The following Fedora EPEL 6 Security updates need testing:
Age URL
975
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
194
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7....
65
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3434/pylint-1.3....
40
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binut...
28
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4242/facter-1.6....
16
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4485/python-torn...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4575/links-2.8-4...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4563/firebird-2....
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4669/libhtp-0.5....
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4693/denyhosts-2...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4737/docker-io-1...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4729/ettercap-0....
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4766/mediawiki11...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4773/unrtf-0.21....
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4807/libssh-0.5....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4829/roundcubema...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4850/glpi-0.83.9...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4624/xrdp-0.6.1-...
The following builds have been pushed to Fedora EPEL 6 updates-testing
drupal7-context-3.5-1.el6
glpi-0.83.9.1-6.el6
nodejs-as-number-1.0.0-1.el6
nodejs-ascii-tree-0.1.1-1.el6
nodejs-from-0.1.3-1.el6
nodejs-got-2.2.0-1.el6
nodejs-object-assign-2.0.0-2.el6
nodejs-registry-url-2.0.0-2.el6
nodejs-split-0.3.2-1.el6
nodejs-stream-reduce-1.0.3-1.el6
pgadmin3-1.20.0-1.el6
python-bitmath-1.1.0-1.el6
shogun-data-0.8.1-0.22.git20141217.ab44087.el6
wordpress-4.1-1.el6
xrdp-0.6.1-2.el6
yadifa-2.0.4-1.el6
Details about builds:
================================================================================
drupal7-context-3.5-1.el6 (FEDORA-EPEL-2014-4861)
Allows contextual conditions and reactions management
--------------------------------------------------------------------------------
Update Information:
## [7.x-3.5 ](https://www.drupal.org/node/2392055)\r\n\r\nThis fixes possible DB
consistency problems in 3.4.\r\n\r\n* 1cd84d0 Revert "Revert "Issue #835090:
Context Reaction: Set menu trail by Karsa, Deciphered, nedjo, fearlsgroove, Dane Powell,
Angry Dan, mgifford, Jibus, Bußmeyer, tomb, c4rl | rjacobs: Set context reaction menu
trail.""\r\n* e5aae41 Issue #2358313: Angle bracket in menu names double
checkplained: Remove double check_plain on mlid 0 items\r\n\r\n##
[
7.x-3.4](https://www.drupal.org/node/2391965)\r\n\r\n* 4eab91e Issue #1018834: Default
context condition that applies when no other non-sitewide context is active by tekante:
Further clarification in the main context README file about the inline editor\r\n* f3e501b
Revert "Issue #835090: Context Reaction: Set menu trail by Karsa, Deciphered, nedjo,
fearlsgroove, Dane Powell, Angry Dan, mgifford, Jibus, Bußmeyer, tomb, c4rl | rjacobs: Set
context reaction menu trail."
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 20 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 3.5-1
- Updated to 3.5 (BZ #1175146)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1175146 - drupal7-context-3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1175146
--------------------------------------------------------------------------------
================================================================================
glpi-0.83.9.1-6.el6 (FEDORA-EPEL-2014-4850)
Free IT asset management software
--------------------------------------------------------------------------------
Update Information:
fix SQL injection
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2014 Remi Collet <remi(a)fedoraproject.org> - 0.83.9.1-6
- fix SQL Injection CVE-2014-9258
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1176166 - CVE-2014-9258 glpi: ajax/getDropdownValue.php SQL injection
https://bugzilla.redhat.com/show_bug.cgi?id=1176166
--------------------------------------------------------------------------------
================================================================================
nodejs-as-number-1.0.0-1.el6 (FEDORA-EPEL-2014-4876)
Tiny function that returns the given number, or a default value
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1173204 - Review Request: nodejs-as-number - Tiny function that returns the
given number, or a default value
https://bugzilla.redhat.com/show_bug.cgi?id=1173204
--------------------------------------------------------------------------------
================================================================================
nodejs-ascii-tree-0.1.1-1.el6 (FEDORA-EPEL-2014-4846)
A node module for generating a text tree in ASCII
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171749 - Review Request: nodejs-ascii-tree - A node module for generating a
text tree in ASCII
https://bugzilla.redhat.com/show_bug.cgi?id=1171749
--------------------------------------------------------------------------------
================================================================================
nodejs-from-0.1.3-1.el6 (FEDORA-EPEL-2014-4875)
Easy way to make a Readable Stream
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1172973 - Review Request: nodejs-from - Easy way to make a Readable Stream
https://bugzilla.redhat.com/show_bug.cgi?id=1172973
--------------------------------------------------------------------------------
================================================================================
nodejs-got-2.2.0-1.el6 (FEDORA-EPEL-2014-4859)
Simplified HTTP/HTTPS requests
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171236 - Review Request: nodejs-got - Simplified HTTP/HTTPS requests
https://bugzilla.redhat.com/show_bug.cgi?id=1171236
--------------------------------------------------------------------------------
================================================================================
nodejs-object-assign-2.0.0-2.el6 (FEDORA-EPEL-2014-4860)
ES6 Object.assign() ponyfill
--------------------------------------------------------------------------------
Update Information:
Add test.js from upstream and enable tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171231 - Review Request: nodejs-object-assign - ES6 Object.assign()
ponyfill
https://bugzilla.redhat.com/show_bug.cgi?id=1171231
--------------------------------------------------------------------------------
================================================================================
nodejs-registry-url-2.0.0-2.el6 (FEDORA-EPEL-2014-4851)
Get the set npm registry URL
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171230 - Review Request: nodejs-registry-url - Get the set npm registry URL
https://bugzilla.redhat.com/show_bug.cgi?id=1171230
--------------------------------------------------------------------------------
================================================================================
nodejs-split-0.3.2-1.el6 (FEDORA-EPEL-2014-4874)
Split a text stream into a line stream
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1172974 - Review Request: nodejs-split - Split a text stream into a line
stream
https://bugzilla.redhat.com/show_bug.cgi?id=1172974
--------------------------------------------------------------------------------
================================================================================
nodejs-stream-reduce-1.0.3-1.el6 (FEDORA-EPEL-2014-4836)
Reduce stream data to a single value
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1172975 - Review Request: nodejs-stream-reduce - Reduce stream data to a
single value
https://bugzilla.redhat.com/show_bug.cgi?id=1172975
--------------------------------------------------------------------------------
================================================================================
pgadmin3-1.20.0-1.el6 (FEDORA-EPEL-2014-4854)
Graphical client for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Update to 1.20.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2014 Devrim GUNDUZ <devrim(a)gunduz.org> 1.20.0-1
- Update to 1.20.0
- Update download URL -- community will deprecate FTP service.
--------------------------------------------------------------------------------
================================================================================
python-bitmath-1.1.0-1.el6 (FEDORA-EPEL-2014-4866)
Aids representing and manipulating sizes in various prefix notations
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 20 2014 Tim Bielawa <tbielawa(a)redhat.com> - 1.1.0-1
- New parse_string utility function from tonycpsu
- 'bitmath' tool added for converting on the command line
--------------------------------------------------------------------------------
================================================================================
shogun-data-0.8.1-0.22.git20141217.ab44087.el6 (FEDORA-EPEL-2014-4878)
Data-files for the SHOGUN machine learning toolbox
--------------------------------------------------------------------------------
Update Information:
updated to new snapshot git20141217.ab44087e1a3c5ec05c1c64ebd691fdc5f56b2e81
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2014 Björn Esser <bjoern.esser(a)gmail.com> -
0.8.1-0.22.git20141217.ab44087
- updated to new snapshot git20141217.ab44087e1a3c5ec05c1c64ebd691fdc5f56b2e81
* Wed Dec 10 2014 Björn Esser <bjoern.esser(a)gmail.com> -
0.8.1-0.21.git20141208.9a2f2be
- updated to new snapshot git20141208.9a2f2bee48755c632a959244d7522654efc2e58c
* Mon Dec 8 2014 Björn Esser <bjoern.esser(a)gmail.com> -
0.8.1-0.20.git20141204.6b9f893
- updated to new snapshot git20141204.6b9f893fa5044eab38e19803838a42132269185d
--------------------------------------------------------------------------------
================================================================================
wordpress-4.1-1.el6 (FEDORA-EPEL-2014-4835)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
WordPress 4.1 “Dinah”\r\n\r\nUpstream announcement:
https://wordpress.org/news/2014/12/dinah/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2014 Remi Collet <remi(a)fedoraproject.org> - 4.1-1
- WordPress 4.1 “Dinah”
--------------------------------------------------------------------------------
================================================================================
xrdp-0.6.1-2.el6 (FEDORA-EPEL-2014-4624)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Close a security vulnerability in 0.5.0 and update to a known working release, 0.6.1. Add
a delay loop for VNC back end.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2014 Bojan Smojver <bojan(a)rexursive.com> - 0.6.1-2
- add a delay loop when connecting to VNC back end
* Wed Dec 10 2014 Bojan Smojver <bojan(a)rexursive.com> - 0.6.1-1
- try a bump to official 0.6.1
- provide format for syslog() call
- fix memset() call
- fix implicit declarations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #782621 - xrdp: predictable temporary files may lead to arbitrary file
overwrite [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=782621
--------------------------------------------------------------------------------
================================================================================
yadifa-2.0.4-1.el6 (FEDORA-EPEL-2014-4858)
Lightweight authoritative Name Server with DNSSEC capabilities
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.4 release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 21 2014 Denis Fateyev <denis(a)fateyev.com> - 2.0.4-1
- Update to 2.0.4 release
* Sat Oct 18 2014 Denis Fateyev <denis(a)fateyev.com> - 2.0.0-1
- Update to 2.0.0 release
- New program features added
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1176685 - yadifa: 2.0.4 upstream release available
https://bugzilla.redhat.com/show_bug.cgi?id=1176685
--------------------------------------------------------------------------------