.el6
88
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-db7e78fac7
php-PHPMailer-5.2.16-2.el6
81
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d0e444c5f2
pypy-5.0.1-4.el6
42
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a1450d7fe0
knot-1.6.8-1.el6
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53
chicken-4.11.0-3.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-eb5607d339
wordpress-4.6.1-1.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-0e948eb4e8
php-horde-Horde-Core-2.26.1-1.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e2038f5db3
php-horde-Horde-Mime-Viewer-2.2.1-1.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d4f645229a
php-horde-Horde-Text-Filter-2.3.5-1.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-665fb50899
php-horde-horde-5.2.12-1.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4b16af69a6
varnish-2.1.5-6.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f2d60f53f3
GraphicsMagick-1.3.25-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bcc7555c8a
drupal7-google_analytics-2.3-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-204f2f07aa
drupal7-panels-3.7-1.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e079d167e3
distribution-gpg-keys-1.7-1.el6 mock-1.2.21-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-320b654443
php-adodb-5.15-10.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-edda50420f
mongodb-2.4.14-4.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-25e30f6dc3
jansson-2.9-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
coin-or-Ipopt-3.12.6-2.el6
engauge-digitizer-9.3-1.el6
jansson-2.9-1.el6
libisofs1-1.4.6-1.el6
mongodb-2.4.14-4.el6
nethogs-0.8.5-1.el6
pcsc-perl-1.4.14-2.el6
pcsc-tools-1.4.25-1.el6
perl-Image-ExifTool-10.20-1.el6
php-jsonlint-1.4.1-1.el6
python-carbon-0.9.15-6.el6
python-unidiff-0.5.2-3.el6
Details about builds:
================================================================================
coin-or-Ipopt-3.12.6-2.el6 (FEDORA-EPEL-2016-68bbbf4170)
Interior Point OPTimizer
--------------------------------------------------------------------------------
Update Information:
- Exclude strings.h wrapper installation (bz#1375290)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375290 - ipopt adds in /usr/include/openmpi-x86_64/strings.h - which breaks
hdf5 build from source - when using /usr/lib64/openmpi/bin/mpicc
https://bugzilla.redhat.com/show_bug.cgi?id=1375290
--------------------------------------------------------------------------------
================================================================================
engauge-digitizer-9.3-1.el6 (FEDORA-EPEL-2016-aa4054967c)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- Update to 9.3
--------------------------------------------------------------------------------
================================================================================
jansson-2.9-1.el6 (FEDORA-EPEL-2016-25e30f6dc3)
C library for encoding, decoding and manipulating JSON data
--------------------------------------------------------------------------------
Update Information:
Update to Jansson 2.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1332202 - CVE-2016-4425 jansson: stack exhaustion parsing a JSON file
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1332202
[ 2 ] Bug #1332201 - CVE-2016-4425 jansson: stack exhaustion parsing a JSON file
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1332201
[ 3 ] Bug #1375710 - Rebase jansson + patch
https://bugzilla.redhat.com/show_bug.cgi?id=1375710
[ 4 ] Bug #1150479 - jansson-2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1150479
--------------------------------------------------------------------------------
================================================================================
libisofs1-1.4.6-1.el6 (FEDORA-EPEL-2016-cfabefe10b)
Library to create ISO 9660 disk images
--------------------------------------------------------------------------------
Update Information:
libisofs 1.4.6 ============== * Bug fix: SIGSEGV by NULL when a data file was
larger than ISO level allows * Bug fix: Interpretation of 17 digit timestamps
was wrong * New API calls iso_generate_gpt_guid() and
iso_write_opts_set_gpt_guid() * Made several pseudo-random ids reproducible by
overriding volume modification time
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1377003 - libisofs-1.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1377003
--------------------------------------------------------------------------------
================================================================================
mongodb-2.4.14-4.el6 (FEDORA-EPEL-2016-edda50420f)
High-performance, schema-free document-oriented database
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-6494
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1362553 - CVE-2016-6494 mongodb: world-readable .dbshell history file
https://bugzilla.redhat.com/show_bug.cgi?id=1362553
--------------------------------------------------------------------------------
================================================================================
nethogs-0.8.5-1.el6 (FEDORA-EPEL-2016-31d0c0ae21)
A tool resembling top for network traffic
--------------------------------------------------------------------------------
Update Information:
BZ#1369551 - Latest stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369551 - Update nethogs package
https://bugzilla.redhat.com/show_bug.cgi?id=1369551
--------------------------------------------------------------------------------
================================================================================
pcsc-perl-1.4.14-2.el6 (FEDORA-EPEL-2016-d0c335db4c)
Perl interface to the PC/SC smart card library
--------------------------------------------------------------------------------
Update Information:
Added pcsc-tools and pcsc-perl packages to EPEL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #807792 - Please build pcsc-tools for EPEL6
https://bugzilla.redhat.com/show_bug.cgi?id=807792
[ 2 ] Bug #807793 - Please build pcsc-perl for EPEL6
https://bugzilla.redhat.com/show_bug.cgi?id=807793
--------------------------------------------------------------------------------
================================================================================
pcsc-tools-1.4.25-1.el6 (FEDORA-EPEL-2016-d0c335db4c)
Tools to be used with smart cards and PC/SC
--------------------------------------------------------------------------------
Update Information:
Added pcsc-tools and pcsc-perl packages to EPEL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #807792 - Please build pcsc-tools for EPEL6
https://bugzilla.redhat.com/show_bug.cgi?id=807792
[ 2 ] Bug #807793 - Please build pcsc-perl for EPEL6
https://bugzilla.redhat.com/show_bug.cgi?id=807793
--------------------------------------------------------------------------------
================================================================================
perl-Image-ExifTool-10.20-1.el6 (FEDORA-EPEL-2016-38d0ecc19e)
Utility for reading and writing image meta info
--------------------------------------------------------------------------------
Update Information:
Bring EPEL targets up to current production release.
--------------------------------------------------------------------------------
================================================================================
php-jsonlint-1.4.1-1.el6 (FEDORA-EPEL-2016-c1df2d8720)
JSON Lint for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.1** * Minor white-space and error wording tweaks
--------------------------------------------------------------------------------
================================================================================
python-carbon-0.9.15-6.el6 (FEDORA-EPEL-2016-4d36a9407f)
Back-end data caching and persistence daemon for Graphite
--------------------------------------------------------------------------------
Update Information:
Set correct interpreter for amqp listener and publiser
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285727 - Files in /var/log/carbon are never deleted
https://bugzilla.redhat.com/show_bug.cgi?id=1285727
[ 2 ] Bug #1285725 - Complaints in console.log about missing
/etc/carbon/storage-aggregation.conf
https://bugzilla.redhat.com/show_bug.cgi?id=1285725
[ 3 ] Bug #1360469 - Please switch to upstream init scripts
https://bugzilla.redhat.com/show_bug.cgi?id=1360469
--------------------------------------------------------------------------------
================================================================================
python-unidiff-0.5.2-3.el6 (FEDORA-EPEL-2016-4705f179c0)
Python library to parse and interact with unified diffs (patches)
--------------------------------------------------------------------------------
Update Information:
python-unidiff is a Python library to parse and interact with unified diffs
(patches). New EPEL6 package.
--------------------------------------------------------------------------------