The following Fedora EPEL 6 Security updates need testing:
Age URL
891
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
223
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolki...
110
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7....
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2655/python-oaut...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2750/libsrtp-1.4...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2719/nodejs-0.10...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2742/TeXmacs-1.0...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2713/putty-0.63-...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2850/nginx-1.0.1...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2811/nodejs-qs-0...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2821/nodejs-send...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2801/seamonkey-2...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2969/golang-1.3....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2981/check-mk-1....
The following builds have been pushed to Fedora EPEL 6 updates-testing
check-mk-1.2.4p5-2.el6
fntsample-3.2-3.el6
golang-1.3.2-1.el6
golang-googlecode-net-0-0.16.hg90e232e2462d.el6
nfs-ganesha-2.1.0-7.el6
oflb-asana-math-fonts-0.930-6.el6
pagul-fonts-1.0-7.el6
perl-Digest-SHA3-0.22-1.el6
perl-Excel-Writer-XLSX-0.78-1.el6
python-drat-0.4.1-1.el6
python-fedmsg-meta-fedora-infrastructure-0.3.2-1.el6
salt-2014.1.11-1.el6
tabish-eeyek-fonts-1.0-6.el6
wbox-5-8.el6
Details about builds:
================================================================================
check-mk-1.2.4p5-2.el6 (FEDORA-EPEL-2014-2981)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
Do not require any other shell than bash since that's the default shell for the Fedora
/ RHEL distributions
New upstream release providing many security fixes.
New upstream release providing many security fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4p5-2
- Do not require any other shell than bash since that's the default
shell for the Fedora / RHEL distributions.
* Wed Sep 17 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4p5-1
- New upstream release. Fixes CVEs:
- CVE-2014-5338
- CVE-2014-5339
- CVE-2014-5340 (BZ: #1132337, #1132339, #1132341)
- Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068)
- Turn Wato_Legacy_Eval as True as we want to prevent breakages
between machines running different Python and/or check-mk releases.
This is necessary after the 'ast' move from 'pickle' (that was
generating a insecure API call), however the 'ast' module is still
not available for RHEL / CentOS 5 machines. The patch is there to
avoid miscommunications between different distribution releases. More
information is available at:
http://mathias-kettner.com/check_mk_werks.php?werk_id=984.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws
fixed in versions 1.2.4p4 and 1.2.5i4
https://bugzilla.redhat.com/show_bug.cgi?id=1132337
--------------------------------------------------------------------------------
================================================================================
fntsample-3.2-3.el6 (FEDORA-EPEL-2014-2970)
A program for making font samples that show Unicode coverage of the font
--------------------------------------------------------------------------------
Update Information:
Backport from f22 branch
--------------------------------------------------------------------------------
================================================================================
golang-1.3.2-1.el6 (FEDORA-EPEL-2014-2969)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
update to go1.3.2 (bz1147324)
more work to get cgo.a timestamps to line up, due to build-env
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.3.2-1
- update to go1.3.2 (bz1147324)
* Wed Aug 13 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-22
- more work to get cgo.a timestamps to line up, due to build-env
* Wed Aug 13 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-21
- touch cgo.a regardless
* Wed Aug 13 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-20
- rpm dependency ordering for %post
* Tue Aug 12 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-19
- finally check for a Stale cgo in a %post
* Tue Aug 12 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-18
- explicitly list all the files and directories for the packages trees
* Tue Aug 12 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-17
- explicitly list all the files and directories of the src tree, to preserve timestamps
* Mon Aug 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-16
- touch all the built archives to be the same
* Mon Aug 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-15
- make golang-src 'noarch' again, since that was not a fix, and takes up more
space
* Mon Aug 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-14
- update timestamps of source files during %install bz1099206
* Fri Aug 8 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-13
- update timestamps of source during %install bz1099206
* Fri Aug 8 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-12
- set another version constraint on xemacs due to bz1127518
* Wed Aug 6 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-11
- set a version constraint on xemacs due to bz1127518
* Wed Aug 6 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-10
- make the source subpackage arch'ed, instead of noarch
* Tue Jul 15 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-9
- fix the loading of gdb safe-path. bz981356
* Tue Jul 8 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-8
- `go install std` requires gcc, to build cgo. bz1105901, bz1101508
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1147324 - CVE-2014-7189 golang: TLS client authentication issue fixed in
version 1.3.2
https://bugzilla.redhat.com/show_bug.cgi?id=1147324
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-net-0-0.16.hg90e232e2462d.el6 (FEDORA-EPEL-2014-2995)
Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1147193 - update to latest upstream revision
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0-0.16.hg90e232e2462d
- Resolves: rhbz#1147193 - update to latest upstream revision
90e232e2462dedc03bf3c93358da62d54d55dfb6
- don't redefine gopath, don't own dirs owned by golang
- use golang >= 1.2.1-3 for golang specific rpm macros
- preserve timestamps of copied files
- br stuff from golang-googlecode-text
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1147193 - update to at least version
ad01a6fcc8a19d3a4478c836895ffe883bd2ceab
https://bugzilla.redhat.com/show_bug.cgi?id=1147193
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-2.1.0-7.el6 (FEDORA-EPEL-2014-2993)
Ganesha NFS Server
--------------------------------------------------------------------------------
Update Information:
/etc/sysconfig/nfs-ganesha file added in 2.1, just noticed now
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com> 2.1.0-7
- install /etc/sysconfig/nfs-ganesha file
* Fri Aug 29 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com>
- Ceph FSAL typo, #1135437
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.1.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
oflb-asana-math-fonts-0.930-6.el6 (FEDORA-EPEL-2014-2984)
An OpenType font with a MATH table
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
pagul-fonts-1.0-7.el6 (FEDORA-EPEL-2014-3003)
Font for Saurashtra script
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
perl-Digest-SHA3-0.22-1.el6 (FEDORA-EPEL-2014-3014)
Perl extension for SHA-3
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134343 - Review Request: perl-Digest-SHA3 - Perl extension for SHA-3
https://bugzilla.redhat.com/show_bug.cgi?id=1134343
--------------------------------------------------------------------------------
================================================================================
perl-Excel-Writer-XLSX-0.78-1.el6 (FEDORA-EPEL-2014-2976)
Create a new file in the Excel 2007+ XLSX format
--------------------------------------------------------------------------------
Update Information:
Update to 0.78
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 David Dick <ddick(a)cpan.org> - 0.78-1
- Update to 0.78
* Thu Aug 28 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.77-3
- Perl 5.20 rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.77-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1147432 - perl-Excel-Writer-XLSX-0.78 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1147432
--------------------------------------------------------------------------------
================================================================================
python-drat-0.4.1-1.el6 (FEDORA-EPEL-2014-3012)
A reading text analysis tool
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1146927 - Review Request: python-drat - A reading text analysis tool
https://bugzilla.redhat.com/show_bug.cgi?id=1146927
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.3.2-1.el6 (FEDORA-EPEL-2014-3009)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Handle new pkgdb messages, certain legacy messages, and new bugzilla messages. git
messages now return the full patch via a call to msg2long_form
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.2-1
- Latest upstream.
- Handle different types of legacy messages.
- git messages now return the full patch via a call to msg2long_form.
- future-proofing against new types of bugzilla messages.
--------------------------------------------------------------------------------
================================================================================
salt-2014.1.11-1.el6 (FEDORA-EPEL-2014-2989)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 2014.1.11
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.11-1
- Update to bugfix release 2014.1.11
--------------------------------------------------------------------------------
================================================================================
tabish-eeyek-fonts-1.0-6.el6 (FEDORA-EPEL-2014-3002)
Font for Meetei Mayek script
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
wbox-5-8.el6 (FEDORA-EPEL-2014-3018)
HTTP testing tool and configuration-less HTTP server
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------