The following Fedora EPEL 6 Security updates need testing: Age URL 247 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6 229 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 223 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 154 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6 154 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6 113 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 84 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cb3b95bd2f firebird-2.5.5.26952.0-2.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8aee7a9340 php-horde-horde-5.2.9-1.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f61ec30f9f poco-1.4.2p1-3.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-791080c274 nodejs-0.10.42-4.el6 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-eb24bfea0d octave-3.4.3-2.el6 gdl-0.9.5-4.el6 GraphicsMagick-1.3.23-4.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-46c6b5e4d4 botan-1.8.15-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-58b3766907 libebml-1.2.2-1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

libebml-1.2.2-1.el6 php-nette-2.3.9-1.el6 php-nette-caching-2.3.5-1.el6 php-tracy-2.3.9-1.el6 salt-2015.5.9-4.el6

Details about builds:

================================================================================ libebml-1.2.2-1.el6 (FEDORA-EPEL-2016-58b3766907) Extensible Binary Meta Language library -------------------------------------------------------------------------------- Update Information:

New in 1.2.2 version: * fix usage of the DEBUG #define (use LIBEBML_DEBUG instead) * The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file. * only use the test element to read once in the loop Backported fixes for: * CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read() * CVE-2015-8790 CVE-2015-8791 libebml: information leaks in two functions -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1276337 - CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1276337 [ 2 ] Bug #1303854 - CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1303854 --------------------------------------------------------------------------------

================================================================================ php-nette-2.3.9-1.el6 (FEDORA-EPEL-2016-22d9369b13) Nette Framework -------------------------------------------------------------------------------- Update Information:

Nette Framework is a popular tool for PHP web development It is designed to be as usable and as friendly as possible. It focuses on security and performance and is definitely one of the safest PHP frameworks. Nette Framework speaks your language and helps you to easily build better websites. Cache accelerates your application by storing data, once hardly retrieved, for future use. To use this library, you just have to add, in your project: require_once '/usr/share/php/Nette/autoload.php'; -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1277484 - Review Request: php-nette - Nette Framework https://bugzilla.redhat.com/show_bug.cgi?id=1277484 --------------------------------------------------------------------------------

================================================================================ php-nette-caching-2.3.5-1.el6 (FEDORA-EPEL-2016-4b45707f19) Nette Caching Component -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.5** * added NewMemcachedStorage using memcached extension #38 * CacheMacro: better error message --------------------------------------------------------------------------------

================================================================================ php-tracy-2.3.9-1.el6 (FEDORA-EPEL-2016-86402e2f37) Tracy: useful PHP debugger -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.9** * bar.js: MouseEvent.buttons is not supported by Safari #134 * Dumper: support for general object exporter which is called for every object * Dumper: object exporters are called in order from most specific to general * Debugger: removes output buffer for Bar, Bluescreen and production error. It decides whether clean or flush output buffers. * Dumper: variable term=xterm-256color enables colors ---- **Released version 2.3.8** * added Debugger::$showBar, can disable debug bar #132 #83 #82 * Bluescreen: link to google opens in new window * Bar: add xdebug version to info panel * Dumper::encodeString() is independent on iconv #126 * Dumper: fixed dumping INF in PHP 7.0.2 --------------------------------------------------------------------------------

================================================================================ salt-2015.5.9-4.el6 (FEDORA-EPEL-2016-5309a37299) A parallel remote execution system -------------------------------------------------------------------------------- Update Information:

Updated dnf patch ---- Corrected Requires for salt-syndic package ---- Updated dnf patch ---- Update to bugfix release 2015.5.9, patched with proper dnf support --------------------------------------------------------------------------------