The following Fedora EPEL 6 Security updates need testing:
Age URL
703
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
132
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-...
50
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6...
45
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0483/boinc-clien...
34
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolki...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0845/asterisk-1....
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0846/mediawiki11...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0852/lighttpd-1....
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0888/v8-3.14.5.1...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0889/moodle-2.4....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0938/seamonkey-2...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0951/check-mk-1....
The following builds have been pushed to Fedora EPEL 6 updates-testing
check-mk-1.2.4-1.el6
cmockery2-1.3.7-1.el6
fedmsg-0.7.7-1.el6
libxc-2.1.0-2.el6
python-argcomplete-0.7.0-1.el6
python-fedmsg-meta-fedora-infrastructure-0.2.11-1.el6
python-recaptcha-client-1.0.6-4.el6
tcpreplay-4.0.4-1.el6
x2goserver-4.0.1.13-4.el6
Details about builds:
================================================================================
check-mk-1.2.4-1.el6 (FEDORA-EPEL-2014-0951)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
New upstream release, fixes CVEs:
- CVE-2014-2329
- CVE-2014-2330
- CVE-2014-2331
- CVE-2014-2332
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 25 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4-1
- New upstream release. Fixes the following CVEs:
- CVE-2014-2329
- CVE-2014-2330
- CVE-2014-2331
- CVE-2014-2332
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1080303 - CVE-2014-2329 CVE-2014-2330 CVE-2014-2331 CVE-2014-2332 check-mk:
multiple flaws fixed in versions 1.2.2p3 and 1.2.3i5
https://bugzilla.redhat.com/show_bug.cgi?id=1080303
--------------------------------------------------------------------------------
================================================================================
cmockery2-1.3.7-1.el6 (FEDORA-EPEL-2014-0959)
Lightweight C unit testing framework
--------------------------------------------------------------------------------
Update Information:
Fixed memory check functions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1079647 - Cmockery2 does not pass tests in el5-ppc arch
https://bugzilla.redhat.com/show_bug.cgi?id=1079647
--------------------------------------------------------------------------------
================================================================================
fedmsg-0.7.7-1.el6 (FEDORA-EPEL-2014-0953)
Tools for Fedora Infrastructure real-time messaging
--------------------------------------------------------------------------------
Update Information:
Various enhancements and bugfixes.
Fix user warning on import. New options to fedmsg-config.
Latest upstream. Seamlessly switch between gpg and x509 validation. Messages carry a new
'crypto' field indicating their signature type. Fixes to fedmsg-tail.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 25 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.7-1
- fedmsg-config and fedmsg-tail now share the --query option.
- Added a deployment doc.
- New fedmsg.crypto.validate_signed_by convenience function.
- Username is now automatically appended to the fedmsg-logger meta subtitle.
- A UserWarning is now issued if no fedmsg.meta plugins are found.
- Fixed the fedmsg.meta __name__ regex.
- Removed TCP_KEEPALIVE debug statements.
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.6-2
- Copy test config into the test directory before building.
* Fri Feb 21 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.6-1
- Latest upstream.
- New option to fedmsg-config to query for particular values.
- Avoid pkg_resources warning.
* Sun Feb 9 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.5-1
- Latest upstream.
- Gource tail is removed.
- Fixes to fedmsg-tail.
- Updated documentation.
- Messages now carry a 'crypto' field indicating their sig type.
- Seamless switching between x509 and gpg crypto validation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1066625 - UserWarning when importing fedmsg.meta
https://bugzilla.redhat.com/show_bug.cgi?id=1066625
--------------------------------------------------------------------------------
================================================================================
libxc-2.1.0-2.el6 (FEDORA-EPEL-2014-0919)
Library of exchange and correlation functionals to be used in DFT codes
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.0, bringing much more functionals. Enable single precision routines as
well.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 24 2014 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 2.1.0-2
- Re-enable builds on ppc and ppc64 on EPEL.
* Fri Mar 21 2014 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 2.1.0-1
- Enable single precision routines as well.
- Update to 2.1.0.
--------------------------------------------------------------------------------
================================================================================
python-argcomplete-0.7.0-1.el6 (FEDORA-EPEL-2014-0958)
Bash tab completion for argparse
--------------------------------------------------------------------------------
Update Information:
Updating package to 0.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 24 2014 - Dale Macartney <dbmacartney(a)fedoraproject.org> 0.7.0-1
- Updating package to 0.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055302 - python-argcomplete-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1055302
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.2.11-1.el6 (FEDORA-EPEL-2014-0957)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
New processors for ftpsync and github2fedmsg.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 25 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.11-1
- New github processor.
- New ftpsync processor.
- Require latest fedmsg to manage conflict between git and github procs.
--------------------------------------------------------------------------------
================================================================================
python-recaptcha-client-1.0.6-4.el6 (FEDORA-EPEL-2014-0948)
Python module for reCAPTCHA and reCAPTCHA Mailhide
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.6
Fixes URLs that were pointing to their old, pre-Google-acquisition locations.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 24 2014 Stephen Gallagher <sgallagh(a)redhat.com> 1.0.6-4
- New upstream release 1.0.6
- Enhancements to setup.py build-system
- Drop Fedora-specific build hacks
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1079681 - update python-recaptcha-client in EPEL to 1.0.6
https://bugzilla.redhat.com/show_bug.cgi?id=1079681
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.0.4-1.el6 (FEDORA-EPEL-2014-0955)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
Fixes include:
- Number of packets inaccurate when using --netmap method (#76)
- Unexpected packet counts with --loop and --cachefile enabled (#75)
- Improved error messages when interface is a file (#74)
- Missing interfaces with --listnics option (#67)
- Compile issue with netmap v10 and debugging (#66)
- Bad values with --stats and -t options (#65)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 25 2014 Bojan Smojver <bojan@rexursive com> - 4.0.4-1
- bump up to 4.0.4
--------------------------------------------------------------------------------
================================================================================
x2goserver-4.0.1.13-4.el6 (FEDORA-EPEL-2014-0949)
X2Go Server
--------------------------------------------------------------------------------
Update Information:
Create /tmp/.X11-unix with correct SELinux context.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 24 2014 Orion Poplawski <orion(a)cora.nwra.com> - 4.0.1.13-4
- Create /tmp/.X11-unix with correct SELinux context (bug #1079772)
* Wed Feb 5 2014 Orion Poplawski <orion(a)cora.nwra.com> - 4.0.1.13-3
- Fix x2gocleansession.service unit file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1079772 - x2gocleansessions creates /tmp/.X11-unix with wrong SELinux
context
https://bugzilla.redhat.com/show_bug.cgi?id=1079772
--------------------------------------------------------------------------------