The following Fedora EPEL 6 Security updates need testing:
Age URL
182 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
164 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
158 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148
optipng-0.7.5-5.el6
89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156
nagios-4.0.8-1.el6
78 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-68a2c2db36
python-pymongo-3.0.3-1.el6
48 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
20 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-da771a002d
moodle-2.7.11-1.el6
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-c1e2a347ee
xsupplicant-2.2.0-13.el6
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-df28a72135
shellinabox-2.19-1.el6
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-4ea455db6d
gwenhywfar-4.13.1-2.el6
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-06bd1d268e
nodejs-handlebars-4.0.5-1.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-26f2bb9749
libpng10-1.0.66-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
dpm-xrootd-3.6.0-1.el6
innotop-1.10.0-0.3.81da83f.el6
libpng10-1.0.66-1.el6
nodejs-d-1.0.0-1.el6
nodejs-es5-ext-0.10.10-1.el6
nodejs-es6-iterator-2.0.0-1.el6
nodejs-es6-symbol-3.0.2-1.el6
nodejs-is-windows-0.1.0-1.el6
nodejs-next-tick-0.2.2-2.el6
pcsc-cyberjack-3.99.5final.SP08-2.el6
perl-Net-Whois-IP-1.18-1.el6
shinken-2.4.2-2.el6
sysreporter-3.0.2-1.el6
Details about builds:
================================================================================
dpm-xrootd-3.6.0-1.el6 (FEDORA-EPEL-2015-f3987cf642)
XROOT interface to the Disk Pool Manager (DPM)
--------------------------------------------------------------------------------
Update Information:
- introduced the XrdDPMStatInfo plugin - updated rpm spec to require at least
xrootd 4.2
--------------------------------------------------------------------------------
================================================================================
innotop-1.10.0-0.3.81da83f.el6 (FEDORA-EPEL-2015-154331c792)
A MySQL and InnoDB monitor program
--------------------------------------------------------------------------------
Update Information:
Fix for MariaDB 10.1 and 10.2, align with upstream
--------------------------------------------------------------------------------
================================================================================
libpng10-1.0.66-1.el6 (FEDORA-EPEL-2015-26f2bb9749)
Old version of libpng, needed to run old binaries
--------------------------------------------------------------------------------
Update Information:
An underflow read was found in png_check_keyword in libpng10. An attacker could
possibly use this flaw to cause an out-of-bounds read by tricking an
unsuspecting user into processing a specially crafted PNG image. ---- The fix
for CVE-8126 was incomplete in the previous 1.0.64 update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1291312 - CVE-2015-8540 libpng: underflow read in
png_check_keyword()
https://bugzilla.redhat.com/show_bug.cgi?id=1291312
[ 2 ] Bug #1281756 - CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow
vulnerabilities in png_get_PLTE/png_set_PLTE functions
https://bugzilla.redhat.com/show_bug.cgi?id=1281756
--------------------------------------------------------------------------------
================================================================================
nodejs-d-1.0.0-1.el6 (FEDORA-EPEL-2015-03ce51864d)
Property descriptor factory
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.0.0 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292424 - Review Request: nodejs-d - Property descriptor factory
https://bugzilla.redhat.com/show_bug.cgi?id=1292424
--------------------------------------------------------------------------------
================================================================================
nodejs-es5-ext-0.10.10-1.el6 (FEDORA-EPEL-2015-7354dc4f7f)
ECMAScript 5 extensions and ES6 shims
--------------------------------------------------------------------------------
Update Information:
Update to upstream 0.10.10 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292416 - Review Request: nodejs-es5-ext - ECMAScript 5 extensions
and ES6 shims
https://bugzilla.redhat.com/show_bug.cgi?id=1292416
--------------------------------------------------------------------------------
================================================================================
nodejs-es6-iterator-2.0.0-1.el6 (FEDORA-EPEL-2015-9d6dd21160)
Iterator abstraction based on ES6 specification
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292413 - Review Request: nodejs-es6-iterator - Iterator
abstraction based on ES6 specification
https://bugzilla.redhat.com/show_bug.cgi?id=1292413
--------------------------------------------------------------------------------
================================================================================
nodejs-es6-symbol-3.0.2-1.el6 (FEDORA-EPEL-2015-e5a22e98d5)
ECMAScript 6 Symbol polyfill
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.0.2 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292412 - Review Request: nodejs-es6-symbol - ECMAScript 6 Symbol
polyfill
https://bugzilla.redhat.com/show_bug.cgi?id=1292412
--------------------------------------------------------------------------------
================================================================================
nodejs-is-windows-0.1.0-1.el6 (FEDORA-EPEL-2015-516682f7f0)
Returns true if the platform is windows
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292295 - Review Request: nodejs-is-windows - Returns true if the
platform is windows
https://bugzilla.redhat.com/show_bug.cgi?id=1292295
--------------------------------------------------------------------------------
================================================================================
nodejs-next-tick-0.2.2-2.el6 (FEDORA-EPEL-2015-7c380807dc)
Environment agnostic nextTick polyfill
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292400 - Review Request: nodejs-next-tick - Environment agnostic
nextTick polyfill
https://bugzilla.redhat.com/show_bug.cgi?id=1292400
--------------------------------------------------------------------------------
================================================================================
pcsc-cyberjack-3.99.5final.SP08-2.el6 (FEDORA-EPEL-2015-3c011e013b)
PC/SC driver for REINER SCT cyberjack USB chip card reader
--------------------------------------------------------------------------------
Update Information:
New upstream, spec-file cleanup.
--------------------------------------------------------------------------------
================================================================================
perl-Net-Whois-IP-1.18-1.el6 (FEDORA-EPEL-2015-d6b9531f80)
Perl extension for looking up the whois information for ip addresses
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 1.18 (rhbz#1290619)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1290619 - perl-Net-Whois-IP-1.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1290619
--------------------------------------------------------------------------------
================================================================================
shinken-2.4.2-2.el6 (FEDORA-EPEL-2015-39af137508)
Python Monitoring tool
--------------------------------------------------------------------------------
Update Information:
subtitute bad user to nagios,
--------------------------------------------------------------------------------
================================================================================
sysreporter-3.0.2-1.el6 (FEDORA-EPEL-2015-e12d03b67f)
Basic system reporter with emailing
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.2 ---- Upgrade to alpha4 ---- Initial build of sysreporter
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1292659 - sysreporter-v3.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1292659
[ 2 ] Bug #1291459 - Review Request: sysreporter - Basic system reporter with
emailing
https://bugzilla.redhat.com/show_bug.cgi?id=1291459
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/epel-devel@lists.fedoraproject.org
