The following Fedora EPEL 6 Security updates need testing:
Age URL
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13529/moodle-2.1...
214
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13499/weechat-0....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13537/claws-mail...
40
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13155/cobbler-2....
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13442/roundup-1....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13525/pcp-3.6.10...
37
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13172/ssmtp-2.61...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13492/sticky-not...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13495/cgit-0.9.1...
37
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13176/icecast-2....
137
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13478/mod_securi...
402
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
The following builds have been pushed to Fedora EPEL 6 updates-testing
cabal-rpm-0.6.6-1.el6
claws-mail-3.9.0-1.el6
claws-mail-plugins-3.9.0-2.el6
ergo-3.2.1-1.el6
guacd-0.6.2-1.el6
koji-1.7.1-1.el6
libguac-0.6.3-2.el6
libguac-client-rdp-0.6.2-1.el6
libguac-client-vnc-0.6.1-1.el6
php-channel-drush-1.3-1.el6
xlockmore-5.41-1.el6
Details about builds:
================================================================================
cabal-rpm-0.6.6-1.el6 (FEDORA-EPEL-2012-13536)
RPM package creator for Haskell Cabal-based packages
--------------------------------------------------------------------------------
Update Information:
- 0.6.6 release generates deps for tools and external libs including pkgconfig
- short cblrpm and cblrpm-diff aliases
- minor bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2012 Jens Petersen <petersen(a)redhat.com> - 0.6.6-1
- now generates dependencies for C libs, buildtools, and pkgconfig depends
- add short cblrpm and cblrpm-diff alias symlinks
- fix handling of LGPL-2.1 license
- change backup suffix from .cabal-rpm to .cblrpm
- do not mistake non-existent tarballs for package names
--------------------------------------------------------------------------------
================================================================================
claws-mail-3.9.0-1.el6 (FEDORA-EPEL-2012-13537)
Email client and news reader based on GTK+
--------------------------------------------------------------------------------
Update Information:
* Added IMAP server side search
* Added the file .claws-mail/extraheaderrc which holds editable extra headers to be added
to compose window combobox
* Added 'Select html part of multipart messages' to the Folder Properties
* GnuPG: Consider marginal signature validity as untrusted
* The mimeview shortcuts are now user configurable
* Spell checker: Always show 'change dictionary' menu
* Filtering dialogue: TreeView type-ahead is now case insensitive
* Separated 'Mark all read' from 'Mark as read' and 'Ignore
thread'
* Made 'Mark all read' confirmation button more clear
* Made the clickable area of the expander arrows in the folder list larger
* Made SSL client certificate error messages more meaningful
* The type of units required in the Extended Search information dialogue are now
indicated
* Several speed-ups and optimizations
* Updated manual
* Updated translations: Brazilian Portuguese, Finnish, French, German, Hungarian,
Spanish, Swedish, traditional Chinese, Ukrainian
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.9.0-1
* Mon Oct 22 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.8.1-3
- fix null-ptr crash (rhbz#862578, CVE-2012-4507)
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jul 5 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.8.1-1
- version upgrade
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #877376 - claws-mail-plugins (vCalendar): User credentials information
disclosure via status tray display [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=877376
--------------------------------------------------------------------------------
================================================================================
claws-mail-plugins-3.9.0-2.el6 (FEDORA-EPEL-2012-13537)
Additional plugins for Claws Mail
--------------------------------------------------------------------------------
Update Information:
* Added IMAP server side search
* Added the file .claws-mail/extraheaderrc which holds editable extra headers to be added
to compose window combobox
* Added 'Select html part of multipart messages' to the Folder Properties
* GnuPG: Consider marginal signature validity as untrusted
* The mimeview shortcuts are now user configurable
* Spell checker: Always show 'change dictionary' menu
* Filtering dialogue: TreeView type-ahead is now case insensitive
* Separated 'Mark all read' from 'Mark as read' and 'Ignore
thread'
* Made 'Mark all read' confirmation button more clear
* Made the clickable area of the expander arrows in the folder list larger
* Made SSL client certificate error messages more meaningful
* The type of units required in the Extended Search information dialogue are now
indicated
* Several speed-ups and optimizations
* Updated manual
* Updated translations: Brazilian Portuguese, Finnish, French, German, Hungarian,
Spanish, Swedish, traditional Chinese, Ukrainian
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.9.0-2
- fix vCalendar user credential disclosure rhbz: 877372 877375 877376
* Mon Nov 19 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.9.0-1
- version upgrade
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.8.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jul 9 2012 Petr Pisar <ppisar(a)redhat.com> - 3.8.1-2
- Perl 5.16 rebuild
* Thu Jul 5 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.8.1-1
- version upgrade
- add subpackage for -pdf-viewer plugin
* Fri Jun 8 2012 Petr Pisar <ppisar(a)redhat.com> - 3.8.0-5
- Perl 5.16 rebuild
* Thu Jan 26 2012 Tomas Bzatek <tbzatek(a)redhat.com> - 3.8.0-4
- Rebuilt for new libarchive
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #877376 - claws-mail-plugins (vCalendar): User credentials information
disclosure via status tray display [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=877376
--------------------------------------------------------------------------------
================================================================================
ergo-3.2.1-1.el6 (FEDORA-EPEL-2012-13541)
A program for large-scale self-consistent field calculations
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.1, which makes it possible to use the global basis set library.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 3.2.1-1
- Update to 3.2.1, fixing operation with global basis set library.
--------------------------------------------------------------------------------
================================================================================
guacd-0.6.2-1.el6 (FEDORA-EPEL-2012-13534)
Proxy daemon for Guacamole
--------------------------------------------------------------------------------
Update Information:
Updated Guacamole stack
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2012 Simone Caronni <negativo17(a)gmail.com> - 0.6.2-1
- Updated to 0.6.2.
* Wed Oct 17 2012 Simone Caronni <negativo17(a)gmail.com> - 0.6.1-4
- Fix fedpkg checks. Requires fedpkg > 1.10:
http://git.fedorahosted.org/cgit/fedpkg.git/commit/?id=11c46c06a3c9cc2f58...
- Change systemd requirements as per new package guidelines.
--------------------------------------------------------------------------------
================================================================================
koji-1.7.1-1.el6 (FEDORA-EPEL-2012-13540)
Build system tools
--------------------------------------------------------------------------------
Update Information:
update to upstream 1.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2012 Dennis Gilmore <dennis(a)ausil.us> - 1.7.1-1
- update to upstream 1.7.1 release
* Sat Sep 1 2012 Dennis Gilmore <dennis(a)ausil.us> - 1.7.0-7
- add the patch that we had previously had hotapplied in fedora infra
* Sat Sep 1 2012 Dennis Gilmore <dennis(a)ausil.us> - 1.7.0-6
- remove even trying to make devices i the chroots
* Sat Sep 1 2012 Dennis Gilmore <dennis(a)ausil.us> - 1.7.0-5
- add patch to check for /dev/loopX before making them
* Fri Aug 31 2012 Dennis Gilmore <dennis(a)ausil.us> - 1.7.0-4
- add patch to only make /dev/urandom if it doesnt exist
- add upstream patch for taginfo fixes with older servers
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libguac-0.6.3-2.el6 (FEDORA-EPEL-2012-13534)
The common library used by all C components of Guacamole
--------------------------------------------------------------------------------
Update Information:
Updated Guacamole stack
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2012 Simone Caronni <negativo17(a)gmail.com> - 0.6.3-2
- Upstream recreated the tarball from git withouth bumping release;
autoconf tools update.
--------------------------------------------------------------------------------
================================================================================
libguac-client-rdp-0.6.2-1.el6 (FEDORA-EPEL-2012-13534)
RDP support for guacd
--------------------------------------------------------------------------------
Update Information:
Updated Guacamole stack
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2012 Simone Caronni <negativo17(a)gmail.com> - 0.6.2-1
- Updated to 0.6.2.
--------------------------------------------------------------------------------
================================================================================
libguac-client-vnc-0.6.1-1.el6 (FEDORA-EPEL-2012-13534)
VNC support for guacd
--------------------------------------------------------------------------------
Update Information:
Updated Guacamole stack
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2012 Simone Caronni <negativo17(a)gmail.com> - 0.6.1-1
- Updated to 0.6.1.
--------------------------------------------------------------------------------
================================================================================
php-channel-drush-1.3-1.el6 (FEDORA-EPEL-2012-13535)
Adds
pear.drush.org channel to PEAR
--------------------------------------------------------------------------------
Update Information:
Adds
pear.drush.org channel to PEAR
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #874904 - Review Request: php-channel-drush - Adds php-channel-drush channel
to PEAR
https://bugzilla.redhat.com/show_bug.cgi?id=874904
--------------------------------------------------------------------------------
================================================================================
xlockmore-5.41-1.el6 (FEDORA-EPEL-2012-13539)
Screen lock and screen saver
--------------------------------------------------------------------------------
Update Information:
fixed "xlock exits on segfault, unlocking the screen"
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2012 Adrian Reber <adrian(a)lisas.de> - 5.41-1
- updated to 5.41
- dropped upstreamed patch for CVE-2012-4524
- fixed "xlock exits on segfault, unlocking the screen" (#874484)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #874484 - xlock exits on segfault, unlocking the screen
https://bugzilla.redhat.com/show_bug.cgi?id=874484
--------------------------------------------------------------------------------