The following Fedora EPEL 6 Security updates need testing:
Age URL
179
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
102
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13116/gitolite3-...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13202/Django-1.3...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13109/phpMyAdmin...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13218/drupal7-7....
74
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6587/dokuwiki-0-...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13138/drupal7-fe...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13155/cobbler-2....
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13151/haproxy-1....
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13084/php-ZendFr...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13172/ssmtp-2.61...
49
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-12763/pcp-3.6.6-...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13090/mom-0.3.0-...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13176/icecast-2....
367
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
The following builds have been pushed to Fedora EPEL 6 updates-testing
Coin2-2.5.0-16.el6
Django-1.3.4-1.el6
Django14-1.4.2-1.el6
GraphicsMagick-1.3.17-1.el6
SIMVoleon-2.0.1-13.el6
ScrollZ-2.2.2-2.el6
SoQt-1.5.0-7.el6
abook-0.6.0-0.9.pre2.el6
dojo-1.8.1-1.el6
drupal7-7.16-1.el6
latex2rtf-2.3.1-1.el6
libspnav-0.2.2-4.el6
nagios-plugins-lcgdm-0.9.3-1.el6
perl-Net-STOMP-Client-1.8-1.el6
python-tox-1.4.2-6.el6
sdcv-0.4.2-8.el6
spacenavd-0.5-4.el6
spandsp-0.0.6-0.8.pre21.el6
spnavcfg-0.2.1-3.el6
zipios++-0.1.5.9-8.el6
Details about builds:
================================================================================
Coin2-2.5.0-16.el6 (FEDORA-EPEL-2012-13211)
High-level 3D visualization library
--------------------------------------------------------------------------------
Update Information:
Build of unchanged SRPM for new el6 branch
--------------------------------------------------------------------------------
================================================================================
Django-1.3.4-1.el6 (FEDORA-EPEL-2012-13202)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Security releases issued
- Host header poisoning
- Documentation of HttpOnly cookie option
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 18 2012 Matthias Runge <mrunge(a)redhat.com> - 1.3.4-1
- security release
https://www.djangoproject.com/weblog/2012/oct/17/security/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #865164 - CVE-2012-4520 Django: Host header poisoning vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=865164
--------------------------------------------------------------------------------
================================================================================
Django14-1.4.2-1.el6 (FEDORA-EPEL-2012-13202)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Security releases issued
- Host header poisoning
- Documentation of HttpOnly cookie option
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #865164 - CVE-2012-4520 Django: Host header poisoning vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=865164
--------------------------------------------------------------------------------
================================================================================
GraphicsMagick-1.3.17-1.el6 (FEDORA-EPEL-2012-13194)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
New upstream stable bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.17-1
- GraphicsMagick-1.3.17 (#866377)
- GraphicsMagick 1.3.13 update breaks some PNGs (#788246)
- --enable-quantum-library-names on f19+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #788246 - GraphicsMagick 1.3.13 update breaks some PNGs
https://bugzilla.redhat.com/show_bug.cgi?id=788246
--------------------------------------------------------------------------------
================================================================================
SIMVoleon-2.0.1-13.el6 (FEDORA-EPEL-2012-13215)
Volume rendering library for Coin
--------------------------------------------------------------------------------
Update Information:
Build of unchanged SRPM for new el6 branch
--------------------------------------------------------------------------------
================================================================================
ScrollZ-2.2.2-2.el6 (FEDORA-EPEL-2012-13205)
Advanced IRC client based on ircII code
--------------------------------------------------------------------------------
Update Information:
ScrollZ IRC client
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867334 - Review Request: ScrollZ - ScrollZ IRC client
https://bugzilla.redhat.com/show_bug.cgi?id=867334
--------------------------------------------------------------------------------
================================================================================
SoQt-1.5.0-7.el6 (FEDORA-EPEL-2012-13206)
High-level 3D visualization library
--------------------------------------------------------------------------------
Update Information:
Build of unchanged SRPM for new el6 branch
--------------------------------------------------------------------------------
================================================================================
abook-0.6.0-0.9.pre2.el6 (FEDORA-EPEL-2012-13204)
Text-based addressbook program for mutt
--------------------------------------------------------------------------------
Update Information:
Text-based addressbook program for mutt.
--------------------------------------------------------------------------------
================================================================================
dojo-1.8.1-1.el6 (FEDORA-EPEL-2012-13201)
Modular JavaScript toolkit
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream
Update to Version 1.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 17 2012 Felix Kaechele <heffer(a)fedoraproject.org> - 1.8.1-1
- update to latest upstream
* Tue Sep 18 2012 Felix Kaechele <felix(a)fetzig.org> - 1.8.0-1
- update to latest upstream
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
drupal7-7.16-1.el6 (FEDORA-EPEL-2012-13218)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
Fixes SA-CORE-2012-003 - Drupal core - Arbitrary PHP code execution and Information
disclosure -
http://drupal.org/node/1815904
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Orion Poplawski <orion(a)cora.nwra.com> - 7.16-1
- New upstream - SA-CORE-2012-003 security update
--------------------------------------------------------------------------------
================================================================================
latex2rtf-2.3.1-1.el6 (FEDORA-EPEL-2012-13213)
LaTeX to RTF converter that handles equations, figures, and cross-references
--------------------------------------------------------------------------------
Update Information:
Update to newest stable release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.3.1-1
- Update to 2.3.1.
* Tue Oct 16 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.3.0-2
- Fixed build in EPEL.
* Tue Oct 16 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.3.0-1
- Update to 2.3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #863015 - latex2rtf-2.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=863015
--------------------------------------------------------------------------------
================================================================================
libspnav-0.2.2-4.el6 (FEDORA-EPEL-2012-13210)
Open source alternative to 3DConnextion drivers
--------------------------------------------------------------------------------
Update Information:
Build of unchanged SRPM for new el6 branch
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-lcgdm-0.9.3-1.el6 (FEDORA-EPEL-2012-13198)
Nagios probes to be run remotely against DPM / LFC nodes
--------------------------------------------------------------------------------
Update Information:
- Update for new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Ricardo Rocha <ricardo.rocha(a)cern.ch> - 0.9.3-1
- Update for new upstream release
* Wed Sep 12 2012 Ricardo Rocha <ricardo.rocha(a)cern.ch> - 0.9.2-1
- Added runtime dep on python ldap for dpm-head package
--------------------------------------------------------------------------------
================================================================================
perl-Net-STOMP-Client-1.8-1.el6 (FEDORA-EPEL-2012-13197)
STOMP object oriented client module
--------------------------------------------------------------------------------
Update Information:
updating to latest upstream 1.8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867297 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=867297
--------------------------------------------------------------------------------
================================================================================
python-tox-1.4.2-6.el6 (FEDORA-EPEL-2012-13196)
Virtualenv-based automation of test activities
--------------------------------------------------------------------------------
Update Information:
Initial import for EL6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #864464 - Review Request: python-tox - virtualenv-based automation of test
activities
https://bugzilla.redhat.com/show_bug.cgi?id=864464
--------------------------------------------------------------------------------
================================================================================
sdcv-0.4.2-8.el6 (FEDORA-EPEL-2012-13216)
Console version of StarDict program
--------------------------------------------------------------------------------
Update Information:
New branch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #666455 - Review Request: sdcv - Console version of StarDict program
https://bugzilla.redhat.com/show_bug.cgi?id=666455
--------------------------------------------------------------------------------
================================================================================
spacenavd-0.5-4.el6 (FEDORA-EPEL-2012-13209)
A free, compatible alternative for 3Dconnexion's input drivers
--------------------------------------------------------------------------------
Update Information:
Build of updated SRPM for new el6 branch
Updates:
Added SysV init scripts for el6 builds
--------------------------------------------------------------------------------
================================================================================
spandsp-0.0.6-0.8.pre21.el6 (FEDORA-EPEL-2012-13214)
A DSP library for telephony
--------------------------------------------------------------------------------
Update Information:
Update to 0.0.6pre21
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 18 2012 Jeffrey Ollie <jeff(a)ocjtech.us> - 0.0.6-0.8.pre21
- Update to 0.0.6pre21
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.0.6-0.7.pre18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.0.6-0.6.pre18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Dec 27 2011 Rex Dieter <rdieter(a)fedoraproject.org> 0.0.6-0.5.pre18
- use of brackets confuses autotools (#691039)
* Wed Feb 9 2011 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 0.0.6-0.4.pre18
- 0.0.6pre18
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.0.6-0.3.pre17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Aug 1 2010 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 0.0.6-0.2.pre17
- Update to 0.0.6pre17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #866127 - SpanDSP is over 3 years old - Update request
https://bugzilla.redhat.com/show_bug.cgi?id=866127
--------------------------------------------------------------------------------
================================================================================
spnavcfg-0.2.1-3.el6 (FEDORA-EPEL-2012-13217)
Spacenav daemon interactive configuration program
--------------------------------------------------------------------------------
Update Information:
Build of unchanged SRPM for new el6 branch
--------------------------------------------------------------------------------
================================================================================
zipios++-0.1.5.9-8.el6 (FEDORA-EPEL-2012-13207)
C++ library for reading and writing Zip files
--------------------------------------------------------------------------------
Update Information:
Build of unchanged SRPM for new el6 branch
--------------------------------------------------------------------------------