The following Fedora EPEL 6 Security updates need testing: Age URL 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-4008 cross-binutils-2.23.51.0.3-1.el6.1 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7634 zabbix20-2.0.15-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7618 php-twig-1.20.0-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7733 drupal7-7.39-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7803 drupal6-ctools-1.14-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7826 drupal6-6.37-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7875 onionshare-0.7.1-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7912 golang-1.5-6.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7917 moodle-2.6.11-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7940 nrpe-2.15-6.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7961 php-doctrine-cache-1.4.2-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7963 php-doctrine-annotations-1.2.7-1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

carbon-c-relay-0.44-3.el6 cgit-0.11.2-3.el6 ipv6calc-0.99.1-13.el6 libnetfilter_log-1.0.1-7.el6 mozilla-https-everywhere-5.1.1-1.el6 nrpe-2.15-6.el6 php-aws-sdk-2.8.20-1.el6 php-doctrine-annotations-1.2.7-1.el6 php-doctrine-cache-1.4.2-1.el6 php-php-gettext-1.0.11-12.el6 python-fedora-0.5.6-1.el6 xfoil-6.99-1.el6

Details about builds:

================================================================================ carbon-c-relay-0.44-3.el6 (FEDORA-EPEL-2015-7956) Enhanced C implementation of Carbon relay, aggregator and rewriter -------------------------------------------------------------------------------- Update Information:

Exclude 32 bit arches --------------------------------------------------------------------------------

================================================================================ cgit-0.11.2-3.el6 (FEDORA-EPEL-2015-7949) A fast web interface for git -------------------------------------------------------------------------------- Update Information:

Fix up logic around webserver and httpd. ---- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1258552 - EPEL6 build of cgit-0.11.2 https://bugzilla.redhat.com/show_bug.cgi?id=1258552 --------------------------------------------------------------------------------

================================================================================ ipv6calc-0.99.1-13.el6 (FEDORA-EPEL-2015-7946) IPv6 address format change and calculation utility -------------------------------------------------------------------------------- Update Information:

new release 0.99.1 (introduces new subpackage mod_ipv6calc) --------------------------------------------------------------------------------

================================================================================ libnetfilter_log-1.0.1-7.el6 (FEDORA-EPEL-2015-7943) Netfilter logging userspace library -------------------------------------------------------------------------------- Update Information:

libnetfilter_log-1.0.1-7.el6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild libnetfilter_log-1.0.1-7.el7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ mozilla-https-everywhere-5.1.1-1.el6 (FEDORA-EPEL-2015-7951) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information:

- Ruleset fixes - Remove the AMO signature - Fix the "not appearing" problem ---- mozilla-https-everywhere-5.1.0-1.el5 - Ruleset fixes - AMO signature mozilla-https-everywhere-5.1.0-1.el6 - Ruleset fixes - AMO signature mozilla- https-everywhere-5.1.0-1.el7 - Ruleset fixes - AMO signature --------------------------------------------------------------------------------

================================================================================ nrpe-2.15-6.el6 (FEDORA-EPEL-2015-7940) Host/service/network monitoring agent for Nagios -------------------------------------------------------------------------------- Update Information:

nrpe-2.15-6.el7 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.el6 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.fc23 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.fc22 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.fc21 - Fix spec file for missing /usr/share/libtool/config/config.guess -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1089880 - CVE-2014-2913 nrpe: remote command execution when command arguments are enabled [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1089880 [ 2 ] Bug #1239738 - nrpe: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1239738 --------------------------------------------------------------------------------

================================================================================ php-aws-sdk-2.8.20-1.el6 (FEDORA-EPEL-2015-7959) Amazon Web Services framework for PHP -------------------------------------------------------------------------------- Update Information:

## 2.8.20 - 2015-09-03 * `Aws\CodePipeline` - Added support for using encryption keys with artifact stores. * `Aws\ConfigService` - Added support for the `ListDiscoveredResources` operation and new resource types. * `Aws\Ec2` - Added support for using instance weights with the `RequestSpotFleet` API. * `Aws\Sns` - Added support for configurable SigningCertURL host patterns. * `Aws\StorageGateway` - Added support for tagging and untagging resources. * Fixed issue with loading the phar from opcache. ## 2.8.19 - 2015-08-20 * `Aws\S3` - Added support for event notification filters. ## 2.8.18 - 2015-08-12 * `Aws\ElasticBeanstalk` - Added support for enhanced health reporting. * `Aws\Glacier` - Fixed an issue where content bodies that equaled false (e.g., '0') would not be uploaded. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1253094 - php-aws-sdk-2.8.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=1253094 --------------------------------------------------------------------------------

================================================================================ php-doctrine-annotations-1.2.7-1.el6 (FEDORA-EPEL-2015-7963) PHP docblock annotations parser library -------------------------------------------------------------------------------- Update Information:

CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/security_misconfigurat ion_vulnerability_in_various_doctrine_projects.html -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1258669 - php-doctrine-annotations-v1.2.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1258669 --------------------------------------------------------------------------------

================================================================================ php-doctrine-cache-1.4.2-1.el6 (FEDORA-EPEL-2015-7961) Doctrine Cache -------------------------------------------------------------------------------- Update Information:

CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/security_misconfigurat ion_vulnerability_in_various_doctrine_projects.html -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1258670 - php-doctrine-cache-v1.4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1258670 --------------------------------------------------------------------------------

================================================================================ php-php-gettext-1.0.11-12.el6 (FEDORA-EPEL-2015-7937) Gettext emulation in PHP -------------------------------------------------------------------------------- Update Information:

Added a patch for compatibility with PHP 7 --------------------------------------------------------------------------------

================================================================================ python-fedora-0.5.6-1.el6 (FEDORA-EPEL-2015-7936) Python modules for talking to Fedora Infrastructure Services -------------------------------------------------------------------------------- Update Information:

Fix a py2.6 string formatting bug. ---- Consistent error handling from the Bodhi2Client. More adjustments to bodhi server version detection. ---- Better detection of bodhi server version. Be more careful with python-six API usage for EPEL. Better compat with 'fedpkg update'. Better version checking of the bodhi server. Bodhi2 compatibility. munch objects are now returned by the OpenIdBaseClient for a more symmetric API. There is also a minor python3 compat fix. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1259654 - fedpkg update fails https://bugzilla.redhat.com/show_bug.cgi?id=1259654 --------------------------------------------------------------------------------

================================================================================ xfoil-6.99-1.el6 (FEDORA-EPEL-2015-7954) Subsonic Airfoil Development System -------------------------------------------------------------------------------- Update Information:

Update to version 6.99, see http://web.mit.edu/drela/Public/web/xfoil/version_notes.txt for details. --------------------------------------------------------------------------------