The following Fedora EPEL 6 Security updates need testing:
Age URL
310
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
292
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
286
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
217
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
176
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
148
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
40
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8fbd838843
dropbear-2016.72-1.el6
40
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7640e3144a
proftpd-1.3.3g-9.el6
33
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-30a8346813
vtun-3.0.1-10.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-628be2e77a
drupal7-block_class-2.3-1.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e912272569
asterisk-1.8.32.3-2.el6 libsrtp-1.5.4-3.el6 pjproject-2.3-7.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bfe0ea574f
ansible1.9-1.9.6-1.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-09ad0ba4a5
ansible-2.0.2.0-1.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-522ecc9bb5
roundcubemail-1.0.9-1.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9ead85c2cf
php-getid3-1.9.12-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-45e9f8440b
cacti-0.8.8g-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
Lmod-6.3.1-1.el6
cacti-0.8.8g-2.el6
engauge-digitizer-7.2-1.el6
epson-inkjet-printer-escpr-1.5.2-3.1lsb3.2.el6
epson-inkjet-printer-escpr-1.6.5-1.1lsb3.2.el6
golang-github-go-ini-ini-1.9.0-0.1.git193d1ec.el6
osbs-client-0.22-1.el6
Details about builds:
================================================================================
Lmod-6.3.1-1.el6 (FEDORA-EPEL-2016-81e9d1896a)
Environmental Modules System in Lua
--------------------------------------------------------------------------------
Update Information:
Update to 6.3.1 - protects it from user changes to LUA_PATH and LUA_CPATH by
using these values at configuration time. - Fixed bug with Capital Letters in a
version string. - Do not overwrite MODULEPATH (bug #1326075)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326075 - Lmod packages prevent the correct function of `module use`, upon
further bash/csh invocations
https://bugzilla.redhat.com/show_bug.cgi?id=1326075
--------------------------------------------------------------------------------
================================================================================
cacti-0.8.8g-2.el6 (FEDORA-EPEL-2016-45e9f8440b)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 0.8.8g Release notes:
http://www.cacti.net/release_notes_0_8_8g.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1259276 - Version of cacti in repos' is pretty old for EL6 and EL7
https://bugzilla.redhat.com/show_bug.cgi?id=1259276
[ 2 ] Bug #1082936 - CVE-2014-2327 CVE-2014-2326 CVE-2014-2328 cacti: multiple flaws
reported by Deutsche Telekom [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1082936
[ 3 ] Bug #1004548 - Tree not collapsing in graph mode in version 0.8.8b
https://bugzilla.redhat.com/show_bug.cgi?id=1004548
[ 4 ] Bug #1323943 - CVE-2016-3659 cacti: SQL injection vulnerability in graph_view.php
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1323943
[ 5 ] Bug #1317550 - CVE-2016-3172 cacti: SQL injection vulnerability in /cacti/tree.php
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1317550
[ 6 ] Bug #1306530 - CVE-2016-2313 cacti: authentication bypass [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1306530
[ 7 ] Bug #1295782 - CVE-2015-8604 cacti: SQL injection in graps_new.php via cg_g
parameter [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295782
[ 8 ] Bug #1291779 - CVE-2015-8369 cacti: SQL injection in graph.php [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1291779
[ 9 ] Bug #1291223 - CVE-2015-8377 cacti: SQL injection in graphs_new.php [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1291223
[ 10 ] Bug #1242868 - CVE-2015-4634 cacti: multiple SQL injection flaws fixed in Cacti
0.8.8e [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1242868
[ 11 ] Bug #1233833 - CVE-2015-4454 CVE-2015-2665 cacti: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1233833
[ 12 ] Bug #1230297 - CVE-2015-4342 cacti: SQL Injection and Location header injection
from cdef id [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1230297
[ 13 ] Bug #1129764 - cacti: remote code execution and SQL injection [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1129764
[ 14 ] Bug #1121468 - cacti: cross-site scripting issues [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1121468
[ 15 ] Bug #1128298 - cacti-spine not available
https://bugzilla.redhat.com/show_bug.cgi?id=1128298
[ 16 ] Bug #1123884 - %post scriptlet error on install
https://bugzilla.redhat.com/show_bug.cgi?id=1123884
--------------------------------------------------------------------------------
================================================================================
engauge-digitizer-7.2-1.el6 (FEDORA-EPEL-2016-90481bab12)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- Update to 7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279184 - engauge on el6: not built for missing BR package, log4cpp.
https://bugzilla.redhat.com/show_bug.cgi?id=1279184
--------------------------------------------------------------------------------
================================================================================
epson-inkjet-printer-escpr-1.5.2-3.1lsb3.2.el6 (FEDORA-EPEL-2016-0240e3d1fa)
Drivers for Epson inkjet printers
--------------------------------------------------------------------------------
Update Information:
Roll back to earlier version due to segfaults in the 1.6.x series.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327002 - Printer prints only half of the page, epson-escpr crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1327002
[ 2 ] Bug #1326572 - [abrt] epson-inkjet-printer-escpr: XFIFOClose(): epson-escpr killed
by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1326572
[ 3 ] Bug #1252376 - [abrt] epson-inkjet-printer-escpr: set_pips_parameter():
epson-escpr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1252376
--------------------------------------------------------------------------------
================================================================================
epson-inkjet-printer-escpr-1.6.5-1.1lsb3.2.el6 (FEDORA-EPEL-2016-62625f1a09)
Drivers for Epson inkjet printers
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.5. ---- Update to 1.6.4. Make sure drivers are properly detected
on Fedora platform.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327002 - Printer prints only half of the page, epson-escpr crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1327002
[ 2 ] Bug #1326572 - [abrt] epson-inkjet-printer-escpr: XFIFOClose(): epson-escpr killed
by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1326572
[ 3 ] Bug #1252376 - [abrt] epson-inkjet-printer-escpr: set_pips_parameter():
epson-escpr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1252376
[ 4 ] Bug #1323033 - Epson inkjet driver RPM does not advertise the printers it
supports
https://bugzilla.redhat.com/show_bug.cgi?id=1323033
--------------------------------------------------------------------------------
================================================================================
golang-github-go-ini-ini-1.9.0-0.1.git193d1ec.el6 (FEDORA-EPEL-2016-4d3bf84d8e)
Package ini provides INI file read and write functionality in Go
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327497 - Review Request: golang-github-go-ini-ini - Package ini provides INI
file read and write functionality in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1327497
--------------------------------------------------------------------------------
================================================================================
osbs-client-0.22-1.el6 (FEDORA-EPEL-2016-84663d68f2)
Python command line client for OpenShift Build Service
--------------------------------------------------------------------------------
Update Information:
New upstream release. ---- New upstream release. ---- New upstream release.
---- New upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329027 - osbs-client-0.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1329027
--------------------------------------------------------------------------------