The following Fedora EPEL 6 Security updates need testing:
Age URL
539
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
533
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
464
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
423
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
395
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
125
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53
chicken-4.11.0-3.el6
64
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cb5398893b
nodejs-0.10.48-3.el6
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-851b04cffd
golang-1.7.4-1.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-681fa1a146
hdf5-1.8.5.patch1-10.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a9e593c654
game-music-emu-0.6.1-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dc9e470823
nagios-plugins-2.1.4-2.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7559e54702
tor-0.2.8.12-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac
libbsd-0.8.3-2.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6adac96e8a
seamonkey-2.46-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-245929d91a
tinymce-4.5.1-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
php-symfony-polyfill-1.3.0-1.el6
php-webmozart-assert-1.2.0-1.el6
tinydir-1.2.1-1.el6
tinymce-4.5.1-1.el6
Details about builds:
================================================================================
php-symfony-polyfill-1.3.0-1.el6 (FEDORA-EPEL-2016-9dec38f372)
Symfony polyfills backporting features to lower PHP versions
--------------------------------------------------------------------------------
Update Information:
### v1.3.0 * added polyfill for `is_iterable()` * added polyfills for
`mb_chr()`, `mb_ord()` and `mb_scrub()` * added support for PHP 7.1 * silenced
`iconv_strlen()` in `mb_strlen()` polyfill * bypassed iconv for some charsets in
mb_strlen * fixed `mb_convert_variables()` poylfill
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1394765 - php-symfony-polyfill-v1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1394765
--------------------------------------------------------------------------------
================================================================================
php-webmozart-assert-1.2.0-1.el6 (FEDORA-EPEL-2016-c5489f3581)
Assertions to validate method input/output with nice error messages
--------------------------------------------------------------------------------
Update Information:
### 1.2.0 (2016-11-23) * added `Assert::throws()` * added `Assert::count()` *
added extension point `Assert::reportInvalidArgument()` for custom subclasses
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1398043 - php-webmozart-assert-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1398043
--------------------------------------------------------------------------------
================================================================================
tinydir-1.2.1-1.el6 (FEDORA-EPEL-2016-3d385f8b20)
Portable and easy to integrate C directory and file reader
--------------------------------------------------------------------------------
Update Information:
* Initial rpm-release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408852 - Review Request: tinydir - Portable and easy to integrate C
directory and file reader
https://bugzilla.redhat.com/show_bug.cgi?id=1408852
--------------------------------------------------------------------------------
================================================================================
tinymce-4.5.1-1.el6 (FEDORA-EPEL-2016-245929d91a)
Web based Javascript HTML WYSIWYG editor control
--------------------------------------------------------------------------------
Update Information:
Update to 4.5.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1091438 - CVE-2012-4230 tinymce: XSS attacks via security policy bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1091438
[ 2 ] Bug #1389371 - tinymce: XSS due to media plugin not properly filtering out certain
script attributes
https://bugzilla.redhat.com/show_bug.cgi?id=1389371
--------------------------------------------------------------------------------