The following Fedora EPEL 6 Security updates need testing:
Age URL
481
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
71
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-...
24
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10916/ghc-xmonad...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11080/python-key...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11101/znc-1.2-0....
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11100/v8-3.14.5....
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11113/zabbix-1.8...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11129/hylafax+-5...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11175/php-symfon...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11250/Django14-1...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11245/python-vir...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11194/cacti-0.8....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11183/php-symfon...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11187/libzrtpcpp...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11222/seamonkey-...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11195/chrony-1.2...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11179/libtommath...
The following builds have been pushed to Fedora EPEL 6 updates-testing
Django14-1.4.6-1.el6
RBTools-0.5.2-1.el6
ReviewBoard-1.7.13-2.el6
adcli-0.7.3-1.el6
bitlbee-3.2-5.el6
bitlbee-3.2-6.el6
dcap-2.47.8-1.el6
drupal6-views_bulk_operations-1.16-1.el6
drupal7-crumbs-2.0-0.3.beta5.el6
drupal7-markdown-1.2-1.el6
drupal7-tmgmt-1.0-0.5.beta2.el6
fail2ban-0.8.10-2.el6
gimp-paint-studio-2.0-6.el6
mirmon-2.9-1.el6
python-djblets-0.7.17-1.el6
python-virtualenv-1.10.1-1.el6
salt-0.16.3-1.el6
transifex-client-0.9-2.el6
zeroinstall-injector-2.3.3-1.el6
Details about builds:
================================================================================
Django14-1.4.6-1.el6 (FEDORA-EPEL-2013-11250)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
This update fixes a potential XSS via is_safe_url
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 14 2013 Matthias Runge <mrunge(a)redhat.com> - 1.4.6-1
- security related update (rhbz#997128)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #997128 - Django14: python-django: potential XSS via is_safe_url [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=997128
--------------------------------------------------------------------------------
================================================================================
RBTools-0.5.2-1.el6 (FEDORA-EPEL-2013-11246)
Tools for use with ReviewBoard
--------------------------------------------------------------------------------
Update Information:
== ANNOUNCEMENT ==
Starting with this release, ReviewBoard will add new sites to the text file
/etc/reviewboard/sites when running 'rb-site install'. You can manually add the
path to your running site(s) to a file at this location. From now on, the RPM upgrade
process will automatically run the 'rb-site upgrade' on any site listed in this
file, so you no longer have to!
== Changes ==
=== Djblets ===
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
=== ReviewBoard ===
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
=== RBTools ===
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.5.2-1
- New upstream release 0.5.2
-
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.5.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ReviewBoard-1.7.13-2.el6 (FEDORA-EPEL-2013-11246)
Web-based code review tool
--------------------------------------------------------------------------------
Update Information:
== ANNOUNCEMENT ==
Starting with this release, ReviewBoard will add new sites to the text file
/etc/reviewboard/sites when running 'rb-site install'. You can manually add the
path to your running site(s) to a file at this location. From now on, the RPM upgrade
process will automatically run the 'rb-site upgrade' on any site listed in this
file, so you no longer have to!
== Changes ==
=== Djblets ===
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
=== ReviewBoard ===
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
=== RBTools ===
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.13-2
- New upstream release 1.7.13
-
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
- Starting with this release, sites will automatically be upgraded if they are
listed in the text file /etc/reviewboard/sites by the path to their site,
one per line.
--------------------------------------------------------------------------------
================================================================================
adcli-0.7.3-1.el6 (FEDORA-EPEL-2013-11230)
Active Directory enrollment
--------------------------------------------------------------------------------
Update Information:
Minor bugfix for joining Windows 2003 domain controller
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 7 2013 Stef Walter <stefw(a)redhat.com> - 0.7.3-1
- Update to upstream point release 0.7.3
- Don't try to set encryption types on Windows 2003
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.7.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bitlbee-3.2-5.el6 (FEDORA-EPEL-2013-11244)
IRC to other chat networks gateway
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS (#992022, new libotr4 on Rawhide) and upgrade to 3.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Matěj Cepl <mcepl(a)redhat.com> - 3.2-5
- Add a conditional patch for F>=20 to build with libotr4
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bitlbee-3.2-6.el6 (FEDORA-EPEL-2013-11236)
IRC to other chat networks gateway
--------------------------------------------------------------------------------
Update Information:
Listen on IPv6 ports as well, get back NSS crash patch.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Matěj Cepl <mcepl(a)redhat.com> - 3.2-6
- systemd socket should be opened over IPv6 as well (#949303)
- return fix for NSS crash (#922447)
* Fri Aug 16 2013 Matěj Cepl <mcepl(a)redhat.com> - 3.2-5
- Add a conditional patch for F>=20 to build with libotr4
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #949303 - Bitlbee socket not listening on IPv6
https://bugzilla.redhat.com/show_bug.cgi?id=949303
[ 2 ] Bug #922447 - bitlbee crashes on disconnection due to a memory problem
https://bugzilla.redhat.com/show_bug.cgi?id=922447
--------------------------------------------------------------------------------
================================================================================
dcap-2.47.8-1.el6 (FEDORA-EPEL-2013-11249)
Client Tools for dCache
--------------------------------------------------------------------------------
Update Information:
Fixes for large vector requests.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.47.8-1
- New upstream release
- Drop patch dcap-segfault.patch - merged upstream
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.47.7-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
drupal6-views_bulk_operations-1.16-1.el6 (FEDORA-EPEL-2013-11247)
This module augments Views by allowing bulk operations to be executed
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.16 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/1856704
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.16-1
- Update to upstream 1.16 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/1856704
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.15-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #997790 - drupal6-views_bulk_operations-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=997790
--------------------------------------------------------------------------------
================================================================================
drupal7-crumbs-2.0-0.3.beta5.el6 (FEDORA-EPEL-2013-11231)
The ultimate breadcrumbs module
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 2.0-beta5 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2064257
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.0-0.3.beta5
- Update to upstream 2.0-beta5 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2064257
* Tue Aug 13 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.0-0.2.beta4
- Update to upstream 2.0-beta4 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2063791
* Thu Aug 8 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.0-0.1.beta1
- Update to upstream 2.0-beta1 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2060015
* Wed Aug 7 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.10-1
- Update to upstream 1.10 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2051987
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #997791 - drupal7-crumbs-2.0-beta5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=997791
--------------------------------------------------------------------------------
================================================================================
drupal7-markdown-1.2-1.el6 (FEDORA-EPEL-2013-11237)
Provides Markdown filter integration for Drupal input formats.
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.2 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2065761
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.2-1
- Update to upstream 1.2 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2065761
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #997793 - drupal7-markdown-1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=997793
--------------------------------------------------------------------------------
================================================================================
drupal7-tmgmt-1.0-0.5.beta2.el6 (FEDORA-EPEL-2013-11233)
Translation Management Tool
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.0-beta2 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2066361
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.0-0.5.beta2
- Update to upstream 1.0-beta2 release for bug fixes
- Upstream changelog for this release is avalble at
https://drupal.org/node/2066361
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0-0.4.beta1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #997795 - drupal7-tmgmt-1.0-beta2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=997795
--------------------------------------------------------------------------------
================================================================================
fail2ban-0.8.10-2.el6 (FEDORA-EPEL-2013-11243)
Ban IPs that make too many password failures
--------------------------------------------------------------------------------
Update Information:
Fix hostsdeny permission issue
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2013 Orion Poplawski <orion(a)cora.nwra.com> - 0.8.10-2
- Add upstream patch to fix hostsdeny permission issue
--------------------------------------------------------------------------------
================================================================================
gimp-paint-studio-2.0-6.el6 (FEDORA-EPEL-2013-11229)
A collection of tool option presets and brushes for GIMP
--------------------------------------------------------------------------------
Update Information:
Gimp Paint Studio has landed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #989359 - Review Request: gimp-paint-studio - A collection of tool option
presets and brushes for GIMP
https://bugzilla.redhat.com/show_bug.cgi?id=989359
--------------------------------------------------------------------------------
================================================================================
mirmon-2.9-1.el6 (FEDORA-EPEL-2013-11242)
Monitor the status of mirrors
--------------------------------------------------------------------------------
Update Information:
New RPM.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #989842 - Review Request: mirmon - Monitor the status of mirrors
https://bugzilla.redhat.com/show_bug.cgi?id=989842
--------------------------------------------------------------------------------
================================================================================
python-djblets-0.7.17-1.el6 (FEDORA-EPEL-2013-11246)
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
== ANNOUNCEMENT ==
Starting with this release, ReviewBoard will add new sites to the text file
/etc/reviewboard/sites when running 'rb-site install'. You can manually add the
path to your running site(s) to a file at this location. From now on, the RPM upgrade
process will automatically run the 'rb-site upgrade' on any site listed in this
file, so you no longer have to!
== Changes ==
=== Djblets ===
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
=== ReviewBoard ===
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
=== RBTools ===
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.17-1
- New upstream release 0.7.17
-
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
--------------------------------------------------------------------------------
================================================================================
python-virtualenv-1.10.1-1.el6 (FEDORA-EPEL-2013-11245)
Tool to create isolated Python environments
--------------------------------------------------------------------------------
Update Information:
From upstream:
* Upgraded pip to v1.4.1
* Upgraded setuptools to v0.9.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Steve 'Ashcrow' Milner <me(a)stevemilner.org> - 1.10.1-1
- Upstream upgraded pip to v1.4.1
- Upstream upgraded setuptools to v0.9.8 (fixes CVE-2013-1633)
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #994182 - CVE-2013-1633 python-setuptools: easy_install insecure installation
mechanism
https://bugzilla.redhat.com/show_bug.cgi?id=994182
--------------------------------------------------------------------------------
================================================================================
salt-0.16.3-1.el6 (FEDORA-EPEL-2013-11234)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to salt-0.16.3 bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Andrew Niemantsverdriet <andrewniemants(a)gmail.com> - 0.16.3-1
- Update to patch release 0.16.3
* Thu Aug 8 2013 Clint Savage <herlo1(a)gmail.com> - 0.16.2-1
- Update to patch release 0.16.2
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.16.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
transifex-client-0.9-2.el6 (FEDORA-EPEL-2013-11248)
Command line tool for Transifex translation management
--------------------------------------------------------------------------------
Update Information:
Command line tool for Transifex translation management
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2013 Luis Bazan <lbazan(a)fedoraproject.org> - 0.9-2
- add new requirement
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #985248 - transifex-client: use system python-backports-ssl_match_hostname
https://bugzilla.redhat.com/show_bug.cgi?id=985248
--------------------------------------------------------------------------------
================================================================================
zeroinstall-injector-2.3.3-1.el6 (FEDORA-EPEL-2013-11232)
The Zero Install Injector (0launch)
--------------------------------------------------------------------------------
Update Information:
2.3.3:
http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/7119
- Disable multiarch support on Linux if /lib/ld-linux.so.2 is missing.
Otherwise, we try to run 32-bit binaries and get a useless error
message.
- Trim whitespace inside <arg> elements
2.3.2:
http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/7046
- Make "0install run feed.xml" fall back to Python. It was complaining
that feed.xml wasn't a selections document.
- Added missing --offline option to some commands in the OCaml front-end.
- Suppress "Unknown option" error during tab completion.
- In --verbose mode, show changes to environment variables.
2.3.1:
http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/7038
- Fix mtime check in selections.get_unavailable_selections for
native packages.
- Always return False for native packages in needs_download if
include_packages is False.
- When loading selections from a file, convert last-check-mtime
attribute to an int (if it is present)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 14 2013 Michel Salim <salimma(a)fedoraproject.org> - 2.3.3-1
- Update to 2.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #983027 - zeroinstall-injector-2.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=983027
--------------------------------------------------------------------------------