The following Fedora EPEL 6 Security updates need testing:
Age URL
167
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
150
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
144
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
75
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6
75
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
63
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36
python-pymongo-3.0.3-1.el6
34
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
20
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b76c1e5912
potrace-1.13-2.el6
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-49101d6eb9
imapsync-1.644-2.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7e6c3ce778
knot-1.6.6-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-c3b0e79630
LibRaw-0.16.2-3.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e3bc44964c
libpng10-1.0.65-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-da771a002d
moodle-2.7.11-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
copy-jdk-configs-1.1-1.el6
libmediainfo-0.7.80-1.el6
libpng10-1.0.65-1.el6
mediainfo-0.7.80-1.el6
moodle-2.7.11-1.el6
perl-File-Touch-0.10-1.el6
php-latte-2.3.8-1.el6
php-nette-database-2.3.8-1.el6
php-nette-di-2.3.7-1.el6
php-nette-php-generator-2.3.5-1.el6
python-pyrfc3339-1.0-1.el6
Details about builds:
================================================================================
copy-jdk-configs-1.1-1.el6 (FEDORA-EPEL-2015-1472d4279f)
JDKs configuration files copier
--------------------------------------------------------------------------------
Update Information:
initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1287756 - Review Request: copy-jdk-configs - JDK config files copier
https://bugzilla.redhat.com/show_bug.cgi?id=1287756
--------------------------------------------------------------------------------
================================================================================
libmediainfo-0.7.80-1.el6 (FEDORA-EPEL-2015-21449db2ed)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.80. ---- use cmake
--------------------------------------------------------------------------------
================================================================================
libpng10-1.0.65-1.el6 (FEDORA-EPEL-2015-e3bc44964c)
Old version of libpng, needed to run old binaries
--------------------------------------------------------------------------------
Update Information:
The fix for CVE-8126 was incomplete in the previous 1.0.64 update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1281756 - CVE-2015-8126 libpng: Buffer overflow vulnerabilities in
png_get_PLTE/png_set_PLTE functions
https://bugzilla.redhat.com/show_bug.cgi?id=1281756
--------------------------------------------------------------------------------
================================================================================
mediainfo-0.7.80-1.el6 (FEDORA-EPEL-2015-21449db2ed)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.80. ---- use cmake
--------------------------------------------------------------------------------
================================================================================
moodle-2.7.11-1.el6 (FEDORA-EPEL-2015-da771a002d)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Security update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288159 - CVE-2015-5331 CVE-2015-5332 CVE-2015-5335 CVE-2015-5336
CVE-2015-5337 CVE-2015-5338 CVE-2015-5339 CVE-2015-5340 CVE-2015-5341 CVE-2015-5342
moodle: Multiple security issues fixed in 2.7.11, 2.8.9, 2.9.3 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1288159
[ 2 ] Bug #1264868 - CVE-2015-5264 CVE-2015-5265 CVE-2015-5266 CVE-2015-5267
CVE-2015-5272 CVE-2015-5268 CVE-2015-5269 moodle: Multiple security issues (MSA-15-0030,
MSA-15-0031, MSA-15-0032, MSA-15-0033, MSA-15-0034, MSA-15-0035, MSA-15-0036)
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1264868
--------------------------------------------------------------------------------
================================================================================
perl-File-Touch-0.10-1.el6 (FEDORA-EPEL-2015-0679fe74a2)
Update access, modification timestamps, creating nonexistent files
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285407 - Upgrade perl-File-Touch to 0.10
https://bugzilla.redhat.com/show_bug.cgi?id=1285407
--------------------------------------------------------------------------------
================================================================================
php-latte-2.3.8-1.el6 (FEDORA-EPEL-2015-4d3079a33e)
Latte: the amazing template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.8** * better error messages *
Engine::renderToString handles Throwable errors * Engine: improved exception
info when template contains parse error
--------------------------------------------------------------------------------
================================================================================
php-nette-database-2.3.8-1.el6 (FEDORA-EPEL-2015-44df261c98)
Nette Database Component
--------------------------------------------------------------------------------
Update Information:
Nette provides a powerful layer for accessing your database easily. - composes
SQL queries with ease - easily fetches data - uses efficient queries and does
not transmit unnecessary data The Nette\Database\Connection class is a wrapper
around the PDO and represents a connection to the database. The core
functionality is provided by Nette\Database\Context. Nette\Database\Table layer
provides an enhanced layer for table querying. To use this library, you just
have to add, in your project: require_once
'/usr/share/php/Nette/Database/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277474 - Review Request: php-nette-database - Nette Database Component
https://bugzilla.redhat.com/show_bug.cgi?id=1277474
--------------------------------------------------------------------------------
================================================================================
php-nette-di-2.3.7-1.el6 (FEDORA-EPEL-2015-a6c028e240)
Nette Dependency Injection Component
--------------------------------------------------------------------------------
Update Information:
Purpose of the Dependecy Injection (DI) is to free classes from the
responsibility for obtaining objects that they need for its operation (these
objects are called services). To pass them these services on their instantiation
instead. Nette DI is one of the most interesting part of framework. It is
compiled DI container, extremely fast and easy to configure. To use this
library, you just have to add, in your project: require_once
'/usr/share/php/Nette/DI/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277397 - Review Request: php-nette-di - Nette Dependency Injection
Component
https://bugzilla.redhat.com/show_bug.cgi?id=1277397
--------------------------------------------------------------------------------
================================================================================
php-nette-php-generator-2.3.5-1.el6 (FEDORA-EPEL-2015-e3bba7d443)
Nette PHP Generator
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.5** * ClassType, Method: class types are not
resolved when namespace is not specified [#21]
--------------------------------------------------------------------------------
================================================================================
python-pyrfc3339-1.0-1.el6 (FEDORA-EPEL-2015-c6dc47f216)
Generate and parse RFC 3339 timestamps
--------------------------------------------------------------------------------
Update Information:
Adding to EL
--------------------------------------------------------------------------------