The following Fedora EPEL 6 Security updates need testing:
Age URL
202
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
184
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
178
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
109
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6
109
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
97
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36
python-pymongo-3.0.3-1.el6
68
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
39
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d47aefe0b2
roundcubemail-1.0.8-1.el6
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-b94af2e025
seamonkey-2.39-1.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6284ed5bb5
lighttpd-1.4.39-1.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9514f006a5
mono-2.10.8-5.el6
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-b654a785a7
openvpn-2.3.10-1.el6
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-83e43636a6
nodejs-ws-1.0.1-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-819f6356ea
tomcat-7.0.65-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-77ee2edf04
wordpress-4.4.1-1.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-550132e830
flite-1.3-24.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
OCE-0.16.1-5.el6.1
copy-jdk-configs-1.1-3.el6
dislocker-0.5.1-1.el6
dpm-dsi-1.9.7-1.el6
flite-1.3-24.el6
heketi-1.0.2-1.el6
moodle-2.6.11-2.el6
netgen-mesher-5.3.1-4.el6
nodejs-nomnom-1.8.0-1.el6
ocaml-curl-0.5.3-21.el6
perl-Test-Regexp-2015110201-2.el6
php-container-interop-1.1.0-1.el6
python-messaging-1.1-1.el6
python-prompt_toolkit-0.52-2.el6
python-wcwidth-0.1.5-2.el6
qpdfview-0.4.16-1.el6
smesh-6.5.3.1-9.el6.1
tomcat-7.0.65-1.el6
tuxpaint-0.9.22-1.el6
wordpress-4.4.1-1.el6
Details about builds:
================================================================================
OCE-0.16.1-5.el6.1 (FEDORA-EPEL-2015-75c82e0942)
OpenCASCADE Community Edition
--------------------------------------------------------------------------------
Update Information:
* Add OCE-draw to devel package requirements, fixes BZ#1239254. * Update spec
file to use license macro where appropriate. * Perform hardened builds. * Adding
good builds to update to keep them from being deleted. Will add new freecad
build when available.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215085 - update/rebase to 0.16
https://bugzilla.redhat.com/show_bug.cgi?id=1215085
--------------------------------------------------------------------------------
================================================================================
copy-jdk-configs-1.1-3.el6 (FEDORA-EPEL-2016-aa6237387c)
JDKs configuration files copier
--------------------------------------------------------------------------------
Update Information:
pretrasn lua call now done in pcall (protected call) ---- package now
"installs" also during pretrans, so pretrasn scripts can use it ---- initial
package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295701 - Error in PRETRANS scriptlet in rpm package copy-jdk-configs
https://bugzilla.redhat.com/show_bug.cgi?id=1295701
[ 2 ] Bug #1287756 - Review Request: copy-jdk-configs - JDK config files copier
https://bugzilla.redhat.com/show_bug.cgi?id=1287756
--------------------------------------------------------------------------------
================================================================================
dislocker-0.5.1-1.el6 (FEDORA-EPEL-2016-6a784f6978)
Utility to access BitLocker encrypted volumes
--------------------------------------------------------------------------------
Update Information:
dislocker 0.5.1 =============== This version is only used to update dislocker's
brew file for OSX users to be able to download v0.5. If you're not an OSX user,
you can use either v0.5 or v0.5.1, this won't make any difference. dislocker
0.5 ============= Bugfixes -------- * Support for old and new versions of
PolarSSL (now called mbedTLS); * Various crashes have been fixed. Features
improvement -------------------- * Read/write on FAT-formatted volumes
encrypted by BitLocker; * Some Ruby bindings have been added to the library;
* A Ruby script has thus been added to look for BitLocker-encrypted volumes.
Notable changes --------------- * Compilation/installation now goes through
cmake, be sure to review the INSTALL.md file.
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.7-1.el6 (FEDORA-EPEL-2016-d65f2e95b0)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
- fix for Gridftp Redirection: transfers with checksums fail when delayed
passive is enabled - fix for Gridftp Redirection: transfer overwrite fails -
fix for Gridftp logs not compressed - Implemented checksum calculation on the
disknodes with Gridftp Redirection enabled
--------------------------------------------------------------------------------
================================================================================
flite-1.3-24.el6 (FEDORA-EPEL-2016-550132e830)
Small, fast speech synthesis engine (text-to-speech)
--------------------------------------------------------------------------------
Update Information:
Fix insecure temporary file use.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1050998 - CVE-2014-0027 flite: insecure temporary file use [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1050998
--------------------------------------------------------------------------------
================================================================================
heketi-1.0.2-1.el6 (FEDORA-EPEL-2016-139933333e)
RESTful based volume management framework for GlusterFS
--------------------------------------------------------------------------------
Update Information:
Heketi 1.0.2
--------------------------------------------------------------------------------
================================================================================
moodle-2.6.11-2.el6 (FEDORA-EPEL-2016-e32a538943)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Reverted to el6 supported version.
--------------------------------------------------------------------------------
================================================================================
netgen-mesher-5.3.1-4.el6 (FEDORA-EPEL-2015-75c82e0942)
Automatic mesh generation tool
--------------------------------------------------------------------------------
Update Information:
* Add OCE-draw to devel package requirements, fixes BZ#1239254. * Update spec
file to use license macro where appropriate. * Perform hardened builds. * Adding
good builds to update to keep them from being deleted. Will add new freecad
build when available.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215085 - update/rebase to 0.16
https://bugzilla.redhat.com/show_bug.cgi?id=1215085
--------------------------------------------------------------------------------
================================================================================
nodejs-nomnom-1.8.0-1.el6 (FEDORA-EPEL-2016-8f9d0c0fac)
Nodejs option parser with generated usage and commands
--------------------------------------------------------------------------------
Update Information:
initial version
--------------------------------------------------------------------------------
================================================================================
ocaml-curl-0.5.3-21.el6 (FEDORA-EPEL-2016-ab79e762f6)
OCaml Curl library (ocurl)
--------------------------------------------------------------------------------
Update Information:
Initial import to el6
--------------------------------------------------------------------------------
================================================================================
perl-Test-Regexp-2015110201-2.el6 (FEDORA-EPEL-2016-79d5cb0aa3)
Test your regular expressions
--------------------------------------------------------------------------------
Update Information:
This is the first Fedora / EPEL release of perl-Test-Regexp.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1296884 - Review Request: perl-Test-Regexp - Test your regular expressions
https://bugzilla.redhat.com/show_bug.cgi?id=1296884
--------------------------------------------------------------------------------
================================================================================
php-container-interop-1.1.0-1.el6 (FEDORA-EPEL-2016-63cd5fa5f4)
Promoting the interoperability of container objects (DIC, SL, etc.)
--------------------------------------------------------------------------------
Update Information:
container-interop tries to identify and standardize features in container
objects (service locators, dependency injection containers, etc.) to achieve
interopererability. Through discussions and trials, we try to create a
standard, made of common interfaces but also recommendations. If PHP projects
that provide container implementations begin to adopt these common standards,
then PHP applications and projects that use containers can depend on the common
interfaces instead of specific implementations. This facilitates a high-level of
interoperability and flexibility that allows users to consume any container
implementation that can be adapted to these interfaces. The work done in this
project is not officially endorsed by the [
PHP-FIG](http://www.php-fig.org/),
but it is being worked on by members of PHP-FIG and other good developers. We
adhere to the spirit and ideals of PHP-FIG, and hope this project will pave the
way for one or more future PSRs. Autoloader:
`/usr/share/php/Interop/Container/autoload.php`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295255 - Review Request: php-container-interop - Promoting the
interoperability of container objects (DIC, SL, etc.)
https://bugzilla.redhat.com/show_bug.cgi?id=1295255
--------------------------------------------------------------------------------
================================================================================
python-messaging-1.1-1.el6 (FEDORA-EPEL-2016-add8ebdbbb)
Python abstraction of a "message"
--------------------------------------------------------------------------------
Update Information:
Updated to upstream version 1.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1296742 - python-messaging-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1296742
--------------------------------------------------------------------------------
================================================================================
python-prompt_toolkit-0.52-2.el6 (FEDORA-EPEL-2016-d0a73e9a0f)
Library for building powerful interactive command lines in Python
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295154 - Review Request: python-prompt_toolkit - Library for building
powerful interactive command lines in Python
https://bugzilla.redhat.com/show_bug.cgi?id=1295154
--------------------------------------------------------------------------------
================================================================================
python-wcwidth-0.1.5-2.el6 (FEDORA-EPEL-2016-af0dbd1d66)
Measures number of Terminal column cells of wide-character codes
--------------------------------------------------------------------------------
Update Information:
New package to enjoy :)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295152 - Review Request: python-wcwidth - Measures number of Terminal column
cells of wide-character codes
https://bugzilla.redhat.com/show_bug.cgi?id=1295152
--------------------------------------------------------------------------------
================================================================================
qpdfview-0.4.16-1.el6 (FEDORA-EPEL-2016-9220ba7685)
Tabbed PDF Viewer
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
================================================================================
smesh-6.5.3.1-9.el6.1 (FEDORA-EPEL-2015-75c82e0942)
OpenCascade based MESH framework
--------------------------------------------------------------------------------
Update Information:
* Add OCE-draw to devel package requirements, fixes BZ#1239254. * Update spec
file to use license macro where appropriate. * Perform hardened builds. * Adding
good builds to update to keep them from being deleted. Will add new freecad
build when available.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215085 - update/rebase to 0.16
https://bugzilla.redhat.com/show_bug.cgi?id=1215085
--------------------------------------------------------------------------------
================================================================================
tomcat-7.0.65-1.el6 (FEDORA-EPEL-2016-819f6356ea)
Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API
--------------------------------------------------------------------------------
Update Information:
Updated to 7.0.65
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1154978 - Tomcat 7 needs to be upgraded to 7.0.56
https://bugzilla.redhat.com/show_bug.cgi?id=1154978
[ 2 ] Bug #1229649 - tomcat 7.0.33 is outdated and has a bunch of security
vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1229649
[ 3 ] Bug #1140317 - CVE-2013-4444 tomcat: remote code execution via uploaded JSP
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1140317
[ 4 ] Bug #1222577 - CVE-2014-7810 tomcat: Tomcat/JbossWeb: security manager bypass via
EL expressions [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1222577
[ 5 ] Bug #1236920 - CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by
aborting an upload [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1236920
--------------------------------------------------------------------------------
================================================================================
tuxpaint-0.9.22-1.el6 (FEDORA-EPEL-2016-60151f0199)
Drawing program designed for young children
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
================================================================================
wordpress-4.4.1-1.el6 (FEDORA-EPEL-2016-77ee2edf04)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
**WordPress 4.4.1 Security and Maintenance Release** WordPress versions 4.4 and
earlier are affected by a cross-site scripting vulnerability that could allow a
site to be compromised. This was reported by Crtc4L. There were also several
non-security bug fixes: * Emoji support has been updated to include all of the
latest emoji characters, including the new diverse emoji! ������������ * Some sites with
older versions of OpenSSL installed were unable to communicate with other
services provided through some plugins. * If a post URL was ever re-used, the
site could redirect to the wrong post. WordPress 4.4.1 fixes 52 bugs from 4.4.
For more information, see the [release
notes](https://codex.wordpress.org/Version_4.4.1) or consult the [list of
changes](https://core.trac.wordpress.org/query?milestone=4.4.1).
--------------------------------------------------------------------------------