The following Fedora EPEL 6 Security updates need testing:
Age URL
514
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
326
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
249
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3...
27
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0376/openconnect...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0420/awstats-7.0...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0423/nginx-1.0.1...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0532/euca2ools-2...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0568/mediawiki11...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0622/firebird-2....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0632/privoxy-3.0...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0634/openstack-k...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0637/seamonkey-2...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0657/puppet-2.6....
The following builds have been pushed to Fedora EPEL 6 updates-testing
389-dsgw-1.1.10-1.el6
bdii-5.2.17-2.el6
bitlbee-3.2-2.el6
cloud-utils-0.27-0.2.bzr216.el6
crudini-0.3-2.el6
drupal6-feeds-1.0-0.11.beta13.el6
drupal7-i18n-1.8-0.el6
drupal7-jquery_update-2.3-1.el6
drupal7-libraries-2.1-1.el6
glue-schema-2.0.10-1.el6
gnumeric-1.10.10-2.el6.1
graphite-web-0.9.10-7.el6
ndjbdns-1.05.7-1.el6
php-pear-MDB2-2.5.0-0.9.b5.el6
php-pear-MDB2-Driver-mysql-1.5.0-0.8.b4.el6
php-pear-MDB2-Driver-mysqli-1.5.0-0.8.b4.el6
php-pear-MDB2-Driver-pgsql-1.5.0-0.8.b4.el6
puppet-2.6.18-1.el6
python-bucky-0.2.4-1.el6
python-keystoneclient-0.2.0-1.el6
redshift-1.6-3.el6
salt-0.13.2-1.el6
Details about builds:
================================================================================
389-dsgw-1.1.10-1.el6 (FEDORA-EPEL-2013-0670)
389 Directory Server Gateway (dsgw)
--------------------------------------------------------------------------------
Update Information:
Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Mark Reynolds <mreynolds(a)redhat.com> - 1.1.10-1
- ce71231 Bump version to 1.1.10
- Ticket 606 - DSGW - format string errors
--------------------------------------------------------------------------------
================================================================================
bdii-5.2.17-2.el6 (FEDORA-EPEL-2013-0655)
The Berkeley Database Information Index (BDII)
--------------------------------------------------------------------------------
Update Information:
Updated versions of bdii and glue-schema from the EMI 3 release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 5.2.17-2
- Don't use _libdir macro for noarch package
* Thu Mar 14 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 5.2.17-1
- New upstream version 5.2.17
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.2.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bitlbee-3.2-2.el6 (FEDORA-EPEL-2013-0660)
IRC to other chat networks gateway
--------------------------------------------------------------------------------
Update Information:
Add accidentially lost OTR support for RHEL 5 and 6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Robert Scheck <robert(a)fedoraproject.org> 3.2-2
- Add accidentially lost OTR support for RHEL 5 and 6 (#919912)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919912 - Cannot apply latest bitlbee update due to dependency issues
https://bugzilla.redhat.com/show_bug.cgi?id=919912
--------------------------------------------------------------------------------
================================================================================
cloud-utils-0.27-0.2.bzr216.el6 (FEDORA-EPEL-2013-0673)
Cloud image management utilities
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #907756 - Review Request: cloud-utils - cloud image management utilities
https://bugzilla.redhat.com/show_bug.cgi?id=907756
--------------------------------------------------------------------------------
================================================================================
crudini-0.3-2.el6 (FEDORA-EPEL-2013-0671)
A utility for manipulating ini files
--------------------------------------------------------------------------------
Update Information:
Initial package release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919100 - Review Request: crudini - A utility for manipulating ini files
https://bugzilla.redhat.com/show_bug.cgi?id=919100
--------------------------------------------------------------------------------
================================================================================
drupal6-feeds-1.0-0.11.beta13.el6 (FEDORA-EPEL-2013-0652)
An import and aggregation framework for Drupal
--------------------------------------------------------------------------------
Update Information:
New upstream release,
http://drupal.org/node/1869526.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.0-0.11.beta13
- New upstream version 1.0-beta13
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0-0.10.beta12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0-0.9.beta12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892543 - drupal6-feeds-1.0-beta13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=892543
--------------------------------------------------------------------------------
================================================================================
drupal7-i18n-1.8-0.el6 (FEDORA-EPEL-2013-0665)
Collection of modules to extend Drupal core multilingual capabilities
--------------------------------------------------------------------------------
Update Information:
New upstream release,
http://drupal.org/node/1887374.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2013 Scott Dodson <sdodson(a)redhat.com> 1.8-0
- Update to 1.8
- Make sure drupal7-variable > 2.0
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #895024 - drupal7-i18n-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=895024
--------------------------------------------------------------------------------
================================================================================
drupal7-jquery_update-2.3-1.el6 (FEDORA-EPEL-2013-0680)
Updates the version of jQuery to 1.5.2 and jQuery UI 1.8.11
--------------------------------------------------------------------------------
Update Information:
New upstream release,
http://drupal.org/node/1912546.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #909894 - drupal7-jquery_update-2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=909894
--------------------------------------------------------------------------------
================================================================================
drupal7-libraries-2.1-1.el6 (FEDORA-EPEL-2013-0669)
The common denominator for all Drupal components and external libraries
--------------------------------------------------------------------------------
Update Information:
New upstream release,
http://drupal.org/node/1938254.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.1-1
- Update to 2.1
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919812 - drupal7-libraries-2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=919812
--------------------------------------------------------------------------------
================================================================================
glue-schema-2.0.10-1.el6 (FEDORA-EPEL-2013-0655)
LDAP schema files for the GLUE 1.3 and GLUE 2.0 Schema
--------------------------------------------------------------------------------
Update Information:
Updated versions of bdii and glue-schema from the EMI 3 release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.10-1
- Update to release 2.0.10
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gnumeric-1.10.10-2.el6.1 (FEDORA-EPEL-2013-0661)
Spreadsheet program for GNOME
--------------------------------------------------------------------------------
Update Information:
Newly built into EPEL for Enterprise Linux 6.
--------------------------------------------------------------------------------
================================================================================
graphite-web-0.9.10-7.el6 (FEDORA-EPEL-2013-0653)
A Django webapp for enterprise scalable realtime graphing
--------------------------------------------------------------------------------
Update Information:
Correctly pull in fonts.
Initial package import.
Initial package import.
Initial package import.
Initial package import.
--------------------------------------------------------------------------------
================================================================================
ndjbdns-1.05.7-1.el6 (FEDORA-EPEL-2013-0659)
New djbdns: usable djbdns
--------------------------------------------------------------------------------
Update Information:
Release 1.05.7 fixes a bug about reading
servers/mydomain.com files correctly; adds couple
of new features which allow servers to listen on multiple IP addresses and to respond from
a correct IP when listening on 0.0.0.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 24 2013 pjp <pj.pandit(a)yahoo.co.in> - 1.05.7-1
- Build & install walldns server.
- Removed install commands for systemd unit files.
- Merge patch to bind servers to multiple IP addresses.
- Patch to respond to original destination address BZ#917580.
- Update to correctly read servers/mydomain.dom files BZ#913651.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.05.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #913667 - Merge patch to support listening on multiple IP interfaces on
multi-home systems.
https://bugzilla.redhat.com/show_bug.cgi?id=913667
[ 2 ] Bug #917580 - Server accept connections on one ip but always sends replies back on
the first ip in the same segment
https://bugzilla.redhat.com/show_bug.cgi?id=917580
[ 3 ] Bug #913651 - dnscache resolver ignores ..servers/mydomain.com files.
https://bugzilla.redhat.com/show_bug.cgi?id=913651
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-2.5.0-0.9.b5.el6 (FEDORA-EPEL-2013-0679)
Database Abstraction Layer
--------------------------------------------------------------------------------
Update Information:
Update to latest beta for PHP 5.3 compatibility.
Upstream changelogs:
*
http://pear.php.net/package/MDB2/download/All
*
http://pear.php.net/package/MDB2_Driver_mysql/download/
*
http://pear.php.net/package/MDB2_Driver_mysqli/download/
*
http://pear.php.net/package/MDB2_Driver_pgsql/download/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Remi Collet <remi(a)fedoraproject.org> - 2.5.0-0.9.b5
- update to 2.5.0b5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #921494 - Please update to latest release
https://bugzilla.redhat.com/show_bug.cgi?id=921494
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-Driver-mysql-1.5.0-0.8.b4.el6 (FEDORA-EPEL-2013-0679)
MySQL MDB2 driver
--------------------------------------------------------------------------------
Update Information:
Update to latest beta for PHP 5.3 compatibility.
Upstream changelogs:
*
http://pear.php.net/package/MDB2/download/All
*
http://pear.php.net/package/MDB2_Driver_mysql/download/
*
http://pear.php.net/package/MDB2_Driver_mysqli/download/
*
http://pear.php.net/package/MDB2_Driver_pgsql/download/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Remi Collet <Fedora(a)FamilleCollet.com> - 1.5.0-0.8.b4
- update to 1.5.0b4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #921494 - Please update to latest release
https://bugzilla.redhat.com/show_bug.cgi?id=921494
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-Driver-mysqli-1.5.0-0.8.b4.el6 (FEDORA-EPEL-2013-0679)
MySQL Improved MDB2 driver
--------------------------------------------------------------------------------
Update Information:
Update to latest beta for PHP 5.3 compatibility.
Upstream changelogs:
*
http://pear.php.net/package/MDB2/download/All
*
http://pear.php.net/package/MDB2_Driver_mysql/download/
*
http://pear.php.net/package/MDB2_Driver_mysqli/download/
*
http://pear.php.net/package/MDB2_Driver_pgsql/download/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Remi Collet <remi(a)fedoraproject.org> - 1.5.0-0.8.b4
- update to 1.5.0b4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #921494 - Please update to latest release
https://bugzilla.redhat.com/show_bug.cgi?id=921494
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-Driver-pgsql-1.5.0-0.8.b4.el6 (FEDORA-EPEL-2013-0679)
PostgreSQL MDB2 driver
--------------------------------------------------------------------------------
Update Information:
Update to latest beta for PHP 5.3 compatibility.
Upstream changelogs:
*
http://pear.php.net/package/MDB2/download/All
*
http://pear.php.net/package/MDB2_Driver_mysql/download/
*
http://pear.php.net/package/MDB2_Driver_mysqli/download/
*
http://pear.php.net/package/MDB2_Driver_pgsql/download/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Remi Collet <Fedora(a)FamilleCollet.com> - 1.5.0-0.8.b4
- update to 1.5.0b4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #921494 - Please update to latest release
https://bugzilla.redhat.com/show_bug.cgi?id=921494
--------------------------------------------------------------------------------
================================================================================
puppet-2.6.18-1.el6 (FEDORA-EPEL-2013-0657)
A network tool for managing many disparate systems
--------------------------------------------------------------------------------
Update Information:
Updates to EPEL for Puppet 2.6 for security issues disclosed 13-MAR-2013 from Puppet
Labs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 11 2013 Michael Stahnke <stahnma(a)puppetlabs.com> - 2.6.18-1
- Fixes for CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654
- and CVE-2013-1655 CVE-2013-2274 CVE-2013-2275
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919770 - CVE-2013-1654 Puppet: SSL protocol downgrade
https://bugzilla.redhat.com/show_bug.cgi?id=919770
[ 2 ] Bug #919774 - CVE-2013-1653 Puppet: kick connection HTTP PUT request arbitrary
code execution
https://bugzilla.redhat.com/show_bug.cgi?id=919774
[ 3 ] Bug #919775 - CVE-2013-1655 Puppet: Master code loading Ruby symbols
vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=919775
[ 4 ] Bug #919783 - CVE-2013-1640 Puppet: catalog request code execution
https://bugzilla.redhat.com/show_bug.cgi?id=919783
[ 5 ] Bug #919784 - CVE-2013-1652 Puppet: HTTP GET request catalog retrieval
https://bugzilla.redhat.com/show_bug.cgi?id=919784
[ 6 ] Bug #919785 - CVE-2013-2275 Puppet: default auth.conf allows authenticated node to
submit a report for any other node
https://bugzilla.redhat.com/show_bug.cgi?id=919785
--------------------------------------------------------------------------------
================================================================================
python-bucky-0.2.4-1.el6 (FEDORA-EPEL-2013-0666)
CollectD and StatsD adapter for Graphite
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.2.4-1
- Update to 0.2.4
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-keystoneclient-0.2.0-1.el6 (FEDORA-EPEL-2013-0654)
Python API and CLI for OpenStack Keystone
--------------------------------------------------------------------------------
Update Information:
- update to 0.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2013 Alan Pevec <apevec(a)redhat.com> 0.2.0-1
- update to 0.2.0 without post-Folsom features
--------------------------------------------------------------------------------
================================================================================
redshift-1.6-3.el6 (FEDORA-EPEL-2013-0662)
Adjusts the color temperature of your screen according to time of day
--------------------------------------------------------------------------------
Update Information:
This is a version bump to the F13 equivalent package that fixed the reported problem.
The version change (1.5 to 1.6) does not introduce any configuration file changes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 28 2011 Milos Komarcevic <kmilos(a)gmail.com> - 1.6-3
- Fix for clock applet detection (#661145)
- Require pyxdg explicitly (#675804)
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Nov 13 2010 Milos Komarcevic <kmilos(a)gmail.com> - 1.6-1
- Update to 1.6
- Remove BuildRoot tag and clean section
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #886800 - gtk-redshift needs to depend on pyxdg package
https://bugzilla.redhat.com/show_bug.cgi?id=886800
--------------------------------------------------------------------------------
================================================================================
salt-0.13.2-1.el6 (FEDORA-EPEL-2013-0656)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to upstream patch release 0.13.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Clint Savage <herlo1(a)gmail.com> - 0.13.2-1
- Update to upstream patch release 0.13.2
--------------------------------------------------------------------------------