The following Fedora EPEL 6 Security updates need testing:
Age URL
999
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
218
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7....
89
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3434/pylint-1.3....
64
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binut...
52
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4242/facter-1.6....
41
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4485/python-torn...
32
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4669/libhtp-0.5....
23
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4884/mapserver-6...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4918/dokuwiki-0-...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0193/bsd-mailx-8...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0232/chicken-4.9...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0278/Django14-1....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0279/drupal7-con...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0315/docker-io-1...
The following builds have been pushed to Fedora EPEL 6 updates-testing
RackTables-0.20.9-1.el6
docker-io-1.4.1-3.el6
engauge-digitizer-5.2-7.20150115git28de7d.el6
golang-github-imdario-mergo-0-0.1.git6ce7536.el6
golang-github-miekg-dns-0-0.1.gita07be6b.el6
golang-googlecode-go-decimal-inf-0-0.1.hg42ca6cd68aa9.el6
metis-5.1.0-5.el6
mock-1.2.4-1.el6
php-horde-imp-6.2.5-1.el6
php-ircmaxell-random-lib-1.1.0-1.el6
php-phpseclib-file-asn1-0.3.9-1.el6
youtube-dl-2015.01.15.1-1.el6
Details about builds:
================================================================================
RackTables-0.20.9-1.el6 (FEDORA-EPEL-2015-0306)
A data-center asset management system
--------------------------------------------------------------------------------
Update Information:
Rebase to v0.20.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 16 2015 Colin Coe <colin.coe(a)gmail.com> - 0.20.9-1
- Rebase to v0.20.9
* Fri Jun 6 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.20.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.20.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Jul 18 2013 Petr Pisar <ppisar(a)redhat.com> - 0.20.4-2
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #977277 - RackTables-0.20.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=977277
--------------------------------------------------------------------------------
================================================================================
docker-io-1.4.1-3.el6 (FEDORA-EPEL-2015-0315)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
set DOCKER_CERT_PATH outside of sysconfig file
don't require fish for fish-completion as it's unavailable
Resolves: rhbz#1175144 - update to 1.4.1
Resolves: rhbz#1173950 remove min version requirements on device-mapper-libs
Security fix for CVE-2014-9357, CVE-2014-9358, CVE-2014-9356
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 15 2015 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.1-3
- set DOCKER_CERT_PATH outside of sysconfig file
* Wed Jan 7 2015 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.1-2
- don't require fish for fish-completion as it's unavailable
* Mon Jan 5 2015 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.1-1
- Resolves: rhbz#1175144 - update to 1.4.1
- patch to make 'docker exec' work
via Vincent Batts <vbatts(a)fedoraproject.org>
https://github.com/docker/libcontainer/issues/309
- subpackages for fish, zsh completion, vim highlighting and logrotate cron
job
* Mon Dec 15 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.0-2
- Resolves: rhbz#1173950 remove min version requirements on device-mapper-libs
* Thu Dec 11 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.0-1
- Resolves: rhbz#1173325
- Resolves: rhbz#1172761 - CVE-2014-9356
- Resolves: rhbz#1172782 - CVE-2014-9357
- Resolves: rhbz#1172787 - CVE-2014-9358
- update to upstream v1.4.0
- override DOCKER_CERT_PATH in sysconfig instead of patching the source
- update metaprovides
- define PR_SET_CHILD_SUBREAPER as per newer kernel-headers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1172761 - CVE-2014-9356 docker: Path traversal during processing of absolute
symlinks
https://bugzilla.redhat.com/show_bug.cgi?id=1172761
[ 2 ] Bug #1172782 - CVE-2014-9357 docker: Escalation of privileges during decompression
of LZMA archives
https://bugzilla.redhat.com/show_bug.cgi?id=1172782
[ 3 ] Bug #1172787 - CVE-2014-9358 docker: Path traversal and spoofing opportunities
presented through image identifiers
https://bugzilla.redhat.com/show_bug.cgi?id=1172787
--------------------------------------------------------------------------------
================================================================================
engauge-digitizer-5.2-7.20150115git28de7d.el6 (FEDORA-EPEL-2015-0324)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- **Included files proposed in bz#1182409.**
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 15 2015 Antonio Trande <sagitter(a)fedoraproject.org> -
5.2-7.20150115git28de7d
- Included files proposed in bz#1182409
* Thu Jan 15 2015 Antonio Trande <sagitter(a)fedoraproject.org> -
5.2-6.20150115git28de7d
- Update to commit 28de7d
- Package appdata and SVG files
- data sub-package incorporated in the main one
- Used the new macro %license
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1182409 - engague-digitizer: appdata file [PATCH]
https://bugzilla.redhat.com/show_bug.cgi?id=1182409
--------------------------------------------------------------------------------
================================================================================
golang-github-imdario-mergo-0-0.1.git6ce7536.el6 (FEDORA-EPEL-2015-0310)
Merging Go structs and maps
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1181100 - Review Request: golang-github-imdario-mergo - Merging Go structs
and maps
https://bugzilla.redhat.com/show_bug.cgi?id=1181100
--------------------------------------------------------------------------------
================================================================================
golang-github-miekg-dns-0-0.1.gita07be6b.el6 (FEDORA-EPEL-2015-0330)
DNS library in Go
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1181105 - Review Request: golang-github-miekg-dns - DNS library in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1181105
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-go-decimal-inf-0-0.1.hg42ca6cd68aa9.el6 (FEDORA-EPEL-2015-0326)
Package implementing "infinite-precision" decimal arithmetic
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1181212 - Review Request: golang-googlecode-go-decimal-inf - Package
implementing "infinite-precision" decimal arithmetic
https://bugzilla.redhat.com/show_bug.cgi?id=1181212
--------------------------------------------------------------------------------
================================================================================
metis-5.1.0-5.el6 (FEDORA-EPEL-2015-0316)
Serial Graph Partitioning and Fill-reducing Matrix Ordering
--------------------------------------------------------------------------------
Update Information:
- **Built on EPEL7**
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 15 2015 Antonio Trande <sagitter(a)fedoraproject.org> - 5.1.0-5
- Built on EPEL7
- Used new macro %license
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.1.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mock-1.2.4-1.el6 (FEDORA-EPEL-2015-0321)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 16 2015 Miroslav Suchý <msuchy(a)redhat.com> - 1.2.4-1
- each user have its own ccache cache [RHBZ#1168116]
- man: write example for --chroot option
- sort options in man page
- sort command in man page
- add Fedora 22 GPG keys
- improve --resultdir part of man page [RHBZ#1181554]
- allow the subsitution of resultdir into the yum.conf block [RHBZ#1125376]
- do no print duplicities in bash completion
- Fixed systemd-nspawn machine name collision [RHBZ#1174286]
- do shell expansion on --new-chroot --chroot [RHBZ#1174317]
- log executing command after nspawn expansion
- make sure that mockchain generate unique repoid for all repos [RHBZ#1179806]
- workaround old python-six in EL7
- Remove checking for chroot existence in --chroot
- Exclude .bash_history and .bashrc from builddir cleanup
- Ignore broken symlinks in chown_home_dir
- create SCM files as non-privileg user [RHBZ#1178576]
- With --no-clean, delete /builddir except build/SOURCES [RHBZ#1173126]
- Man page formatting improvements
- Move the pool size check to later time when pool already exists
- Always use returnOutput in lvm plugin to get possible error output
- put correct version in man page
- Fix unicode characters in logs on Python 2 [RHBZ#1171707]
- Added new option 'postinstall' [RHBZ#1168911]
- Use keepcache=1 in yum.conf [RHBZ#1169126]
- Warn user when LVM thin pool is filled up [RHBZ#1167761]
- add missing max_metadata_age_days do site-defaults.cfg
- add age_check to site-default.cfg
- compress also logs created by package_state plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1168116 - mock has lost multiuser capablity (ccache plugin)
https://bugzilla.redhat.com/show_bug.cgi?id=1168116
[ 2 ] Bug #1181554 - Please improve manual page regarding clean/no-clean
https://bugzilla.redhat.com/show_bug.cgi?id=1181554
[ 3 ] Bug #1125376 - RFE: allow variable subsitution in config_opts['yum.conf']
https://bugzilla.redhat.com/show_bug.cgi?id=1125376
[ 4 ] Bug #1174286 - mock's --new-chroot invalid machine name
https://bugzilla.redhat.com/show_bug.cgi?id=1174286
[ 5 ] Bug #1174317 - --new-chroot --chroot fails
https://bugzilla.redhat.com/show_bug.cgi?id=1174317
[ 6 ] Bug #1179806 - mockchain generate same repoid if url contains //
https://bugzilla.redhat.com/show_bug.cgi?id=1179806
[ 7 ] Bug #1178576 - SCM builds fail with "IOError: [Errno 13] Permission Denied:
/tmp/foo.mock-scm.bar/bar/bar.spec"
https://bugzilla.redhat.com/show_bug.cgi?id=1178576
[ 8 ] Bug #1173126 - can't build successive packages with --no-clean
https://bugzilla.redhat.com/show_bug.cgi?id=1173126
[ 9 ] Bug #1171707 - Corrupted encoding in log files
https://bugzilla.redhat.com/show_bug.cgi?id=1171707
[ 10 ] Bug #1168911 - RFE: install package after successful build
https://bugzilla.redhat.com/show_bug.cgi?id=1168911
[ 11 ] Bug #1169126 - mock downloads packages every build
https://bugzilla.redhat.com/show_bug.cgi?id=1169126
[ 12 ] Bug #1167761 - mock behaves strangely, when lvm quota is reached
https://bugzilla.redhat.com/show_bug.cgi?id=1167761
[ 13 ] Bug #1165282 - mock-1.2.1-1.el6 update causes syntax error in bash_completion
https://bugzilla.redhat.com/show_bug.cgi?id=1165282
[ 14 ] Bug #1168220 - bash completion for --install should not suggest srpm
https://bugzilla.redhat.com/show_bug.cgi?id=1168220
--------------------------------------------------------------------------------
================================================================================
php-horde-imp-6.2.5-1.el6 (FEDORA-EPEL-2015-0322)
A web based webmail system
--------------------------------------------------------------------------------
Update Information:
imp 6.2.5
* [mms] Fix advanced search (Bug #13773).
* [mjr] Fix handling of iTips indicating a change to a series exception (Bug #13777).
* [mms] Fix parsing broken S/MIME messages that don't include the smime-type
content-type parameter (Request #13661).
* [mms] Fix regression when working with multiple selected messages with a POP3 server
(Bug #13759).
* [mms] Only count successful compose mails when determining recipient limits (Bug
#13751).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 15 2015 Remi Collet <remi(a)fedoraproject.org> - 6.2.5-1
- Update to 6.2.5
- add dependency on phpseclib/File_ASN1
- add provides php-composer(horde/imp)
--------------------------------------------------------------------------------
================================================================================
php-ircmaxell-random-lib-1.1.0-1.el6 (FEDORA-EPEL-2015-0329)
A Library For Generating Secure Random Numbers
--------------------------------------------------------------------------------
Update Information:
Upstream doesn't provide any changelog.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 16 2015 Remi Collet <remi(a)fedoraproject.org> - 1.1.0-1
- update to 1.1.0
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-file-asn1-0.3.9-1.el6 (FEDORA-EPEL-2015-0311)
Pure-PHP ASN1 parser
--------------------------------------------------------------------------------
Update Information:
Pure-PHP ASN1 parser.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1182446 - Review Request: php-phpseclib-file-asn1 - Pure-PHP ASN1 parser
https://bugzilla.redhat.com/show_bug.cgi?id=1182446
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2015.01.15.1-1.el6 (FEDORA-EPEL-2015-0317)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to new release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 16 2015 Matej Cepl <mcepl(a)redhat.com> - 2015.01.15.1-1
- Update to new release.
* Wed Jan 14 2015 Till Maas <opensource(a)till.name> - 2015.01.11-1
- Update to new release
* Sat Dec 13 2014 Till Maas <opensource(a)till.name> - 2014.12.10.3-1
- Update to new release
* Thu Nov 13 2014 Jon Ciesla <limburgher(a)gmail.com> - 2014.11.13-1
- Update to latest release.
* Mon Nov 3 2014 Till Maas <opensource(a)till.name> - 2014.11.02.1-1
- Update to latest release
- Add zsh completion file
- Add GPG key verification
* Tue Sep 23 2014 Till Maas <opensource(a)till.name> - 2014.09.22.1-1
- Update to latest release
- Exclude fish completion script
* Sun Sep 7 2014 Till Maas <opensource(a)till.name> - 2014.09.06-1
- Update to 2014-09-06
- Add GPG signature
* Sun Aug 31 2014 Till Maas <opensource(a)till.name> - 2014.08.29-1
- Update to 2014.08.29
* Tue Jul 29 2014 Christopher Meng <rpm(a)cicku.me> - 2014.07.25.1-1
- Update to 2014.07.25.1
--------------------------------------------------------------------------------