The following Fedora EPEL 6 Security updates need testing: Age URL 245 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6 227 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 221 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 153 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6 153 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6 111 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 83 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cb3b95bd2f firebird-2.5.5.26952.0-2.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8aee7a9340 php-horde-horde-5.2.9-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f61ec30f9f poco-1.4.2p1-3.el6 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-791080c274 nodejs-0.10.42-4.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-eb24bfea0d octave-3.4.3-2.el6 gdl-0.9.5-4.el6 GraphicsMagick-1.3.23-4.el6 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-46c6b5e4d4 botan-1.8.15-1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

R-RUnit-0.4.26-7.el6 check-mk-1.2.6p16-2.el6 exciting-10-2.el6 fedpkg-1.21-2.el6 golang-googlecode-gogoprotobuf-0.1-0.3.gite8904f5.el6 golang-googlecode-text-0-0.8.git6fc2e00.el6 holland-1.0.12-3.el6 jpegoptim-1.4.3-4.el6 lhapdf-5.9.1-15.el6 lnst-11-2.el6 metis-5.1.0-12.el6 opensmtpd-5.7.3p2-1.el6 perl-CBOR-XS-1.4-2.el6 pg_view-1.3.0-1.el6 php-horde-Horde-Cache-2.5.3-1.el6 php-horde-kronolith-4.2.15-1.el6 php-latte-2.3.10-1.el6 php-nette-di-2.3.9-1.el6 php-nette-finder-2.3.2-1.el6 php-nette-http-2.3.4-1.el6 php-nette-neon-2.3.4-1.el6 php-tracy-2.3.8-1.el6 procenv-0.44-1.el6 python-openid-cla-1.2-1.el6 quantum-espresso-5.3.0-8.el6 voms-2.0.13-1.el6 xawtv-3.103-8.el6

Details about builds:

================================================================================ R-RUnit-0.4.26-7.el6 (FEDORA-EPEL-2016-be2389df1f) R Unit test framework -------------------------------------------------------------------------------- Update Information:

New package in EPEL. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1307074 - R-RUnit for EPEL? https://bugzilla.redhat.com/show_bug.cgi?id=1307074 --------------------------------------------------------------------------------

================================================================================ check-mk-1.2.6p16-2.el6 (FEDORA-EPEL-2016-db20dc38ac) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information:

Various bug fixes package update ---- Various bug fixes package update -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1309350 - Please rebuild the latest check-mk 1.2.6p16 for Nagios 4 https://bugzilla.redhat.com/show_bug.cgi?id=1309350 [ 2 ] Bug #1281888 - Permissions issues on /etc/check_mk/conf.d/wato and /etc/check_mk/multisite.d https://bugzilla.redhat.com/show_bug.cgi?id=1281888 [ 3 ] Bug #1281882 - rrd_path missing in defaults.py https://bugzilla.redhat.com/show_bug.cgi?id=1281882 [ 4 ] Bug #1258969 - check-mk-agent dependency on xinetd https://bugzilla.redhat.com/show_bug.cgi?id=1258969 --------------------------------------------------------------------------------

================================================================================ exciting-10-2.el6 (FEDORA-EPEL-2016-08c56a2194) FP-LAPW Code -------------------------------------------------------------------------------- Update Information:

removed defattr -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1064657 - Review Request: exciting - FP-LAPW Code https://bugzilla.redhat.com/show_bug.cgi?id=1064657 --------------------------------------------------------------------------------

================================================================================ fedpkg-1.21-2.el6 (FEDORA-EPEL-2016-79ebb637bd) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:

### New 1.21 release - Use rpkg's backwards compatible `clone_config` (pbabinca) - Merge [#7 - Fix Deprecation warning during fedpkg update run](https://pagure.io/fedpkg/pull-request/7) (kumarpraveen.nitdgp) - Merge [#3 - Add post-clone bz and sendemail config, requires rpkg > 1.36](https://pagure.io/fedpkg/pull-request/3) (ville.skytta) - Merge [#2 - Lookaside improvents](https://pagure.io/fedpkg/pull-request/2/) (bochecha) ---- retire: Make retirement message/reason mandatory (opensource) retire: Use pkgdb2 API (opensource) Don't check for the config file if the user is asking for help (bochecha) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1107646 - fedpkg fails to retire a package https://bugzilla.redhat.com/show_bug.cgi?id=1107646 --------------------------------------------------------------------------------

================================================================================ golang-googlecode-gogoprotobuf-0.1-0.3.gite8904f5.el6 (FEDORA-EPEL-2016-f51c159ab1) A fork of goprotobuf with several extra features -------------------------------------------------------------------------------- Update Information:

Update ---- Bump to upstream 8edb24c179ed858a38f18920d9005c2dde05ec17 ---- Update spec file to spec-2.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1246215 - Tracker for golang-googlecode-gogoprotobuf https://bugzilla.redhat.com/show_bug.cgi?id=1246215 --------------------------------------------------------------------------------

================================================================================ golang-googlecode-text-0-0.8.git6fc2e00.el6 (FEDORA-EPEL-2016-86c98b5e72) Supplementary Go text libraries -------------------------------------------------------------------------------- Update Information:

Update -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1254601 - Tracker for golang-googlecode-text https://bugzilla.redhat.com/show_bug.cgi?id=1254601 --------------------------------------------------------------------------------

================================================================================ holland-1.0.12-3.el6 (FEDORA-EPEL-2016-0b5dd66ba7) Pluggable Backup Framework -------------------------------------------------------------------------------- Update Information:

backwards compatible 1.0.12 update, see [full changelog](https://github.com /holland-backup/holland/blob/master/CHANGES.rst#1012---feb-8-2016) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1306039 - holland-1.0.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1306039 --------------------------------------------------------------------------------

================================================================================ jpegoptim-1.4.3-4.el6 (FEDORA-EPEL-2016-e55e9c6e10) Utility to optimize JPEG files -------------------------------------------------------------------------------- Update Information:

Adding detailed error handling patch. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1274969 - jpegoptim: error creating temp file: mkstemps() failed https://bugzilla.redhat.com/show_bug.cgi?id=1274969 --------------------------------------------------------------------------------

================================================================================ lhapdf-5.9.1-15.el6 (FEDORA-EPEL-2016-c651686bd4) Les Houches Accord PDF Interface -------------------------------------------------------------------------------- Update Information:

Drop octave support for EPEL 6 ppc64. --------------------------------------------------------------------------------

================================================================================ lnst-11-2.el6 (FEDORA-EPEL-2016-765dfd6162) Common code for lnst-ctl and lnst-slave -------------------------------------------------------------------------------- Update Information:

- added missing dbus-python dependency for lnst-slave ---- - Updating to stable release 11 --------------------------------------------------------------------------------

================================================================================ metis-5.1.0-12.el6 (FEDORA-EPEL-2016-726285a87e) Serial Graph Partitioning and Fill-reducing Matrix Ordering -------------------------------------------------------------------------------- Update Information:

- Build 64 integer version --------------------------------------------------------------------------------

================================================================================ opensmtpd-5.7.3p2-1.el6 (FEDORA-EPEL-2016-daa9b12540) Free implementation of the server-side SMTP protocol as defined by RFC 5321 -------------------------------------------------------------------------------- Update Information:

New release (5.7.3p2), fixing issue with OpenSSL API change. https://github.com/OpenSMTPD/OpenSMTPD/issues/650#issuecomment-178120346 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1304134 - opensmtpd-5.7.3p2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1304134 --------------------------------------------------------------------------------

================================================================================ perl-CBOR-XS-1.4-2.el6 (FEDORA-EPEL-2016-67cc4c6812) Concise Binary Object Representation (CBOR) -------------------------------------------------------------------------------- Update Information:

1.4 Mon Feb 8 05:10:15 CET 2016 - buffer overflow fix: a fast path during decoding did not check remaining length when decoding hash keys, found by fuzzing. This can potentially leak information in the error message or crash the process. - use C style { 0 } struct initializer. - upgrade libecb. 1.3 Mon Apr 27 22:21:04 CEST 2015 - the incremental parser didn't properly parse tagged values (testcase by Mons Anderson). - slightly speed up encoding of plain (nonmagical) arrays. - try to clarify further that effectively all 32 bit architectures have 64 bit integer support. - upgrade libecb. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1305266 - Review Request: perl-CBOR-XS - Concise Binary Object Representation (CBOR, RFC7049) https://bugzilla.redhat.com/show_bug.cgi?id=1305266 --------------------------------------------------------------------------------

================================================================================ pg_view-1.3.0-1.el6 (FEDORA-EPEL-2016-eed604c0b1) Command-line tool to display the state of the PostgreSQL processes -------------------------------------------------------------------------------- Update Information:

Update to 1.3.0 --------------------------------------------------------------------------------

================================================================================ php-horde-Horde-Cache-2.5.3-1.el6 (FEDORA-EPEL-2016-77067418fa) Horde Caching API -------------------------------------------------------------------------------- Update Information:

**Horde_Cache 2.5.3** * [jan] Fix incomplete migration from old to new garbage collection in file backend (Bug #14258). * [jan] Mark PHP 7 as supported. ---- **Horde_Cache 2.5.2** * [jan] Improve performance and memory consumption of garbage collection in File driver. * [jan] Fix garbage collection in File driver. * [jan] Fix caching issues within the same request in the Memcache driver. * [jan] Fix the Mongo driver's expire() if not using a logger. * [jan] Add unit tests. --------------------------------------------------------------------------------

================================================================================ php-horde-kronolith-4.2.15-1.el6 (FEDORA-EPEL-2016-391a3ecc59) A web based calendar -------------------------------------------------------------------------------- Update Information:

**kronolith 4.2.15** * [mjr] Fix typo preventing deletion of events from dynamic view (Bug #14256). * [jan] Handle gracefully if the base event of an imported recurrence exception is no longer recurring (Bug #14249). ---- **Kronolith 4.2.14** * [mjr] Fix issue deleting and closing event dialog during event deletion. * [mjr] Honor the SCHEDULE-AGENT attribute during CalDAV import. ---- **Kronolith 4.2.13** * [mjr] Add missing EAS ghosted property support for all EAS versions. Prevents potential loss of event data during synchronization. **Kronolith 4.2.12** * [mjr] Fix missing truncated event description when using ActiveSync. * [jan] Fix week number in basic view if week starts on Sundays. * [mjr] Fix issue where new event could be created with exceptions from previously edited event. * [jan] Mark preferences only available in basic mode. * [jan] Use access rules compatible with both Apache 2.2 and 2.4. * [jan] Fix accidental deletion of events if importing recurring events without a UID attribute (Bug #14208). * [mjr] Honor confirm_delete preference in dynamic view (Bug #14188). * [mjr] Correctly deal with cancelled meetings via ActiveSync. * [mjr] Fix visibility of alarm titles when alarm is generated via CLI (Bug #14154). * [mjr] Fix display of embed code by adding the full url. --------------------------------------------------------------------------------

================================================================================ php-latte-2.3.10-1.el6 (FEDORA-EPEL-2016-f73704fcc7) Latte: the amazing template engine for PHP -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.10** * Parser: || is not modifier separator #100 * Engine: fixed CompileException sourceLine on PHP7 * FileLoader: error message explaining touching, when touch() fails ---- **Released version 2.3.9** * BlockMacros: fixed enabling snippetMode in the dynamic snippetArea * Parser::parseMacroTag() fixed extraction of modifier nette/nette#1541 --------------------------------------------------------------------------------

================================================================================ php-nette-di-2.3.9-1.el6 (FEDORA-EPEL-2016-b95dada112) Nette Dependency Injection Component -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.2** * fixed typehints, FilesystemIterator -> RecursiveDirectoryIterator in filters --------------------------------------------------------------------------------

================================================================================ php-nette-finder-2.3.2-1.el6 (FEDORA-EPEL-2016-25fbb5a522) Nette Finder: Files Searching -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.2** * fixed typehints, FilesystemIterator -> RecursiveDirectoryIterator in filters --------------------------------------------------------------------------------

================================================================================ php-nette-http-2.3.4-1.el6 (FEDORA-EPEL-2016-185a8b1bd9) Nette HTTP Component -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.4** * IRequest: added PATCH method constant * Fix FileUpload::move($dest) when low permission to chmod * removed rarely used @property phpDoc --------------------------------------------------------------------------------

================================================================================ php-nette-neon-2.3.4-1.el6 (FEDORA-EPEL-2016-ea9a7883ec) Nette NEON: parser and generator for Nette Object Notation -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.4** * Decoder: fixed entity value conversion in the entity chain --------------------------------------------------------------------------------

================================================================================ php-tracy-2.3.8-1.el6 (FEDORA-EPEL-2016-ea41e54358) Tracy: useful PHP debugger -------------------------------------------------------------------------------- Update Information:

**Released version 2.3.8** * added Debugger::$showBar, can disable debug bar #132 #83 #82 * Bluescreen: link to google opens in new window * Bar: add xdebug version to info panel * Dumper::encodeString() is independent on iconv #126 * Dumper: fixed dumping INF in PHP 7.0.2 --------------------------------------------------------------------------------

================================================================================ procenv-0.44-1.el6 (FEDORA-EPEL-2016-7dbbd7d092) Utility to show process environment -------------------------------------------------------------------------------- Update Information:

New version -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1107127 - Review Request: procenv - Utility to show process environment https://bugzilla.redhat.com/show_bug.cgi?id=1107127 --------------------------------------------------------------------------------

================================================================================ python-openid-cla-1.2-1.el6 (FEDORA-EPEL-2016-d4b6ebbad3) CLA extension for python-openid -------------------------------------------------------------------------------- Update Information:

Rebased version to include python3 support for Fedora -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1308351 - python-openid-cla-v1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1308351 --------------------------------------------------------------------------------

================================================================================ quantum-espresso-5.3.0-8.el6 (FEDORA-EPEL-2016-9f04d158ef) A suite for electronic-structure calculations and materials modeling -------------------------------------------------------------------------------- Update Information:

use only 2 cores for tests (bug #1308481) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1308481 - test suite fails on machine with lots of cpu cores https://bugzilla.redhat.com/show_bug.cgi?id=1308481 --------------------------------------------------------------------------------

================================================================================ voms-2.0.13-1.el6 (FEDORA-EPEL-2016-29275d0a87) Virtual Organization Membership Service -------------------------------------------------------------------------------- Update Information:

New upstream release. http://italiangrid.github.io/voms/release-notes/voms- server/2.0.13/ --------------------------------------------------------------------------------

================================================================================ xawtv-3.103-8.el6 (FEDORA-EPEL-2016-8666a594f9) TV applications for video4linux compliant devices -------------------------------------------------------------------------------- Update Information:

- Bring in several bugfix patch from upstream - Fix crash with saa7134 driver - Use png instead of xpm for icons - Build motv and mtt now that we have a FOSS motif, put them in xawtv-motv resp xawtv-mtt sub-packages --------------------------------------------------------------------------------