The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-0026/wordpress-3.3.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5373/alpine-2.02-3.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5379/zabbix-1.8.10-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5388/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5393/openstack-nova... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5331/phpMyAdmin-3.4...

The following builds have been pushed to Fedora EPEL 6 updates-testing

NearTree-3.1.1-1.el6 R-2.14.1-1.el6 autoconf-archive-2011.12.21-1.el6 drupal7-calendar-3.0-0.2.alpha2.el6 facter-1.6.4-1.el6 gerbv-2.6.0-1.el6 glpi-0.80.6-1.el6 glusterfs-3.2.5-5.el6 hekafs-0.7-22.el6 knemo-0.7.2-1.el6 lirc-0.9.0-8.el6 mod_evasive-1.10.1-10.el6 puppet-2.6.13-2.el6 rubygem-state_machine-1.1.1-1.el6 wordpress-3.3.1-2.el6

Details about builds:

================================================================================ NearTree-3.1.1-1.el6 (FEDORA-EPEL-2012-0037) An API for finding nearest neighbors -------------------------------------------------------------------------------- Update Information:

Update to 3.1.1 -------------------------------------------------------------------------------- ChangeLog:

* Fri Jan 6 2012 Takanori MATSUURA t.matsuu@gmail.com - 3.1.1-1 - update to 3.1.1 - add time to BuirdRequires --------------------------------------------------------------------------------

================================================================================ R-2.14.1-1.el6 (FEDORA-EPEL-2012-0021) A language for data analysis and graphics -------------------------------------------------------------------------------- Update Information:

Update to R 2.14.1.

A full list of bugfixes and changes can be found here: http://cran.r-project.org/src/base/NEWS.html -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 4 2012 Tom Callaway spot@fedoraproject.org - 2.14.1-1 - update to 2.14.1 --------------------------------------------------------------------------------

================================================================================ autoconf-archive-2011.12.21-1.el6 (FEDORA-EPEL-2012-0040) The Autoconf Macro Archive -------------------------------------------------------------------------------- Update Information:

Update to 2011.12.21 -------------------------------------------------------------------------------- ChangeLog:

* Thu Jan 5 2012 Takanori MATSUURA t.matsuu@gmail.com - 2011.12.21-1 - update to 2011.12.21 --------------------------------------------------------------------------------

================================================================================ drupal7-calendar-3.0-0.2.alpha2.el6 (FEDORA-EPEL-2012-0038) This module will display any Views date field in calendar formats -------------------------------------------------------------------------------- Update Information:

New upstream version. Updated to 3.0-alpha2. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ facter-1.6.4-1.el6 (FEDORA-EPEL-2012-0033) Ruby module for collecting simple facts about a host operating system -------------------------------------------------------------------------------- Update Information:

This is an upstream bugfix release. A few small bugs are squashed and dmidecode is added to the package Requires.

The upstream release notes provide more details:

http://projects.puppetlabs.com/projects/facter/wiki -------------------------------------------------------------------------------- ChangeLog:

* Thu Jan 5 2012 Todd Zullinger tmz@pobox.com - 1.6.4-1 - Update to 1.6.4 - Require dmidecode (upstream #11041) --------------------------------------------------------------------------------

================================================================================ gerbv-2.6.0-1.el6 (FEDORA-EPEL-2012-0022) Gerber file viewer from the gEDA toolkit -------------------------------------------------------------------------------- Update Information:

New release 2.6.0 -------------------------------------------------------------------------------- ChangeLog:

* Tue Jan 3 2012 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 2.6.0-1 - new upstream release * Tue Jul 5 2011 Ralf Corsépius corsepiu@fedoraproject.org - 2.5.0-2 - Hack libtool to not add rpath. - Propagate RPM_OPT_FLAGS to CFLAGS. - Pass -ldl through LIBS. - Fix date of previous changelog entry. - Remove "unused-direct-shlib-dependencies" libtool hacking. * Sun Jul 3 2011 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 2.5.0-1 - new upstream release --------------------------------------------------------------------------------

================================================================================ glpi-0.80.6-1.el6 (FEDORA-EPEL-2012-0025) Free IT asset management software -------------------------------------------------------------------------------- Update Information:

Upstream Changelog: * Bug #3236: Bug on Db Relations computation for plugins * Bug #3247: Several bugs on reservation * Bug #3254: Fix javascript bug for ocs import * Bug #3264: When merge budget, items are not linked to new budgets * Bug #3276: mailcollector rules don't use user prefs * Bug #3290: LDAP group membership is broken when there's a comma in the OU * Bug #3294: SLA action do not add actors in CLI mode * Bug #3295: Notification when delete private tasks or followups not wanted * Bug #3297: Class loading error during logout when CAS is activated * Bug #3299: regression : can't add a document from item form

-------------------------------------------------------------------------------- ChangeLog:

* Thu Jan 5 2012 Remi Collet remi@fedoraproject.org - 0.80.6-1 - version 0.80.6 released (bugfix) https://forge.indepnet.net/projects/glpi/versions/657 - add patch for https://forge.indepnet.net/issues/3299 --------------------------------------------------------------------------------

================================================================================ glusterfs-3.2.5-5.el6 (FEDORA-EPEL-2012-0019) Cluster File System -------------------------------------------------------------------------------- Update Information:

revise spec to use native systemd on f17 and rhel7 -------------------------------------------------------------------------------- ChangeLog:

* Tue Jan 3 2012 Kaleb S. KEITHLEY kkeithle@redhat.com - 3.2.5-5 - revised spec for init.d for fedora<=16, rhel<=6; native systemd for f17 and rhel7 --------------------------------------------------------------------------------

================================================================================ hekafs-0.7-22.el6 (FEDORA-EPEL-2012-0039) Heka File System -------------------------------------------------------------------------------- Update Information:

revise spec to use native systemd on f17 and rhel7 -------------------------------------------------------------------------------- ChangeLog:

* Tue Jan 3 2012 Kaleb S. KEITHLEY kkeithle@redhat.com - 0.7-22 - run autogen to get correct libtool for target * Tue Jan 3 2012 Kaleb S. KEITHLEY kkeithle@redhat.com - 0.7-21 - revised spec for init.d for fedora<=16, rhel<=6; native systemd for f17 and rhel7 --------------------------------------------------------------------------------

================================================================================ knemo-0.7.2-1.el6 (FEDORA-EPEL-2012-0031) A KDE network monitoring tool -------------------------------------------------------------------------------- Update Information:

KNemo 0.7.2

* fix loading/calculating off-peak traffic * use bugs.kde.org for bug reports * keep the pixmap cache size under control -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 4 2012 Alexey Kurov nucleo@fedoraproject.org - 0.7.2-1 - KNemo 0.7.2 --------------------------------------------------------------------------------

================================================================================ lirc-0.9.0-8.el6 (FEDORA-EPEL-2012-0030) The Linux Infrared Remote Control package -------------------------------------------------------------------------------- Update Information:

LIRC is a package that allows you to decode and send infra-red and other signals of many (but not all) commonly used remote controls. Included applications include daemons which decode the received signals as well as user space applications which allow controlling a computer with a remote control. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #755333 - [RFE] Need EL6 branch of lirc for MythTV https://bugzilla.redhat.com/show_bug.cgi?id=755333 --------------------------------------------------------------------------------

================================================================================ mod_evasive-1.10.1-10.el6 (FEDORA-EPEL-2012-0018) Denial of Service evasion module for Apache -------------------------------------------------------------------------------- Update Information:

Rebuild for EL-6 branch. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #739171 - Addition of mod_evasive to the EPEL 6 repository https://bugzilla.redhat.com/show_bug.cgi?id=739171 --------------------------------------------------------------------------------

================================================================================ puppet-2.6.13-2.el6 (FEDORA-EPEL-2012-0028) A network tool for managing many disparate systems -------------------------------------------------------------------------------- Update Information:

This is an upstream bugfix release that fixes a few issues, notably restoring the behaviour of subjectAltNames from older releases when bootstrapping a puppet master.

It also includes a backported fix for augeas >= 0.10.

For further details refer to the upstream release notes and bugzilla ticket for the augeas issue:

http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.13 https://bugzilla.redhat.com/771097 -------------------------------------------------------------------------------- ChangeLog:

* Thu Jan 5 2012 Todd Zullinger tmz@pobox.com - 2.6.13-2 - Revert to minimal patch for augeas >= 0.10 (bz#771097) * Wed Dec 14 2011 Todd Zullinger tmz@pobox.com - 2.6.13-1 - Update to 2.6.13 - Cherry-pick various augeas fixes from upstream (bz#771097) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #771097 - Augeas provider always runs with version >= 0.10.0 https://bugzilla.redhat.com/show_bug.cgi?id=771097 --------------------------------------------------------------------------------

================================================================================ rubygem-state_machine-1.1.1-1.el6 (FEDORA-EPEL-2012-0041) Adds support for creating state machines for attributes on any Ruby class -------------------------------------------------------------------------------- Update Information:

Update version 1.1.1 -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 4 2012 Guillermo Gómez gomix@fedoraproject.org - 1.1.1-1 - Update version 1.1.1 --------------------------------------------------------------------------------

================================================================================ wordpress-3.3.1-2.el6 (FEDORA-EPEL-2012-0026) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information:

Upgrade to the upstream latest release, fixing also CVE 2012-0287 -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 4 2012 'Matej Cepl mcepl@redhat.com' - 3.3.1-1 - Security (XSS) and maintenance upstream release. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #771731 - CVE-2012-0287 wordpress: XSS flaw fixed in 3.3.1 [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=771731 --------------------------------------------------------------------------------