The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6120/roundcubemail-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6267/php-ZendFramew... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6181/openstack-nova... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6150/mosh-1.2.2-1.e... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6039/rt3-3.8.13-1.e... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5965/python-virtual... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6125/viewvc-1.1.15-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6203/gallery3-3.0.4... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6070/strongswan-4.6... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6224/sticky-notes-0...

The following builds have been pushed to Fedora EPEL 6 updates-testing

drupal7-i18n-1.6-0.el6 drupal7-variable-2.0-1.el6 gitolite3-3.04-1.el6 lis-1.2.68-1.el6 nss-gui-0.3.10-4.el6 php-ZendFramework-1.11.12-1.el6 php-symfony2-HttpKernel-2.0.15-3.el6 php-symfony2-Locale-2.0.15-3.el6 php-symfony2-Translation-2.0.15-4.el6 remctl-3.2-2.el6 squidGuard-1.4-9.el6 weechat-0.3.8-1.el6 xsd-3.3.0-1.el6 zabbix-1.8.14-1.el6

Details about builds:

================================================================================ drupal7-i18n-1.6-0.el6 (FEDORA-EPEL-2012-6266) Collection of modules to extend Drupal core multilingual capabilities -------------------------------------------------------------------------------- Update Information:

Update to 1.6 BZ834182 -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 27 2012 Scott Dodson sdodson@redhat.com - 1.6-0 - Update to 1.6 BZ834182 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #834182 - drupal7-i18n-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=834182 --------------------------------------------------------------------------------

================================================================================ drupal7-variable-2.0-1.el6 (FEDORA-EPEL-2012-6272) Variable module provides a registry for meta-data about Drupal variables -------------------------------------------------------------------------------- Update Information:

Update to 2.0 -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 26 2012 Scott Dodson sdodson@redhat.com - 2.0-1 - Update to 2.0 BZ834183 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #834183 - drupal7-variable-2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=834183 --------------------------------------------------------------------------------

================================================================================ gitolite3-3.04-1.el6 (FEDORA-EPEL-2012-6256) Highly flexible server for git directory version tracker -------------------------------------------------------------------------------- Update Information:

Minor enhancements, as well as upstream documentation. -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 27 2012 Jon Ciesla limburgher@gmail.com - 3.04-1 - Latest upstream, docs now includable. * Thu Jun 7 2012 Petr Pisar ppisar@redhat.com - 3.03-3 - Perl 5.16 rebuild * Thu Jun 7 2012 Petr Pisar ppisar@redhat.com - 3.03-2 - Perl 5.16 rebuild --------------------------------------------------------------------------------

================================================================================ lis-1.2.68-1.el6 (FEDORA-EPEL-2012-6268) A library for solving linear equations and eigenvalue problems -------------------------------------------------------------------------------- Update Information:

Update to 1.2.68. Update to 1.2.66. Update to 1.2.66. Update to 1.2.66. Update to 1.2.66. -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 26 2012 Jussi Lehtola jussilehtola@fedoraproject.org - 1.2.68-1 - Update to 1.2.68. * Wed Jun 20 2012 Jussi Lehtola jussilehtola@fedoraproject.org - 1.2.66-1 - Update to 1.2.66. * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.58-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Nov 22 2011 Jussi Lehtola jussilehtola@fedoraproject.org - 1.2.58-1 - Update to 1.2.58. * Tue Nov 8 2011 Jussi Lehtola jussilehtola@fedoraproject.org - 1.2.56-1 - Update to 1.2.56. * Wed Nov 2 2011 Jussi Lehtola jussilehtola@fedoraproject.org - 1.2.54-1 - Update to 1.2.54. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #835428 - lis-1.2.68 is available https://bugzilla.redhat.com/show_bug.cgi?id=835428 --------------------------------------------------------------------------------

================================================================================ nss-gui-0.3.10-4.el6 (FEDORA-EPEL-2012-6273) GUI to manage contents of an NSS database -------------------------------------------------------------------------------- Update Information:

Update NSS-GUI to work again using recent (and future) versions of the xulrunner engine.

-------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 26 2012 Kai Engert kaie@redhat.com - 0.3.10-4 - force compatibility with any xulrunner release version number -------------------------------------------------------------------------------- References:

[ 1 ] Bug #810506 - Update nss-gui to work on top of FF/xulrunner 10 platform https://bugzilla.redhat.com/show_bug.cgi?id=810506 [ 2 ] Bug #771124 - nss-gui does not work with recent xulrunner https://bugzilla.redhat.com/show_bug.cgi?id=771124 --------------------------------------------------------------------------------

================================================================================ php-ZendFramework-1.11.12-1.el6 (FEDORA-EPEL-2012-6267) Leading open-source PHP framework -------------------------------------------------------------------------------- Update Information:

Update to 1.11.12 which fixes security issue ZF2012-01: Local file disclosure via XXE injection in Zend_XmlRpc -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 26 2012 Felix Kaechele heffer@fedoraproject.org - 1.11.12-1 - update to 1.11.12 - fixes ZF2012-01: Local file disclosure via XXE injection in Zend_XmlRpc * Sat Jan 14 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.11.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Fri Oct 14 2011 Felix Kaechele heffer@fedoraproject.org - 1.11.11-1 - update to 1.11.11 - full changelog http://framework.zend.com/changelog/1.11.11 - spec cleanup * Thu Aug 4 2011 Felix Kaechele heffer@fedoraproject.org - 1.11.10-1 - update to 1.11.10 - full changelog http://framework.zend.com/changelog/1.11.10 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #835560 - CVE-2012-3363 php-ZendFramework: File disclosure via XXE injection in Zend_XMLRPC (ZF2012-01) https://bugzilla.redhat.com/show_bug.cgi?id=835560 --------------------------------------------------------------------------------

================================================================================ php-symfony2-HttpKernel-2.0.15-3.el6 (FEDORA-EPEL-2012-6262) Symfony2 HttpKernel Component -------------------------------------------------------------------------------- Update Information:

Symfony2 HttpKernel Component -------------------------------------------------------------------------------- References:

[ 1 ] Bug #823073 - Review Request: php-symfony2-HttpKernel - Symfony2 HttpKernel Component https://bugzilla.redhat.com/show_bug.cgi?id=823073 --------------------------------------------------------------------------------

================================================================================ php-symfony2-Locale-2.0.15-3.el6 (FEDORA-EPEL-2012-6274) Symfony2 Locale Component -------------------------------------------------------------------------------- Update Information:

Locale component provides fallback code to handle cases when the intl extension is missing. Additionally it extends the implementation of a native Locale (http://php.net/manual/en/class.locale.php) class with several handy methods.

Replacement for the following functions and classes is provided:

* intl_is_failure * intl_get_error_code * intl_get_error_message * Collator * IntlDateFormatter * Locale * NumberFormatter

Stub implementation only supports the en locale. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #823056 - Review Request: php-symfony2-Locale - Symfony2 Locale Component https://bugzilla.redhat.com/show_bug.cgi?id=823056 --------------------------------------------------------------------------------

================================================================================ php-symfony2-Translation-2.0.15-4.el6 (FEDORA-EPEL-2012-6257) Symfony2 Translation Component -------------------------------------------------------------------------------- Update Information:

Symfony2 Translation Component -------------------------------------------------------------------------------- References:

[ 1 ] Bug #823065 - Review Request: php-symfony2-Translation - Symfony2 Translation Component https://bugzilla.redhat.com/show_bug.cgi?id=823065 --------------------------------------------------------------------------------

================================================================================ remctl-3.2-2.el6 (FEDORA-EPEL-2012-6275) Client/server for Kerberos-authenticated command execution -------------------------------------------------------------------------------- Update Information:

Update to latest upstream release. Fixes some bugs in the remctld daemon. Changelog is available at http://www.eyrie.org/~eagle/software/remctl/news.html -------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 28 2012 Petr Pisar ppisar@redhat.com - 3.2-2 - Perl 5.16 rebuild * Wed Jun 20 2012 Ken Dreyer ktdreyer@ktdreyer.com - 3.2-1 - Upgrade to 3.2 * Mon Jun 11 2012 Petr Pisar ppisar@redhat.com - 3.1-2 - Perl 5.16 rebuild --------------------------------------------------------------------------------

================================================================================ squidGuard-1.4-9.el6 (FEDORA-EPEL-2012-6271) Filter, redirector and access controller plugin for squid -------------------------------------------------------------------------------- Update Information:

First EL-6 build, adds LDAP support. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #834916 - [RFE] No LDAP support built into squidGuard RPM https://bugzilla.redhat.com/show_bug.cgi?id=834916 --------------------------------------------------------------------------------

================================================================================ weechat-0.3.8-1.el6 (FEDORA-EPEL-2012-6261) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information:

This update provides both new features and bugfixes. Because some of the bugfixes fix crashes and config data loss situations, I'm calling this as a bugfix update.

Your backlog when you join a channel or pm someone (if you use that feature) *will* change color to a dark gray with this new release. I find this very hard to read, as my terminal background is black, so I changed the color setting to "default".

New major features in this release: add terminal "bracketed paste mode" add IRC "external" SASL mechanism improve parsing of IRC channel modes (do not send extra command "MODE" to server) follow symbolic links for configuration files (*.conf) new option weechat.look.prefix_same_nick (hide same prefix for multiple consecutive messages from same nick) add colors for backlog lines redirect IRC messages from clients to hide output (relay plugin, IRC protocol) add a connection timeout for child process in hook_connect fix display bugs and crashs with small windows fix truncated configuration files (zero-length) after system crash

New options: logger.color.backlog_line logger.color.backlog_end weechat.look.paste_bracketed weechat.look.paste_bracketed_timer_delay weechat.look.prefix_same_nick weechat.network.connection_timeout

Options changed: weechat.look.prefix_align_more (from boolean to string) weechat.look.prefix_buffer_align_more (from boolean to string)

New keys: meta2-200~ = "/input paste_start" (start of bracketed paste) meta2-201~ = "/input paste_stop" (end of bracketed paste)

Note: to add missing keys, you can use command /key missing -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 26 2012 Russell Golden niveusluna@niveusluna.org - 0.3.8-1 - New upstream version --------------------------------------------------------------------------------

================================================================================ xsd-3.3.0-1.el6 (FEDORA-EPEL-2012-6264) W3C XML schema to C++ data binding compiler -------------------------------------------------------------------------------- Update Information:

Built and push the actual branched off xsd --------------------------------------------------------------------------------

================================================================================ zabbix-1.8.14-1.el6 (FEDORA-EPEL-2012-6258) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information:

- update to 1.8.14 - upstream changelog at http://www.zabbix.com/rn1.8.14.php

-------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 28 2012 Dan Horák <dan[at]danny.cz> - 1.8.14-1 - update to 1.8.14 --------------------------------------------------------------------------------