The following Fedora EPEL 6 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-d6ec1647e3 mbedtls-2.7.12-1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

php-horde-Horde-Imap-Client-2.30.0-1.el6 php-horde-Horde-Text-Diff-2.2.1-1.el6 prosody-0.11.3-1.el6 sympa-6.2.48-1.el6

Details about builds:

================================================================================ php-horde-Horde-Imap-Client-2.30.0-1.el6 (FEDORA-EPEL-2019-05f2e8e2d3) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information:

**Horde_Imap_Client 2.30.0** * [mjr] Support returning entire thread list (Ticket #14943, mariusz.goch@spacja.com). ---- **Horde_Imap_Client 2.29.18** * [mjr] Fix LIST-STATUS parsing when using wildcards (Bug #14937, mariusz.goch). -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 30 2019 Remi Collet remi@remirepo.net - 2.30.0-1 - update to 2.30.0 * Mon Sep 16 2019 Remi Collet remi@remirepo.net - 2.29.18-1 - update to 2.29.18 --------------------------------------------------------------------------------

================================================================================ php-horde-Horde-Text-Diff-2.2.1-1.el6 (FEDORA-EPEL-2019-f36e934006) Engine for performing and rendering text diffs -------------------------------------------------------------------------------- Update Information:

**Horde_Text_Diff 2.2.1** * [mjr] Fix incorrect class name (PR #2, FGIKCM). -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 30 2019 Remi Collet remi@remirepo.net - 2.2.1-1 - update to 2.2.1 - use range dependencies --------------------------------------------------------------------------------

================================================================================ prosody-0.11.3-1.el6 (FEDORA-EPEL-2019-164f5ca6de) Flexible communications server for Jabber/XMPP -------------------------------------------------------------------------------- Update Information:

Prosody 0.11.3 ============== Important note for those upgrading ================================== Previous releases did not automatically expire messages from group chat (MUC) archives, so if `mod_muc_mam` was loaded and enabled for a MUC, archives would grow indefinitely. This is not what most deployments want, therefore automatic expiry is now implemented and enabled with a default 7 day retention. You can configure this with the muc_log_expires_after configuration option, which can be set to `"never"` to restore the old behaviour and preserve any existing logs older than 7 days. Fixes and improvements ====================== * MUC: Advertise XEP-0410 support * mod_muc_mam: Import cleanup mechanism from mod_mam (fixes #672: mod_muc_mam: Archive expiry) * mod_bosh: Handle missing wait attribute (fixes #1288: BOSH: Traceback on missing ���wait��� attribute) * mod_storage_sql: Handle SQLite DELETE with LIMIT being optional (fixes #1359: Sqlite3 archive_store:delete error in prepared statement) * mod_c2s: Fixed #1313: attempt to call a field ���data��� (a nil value)) * net.server_epoll: Restore wantread flag after pause (fixes #1354: server_epoll: Race in chunked reads) * util.encodings: Allow unassigned code points in ICU mode to match libidn behavior (fixes #1348: Different treatment of unassigned code points between libidn and ICU ) * util.ip: Add missing netmask for 192.168/16 range (fixes #1343) * util.hashes: Use HMAC function provided by OpenSSL (fixes #1345: util.hashes: HMAC-SHA-512 implementation broken) * net.dns: Close resolv.conf handle when done (fixes #1342) * mod_websocket: Clone stanza before mutating (fixes #1398: mod_websocket leaks explicit xmlns attr) * mod_announce: Check for admin on current virtualhost instead of global (fixes #1365: ���host admins��� should be able to use mod_announce as well as ���global admins���) (thanks yc) * mod_blocklist: Trigger resend of presence when unblocking a contact (fixes #1380: Prosody does not send presence when unblocking (XEP-0191)) * mod_vcard_legacy: Multiple improvements (fixes #1289: mod_vcard_legacy upgrade experience): * mod_vcard_legacy: Don���t overwrite existing PEP data * mod_vcard_legacy: Handle partial migration * mod_vcard_legacy: Allow disabling vcard conversion * mod_vcard_legacy: Adapt node defaults to number of avatars * mod_muc_mam: Strip the stanza ���to��� attribute (fixes #1259: [muc_mam] forwarded stanza has a ���to��� attribute while spec says it MUST NOT) * util.pubsub: Validate node configuration on node creation (fixes #1328: Pubsub: Node configuration not validated on node creation) * mod_pep/mod_pubsub: Simplify configuration for storage of node data (fixes #1320) * MUC: Fix delay@from to be room JID (fixes #1416: MUC: Wrong delay@from on historic messages) * mod_mam/mod_muc_mam: Cache last date that archive owner has messages to reduce writes (fixes #1368: Archive cleanup doubles number of storage access) * mod_mam: Perform message expiry based on building an index by date (backport of 39ee70fbb009 from trunk) Minor changes ============= * net.server_epoll: Backport timer optimization from trunk (see #1388) * mod_storage_memory: Replace query function with one based on storage_internal (fixes #1322: mod_storage_memory does not support ���key��� querys) * net.server_epoll: Rename handshake_timeout to ssl_handshake_timeout (fixes #1319: net.server_epoll uses handshake_timeout instead of ssl_handshake_timeout like server_event) * mod_storage_memory: Generate ID using standard util (fixes #1326: mod_storage_memory.lua: attempt to concatenate a nil value) * MUC: Add error message to error bounces when not joined to room * mod_websocket: Log an error if cross_domain_websocket = true is set in a VirtualHost section * mod_presence: Revert empty ���to��� attribute of presence before presence/initial event (fixes #1296: mod_motd does not send MOTD set in configuration on Prosody versions 10.x or 11.x) * mod_pubsub: Support requests for multiple items (fixes #1305: pubsub: MUST allow multiple items to be specified) * net.server_epoll: Use send_timeout for write timout like other implementations (fixes #1316: net.server_epoll uses write_timeout where other implementations use send_timeout) * util.sql: Ignore if tables and indices already exist on creation (fixes #1064: SQL table creation query fails when tables already exist) * net.server_epoll: Skip delayed continuation read on paused connections * net.server_epoll: Handle LuaSec wantread/wantwrite conditions before callbacks (fixes #1333: net.server_epoll handling of ���wantread��� condition unintentionally resumes paused connection) * mod_storage_memory: Implement :user iteration API * util.serialization: Cache default serialization instance (fixes #1389: util.serialization: Creates new serializer instance on each call) * `prosodyctl about` improvements: * Report version of LuaDBI installed * Report configured network backend * util.random: Handle unlikely read errors from `/dev/urandom` (see #1313) * configure: Handle lua being found in `/bin` (workaround for #1353) -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 30 2019 Robert Scheck robert@fedoraproject.org 0.11.3-1 - Upgrade to 0.11.3 (#1756953) * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 0.11.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering releng@fedoraproject.org - 0.11.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1756953 - prosody-0.11.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1756953 --------------------------------------------------------------------------------

================================================================================ sympa-6.2.48-1.el6 (FEDORA-EPEL-2019-91a3d0798b) Powerful multilingual List Manager -------------------------------------------------------------------------------- Update Information:

sympa 6.2.48 (bugfix release). ---- - Rewritten data sources code. -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 30 2019 Xavier Bachelot xavier@bachelot.org 6.2.48-1 - Update to 6.2.48. * Mon Sep 23 2019 Xavier Bachelot xavier@bachelot.org 6.2.46-1 - Update to 6.2.46. - Unbundle foundation-icons font. - Add dependency on LWP::Protocol::https (RHBZ#1753111). - Don't unbundle js-respond on EL8 (yet). * Sat Jul 27 2019 Fedora Release Engineering releng@fedoraproject.org - 6.2.44-3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1753111 - LWP::Protocol::https missing in dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1753111 --------------------------------------------------------------------------------