[EPEL-devel] Fedora EPEL 6 updates-testing report

Tue Nov 25 20:11:28 UTC 2014

The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 947  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
 166  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26-1.el6
  37  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3434/pylint-1.3.1-1.el6,python-astroid-1.2.1-2.el6,python-logilab-common-0.62.1-2.el6
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3927/drupal7-ckeditor-1.16-2.el6
  12  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3962/oath-toolkit-2.0.2-5.el6
  12  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4005/nginx-1.0.15-11.el6
  12  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binutils-2.23.51.0.3-1.el6.1
  12  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3975/polarssl-1.3.2-3.el6
  10  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4057/moodle-2.5.9-1.el6
   6  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4151/lsyncd-2.1.4-4.el6.1.1
   6  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4144/nodejs-0.10.33-1.el6,libuv-0.10.29-1.el6
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4165/python-eyed3-0.7.4-5.el6
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4176/clamav-0.98.5-1.el6
   3  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4237/drupal7-7.34-1.el6
   3  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4192/wordpress-4.0.1-1.el6
   3  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4211/phpMyAdmin-4.0.10.6-1.el6
   3  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4233/drupal6-6.34-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4242/facter-1.6.18-8.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4243/asterisk-1.8.32.1-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2069/php-channel-phpseclib-1.3-1.el6,php-sabredav-Sabre_VObject-2.1.4-2.el6,php-sabredav-Sabre_HTTP-1.7.11-1.el6,php-sabredav-Sabre_DAVACL-1.7.9-1.el6,php-sabredav-Sabre_DAV-1.7.13-1.el6,php-sabredav-Sabre_CardDAV-1.7.9-2.el6,php-sabredav-Sabre_CalDAV-1.7.9-1.el6,php-irodsphp-3.3.0-0.4.beta1.el6,php-phpseclib-net-ssh2-0.3.9-1.el6,php-phpseclib-net-sftp-0.3.9-1.el6,php-phpseclib-crypt-twofish-0.3.9-2.el6,php-phpseclib-crypt-tripledes-0.3.9-2.el6,php-phpseclib-crypt-rsa-0.3.9-1.el6,php-phpseclib-crypt-rijndael-0.3.9-2.el6,php-phpseclib-crypt-rc4-0.3.9-2.el6,php-phpseclib-crypt-random-0.3.9-1.el6,php-phpseclib-crypt-hash-0.3.9-1.el6,php-phpseclib-crypt-des-0.3.9-2.el6,php-phpseclib-crypt-blowfish-0.3.9-2.el6,php-phpseclib-crypt-aes-0.3.9-1.el6,php-phpseclib-math-biginteger-0.3.9-1.el6,php-phpseclib-crypt-base-0.3.9-1.el6,owncloud-6.0.6-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4281/docker-io-1.3.2-2.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

    djvulibre-3.5.25.3-14.el6
    docker-io-1.3.2-2.el6
    fontdump-1.3.0-1.el6
    gparted-0.19.1-3.el6
    imagefactory-1.1.6-2.el6
    imagefactory-plugins-1.1.6-2.el6
    php-horde-Horde-Core-2.17.1-1.el6
    php-horde-Horde-Icalendar-2.0.10-1.el6
    php-horde-Horde-Imap-Client-2.25.5-1.el6
    php-horde-Horde-ListHeaders-1.2.0-1.el6
    php-horde-Horde-Mail-2.5.0-1.el6
    php-horde-Horde-Mime-2.5.2-1.el6
    php-horde-Horde-Smtp-1.7.0-1.el6
    php-theseer-autoload-1.16.2-1.el6
    php-theseer-directoryscanner-1.3.1-1.el6
    python-cltk-0.0.0.48a-1.el6
    python-pretend-1.0.8-2.el6
    python-tzlocal-1.1.2-4.el6

Details about builds:

================================================================================
 djvulibre-3.5.25.3-14.el6 (FEDORA-EPEL-2014-4270)
 DjVu viewers, encoders, and utilities
--------------------------------------------------------------------------------
Update Information:

Update to rawhide's version to make future updates easier.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Aug 16 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.5.25.3-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.5.25.3-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon May  5 2014 Peter Robinson <pbrobinson at fedoraproject.org> 3.5.25.3-12
- Remove autoconf requirement, it's not needed even for aarch64
  it's handled in the %configure macro
--------------------------------------------------------------------------------

================================================================================
 docker-io-1.3.2-2.el6 (FEDORA-EPEL-2014-4281)
 Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2014-6407, CVE-2014-6408
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 25 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.2-2
- Resolves: rhbz#1167642 - Update to upstream v1.3.2
- Resolves: rhbz#1167505, rhbz#1167508 - CVE-2014-6407
- Resolves: rhbz#1167506 - CVE-2014-6408
- use vendor dir for golang deps (fix their rpms soon)
- keep NVRs in sync with rest of fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1167505 - CVE-2014-6407 docker: symbolic and hardlink issues leading to privilege escalation
        https://bugzilla.redhat.com/show_bug.cgi?id=1167505
  [ 2 ] Bug #1167506 - CVE-2014-6408 docker: potential container escalation
        https://bugzilla.redhat.com/show_bug.cgi?id=1167506
--------------------------------------------------------------------------------

================================================================================
 fontdump-1.3.0-1.el6 (FEDORA-EPEL-2014-4263)
 Dump the CSS and different formats of fonts for Google Fonts
--------------------------------------------------------------------------------
Update Information:

Update to new upstream 1.3.0 release
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 25 2014 Parag Nemade <pnemade AT redhat DOT com> - 1.3.0-1
- Update to new upstream 1.3.0 release
--------------------------------------------------------------------------------

================================================================================
 gparted-0.19.1-3.el6 (FEDORA-EPEL-2014-4286)
 Gnome Partition Editor
--------------------------------------------------------------------------------
Update Information:

Update to 0.19.1

Major version update as discussed in bz#1133315

--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 24 2014 Mukundan Ragavan <nonamedotc at fedoraproject.org> - 0.19.1-3
- Fix spec file errors
* Tue Nov 18 2014 Mukundan Ragavan <nonamedotc at fedoraproject.org> - 0.19.1-2
- Added BR:intltool
* Mon Nov 17 2014 Mukundan Ragavan <nonamedotc at fedoraproject.org> - 0.19.1-1
- Update to latest upstream version
- Major version update discussed in bug#1133315
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1133315 - Update to latest GParted in EL5 and EL6
        https://bugzilla.redhat.com/show_bug.cgi?id=1133315
--------------------------------------------------------------------------------

================================================================================
 imagefactory-1.1.6-2.el6 (FEDORA-EPEL-2014-4272)
 System image generation tool
--------------------------------------------------------------------------------
Update Information:

Pull in upstream 1.1.6-2 for rpm-ostree related enhancements and fixes
Upstream Image Factory 1.1.6 release
Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins packages
--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 24 2014 Ian McLeod <imcleod at redhat.com> - 1.1.6-2
- Assorted fixes and features to enable rpm-ostree-toolbox integration
--------------------------------------------------------------------------------

================================================================================
 imagefactory-plugins-1.1.6-2.el6 (FEDORA-EPEL-2014-4272)
 Default plugins for the Image Factory system image generation tool
--------------------------------------------------------------------------------
Update Information:

Pull in upstream 1.1.6-2 for rpm-ostree related enhancements and fixes
Upstream Image Factory 1.1.6 release
Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins packages
--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 24 2014 Ian McLeod <imcleod at redhat.com> - 1.1.6-2
- Assorted fixes and features to enable rpm-ostree-toolbox integration
--------------------------------------------------------------------------------

================================================================================
 php-horde-Horde-Core-2.17.1-1.el6 (FEDORA-EPEL-2014-4248)
 Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:

Horde_Mail 2.5.0
* [mms] Added Horde_Mail_Rfc822_List#first() function.
* [mms] Add property to address object to indicate whether it is an EAI address.
* [mms] Transport driver now indicates whether it handles EAI data.
* [mms] Support validation of EAI addresses (RFC 6532).
* [mms] Add Horde_Mail_Mbox_Parse.

Horde_Mime 2.5.2
* [mms] Improved sanity checking when adding header data.

Horde_Mime 2.5.1
* [mms] Fix Horde_Mime_Headers_Deprecated#addReceivedHeader().
* [mms] Fix Horde_Mime_Headers_Deprecated#listHeadersExists().

Horde_Mime 2.5.0
* [mms] Horde_Mime_Headers has been rewritten.
* [mms] Correctly handle content parameters in a case-insensitive manner.
* [mms] Correctly pass the 'no_body' parameter to parts embedded in a message/rfc822 part in Horde_Mime_Part#parseMessage().
* [mms] Fix parsing a base MIME-compliant message with no Content-Type information.
* [mms] Horde_Mime::is8bit() no longer requires the charset parameter.
* [mms] Improved MIME encoding.
* [mms] Deprecated Horde_Mime::quotedPrintableEncode() and move to Horde_Mime_QuotedPrintable.
* [mms] Moved MIME ID manipulation/query methods out of Horde_Mime and into Horde_Mime_Id.
* [mms] Use string-based ABNF-based parser for scanning MIME content parameters instead of a regular expression (Bug #13587).
* [mms] Moved content parameter handling methods out of Horde_Mime and into Horde_Mime_ContentParam.
* [mms] Deprecated Horde_Mime::generateMessageId() and move to Horde_Mime_Headers.
* [mms] Deprecated Horde_Mime::uudecode() and move to new Horde_Mime_Uudecode class.
* [mms] Add Auto-Submitted header to outgoing MDN messages.

Horde_Smtp 1.7.0
* [mms] Added Horde_Smtp_Exception property indicating whether error is permanent or transient.
* [mms] Determine EAI and Body transport information by analyzing the message data, instead of requiring a parameter.
* [mms] Add support for ETRN extension (RFC 1985).
* [mms] Add support for BINARYMIME extension (RFC 3030).
* [mms] Add support for CHUNKING extension (RFC 3030).

Horde_ListHeaders 1.2.0
* [mms] Added Horde_ListHeaders#listHeadersExist().

Horde_Core 2.17.1
* [mjr] Fix broken MIME messages constructed from ActiveSync SMART replies to messages that contained a mulitpart/alternative part (Bug #13720).

Horde_Core 2.17.0
* [mjr] Fix issue that could cause incorrect truncation of ActiveSync emails.
* [mms] Added Horde_Core_Mime_Headers_Received.
* [mms] Added Horde_Registry#remoteHost().

Horde_Core 2.16.1:
* [mms] Fix file permissions of dynamically generated static CSS/JS files.
* [jan] Use correct user name as a fallback for identity full names with existing authusername hook.

Horde_Core 2.16.0:
* [mjr] Add the activesync_provisioning_check hook.
* [mjr] Fix determining multiplex settting for EAS notes (Bug #13637).
* [mjr] Fix adding new tasklists from EAS (Bug #13642).
* [jan] Update Czech translation (Michael Grafnetter).

Horde_Icalendar 2.0.10
* [mms] No longer call code that depends on Horde_Mime, which is not a required dependency.

Horde_Imap_Client 2.25.5
* [mjr] Fix broken IMAP cache behavior in the DB driver when unserialization of a cached object fails.

Horde_Imap_Client 2.25.4
* [mms] Better error handling when IMAP connection is prematurely disconnected.
* [mms] Fix regression in listMailboxes() for POP3 servers when 'flat' option is true.

Horde_Imap_Client 2.25.3
* [mms] Fix determining whether a command requires a continuation request, when the literal occurs within a nested list.
* [mms] Ensure we don't use the same authentication method multiple times when logging into IMAP server.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 25 2014 Remi Collet <remi at fedoraproject.org> - 2.17.1-1
- Update to 2.17.1
* Sun Nov 23 2014 Remi Collet <remi at fedoraproject.org> - 2.17.0-1
- Update to 2.17.0
- raise dependency on Horde_Mime >= 2.5.0
* Thu Nov  6 2014 Remi Collet <remi at fedoraproject.org> - 2.16.1-1
- Update to 2.16.1
- raise dependency on Horde_Translation >= 2.2.0
--------------------------------------------------------------------------------

================================================================================
 php-horde-Horde-Icalendar-2.0.10-1.el6 (FEDORA-EPEL-2014-4248)
 iCalendar API
--------------------------------------------------------------------------------
Update Information:

Horde_Mail 2.5.0
* [mms] Added Horde_Mail_Rfc822_List#first() function.
* [mms] Add property to address object to indicate whether it is an EAI address.
* [mms] Transport driver now indicates whether it handles EAI data.
* [mms] Support validation of EAI addresses (RFC 6532).
* [mms] Add Horde_Mail_Mbox_Parse.

Horde_Mime 2.5.2
* [mms] Improved sanity checking when adding header data.

Horde_Mime 2.5.1
* [mms] Fix Horde_Mime_Headers_Deprecated#addReceivedHeader().
* [mms] Fix Horde_Mime_Headers_Deprecated#listHeadersExists().

Horde_Mime 2.5.0
* [mms] Horde_Mime_Headers has been rewritten.
* [mms] Correctly handle content parameters in a case-insensitive manner.
* [mms] Correctly pass the 'no_body' parameter to parts embedded in a message/rfc822 part in Horde_Mime_Part#parseMessage().
* [mms] Fix parsing a base MIME-compliant message with no Content-Type information.
* [mms] Horde_Mime::is8bit() no longer requires the charset parameter.
* [mms] Improved MIME encoding.
* [mms] Deprecated Horde_Mime::quotedPrintableEncode() and move to Horde_Mime_QuotedPrintable.
* [mms] Moved MIME ID manipulation/query methods out of Horde_Mime and into Horde_Mime_Id.
* [mms] Use string-based ABNF-based parser for scanning MIME content parameters instead of a regular expression (Bug #13587).
* [mms] Moved content parameter handling methods out of Horde_Mime and into Horde_Mime_ContentParam.
* [mms] Deprecated Horde_Mime::generateMessageId() and move to Horde_Mime_Headers.
* [mms] Deprecated Horde_Mime::uudecode() and move to new Horde_Mime_Uudecode class.
* [mms] Add Auto-Submitted header to outgoing MDN messages.

Horde_Smtp 1.7.0
* [mms] Added Horde_Smtp_Exception property indicating whether error is permanent or transient.
* [mms] Determine EAI and Body transport information by analyzing the message data, instead of requiring a parameter.
* [mms] Add support for ETRN extension (RFC 1985).
* [mms] Add support for BINARYMIME extension (RFC 3030).
* [mms] Add support for CHUNKING extension (RFC 3030).

Horde_ListHeaders 1.2.0
* [mms] Added Horde_ListHeaders#listHeadersExist().