[EPEL-devel] Fedora EPEL 6 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Wed Sep 16 23:52:16 UTC 2015


The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 308  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-4008   cross-binutils-2.23.51.0.3-1.el6.1
  88  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828   chicken-4.9.0.1-4.el6
  70  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031   python-virtualenv-12.0.7-1.el6
  64  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168   rubygem-crack-0.3.2-2.el6
  34  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7634   zabbix20-2.0.15-1.el6
  15  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7875   onionshare-0.7.1-1.el6
  12  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7917   moodle-2.6.11-1.el6
  10  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7940   nrpe-2.15-6.el6
  10  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7961   php-doctrine-cache-1.4.2-1.el6
  10  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7963   php-doctrine-annotations-1.2.7-1.el6
   7  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7994   seamonkey-2.28-7.ESR_31.8.0.el6
   4  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8027   php-extras-5.3.3-4.el6
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8044   golang-1.5.1-0.el6
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8091   zabbix22-2.2.10-1.el6
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8102   wordpress-4.3.1-1.el6


The following builds have been pushed to Fedora EPEL 6 updates-testing

    dar-2.4.18-1.el6
    golang-github-AdRoll-goamz-0-0.1.gitf8c4952.el6
    golang-github-Azure-azure-sdk-for-go-1.2-0.1.git97d9593.el6
    golang-github-denverdino-aliyungo-0-0.1.git0e0f322.el6
    golang-github-go-fsnotify-fsnotify-1.2.0-0.1.git96c060f.el6
    golang-github-gorilla-handlers-0-0.1.git60c7bfd.el6
    golang-github-ncw-swift-0-0.1.git22c8fa9.el6
    golang-github-noahdesu-go-ceph-0.3.0-0.1.gitb15639c.el6
    golang-github-stevvooe-resumable-0-0.1.git51ad441.el6
    libmaxminddb-1.1.1-5.el6
    reposurgeon-3.29-1.el6
    wordpress-4.3.1-1.el6

Details about builds:


================================================================================
 dar-2.4.18-1.el6 (FEDORA-EPEL-2015-8096)
 Software for making/restoring incremental CD/DVD backups
--------------------------------------------------------------------------------
Update Information:

New upstream version  dar-2.4.18-1.fc23  - New upstream version
dar-2.4.18-1.el7  - new upstream version   dar-2.4.18-1.el6  - new upstream
version   dar-2.4.18-1.el5  - new upstream version   dar-2.4.18-1.fc22  - New
upstream version   dar-2.4.18-1.fc21  - new upstream version
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258281 - dar-2.4.18 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1258281
--------------------------------------------------------------------------------


================================================================================
 golang-github-AdRoll-goamz-0-0.1.gitf8c4952.el6 (FEDORA-EPEL-2015-8106)
 Fork of the GOAMZ with additional functionality with DynamoDB
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262714 - Review Request: golang-github-AdRoll-goamz - Fork of the GOAMZ with additional functionality with DynamoDB
        https://bugzilla.redhat.com/show_bug.cgi?id=1262714
--------------------------------------------------------------------------------


================================================================================
 golang-github-Azure-azure-sdk-for-go-1.2-0.1.git97d9593.el6 (FEDORA-EPEL-2015-8105)
 Microsoft Azure SDK for Go
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262716 - Review Request: golang-github-Azure-azure-sdk-for-go - Microsoft Azure SDK for Go
        https://bugzilla.redhat.com/show_bug.cgi?id=1262716
--------------------------------------------------------------------------------


================================================================================
 golang-github-denverdino-aliyungo-0-0.1.git0e0f322.el6 (FEDORA-EPEL-2015-8109)
 Go SDK for Aliyun Services
--------------------------------------------------------------------------------
Update Information:

needed by docker/distribution
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262704 - Review Request: golang-github-denverdino-aliyungo - Go SDK for Aliyun Services
        https://bugzilla.redhat.com/show_bug.cgi?id=1262704
--------------------------------------------------------------------------------


================================================================================
 golang-github-go-fsnotify-fsnotify-1.2.0-0.1.git96c060f.el6 (FEDORA-EPEL-2015-8103)
 File system notifications for Go
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262426 - Review Request: golang-github-go-fsnotify-fsnotify - File system notifications for Go
        https://bugzilla.redhat.com/show_bug.cgi?id=1262426
--------------------------------------------------------------------------------


================================================================================
 golang-github-gorilla-handlers-0-0.1.git60c7bfd.el6 (FEDORA-EPEL-2015-8108)
 A collection of useful handlers for Go's net/http package
--------------------------------------------------------------------------------
Update Information:

needed by docker/distribution
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262705 - Review Request: golang-github-gorilla-handlers - A collection of useful handlers for Go's net/http package
        https://bugzilla.redhat.com/show_bug.cgi?id=1262705
--------------------------------------------------------------------------------


================================================================================
 golang-github-ncw-swift-0-0.1.git22c8fa9.el6 (FEDORA-EPEL-2015-8107)
 Go language interface to Swift
--------------------------------------------------------------------------------
Update Information:

needed by docker/distribution
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262710 - Review Request: golang-github-ncw-swift - Go language interface to Swift
        https://bugzilla.redhat.com/show_bug.cgi?id=1262710
--------------------------------------------------------------------------------


================================================================================
 golang-github-noahdesu-go-ceph-0.3.0-0.1.gitb15639c.el6 (FEDORA-EPEL-2015-8104)
 Go bindings for RADOS, RBD, and CephFS
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262711 - Review Request: golang-github-noahdesu-go-ceph - Go bindings for RADOS, RBD, and CephFS
        https://bugzilla.redhat.com/show_bug.cgi?id=1262711
--------------------------------------------------------------------------------


================================================================================
 golang-github-stevvooe-resumable-0-0.1.git51ad441.el6 (FEDORA-EPEL-2015-8110)
 Subset of the Go `crypto` Package with a Resumable Hash Interface
--------------------------------------------------------------------------------
Update Information:

needed by docker/distribution
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1262709 - Review Request: golang-github-stevvooe-resumable - Subset of the Go `crypto` Package with a Resumable Hash Interface
        https://bugzilla.redhat.com/show_bug.cgi?id=1262709
--------------------------------------------------------------------------------


================================================================================
 libmaxminddb-1.1.1-5.el6 (FEDORA-EPEL-2015-8095)
 C library for the MaxMind DB file format
--------------------------------------------------------------------------------
Update Information:

C library for the MaxMind DB file format
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1258874 - Review Request: libmaxminddb - C library for the MaxMind DB file format
        https://bugzilla.redhat.com/show_bug.cgi?id=1258874
--------------------------------------------------------------------------------


================================================================================
 reposurgeon-3.29-1.el6 (FEDORA-EPEL-2015-8112)
 SCM Repository Manipulation Tool
--------------------------------------------------------------------------------
Update Information:

# 3.29: 2015-09-02 * Now included: git aliases that allow git to work with
action stamps. * **The new `repomapper` tool helps prepare contributor maps.** *
Use of branchify/branchify_map is now less likely to produce invalid resets. *
`branchify_map` has been changed to handle subdirectories better. `branchify_map
reset` actually works now. * Prevent a crash on empty SVN comments produced by
dumpfiltering. * `assign` command with no selection set or arguments lists
assignments. * New `--user-ignores` option on Subversion reads passes through
.gitignores. * `repotool initialize` now generates an easier-to-read conversion
makefile (Fedora: Used to be conversion.mk in /usr/share/doc/reposurgeon).
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1259536 - reposurgeon-3.29 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1259536
--------------------------------------------------------------------------------


================================================================================
 wordpress-4.3.1-1.el6 (FEDORA-EPEL-2015-8102)
 Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:

**WordPress 4.3.1 Security and Maintenance Release**  [Upstream
announcement](https://wordpress.org/news/2015/09/wordpress-4-3-1/):  WordPress
4.3.1 is now available. This is a security release for all previous versions and
we strongly encourage you to update your sites immediately.  This release
addresses three issues, including two cross-site scripting vulnerabilities and a
potential privilege escalation.  * WordPress versions 4.3 and earlier are
vulnerable to a cross-site scripting vulnerability when processing shortcode
tags (CVE-2015-5714). Reported by Shahar Tal and Netanel Rubin of Check Point. *
A separate cross-site scripting vulnerability was found in the user list table.
Reported by Ben Bidner of the WordPress security team. *  Finally, in certain
cases, users without proper permissions could publish private posts and make
them sticky (CVE-2015-5715). Reported by Shahar Tal and Netanel Rubin of Check
Point.  WordPress 4.3.1 also fixes twenty-six bugs. For more information, see
the [release notes](https://codex.wordpress.org/Version_4.3.1) or consult the
[list of changes](https://core.trac.wordpress.org/log/branches/4.3/?rev=34199&st
op_rev=33647).
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1263657 - CVE-2015-5714 CVE-2015-5715 wordpress: XSS and permission issue fixed in wordpress 4.3.1
        https://bugzilla.redhat.com/show_bug.cgi?id=1263657
--------------------------------------------------------------------------------



More information about the epel-devel mailing list