The following Fedora EPEL 6 Security updates need testing:
Age URL
450
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
45
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6034/heat-jeos-9...
39
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-...
22
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10586/rubygem-pa...
17
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10623/ReviewBoar...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10750/zeroinstal...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10756/gallery3-3...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10754/ansible-1....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10644/nodejs-cal...
The following builds have been pushed to Fedora EPEL 6 updates-testing
cacti-0.8.8a-8.el6
gperftools-2.0-11.el6.3
libbsd-0.6.0-1.el6
libunwind-1.1-2.el6
opus-1.0.3-1.el6
seamonkey-2.19-2.el6
Details about builds:
================================================================================
cacti-0.8.8a-8.el6 (FEDORA-EPEL-2013-10850)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
* Remove non-free Javascript files and use a Free jQuery implementation instead.
* Move "README.cacti" to "README.fedora".
* Improve httpd configuration guidance (cacti.conf).
* Adjust package requirements so cacti will now pull in net-snmp-utils.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 14 2013 Ken Dreyer <ktdreyer(a)ktdreyer.org> - 0.8.8a-8
- Improve security description in cacti's httpd conf (RHBZ #895823)
- Use improved treeview replacement patch (RHBZ #888207)
- rpmlint fixes
- trim RPM changelog
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.8a-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Tue Jan 8 2013 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 0.8.8a-6
- Add note to README.fedora about the default MySQL password
- Remove reference to "docs/INSTALL" in README.fedora (RHBZ #893122)
- Add dependency on net-snmp-utils (RHBZ #893150)
* Fri Jan 4 2013 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 0.8.8a-5
- Install our README file as README.fedora
* Fri Jan 4 2013 Tom Callaway <spot(a)fedoraproject.org> - 0.8.8a-4
- remove non-free treeview bits (replace with jquery future code from 0.8.9 trunk)
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.8a-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893122 - documentation file: README.cacti points to missing file:
docs/INSTALL
https://bugzilla.redhat.com/show_bug.cgi?id=893122
[ 2 ] Bug #888207 - Cacti included non-free Java Scripts files.
https://bugzilla.redhat.com/show_bug.cgi?id=888207
[ 3 ] Bug #893150 - missing Requires: net-snmp-utils
https://bugzilla.redhat.com/show_bug.cgi?id=893150
[ 4 ] Bug #895823 - [RFE] improve httpd config guidance
https://bugzilla.redhat.com/show_bug.cgi?id=895823
--------------------------------------------------------------------------------
================================================================================
gperftools-2.0-11.el6.3 (FEDORA-EPEL-2013-10836)
Very fast malloc and performance analysis tools
--------------------------------------------------------------------------------
Update Information:
Use libunwind, disable "-fexceptions" to resolve pthread linking issue.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 10 2013 Tom Callaway <spot(a)fedoraproject.org> - 2.0-11.3
- use libunwind
- disable -fexceptions, as that breaks things on el6
* Tue Jun 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 2.0-11.2
- pass -pthread
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #977284 - symbol lookup error 'pthread_atfork' while using tcmalloc
https://bugzilla.redhat.com/show_bug.cgi?id=977284
--------------------------------------------------------------------------------
================================================================================
libbsd-0.6.0-1.el6 (FEDORA-EPEL-2013-10853)
Library providing BSD-compatible functions for portability
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream, to fix crash in setproctitle() when libbsd is dynamically
loaded in a threaded program.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 14 2013 Eric Smith <brouhaha(a)fedoraproject.org> - 0.6.0-1
- Update to latest upstream release. Remove patch 0.
- Added ctor-static subpackage.
* Sun Jul 7 2013 Eric Smith <brouhaha(a)fedoraproject.org> - 0.5.2-3
- Still having problems with setproctitle(), bug #981799, upstream
freedesktop.org bug #66679. Added patch to noop out setproctitle().
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #981799 - [abrt] claws-mail-3.9.2-1.fc19: spt_copyenv: Process
/usr/bin/claws-mail was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=981799
--------------------------------------------------------------------------------
================================================================================
libunwind-1.1-2.el6 (FEDORA-EPEL-2013-10836)
An unwinding library
--------------------------------------------------------------------------------
Update Information:
Use libunwind, disable "-fexceptions" to resolve pthread linking issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #977284 - symbol lookup error 'pthread_atfork' while using tcmalloc
https://bugzilla.redhat.com/show_bug.cgi?id=977284
--------------------------------------------------------------------------------
================================================================================
opus-1.0.3-1.el6 (FEDORA-EPEL-2013-10848)
An audio codec for use in low-delay speech and audio communication
--------------------------------------------------------------------------------
Update Information:
Opus 1.0.3 includes a backport of the new 1.1 surround API. Aside from that, it includes
fixes for a few minor glitches during mode switching, some minor fixed-point fixes, and
fixes a regression in the FEC code introduced in 1.0.2.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 14 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.0.3-1
- 1.0.3 release
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jan 10 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.0.2-2
- Enable extra custom modes API
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.19-2.el6 (FEDORA-EPEL-2013-10852)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Use native nspr library to work properly.
Update to 2.19
Fixes various security issues (as always).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 15 2013 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.19-2
- use native nspr (version of 4.9.6) instead of the system one (4.9.2).
Seamonkey-2.19 with nspr patches seems to require at least nspr >= 4.9.3
* Sat Jul 6 2013 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.19-1
- update to 2.19
- use bundled python-2.7 for build
- no more touch omni.ja
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #981425 - seamonkey-2.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=981425
--------------------------------------------------------------------------------