The following Fedora EPEL 6 Security updates need testing:
Age URL
755
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
102
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6...
87
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolki...
46
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1011/php-ZendFra...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1304/rxvt-unicod...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1319/python-fmn-...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1312/python-fedo...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1379/seamonkey-2...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1388/botan-1.8.1...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1414/gajim-0.14....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1434/Django14-1....
The following builds have been pushed to Fedora EPEL 6 updates-testing
Django14-1.4.13-1.el6
php-goutte-1.0.6-1.el6
piglit-1-0.16.20140414GIT8775223.el6
python-fedbadges-0.4.3-1.el6
python-fedmsg-meta-fedora-infrastructure-0.2.12-1.el6
python-fmn-rules-0.2.1-1.el6
znc-1.4-1.el6
Details about builds:
================================================================================
Django14-1.4.13-1.el6 (FEDORA-EPEL-2014-1434)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
update to 1.4.13, fixing cve 2014-1418
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 16 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.13-1
- update to 1.4.13 fixing CVE-2014-1418 (rhbz#1097937)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1097500 - CVE-2014-1418 Django: cached data possibly served to the wrong
session
https://bugzilla.redhat.com/show_bug.cgi?id=1097500
[ 2 ] Bug #1097505 - CVE-2014-3730 Django: insufficient URL validation could lead to
redirects
https://bugzilla.redhat.com/show_bug.cgi?id=1097505
--------------------------------------------------------------------------------
================================================================================
php-goutte-1.0.6-1.el6 (FEDORA-EPEL-2014-1440)
A simple PHP web scraper
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.6
* 1.0.5 to 1.0.6:
https://github.com/fabpot/Goutte/compare/v1.0.5...v1.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 16 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.0.6-1
- Updated to 1.0.6
--------------------------------------------------------------------------------
================================================================================
piglit-1-0.16.20140414GIT8775223.el6 (FEDORA-EPEL-2014-1435)
Collection of automated tests for OpenGL implementations
--------------------------------------------------------------------------------
Update Information:
importlib is since python 2.7 in the standard library, no need to import it.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 16 2014 Matěj Cepl <mcepl(a)redhat.com> - 1-0.16.20140414GIT8775223
- importlib is since python 2.7 in the standard library, no need to
import it.
--------------------------------------------------------------------------------
================================================================================
python-fedbadges-0.4.3-1.el6 (FEDORA-EPEL-2014-1442)
fedmsg consumer for awarding open badges
--------------------------------------------------------------------------------
Update Information:
pkgdb2 fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 16 2014 Ralph Bean <rbean(a)redhat.com> - 0.4.3-1
- Bugfix release for pkgdb2 support.
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.2.12-1.el6 (FEDORA-EPEL-2014-1441)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
PkgDB2 support. New Icons. Meetbot topic fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 16 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.12-1
- Fixes for pkgdb.
- New icons for copr and meetbot.
- Fixes to supybot topic changes.
--------------------------------------------------------------------------------
================================================================================
python-fmn-rules-0.2.1-1.el6 (FEDORA-EPEL-2014-1436)
Message processing rules for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
package-centric caching.
pkgdb2 fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 16 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.1-1
- Package-centric caching (over user-centric caching).
* Fri May 16 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.0-1
- Fixes for pkgdb2 support.
- Remove pkgdb1 code.
--------------------------------------------------------------------------------
================================================================================
znc-1.4-1.el6 (FEDORA-EPEL-2014-1437)
An advanced IRC bouncer
--------------------------------------------------------------------------------
Update Information:
Update to 1.4
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------