The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6302/clamav-0.97.5-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6330/perl-YAML-LibY... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6267/php-ZendFramew... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6181/openstack-nova... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6039/rt3-3.8.13-1.e... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5965/python-virtual... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6125/viewvc-1.1.15-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6224/sticky-notes-0...

The following builds have been pushed to Fedora EPEL 6 updates-testing

assimp-2.0.863-5.20110824svn.el6 compton-0-0.1.20120603gitd52f7a0.el6 drupal7-i18n-1.7-1.el6 erlang-js-1.0.2-2.el6 fetchlog-1.4-1.el6 kvirc-4.2.0-3.el6 libaesgm-20090429-5.el6 novnc-0.3-11.el6 perl-Net-SSH2-0.45-2.el6 perl-No-Worries-0.4-1.el6 perl-YAML-LibYAML-0.38-3.el6 php-htmLawed-1.1.12-1.el6 php-symfony2-ClassLoader-2.0.15-2.el6 python-cmd2-0.6.4-2.el6 python-pkgwat-api-0.3-3.el6 python-tablib-0.9.11.20120702git752443f-3.el6 strongswan-5.0.0-1.git20120619.el6 userspace-rcu-0.7.3-1.el6 wine-1.4.1-1.el6

Details about builds:

================================================================================ assimp-2.0.863-5.20110824svn.el6 (FEDORA-EPEL-2012-6327) Library to import various 3D model formats into applications -------------------------------------------------------------------------------- Update Information:

Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications. --------------------------------------------------------------------------------

================================================================================ compton-0-0.1.20120603gitd52f7a0.el6 (FEDORA-EPEL-2012-6334) Compositor for X -------------------------------------------------------------------------------- Update Information:

Compton is a compositor for X, and a fork of xcompmgr-dana. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #836163 - Review Request: compton - Compositor for X https://bugzilla.redhat.com/show_bug.cgi?id=836163 --------------------------------------------------------------------------------

================================================================================ drupal7-i18n-1.7-1.el6 (FEDORA-EPEL-2012-6315) Collection of modules to extend Drupal core multilingual capabilities -------------------------------------------------------------------------------- Update Information:

New upstream version, http://drupal.org/node/1668340. Update to 1.6 BZ834182 -------------------------------------------------------------------------------- ChangeLog:

* Thu Jul 5 2012 Peter Borsa peter.borsa@gmail.com - 1.7-1 - Update to 1.7 * Wed Jun 27 2012 Scott Dodson sdodson@redhat.com - 1.6-0 - Update to 1.6 BZ834182 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #837245 - drupal7-i18n-1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=837245 [ 2 ] Bug #834182 - drupal7-i18n-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=834182 --------------------------------------------------------------------------------

================================================================================ erlang-js-1.0.2-2.el6 (FEDORA-EPEL-2012-6329) A Friendly Erlang to Javascript Binding -------------------------------------------------------------------------------- Update Information:

* Ver. 1.0.2 * Finally it passes all eunit-tests on EL6. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jul 5 2012 Peter Lemenkov lemenkov@gmail.com - 1.0.2-2 - Enable back building with js-1.7.0 (EL6) * Thu Jul 5 2012 Peter Lemenkov lemenkov@gmail.com - 1.0.2-1 - Ver. 1.0.2 * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.5.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Wed Apr 13 2011 Martin Stransky stransky@redhat.com - 0.5.0-3 - build fix for js 1.8.5 --------------------------------------------------------------------------------

================================================================================ fetchlog-1.4-1.el6 (FEDORA-EPEL-2012-6333) Utility to display new messages of a logfile since last run -------------------------------------------------------------------------------- Update Information:

updated to 1.4 -------------------------------------------------------------------------------- ChangeLog:

* Wed Jul 4 2012 Paul Wouters pwouters@redhat.com - 1.4-1 - Updated to 1.4 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #608241 - fetchlog-1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=608241 --------------------------------------------------------------------------------

================================================================================ kvirc-4.2.0-3.el6 (FEDORA-EPEL-2012-6312) Free portable IRC client -------------------------------------------------------------------------------- Update Information:

KVIrc 4.2.0

- Change max dcc packet size to increase the transfer speed - system.runcmd: added gnome-terminal to the list of terminals - new splashy - Add support for magnet and spotify urls - Added CP949 to KviLocale - Added Aria theme - Dropped the KviTalPopupMenu layer, ported the involved code to QAction - Some work on cleaning window management and activation - Added $file.time() function - added $insideAlias(): a function to identify whether code was called as /alias or $function - Add a -t switch to system.runcmd so a terminal can be explicitly provided - Allow STARTTLS to be used also without CAP support - Improvements in class webview, cleaning of kvs classes - Theme the background of KviSharedFilesWindow - Added rejoin popup entry on dead channels KviMainWindow when global transparency is not used - Improve irc:// url handling: avoid a double connection when the url points to an already connected server - Added KviShortcut to better handle keyboard accellerators - Dropped cryptopp dependency - SSL certificate fingerprint verification - Added "force KVS mode" shortcut modifier - Improved KviCString - Splitted Initalization Vector engine to its own file and added real CBC mode to Rijndael engine (wip) - Reworked IRC URI handling using regexp and added the possibility to paste a URI in the address bar or type a host directly without the protocol (eg: irc://) - Discriminate channels across different networks in settings - Added case sensivity flag to $str.* functions - Improved SQL object class - Added the ability to export logs to different formats (plain text, HTML, ...) - Added $log.export() function - Added mediaplayer interface for Spotify - Added 16x16 and 48x48 icon sizes - Added alpha component in color options - Added $file.diskspace(), $isBot() and $gender() functions - Added Qt SVG support - Ported the pseudo transparency to Qt way - Reworked toolbars (including drag'n'drop) and ported actions to Qt way - Improved the input editor

See http://kvirc.net/?id=news&story=2012.07.03.03.15.1.story&dir=latest -------------------------------------------------------------------------------- ChangeLog:

* Mon Jul 2 2012 Alexey Kurov nucleo@fedoraproject.org - 4.2.0-3 - fix epel build * Mon Jul 2 2012 Alexey Kurov nucleo@fedoraproject.org - 4.2.0-2 - new tarball * Sun Jul 1 2012 Alexey Kurov nucleo@fedoraproject.org - 4.2.0-1 - KVIrc 4.2.0 - drop BR: cryptopp-devel, esound-devel * Thu Jan 5 2012 Alexey Kurov nucleo@fedoraproject.org - 4.0.4-3 - fix build with gcc-4.7.0 --------------------------------------------------------------------------------

================================================================================ libaesgm-20090429-5.el6 (FEDORA-EPEL-2012-6326) Library implementation of AES (Rijndael) cryptographic methods -------------------------------------------------------------------------------- Update Information:

Library implementation of AES (Rijndael) cryptographic methods. --------------------------------------------------------------------------------

================================================================================ novnc-0.3-11.el6 (FEDORA-EPEL-2012-6322) VNC client using HTML5 (Web Sockets, Canvas) with encryption support -------------------------------------------------------------------------------- Update Information:

- Add a dependency for novnc on python-websockify -------------------------------------------------------------------------------- ChangeLog:

* Wed Jul 4 2012 Till Maas opensource@till.name - 0.3-11 - Add a dependency for novnc on python-websockify --------------------------------------------------------------------------------

================================================================================ perl-Net-SSH2-0.45-2.el6 (FEDORA-EPEL-2012-6320) Support for the SSH 2 protocol via libSSH2 -------------------------------------------------------------------------------- Update Information:

Explicitly require libssh2-1.2.2-11 to avoid bug #826511. Net::SSH2 is a perl interface to the libssh2 (http://www.libssh2.org) library. It supports the SSH2 protocol (there is no support for SSH1) with all of the key exchanges, ciphers, and compression of libssh2. --------------------------------------------------------------------------------

================================================================================ perl-No-Worries-0.4-1.el6 (FEDORA-EPEL-2012-6323) Perl coding without worries -------------------------------------------------------------------------------- Update Information:

upgrade to latest 0.4 version -------------------------------------------------------------------------------- ChangeLog:

* Wed Jul 4 2012 Massimo Paladin massimo.paladin@gmail.com 0.4-1 - Updating to latest upstream version. * Wed Jun 27 2012 Petr Pisar ppisar@redhat.com - 0.3-3 - Perl 5.16 rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #837541 - Upgrade to new upstream version https://bugzilla.redhat.com/show_bug.cgi?id=837541 --------------------------------------------------------------------------------

================================================================================ perl-YAML-LibYAML-0.38-3.el6 (FEDORA-EPEL-2012-6330) Perl YAML Serialization using XS and libyaml -------------------------------------------------------------------------------- Update Information:

This update fixes various format string vulnerabilities (CVE-2012-1152, CPAN RT#46507).

It also include some bug-fixes and enhancements from upstream:

* Fix LoadFile on empty file failure (CPAN RT#54564) * Fix memory leaks in YAML::XS::Load() method (CPAN RT#46172) * Fix for broken deparse test (CPAN RT#73716) * Handle misbehaved tied hashes (CPAN RT#52730) * Handle 'get' magic * Added support for tied arrays and hashes * Don't turn on the UTF-8 flag for strings containing only US-ASCII (0x00-0x7F) characters (CPAN RT#51886)

-------------------------------------------------------------------------------- ChangeLog:

* Mon Jun 11 2012 Petr Pisar ppisar@redhat.com - 0.38-3 - Perl 5.16 rebuild - Build-require Data::Dumper * Thu Mar 29 2012 Paul Howarth paul@city-fan.org - 0.38-2 - Fix various format string vulnerabilities (CVE-2012-1152, CPAN RT#46507) - De-duplicate buildreqs, with Module>Install>Tests priority - Install to vendor directories - Don't need to remove empty directories from buildroot - Don't use macros for commands - Make %files list more explicit - Tidy %description * Fri Jan 13 2012 Marcela Mašláňová mmaslano@redhat.com - 0.38-1 - Bump to 0.38 * Fri Sep 30 2011 Petr Sabata contyk@redhat.com - 0.37-1 - 0.37 bump - Remove defattr - Correct BR * Fri Jun 17 2011 Marcela Mašláňová mmaslano@redhat.com - 0.35-2 - Perl mass rebuild * Mon Apr 4 2011 Petr Sabata psabata@redhat.com - 0.35-1 - 0.35 bump - Removing obsolete buildroot stuff * Wed Mar 16 2011 Paul Howarth paul@city-fan.org - 0.34-4 - Improve overly-generic package summary - README is already UTF-8 encoded in version 0.34 so don't try converting it * Wed Feb 9 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.34-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Sep 29 2010 jkeating - 0.34-2 - Rebuilt for gcc bug 634757 * Thu Sep 23 2010 Marcela Mašláňová mmaslano@redhat.com - 0.34-1 - update -------------------------------------------------------------------------------- References:

[ 1 ] Bug #801738 - CVE-2012-1152 perl-YAML-LibYAML: Multiple format string flaws by reporting errors during YAML document load https://bugzilla.redhat.com/show_bug.cgi?id=801738 --------------------------------------------------------------------------------

================================================================================ php-htmLawed-1.1.12-1.el6 (FEDORA-EPEL-2012-6321) PHP code to purify and filter HTML -------------------------------------------------------------------------------- Update Information:

PHP code to purify & filter HTML

* make HTML markup in text secure and standard-compliant * process text for use in HTML, XHTML or XML documents * restrict HTML elements, attributes or URL protocols using black or white-lists * balance tags, check element nesting, transform deprecated attributes and tags, make relative URLs absolute, etc. * fast, highly customizable, well-documented * single, 48 kb file * simple HTML Tidy alternative * free and licensed under LGPL v3 and GPL v2+ * use to filter, secure & sanitize HTML in blog comments or forum posts, generate XML-compatible feed items from web-page excerpts, convert HTML to XHTML, pretty-print HTML, scrape web-pages, reduce spam, remove XSS code, etc.

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #836587 - Review Request: php-htmLawed - PHP code to purify and filter HTML https://bugzilla.redhat.com/show_bug.cgi?id=836587 --------------------------------------------------------------------------------

================================================================================ php-symfony2-ClassLoader-2.0.15-2.el6 (FEDORA-EPEL-2012-6324) Symfony2 ClassLoader Component -------------------------------------------------------------------------------- Update Information:

The ClassLoader Component loads your project classes automatically if they follow some standard PHP conventions.

Whenever you use an undefined class, PHP uses the auto-loading mechanism to delegate the loading of a file defining the class. Symfony2 provides a "universal" auto-loader, which is able to load classes from files that implement one of the following conventions:

* The technical interoperability standards (http://symfony.com/PSR0) for PHP 5.3 name-spaces and class names.

* The PEAR (http://pear.php.net/manual/en/standards.php) naming convention for classes.

If your classes and the third-party libraries you use for your project follow these standards, the Symfony2 auto-loader is the only auto-loader you will ever need. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #823041 - Review Request: php-symfony2-ClassLoader - Symfony2 ClassLoader Component https://bugzilla.redhat.com/show_bug.cgi?id=823041 --------------------------------------------------------------------------------

================================================================================ python-cmd2-0.6.4-2.el6 (FEDORA-EPEL-2012-6319) Extra features for standard library's cmd module -------------------------------------------------------------------------------- Update Information:

Initial packaging (#837687) --------------------------------------------------------------------------------

================================================================================ python-pkgwat-api-0.3-3.el6 (FEDORA-EPEL-2012-6325) Python API for querying the fedora packages webapp -------------------------------------------------------------------------------- Update Information:

Initial packaging (#837432) --------------------------------------------------------------------------------

================================================================================ python-tablib-0.9.11.20120702git752443f-3.el6 (FEDORA-EPEL-2012-6313) Format agnostic tabular data library (XLS, JSON, YAML, CSV) -------------------------------------------------------------------------------- Update Information:

Initial packaging -------------------------------------------------------------------------------- References:

[ 1 ] Bug #837686 - Review Request: python-tablib - Format agnostic tabular data library (XLS, JSON, YAML, CSV) https://bugzilla.redhat.com/show_bug.cgi?id=837686 --------------------------------------------------------------------------------

================================================================================ strongswan-5.0.0-1.git20120619.el6 (FEDORA-EPEL-2012-6331) An OpenSource IPsec-based VPN Solution -------------------------------------------------------------------------------- Update Information:

The new major upstream release 5.0.0 with a single IKEv1/IKEv2 daemon. Its configuration is backwards compatible. For more details see http://wiki.strongswan.org/projects/strongswan/wiki/CharonPlutoIKEv1. Built with openssl plugin enabled. -------------------------------------------------------------------------------- ChangeLog:

* Wed Jul 4 2012 Pavel Šimerda psimerda@redhat.com - 5.0.0-1.git20120619 - Update to current upstream release - Comment out all stuff that is only needed for git builds - Remove renaming patch from git - Improve init patch used for EPEL * Thu Jun 21 2012 Pavel Šimerda psimerda@redhat.com - 5.0.0-0.3.git20120619 - Build with openssl plugin enabled * Wed Jun 20 2012 Pavel Šimerda psimerda@redhat.com - 5.0.0-0.2.git20120619 - Add README.Fedora with link to 4.6 to 5.0 migration information * Tue Jun 19 2012 Pavel Šimerda - 5.0.0-0.1.git20120619 - Snapshot of upcoming major release - Move patches and renaming upstream http://wiki.strongswan.org/issues/194 http://wiki.strongswan.org/issues/195 - Notified upstream about manpage issues * Tue Jun 19 2012 Pavel Šimerda - 4.6.4-2 - Make initscript patch more distro-neutral - Add links to bugreports for patches --------------------------------------------------------------------------------

================================================================================ userspace-rcu-0.7.3-1.el6 (FEDORA-EPEL-2012-6328) RCU (read-copy-update) implementation in user space -------------------------------------------------------------------------------- Update Information:

Replace the current package which is too old to be usable with the latest release -------------------------------------------------------------------------------- References:

[ 1 ] Bug #828716 - userspace-rcu is too old. Seems unmaintained. https://bugzilla.redhat.com/show_bug.cgi?id=828716 --------------------------------------------------------------------------------

================================================================================ wine-1.4.1-1.el6 (FEDORA-EPEL-2012-6311) A Windows 16/32/64 bit emulator -------------------------------------------------------------------------------- Update Information:

* Translation updates. * Various bug fixes. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jul 5 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4.1-1 - version upgrade * Wed Mar 7 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-1 - version upgrade * Tue Mar 6 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.8.rc6 - version upgrade * Sat Feb 25 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.7.rc5 - version upgrade * Tue Feb 21 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.6.rc4 - fix dependency issue (#795295) * Sun Feb 19 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.5.rc4 - version upgrade * Fri Feb 17 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.4.rc3 - version upgrade - cleanup arm dependency fixes * Fri Feb 17 2012 Peter Robinson pbrobinson@fedoraproject.org - 1.4-0.3.rc2 - Fix architecture dependencies on ARM so it installs * Thu Feb 2 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.2.rc2 - version upgrade * Sat Jan 28 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.4-0.1.rc1 - version upgrade * Wed Jan 25 2012 Peter Robinson pbrobinson@fedoraproject.org - 1.3.37-2 - Add initial support for wine on ARM * Fri Jan 13 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.37-1 - version upgrade - drop obsoleted patches * Sat Dec 31 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.36-1 - version upgrade * Mon Dec 19 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.35-1 - version upgrade * Thu Dec 8 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.34-1 - version upgrade * Sun Nov 20 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.33-1 - version upgrade(rhbz#755192) * Sat Nov 5 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.32-1 - version upgrade (rhbz#745434) * Fri Nov 4 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.31-2 - pull in correct wine-alsa arch in the pa meta package (rhbz#737431) * Sun Oct 23 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.31-1 - version upgrade * Mon Oct 10 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.30-1 - version upgrade * Sat Sep 24 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.29-1 - version upgrade * Sun Sep 11 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.28-1 - version upgrade - require -alsa from -pulseaudio package for new sound api * Mon Aug 29 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.27-1 - version upgrade - fix epel build (rhbz#733802) * Tue Aug 23 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.26-3 - drop pulse configure option - fix f16 build (dbus/hal configure options) * Mon Aug 22 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.26-2 - drop pulse patches - make pulseaudio package meta and require alsa pa plugin - update udisks patch * Sun Aug 7 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.26-1 - version upgrade * Fri Jul 22 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.25-1 - version upgrade - remove -jack and -esd (retired upstream) - rebase to Maarten Lankhorst's winepulse - drop obsolete winepulse readme - add udisks support from pending patches (winehq#21713, rhbz#712755) - disable xinput2 (broken) * Sun Jul 10 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.24-1 - version upgrade - add sign as source10 - drop mshtml patch (upstream) * Sun Jun 26 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.23-1 - version upgrade - winepulse upgrade (0.40) - fix gcc optimization problem (rhbz#710352, winehq#27375) * Tue Jun 21 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.22-2 - workaround gcc optimization problem (rhbz#710352) * Sun Jun 12 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.22-1 - version upgrade * Sat May 28 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.21-1 - version upgrade * Sun May 15 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.20-1 - version upgrade * Sat Apr 30 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.19-1 - version upgrade (#701003) - remove wine-oss - disable hal (>=f16) * Sat Apr 16 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.3.18-1 - version upgrade --------------------------------------------------------------------------------