The following Fedora EPEL 6 Security updates need testing:
Age URL
639
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
95
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11865/quassel-0....
68
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-...
32
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12427/seamonkey-...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0110/drupal7-ent...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0105/strongswan-...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0166/mediawiki11...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0197/drupal7-7.2...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0202/transifex-c...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0205/drupal6-6.3...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0233/libreswan-3...
The following builds have been pushed to Fedora EPEL 6 updates-testing
backupninja-1.0.1-2.el6
cajun-jsonapi-2.0.3-1.el6
docker-io-0.7.6-2.el6
golang-1.2-3.el6
golang-googlecode-net-0-0.13.hg84a4013f96e0.el6
golang-googlecode-sqlite-0-0.9.hg74691fb6f837.el6
gridsite-2.2.0-2.el6
lfcxml-1.1.6-1.el6
php-pecl-zendopcache-7.0.3-1.el6
tipcutils-2.0.5-5.el6
uglify-js-2.2.5-3.el6
uglify-js1-1.3.4-4.el6
x2goserver-4.0.1.12-1.el6
Details about builds:
================================================================================
backupninja-1.0.1-2.el6 (FEDORA-EPEL-2014-0252)
Lightweight, extensible backup system
--------------------------------------------------------------------------------
Update Information:
Backupninja rhel5 dependencies fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1048963 - Review Request: backupninja - Lightweight, extensible backup
system
https://bugzilla.redhat.com/show_bug.cgi?id=1048963
--------------------------------------------------------------------------------
================================================================================
cajun-jsonapi-2.0.3-1.el6 (FEDORA-EPEL-2014-0254)
A cross-platform C++ header library for JSON
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
================================================================================
docker-io-0.7.6-2.el6 (FEDORA-EPEL-2014-0250)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
discard freespace when image is removed. bridge-utils only for rhel < 7.
upstream version bump v0.7.6
upstream version bump to 0.7.5
upstream version bump to 0.7.4 (BZ 1049793)
udev rules typo fixed (BZ 1048775)
missed commit value in release 1, updated now
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 20 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.6-2
- bridge-utils only for rhel < 7
- discard freespace when image is removed
* Thu Jan 16 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.6-1
- upstream version bump v0.7.6
- built with golang >= 1.2
* Thu Jan 9 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.5-1
- upstream version bump to 0.7.5
* Thu Jan 9 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.4-1
- upstream version bump to 0.7.4 (BZ #1049793)
- udev rules file from upstream contrib
- unit file firewalld not used, description changes
* Mon Jan 6 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.3-3
- udev rules typo fixed (BZ 1048775)
* Sat Jan 4 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.3-2
- missed commit value in release 1, updated now
- upstream release monitoring (BZ 1048441)
* Sat Jan 4 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.3-1
- upstream release bump to v0.7.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055645 - Device-mapper does not release free space from removed images
https://bugzilla.redhat.com/show_bug.cgi?id=1055645
[ 2 ] Bug #1054064 - docker-io-0.7.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1054064
[ 3 ] Bug #1049793 - docker-io-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1049793
[ 4 ] Bug #1048775 - invalid key/value pair in /etc/udev/rules.d/80-docker.rules
https://bugzilla.redhat.com/show_bug.cgi?id=1048775
[ 5 ] Bug #1048441 - docker-io-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1048441
--------------------------------------------------------------------------------
================================================================================
golang-1.2-3.el6 (FEDORA-EPEL-2014-0257)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
remove cyclic golang-godoc dependency. remove elliptic 224 curve.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 16 2014 Vincent Batts <vbatts(a)redhat.com> 1.2-3
- remove golang-godoc dependency. cyclic dependency on compiling godoc
* Wed Dec 18 2013 Vincent Batts <vbatts(a)redhat.com> - 1.2-2
- removing P224 ECC curve
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1054503 - Golang Dependency Issues
https://bugzilla.redhat.com/show_bug.cgi?id=1054503
[ 2 ] Bug #1038683 - golang appears to contain an ECC implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1038683
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-net-0-0.13.hg84a4013f96e0.el6 (FEDORA-EPEL-2014-0260)
Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:
golang exclusivearch for el6+
revert golang >= 1.2 version requirement
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 17 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.13.hg84a4013f96e0
- golang exclusivearch for el6+
- add check
* Fri Jan 17 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.12.hg84a4013f96e0
- revert golang >= 1.2 version requirement
* Wed Jan 15 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.11.hg84a4013f96e0
- require golang 1.2 and up
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-sqlite-0-0.9.hg74691fb6f837.el6 (FEDORA-EPEL-2014-0253)
Trivial sqlite3 binding for Go
--------------------------------------------------------------------------------
Update Information:
exclusivearch for el6+
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 19 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.9.hg74691fb6f837
- exclusivearch for el6+
--------------------------------------------------------------------------------
================================================================================
gridsite-2.2.0-2.el6 (FEDORA-EPEL-2014-0248)
Grid Security for the Web, Web platforms for Grids
--------------------------------------------------------------------------------
Update Information:
The gridsite1.7-compat subpackage now correctly has a .el6 dist tag present.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1054961 - gridsite1.7-compat sub-package lacks %dist tag
https://bugzilla.redhat.com/show_bug.cgi?id=1054961
--------------------------------------------------------------------------------
================================================================================
lfcxml-1.1.6-1.el6 (FEDORA-EPEL-2014-0247)
Lemke Foundation Classes XML extension
--------------------------------------------------------------------------------
Update Information:
* Small patch has been added to XMLSuite to catch exception in case of xml string buffer
exceeds.
* Small fixes for build process regarding sample build (xmltest).
* Library include path was missing, which lead to build problems on some platforms
(FreeBSD).
* Removed copyright header with old FSF adress.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 21 2014 Christopher Meng <rpm(a)cicku.me> - 1.1.6-1
- Update to 1.1.6
--------------------------------------------------------------------------------
================================================================================
php-pecl-zendopcache-7.0.3-1.el6 (FEDORA-EPEL-2014-0256)
The Zend OPcache
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog, version 7.0.3:
- Fixed bug #66298 (ext/opcache/Optimizer/zend_optimizer.c has dos-style ^M as lineend)
- Added suggestion about opcache.revalidate_freq setting in development environmento
- Fixed Issue #140: "opcache.enable_file_override" doesn't respect
"opcache.revalidate_freq"
- Fixed reavlidate_path=1 behavior to avoid caching of symlinks values.
- Fixed opcahce_reset() crash when opcache.protect_memory is set
- Fixed bug #66176 (Invalid constant substitution)
- Fixed bug #65559 (Opcache: cache not cleared if changes occur while running)
- Fixed compatibility with old PHP versions
- Fixed bug #65915 (Inconsistent results with require return value)
- Fixed issue #115 (path issue when using phar)
- Fixed issue #149 (Phar mount points not working with OPcache enabled)
- Fixed bug #65845 (Error when Zend Opcache Optimizer is fully enabled).
- Added function opcache_compile_file() to load PHP scripts into cache without
execution.
- Fixed issue #135 (segfault in interned strings if initial memory is too low)
- Fixed bug #65665 (Exception not properly caught when opcache enabled)
- Fixed issue #128 (opcache_invalidate segmentation fault)
- Fixed bug #65510 (5.5.2 crashes in _get_zval_ptr_ptr_var)
- Fixed bug #65561 (Zend Opcache on Solaris 11 x86 needs ZEND_MM_ALIGNMENT=4)
- Replce ZEND_FETCH_* instructions with IS_CV if possible
- Added opcache.restrict_api configuration directive that may limit usage of OPcahce API
functions only to patricular script(s)
- Added support for glob symbols in blacklist entries (?, *, **)
- Improved implementation of NOP removal pass from O(n^2) to O(n)
- Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).
- Fixed bug #64827 Segfault in zval_mark_grey (zend_gc.c)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 20 2014 Remi Collet <rcollet(a)redhat.com> - 7.0.3-1
- Update to 7.0.3
- open
https://github.com/zendtech/ZendOptimizerPlus/issues/162
- cleanup the zts stuff
--------------------------------------------------------------------------------
================================================================================
tipcutils-2.0.5-5.el6 (FEDORA-EPEL-2014-0262)
Utils package required to configure TIPC
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
uglify-js-2.2.5-3.el6 (FEDORA-EPEL-2014-0255)
JavaScript parser, mangler/compressor and beautifier toolkit
--------------------------------------------------------------------------------
Update Information:
port to new multi-version and browser JavaScript guidelines
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 19 2014 Tom Hughes <tom(a)compton.nu> - 2.2.5-3
- use new multi-version packaging rules
- update to latest nodejs packaging standards
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.2.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055177 - uglify-js should be using the proper system for packaging multiple
npm versions
https://bugzilla.redhat.com/show_bug.cgi?id=1055177
--------------------------------------------------------------------------------
================================================================================
uglify-js1-1.3.4-4.el6 (FEDORA-EPEL-2014-0261)
JavaScript parser, mangler/compressor and beautifier toolkit
--------------------------------------------------------------------------------
Update Information:
port to new multi-version and browser JavaScript guidelines
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055178 - uglify-js1 should be using the proper system for packaging multiple
npm versions
https://bugzilla.redhat.com/show_bug.cgi?id=1055178
--------------------------------------------------------------------------------
================================================================================
x2goserver-4.0.1.12-1.el6 (FEDORA-EPEL-2014-0259)
X2Go Server
--------------------------------------------------------------------------------
Update Information:
- Fix sound
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2014 Orion Poplawski <orion(a)cora.nwra.com> - 4.0.1.12-1
- Update 4.0.1.12
* Mon Jan 6 2014 Orion Poplawski <orion(a)cora.nwra.com> - 4.0.1.11-1
- Update 4.0.1.11
- Drop mimetype patch applied upstream
--------------------------------------------------------------------------------