The following Fedora EPEL 6 Security updates need testing:
Age URL
113
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
96
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
90
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36
python-pymongo-3.0.3-1.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d6cc67d0d6
opensmtpd-5.7.3p1-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-443fc5a151
drupal7-jquery_update-2.6-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e477a96c0d
mbedtls-1.3.14-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
alpine-2.20-2.el6
ansible-1.9.4-1.el6
copr-cli-1.45-1.el6
drupal7-addressfield-1.2-2.el6
drupal7-date-2.9-1.el6
drupal7-jquery_update-2.6-1.el6
drupal7-pathauto-1.3-2.el6
mbedtls-1.3.14-1.el6
msr-tools-1.3-3.el6
nodejs-basic-auth-1.0.3-3.el6
nodejs-content-type-1.0.1-1.el6
nodejs-when-3.7.3-3.el6
php-aws-sdk-2.8.21-1.el6
php-egulias-email-validator-1.2.10-1.el6
php-google-apiclient-1.1.5-1.el6
php-scssphp-0.3.2-1.el6
php-twig-1.22.2-1.el6
python-cpopen-1.4-0.el6
qpdfview-0.4.15-1.el6
youtube-dl-2015.10.09-1.el6
Details about builds:
================================================================================
alpine-2.20-2.el6 (FEDORA-EPEL-2015-ffc1da1e1b)
powerful, easy to use console email client
--------------------------------------------------------------------------------
Update Information:
alpine-2.20-2.el6 - use patched alpine sources (#1270331,#1270183)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270183 - Restore ignore size change patch
https://bugzilla.redhat.com/show_bug.cgi?id=1270183
--------------------------------------------------------------------------------
================================================================================
ansible-1.9.4-1.el6 (FEDORA-EPEL-2015-1ba9b07c1e)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
ansible-1.9.4-1.fc21 - Update to 1.9.4 ansible-1.9.4-1.fc22 - Update to
1.9.4 ansible-1.9.4-1.el6 - Update to 1.9.4 ansible-1.9.4-1.el7 - Update
to 1.9.4 ansible-1.9.4-1.fc23 - Update to 1.9.4 ---- Backport dnf module
from head. Fixes bug #1267018 ---- Update to 1.9.3 and added fix for yum
state=latest ---- Update to 1.9.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1267018 - dnf module uses /usr/bin/repoquery
https://bugzilla.redhat.com/show_bug.cgi?id=1267018
[ 2 ] Bug #1258080 - ansible_pkg_mgr should be dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1258080
[ 3 ] Bug #1251392 - Ansible docker module fails after installing docker-python from
RHEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1251392
[ 4 ] Bug #1258799 - Missing Dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1258799
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.45-1.el6 (FEDORA-EPEL-2015-245dbd46e3)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
Allow to send builds in the group project.
--------------------------------------------------------------------------------
================================================================================
drupal7-addressfield-1.2-2.el6 (FEDORA-EPEL-2015-b462f2402e)
Manage a flexible address field, implementing the xNAL standard
--------------------------------------------------------------------------------
Update Information:
Changes since 7.x-1.1: * Issue #2507665 by joelpittet:
addressfield_get_administrative_areas calls t() nearly 1000 times in one call *
Issue #2566773: Wrong CSS class for organisation_block in
addressfield_format_organisation_generate * Issue #2578387: CZ and SK have
required postal codes * Issue #2570281 by michel.settembrino: Drupal coding
standards not followed into addressfield.feeds.inc * Issue #2579129 by skadu:
Autocomplete Attribute Typo * Update address formats for Chile and Colombia,
based on Google dataset changes. * Remove administrative areas with duplicate
keys (defined more than once). * Issue #2528406 by rrfegade: Spelling errors in
D7 * Stop passing non-english administrative areas to t() in
addressfield_get_administrative_areas(). * Issue #2546316 by jrb: PHP
recoverable fatal error in addressfield when using AJAX * Issue #2530250 by
rrfegade: Remove unused varibles from D7 * Issue #2421211 by blazey, 7thkey:
Administrative Area in Views is rendering key value rather than the rendered
string * Issue #2151903 followup: Update addresses.txt for the sub_premise
field. * Issue #2510780 by rlhawk: Administrative area for addresses in South
Korea should be rendered * Issue #2479205 by marcvangend: Remove "not
recommended" from "make all fields optional" and provide real information
instead * Issue #2490983 by FMB: Use Lleida and Girona instead of Lérida and
Gerona
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270071 - drupal7-addressfield-1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1270071
--------------------------------------------------------------------------------
================================================================================
drupal7-date-2.9-1.el6 (FEDORA-EPEL-2015-d37fa55b7d)
This package contains both the Date module and a Date API module
--------------------------------------------------------------------------------
Update Information:
Updated to upstream 2.9 Release notes: *
[
7.x-2.9](https://www.drupal.org/node/2565073) *
[
7.x-2.9-rc1](https://www.drupal.org/node/2460727) *
[
7.x-2.9-beta2](https://www.drupal.org/node/2387349) *
[
7.x-2.9-beta1](https://www.drupal.org/node/2371799) *
[
7.x-2.9-alpha2](https://www.drupal.org/node/2344525) *
[
7.x-2.9-alpha1](https://www.drupal.org/node/2313405) *
[
7.x-2.8](https://www.drupal.org/node/2311887) *
[
7.x-2.8-beta2](https://www.drupal.org/node/2309917) *
[
7.x-2.8-beta1](https://www.drupal.org/node/2290333) *
[
7.x-2.7](https://www.drupal.org/node/2161141) *
[
7.x-2.6](https://www.drupal.org/node/1727916) *
[
7.x-2.5](https://www.drupal.org/node/1539362)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1261221 - drupal7-date-2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1261221
--------------------------------------------------------------------------------
================================================================================
drupal7-jquery_update-2.6-1.el6 (FEDORA-EPEL-2015-443fc5a151)
Upgrades the version of jQuery in Drupal core to a newer version of jQuery
--------------------------------------------------------------------------------
Update Information:
See [jQuery Update - Less Critical - Open Redirect - SA-
CONTRIB-2015-123](https://www.drupal.org/node/2507729) Changes since 7.x-2.5 (3
commits): * Updating overlay code to match core * Issue #2466329 by hanoii:
Update 1.7 to 1.7.2 * Issue #1546668 by sergey.semashko, RobLoach: Update to
jQuery 1.8.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222725 - drupal7-jquery_update-3.0-alpha2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1222725
--------------------------------------------------------------------------------
================================================================================
drupal7-pathauto-1.3-2.el6 (FEDORA-EPEL-2015-0ff88a97fc)
Automatically generates URL/path aliases for various kinds of content
--------------------------------------------------------------------------------
Update Information:
Changes since 7.x-1.2: * Issue #936222 by mvc, quicksketch, joelpittet, Dave
Reid, sammarks15, brianV, RoloDMonkey, bvanmeurs, effulgentsia, jucallme,
ponies, Island Usurper, Pancho, iamEAP, pinoniq, bibishani, Gábor Hojtsy,
emanaton, populist, mrmikedewolf, klonos, dsnopek, Fabianx, MiroslavBanov,
JamesOakley, acbramley, jstoller, DamienMcKenna, mattlt, rv0: Merged in
pathauto_persist module functionality to prevent losing manual aliases when
calling node_save(). * Issue #1909400 by Dave Reid: Removed the hacky
pathauto_module_implements_alter() and moved core implementations to
pathauto.module. * Issue #2423077 by Dave Reid, TuWebO: Fixed wrong parameters
passed to truncate_utf8() from pathauto_alias_uniquify(). * Issue #897310 by
gordon, Dave Reid: Added features integration for exporting pathauto patterns
along with node types and taxonomy vocabularies. * Issue #2434675 by mtift:
Clarify when hook_pathauto_pattern_alter() is called. * Issue #1128870 by
mikeryan, badrange, EclipseGc, Dave Reid: Added Migrate module integration. *
Issue #2372101 by mfb: Fixed mb_eregi_replace() called without first calling
mb_regex_encoding() and setting encoding to UTF-8. * Issue #1430898 by Dave
Reid: Fixed pathauto_install() should not overwrite any existing pattern
variables. * Issue #2067191 by bneil, Martijn Houtman, stefan.r, rv0,
DamienMcKenna, Dave Reid: Fixed path_pathauto_is_alias_reserved() does not
handle language-neutral aliases correctly, possibly resulting in duplicate
aliases. * Issue #2114323 by alberto56, jarkkotuunanen, ollii, frakke: Switched
using taxonomy_get_tree() to taxonomy_get_children() which fixes field tokens
not generated for any child aliases, and improves performance. * Fixed docs in
pathauto.inc. * Fixed _pathauto_alias_exists(). * Issue #2351205 by
basvanderheijden: Fixed Drupal.behaviors.pathFieldsetSummaries did not use
context. * Issue #2511988 by rrfegade: Fixed documentation spelling errors. *
Issue #1784874 by Dave Reid, aaronbauman: Converted admin UI to use the token
dialog. * Issue #801702 by IceCreamYou, Dave Reid, m4olivei, mojzis: Updated API
documentation. * Fixed error in hook_pathauto_pattern_alter() example code. *
Issue #2272871 by Dave Reid, Elijah Lynn: Fixed "Do nothing. Leave old alias
intact" update action should hide the Pathauto checkbox on existing content. *
Issue #2272871 by Elijah Lynn, Dave Reid: Fixed "Do nothing. Leave old alias
intact" does not uncheck "Generate automatic URL alias" checkbox on first
edit
of existing content, but does on subsequent edits. * Fixed example
hook_pathauto_pattern_alter(). * Simplify invocations of pathauto_cleanstring()
by both accepting $options['langauge'] and $options['langcode']. Fixed the
array
:join-path token did not pass options into pathauto_cleanstring(). * Small
optimization to pathauto_clean_token_values(). * Issue #1574700 by jgSnell,
fletchgqc: Clarified transliteration help text means US-ASCII instead of
ASCII-96. * Issue #1586172 by jaydub: Fixed link to Redirect module settings
page from Pathauto settings page. * Issue #2174603: Added support for an
$options['force'] parameter in pathauto_*_update_alias() callbacks that ignores
the $object->path['pathauto'] value and will always perform aliasing. * Issue
#1834666 by greggles: Update README.txt maintainers * Issue #1988226: Fixed
@todo link in _pathauto_path_is_callback to correct core issue. * Revert "Issue
#1988226: Fixed @todo link in _pathauto_path_is_callback to correct core issue."
* Issue #1909370: Added documentation for hook_pathauto_is_alias_reserved(). *
Issue #1565850: Added hook_pathauto_pattern_alter(). * Issue #1909370: Added a
hook_pathauto_is_alias_reserved(). * Issue #1003490: Renamed 'Bulk update' tab
to 'Bulk generate' to better reflect actual functionality. * Issue Follow-up
#1781302: Added return value to the pathauto_blog_update_alias() function. *
Issue #1781302: Added return values to the pathauto_*_update_alias() functions.
* Issue #1899806: Fixed URL segments with empty tokens inbetween separator
resulted in duplicated backslashes in Pathauto alias. * Issue #973908: Fix
pathauto_cleanstring() lacks language context. * Issue #1796920: Fixed
pathauto_action_info() did not define the required 'triggers' property for each
action.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270073 - drupal7-pathauto-1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1270073
--------------------------------------------------------------------------------
================================================================================
mbedtls-1.3.14-1.el6 (FEDORA-EPEL-2015-e477a96c0d)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 1.3.14 - CVE-2015-5291 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.1.2-and-1.3.14-and-polarssl-1.2.17-released Security
notes:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-
advisory-2015-01
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270170 - CVE-2015-5291 polarssl: mbedtls: crash or remote code execution on
clients using session tickets or SNI
https://bugzilla.redhat.com/show_bug.cgi?id=1270170
--------------------------------------------------------------------------------
================================================================================
msr-tools-1.3-3.el6 (FEDORA-EPEL-2015-e0c5f9414f)
Collection of tools for reading/writing CPU model specific registers
--------------------------------------------------------------------------------
Update Information:
Support for increased number of processors
--------------------------------------------------------------------------------
================================================================================
nodejs-basic-auth-1.0.3-3.el6 (FEDORA-EPEL-2015-90ed864a8d)
Generic basic auth Authorization header field parser for whatever
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269559 - Review Request: nodejs-basic-auth - Basic auth Authorization header
field parser
https://bugzilla.redhat.com/show_bug.cgi?id=1269559
--------------------------------------------------------------------------------
================================================================================
nodejs-content-type-1.0.1-1.el6 (FEDORA-EPEL-2015-1fd877571b)
Create and parse HTTP Content-Type header according to RFC 7231
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269620 - Review Request: nodejs-content-type - Create and parse HTTP
Content-Type header
https://bugzilla.redhat.com/show_bug.cgi?id=1269620
--------------------------------------------------------------------------------
================================================================================
nodejs-when-3.7.3-3.el6 (FEDORA-EPEL-2015-73efb546d5)
A lightweight Promises/A+ and when() implementation
--------------------------------------------------------------------------------
Update Information:
Initial packaging for EPEL6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269287 - Review Request: nodejs-when - A lightweight Promises/A+ and when()
implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1269287
--------------------------------------------------------------------------------
================================================================================
php-aws-sdk-2.8.21-1.el6 (FEDORA-EPEL-2015-6c06c0f0db)
Amazon Web Services framework for PHP
--------------------------------------------------------------------------------
Update Information:
### 2.8.21 - 2015-09-16 * `Aws\Ec2` - Added support for the "diversified"
SpotFleet allocation strategy. * `Aws\Ec2` - Added support for reading
`StateMessage` and `DataEncryptionKeyId` from a `DescribeSnapshots` response.
* `Aws\Iam` - Added support for new policy simulation APIs. * `Aws\Kinesis` -
Added support for timestamped GetRecords call. * `Aws\MachineLearning` - Fixed
invalid validation constraint on `Predict` operation. * `Aws\OpsWorks` - Added
support for operations on ECS clusters. * `Aws\Route53` - Added support for
calculated and latency health checks. * `Aws\S3` - Added support for new
`STANDARD_IA` storage class. * `Aws\S3` - Added support for specifying storage
class in cross-region replication configuration. * `Aws\StorageGateway` -
Added support for tagging and untagging resources.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1264060 - php-aws-sdk-2.8.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1264060
--------------------------------------------------------------------------------
================================================================================
php-egulias-email-validator-1.2.10-1.el6 (FEDORA-EPEL-2015-78459a326e)
A library for validating emails
--------------------------------------------------------------------------------
Update Information:
Improve parenthesis control for unclosed parenthesis
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270623 - php-egulias-email-validator-1.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1270623
--------------------------------------------------------------------------------
================================================================================
php-google-apiclient-1.1.5-1.el6 (FEDORA-EPEL-2015-c2100d0c0d)
Client library for Google APIs
--------------------------------------------------------------------------------
Update Information:
Changes since 1.1.4:
https://github.com/google/google-api-php-
client/compare/1.1.4...1.1.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1266282 - php-google-apiclient-1.1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1266282
--------------------------------------------------------------------------------
================================================================================
php-scssphp-0.3.2-1.el6 (FEDORA-EPEL-2015-e68b03fadb)
A compiler for SCSS written in PHP
--------------------------------------------------------------------------------
Update Information:
### v0.3.2 #### Compatibility * Fix `@extend` behavior when interpolating
variable containing a selector list * Hoist `@keyframes` so children selectors
will not be prefixed by parent selector * Don't wrap `@import` inside `@media`
query * Partial `@at-root` support; `with:` and `without:` not yet supported *
Partial `call()` support; `kwargs` not yet supported * String-based keys
mismatch in map functions * Short-circuit evaluation for `and`, `or`, and `if()`
#### Other * Compiler: `getParsedFiles()` now includes the main file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1268709 - php-scssphp-v0.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1268709
--------------------------------------------------------------------------------
================================================================================
php-twig-1.22.2-1.el6 (FEDORA-EPEL-2015-20cebb64ac)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
### 1.22.2 (2015-09-22) * fixed a race condition in template loading ###
1.22.1 (2015-09-15) * fixed regression in template_from_string ### 1.22.0
(2015-09-13) * made Twig_Test_IntegrationTestCase more flexible * added an
option to force PHP bytecode invalidation when writing a compiled template into
the cache * fixed the profiler duration for the root node * changed template
cache names to take into account enabled extensions * deprecated
Twig_Environment::clearCacheFiles(), Twig_Environment::getCacheFilename(),
Twig_Environment::writeCacheFile(), and
Twig_Environment::getTemplateClassPrefix() * added a way to override the
filesystem template cache system * added a way to get the original template
source from Twig_Template
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1262655 - php-twig-v1.22.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1262655
--------------------------------------------------------------------------------
================================================================================
python-cpopen-1.4-0.el6 (FEDORA-EPEL-2015-3c1ba51c55)
Creates a sub-process in simpler safer manner
--------------------------------------------------------------------------------
Update Information:
- Rebuilt. ---- Increase release to commit int F19 branch which contains not
updated 1.3-3
--------------------------------------------------------------------------------
================================================================================
qpdfview-0.4.15-1.el6 (FEDORA-EPEL-2015-3cbab37d43)
Tabbed PDF Viewer
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2015.10.09-1.el6 (FEDORA-EPEL-2015-58ba741890)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to the latest release (#1265448)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1265448 - youtube-dl-2015.10.06.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1265448
--------------------------------------------------------------------------------