The following Fedora EPEL 6 Security updates need testing:
Age URL
207 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
189 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
183 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
115 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148
optipng-0.7.5-5.el6
115 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156
nagios-4.0.8-1.el6
103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36
python-pymongo-3.0.3-1.el6
73 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
45 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9514f006a5
mono-2.10.8-5.el6
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-b654a785a7
openvpn-2.3.10-1.el6
8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-83e43636a6
nodejs-ws-1.0.1-1.el6
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-819f6356ea
tomcat-7.0.65-1.el6
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-77ee2edf04
wordpress-4.4.1-1.el6
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-550132e830
flite-1.3-24.el6
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7601108cdf
keepassx-0.4.4-1.el6
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-570414d664
prosody-0.9.9-2.el6
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2b26e78b1e
owncloud-7.0.12-1.el6
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-75614c9a4f
mbedtls-2.2.1-1.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7aa48cd8b9
python-rsa-3.3-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
ansible-2.0.0.1-1.el6
cppformat-2.0.0-1.el6
dpm-dsi-1.9.7-2.el6
globus-gridftp-server-9.4-1.el6
globus-gridmap-eppn-callout-1.9-1.el6
globus-gssapi-gsi-11.25-1.el6
globus-net-manager-0.14-1.el6
golang-github-armon-circbuf-0-0.5.gitbbbad09.el6
golang-github-armon-go-radix-0-0.4.gitfbd82e8.el6
golang-github-boltdb-bolt-1.0-0.4.git0b00eff.el6
golang-github-fsouza-go-dockerclient-0.2.1-12.git2350d7b.el6
golang-github-hashicorp-golang-lru-0-0.4.gita6091bb.el6
golang-github-hashicorp-hcl-0-0.5.git2deb1d1.el6
golang-github-hashicorp-logutils-0-0.4.git0dc08b1.el6
golang-github-hashicorp-memberlist-0-0.4.git28424fb.el6
golang-github-hashicorp-raft-0-0.4.gitd136cd1.el6
golang-github-hashicorp-scada-client-0-0.4.git84989fd.el6
golang-github-hashicorp-yamux-0-0.4.gitdf94978.el6
golang-github-miekg-dns-0-0.7.gitd274557.el6
golang-github-mitchellh-mapstructure-0-0.8.git281073e.el6
golang-github-ryanuber-columnize-0-0.2.git983d3a5.el6
inxi-2.2.32-1.el6
nodejs-chainsaw-0.1.0-2.el6
nodejs-deep-extend-0.3.2-2.el6
nodejs-duplexer-0.1.1-2.el6
nodejs-duplexify-3.2.0-2.el6
nodejs-end-of-stream-1.1.0-2.el6
nodejs-freetree-0.2.1-2.el6
nodejs-rc-0.5.4-3.el6
nodejs-read-all-stream-0.1.2-3.el6
nodejs-through2-0.6.3-2.el6
nodejs-timed-out-2.0.0-3.el6
nodejs-xtend-4.0.0-3.el6
ola-0.10.0-4.el6
openblas-0.2.15-5.el6
python-rsa-3.3-2.el6
Details about builds:
================================================================================
ansible-2.0.0.1-1.el6 (FEDORA-EPEL-2016-27ec3c5392)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Ansible v2 with many bugfixes and new features. See upstream changelog for
details: https://github.com/ansible/ansible/blob/devel/CHANGELOG.md
--------------------------------------------------------------------------------
================================================================================
cppformat-2.0.0-1.el6 (FEDORA-EPEL-2016-20af0aff0c)
Small, safe and fast formatting library for C++
--------------------------------------------------------------------------------
Update Information:
https://github.com/cppformat/cppformat/compare/1.1.0...2.0.0
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.7-2.el6 (FEDORA-EPEL-2016-29c460a42f)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-9.4-1.el6 (FEDORA-EPEL-2016-29c460a42f)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-gridmap-eppn-callout-1.9-1.el6 (FEDORA-EPEL-2016-29c460a42f)
Globus Toolkit - Globus gridmap ePPN callout
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-11.25-1.el6 (FEDORA-EPEL-2016-29c460a42f)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
globus-net-manager-0.14-1.el6 (FEDORA-EPEL-2016-29c460a42f)
Globus Toolkit - Network Manager
--------------------------------------------------------------------------------
Update Information:
globus-gridmap-eppn-callout-1.9-1: - GT-373: add support for proxies to eppn
callout globus-net-manager-0.14-1: - pre_connect return attrs get set on attr,
not handle globus-gssapi-gsi-11.25-1: - support loading mutiple extra CA certs
globus-gridftp-server-9.4-1: - fix mem error when sharing dpm-dsi-1.9.7-2: -
Rebuild for globus-gridftp-server 9.4 ---- - fix for Gridftp Redirection:
transfers with checksums fail when delayed passive is enabled - fix for Gridftp
Redirection: transfer overwrite fails - fix for Gridftp logs not compressed -
Implemented checksum calculation on the disknodes with Gridftp Redirection
enabled
--------------------------------------------------------------------------------
================================================================================
golang-github-armon-circbuf-0-0.5.gitbbbad09.el6 (FEDORA-EPEL-2016-041e6be102)
Golang circular (ring) buffer
--------------------------------------------------------------------------------
Update Information:
Update ---- Update of spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248497 - Tracker for golang-github-armon-circbuf
https://bugzilla.redhat.com/show_bug.cgi?id=1248497
--------------------------------------------------------------------------------
================================================================================
golang-github-armon-go-radix-0-0.4.gitfbd82e8.el6 (FEDORA-EPEL-2016-dc4138e175)
Golang implementation of Radix trees
--------------------------------------------------------------------------------
Update Information:
Update ---- Update of spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248654 - Tracker for golang-github-armon-go-radix
https://bugzilla.redhat.com/show_bug.cgi?id=1248654
--------------------------------------------------------------------------------
================================================================================
golang-github-boltdb-bolt-1.0-0.4.git0b00eff.el6 (FEDORA-EPEL-2016-fdc2cf7496)
A low-level key/value database for Go
--------------------------------------------------------------------------------
Update Information:
Update ---- Bump to upstream 90fef389f98027ca55594edd7dbd6e7f3926fdad ----
Update of spec file to spec-2.0 Bump to upstream
980670afcebfd86727505b3061d8667195234816
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246207 - Tracker for golang-github-boltdb-bolt
https://bugzilla.redhat.com/show_bug.cgi?id=1246207
--------------------------------------------------------------------------------
================================================================================
golang-github-fsouza-go-dockerclient-0.2.1-12.git2350d7b.el6
(FEDORA-EPEL-2016-0c32da28cc)
Client for the Docker remote API
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215656 - Tracker for golang-github-fsouza-go-dockerclient
https://bugzilla.redhat.com/show_bug.cgi?id=1215656
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-golang-lru-0-0.4.gita6091bb.el6
(FEDORA-EPEL-2016-12a11fa47b)
Golang LRU cache
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250464 - Tracker for golang-github-hashicorp-golang-lru
https://bugzilla.redhat.com/show_bug.cgi?id=1250464
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-hcl-0-0.5.git2deb1d1.el6 (FEDORA-EPEL-2016-52a57ce4bd)
HCL is a configuration language
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250468 - Tracker for golang-github-hashicorp-hcl
https://bugzilla.redhat.com/show_bug.cgi?id=1250468
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-logutils-0-0.4.git0dc08b1.el6
(FEDORA-EPEL-2016-4797b29e12)
Utilities for slightly better logging in Go
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250469 - Tracker for golang-github-hashicorp-logutils
https://bugzilla.redhat.com/show_bug.cgi?id=1250469
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-memberlist-0-0.4.git28424fb.el6
(FEDORA-EPEL-2016-b5dfc87fc3)
Golang package for gossip based membership and failure detection
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250471 - Tracker for golang-github-hashicorp-memberlist
https://bugzilla.redhat.com/show_bug.cgi?id=1250471
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-raft-0-0.4.gitd136cd1.el6 (FEDORA-EPEL-2016-26c8482395)
Golang implementation of the Raft consensus protocol
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250473 - Tracker for golang-github-hashicorp-raft
https://bugzilla.redhat.com/show_bug.cgi?id=1250473
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-scada-client-0-0.4.git84989fd.el6
(FEDORA-EPEL-2016-3fdf41c0d4)
Implements a Golang client to the HashiCorp SCADA system
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250476 - Tracker for golang-github-hashicorp-scada-client
https://bugzilla.redhat.com/show_bug.cgi?id=1250476
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-yamux-0-0.4.gitdf94978.el6
(FEDORA-EPEL-2016-eea9d8ed28)
Golang connection multiplexing library
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250478 - Tracker for golang-github-hashicorp-yamux
https://bugzilla.redhat.com/show_bug.cgi?id=1250478
--------------------------------------------------------------------------------
================================================================================
golang-github-miekg-dns-0-0.7.gitd274557.el6 (FEDORA-EPEL-2016-9bfc06feea)
DNS library in Go
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250494 - Tracker for golang-github-miekg-dns
https://bugzilla.redhat.com/show_bug.cgi?id=1250494
--------------------------------------------------------------------------------
================================================================================
golang-github-mitchellh-mapstructure-0-0.8.git281073e.el6
(FEDORA-EPEL-2016-99051dfc7f)
Go library for decoding generic map values into native Go structures
--------------------------------------------------------------------------------
Update Information:
Update ---- Update spec file to spec-2.0 Choose the correct architecture
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1243892 - Tracker for golang-github-mitchellh-mapstructure
https://bugzilla.redhat.com/show_bug.cgi?id=1243892
--------------------------------------------------------------------------------
================================================================================
golang-github-ryanuber-columnize-0-0.2.git983d3a5.el6
(FEDORA-EPEL-2016-3a4274b2fa)
Easy column formatted output for golang
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250502 - Tracker for golang-github-ryanuber-columnize
https://bugzilla.redhat.com/show_bug.cgi?id=1250502
--------------------------------------------------------------------------------
================================================================================
inxi-2.2.32-1.el6 (FEDORA-EPEL-2016-09748c1c1a)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.32
--------------------------------------------------------------------------------
================================================================================
nodejs-chainsaw-0.1.0-2.el6 (FEDORA-EPEL-2016-82352b79d1)
Build chainable fluent interfaces the easy way
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-deep-extend-0.3.2-2.el6 (FEDORA-EPEL-2016-e0bc6dcf5b)
Recursive object extending
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-duplexer-0.1.1-2.el6 (FEDORA-EPEL-2016-091d182857)
Creates a duplex stream
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-duplexify-3.2.0-2.el6 (FEDORA-EPEL-2016-4b2b750e10)
Turn a writeable and readable stream into a single streams2 duplex stream
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-end-of-stream-1.1.0-2.el6 (FEDORA-EPEL-2016-87dd1684cf)
Call a callback when a readable/writable/duplex stream has completed or failed
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-freetree-0.2.1-2.el6 (FEDORA-EPEL-2016-1148875f93)
A node module for creating tree data structure from text input
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-rc-0.5.4-3.el6 (FEDORA-EPEL-2016-a29da9c580)
Hardwired configuration loader
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-read-all-stream-0.1.2-3.el6 (FEDORA-EPEL-2016-06ca2cd2e5)
Read all stream content and pass it to callback
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-through2-0.6.3-2.el6 (FEDORA-EPEL-2016-98262c0f0f)
Node streams2 Transform wrapper to avoid explicit subclassing noise
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-timed-out-2.0.0-3.el6 (FEDORA-EPEL-2016-718e99e5ab)
Timeout HTTP/HTTPS requests
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
nodejs-xtend-4.0.0-3.el6 (FEDORA-EPEL-2016-8bec2169d4)
Extend like a boss
--------------------------------------------------------------------------------
Update Information:
Specify exclusively arch list as per nodejs packaging guidelines
--------------------------------------------------------------------------------
================================================================================
ola-0.10.0-4.el6 (FEDORA-EPEL-2016-2e1b8a508f)
Open Lighting Architecture
--------------------------------------------------------------------------------
Update Information:
This update fixes the package require in ola-rdm-tests for python2-ola in epel6
(which is named python-ola there) ---- Fixes: - the inclusion of manpages in
the right subpackages - epel6 python package naming - require pkgconfig of udev
instead of systemd for udev rules ---- This is a version upgrade from 0.9.8 to
0.10.0. For the full changelog look
[here](https://github.com/OpenLightingProject/ola/releases/tag/0.10.0) ----
This is a new package. The Open Lighting Architecture is a framework for
lighting control information. It supports a range of protocols and over a dozen
USB devices. It can run as a standalone service, which is useful for converting
signals between protocols, or alternatively using the OLA API, it can be used as
the back-end for lighting control software. OLA runs on many different platforms
including ARM, which makes it a perfect fit for low cost Ethernet to DMX
gateways.
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.15-5.el6 (FEDORA-EPEL-2016-9156b5210b)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Use bundled version of LAPACK. ---- Enabled ARMv7 and PPC64le (POWER 8)
architectures. Built 64-bit interface libraries with additional symbol
suffixes, allowing for the library to be used in a same program with both the
32-bit and 64-bit interfaces.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1287541 - Shipping libopenblas?64_.so with symbol suffix
https://bugzilla.redhat.com/show_bug.cgi?id=1287541
[ 2 ] Bug #1222075 - Please enable building on ARM
https://bugzilla.redhat.com/show_bug.cgi?id=1222075
[ 3 ] Bug #1287105 - enable support ppc64/ppc64le and arm
https://bugzilla.redhat.com/show_bug.cgi?id=1287105
--------------------------------------------------------------------------------
================================================================================
python-rsa-3.3-2.el6 (FEDORA-EPEL-2016-7aa48cd8b9)
Pure-Python RSA implementation
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2016-1494
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1295871 - CVE-2016-1494 python-rsa: Signature forgery using
Bleichenbacher'06 attack [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295871
[ 2 ] Bug #1295870 - CVE-2016-1494 python-rsa: Signature forgery using
Bleichenbacher'06 attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1295870
[ 3 ] Bug #1170702 - Long-unfixed security vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1170702
[ 4 ] Bug #1298335 - python-rsa-3.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1298335
[ 5 ] Bug #1297222 - Old version with security issues, please approve ACL
https://bugzilla.redhat.com/show_bug.cgi?id=1297222
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
[email protected]
http://lists.fedoraproject.org/admin/lists/[email protected]
