The following Fedora EPEL 6 Security updates need testing:
Age URL
488
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11175/php-symfon...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11194/cacti-0.8....
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11183/php-symfon...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11187/libzrtpcpp...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11222/seamonkey-...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11195/chrony-1.2...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11179/libtommath...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11250/Django14-1...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11245/python-vir...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11257/drupal7-en...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11301/drupal7-th...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11291/ansible-1....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11311/roundcubem...
The following builds have been pushed to Fedora EPEL 6 updates-testing
asterisk-sounds-core-1.4.24-1.el6
diskimage-builder-0.0.1-4.el6
inxi-1.9.14-2.el6
perl-Carp-Fix-1_25-1.000001-3.el6
perl-Perl6-Caller-0.100-2.el6
php-PHP-CSS-Parser-5.0.8-1.el6
python-sparklines-0.9-1.el6
remctl-3.6-1.el6
roundcubemail-0.9.3-1.el6
source-highlight-3.1.7-1.el6
trac-vatar-plugin-1.9-1.el6
Details about builds:
================================================================================
asterisk-sounds-core-1.4.24-1.el6 (FEDORA-EPEL-2013-11317)
Core sounds for Asterisk
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.24
Fix incorrect summary on Russian subpackage
Add Italian sounds
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 21 2013 Jeffrey Ollie <jeff(a)ocjtech.us> - 1.4.24-1
- Add Italian (it) sounds
- Fix BZ999376 fix summary for asterisk-sounds-core-ru
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.23-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #999376 - Bad name of field Summary for package asterisk-sounds-core-ru
https://bugzilla.redhat.com/show_bug.cgi?id=999376
--------------------------------------------------------------------------------
================================================================================
diskimage-builder-0.0.1-4.el6 (FEDORA-EPEL-2013-11312)
Image building tools for OpenStack
--------------------------------------------------------------------------------
Update Information:
New diskimage-builder package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #990279 - Review Request: diskimage-builder - Image building tools for
OpenStack
https://bugzilla.redhat.com/show_bug.cgi?id=990279
--------------------------------------------------------------------------------
================================================================================
inxi-1.9.14-2.el6 (FEDORA-EPEL-2013-11309)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to new version with correct sources.
Update to new version, Disable builtin update.
Update to new version.
First release of a newer, better system information script for irc, administration, and
system troubleshooters.
--------------------------------------------------------------------------------
================================================================================
perl-Carp-Fix-1_25-1.000001-3.el6 (FEDORA-EPEL-2013-11315)
Smooth over incompatible changes in Carp 1.25
--------------------------------------------------------------------------------
Update Information:
This is the first Fedora/EPEL release of perl-Carp-Fix-1_25.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #998410 - Review Request: perl-Carp-Fix-1_25 - Smooth over incompatible
changes in Carp 1.25
https://bugzilla.redhat.com/show_bug.cgi?id=998410
--------------------------------------------------------------------------------
================================================================================
perl-Perl6-Caller-0.100-2.el6 (FEDORA-EPEL-2013-11308)
OO caller() interface
--------------------------------------------------------------------------------
Update Information:
This is the first EPEL release of perl-Perl6-Caller.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #998434 - Review Request: perl-Perl6-Caller - OO caller() interface
https://bugzilla.redhat.com/show_bug.cgi?id=998434
--------------------------------------------------------------------------------
================================================================================
php-PHP-CSS-Parser-5.0.8-1.el6 (FEDORA-EPEL-2013-11313)
A Parser for CSS Files
--------------------------------------------------------------------------------
Update Information:
Version 5.0.8:
* vladkens/feature: Uses multibyte string only if loaded mbstring extension.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 23 2013 Remi Collet <remi(a)fedoraproject.org> - 5.0.8-1
- update to 5.0.8
--------------------------------------------------------------------------------
================================================================================
python-sparklines-0.9-1.el6 (FEDORA-EPEL-2013-11307)
A unicode sparkline generation library
--------------------------------------------------------------------------------
Update Information:
Initial packaging.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #999596 - Review Request: python-sparklines - python-sparklines is a unicode
sparkline generation library
https://bugzilla.redhat.com/show_bug.cgi?id=999596
--------------------------------------------------------------------------------
================================================================================
remctl-3.6-1.el6 (FEDORA-EPEL-2013-11318)
Client/server for Kerberos-authenticated command execution
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release. This update slightly modifies the way a client
handles timeouts and signal interruptions. For a full list of changes, see the [upstream
changelog](http://www.eyrie.org/~eagle/software/remctl/news.html).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 21 2013 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 3.6-1
- Upgrade to 3.6
- Drop upstreamed EL5 gcc patch
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Petr Pisar <ppisar(a)redhat.com> - 3.5-2
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
================================================================================
roundcubemail-0.9.3-1.el6 (FEDORA-EPEL-2013-11311)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Two XSS flaws were fixed in roundcube 0.9.3 [1]:
* Fix XSS vulnerability when saving HTML signatures [2],[3]
* Fix XSS vulnerability when editing a message "as new" or draft [2],[4]
[1]
http://trac.roundcube.net/wiki/Changelog#RELEASE0.9.3
[2]
http://trac.roundcube.net/ticket/1489251
[3]
http://trac.roundcube.net/changeset/ce5a6496fd6039962ba7424d153278e41ae87...
[4]
http://trac.roundcube.net/changeset/93b0a30c1c8aa29d862b587b31e52bcc344b8...
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 23 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.9.3-1
- Fix two XSS vulnerabilities:
-
http://trac.roundcube.net/ticket/1489251
* Fri Aug 16 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.9.2-3
- Drop precompiled flash.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jun 17 2013 Adam Williamson <awilliam(a)redhat.com> - 0.9.2-1
- latest upstream
- correct License field, add comment on complex licensing case
* Wed May 1 2013 Adam Williamson <awilliam(a)redhat.com> - 0.9.0-1
- latest upstream
- drop MDB2 dependencies, add php-pdo dependency (upstream now using
pdo not MDB2)
- drop the update.sh script as it requires the installer framework we
don't ship
- update the Fedora README for changes to sqlite and update process
- drop strict.patch, upstream actually merged it years ago, just in
a slightly different format, and we kept dumbly diffing it
- drop references to obsolete patches (all merged upstream long ago)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1000511 - roundcubemail: two XSS flaws fixed in 0.9.3 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1000511
[ 2 ] Bug #1000512 - roundcubemail: two XSS flaws fixed in 0.9.3 [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1000512
--------------------------------------------------------------------------------
================================================================================
source-highlight-3.1.7-1.el6 (FEDORA-EPEL-2013-11320)
Produces a document with syntax highlighting
--------------------------------------------------------------------------------
Update Information:
Updated to 3.1.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 23 2013 Adrian Reber <adrian(a)lisas.de> - 3.1.7-1
- updated to 3.1.7
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.1.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Sat Jul 27 2013 pmachata(a)redhat.com - 3.1.6-5
- Rebuild for boost 1.54.0
* Sat Feb 9 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 3.1.6-4
- Rebuild for Boost-1.53.0
--------------------------------------------------------------------------------
================================================================================
trac-vatar-plugin-1.9-1.el6 (FEDORA-EPEL-2013-11316)
Add gravatar icons to various points around trac
--------------------------------------------------------------------------------
Update Information:
New 1.9 upstream version with some minor bugfixes as well as support for libravatar
backend.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 22 2013 Kevin Fenzi <kevin(a)scrye.com> 1.9-1
- Upgrade to 1.9
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1000099 - Update to trac-vatar-plugin-1.9
https://bugzilla.redhat.com/show_bug.cgi?id=1000099
--------------------------------------------------------------------------------