The following Fedora EPEL 6 Security updates need testing:
Age URL
452
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
446
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
378
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
336
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
308
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
194
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-30a8346813
vtun-3.0.1-10.el6
92
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-d0e444c5f2
pypy-5.0.1-4.el6
53
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a1450d7fe0
knot-1.6.8-1.el6
38
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53
chicken-4.11.0-3.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-edda50420f
mongodb-2.4.14-4.el6
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-25e30f6dc3
jansson-2.9-1.el6
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8602185c5
links-2.13-1.el6
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1117d3c7f6
golang-1.7.1-1.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-efb0141e9c
php-ZendFramework-1.12.20-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-63189174a4
nsd-4.1.13-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3428efd3c
php-symfony-2.3.42-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
checksec-1.7.4-2.el6
nsd-4.1.13-1.el6
php-symfony-2.3.42-1.el6
python-filelock-2.0.6-2.el6
rubygem-sequel-4.39.0-1.el6
tor-0.2.8.8-1.el6
Details about builds:
================================================================================
checksec-1.7.4-2.el6 (FEDORA-EPEL-2016-8501a47a5a)
Tool to check system for binary-hardening
--------------------------------------------------------------------------------
Update Information:
###Update to 1.7.4 - Update to forked version - Add missing runtime-dependencies
- Add manpage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1240391 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1240391
[ 2 ] Bug #1380950 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380950
--------------------------------------------------------------------------------
================================================================================
nsd-4.1.13-1.el6 (FEDORA-EPEL-2016-63189174a4)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Updated to 4.1.13 (CVE-2016-6173, OPENPGPKEY support)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1353578 - CVE-2016-6173 nsd: Improper restriction of zone size limit
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1353578
--------------------------------------------------------------------------------
================================================================================
php-symfony-2.3.42-1.el6 (FEDORA-EPEL-2016-e3428efd3c)
PHP framework for web projects
--------------------------------------------------------------------------------
Update Information:
See [2.3 change
log](https://github.com/symfony/symfony/blob/v2.3.42/CHANGELOG-2.3.md).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340834 - CVE-2016-4423 php-symfony: Large username storage in session
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1340834
[ 2 ] Bug #1340831 - CVE-2016-1902 php-symfony: SecureRandom's fallback not secure
when OpenSSL fails [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1340831
--------------------------------------------------------------------------------
================================================================================
python-filelock-2.0.6-2.el6 (FEDORA-EPEL-2016-0fdf697d47)
A platform independent file lock
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1332052 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1332052
--------------------------------------------------------------------------------
================================================================================
rubygem-sequel-4.39.0-1.el6 (FEDORA-EPEL-2016-096559c51f)
The Database Toolkit for Ruby
--------------------------------------------------------------------------------
Update Information:
Upgrate to sequel 4.39.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381079 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1381079
--------------------------------------------------------------------------------
================================================================================
tor-0.2.8.8-1.el6 (FEDORA-EPEL-2016-fdf91ff7a8)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to upstream release 0.2.8.8
--------------------------------------------------------------------------------