The following Fedora EPEL 6 Security updates need testing:
Age URL
997
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
215
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7....
86
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3434/pylint-1.3....
61
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binut...
50
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4242/facter-1.6....
38
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4485/python-torn...
30
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4669/libhtp-0.5....
25
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4766/mediawiki11...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4884/mapserver-6...
18
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4918/dokuwiki-0-...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0151/docker-io-1...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0193/bsd-mailx-8...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0232/chicken-4.9...
The following builds have been pushed to Fedora EPEL 6 updates-testing
WALinuxAgent-2.0.11-2.el6
chicken-4.9.0.1-2.el6
golang-github-mitchellh-goamz-0-0.4.git32d1910.el6
golang-github-vaughan0-go-ini-0-0.2.gita98ad7e.el6
golang-gopkg-check-0-4.el6
iscan-firmware-20121031-3.el6
libasr-1.0.0-1.el6
perl-Tangerine-0.12-1.el6
php-PHP-CSS-Parser-6.0.0-1.20141009giteb29754.el6
php-horde-Horde-Css-Parser-1.0.6-2.el6
php-horde-Horde-JavascriptMinify-1.1.2-1.el6
php-tcpdf-6.2.4-1.el6
planet-2.0-20.el6
python-CDDB-1.4-14.el6
python-kajiki-0.4.4-3.el6
python-nine-0.3.4-4.el6
s3cmd-1.5.0-1.el6
ssmtp-2.61-22.el6
Details about builds:
================================================================================
WALinuxAgent-2.0.11-2.el6 (FEDORA-EPEL-2015-0237)
The Windows Azure Linux Agent
--------------------------------------------------------------------------------
Update Information:
WALinuxAgent allows Fedora and RHEL VMs to be hosted on Windows Azure.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1159660 - Review Request: WALinuxAgent - The Windows Azure Linux Agent
https://bugzilla.redhat.com/show_bug.cgi?id=1159660
--------------------------------------------------------------------------------
================================================================================
chicken-4.9.0.1-2.el6 (FEDORA-EPEL-2015-0232)
A practical and portable Scheme system
--------------------------------------------------------------------------------
Update Information:
Patches security vulnerability discussed here:
https://bugzilla.redhat.com/show_bug.cgi?id=1181483
Latest upstream release.
Latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2015 Ricky Elrod <relrod(a)redhat.com> - 4.9.0.1-2
- Apply patch to work around buffer overrun:
https://bugzilla.redhat.com/show_bug.cgi?id=1181483
* Thu Aug 7 2014 Ricky Elrod <relrod(a)redhat.com> - 4.9.0.1-1
- Latest upstream release.
* Sat Jun 7 2014 Ricky Elrod <relrod(a)redhat.com> - 4.9.0-4
- Rebuild from previous bootstrap.
* Sat Jun 7 2014 Ricky Elrod <relrod(a)redhat.com> - 4.9.0-3
- Bootstrap for el7.
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.9.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Jun 4 2014 Ricky Elrod <codeblock(a)fedoraproject.org> - 4.9.0-1
- Latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1181483 - chicken: buffer overflow vulnerability in CHICKEN Scheme's
substring-index[-ci] procedures
https://bugzilla.redhat.com/show_bug.cgi?id=1181483
--------------------------------------------------------------------------------
================================================================================
golang-github-mitchellh-goamz-0-0.4.git32d1910.el6 (FEDORA-EPEL-2015-0242)
An Amazon Library for Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 32d1910e654ead1308d9073d8ccdd42d6922ee39
Resolves: rhbz#1142399 - initial package upload
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1142399 - Review Request: golang-github-mitchellh-goamz - An Amazon Library
for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1142399
--------------------------------------------------------------------------------
================================================================================
golang-github-vaughan0-go-ini-0-0.2.gita98ad7e.el6 (FEDORA-EPEL-2015-0264)
INI parsing library for Go
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1142398 - Review Request: golang-github-vaughan0-go-ini - INI parsing library
for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1142398
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-check-0-4.el6 (FEDORA-EPEL-2015-0253)
Rich testing for the Go language
--------------------------------------------------------------------------------
Update Information:
Add
github.com/motain/gocheck into Provides
Add
github.com/motain/gocheck into devel subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2015 jchaloup <jchaloup(a)redhat.com> - 0-4
- Add
github.com/motain/gocheck into Provides
related: #1151779
* Tue Jan 13 2015 jchaloup <jchaloup(a)redhat.com> - 0-3
- Add
github.com/motain/gocheck into devel subpackage
related: #1151779
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1151779 - Review Request: golang-gopkg-check - Rich testing for the Go
language
https://bugzilla.redhat.com/show_bug.cgi?id=1151779
--------------------------------------------------------------------------------
================================================================================
iscan-firmware-20121031-3.el6 (FEDORA-EPEL-2015-0263)
Firmware for Epson flatbed scanners
--------------------------------------------------------------------------------
Update Information:
Epson scanner firmwares for Sane.
--------------------------------------------------------------------------------
================================================================================
libasr-1.0.0-1.el6 (FEDORA-EPEL-2015-0265)
Free, simple and portable asynchronous resolver library
--------------------------------------------------------------------------------
Update Information:
libasr: initial Fedora RPM release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1176455 - Review Request: libasr - Free, simple and portable asynchronous
resolver library
https://bugzilla.redhat.com/show_bug.cgi?id=1176455
--------------------------------------------------------------------------------
================================================================================
perl-Tangerine-0.12-1.el6 (FEDORA-EPEL-2015-0228)
Analyse perl files and report module-related information
--------------------------------------------------------------------------------
Update Information:
Introduce support for Test::Requires and superclass.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 12 2015 Petr Šabata <contyk(a)redhat.com> - 0.12-1
- 0.12 bump
--------------------------------------------------------------------------------
================================================================================
php-PHP-CSS-Parser-6.0.0-1.20141009giteb29754.el6 (FEDORA-EPEL-2015-0250)
A Parser for CSS Files
--------------------------------------------------------------------------------
Update Information:
Horde_Css_Parser 1.0.6
* [mms] Update PHP-CSS-Parser lib to latest dev to fix issues on PHP < 5.3.9 (Bug
#13792).
Horde_Css_Parser 1.0.5
* [mms] Use composer to generate the distributed version of the PHP-CSS-Parser package.
php-PHP-CSS-Parser 6.0.0
* Format output using Sabberworm\CSS\OutputFormat
* No backwards-incompatible changes
php-PHP-CSS-Parser 5.2.0 (2014-06-30)
* Support removing a selector from a declaration block using
`$oBlock->removeSelector($mSelector)`
* Introduce a specialized exception (Sabberworm\CSS\Parsing\OuputException) for exceptions
during output rendering
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2015 Remi Collet <remi(a)fedoraproject.org> - 6.0.0-1.20141009giteb29754
- update to 6.0.0 + fix for PHP 5.3
- add provides php-composer(sabberworm/php-css-parser)
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Css-Parser-1.0.6-2.el6 (FEDORA-EPEL-2015-0250)
Horde CSS Parser
--------------------------------------------------------------------------------
Update Information:
Horde_Css_Parser 1.0.6
* [mms] Update PHP-CSS-Parser lib to latest dev to fix issues on PHP < 5.3.9 (Bug
#13792).
Horde_Css_Parser 1.0.5
* [mms] Use composer to generate the distributed version of the PHP-CSS-Parser package.
php-PHP-CSS-Parser 6.0.0
* Format output using Sabberworm\CSS\OutputFormat
* No backwards-incompatible changes
php-PHP-CSS-Parser 5.2.0 (2014-06-30)
* Support removing a selector from a declaration block using
`$oBlock->removeSelector($mSelector)`
* Introduce a specialized exception (Sabberworm\CSS\Parsing\OuputException) for exceptions
during output rendering
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2015 Remi Collet <remi(a)fedoraproject.org> - 1.0.6-2
- Update to 1.0.6
- raise dependency on sabberworm/php-css-parser >= 6
- add provides php-composer(horde/horde-css-parser)
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-JavascriptMinify-1.1.2-1.el6 (FEDORA-EPEL-2015-0240)
Javascript Minification
--------------------------------------------------------------------------------
Update Information:
Horde_JavascriptMinify 1.1.2
* [mms] Silence code warnings for Closure compiler (Bug #13789).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2015 Remi Collet <remi(a)fedoraproject.org> - 1.1.2-1
- Update to 1.1.2
- add provides php-composer(horde/horde-javascriptminify)
--------------------------------------------------------------------------------
================================================================================
php-tcpdf-6.2.4-1.el6 (FEDORA-EPEL-2015-0260)
PHP class for generating PDF documents and barcodes
--------------------------------------------------------------------------------
Update Information:
6.2.4 (2015-01-08)
* fix warning related to empty K_PATH_URL.
* fix error when a $table_colwidths key is not set.
6.2.3 (2014-12-18)
* New comment.
* Moved the K_PATH_IMAGES definition in tcpdf_autoconfig.
6.2.2 (2014-12-18)
* Fixed mispelled words.
* Fixed version number.
6.2.1 (2014-12-18)
* The constant K_TCPDF_THROW_EXCEPTION_ERROR is now set to false in the default
configuration file.
* An issue with the _destroy() method was fixed.
6.2.0 (2014-12-10)
* Bug #1005 "Security Report, LFI posting internal files externally abusing default
parameter" was fixed.
* Static methods serializeTCPDFtagParameters() and unserializeTCPDFtagParameters() were
moved as non static to the main TCPDF class (see changes in example n. 49).
* Deprecated methods were removed, please use the equivalents defined in other classes
(i.e. TCPDF_STATIC and TCPDF_FONTS).
* The constant K_TCPDF_CALLS_IN_HTML is now set by default to FALSE.
* DLE, DLX and DLP page format was added.
* Page format are now defined as a public property in TCPDF_STATIC.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2015 Remi Collet <remi(a)fedoraproject.org> - 6.2.4-1
- update to 6.2.4
--------------------------------------------------------------------------------
================================================================================
planet-2.0-20.el6 (FEDORA-EPEL-2015-0241)
Flexible RDF/RSS/Atom feed aggregator
--------------------------------------------------------------------------------
Update Information:
Fix HTTPS feed URLs, initial epel7 build.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2015 Jon Ciesla <limburgher(a)gmail.com> - 2.0-20
- Drop timeoutsocket.py to fix BZ 498456.
* Mon Jun 30 2014 Toshio Kuratomi <toshio(a)fedoraproject.org> - 2.0-19
- Replace python-setuptools-devel BR with python-setuptools
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Aug 30 2013 Jon Ciesla <limburgher(a)gmail.com> - 2.0-17
- Fix dates, escape macro in changelog.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Jul 21 2010 David Malcolm <dmalcolm(a)redhat.com> - 2.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #498456 - HTTPS feed URLs broken in planet-2.0-3.el5
https://bugzilla.redhat.com/show_bug.cgi?id=498456
[ 2 ] Bug #1181144 - Please build to EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1181144
--------------------------------------------------------------------------------
================================================================================
python-CDDB-1.4-14.el6 (FEDORA-EPEL-2015-0235)
CDDB and FreeDB audio CD track info access in Python
--------------------------------------------------------------------------------
Update Information:
python-CDDB for EL6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1177887 - Please package python-CDDB for EPEL7 & EL6
https://bugzilla.redhat.com/show_bug.cgi?id=1177887
--------------------------------------------------------------------------------
================================================================================
python-kajiki-0.4.4-3.el6 (FEDORA-EPEL-2015-0255)
Really fast well-formed xml templates
--------------------------------------------------------------------------------
Update Information:
Declare requirement on python-nine.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 12 2015 Ralph Bean <rbean(a)redhat.com> - 0.4.4-3
- Add req on python-nine.
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Feb 12 2014 Ralph Bean <rbean(a)redhat.com> - 0.4.4-1
- Latest upstream.
- Disabled tests now that they require python-nine which hasn't yet been
packaged for Fedora.
* Tue Oct 8 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.5-4
- Added dep on pytz.
* Tue Oct 8 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.5-3
- Update dep from babel to python-babel.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1179551 - pkg_resources.DistributionNotFound: nine
https://bugzilla.redhat.com/show_bug.cgi?id=1179551
--------------------------------------------------------------------------------
================================================================================
python-nine-0.3.4-4.el6 (FEDORA-EPEL-2015-0238)
Python 2 / 3 compatibility, like six, but favouring Python 3
--------------------------------------------------------------------------------
Update Information:
Initial import.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1179804 - Review Request: python-nine - Python 2 / 3 compatibility, like six,
but favouring Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1179804
--------------------------------------------------------------------------------
================================================================================
s3cmd-1.5.0-1.el6 (FEDORA-EPEL-2015-0262)
Tool for accessing Amazon Simple Storage Service
--------------------------------------------------------------------------------
Update Information:
upstream 1.5.0 final
upstream 1.5.0-rc1
upstream 1.5.0-beta1 plus even newer upstream fixes
upstream 1.5.0-beta1 plus newer upstream fixes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 12 2015 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-1
- upstream 1.5.0 final
* Tue Jul 1 2014 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-0.7.rc1
- put back dropped dist tag
* Tue Jul 1 2014 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-0.6.rc1
- upstream 1.5.0-rc1
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.5.0-0.5.gitb196faa5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Mar 23 2014 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-0.4.git
- upstream 1.5.0-beta1 plus even newer upstream fixes
* Sun Feb 2 2014 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-0.3.git
- upstream 1.5.0-beta1 plus newer upstream fixes
* Wed May 29 2013 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-0.2.gita122d97
- more upstream bugfixes
- drop pyxattr dep, that codepath got dropped in this release
* Mon May 20 2013 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.5.0-0.1.gitb1ae0fbe
- upstream 1.5.0-alpha3 plus fixes
- add dep on pyxattr for the --xattr option
* Tue Jun 19 2012 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.1.0-0.4.git11e5755e
- add local MD5 cache
* Mon Jun 18 2012 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.1.0-0.3.git7de0789d
- parallelize local->remote syncs
* Mon Jun 18 2012 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.1.0-0.2.gitf881b162
- add hardlink / duplicate file detection support
* Fri Mar 9 2012 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.1.0-0.1.git2dfe4a65
- build from git for mdomsch patches to s3cmd sync
--------------------------------------------------------------------------------
================================================================================
ssmtp-2.61-22.el6 (FEDORA-EPEL-2015-0243)
Extremely simple MTA to get mail off the system to a Mailhub
--------------------------------------------------------------------------------
Update Information:
Sets proper permissions on the configuration file. No functional changes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 13 2014 Manuel "lonely wolf" Wolfshant <wolfy(a)fedoraproject.org>
- 2.61-22
- Fix spurious permissions for config file ( #1060515)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1060515 - Spurious executable+setgid bits on /etc/ssmtp/ssmtp.conf
https://bugzilla.redhat.com/show_bug.cgi?id=1060515
--------------------------------------------------------------------------------