The following Fedora EPEL 6 Security updates need testing:
Age URL
181
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
104
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13116/gitolite3-...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13202/Django-1.3...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13109/phpMyAdmin...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13218/drupal7-7....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13222/xlockmore-...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13232/dokuwiki-0...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13138/drupal7-fe...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13155/cobbler-2....
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13151/haproxy-1....
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13084/php-ZendFr...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13172/ssmtp-2.61...
51
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-12763/pcp-3.6.6-...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13090/mom-0.3.0-...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13176/icecast-2....
369
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
The following builds have been pushed to Fedora EPEL 6 updates-testing
cabal-rpm-0.6.4-1.el6
dokuwiki-0-0.14.20121013.el6
eurephia-1.1.0-4.el6
mosh-1.2.3-1.el6
munin-2.0.7-3.el6
mysql-utilities-1.1.0-1.el6
pesign-0.99-7.el6
php-pecl-geoip-1.0.8-2.el6
python-py9p-1.0.2-1.el6
python-pyvfs-0.2.5-1.el6
python-testtools-0.9.19-1.el6
stompclt-0.5-2.el6
wsl-0.1.8-2.el6
Details about builds:
================================================================================
cabal-rpm-0.6.4-1.el6 (FEDORA-EPEL-2012-13228)
RPM package creator for Haskell Cabal-based packages
--------------------------------------------------------------------------------
Update Information:
Support tarballs, add manpage and cabal-rpm-diff script
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Jens Petersen <petersen(a)redhat.com> - 0.6.4-1
- add cabal-rpm-diff wrapper script
- fix generated manpage
* Mon Sep 24 2012 Jens Petersen <petersen(a)redhat.com> - 0.6.3-1
- can now handle tarball
- new manpage
- obsoletes cabal2spec
--------------------------------------------------------------------------------
================================================================================
dokuwiki-0-0.14.20121013.el6 (FEDORA-EPEL-2012-13232)
Standards compliant simple to use wiki
--------------------------------------------------------------------------------
Update Information:
upgrade to latest release
Upgrade to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 20 2012 Andrew Colin Kissa <andrew(a)topdog.za.net> - 0-0.14.20121013
- Latest upstream
- Fix Bugzilla bugs #844726, #840255, #795487, #741384, #840686, #835145
* Thu Aug 2 2012 Andrew Colin Kissa <andrew(a)topdog.za.net> - 0-0.13.20120125.b
- Latest upstream
- Fix Bugzilla bugs #844726, #840255, #795487, #741384, #840686, #835145
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.12.20110525.a
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #741384 - CVE-2011-3727 dokuwiki: installation path disclosure via a direct
request to a .php file
https://bugzilla.redhat.com/show_bug.cgi?id=741384
[ 2 ] Bug #840686 - CVE-2012-0283 dokuwiki: XSS flaw in tpl_mediaFileList()
https://bugzilla.redhat.com/show_bug.cgi?id=840686
[ 3 ] Bug #835145 - CVE-2012-3354 dokuwiki: Full path disclosure with PHP error level
enabled
https://bugzilla.redhat.com/show_bug.cgi?id=835145
[ 4 ] Bug #717146 - CVE-2011-2510 dokuwiki: XSS in DokuWiki's RSS embedding
mechanism
https://bugzilla.redhat.com/show_bug.cgi?id=717146
--------------------------------------------------------------------------------
================================================================================
eurephia-1.1.0-4.el6 (FEDORA-EPEL-2012-13235)
An advanced and flexible OpenVPN user authentication plug-in
--------------------------------------------------------------------------------
Update Information:
Updated against upstream eurephia-1.1.0, with additional fixes.
Release of eurephia v1.1 for EL5
--------------------------------------------------------------------------------
================================================================================
mosh-1.2.3-1.el6 (FEDORA-EPEL-2012-13240)
Mobile shell that supports roaming and intelligent local echo
--------------------------------------------------------------------------------
Update Information:
Update to mosh 1.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 19 2012 Alexander Chernyakhovsky <achernya(a)mit.edu> - 1.2.3-1
- Update to mosh 1.2.3
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
munin-2.0.7-3.el6 (FEDORA-EPEL-2012-13246)
Network-wide graphing framework (grapher/gatherer)
--------------------------------------------------------------------------------
Update Information:
Remove #!env, apply upstream patch, minor spec fixes.
Updated to 2.0.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 19 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.7-3
- BZ# 859956 Minor fedora/rhel build macro fixes
- BZ# 861148 Upstream 1213, Incorrect child count in worker threads for GraphOld.pm and
HTMLOld.pm
* Sun Oct 14 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.7-2
- Do not use 'env' for #! lines.
- Require: perl-Taint-Runtime to prevent warnings
* Sun Oct 7 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.7-1
- Upstream to 2.0.7
- BZ# 850401 Use systemd_preun when available (f18)
- BZ# 863490 [patch] http_load plugin uses wrong time command
- BZ# 862469 Move asyncd init files to asyncd subpackage
* Tue Sep 11 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.6-3
- Upstream removed dists/redhat/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #859956 - Minor fedora/rhel build macro fixes
https://bugzilla.redhat.com/show_bug.cgi?id=859956
[ 2 ] Bug #861148 - munin cron reports [ERROR] Ran out of children: No child processes
https://bugzilla.redhat.com/show_bug.cgi?id=861148
[ 3 ] Bug #867503 - Munin uses perl -T, but doesn't require the perl-Taint-Runtime
package
https://bugzilla.redhat.com/show_bug.cgi?id=867503
[ 4 ] Bug #867437 - Munin shebang error (perl -w: No such file or directory)
https://bugzilla.redhat.com/show_bug.cgi?id=867437
[ 5 ] Bug #850401 - Introduce new systemd-rpm macros in munin spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850401
[ 6 ] Bug #863490 - hhtp_load plugin uses wrong time command
https://bugzilla.redhat.com/show_bug.cgi?id=863490
[ 7 ] Bug #862469 - /etc/init.d/munin-asyncd start gives "munin-asyncd was expected
at @@LIBDIR@@/munin-asyncd"
https://bugzilla.redhat.com/show_bug.cgi?id=862469
--------------------------------------------------------------------------------
================================================================================
mysql-utilities-1.1.0-1.el6 (FEDORA-EPEL-2012-13247)
MySQL Utilities
--------------------------------------------------------------------------------
Update Information:
New version without the new mysqluc command.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2012 Remi Collet <remi(a)fedoraproject.org> - 1.1.0-1
- update to 1.1.0
- new command mysqluc removed (broken)
--------------------------------------------------------------------------------
================================================================================
pesign-0.99-7.el6 (FEDORA-EPEL-2012-13229)
Signing utility for UEFI binaries
--------------------------------------------------------------------------------
Update Information:
Add setfacl for kojibuilder and PIN input via stdin.
This is the pesign PE signing tool.
Automatically select daemon as signer when using rpm macros.
--------------------------------------------------------------------------------
================================================================================
php-pecl-geoip-1.0.8-2.el6 (FEDORA-EPEL-2012-13234)
Extension to map IP addresses to geographic places
--------------------------------------------------------------------------------
Update Information:
upgrade to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 19 2012 Remi Collet <remi(a)fedoraproject.org> - 1.0.8-1
- update to 1.0.8 for php 5.4
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.7-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Sat Oct 15 2011 Remi Collet <remi(a)fedoraproject.org> - 1.0.7-7
- fix segfault when build with latest GeoIP (#746417)
- run test suite during build
- add patch for tests,
https://bugs.php.net/bug.php?id=59804
- add filter to avoid private-shared-object-provides geoip.so
* Fri Jul 15 2011 Andrew Colin Kissa <andrew(a)topdog.za.net> - 1.0.7-6
- Fix bugzilla #715693
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-py9p-1.0.2-1.el6 (FEDORA-EPEL-2012-13245)
Pure Python implementation of 9P protocol (Plan9)
--------------------------------------------------------------------------------
Update Information:
New package build python-py9p 1.0.2-1
--------------------------------------------------------------------------------
================================================================================
python-pyvfs-0.2.5-1.el6 (FEDORA-EPEL-2012-13230)
Simple python VFS library
--------------------------------------------------------------------------------
Update Information:
New package build python-pyvfs 0.2.5-1
--------------------------------------------------------------------------------
================================================================================
python-testtools-0.9.19-1.el6 (FEDORA-EPEL-2012-13231)
Extensions to the Python unit testing framework
--------------------------------------------------------------------------------
Update Information:
* Better discover support and Python3.x improvements
* Python 3 builds now enabled for Fedora releases
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 20 2012 Michel Salim <salimma(a)fedoraproject.org> - 0.9.19-1
- Update to 0.9.19
- On Fedora, also build for Python 3.x
--------------------------------------------------------------------------------
================================================================================
stompclt-0.5-2.el6 (FEDORA-EPEL-2012-13238)
Versatile STOMP client
--------------------------------------------------------------------------------
Update Information:
first build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #853124 - Review Request: stompclt - Versatile STOMP client
https://bugzilla.redhat.com/show_bug.cgi?id=853124
--------------------------------------------------------------------------------
================================================================================
wsl-0.1.8-2.el6 (FEDORA-EPEL-2012-13236)
Wsman Shell Command Line "whistle"
--------------------------------------------------------------------------------
Update Information:
Introducing wsl package (aka "whistle"). A Shell based client for wsman.
--------------------------------------------------------------------------------