The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6 https://admin.fedoraproject.org/updates/asterisk-1.8.4.2-1.el6.1 https://admin.fedoraproject.org/updates/chm2pdf-0.9.1-8.el6 https://admin.fedoraproject.org/updates/ejabberd-2.1.8-2.el6 https://admin.fedoraproject.org/updates/torque-2.5.5-2.el6 https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

NearTree-3.1-1.el6 bucardo-4.4.5-1.el6 collectd-4.10.3-1.el6 couchdb-1.0.2-7.el6 ejabberd-2.1.8-2.el6 erlang-ibrowse-2.2.0-2.el6 libsvm-3.1-1.el6 perl-Crypt-DSA-1.17-1.el6 perl-Package-DeprecationManager-0.11-1.el6 php-voms-admin-0.5.1-2.el6 python-netifaces-0.5-1.el6 pyttsx-1.0-1.el6 shedskin-0.8-1.el6 sslstrip-0.9-2.el6 tuxpaint-0.9.21-5.el6 writetype-1.2.130-6.el6 xenserverjava-5.6.100.1-1.el6 zeroinstall-injector-1.0-2.el6

Details about builds:

================================================================================ NearTree-3.1-1.el6 (FEDORA-EPEL-2011-3585) An API for finding nearest neighbors -------------------------------------------------------------------------------- Update Information:

Update to 3.1 -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 8 2011 Takanori MATSUURA t.matsuu@gmail.com - 3.1-1 - update to 3.1 * Mon Feb 7 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ bucardo-4.4.5-1.el6 (FEDORA-EPEL-2011-3595) Postgres replication system for both multi-master and multi-slave operations -------------------------------------------------------------------------------- Update Information:

new release -------------------------------------------------------------------------------- ChangeLog:

* Sun Jun 19 2011 Itamar Reis Peixoto itamar@ispbrasil.com.br - 4.4.5-1 - New version 4.4.5 fix truncate bug --------------------------------------------------------------------------------

================================================================================ collectd-4.10.3-1.el6 (FEDORA-EPEL-2011-3579) Statistics collection daemon for filling RRD files -------------------------------------------------------------------------------- Update Information:

Update to latest upstream bugfix release, add libgcrypt to BuildRequires. -------------------------------------------------------------------------------- ChangeLog:

* Tue Jul 19 2011 Kevin Fenzi kevin@scrye.com - 4.10.3-1 - Update to 4.3.10 - Add libgcrypt to fix bug #676059 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #676059 - Network plugin : no Cryptographic support https://bugzilla.redhat.com/show_bug.cgi?id=676059 --------------------------------------------------------------------------------

================================================================================ couchdb-1.0.2-7.el6 (FEDORA-EPEL-2011-3600) A document database server, accessible via a RESTful JSON API -------------------------------------------------------------------------------- Update Information:

- Build against erlang-ibrowse-2.2.0 - Fixed work with systemd -------------------------------------------------------------------------------- ChangeLog:

* Sat Jun 18 2011 Peter Lemenkov lemenkov@gmail.com - 1.0.2-7 - Requires ibrowse >= 2.2.0 for building - Fixes for /var/run mounted as tmpfs (see rhbz #656565, #712681) * Mon May 30 2011 Peter Lemenkov lemenkov@gmail.com - 1.0.2-6 - Patched patch for new js-1.8.5 * Fri May 20 2011 Peter Lemenkov lemenkov@gmail.com - 1.0.2-5 - Fixed issue with ibrowse-2.2.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #656565 - Please Update Spec File to use %ghost on files in /var/run and /var/lock https://bugzilla.redhat.com/show_bug.cgi?id=656565 [ 2 ] Bug #712681 - Couchdb service is not starting in fedora 15 https://bugzilla.redhat.com/show_bug.cgi?id=712681 --------------------------------------------------------------------------------

================================================================================ ejabberd-2.1.8-2.el6 (FEDORA-EPEL-2011-3589) A distributed, fault-tolerant Jabber/XMPP server -------------------------------------------------------------------------------- Update Information:

- Fixed issue with ejabberdctl (failed to connect) - Ver. 2.1.8 - Ver. 2.1.8 - Ver. 2.1.8 - Ver. 2.1.8 -------------------------------------------------------------------------------- ChangeLog:

* Sat Jun 18 2011 Peter Lemenkov lemenkov@gmail.com - 2.1.8-2 - Fix ejabberdctl again * Fri Jun 3 2011 Peter Lemenkov lemenkov@gmail.com - 2.1.8-1 - Ver. 2.1.8 (very urgent bugfix for 2.1.7) * Wed Jun 1 2011 Peter Lemenkov lemenkov@gmail.com - 2.1.7-1 - Ver. 2.1.7 (bugfixes and security) * Wed Jun 1 2011 Paul Whalen paul.whalen@senecac.on.ca - 2.1.6-5 - Added arm to conditional to build without hevea. * Thu Feb 24 2011 Peter Lemenkov lemenkov@gmail.com - 2.1.6-4 - Updated @online@ patch * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.1.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Tue Jan 25 2011 Martin Langhoff martin@laptop.org 2.1.6-2 - Apply rebased @online@ patch from OLPC - EJAB-1391 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #700454 - CVE-2011-1753 ejabberd: DoS via the XML "billion laughs attack" https://bugzilla.redhat.com/show_bug.cgi?id=700454 --------------------------------------------------------------------------------

================================================================================ erlang-ibrowse-2.2.0-2.el6 (FEDORA-EPEL-2011-3600) Erlang HTTP client -------------------------------------------------------------------------------- Update Information:

- Build against erlang-ibrowse-2.2.0 - Fixed work with systemd -------------------------------------------------------------------------------- ChangeLog:

* Sun May 15 2011 Peter Lemenkov lemenkov@gmail.com - 2.2.0-2 - Added missing build requirements * Sun May 15 2011 Peter Lemenkov lemenkov@gmail.com - 2.2.0-1 - Ver. 2.2.0 * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #656565 - Please Update Spec File to use %ghost on files in /var/run and /var/lock https://bugzilla.redhat.com/show_bug.cgi?id=656565 [ 2 ] Bug #712681 - Couchdb service is not starting in fedora 15 https://bugzilla.redhat.com/show_bug.cgi?id=712681 --------------------------------------------------------------------------------

================================================================================ libsvm-3.1-1.el6 (FEDORA-EPEL-2011-3582) A Library for Support Vector Machines -------------------------------------------------------------------------------- Update Information:

svm tools is now installed in /usr/bin as svm-*.py i.e. tools/easy.py is linked as svm-easy.py. Upstream update: + MATLAB interface: + Merge matlab interface to core libsvm + Using mexPrintf() when calling info() in MATLAB interface. + Both 32- and 64-bit windows binary files are provided + Java: Math.random is replaced by Random in java interface + Python interface: subroutines to get SVs relative path to load *.dll and *.so + svm.cpp: null pointer check before release memory in svm_free_model_content() svm_destroy_model() no longer supported. + svm-train.c and svm-predict.c Better format check in reading data labels + svm-toy: fix the svm_toy dialog path + tools: Using new string formatting/encoding in tools/*.py clearer png output, fix grid.py legen -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 14 2011 Ding-Yi Chen dchen@redhat.com - 3.1-1 - svm tools is now installed in /usr/bin as svm-*.py i.e. tools/easy.py is linked as svm-easy.py. - Upstream update: + MATLAB interface: + Merge matlab interface to core libsvm + Using mexPrintf() when calling info() in MATLAB interface. + Both 32- and 64-bit windows binary files are provided + Java: Math.random is replaced by Random in java interface + Python interface: subroutines to get SVs relative path to load *.dll and *.so + svm.cpp: null pointer check before release memory in svm_free_model_content() svm_destroy_model() no longer supported. + svm-train.c and svm-predict.c Better format check in reading data labels + svm-toy: fix the svm_toy dialog path + tools: Using new string formatting/encoding in tools/*.py clearer png output, fix grid.py legend * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ perl-Crypt-DSA-1.17-1.el6 (FEDORA-EPEL-2011-3591) Perl module for DSA signatures and key generation -------------------------------------------------------------------------------- Update Information:

This update to the current upstream release incorporates all patches previously made downstream in Fedora/EPEL. -------------------------------------------------------------------------------- ChangeLog:

* Fri Jun 17 2011 Paul Howarth paul@city-fan.org 1.17-1 - Update to 1.17 - Upgrade to Module::Install 1.01 - Added support for OpenSSL 1.0.0 dsaparam format change (CPAN RT#49668) - Requires perl 5.6 now (CPAN RT#58094) - Fixes for 64-bit support - Drop upstreamed patches - Release tests moved to xt/ directory upstream and now tested separately - Nobody else likes macros for commands - Drop backwards compatibility with ancient distributions * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.16-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Dec 15 2010 Marcela Maslanova mmaslano@redhat.com - 1.16-5 - Rebuild to fix problems with vendorarch/lib (#661697) * Thu Jun 3 2010 Paul Howarth paul@city-fan.org 1.16-4 - META.yml should specify perl >= 5.006 due to use of 3-arg open (CPAN RT#58094) * Fri Apr 30 2010 Marcela Maslanova mmaslano@redhat.com - 1.16-3 - Mass rebuild with perl-5.12.0 * Fri Dec 4 2009 Stepan Kasal skasal@redhat.com - 1.16-2 - Rebuild against perl 5.10.1 --------------------------------------------------------------------------------

================================================================================ perl-Package-DeprecationManager-0.11-1.el6 (FEDORA-EPEL-2011-3584) Manage deprecation warnings for your distribution -------------------------------------------------------------------------------- Update Information:

This update allows the use of an empty hash for the -deprecations parameter -------------------------------------------------------------------------------- ChangeLog:

* Mon Jun 20 2011 Paul Howarth paul@city-fan.org - 0.11-1 - Update to 0.11: - Allow an empty hash for the -deprecations parameter - BR: perl(ExtUtils::MakeMaker) - BR: perl(Test::CPAN::Changes) - BR: perl(Pod::Coverage::TrustPod) unconditionally - Update patches for old ExtUtils::MakeMaker and Test::More compatibility * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ php-voms-admin-0.5.1-2.el6 (FEDORA-EPEL-2011-3592) Web based interface to control VOMS parameters written in PHP -------------------------------------------------------------------------------- Update Information:

PHP VOMS-Admin (PVA) originally implemented the same functions as the traditional JAVA-based VOMS-Admin (v.2.0.18) interface for Apache Tomcat. It was designed to be more flexible and stable, provide easy scalability and minimize resource usage. PVA is fully compatible with the vomsd mysql backend.

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #603346 - Review Request: php-voms-admin - Web based interface to control VOMS parameters written in PHP https://bugzilla.redhat.com/show_bug.cgi?id=603346 --------------------------------------------------------------------------------

================================================================================ python-netifaces-0.5-1.el6 (FEDORA-EPEL-2011-3602) Python library to retrieve information about network interfaces -------------------------------------------------------------------------------- Update Information:

This package provides a cross platform API for getting address information from network interfaces. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #709914 - Review Request: python-netifaces: Python library to retrieve information about network interfaces https://bugzilla.redhat.com/show_bug.cgi?id=709914 --------------------------------------------------------------------------------

================================================================================ pyttsx-1.0-1.el6 (FEDORA-EPEL-2011-3596) Cross platform text-to-speech -------------------------------------------------------------------------------- Update Information:

pyttsx is a Python package supporting common text-to-speech engines. It currently supports SAPI5, NSSpeechSynthesizer, and espeak. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #702998 - Review Request: pyttsx - Cross platform text-to-speech https://bugzilla.redhat.com/show_bug.cgi?id=702998 --------------------------------------------------------------------------------

================================================================================ shedskin-0.8-1.el6 (FEDORA-EPEL-2011-3578) Python to C++ compiler -------------------------------------------------------------------------------- Update Information:

For a full list of changes see: http://code.google.com/p/shedskin/wiki/releasenotes --------------------------------------------------------------------------------

================================================================================ sslstrip-0.9-2.el6 (FEDORA-EPEL-2011-3580) Tool that provides a demonstration of HTTPS stripping attacks -------------------------------------------------------------------------------- Update Information:

New Package, first inclusion into Fedora. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #555655 - Review Request: sslstrip - tool that provides a demonstration of HTTPS stripping attacks https://bugzilla.redhat.com/show_bug.cgi?id=555655 --------------------------------------------------------------------------------

================================================================================ tuxpaint-0.9.21-5.el6 (FEDORA-EPEL-2011-3581) Drawing program designed for young children -------------------------------------------------------------------------------- Update Information:

New package in EL-6 branch. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #714423 - Create a new package for EL-6 https://bugzilla.redhat.com/show_bug.cgi?id=714423 --------------------------------------------------------------------------------

================================================================================ writetype-1.2.130-6.el6 (FEDORA-EPEL-2011-3599) Light word processor -------------------------------------------------------------------------------- Update Information:

WriteType is a free (and open source) program that helps younger students experience success in writing. It is designed especially for schools to transform technology from a barrier into an opportunity for success. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #698362 - Review Request: writetype - Light word processor https://bugzilla.redhat.com/show_bug.cgi?id=698362 --------------------------------------------------------------------------------

================================================================================ xenserverjava-5.6.100.1-1.el6 (FEDORA-EPEL-2011-3583) Java SDK for XenServer -------------------------------------------------------------------------------- Update Information:

initial import -------------------------------------------------------------------------------- References:

[ 1 ] Bug #708535 - Review Request: xenserverjava - Java SDK for XenServer https://bugzilla.redhat.com/show_bug.cgi?id=708535 --------------------------------------------------------------------------------

================================================================================ zeroinstall-injector-1.0-2.el6 (FEDORA-EPEL-2011-3594) The Zero Install Injector (0launch) -------------------------------------------------------------------------------- Update Information:

- Final upstream 1.0 release - Fix category of desktop entries Final upstream 1.0 release Final upstream 1.0 release Final upstream 1.0 release -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 15 2011 Michel Salim salimma@fedoraproject.org - 1.0-2 - Add main category "System" to desktop entries * Tue Jun 14 2011 Michel Salim salimma@fedoraproject.org - 1.0-1 - Update to 1.0 * Tue May 3 2011 Michel Salim salimma@fedoraproject.org - 1.0-0.rc1.1 - Update to 1.0rc1 --------------------------------------------------------------------------------