The following Fedora EPEL 6 Security updates need testing:
Age URL
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0005/php-ZendFra...
266
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0013/drupal6-con...
90
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13172/ssmtp-2.61...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0018/drupal7-con...
43
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13610/drupal6-ct...
189
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3...
454
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gri...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0081/nagios-3.4....
The following builds have been pushed to Fedora EPEL 6 updates-testing
gfal2-2.1.1-0.el6
hexchat-2.9.4-1.el6
nagios-3.4.4-1.el6
php-horde-Horde-Browser-2.0.3-1.el6
php-horde-Horde-Cache-2.0.1-2.el6
php-horde-Horde-Cli-2.0.2-1.el6
php-horde-Horde-Date-2.0.2-1.el6
php-horde-Horde-Exception-2.0.2-1.el6
php-horde-Horde-Nls-2.0.2-1.el6
php-horde-Horde-Util-2.0.3-1.el6
php-pear-File-Fstab-2.0.3-1.el6
php-twig-Twig-1.12.0-1.el6
pymol-1.5.0.2-6.20120218svn3982.el6
python-stevedore-0.8-1.el6
python-webob1.2-1.2.3-2.el6
wordpress-3.5-3.el6
Details about builds:
================================================================================
gfal2-2.1.1-0.el6 (FEDORA-EPEL-2013-0084)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Update 2.1.1 of GFAL 2.0
bugfix about srm plugin SURL -> turl resolution
GFAL2 2.1, following update 1.14.0 of lcg-util
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2013 Adrien Devresse <adevress at cern.ch> - 2.1.1-0
- fix a minor memory issue with the gfal_transfer stack
- fix a wrong error report problem with srm third party copy
* Wed Dec 5 2012 Adrien Devresse <adevress at cern.ch> - 2.1.0-2
- fix an issue this surl to turl resolution for SRM third party copy
* Fri Nov 30 2012 Adrien Devresse <adevress at cern.ch> - 2.1.0-0
- One-globus session system for gsiftp plugin ( FTS 3.0 need )
- correct a major issue with the gass attribute system in gsiftp plugin
- change the lfc set/get env var for a one compatible with set/get opt
- add set/nb streams option for gsiftp
- add the mkdir rec function for SRM transfer
- correct an issue with opendir and srm_ls ( ENOTDIR error silent )
- correct a memory leak in the cache system
- correct timeout support for gsiftp transfer
- implement tcp buffer size support for gsiftp layer
- apply a correction on the SRM over-write logic, related to a BeStMan errcode problem on
File Not Found with srmRm ( EOS )
- apply a fix on the transfer gsiftp timeout ( protection against multiple cancel )
- fix for SRM filesize problem ( defined to 0, workaround ) related to globus 426 error
bad filesize
- secure the callback system for globus gass timeout
- base implementation of the http plugin
- improve reliability of the bdii resolution
- add a fallback mechanism in case of bdii bad resolution
- correct several race conditions in the bdii layer
- add thread safe support for set/get variables in liblfc
- correct a deadlock problem with globus and gisftp plugin
- implement the mkdir_rec logic for general purpose
- implement the parent folder creation logic with gridftp
- add support for lfc://host/path URL style for the lfc plugin
- switch off_t to 64bits size by default ( _FILE_OFFSET_BITS=64)
- provide a "nobdii" like option
- provide the choice of turl protocol resolution for srm plugin
--------------------------------------------------------------------------------
================================================================================
hexchat-2.9.4-1.el6 (FEDORA-EPEL-2013-0082)
A popular and easy to use graphical IRC (chat) client
--------------------------------------------------------------------------------
Update Information:
Initial EL6 Package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #855605 - Review Request: hexchat - GTK IRC Client
https://bugzilla.redhat.com/show_bug.cgi?id=855605
--------------------------------------------------------------------------------
================================================================================
nagios-3.4.4-1.el6 (FEDORA-EPEL-2013-0081)
Nagios monitors hosts and services and yells if somethings breaks
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.4; CVE-2012-6096
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 13 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.4.4-1
- Update to 3.4.4; CVE-2012-6096 (#893269)
- Refactored the patch nagios-0010-Added-several-images-to-the-sample-config.patch
as patch can't create binary files (#875362).
The old patch10 was replaced by
nagios-0010-Added-several-images-to-the-sample-config-revb.patch
and the PNG files included as sources 10, 11, and 12.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893269 - CVE-2012-6096 nagios: stack-based buffer overflow in history.cgi
https://bugzilla.redhat.com/show_bug.cgi?id=893269
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Browser-2.0.3-1.el6 (FEDORA-EPEL-2013-0085)
Horde Browser API
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Cache-2.0.1-2.el6 (FEDORA-EPEL-2013-0085)
Horde Caching API
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Cli-2.0.2-1.el6 (FEDORA-EPEL-2013-0085)
Horde Command Line Interface API
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Date-2.0.2-1.el6 (FEDORA-EPEL-2013-0085)
Horde Date package
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Exception-2.0.2-1.el6 (FEDORA-EPEL-2013-0085)
Horde Exception Handler
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Nls-2.0.2-1.el6 (FEDORA-EPEL-2013-0085)
Native Language Support (NLS)
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Util-2.0.3-1.el6 (FEDORA-EPEL-2013-0085)
Horde Utility Libraries
--------------------------------------------------------------------------------
Update Information:
Update to latest versions
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2013 Nick Bebout <nb(a)fedoraproject.org> - 2.0.3-1
- update to 2.0.3
* Fri Dec 28 2012 Nick Bebout <nb(a)fedoraproject.org> - 2.0.2-1
- update to 2.0.2
--------------------------------------------------------------------------------
================================================================================
php-pear-File-Fstab-2.0.3-1.el6 (FEDORA-EPEL-2013-0086)
Read and write fstab files
--------------------------------------------------------------------------------
Update Information:
File_Fstab is an easy-to-use package which can read & write UNIX fstab
files. It presents a pleasant object-oriented interface to the fstab.
Features:
* Supports blockdev, label, and UUID specification of mount device.
* Extendable to parse non-standard fstab formats by defining a new Entry class for that
format.
* Easily examine and set mount options for an entry.
* Stable, functional interface.
* Fully documented with PHPDoc.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #894100 - Review Request: php-pear-File-Fstab - Read and write fstab files
https://bugzilla.redhat.com/show_bug.cgi?id=894100
--------------------------------------------------------------------------------
================================================================================
php-twig-Twig-1.12.0-1.el6 (FEDORA-EPEL-2013-0088)
Twig is a modern template engine for PHP
--------------------------------------------------------------------------------
Update Information:
1.12.0 (2012-01-08)
* added verbatim as an alias for the raw tag to avoid confusion with the raw filter
* fixed registration of tests and functions as anonymous functions
* fixed globals management
1.12.0-RC1 (2012-12-29)
* added an include function (does the same as the include tag but in a more flexible way)
* added the ability to use any PHP callable to define filters, functions, and tests
* added a syntax error when using a loop variable that is not defined
* added the ability to set default values for macro arguments
* added support for named arguments for filters, tests, and functions
* moved filters/functions/tests syntax errors to the parser
* added support for extended ternary operator syntaxes
Full changelog:
https://github.com/fabpot/Twig/blob/v1.12.0/CHANGELOG
See:
*
http://blog.twig.sensiolabs.org/post/40011861424/twig-1-12-0-released
*
http://blog.twig.sensiolabs.org/post/39237503408/twig-1-12-0-rc1-released
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 13 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.12.0-1
- Updated to upstream version 1.12.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893710 - php-twig-Twig-1.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=893710
--------------------------------------------------------------------------------
================================================================================
pymol-1.5.0.2-6.20120218svn3982.el6 (FEDORA-EPEL-2013-0075)
PyMOL Molecular Graphics System
--------------------------------------------------------------------------------
Update Information:
update EL6 to 1.5 (merge branch master)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 13 2012 Adam Jackson <ajax(a)redhat.com> - 1.5.0.2-6.20120218svn3982
- Rebuild for glew 1.9.0
* Fri Jul 27 2012 Jon Ciesla <limburgher(a)gmail.com> - 1.5.0.2-5.20120218svn3982
- libGLEW rebuild.
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.5.0.2-4.20120218svn3982
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sun Jul 8 2012 Tim Fenn <tim.fenn(a)gmail.com> - 1.5.0.2-3.20120218svn3982
- remove web module to fix conflict with python-webpy, reported upstream
* Tue May 1 2012 Gökçen Eraslan <gokcen.eraslan(a)gmail.com> -
1.5.0.2-2.20120218svn3982
- Validate desktop file and add various mimetypes
* Sat Feb 18 2012 Tim Fenn <tim.fenn(a)gmail.com> - 1.5.0.2-1.20120218svn3982
- update to version 1.5.0.2 (SVN 3982), fixes bug related to loading maps
* Mon Feb 13 2012 Tim Fenn <tim.fenn(a)gmail.com> - 1.5.0.1-1.20120213svn3978
- update to version 1.5.0.1 (SVN 3978)
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.1-7.20110502svn3947
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Dec 6 2011 Adam Jackson <ajax(a)redhat.com> - 1.4.1-6.20110502svn3947
- Rebuild for new libpng
* Mon Jun 20 2011 ajax(a)redhat.com - 1.4.1-5.20110502svn3947
- Rebuild for new glew soname
* Tue Jun 7 2011 Tim Fenn <fenn(a)stanford.edu> - 1.4.1-4.20110502svn3947
- include missing data directory bits
- remove pre script
- remove pymol_path completely, add patch to init.py to set it properly
* Wed May 18 2011 Tim Fenn <fenn(a)stanford.edu> - 1.4.1-3.20110502svn3947
- remove old pymol_path directory if necessary using pre script
* Tue May 17 2011 Tim Fenn <fenn(a)stanford.edu> - 1.4.1-2.20110502svn3947
- fix broken pymol_path and missing shaders issue (BZ 705144)
* Mon May 2 2011 Tim Fenn <fenn(a)stanford.edu> - 1.4.1-1.20110502svn3947
- update to 1.4.1 (svn 3947)
* Sat Apr 2 2011 Tim Fenn <fenn(a)stanford.edu> - 1.4-1.20110402svn3938
- update to 1.4 (svn 3938)
- include python web module
- require glew
* Fri Mar 25 2011 Tim Fenn <fenn(a)stanford.edu> - 1.3-5.20100705svn3911
- add freeglut requires, bz690299
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-4.20100705svn3911
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-stevedore-0.8-1.el6 (FEDORA-EPEL-2013-0077)
Manage dynamic plugins for Python applications
--------------------------------------------------------------------------------
Update Information:
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #886552 - Review Request: python-stevedore - Manage dynamic plugins for Python
applications
https://bugzilla.redhat.com/show_bug.cgi?id=886552
--------------------------------------------------------------------------------
================================================================================
python-webob1.2-1.2.3-2.el6 (FEDORA-EPEL-2013-0079)
WSGI request and response object
--------------------------------------------------------------------------------
Update Information:
- Update to WebOb-1.2.3
Fixed python3 subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2013 Pádraig Brady <P(a)draigBrady.com> - 1.2.3-2
- Update to WebOb-1.2.3
* Thu Nov 29 2012 Ralph Bean <rbean(a)redhat.com> - 1.2.1-9
- Trying pyver again with py2ver and py3ver. Getting ugly.
* Thu Nov 29 2012 Ralph Bean <rbean(a)redhat.com> - 1.2.1-8
- Hardcode python3 version
* Thu Nov 29 2012 Ralph Bean <rbean(a)redhat.com> - 1.2.1-7
- Forced rebuild.
* Tue Oct 16 2012 Ralph Bean <rbean(a)redhat.com> - 1.2.1-6
- Use pyver macro to use the correct easy-install.
* Tue Oct 16 2012 Ralph Bean <rbean(a)redhat.com> - 1.2.1-5
- Forced rebuild.
--------------------------------------------------------------------------------
================================================================================
wordpress-3.5-3.el6 (FEDORA-EPEL-2013-0076)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Fix symlink to php-simplepie
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 2 2013 Remi Collet <rcollet(a)redhat.com> - 3.5-3
- fix links to system PHPMailer library
* Sun Dec 16 2012 Remi Collet <rcollet(a)redhat.com> - 3.5-2
- fix use of system Simplepie
- give access from local (httpd 2.4)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #891764 - php-simplepie 1.3.1 breaks wordpress
https://bugzilla.redhat.com/show_bug.cgi?id=891764
--------------------------------------------------------------------------------