The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5544/phpMyAdmin-...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0929/drupal7-cto...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0349/bugzilla-3....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0927/openstack-n...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0921/trytond-1.8...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0943/asterisk-1....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0941/perl-Pod-Pl...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5568/gallery3-3....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5557/wicd-1.7.0-...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
The following builds have been pushed to Fedora EPEL 6 updates-testing
cobbler-2.2.2-1.el6
drupal6-addthis-3.0-6.beta2.el6
drupal6-og-2.2-4.el6
drupal6-views-2.16-2.el6
gallery3-3.0.3-1.el6
nagios-plugins-openmanage-3.7.5-1.el6
python-dulwich-0.8.5-1.el6
rubygem-dynect_rest-0.4.3-1.el6
tito-0.4.8-1.el6
wicd-1.7.0-3.el6
Details about builds:
================================================================================
cobbler-2.2.2-1.el6 (FEDORA-EPEL-2012-5556)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 11 2012 James Cammarata <jimi(a)sngx.net> - 2.2.2-1
- New upstream 2.2.2 release (jimi(a)sngx.net)
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
drupal6-addthis-3.0-6.beta2.el6 (FEDORA-EPEL-2012-5562)
AddThis module for Drupal6
--------------------------------------------------------------------------------
Update Information:
Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #807331 - Review Request: drupal6-addthis - AddThis module for Drupal6.
https://bugzilla.redhat.com/show_bug.cgi?id=807331
--------------------------------------------------------------------------------
================================================================================
drupal6-og-2.2-4.el6 (FEDORA-EPEL-2012-5558)
Organic Group Module for Drupal6
--------------------------------------------------------------------------------
Update Information:
Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #807328 - Review Request: drupal6-og - Organic Group Module for Drupal6
https://bugzilla.redhat.com/show_bug.cgi?id=807328
--------------------------------------------------------------------------------
================================================================================
drupal6-views-2.16-2.el6 (FEDORA-EPEL-2012-5559)
Provides a method for site designers to control content presentation
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.16-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Nov 15 2011 Jon Ciesla <limb(a)jcomserv.net> - 2.16-1
- Update to 2.16, BZ 754076.
* Fri Nov 4 2011 Jon Ciesla <limb(a)jcomserv.net> - 2.14-1
- Update to 2.14, BZ 751044.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #812130 - Can you make drupal6-views-2.16-2 available on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=812130
--------------------------------------------------------------------------------
================================================================================
gallery3-3.0.3-1.el6 (FEDORA-EPEL-2012-5568)
Customizable photo gallery web site
--------------------------------------------------------------------------------
Update Information:
Minor XSS fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #812048 - CVE-2012-1113 gallery: XSS flaws in administration area
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=812048
[ 2 ] Bug #812049 - CVE-2012-1113 gallery: XSS flaws in administration area
[fedora-rawhide]
https://bugzilla.redhat.com/show_bug.cgi?id=812049
[ 3 ] Bug #812050 - CVE-2012-1113 gallery: XSS flaws in administration area [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=812050
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-openmanage-3.7.5-1.el6 (FEDORA-EPEL-2012-5566)
Nagios plugin to monitor hardware health on Dell servers
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 3.7.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 13 2012 Trond Hasle Amundsen <t.h.amundsen(a)usit.uio.no> - 3.7.5-1
- Upstream version 3.7.5
--------------------------------------------------------------------------------
================================================================================
python-dulwich-0.8.5-1.el6 (FEDORA-EPEL-2012-5565)
A python implementation of the Git file formats and protocols
--------------------------------------------------------------------------------
Update Information:
* Fri Apr 13 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.8.5-1
- Updated to new upstream version 0.8.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 13 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.8.5-1
- Updated to new upstream version 0.8.5
* Fri Apr 6 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.8.4-1
- Updated to new upstream version 0.8.4
* Fri Feb 24 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.8.3-1
- Updated to new upstream version 0.8.3
--------------------------------------------------------------------------------
================================================================================
rubygem-dynect_rest-0.4.3-1.el6 (FEDORA-EPEL-2012-5570)
Dynect REST API library
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.3
Upstream update to 0.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 13 2012 Russell Harrison <rharriso(a)redhat.com> 0.4.3-1
- Update to 0.4.3
* Thu Mar 29 2012 Russell Harrison <rharriso(a)redhat.com> 0.4.1-1
- Update to 0.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #811530 - rubygem-dynect_rest-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=811530
[ 2 ] Bug #808020 - rubygem-dynect_rest-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=808020
--------------------------------------------------------------------------------
================================================================================
tito-0.4.8-1.el6 (FEDORA-EPEL-2012-5567)
A tool for managing rpm based git projects
--------------------------------------------------------------------------------
Update Information:
Fix mock builds of packages that do not use the standard builder, changelog email issues
with interpreting 0 as false, and a broken constructor in the distributionbuilder.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 2 2012 Devan Goodwin <dgoodwin(a)rm-rf.ca> 0.4.8-1
- Fix MockBuilder for packages that use non-standard builders normally.
(dgoodwin(a)redhat.com)
- interpret '0' as False for changelog_with_email setting. (msuchy(a)redhat.com)
* Thu Mar 15 2012 Devan Goodwin <dgoodwin(a)rm-rf.ca> 0.4.7-1
- Fix issues with DistributionBuilder constructor (dgoodwin(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
wicd-1.7.0-3.el6 (FEDORA-EPEL-2012-5557)
Wireless and wired network connection manager
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2012-2095. The wicd daemon suffered from a local privilege
escalation flaw due to incomplete input sanitization. A local attacker sould use this to
inject arbitrary code through the D-Bus interface.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 13 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-3
- Fix CVE-2012-2095 (#811764)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #811762 - CVE-2012-2095 wicd: broken filtering leads to arbitrary code
execution
https://bugzilla.redhat.com/show_bug.cgi?id=811762
--------------------------------------------------------------------------------