The following Fedora EPEL 6 Security updates need testing:
Age URL
584
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
396
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
97
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0376/openconnect...
54
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0823/openstack-k...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5643/php-sabreda...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5789/gallery3-3....
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5801/python-virt...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5853/owncloud-4....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5862/python-back...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5865/moodle-2.2....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5919/livecd-tool...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5893/mediawiki11...
The following builds have been pushed to Fedora EPEL 6 updates-testing
airinv-1.00.0-2.el6
airrac-1.00.0-2.el6
airsched-1.00.0-2.el6
dspam-3.10.2-4.el6
ferm-2.1.2-1.el6
ginfo-1.0.2-1.el6
lfcbase-1.5.4-2.el6
livecd-tools-13.4.4-2.el6
mapserver-6.0.3-12.el6
openvpn-2.3.1-2.el6
packagedb-cli-1.5.0-1.el6
plowshare-0.9.4-0.41.20130520git.el6
pngquant-1.8.3-3.el6
privoxy-3.0.21-3.el6
rmol-1.00.0-2.el6
sevmgr-1.00.0-3.el6
simcrs-1.00.0-2.el6
simfqt-1.00.0-2.el6
trademgen-1.00.0-2.el6
travelccm-1.00.1-2.el6
Details about builds:
================================================================================
airinv-1.00.0-2.el6 (FEDORA-EPEL-2013-5912)
C++ Simulated Airline Inventory Management System library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
airrac-1.00.0-2.el6 (FEDORA-EPEL-2013-5916)
C++ Simulated Revenue Accounting (RAC) System Library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
airsched-1.00.0-2.el6 (FEDORA-EPEL-2013-5902)
C++ Simulated Airline Schedule Manager Library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
dspam-3.10.2-4.el6 (FEDORA-EPEL-2013-5899)
A library and Mail Delivery Agent for Bayesian SPAM filtering
--------------------------------------------------------------------------------
Update Information:
Fixes a recipient corruption bug
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 23 2013 Nathanael Noblet <nathanael(a)gnat.ca> - 3.10.2-4
- Fix recipient corruption bug
* Wed May 15 2013 Nathanael Noblet <nathanael(a)gnat.ca> - 3.10.2-3
- set hardened build to add PIE option since dspam can be long running bug #954345
- properly fixes #657357 - PostgreSQL purge script works
--------------------------------------------------------------------------------
================================================================================
ferm-2.1.2-1.el6 (FEDORA-EPEL-2013-5911)
For Easy Rule Making
--------------------------------------------------------------------------------
Update Information:
Ferm update to 2.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2013 Pavel Alexeev <Pahan(a)Hubbitus.info> - 2.1.2-1
- Update to 2.1.2 (bz#890162).
* Sun Sep 2 2012 Pavel Alexeev <Pahan(a)Hubbitus.info> - 2.2.1-1
- Update to 2.1.1 version by mail of Christopher Meng.
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #963971 - Update Ferm packages to upstream 2.1.2 in EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=963971
--------------------------------------------------------------------------------
================================================================================
ginfo-1.0.2-1.el6 (FEDORA-EPEL-2013-5917)
A versatile tool for discovering Grid services
--------------------------------------------------------------------------------
Update Information:
Cosmetic Improvements
Refactored version enabling general GLUE 2.0 queries
Refactored version enabling general GLUE 2.0 queries
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 23 2013 Laurence Field <laurence.field(a)cern.ch> - 1.0.2-1
- Minor cosmetic improvements
* Thu Apr 25 2013 Laurence Field <laurence.field(a)cern.ch> - 1.0.1-1
- Refactored version enabling general GLUE 2.0 queries
--------------------------------------------------------------------------------
================================================================================
lfcbase-1.5.4-2.el6 (FEDORA-EPEL-2013-5904)
Lemke Foundation Classes
--------------------------------------------------------------------------------
Update Information:
New RPM.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #959974 - Review Request: lfcbase - Lemke Foundation Classes
https://bugzilla.redhat.com/show_bug.cgi?id=959974
--------------------------------------------------------------------------------
================================================================================
livecd-tools-13.4.4-2.el6 (FEDORA-EPEL-2013-5919)
Tools for building live CDs
--------------------------------------------------------------------------------
Update Information:
The livecd-tools package provides support for reading and executing
Kickstart files in order to create a system image. It was discovered
that livecd-tools gave the root user an empty password rather than
leaving the password locked in situations where no 'rootpw' directive
was used or when the 'rootpw --lock' directive was used within the
Kickstart file, which could allow local users to gain access to the
root account. (CVE-2013-2069)
Please note that livecd-tools is also used by appliance-tools to create
images used for virtual machines, USB based systems, and so on.
Additionally, the Python script components of livecd-tools have been
broken out into a separate package named python-imgcreate on some
distributions (such as Fedora).
Acknowledgements:
Red Hat would like to thank Amazon Web Services for reporting this issue.
Amazon Web Services acknowledges Sylvain Beucler as the original reporter.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 23 2013 Brian C. Lane <bcl(a)redhat.com> 13.4.4-2
- Version 13.4.4 (bcl)
- Avoid setting empty root password (#962493) (thoger)
- Update spec for mkefiboot
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #966596 - CVE-2013-2069 livecd-tools: improper handling of passwords
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=966596
--------------------------------------------------------------------------------
================================================================================
mapserver-6.0.3-12.el6 (FEDORA-EPEL-2013-5918)
Environment for building spatially-enabled internet applications
--------------------------------------------------------------------------------
Update Information:
mapserver in epel6 has serious packaging issues
Bug fixing and trim of changelog
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 23 2013 Pavel Lisý <pali(a)fedoraproject.org> - 6.0.3-12
- BZ 966400 - mapserver in epel6 has serious packaging issues
* Wed May 22 2013 Pavel Lisý <pali(a)fedoraproject.org> - 6.0.3-11
- BZ 910689 - dependency on bitstream-vera-sans-fonts changed to dejavu-sans-fonts
- BZ 960856 - Missing dependency: bitstream-vera-sans-fonts
- BZ 747421 - Move CGI executable from /usr/sbin to /usr/libexec
- BZ 846543 - mapserver-java is incorrectly packaged (missing required native library)
- trim of changelog
* Mon Mar 25 2013 Oliver Falk <oliver(a)linux-kernel.at> - 6.0.3-10.1
- Rebuild - fix changelog (bogus date)
* Sat Mar 23 2013 Remi Collet <rcollet(a)redhat.com> - 6.0.3-10
- rebuild for
http://fedoraproject.org/wiki/Features/Php55
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.0.3-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jan 18 2013 Adam Tkac <atkac redhat com> - 6.0.3-8
- rebuild due to "jpeg8-ABI" feature drop
* Fri Oct 26 2012 Remi Collet <remi(a)fedoraproject.org> - 6.0.3-7
- conform to PHP Guidelines (#828161)
- add minimal load test for php extension
* Tue Oct 16 2012 Pavel Lisý <pali(a)fedoraproject.org> - 6.0.3-6
- temporary removed mapserver-java (mapscript) due to build problem
with jdk7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #966400 - mapserver in epel6 has serious packaging issues
https://bugzilla.redhat.com/show_bug.cgi?id=966400
--------------------------------------------------------------------------------
================================================================================
openvpn-2.3.1-2.el6 (FEDORA-EPEL-2013-5913)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Re-enable plugins.
Restore man page.
Enable pkcs11.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #966425 - Missing man page in openvpn-2.3.1-1.el6.x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=966425
[ 2 ] Bug #966373 - After update, the pam auth module .so-file is missing.
Configurations using pam auth fails after upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=966373
--------------------------------------------------------------------------------
================================================================================
packagedb-cli-1.5.0-1.el6 (FEDORA-EPEL-2013-5910)
A CLI for pkgdb
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 23 2013 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 1.5.0-1
- Update to 1.5.0
- Fixes RHBZ#966196
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #966196 - pkgdb-cli gives incorrect error messages
https://bugzilla.redhat.com/show_bug.cgi?id=966196
--------------------------------------------------------------------------------
================================================================================
plowshare-0.9.4-0.41.20130520git.el6 (FEDORA-EPEL-2013-5900)
Download and upload files from file-sharing websites
--------------------------------------------------------------------------------
Update Information:
Update to new upstream snapshot.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Elder Marco <eldermarco(a)fedoraproject.org> -
0.9.4-0.41.20130520git
- New upstream snapshot
--------------------------------------------------------------------------------
================================================================================
pngquant-1.8.3-3.el6 (FEDORA-EPEL-2013-5914)
PNG quantization tool for reducing image file size
--------------------------------------------------------------------------------
Update Information:
pngquant converts 24/32-bit RGBA PNG images to 8-bit palette with alpha channel preserved.
Such images are compatible with all modern web browsers and a compatibility setting is
available to help transparency degrade well in Internet Explorer 6. Quantized files are
often 40-70 percent smaller than their 24/32-bit version. pngquant uses the median cut
algorithm.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #962820 - Review Request: pngquant - PNG quantization tool for reducing image
file size
https://bugzilla.redhat.com/show_bug.cgi?id=962820
--------------------------------------------------------------------------------
================================================================================
privoxy-3.0.21-3.el6 (FEDORA-EPEL-2013-5915)
Privacy enhancing proxy
--------------------------------------------------------------------------------
Update Information:
Rotate logs.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #966332 - privoxy log files are not rotated
https://bugzilla.redhat.com/show_bug.cgi?id=966332
--------------------------------------------------------------------------------
================================================================================
rmol-1.00.0-2.el6 (FEDORA-EPEL-2013-5905)
C++ library of Revenue Management and Optimisation classes and functions
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
sevmgr-1.00.0-3.el6 (FEDORA-EPEL-2013-5920)
C++ Simulation-Oriented Discrete Event Management Library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-3
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
simcrs-1.00.0-2.el6 (FEDORA-EPEL-2013-5903)
C++ Simulated Travel-Oriented Distribution System library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
simfqt-1.00.0-2.el6 (FEDORA-EPEL-2013-5909)
C++ Simulated Fare Quote System Library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
trademgen-1.00.0-2.el6 (FEDORA-EPEL-2013-5906)
C++ Simulated Travel Demand Generation Library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
travelccm-1.00.1-2.el6 (FEDORA-EPEL-2013-5923)
C++ Travel Customer Choice Model (CCM) Library
--------------------------------------------------------------------------------
Update Information:
Rebuild of the Travel Market Simulator for Soci-3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.1-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------