The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/bugzilla-3.4.11-1.el6
https://admin.fedoraproject.org/updates/rt3-3.8.10-2.el6.1
https://admin.fedoraproject.org/updates/clamav-0.97.2-5.el6
https://admin.fedoraproject.org/updates/drupal7-7.6-1.el6
https://admin.fedoraproject.org/updates/cgit-0.9.0.2-2.el6
https://admin.fedoraproject.org/updates/glpi-0.78.5-2.svn14966.el6
https://admin.fedoraproject.org/updates/phpMyAdmin-3.4.3.2-1.el6
https://admin.fedoraproject.org/updates/p7zip-9.20.1-2.el6
https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
389-admin-1.1.21-1.el6
askbot-0.7.14-1.el6
be-1.0.1-2.el6
clamav-0.97.2-5.el6
django-avatar-2.0a1-5.20110709git097ed8.el6
jemalloc-2.2.2-1.el6
orbited-0.7.10-6.el6
pam_afs_session-2.5-1.el6
python-confparser-1.0.1-5.el6
python-taboot-0.3.1-1.el6
spatialindex-1.6.1-3.el6
Details about builds:
================================================================================
389-admin-1.1.21-1.el6 (FEDORA-EPEL-2011-4031)
389 Administration Server (admin)
--------------------------------------------------------------------------------
Update Information:
bugfix
several tls/ssl and migration bug fixes
look for separate openldap ldif library
skip rebranding current brand - add support for different skins
The 1.1.17 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 2 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.21-1
- Bug 476925 - Admin Server: Do not allow 8-bit passwords for the admin user
* Tue Jul 5 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.20-1
- Bug 719056 - migrate-ds-admin.pl needs to update SELinux policy
- Bug 718285 - AdminServer should use "service" command instead of
start/stop/restart scripts
- Bug 718079 - Perl errors when running migrate-ds-admin.pl
- Bug 713000 - Migration stops if old admin server cannot be stopped
- added tests for the security cgi
- fix typo in NSS_Shutdown warning message
- better NSS error handling - reduce memory leaks
- Bug 710372 - Not able to open the Manage Certificate from DS-console
* Tue Jun 28 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.19-1
- look for separate openldap ldif library
* Tue Jun 21 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.18-1
- skip rebranding current brand
- support for skins
* Fri May 13 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.17-1
- 1.1.17
- support "in-place" upgrade and rebranding from Red Hat to 389
- many fixes for coverity issues
* Tue Mar 29 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.16-1
- 389-admin-1.1.16
- Bug 476925 - Admin Server: Do not allow 8-bit passwords for the admin user
- Bug 614690 - Don't use exec to call genrb
- Bug 158926 - Unable to install CA certificate when using
- hardware token ( LunaSA )
- Bug 211296 - Clean up all HTML pages (Admin Express, Repl Monitor, etc)
* Wed Feb 23 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.15-1
- 1.1.15 release - git tag 389-admin-1.1.15
- Bug 493424 - remove unneeded modules for admin server apache config
- Bug 618897 - Wrong permissions when creating instance from Console
- Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
- Bug 245278 - Changing to a password with a single quote does not work
- Bug 604881 - admin server log files have incorrect permissions/ownerships
- Bug 387981 - plain files can be chosen on the Restore Directory dialog
- Bug 668950 - Add posix group support to Console
- Bug 618858 - move start-ds-admin env file into main admin server config path
- Bug 616260 - libds-admin-serv linking fails due to unresolved link-time depe
ndencies
- start-ds-admin.in -- replaced "return 1" with "exit 1"
- Bug 151705 - Need to update Console Cipher Preferences with new ciphers
- Bug 470576 - Migration could do addition checks before commiting actions
* Wed Jan 5 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.14-1
- 1.1.14 release
- Bug 664671 - Admin server segfault when full SSL access (http+ldap+console)
required
- Bug 638511 - dirsrv-admin crashes at startup with SELinux enabled
* Mon Nov 29 2010 Rich Megginson <rmeggins(a)redhat.com> - 1.1.13-2
- fix Conflicts for selinux policy
* Tue Nov 23 2010 Rich Megginson <rmeggins(a)redhat.com> - 1.1.13-1
- This is the final 1.1.13 release
- git tag 389-admin-1.1.13
- Bug 656441 - Missing library path entry causes LD_PRELOAD error
- setup-ds-admin.pl -u exits with ServerAdminID and as_uid related error
* Thu Nov 18 2010 Nathan Kinder <nkinder(a)redhat.com> - 1.1.12-2
- This is the final 1.1.12 release
- git tag 389-admin-1.1.12
- Corrected conflict version for selinux-policy
* Fri Nov 12 2010 Nathan Kinder <nkinder(a)redhat.com> - 1.1.1.12-1
- This is the final 1.1.12 release
- git tag 389-admin-1.1.12
* Fri Nov 12 2010 Nathan Kinder <nkinder(a)redhat.com> - 1.1.1.12-1
- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy
* Tue Oct 26 2010 Rich Megginson <rmeggins(a)redhat.com> - 1.1.12-0.2.a2
- fix mozldap build breakage
* Tue Sep 28 2010 Rich Megginson <rmeggins(a)redhat.com> - 1.1.12-0.1.a1
- This is the 1.1.12 alpha 1 release - with openldap support
* Thu Aug 26 2010 Rich Megginson <rmeggins(a)redhat.com> - 1.1.11-1
- This is the final 1.1.11 release
* Wed Aug 4 2010 Rich Megginson <rmeggins(a)redhat.com> - 1.1.11-0.6.rc2
- 1.1.11.rc2 release
- git tag 389-admin-1.1.11.rc2
- Bug 594745 - Get rid of dirsrv_lib_t label
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #476925 - Admin Server: Do not allow 8-bit passwords for the admin user
https://bugzilla.redhat.com/show_bug.cgi?id=476925
[ 2 ] Bug #719056 - migrate-ds-admin.pl needs to update SELinux policy
https://bugzilla.redhat.com/show_bug.cgi?id=719056
[ 3 ] Bug #718285 - AdminServer should use "service" command instead of
start/stop/restart scripts
https://bugzilla.redhat.com/show_bug.cgi?id=718285
[ 4 ] Bug #718079 - Perl errors when running migrate-ds-admin.pl
https://bugzilla.redhat.com/show_bug.cgi?id=718079
[ 5 ] Bug #713000 - Migration stops if old admin server cannot be stopped
https://bugzilla.redhat.com/show_bug.cgi?id=713000
[ 6 ] Bug #710372 - Not able to open the Manage Certificate from DS-console
https://bugzilla.redhat.com/show_bug.cgi?id=710372
--------------------------------------------------------------------------------
================================================================================
askbot-0.7.14-1.el6 (FEDORA-EPEL-2011-4030)
Question and Answer forum
--------------------------------------------------------------------------------
Update Information:
Askbot is a question and answer forum
--------------------------------------------------------------------------------
================================================================================
be-1.0.1-2.el6 (FEDORA-EPEL-2011-4024)
Bugs Everywhere, a distributed bug tracker
--------------------------------------------------------------------------------
Update Information:
- Remove currently broken support for arch, hg and monotone
- Improve bzr module's version comparison
- Fix version string
- Partially enable tests
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 4 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.0.1-2
- Remove currently broken support for arch, hg and monotone
- Improve bzr module's version comparison
- Fix version string
- Partially enable tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #726637 - crash on 'be init' in mercurial repo
https://bugzilla.redhat.com/show_bug.cgi?id=726637
--------------------------------------------------------------------------------
================================================================================
clamav-0.97.2-5.el6 (FEDORA-EPEL-2011-4034)
Anti-virus software
--------------------------------------------------------------------------------
Update Information:
Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
- updated to 0.97.2
- Build-require xz
- Handle tar.xz SOURCE0 on RHEL < 6
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)
- include updated clamd-wrapper which get the PidFile setting from the service
configuration file.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 4 2011 Jan-Frode Myklebuust <janfrode(a)tanso.net> - 0.97.2-5
- Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
(bz#727894)
* Wed Jul 27 2011 Jan-Frode Myklebuust <janfrode(a)tanso.net> - 0.97.2-3
- include updated clamd-wrapper which get the PidFile setting from the
service configuration file.
- updated to 0.97.2
- Build-require xz
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)
* Wed Jun 29 2011 Nick Bebout <nb(a)fedoraproject.org> - 0.97-14
- Require /usr/sbin/sendmail instead of sendmail
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #727894 - Broken config for clamav-milter
https://bugzilla.redhat.com/show_bug.cgi?id=727894
[ 2 ] Bug #725695 - Clam AntiVirus: Off-by-one error by scanning message hashes
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=725695
--------------------------------------------------------------------------------
================================================================================
django-avatar-2.0a1-5.20110709git097ed8.el6 (FEDORA-EPEL-2011-4025)
A django module for handling user avatars
--------------------------------------------------------------------------------
Update Information:
requires python-imaging
A django module for handling user avatars
--------------------------------------------------------------------------------
================================================================================
jemalloc-2.2.2-1.el6 (FEDORA-EPEL-2011-4017)
General-purpose scalable concurrent malloc implementation
--------------------------------------------------------------------------------
Update Information:
**New upstream release**
From the upstream announcement:
jemalloc 2.2.2 is now available, with the following changes:
Bug fixes:
* Fix a build error for --disable-tcache.
* Fix assertions in arena_purge() (for real this time).
* Add the --with-private-namespace option. This is a workaround for symbol conflicts that
can inadvertently arise when using static libraries.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 1 2011 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 2.2.2-1
- New upstream release, closes #727103
- Updated no_pprof patch for 2.2.2
* Thu Mar 31 2011 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 2.2.1-1
- New upstream release
* Sun Mar 27 2011 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 2.2.0-1
- New upstream release
- Updated no_pprof patch for 2.2.0
--------------------------------------------------------------------------------
================================================================================
orbited-0.7.10-6.el6 (FEDORA-EPEL-2011-4023)
A browser(javascript)->tcp bridge
--------------------------------------------------------------------------------
Update Information:
Initial release of orbited for EL6
--------------------------------------------------------------------------------
================================================================================
pam_afs_session-2.5-1.el6 (FEDORA-EPEL-2011-4029)
AFS PAG and AFS tokens on login
--------------------------------------------------------------------------------
Update Information:
New upstream release. From upstream's changelog:
* Reset the SIGCHLD handler while spawning an external aklog program so that the
application SIGCHLD handler isn't invoked when aklog exits. This unfortunately still
means that there's a race condition that can cause children to be incorrectly handled
if they exit while aklog is running, if the application's SIGCHLD handler is required.
There is unfortunately no good general solution to this other than building against
Heimdal and using the libkafs interface to obtain tokens instead of an external program.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 2 2011 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 2.5-1
- New upstream release.
--------------------------------------------------------------------------------
================================================================================
python-confparser-1.0.1-5.el6 (FEDORA-EPEL-2011-4021)
A KISS python module to parse *nix config files
--------------------------------------------------------------------------------
Update Information:
updating python-confparser-1.0.1
new package
updated spec to fix EPEL5 compilation
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #725552 - Review Request: python-confparser - A KISS parse to *nix config
files
https://bugzilla.redhat.com/show_bug.cgi?id=725552
--------------------------------------------------------------------------------
================================================================================
python-taboot-0.3.1-1.el6 (FEDORA-EPEL-2011-4018)
Client utility for scripted multi-system administration over Func
--------------------------------------------------------------------------------
Update Information:
- Spelling & grammar fixes all around (Fixes #23) (tbielawa(a)redhat.com)
- Added -E flag to edit script before running (Fixes #18) (jason.detiberus(a)redhat.com)
- Added -p flag (acts like -n in that it checks syntax, but also prints resulting yaml to
be run onscreen) (Fixes #18) (jason.detiberus(a)redhat.com)
- Cleanup unnecessary documentation (tbielawa(a)redhat.com)
- Those are just bad ideas for a project with concurrency as a selling point (Remove user
input modules) (tbielawa(a)redhat.com)
- Simplify a little example in the docs (tbielawa(a)redhat.com)
- Added -C flag for Concurrency, Fixed an error when -L wasn't specified and added
CLIOutput when -L is specified and logging wasn't already set (Fixes #18)
(jason.detiberus(a)redhat.com)
- Added command line flag to add logging (Fixes #18) (jason.detiberus(a)redhat.com)
- Add python utility to generate a graphviz dot file of the class inheritance graph of the
python source codes. (tbielawa(a)redhat.com)
- Add conditional Requires on python-argparse. Update README and release notes.
(tbielawa(a)redhat.com)
- Exit/continue the main load-loop sooner so we can validate YAML scripts and not blow up
when not ran on a minion/overlord (like during testing...) (tbielawa(a)redhat.com)
- Switched argument parsing to use argparse (jason.detiberus(a)redhat.com)
- Fix nagios scheduling causing log-to-file to fail. (Fixes #24) (tbielawa(a)redhat.com)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 4 2011 Tim Bielawa <tbielawa(a)redhat.com> 0.3.1-1
- Spelling & grammar fixes all around (Fixes #23) (tbielawa(a)redhat.com)
- Added -E flag to edit script before running (Fixes #18)
(jason.detiberus(a)redhat.com)
- Added -p flag (acts like -n in that it checks syntax, but also prints
resulting yaml to be run onscreen) (Fixes #18) (jason.detiberus(a)redhat.com)
- Cleanup unnecessary documentation (tbielawa(a)redhat.com)
- Those are just bad ideas for a project with concurrency as a selling point
(Remove user input modules) (tbielawa(a)redhat.com)
- Simplify a little example in the docs (tbielawa(a)redhat.com)
- Added -C flag for Concurrency, Fixed an error when -L wasn't specified and
added CLIOutput when -L is specified and logging wasn't already set
(Fixes #18) (jason.detiberus(a)redhat.com)
- Added command line flag to add logging (Fixes #18) (jason.detiberus(a)redhat.com)
- Add python utility to generate a graphviz dot file of the class inheritance
graph of the python source codes. (tbielawa(a)redhat.com)
- Add conditional Requires on python-argparse. Update README and release notes.
(tbielawa(a)redhat.com)
- Exit/continue the main load-loop sooner so we can validate YAML scripts and
not blow up when not ran on a minion/overlord (like during testing...)
(tbielawa(a)redhat.com)
- Switched argument parsing to use argparse (jason.detiberus(a)redhat.com)
- Fix nagios scheduling causing log-to-file to fail. (Fixes #24)
(tbielawa(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
spatialindex-1.6.1-3.el6 (FEDORA-EPEL-2011-4022)
Spatial index library
--------------------------------------------------------------------------------
Update Information:
New package to Fedora
Spatialindex provides a general framework for developing spatial indices. Currently it
defines generic interfaces, provides simple main memory and disk based storage managers
and a robust implementation of an R*-tree, an MVR-tree and a TPR-tree.
See for details:
http://trac.gispython.org/spatialindex
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #722790 - Review Request: spatialindex - Spatial index library
https://bugzilla.redhat.com/show_bug.cgi?id=722790
--------------------------------------------------------------------------------