The following Fedora EPEL 6 Security updates need testing:
Age URL
673
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
102
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-...
26
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0378/quassel-0.9...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6...
17
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0466/python-gnup...
15
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0483/boinc-clien...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0507/seamonkey-2...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0509/python-tahr...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0514/python-tahr...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0525/libyaml-0.1...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0536/drupal6-cto...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0538/drupal7-cto...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0535/drupal6-ima...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0567/drupal6-fil...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0565/jansson-2.6...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0574/zabbix-1.8....
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0583/zabbix20-2....
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolki...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0644/easy-rsa-2....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0653/perl-CGI-Ap...
The following builds have been pushed to Fedora EPEL 6 updates-testing
BackupPC-3.3.0-2.el6
datagrepper-0.3.3-1.el6
dbmail-3.0.2-3.el6
fedmsg-0.7.6-2.el6
lynis-1.4.2-1.el6
nodejs-cssom-0.3.0-1.el6
nodejs-debug-0.7.4-2.el6
nodejs-temp-0.6.0-1.el6
perl-CGI-Application-4.50-4.el6
php-doctrine-annotations-1.1.2-3.20131220gita11349d.el6
php-doctrine-cache-1.3.0-2.el6
php-doctrine-collections-1.2-1.el6
php-doctrine-common-2.4.1-2.el6
php-doctrine-datafixtures-1.0.0-2.el6
php-doctrine-dbal-2.4.2-2.el6
php-doctrine-inflector-1.0-2.20131221gita81c334.el6
php-doctrine-lexer-1.0-2.20131220gitf12a5f7.el6
php-doctrine-orm-2.4.2-1.el6
python-datanommer-models-0.6.1-2.el6
ripright-0.9-2.el6
shogun-data-0.8-1.el6
sx-2.16-1.el6
Details about builds:
================================================================================
BackupPC-3.3.0-2.el6 (FEDORA-EPEL-2014-0663)
High-performance backup system
--------------------------------------------------------------------------------
Update Information:
- fix typo in README.RHEL
- enable PIE build (bz #965523)
- add patch that causes getpwnam to return only uid to fix selinux denials
(bz #827854)
- add local-fs.target and remote-fs.target to startup dependency (bz #959309)
- Last upstream release
- Remove no longer needeed patches
- Fix incorrect-fsf-address to reduce rpmlint output
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 21 2014 Bernard Johnson <bjohnson(a)symetrix.com> 3.3.0-2
- fix typo in README.RHEL
- enable PIE build (bz #965523)
- add patch that causes getpwnam to return only uid to fix selinux denials
(bz #827854)
- add local-fs.target and remote-fs.target to startup dependency (bz #959309)
* Fri Feb 21 2014 Johan Cwiklinski <johan AT x-tnd DOT be> 3.3.0-1
- Last upstream release
- Remove no longer needeed patches
- Fix incorrect-fsf-address to reduce rpmlint output
* Fri Feb 21 2014 Bernard Johnson <bjohnson(a)symetrix.com> - 3.3.0-1
- v 3.3.0
- fixed typos
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.1-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Petr Pisar <ppisar(a)redhat.com> - 3.2.1-14
- Perl 5.18 rebuild
* Sun Mar 31 2013 Ville Skyttä <ville.skytta(a)iki.fi> - 3.2.1-13
- Add build dependency on Pod::Usage (#913855).
- Fix bogus dates in %changelog.
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.1-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sun Jan 20 2013 Bernard Johnson <bjohnson(a)symetrix.com> 3.2.1-11
- Missing backuppc.service file after upgrade to 3.2.1-10 causes service to
exit at start (bz #896626)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #827854 - SELinux prevents BackupPC from reading /etc/shadow
https://bugzilla.redhat.com/show_bug.cgi?id=827854
[ 2 ] Bug #957393 - Please update to 3.3.0
https://bugzilla.redhat.com/show_bug.cgi?id=957393
[ 3 ] Bug #959309 - Missing startup dependencies in backuppc.service
https://bugzilla.redhat.com/show_bug.cgi?id=959309
[ 4 ] Bug #965523 - BackupPC package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=965523
--------------------------------------------------------------------------------
================================================================================
datagrepper-0.3.3-1.el6 (FEDORA-EPEL-2014-0655)
A webapp to query fedmsg history
--------------------------------------------------------------------------------
Update Information:
Expanded API. New self-expanding javascript widget.
Improvements to the html cards.
Improvements to the html cards.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.3-1
- New /raw api option to query for an arbitrary string
- New /raw api option to query for negative filters.
- New /widget.js self-expanding javascript widget.
* Sun Feb 9 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.2-1
- Cosmetic fixes.
* Sun Feb 9 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.1-1
- Frontend and docs improvements by charulagrl.
--------------------------------------------------------------------------------
================================================================================
dbmail-3.0.2-3.el6 (FEDORA-EPEL-2014-0651)
A database backed mail storage system
--------------------------------------------------------------------------------
Update Information:
Fix Memory Leak in IMAP SSL/TLS Connections (bz #833211)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 23 2014 Bernard Johnson <bjohnson(a)symetrix.com> - 3.0.2-3
- Fix Memory Leak in IMAP SSL/TLS Connections (bz #833211)
- remove changelog entries prior to 3.0 series
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #833211 - Fix Memory Leak in IMAP SSL/TLS Connections
https://bugzilla.redhat.com/show_bug.cgi?id=833211
--------------------------------------------------------------------------------
================================================================================
fedmsg-0.7.6-2.el6 (FEDORA-EPEL-2014-0649)
Tools for Fedora Infrastructure real-time messaging
--------------------------------------------------------------------------------
Update Information:
Fix user warning on import. New options to fedmsg-config.
Latest upstream. Seamlessly switch between gpg and x509 validation. Messages carry a new
'crypto' field indicating their signature type. Fixes to fedmsg-tail.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.6-2
- Copy test config into the test directory before building.
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.6-1
- Latest upstream.
- New option to fedmsg-config to query for particular values.
- Avoid pkg_resources warning.
* Sun Feb 9 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.5-1
- Latest upstream.
- Gource tail is removed.
- Fixes to fedmsg-tail.
- Updated documentation.
- Messages now carry a 'crypto' field indicating their sig type.
- Seamless switching between x509 and gpg crypto validation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1066625 - UserWarning when importing fedmsg.meta
https://bugzilla.redhat.com/show_bug.cgi?id=1066625
--------------------------------------------------------------------------------
================================================================================
lynis-1.4.2-1.el6 (FEDORA-EPEL-2014-0652)
Security and system auditing tool
--------------------------------------------------------------------------------
Update Information:
* 1.4.2 (2014-02-19)
Changes:
- Ignore interfaces aliases for HostID
- Extended umask tests with pam_umask entries [AUTH-9328]
- Check for supressed version on Squid [SQD-3680]
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 21 2014 Christopher Meng <rpm(a)cicku.me> - 1.4.2-1
- Update to 1.4.2
--------------------------------------------------------------------------------
================================================================================
nodejs-cssom-0.3.0-1.el6 (FEDORA-EPEL-2014-0658)
CSS Object Model implementation and CSS parser for Node.js
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 23 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.3.0-1
- update to upstream release 0.3.0
- MIT-LICENSE.txt is now included upstream
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-debug-0.7.4-2.el6 (FEDORA-EPEL-2014-0660)
A small debugging utility for Node.js
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 0.7.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 23 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.7.4-2
- History.md and example/ no longer included in the NPM tarball
* Sun Feb 23 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.7.4-1
- update to upstream release 0.7.4
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.7.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-temp-0.6.0-1.el6 (FEDORA-EPEL-2014-0662)
Temporary files and directories for Node.js
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 0.6.0:
*
https://github.com/bruce/node-temp/commits/v0.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 23 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.6.0-1
- update to upstream release 0.6.0
- apply patch to use native os.tmpDir instead of npm(osenv)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1005983 - nodejs-temp-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1005983
--------------------------------------------------------------------------------
================================================================================
perl-CGI-Application-4.50-4.el6 (FEDORA-EPEL-2014-0653)
Framework for building reusable web-applications
--------------------------------------------------------------------------------
Update Information:
CGI::Application suffers from a flaw where, in certain cases, it would unexpectedly dump a
complete set of web query data and server environment information as an error page. This
could allow unintended disclosure of sensitive information.
This update patches CGI::Application to no longer do so.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 23 2014 Emmanuel Seyman <emmanuel(a)seyman.fr> - 4.50-3
- Patch CGI::Application to prevent information disclosure (CVE-2013-7329)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1067180 - CVE-2013-7329 perl-CGI-Application: information disclosure flaw
https://bugzilla.redhat.com/show_bug.cgi?id=1067180
--------------------------------------------------------------------------------
================================================================================
php-doctrine-annotations-1.1.2-3.20131220gita11349d.el6 (FEDORA-EPEL-2014-0657)
PHP docblock annotations parser library
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-cache-1.3.0-2.el6 (FEDORA-EPEL-2014-0657)
Doctrine Cache
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-collections-1.2-1.el6 (FEDORA-EPEL-2014-0657)
Collections abstraction library
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-common-2.4.1-2.el6 (FEDORA-EPEL-2014-0657)
Common library for Doctrine projects
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-datafixtures-1.0.0-2.el6 (FEDORA-EPEL-2014-0657)
Data Fixtures for all Doctrine Object Managers
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-dbal-2.4.2-2.el6 (FEDORA-EPEL-2014-0657)
Doctrine Database Abstraction Layer (DBAL)
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-inflector-1.0-2.20131221gita81c334.el6 (FEDORA-EPEL-2014-0657)
Common string manipulations with regard to casing and singular/plural rules
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-lexer-1.0-2.20131220gitf12a5f7.el6 (FEDORA-EPEL-2014-0657)
Base library for a lexer that can be used in top-down, recursive descent parsers
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
php-doctrine-orm-2.4.2-1.el6 (FEDORA-EPEL-2014-0657)
Doctrine Object-Relational-Mapper (ORM)
--------------------------------------------------------------------------------
Update Information:
php-doctrine-* 2.4.x stack
--------------------------------------------------------------------------------
================================================================================
python-datanommer-models-0.6.1-2.el6 (FEDORA-EPEL-2014-0654)
SQLAlchemy models for datanommer
--------------------------------------------------------------------------------
Update Information:
Expanded Message.grep API.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.6.2-1
- Added a new test dependency on python-fedmsg-meta-fedora-infrastructure
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.6.1-1
- Expanded Message.grep API.
--------------------------------------------------------------------------------
================================================================================
ripright-0.9-2.el6 (FEDORA-EPEL-2014-0659)
A minimal CD ripper
--------------------------------------------------------------------------------
Update Information:
Satisfy the tests and fix a typo in %description.
A minimal CD ripper.
A minimal CD ripper.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1057418 - Review Request: ripright - A minimal CD ripper
https://bugzilla.redhat.com/show_bug.cgi?id=1057418
--------------------------------------------------------------------------------
================================================================================
shogun-data-0.8-1.el6 (FEDORA-EPEL-2014-0661)
Data-files for the SHOGUN machine learning toolbox
--------------------------------------------------------------------------------
Update Information:
new upstream release: v0.8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1068941 - shogun-data 0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1068941
--------------------------------------------------------------------------------
================================================================================
sx-2.16-1.el6 (FEDORA-EPEL-2014-0656)
Tool to extract reports and run plug-ins against those extracted reports
--------------------------------------------------------------------------------
Update Information:
New upstream release 2.16:
- Added detection of secondary fencing method.
- Added clean_start attribute value to message if attribute detected.
- Add this url to allow_kill on qdisk.
- Check protocal when gfs/gfs2 found. If broadcast or updu then output
a message.
- Added DMIDecode.py and added to machine type of cluster nodes to
summary output.
- Fix network issue for:
https://bugzilla.redhat.com/show_bug.cgi?id=1001754
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 22 2014 Niels de Vos <devos(a)fedoraproject.org> - 2.16-1
- Update to sx-2.16 (#1068700)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1068700 - Update to sx-2.16
https://bugzilla.redhat.com/show_bug.cgi?id=1068700
[ 2 ] Bug #1001754 - sxconsole improperly reports heartbeat interface
https://bugzilla.redhat.com/show_bug.cgi?id=1001754
--------------------------------------------------------------------------------