epel-devel August 2013

epel-devel@lists.fedoraproject.org

19 participants
53 discussions

EPEL pypy 2.1; sandbox, with shared library
by Guo, Dan (WorldQuant) 28 Aug '13

28 Aug '13

Greeting, I just found out this list and subscribe to it. my subscription is new. Pypy2.1 is now released. I see repo has pypy 2.0.2 as latest. Can I request this is updated for 2.1? also, I wonder if someone has made shared library for pypy sandboxing, for 2.0.2. when I looked at it, it does not seem it has. As I am new, please give me pointers and tell me how this list works. If my email is off mark, be frank and let me know. Thank you very much, Dan ################################################################################### The information contained in this communication is confidential, may be subject to legal privilege, and is intended only for the individual named. If you are not the named addressee, please notify the sender immediately and delete this email from your system. The views expressed in this email are the views of the sender only. Outgoing and incoming electronic communications to this address are electronically archived and subject to review and/or disclosure to someone other than the recipient. ###################################################################################

2 2

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 27 Aug '13

27 Aug '13

The following Fedora EPEL 5 Security updates need testing: Age URL 492 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 387 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11174/libzrtpcpp-3… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11165/cacti-0.8.8b… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11144/chrony-1.25-… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61-2… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11300/drupal7-them… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11336/lighttpd-1.4… The following builds have been pushed to Fedora EPEL 5 updates-testing web-assets-4-3.el5 Details about builds: ================================================================================ web-assets-4-3.el5 (FEDORA-EPEL-2013-11353) A simple framework for bits pushed to browsers -------------------------------------------------------------------------------- Update Information: This update introduces the base filesystem layout for Web Assets to Fedora EPEL 5. The proposed shared http path for Web Assets is *not* implemented in this update. This will enable packagers to unbundle libraries from their packages and utilize the new standard directories for doing so as they desire. Use of the functionality provided by this package is entirely optional. No coordinated unbundling effort will take place in EPEL at this time. For more information, see: https://fedoraproject.org/wiki/Changes/Web_Assets -------------------------------------------------------------------------------- References: [ 1 ] Bug #997678 - Review Request: web-assets - A simple framework for bits pushed to browsers https://bugzilla.redhat.com/show_bug.cgi?id=997678 --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 27 Aug '13

27 Aug '13

The following Fedora EPEL 6 Security updates need testing: Age URL 492 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11175/php-symfony2… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11183/php-symfony2… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11187/libzrtpcpp-3… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11179/libtommath-0… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-3.… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11250/Django14-1.4… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11245/python-virtu… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11194/cacti-0.8.8b… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11222/seamonkey-2.… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11195/chrony-1.25-… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11257/drupal7-enti… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61-2… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11291/ansible-1.2.… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11301/drupal7-them… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11327/php-pear-Aut… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11330/ngircd-20.3-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11311/roundcubemai… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11339/lighttpd-1.4… The following builds have been pushed to Fedora EPEL 6 updates-testing diskimage-builder-0.0.1-5.el6 glite-jobid-api-java-1.3.6-1.el6 glite-lbjp-common-log-1.3.8-2.el6 libuv-0.10.14-1.el6 metslib-0.5.3-4.el6 msgpack-0.5.7-5.el6 mysql-connector-python-1.0.12-1.el6 nodejs-0.10.17-1.el6 nodejs-cli-0.4.5-1.el6 nodejs-commander-1.2.0-4.el6 nodejs-connect-2.8.5-1.el6 nodejs-express-3.3.5-1.el6 nodejs-form-data-0.1.1-1.el6 nodejs-fresh-0.2.0-1.el6 nodejs-mime-1.2.11-1.el6 nodejs-node-uuid-1.4.1-1.el6 nodejs-sax-0.5.5-1.el6 nodejs-send-0.1.4-1.el6 nodejs-uid2-0.0.3-3.el6 python-django-savanna-0.2-2.el6 python-fedbadges-0.3.0-1.el6 python-openopt-0.5092-1.el6 python-setproctitle-1.1.7-2.el6 python-tahrir-0.4.0-1.el6 python-tahrir-api-0.3.0-1.el6 web-assets-4-3.el6 Details about builds: ================================================================================ diskimage-builder-0.0.1-5.el6 (FEDORA-EPEL-2013-11364) Image building tools for OpenStack -------------------------------------------------------------------------------- Update Information: New diskimage-builder package -------------------------------------------------------------------------------- References: [ 1 ] Bug #990279 - Review Request: diskimage-builder - Image building tools for OpenStack https://bugzilla.redhat.com/show_bug.cgi?id=990279 -------------------------------------------------------------------------------- ================================================================================ glite-jobid-api-java-1.3.6-1.el6 (FEDORA-EPEL-2013-11345) JAVA implementation of handling gLite jobid -------------------------------------------------------------------------------- Update Information: JAVA implementation of library handling gLite jobid. -------------------------------------------------------------------------------- References: [ 1 ] Bug #965848 - Review Request: glite-jobid-api-java - Java library handling gLite jobid https://bugzilla.redhat.com/show_bug.cgi?id=965848 -------------------------------------------------------------------------------- ================================================================================ glite-lbjp-common-log-1.3.8-2.el6 (FEDORA-EPEL-2013-11356) Definitions of glite common logging formats for LB and JP -------------------------------------------------------------------------------- Update Information: Definitions of glite common logging formats for LB and JP. -------------------------------------------------------------------------------- References: [ 1 ] Bug #885703 - Review Request: glite-lbjp-common-log - gLite common logging formats for L&B and JP https://bugzilla.redhat.com/show_bug.cgi?id=885703 -------------------------------------------------------------------------------- ================================================================================ libuv-0.10.14-1.el6 (FEDORA-EPEL-2013-11352) Platform layer for node.js -------------------------------------------------------------------------------- Update Information: 2013.08.21, node.js Version 0.10.17 (Stable) * http_parser: Do not accept PUN/GEM methods as PUT/GET (Chris Dickinson) * tls: fix assertion when ssl is destroyed at read (Fedor Indutny) * stream: Throw on 'error' if listeners removed (isaacs) * dgram: fix assertion on bad send() arguments (Ben Noordhuis) * readline: pause stdin before turning off terminal raw mode (Daniel Chatfield) 2013.08.22, libuv Version 0.10.14 (Stable) * unix: retry waitpid() on EINTR (Ben Noordhuis) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 27 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 1:0.10.14-1 - new upstream release 0.10.14 https://github.com/joyent/libuv/blob/v0.10.14/ChangeLog -------------------------------------------------------------------------------- ================================================================================ metslib-0.5.3-4.el6 (FEDORA-EPEL-2013-11350) Metaheuristic modeling framework and optimization toolkit in modern C++ -------------------------------------------------------------------------------- Update Information: Initial import of metslib: a metaheuristic modeling framework and optimization toolkit in modern C++ -------------------------------------------------------------------------------- ================================================================================ msgpack-0.5.7-5.el6 (FEDORA-EPEL-2013-11355) Binary-based efficient object serialization library -------------------------------------------------------------------------------- Update Information: apply upstream fix for big endians -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 27 2013 Dan Horák <dan[at]danny.cz> - 0.5.7-5 - apply upstream fix for big endians - drop ExcludeArch -------------------------------------------------------------------------------- ================================================================================ mysql-connector-python-1.0.12-1.el6 (FEDORA-EPEL-2013-11361) MySQL Connector for Python 2 -------------------------------------------------------------------------------- Update Information: 1.0.12 (2013-07-24) * The fetchall() methods for buffered cursors were returning all rows after fetchone() or fetchmany() were used. fetchall() now correctly returns all or remaining, just like the nonbuffered cursors. (Bug #16662920) * Following fetchone() or fetchmany(), the result returned by fetchall() was missing one row. (Bug #17041412) * LOAD DATA LOCAL INFILE failed for files approximately 14MB or larger. (Bug #17002411) * Python 2.6 and 2.7 raised a UnicodeDecodeError when unicode_literals was used and a database name contained nonlatin Unicode characters. (Bug #16655208) 1.0.11 (2013-06-26) * Added Distutils commands for creating Debian packages (WL#7080) * Updated error codes and message using MySQL 5.7.1 (BUG#16896702) -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Remi Collet <remi(a)fedoraproject.org> - 1.0.12-1 - version 1.0.12 GA -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.17-1.el6 (FEDORA-EPEL-2013-11352) JavaScript runtime -------------------------------------------------------------------------------- Update Information: 2013.08.21, node.js Version 0.10.17 (Stable) * http_parser: Do not accept PUN/GEM methods as PUT/GET (Chris Dickinson) * tls: fix assertion when ssl is destroyed at read (Fedor Indutny) * stream: Throw on 'error' if listeners removed (isaacs) * dgram: fix assertion on bad send() arguments (Ben Noordhuis) * readline: pause stdin before turning off terminal raw mode (Daniel Chatfield) 2013.08.22, libuv Version 0.10.14 (Stable) * unix: retry waitpid() on EINTR (Ben Noordhuis) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 27 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.17-1 - new upstream release 0.10.17 http://blog.nodejs.org/2013/08/21/node-v0-10-17-stable/ * Sat Aug 17 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.16-1 - new upstream release 0.10.16 http://blog.nodejs.org/2013/08/16/node-v0-10-16-stable/ - add v8-devel to -devel Requires - restrict -devel Requires to the same architecture * Wed Aug 14 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.14-3 - fix typo in _isa macro in v8 Requires -------------------------------------------------------------------------------- ================================================================================ nodejs-cli-0.4.5-1.el6 (FEDORA-EPEL-2013-11360) Node.js module for rapidly building command line apps -------------------------------------------------------------------------------- Update Information: Update from 0.4.4 to 0.4.5, which is a minor bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.5-1 - update to upstream release 0.4.5 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.4.4.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ nodejs-commander-1.2.0-4.el6 (FEDORA-EPEL-2013-11354) Node.js command-line interfaces made easy -------------------------------------------------------------------------------- Update Information: Update nodejs-connect from 2.7.10 to 2.8.5. Upstream changelog: https://raw.github.com/senchalabs/connect/2.8.5/History.md Update nodejs-express from 3.2.5 to 3.3.5. Upstream changelog: https://raw.github.com/visionmedia/express/3.3.5/History.md Update nodejs-fresh from 0.1.0 to 0.2.0. Upstream commits: https://github.com/visionmedia/node-fresh/commits/0.2.0 Update nodejs-send from 0.1.0 to 0.1.4. Upstream changelog: https://raw.github.com/visionmedia/send/0.1.4/History.md Update nodejs-commander from 1.1.1 to 1.2.0. Upstream changelog: https://raw.github.com/visionmedia/commander.js/2.0.0/History.md -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.2.0-4 - rebuild to enable tests * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sat Jul 6 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.2.0-2 - fix compatible arches for f18/el6 * Fri Jul 5 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.2.0-1 - restrict to compatible arches - update to upstream release 1.2.0 -------------------------------------------------------------------------------- ================================================================================ nodejs-connect-2.8.5-1.el6 (FEDORA-EPEL-2013-11354) High performance middleware framework for Node.js -------------------------------------------------------------------------------- Update Information: Update nodejs-connect from 2.7.10 to 2.8.5. Upstream changelog: https://raw.github.com/senchalabs/connect/2.8.5/History.md Update nodejs-express from 3.2.5 to 3.3.5. Upstream changelog: https://raw.github.com/visionmedia/express/3.3.5/History.md Update nodejs-fresh from 0.1.0 to 0.2.0. Upstream commits: https://github.com/visionmedia/node-fresh/commits/0.2.0 Update nodejs-send from 0.1.0 to 0.1.4. Upstream changelog: https://raw.github.com/visionmedia/send/0.1.4/History.md Update nodejs-commander from 1.1.1 to 1.2.0. Upstream changelog: https://raw.github.com/visionmedia/commander.js/2.0.0/History.md -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 2.8.5-1 - update to upstream release 2.8.5 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.7.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ nodejs-express-3.3.5-1.el6 (FEDORA-EPEL-2013-11354) Sinatra inspired web development framework for Node.js -------------------------------------------------------------------------------- Update Information: Update nodejs-connect from 2.7.10 to 2.8.5. Upstream changelog: https://raw.github.com/senchalabs/connect/2.8.5/History.md Update nodejs-express from 3.2.5 to 3.3.5. Upstream changelog: https://raw.github.com/visionmedia/express/3.3.5/History.md Update nodejs-fresh from 0.1.0 to 0.2.0. Upstream commits: https://github.com/visionmedia/node-fresh/commits/0.2.0 Update nodejs-send from 0.1.0 to 0.1.4. Upstream changelog: https://raw.github.com/visionmedia/send/0.1.4/History.md Update nodejs-commander from 1.1.1 to 1.2.0. Upstream changelog: https://raw.github.com/visionmedia/commander.js/2.0.0/History.md -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 3.3.5-1 - update to upstream release 3.3.5 - add ExclusiveArch logic * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Jul 5 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 3.3.3-1 - update to upstream release 3.3.3 - restrict to compatible arches -------------------------------------------------------------------------------- ================================================================================ nodejs-form-data-0.1.1-1.el6 (FEDORA-EPEL-2013-11348) A module to create readable "multipart/form-data" streams -------------------------------------------------------------------------------- Update Information: Update nodejs-form-data from 0.1.0 to 0.1.1, which is a minor bugfix release. Update nodejs-mime from 1.2.10 to 1.2.11, which is a minor bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.1.1-1 - update to upstream release 0.1.1 - add ExclusiveArch logic * Tue Jul 30 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.1.0-1 - new upstream release 0.1.0 -------------------------------------------------------------------------------- ================================================================================ nodejs-fresh-0.2.0-1.el6 (FEDORA-EPEL-2013-11354) HTTP response freshness testing for Node.js -------------------------------------------------------------------------------- Update Information: Update nodejs-connect from 2.7.10 to 2.8.5. Upstream changelog: https://raw.github.com/senchalabs/connect/2.8.5/History.md Update nodejs-express from 3.2.5 to 3.3.5. Upstream changelog: https://raw.github.com/visionmedia/express/3.3.5/History.md Update nodejs-fresh from 0.1.0 to 0.2.0. Upstream commits: https://github.com/visionmedia/node-fresh/commits/0.2.0 Update nodejs-send from 0.1.0 to 0.1.4. Upstream changelog: https://raw.github.com/visionmedia/send/0.1.4/History.md Update nodejs-commander from 1.1.1 to 1.2.0. Upstream changelog: https://raw.github.com/visionmedia/commander.js/2.0.0/History.md -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.2.0-1 - update to upstream release 0.2.0 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.1.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ nodejs-mime-1.2.11-1.el6 (FEDORA-EPEL-2013-11348) A comprehensive library for mime-type mapping -------------------------------------------------------------------------------- Update Information: Update nodejs-form-data from 0.1.0 to 0.1.1, which is a minor bugfix release. Update nodejs-mime from 1.2.10 to 1.2.11, which is a minor bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.2.11-1 - update to upstream release 1.2.11 - add ExclusiveArch logic * Tue Jul 30 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 1.2.10-1 - new upstream release 1.2.10 -------------------------------------------------------------------------------- ================================================================================ nodejs-node-uuid-1.4.1-1.el6 (FEDORA-EPEL-2013-11362) Simple and fast generation of RFC4122 (v1 and v4) UUIDs for Node.js -------------------------------------------------------------------------------- Update Information: Update from 1.4.0 to 1.4.1, which is a minor bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.4.1-1 - update to upstream release 1.4.1 -------------------------------------------------------------------------------- ================================================================================ nodejs-sax-0.5.5-1.el6 (FEDORA-EPEL-2013-11363) A streaming SAX-style XML parser in JavaScript for Node.js -------------------------------------------------------------------------------- Update Information: Update from 0.5.4 to 0.5.5, which is a minor bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.5.5-1 - update to upstream release 0.5.5 -------------------------------------------------------------------------------- ================================================================================ nodejs-send-0.1.4-1.el6 (FEDORA-EPEL-2013-11354) Better streaming static file server with Range and conditional-GET support -------------------------------------------------------------------------------- Update Information: Update nodejs-connect from 2.7.10 to 2.8.5. Upstream changelog: https://raw.github.com/senchalabs/connect/2.8.5/History.md Update nodejs-express from 3.2.5 to 3.3.5. Upstream changelog: https://raw.github.com/visionmedia/express/3.3.5/History.md Update nodejs-fresh from 0.1.0 to 0.2.0. Upstream commits: https://github.com/visionmedia/node-fresh/commits/0.2.0 Update nodejs-send from 0.1.0 to 0.1.4. Upstream changelog: https://raw.github.com/visionmedia/send/0.1.4/History.md Update nodejs-commander from 1.1.1 to 1.2.0. Upstream changelog: https://raw.github.com/visionmedia/commander.js/2.0.0/History.md -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.1.4-1 - update to upstream release 0.1.4 - add ExclusiveArch logic * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Jul 5 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.1.2-1 - update to upstream release 0.1.2 - restrict to compatible arches -------------------------------------------------------------------------------- ================================================================================ nodejs-uid2-0.0.3-3.el6 (FEDORA-EPEL-2013-11358) Node.js module to generate strong unique IDs -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #998245 - Review Request: nodejs-uid2 - Node.js module to generate strong unique IDs https://bugzilla.redhat.com/show_bug.cgi?id=998245 -------------------------------------------------------------------------------- ================================================================================ python-django-savanna-0.2-2.el6 (FEDORA-EPEL-2013-11351) Savanna project dashboard -------------------------------------------------------------------------------- Update Information: Include runtime templates -------------------------------------------------------------------------------- ================================================================================ python-fedbadges-0.3.0-1.el6 (FEDORA-EPEL-2013-11346) fedmsg consumer for awarding open badges -------------------------------------------------------------------------------- Update Information: Cached rank in the db. New notification callback hook.. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Latest upstream. - Make use of enhanced tahrir-api for fedmsg and rank caching. - Allow more complex datanommer query "operations". -------------------------------------------------------------------------------- ================================================================================ python-openopt-0.5092-1.el6 (FEDORA-EPEL-2013-11357) A python module for numerical optimization -------------------------------------------------------------------------------- Update Information: First release of python-openopt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1001569 - Review Request: python-openopt - A python module for numerical optimization https://bugzilla.redhat.com/show_bug.cgi?id=1001569 -------------------------------------------------------------------------------- ================================================================================ python-setproctitle-1.1.7-2.el6 (FEDORA-EPEL-2013-11347) Python module to customize a process title -------------------------------------------------------------------------------- Update Information: First EPEL6 release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1001562 - RFE - Please build python-setproctitle for EPEL6. https://bugzilla.redhat.com/show_bug.cgi?id=1001562 -------------------------------------------------------------------------------- ================================================================================ python-tahrir-0.4.0-1.el6 (FEDORA-EPEL-2013-11344) A pyramid app for issuing your own Open Badges -------------------------------------------------------------------------------- Update Information: Cached rank in the db. New notification callback hook. RSS feeds. CSS and template fixes. JSON API. Limit relative leaderboard. Emit fedmsg messages. Misc bugfixes. Users can opt out. Websockets on the frontpage. More facelifting. More cosmetic surgery. Facelift marathon. Massive facelift. Use forward compat sqlalchemy. Reorganize avatars around openid. Improvements to the explore view. CSS and JSON API enhancements. Lots of bugfixes and enhancements. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.0-1 - Latest upstream. - Take advantage of enhanced tahrir-api for fedmsg and rank caching. - Publish fedmsg messages on rank change. - More consitent user links. - Css fixes and style updates. - RSS feeds per-user and per-badge. - Temporarily revert the sqlalchemy version requirement. * Fri Aug 16 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.5-3 - Copy the fedora-sitedocs contents in /usr/share/ * Thu Aug 15 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.5-2 - Add requires on python-openid as per https://github.com/fedora-infra/tahrir/issues/154 * Thu Aug 15 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.5-1 - Bugfixes to the about page. - CSS fixes to the user page. * Thu Aug 15 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.4-2 - Update sqlalchemy version in awk statement. * Thu Aug 15 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.4-1 - Modern sqlalchemy requirement. - Social media links. - First try at FOAF metadata on user pages. - Added configurable FAQ and footer. - New default avatar - Load JS and images over https when appropriate. - Fix some fatal errors on the leaderboard json api. * Tue Aug 13 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.3-1 - Optimizations to the leaderboard. - Bugfix to 404s for user. - Ability to edit your profile. - Default issuer in the badge builder. * Sun Aug 11 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.2-1 - Enhancements to the "explore" view. * Sun Aug 11 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.1-1 - Some more css and presentation facelifting. - Make leaderboard respect opt-out https://github.com/fedora-infra/tahrir/pull/146 - Consistent user links https://github.com/fedora-infra/tahrir/pull/144 - Fix badge links https://github.com/fedora-infra/tahrir/pull/145 - JSON api for leaderboard https://github.com/fedora-infra/tahrir/pull/147 - User-specific JSON api endpoint https://github.com/fedora-infra/tahrir/pull/149 * Fri Aug 9 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Add JSON API from Ricky Elrod. - Some CSS fixups. * Mon Aug 5 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.9-1 - Limit the relative leaderboard to only 5 people instead of 10. - Emit fedmsg messages when invitations are claimed. * Thu Aug 1 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.8-1 - Fix a login user-creation bug. - Fix trailing comma on tags. - Fix trailing slash on emails. * Thu Aug 1 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.7-1 - Reorganize avatars around openid identifiers for ease-of-use. * Tue Jul 30 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.6-1 - More facelifting. - Ability for users to opt-out. * Thu Jul 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.5-3 - Remove version constraint on python-moksha-wsgi. It is behaving oddly. * Thu Jul 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.5-2 - python-dateutil is singular, not plural. * Thu Jul 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.5-1 - More facelifting. - Websocket updates for the frontpage. * Tue Jul 16 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.3-2 - Added requirement on python-docutils. * Tue Jul 16 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.3-1 - Latest upstream with more botox. * Thu Jul 11 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.2-2 - Added requirement for python-dogpile-cache * Wed Jul 10 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.2-1 - Latest upstream with more cosmetic surgery. * Wed Jul 3 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.1-1 - Remove old patch (shipped with upstream now). - More facelift stuff in progress. * Mon Jul 1 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.0-2 - Add requirement on python-qrcode. * Wed Jun 26 2013 Ralph Bean <rbean(a)redhat.com> - 0.2.0-1 - Massive facelift. * Thu Jun 13 2013 Ralph Bean <rbean(a)redhat.com> - 0.1.9-3 - Conditionalize sqlalchemy forward compat package for epel6. -------------------------------------------------------------------------------- ================================================================================ python-tahrir-api-0.3.0-1.el6 (FEDORA-EPEL-2013-11359) An API for interacting with the Tahrir database -------------------------------------------------------------------------------- Update Information: Cached rank in the db. New notification callback hook.. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Latest upstream. - Allow a notification callback to be used for different events. - Add a column to the DB to cache the rank of users. - Add routines to calculate the rank of users. -------------------------------------------------------------------------------- ================================================================================ web-assets-4-3.el6 (FEDORA-EPEL-2013-11349) A simple framework for bits pushed to browsers -------------------------------------------------------------------------------- Update Information: This update introduces the base filesystem layout for Web Assets to Fedora EPEL 6. The proposed shared http path for Web Assets is *not* implemented in this update. This will enable packagers to unbundle libraries from their packages and utilize the new standard directories for doing so as they desire. Use of the functionality provided by this package is entirely optional. No coordinated unbundling effort will take place in EPEL at this time. For more information, see: https://fedoraproject.org/wiki/Changes/Web_Assets -------------------------------------------------------------------------------- References: [ 1 ] Bug #997678 - Review Request: web-assets - A simple framework for bits pushed to browsers https://bugzilla.redhat.com/show_bug.cgi?id=997678 --------------------------------------------------------------------------------

1 0

EPEL pymongo rebase/rename
by Pádraig Brady 27 Aug '13

27 Aug '13

Currently EPEL is at python-mongo-2.1 and I would like to update to python-pymongo-2.4 to support OpenStack ceilometer at least. According to http://docs.mongodb.org/manual/release-notes/ there doesn't seem to be any obvious incompatibilities from the 2.1 development series. I notice that Cyrus SASL is now used rather than GNU SASL, and that the javascript engine has changed to V8. Hopefully these won't cause an issue. thanks, Pádraig.

1 1

EPEL FW: R version 2.15.0-1.el6.x86_64
by Padma TAN (GIS) 27 Aug '13

27 Aug '13

Hi Is there any way I can obtain the R-2.15.0-1.el6.x86_64.rpm file? Regards, Padma -------------------------------------------------------------------------------------------------------------------------------------------------------- This e-mail and any attachments are only for the use of the intended recipient and may be confidential and/or privileged. If you are not the recipient, please delete it or notify the sender immediately. Please do not copy or use it for any purpose or disclose the contents to any other person as it may be an offence under the Official Secrets Act. ---------------------------------------------------------------------------------------------------------------------------------------------------------- -----Original Message----- From: Prof Brian Ripley [mailto:ripley@stats.ox.ac.uk] Sent: Tuesday, 27 August, 2013 2:04 PM To: Padma TAN (GIS) Cc: CRAN(a)R-project.org Subject: Re: R version 2.15.0-1.el6.x86_64 On 27/08/2013 06:58, Padma TAN (GIS) wrote: > Hi, > > Is there any way I can obtain the R-2.15.0-1.el6.x86_64.rpm file? Not from CRAN: that is presumably for RHEL6 and was not made by us. > > Regards, > > Padma Tan > > > Genome Institute of Singapore > 60 Biopolis Street, Genome > #02-01 Singapore 138672 > DID : 6808 8277 > Fax : 6478 9058 > email: tanwp(a)gis.a-star.edu.sg <mailto:tanwp@gis.a-star.edu.sg> > > > ---------------------------------------------------------------------- > ---------------------------------------------------------------------- > ------------ /This e-mail and any attachments are only for the use of > the intended recipient and may be confidential and/or privileged. If > you are not the recipient, please delete it or notify the sender > immediately. Please do not copy or use it for any purpose or disclose > the contents to any other person as it may be an offence under the > Official Secrets Act. / > ---------------------------------------------------------------------- > ---------------------------------------------------------------------- > --------------// > > > ------------------------------- > This e-mail and any attachments are only for the use of the intended > recipient and may be confidential and/or privileged. If you are not > the recipient, please delete it or notify the sender immediately. > Please do not copy or use it for any purpose or disclose the contents > to any other person as it may be an offence under the Official Secrets Act. > ------------------------------- -- Brian D. Ripley, ripley(a)stats.ox.ac.uk Professor of Applied Statistics, http://www.stats.ox.ac.uk/~ripley/ University of Oxford, Tel: +44 1865 272861 (self) 1 South Parks Road, +44 1865 272866 (PA) Oxford OX1 3TG, UK Fax: +44 1865 272595 ------------------------------- This e-mail and any attachments are only for the use of the intended recipient and may be confidential and/or privileged. If you are not the recipient, please delete it or notify the sender immediately. Please do not copy or use it for any purpose or disclose the contents to any other person as it may be an offence under the Official Secrets Act. -------------------------------

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 26 Aug '13

26 Aug '13

The following Fedora EPEL 5 Security updates need testing: Age URL 491 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 386 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11174/libzrtpcpp-3… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11165/cacti-0.8.8b… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11144/chrony-1.25-… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61-2… 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11300/drupal7-them… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11336/lighttpd-1.4… The following builds have been pushed to Fedora EPEL 5 updates-testing libburn-1.3.2-1.el5 libisoburn-1.3.2-1.el5 libisofs-1.3.2-1.el5 lighttpd-1.4.32-1.el5 mksh-48b-1.el5 Details about builds: ================================================================================ libburn-1.3.2-1.el5 (FEDORA-EPEL-2013-11335) Library for reading, mastering and writing optical discs -------------------------------------------------------------------------------- Update Information: Changes towards previous version 1.3.0 ====================================== libburn novelties ----------------- * Bug fix: The signal handler aborted on SIGCONT, SIGTSTP, SIGTTIN, SIGTTOU * New API call burn_make_input_sheet_v07t() * API call burn_session_input_sheet_v07t(): read multiple blocks from same file * New API calls burn_drive_extract_audio(), burn_drive_extract_audio_track() * Optional "make doc" now demands doxygen 1.8.4 cdrskin novelties ----------------- * Bug fix: cdrskin -msinfo on DVD and BD reported old session start = next writable address. Regression introduced by version 1.2.8 (rev 4956). Also fixed in libburn-1.3.0.pl01. * New cdrskin option textfile_to_v07t= * New cdrskin options cdtext_to_textfile= and cdtext_to_v07t= * New cdrskin options extract_audio_to= , extract_tracks= , extract_basename= , --extract_dap * New cdrskin option --pacifier_with_newline * Improved granularity of SCSI log time measurement, now with timestamp libisofs novelties ------------------ * Bug fix: iso_finish() left an invalid global pointer, which a subsequent call of iso_init() would try to dereference. * The sort weight of data files loaded from ISO image is now 2 exp 28 to 1 rather than 2 exp 31 - 1 to - 2 exp 31 libisoburn and xorriso novelties -------------------------------- * Bug fix: -find -exec "sort_weight" did not mark the image as having pending changes * Bug fix: -backslash_codes "with_program_arguments" was interpreted too late * Bug fix: Missing or empty parameter with -dus was interpreted as "*" rather than "." * Bug fix: readline history was spammed by -msg_op parsing and pipe loops * New -pacifier behavior code "interval=" * New -as mkisofs options --sort-weight-list and --sort-weight-patterns * New -format mode "without_spare" (for BD-RE) * New command -named_pipe_loop * New command -sh_style_result * New -msg_op opcodes "parse_silently" and "parse_bulk_silently" * New command -application_use and new -as mkisofs option --application_use -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2013 Robert Scheck <robert(a)fedoraproject.org> 1.3.2-1 - Update to upstream 1.3.2 (#994916) -------------------------------------------------------------------------------- References: [ 1 ] Bug #994921 - libisofs-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994921 [ 2 ] Bug #994916 - libburn-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994916 [ 3 ] Bug #994920 - libisoburn-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994920 -------------------------------------------------------------------------------- ================================================================================ libisoburn-1.3.2-1.el5 (FEDORA-EPEL-2013-11335) Library to enable creation and expansion of ISO-9660 filesystems -------------------------------------------------------------------------------- Update Information: Changes towards previous version 1.3.0 ====================================== libburn novelties ----------------- * Bug fix: The signal handler aborted on SIGCONT, SIGTSTP, SIGTTIN, SIGTTOU * New API call burn_make_input_sheet_v07t() * API call burn_session_input_sheet_v07t(): read multiple blocks from same file * New API calls burn_drive_extract_audio(), burn_drive_extract_audio_track() * Optional "make doc" now demands doxygen 1.8.4 cdrskin novelties ----------------- * Bug fix: cdrskin -msinfo on DVD and BD reported old session start = next writable address. Regression introduced by version 1.2.8 (rev 4956). Also fixed in libburn-1.3.0.pl01. * New cdrskin option textfile_to_v07t= * New cdrskin options cdtext_to_textfile= and cdtext_to_v07t= * New cdrskin options extract_audio_to= , extract_tracks= , extract_basename= , --extract_dap * New cdrskin option --pacifier_with_newline * Improved granularity of SCSI log time measurement, now with timestamp libisofs novelties ------------------ * Bug fix: iso_finish() left an invalid global pointer, which a subsequent call of iso_init() would try to dereference. * The sort weight of data files loaded from ISO image is now 2 exp 28 to 1 rather than 2 exp 31 - 1 to - 2 exp 31 libisoburn and xorriso novelties -------------------------------- * Bug fix: -find -exec "sort_weight" did not mark the image as having pending changes * Bug fix: -backslash_codes "with_program_arguments" was interpreted too late * Bug fix: Missing or empty parameter with -dus was interpreted as "*" rather than "." * Bug fix: readline history was spammed by -msg_op parsing and pipe loops * New -pacifier behavior code "interval=" * New -as mkisofs options --sort-weight-list and --sort-weight-patterns * New -format mode "without_spare" (for BD-RE) * New command -named_pipe_loop * New command -sh_style_result * New -msg_op opcodes "parse_silently" and "parse_bulk_silently" * New command -application_use and new -as mkisofs option --application_use -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2013 Robert Scheck <robert(a)fedoraproject.org> 1.3.2-1 - Upgrade to 1.3.2 (#994920) -------------------------------------------------------------------------------- References: [ 1 ] Bug #994921 - libisofs-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994921 [ 2 ] Bug #994916 - libburn-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994916 [ 3 ] Bug #994920 - libisoburn-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994920 -------------------------------------------------------------------------------- ================================================================================ libisofs-1.3.2-1.el5 (FEDORA-EPEL-2013-11335) Library to create ISO 9660 disk images -------------------------------------------------------------------------------- Update Information: Changes towards previous version 1.3.0 ====================================== libburn novelties ----------------- * Bug fix: The signal handler aborted on SIGCONT, SIGTSTP, SIGTTIN, SIGTTOU * New API call burn_make_input_sheet_v07t() * API call burn_session_input_sheet_v07t(): read multiple blocks from same file * New API calls burn_drive_extract_audio(), burn_drive_extract_audio_track() * Optional "make doc" now demands doxygen 1.8.4 cdrskin novelties ----------------- * Bug fix: cdrskin -msinfo on DVD and BD reported old session start = next writable address. Regression introduced by version 1.2.8 (rev 4956). Also fixed in libburn-1.3.0.pl01. * New cdrskin option textfile_to_v07t= * New cdrskin options cdtext_to_textfile= and cdtext_to_v07t= * New cdrskin options extract_audio_to= , extract_tracks= , extract_basename= , --extract_dap * New cdrskin option --pacifier_with_newline * Improved granularity of SCSI log time measurement, now with timestamp libisofs novelties ------------------ * Bug fix: iso_finish() left an invalid global pointer, which a subsequent call of iso_init() would try to dereference. * The sort weight of data files loaded from ISO image is now 2 exp 28 to 1 rather than 2 exp 31 - 1 to - 2 exp 31 libisoburn and xorriso novelties -------------------------------- * Bug fix: -find -exec "sort_weight" did not mark the image as having pending changes * Bug fix: -backslash_codes "with_program_arguments" was interpreted too late * Bug fix: Missing or empty parameter with -dus was interpreted as "*" rather than "." * Bug fix: readline history was spammed by -msg_op parsing and pipe loops * New -pacifier behavior code "interval=" * New -as mkisofs options --sort-weight-list and --sort-weight-patterns * New -format mode "without_spare" (for BD-RE) * New command -named_pipe_loop * New command -sh_style_result * New -msg_op opcodes "parse_silently" and "parse_bulk_silently" * New command -application_use and new -as mkisofs option --application_use -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2013 Robert Scheck <robert(a)fedoraproject.org> 1.3.2-1 - Upgrade to 1.3.2 (#994921) -------------------------------------------------------------------------------- References: [ 1 ] Bug #994921 - libisofs-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994921 [ 2 ] Bug #994916 - libburn-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994916 [ 3 ] Bug #994920 - libisoburn-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=994920 -------------------------------------------------------------------------------- ================================================================================ lighttpd-1.4.32-1.el5 (FEDORA-EPEL-2013-11336) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information: One important denial of service (in 1.4.31) fix: CVE-2012-5533. A flaw was found in lighttpd version 1.4.31 that could be exploited by a remote user to cause a denial of service condition in lighttpd. A client could send a malformed Connection header to lighttpd (such as "Connection: TE,,Keep-Alive"), which would cause lighttpd to enter an endless loop, detecting an empty token but not incrementing the current string position, causing it to continually read ',' over and over. This flaw was introduced in 1.4.31 [1] when an "invalid read" bug was fixed [2]. [1] http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2830/dif… [2] http://redmine.lighttpd.net/issues/2413 Acknowledgement: Red Hat would like to thank Stefan Bühler for reporting this issue. Upstream acknowledges Jesse Sipprell from McClatchy Interactive, Inc. as the original reporter. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.4.32-1 - Update to 1.4.32, BZ 878915. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.31-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.31-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #878915 - CVE-2012-5533 lighttpd: Denial of Service via malformed Connection headers [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=878915 [ 2 ] Bug #878914 - CVE-2012-5533 lighttpd: Denial of Service via malformed Connection headers [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=878914 -------------------------------------------------------------------------------- ================================================================================ mksh-48b-1.el5 (FEDORA-EPEL-2013-11343) MirBSD enhanced version of the Korn Shell -------------------------------------------------------------------------------- Update Information: R48b is a minor bugfix update: * [tg] Fix display issue with multi-line prompts and SIGWINCH R48 is a small but important bugfix update: * [tg] dot.mkshrc: unbreak hd(1) function in UTF-8 mode * [Jens Staal, tg] Improve buildability on Plan 9 and support kencc * [tg] Clean up and improve build process and testsuite * [Michael Langguth] Add multi-layer ICO file from mksh/Win32 * [tg, Steffen Daode Nurpmeso] Fix interactive shell exiting on ^C or syntax error when the EXIT pseudo-signal trap was set (to anything) * [tg, Daode] Display longer command excerpts in job control * [tg] Rewrite Emacs mode display window sliding calculation code * [tg] dot.mkshrc: “doch” now keeps standard input * [tg] Reduce memory usage and improve comments and documentation -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2013 Robert Scheck <robert(a)fedoraproject.org> 48b-1 - Upgrade to 48b --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 26 Aug '13

26 Aug '13

The following Fedora EPEL 6 Security updates need testing: Age URL 491 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11175/php-symfony2… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-3.… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11250/Django14-1.4… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11245/python-virtu… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11194/cacti-0.8.8b… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11183/php-symfony2… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11187/libzrtpcpp-3… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11222/seamonkey-2.… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11195/chrony-1.25-… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11179/libtommath-0… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11257/drupal7-enti… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61-2… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11291/ansible-1.2.… 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11301/drupal7-them… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11327/php-pear-Aut… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11330/ngircd-20.3-… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11339/lighttpd-1.4… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11311/roundcubemai… The following builds have been pushed to Fedora EPEL 6 updates-testing lighttpd-1.4.32-1.el6 nodejs-uid2-0.0.3-2.el6 perl-Net-OAuth-0.28-1.el6 php-Assetic-1.1.2-1.el6 python-cpopen-1.2.3-1.el6 python-cpopen-1.2.3-2.el6 python-django-ckeditor-4.0.2-5.el6 python-flask-login-0.2.7-1.el6 roundcubemail-0.9.3-2.el6 trafficserver-3.2.5-3.el6 transifex-client-0.9-3.el6 Details about builds: ================================================================================ lighttpd-1.4.32-1.el6 (FEDORA-EPEL-2013-11339) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information: One important denial of service (in 1.4.31) fix: CVE-2012-5533. A flaw was found in lighttpd version 1.4.31 that could be exploited by a remote user to cause a denial of service condition in lighttpd. A client could send a malformed Connection header to lighttpd (such as "Connection: TE,,Keep-Alive"), which would cause lighttpd to enter an endless loop, detecting an empty token but not incrementing the current string position, causing it to continually read ',' over and over. This flaw was introduced in 1.4.31 [1] when an "invalid read" bug was fixed [2]. [1] http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2830/dif… [2] http://redmine.lighttpd.net/issues/2413 Acknowledgement: Red Hat would like to thank Stefan Bühler for reporting this issue. Upstream acknowledges Jesse Sipprell from McClatchy Interactive, Inc. as the original reporter. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.4.32-1 - Update to 1.4.32, BZ 878915. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.31-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.31-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #878915 - CVE-2012-5533 lighttpd: Denial of Service via malformed Connection headers [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=878915 [ 2 ] Bug #878914 - CVE-2012-5533 lighttpd: Denial of Service via malformed Connection headers [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=878914 -------------------------------------------------------------------------------- ================================================================================ nodejs-uid2-0.0.3-2.el6 (FEDORA-EPEL-2013-11340) Node.js module to generate strong unique IDs -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #998245 - Review Request: nodejs-uid2 - Node.js module to generate strong unique IDs https://bugzilla.redhat.com/show_bug.cgi?id=998245 -------------------------------------------------------------------------------- ================================================================================ perl-Net-OAuth-0.28-1.el6 (FEDORA-EPEL-2013-11338) OAuth protocol support library for Perl -------------------------------------------------------------------------------- Update Information: Update to newer version because perl-Net-Twitter needs it. -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 6 2012 Emmanuel Seyman <emmanuel(a)seyman.fr> - 0.28-1 - Update to 0.28 - Clean up spec file - Add default perl filter * Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.27-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Wed Jun 13 2012 Petr Pisar <ppisar(a)redhat.com> - 0.27-6 - Perl 5.16 rebuild * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.27-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Wed Jul 20 2011 Petr Sabata <contyk(a)redhat.com> - 0.27-4 - Perl mass rebuild * Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.27-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Tue Dec 21 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 0.27-2 - 661697 rebuild for fixing problems with vendorach/lib * Fri Jul 30 2010 Lubomir Rintel (GoodData) <lubo.rintel(a)gooddata.com> - 0.27-1 - Update to 0.27 * Tue May 4 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 0.19-3 - Mass rebuild with perl-5.12.0 * Mon Dec 7 2009 Stepan Kasal <skasal(a)redhat.com> - 0.19-2 - rebuild against perl 5.10.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1000320 - Please build perl-Net-OAuth for EPEL https://bugzilla.redhat.com/show_bug.cgi?id=1000320 -------------------------------------------------------------------------------- ================================================================================ php-Assetic-1.1.2-1.el6 (FEDORA-EPEL-2013-11333) Asset Management for PHP -------------------------------------------------------------------------------- Update Information: 1.1.2 (July 18, 2013) * Fixed deep mtime on asset collections * CallablesFilter now implements DependencyExtractorInterface * Fixed detection of "partial" children in subfolders in SassFilter * Restored PathUtils for BC Full change log: https://github.com/kriswallsmith/assetic/blob/v1.1.2/CHANGELOG-1.1.md -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 18 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.1.2-1 - Updated to 1.1.2 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #987400 - php-Assetic-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=987400 -------------------------------------------------------------------------------- ================================================================================ python-cpopen-1.2.3-1.el6 (FEDORA-EPEL-2013-11342) Creates a sub-process in simpler safer manner -------------------------------------------------------------------------------- Update Information: adding readme and authors files, updating installation process and modified dst folders -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2013 Yaniv Bronhaim <ybronhei(a)redhat.com> - 1.2.3 - Moving files under cpopen folder -------------------------------------------------------------------------------- References: [ 1 ] Bug #903246 - Review Request: python-cpopen - Creates a subprocess in simpler safer manner https://bugzilla.redhat.com/show_bug.cgi?id=903246 -------------------------------------------------------------------------------- ================================================================================ python-cpopen-1.2.3-2.el6 (FEDORA-EPEL-2013-11334) Creates a sub-process in simpler safer manner -------------------------------------------------------------------------------- Update Information: fixing import error. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Yaniv Bronhaim <ybronhei(a)redhat.com> - 1.2.3-2 - Fixing import error in __init__.py * Sun Aug 25 2013 Yaniv Bronhaim <ybronhei(a)redhat.com> - 1.2.3-1 - Moving files under cpopen folder -------------------------------------------------------------------------------- References: [ 1 ] Bug #903246 - Review Request: python-cpopen - Creates a subprocess in simpler safer manner https://bugzilla.redhat.com/show_bug.cgi?id=903246 -------------------------------------------------------------------------------- ================================================================================ python-django-ckeditor-4.0.2-5.el6 (FEDORA-EPEL-2013-11332) Django admin CKEditor integration -------------------------------------------------------------------------------- Update Information: Remove bundle flash files. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Eduardo Echeverria <echevemaster(a)gmail.com> - 4.0.2-5 - Remove bundle flash files %prep section. * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 4.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1000262 - python-django-ckeditor contains bundled Flash and Flash source files https://bugzilla.redhat.com/show_bug.cgi?id=1000262 -------------------------------------------------------------------------------- ================================================================================ python-flask-login-0.2.7-1.el6 (FEDORA-EPEL-2013-11341) User session management for Flask -------------------------------------------------------------------------------- Update Information: New version 0.2.7 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Richard Marko <rmarko(a)fedoraproject.org> - 0.2.7-1 - Update to 0.2.7 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ roundcubemail-0.9.3-2.el6 (FEDORA-EPEL-2013-11311) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Two XSS flaws were fixed in roundcube 0.9.3 [1]: * Fix XSS vulnerability when saving HTML signatures [2],[3] * Fix XSS vulnerability when editing a message "as new" or draft [2],[4] [1] http://trac.roundcube.net/wiki/Changelog#RELEASE0.9.3 [2] http://trac.roundcube.net/ticket/1489251 [3] http://trac.roundcube.net/changeset/ce5a6496fd6039962ba7424d153278e41ae8761… [4] http://trac.roundcube.net/changeset/93b0a30c1c8aa29d862b587b31e52bcc344b8d1… -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Adam Williamson <awilliam(a)redhat.com> - 0.9.3-2 - patch tinymce to cope elegantly with Flash binary being removed * Fri Aug 23 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.9.3-1 - Fix two XSS vulnerabilities: - http://trac.roundcube.net/ticket/1489251 * Fri Aug 16 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.9.2-3 - Drop precompiled flash. * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jun 17 2013 Adam Williamson <awilliam(a)redhat.com> - 0.9.2-1 - latest upstream - correct License field, add comment on complex licensing case * Wed May 1 2013 Adam Williamson <awilliam(a)redhat.com> - 0.9.0-1 - latest upstream - drop MDB2 dependencies, add php-pdo dependency (upstream now using pdo not MDB2) - drop the update.sh script as it requires the installer framework we don't ship - update the Fedora README for changes to sqlite and update process - drop strict.patch, upstream actually merged it years ago, just in a slightly different format, and we kept dumbly diffing it - drop references to obsolete patches (all merged upstream long ago) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1000511 - roundcubemail: two XSS flaws fixed in 0.9.3 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1000511 [ 2 ] Bug #1000512 - roundcubemail: two XSS flaws fixed in 0.9.3 [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1000512 -------------------------------------------------------------------------------- ================================================================================ trafficserver-3.2.5-3.el6 (FEDORA-EPEL-2013-11337) Fast, scalable and extensible HTTP/1.1 compliant caching proxy server -------------------------------------------------------------------------------- Update Information: Update to 3.2.5. Switch to using rpmbuild %configure macro, instead of calling configure directly. Harden build with PIE flags, Updated to 3.2.4 final. This fixes numerous bugs (including crashes) since the current v3.0.x version in EPEL, but there are a couple of incompatible configuration parameter changes, ref: https://cwiki.apache.org/confluence/display/TS/Upgrading+to+3.2 1- SSL certificate configuration is now done in ssl_multicert.config. 2- removed proxy.config.http.quick_filter.mask from records.config. This functionality is moved to ip_allow.config. 3- There are changes to the DNS cache, so the /var/cache/trafficserver/host.db should be deleted before upgrading. 4- changes to stats snapshot file (/var/run/trafficserver/stats.snap) 5- deprecation of old port configuration parameters 1,2 - incompatible config options. 3,4 - files should be removed while trafficserver is stopped, before upgrading it 5 - Only deprecation. This version is intended for testing only. Point 3 and 4 should be fixed automatically by the upgrade before creating a final release. Also notification will be sent to EPEL-announce. -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.5-3 - bz#994224 Use rpm CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export CFLAGS ; CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export CXXFLAGS ; FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \ --target=x86_64-redhat-linux-gnu \ --program-prefix= \ --prefix=/usr \ --exec-prefix=/usr \ --bindir=/usr/bin \ --sbindir=/usr/sbin \ --sysconfdir=/etc \ --datadir=/usr/share \ --includedir=/usr/include \ --libdir=/usr/lib64 \ --libexecdir=/usr/libexec \ --localstatedir=/var \ --sharedstatedir=/var/lib \ --mandir=/usr/share/man \ --infodir=/usr/share/info macro, instead of calling configure directly. * Fri Aug 9 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.5-2 - bz#994224 Pass RPM_OPT_FLAGS as environment variables to configure, instead of overriding on make commandline. Thanks Dimitry Andric! * Thu Aug 1 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.5-1 - Update to v3.2.5 which fixes the following bugs: [TS-1923] Fix memory issue caused by resolve_logfield_string() [TS-1918] SSL hangs after origin handshake. [TS-1483] Manager uses hardcoded FD limit causing restarts forever on traffic_server. [TS-1784] Fix FreeBSD block calculation (both RAW and directory) [TS-1905] TS hangs (dead lock) on HTTPS POST/PROPFIND requests. [TS-1785, TS-1904] Fixes to make it build with gcc-4.8.x. [TS-1903] Remove JEMALLOC_P use, it seems to have been deprecated. [TS-1902] Remove iconv as dependency. [TS-1900] Detect and link libhwloc on Ubuntu. [TS-1470] Fix cache sizes > 16TB (part 2 - Don't reset the cache after restart) * Mon Jun 3 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.4-3 - Harden build with PIE flags, ref bz#955127. * Sat Jan 19 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.4-1 - Update to 3.2.4 release candiate * Fri Jan 4 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.3-1 - Update to v3.2.3. Remove patches no longer needed. * Fri Aug 24 2012 Václav Pavlín <vpavlin(a)redhat.com> - 3.2.0-6 - Scriptlets replaced with new systemd macros (#851462) * Thu Aug 16 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-5 - Add patch for TS-1392, to fix problem with SNI fallback. * Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jun 25 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-2 - Remove duplicate man-pages. * Sat Jun 23 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-1 - Update to v3.2.0 * Sun Jun 10 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.0.5-1 - Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk. * Fri Apr 13 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.0.4-5 - Add hardened build. * Wed Apr 11 2012 <janfrode(a)tanso.net> - 3.0.4-4 - Add patch for gcc-4.7 build issues. * Mon Apr 9 2012 Dan Horák <dan[at]danny.cz> - 3.0.4-3 - switch to ExclusiveArch -------------------------------------------------------------------------------- References: [ 1 ] Bug #994224 - trafficserver must be compiled with -fno-strict-aliasing, but it is not https://bugzilla.redhat.com/show_bug.cgi?id=994224 [ 2 ] Bug #955127 - trafficserver package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955127 -------------------------------------------------------------------------------- ================================================================================ transifex-client-0.9-3.el6 (FEDORA-EPEL-2013-11248) Command line tool for Transifex translation management -------------------------------------------------------------------------------- Update Information: Command line tool for Transifex translation management -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Luis Bazan <lbazan(a)fedoraproject.org> - 0.9-3 - remove dependency * Thu Aug 15 2013 Luis Bazan <lbazan(a)fedoraproject.org> - 0.9-2 - add new requirement -------------------------------------------------------------------------------- References: [ 1 ] Bug #985248 - transifex-client: use system python-backports-ssl_match_hostname https://bugzilla.redhat.com/show_bug.cgi?id=985248 --------------------------------------------------------------------------------

1 0

EPEL Lighttpd vulnerability still unfixed after 9 months
by Anssi Johansson 26 Aug '13

26 Aug '13

Hi, may I please direct some provenpackager's attention to https://bugzilla.redhat.com/show_bug.cgi?id=878915 -- lighttpd: Denial of Service via malformed Connection headers (CVE-2012-5533) The bug was filed in November 2012, or approximately nine months ago. EPEL still ships a vulnerable version 1.4.31 for both EL5 and EL6. I think it'd be high time to release a fixed version, especially as exploiting the vulnerability is rather trivial: echo -ne "GET / HTTP/1.1\r\nHost: victim.com\r\nConnection: TE,,Keep-Alive\r\n\r\n" | nc victim.com 80 Everything that's needed is included in the bug report (as far as I can tell). It'd only need someone to package the new version and push it through EPEL's buildsystem.

2 1

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 24 Aug '13

24 Aug '13

The following Fedora EPEL 5 Security updates need testing: Age URL 489 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 384 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11174/libzrtpcpp-3… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11165/cacti-0.8.8b… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11144/chrony-1.25-… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61-2… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11300/drupal7-them… The following builds have been pushed to Fedora EPEL 5 updates-testing glances-1.7.1-1.el5 php-htmLawed-1.1.15-2.el5 Details about builds: ================================================================================ glances-1.7.1-1.el5 (FEDORA-EPEL-2013-11331) CLI curses based monitoring tool -------------------------------------------------------------------------------- Update Information: Update to 1.7.1 update to 1.7 update to 1.7 update to 1.7 -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Edouard Bourguignon <madko(a)linuxed.net> - 1.7.1-1 - Update to 1.7.1 * Sun Aug 11 2013 Edouard Bourguignon <madko(a)linuxed.net> - 1.7-1 - Update to 1.7 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Apr 18 2013 Michel Salim <salimma(a)fedoraproject.org> - 1.6.1-1 - Update to 1.6.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #999006 - glances-1.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=999006 [ 2 ] Bug #995805 - glances-1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=995805 -------------------------------------------------------------------------------- ================================================================================ php-htmLawed-1.1.15-2.el5 (FEDORA-EPEL-2013-11329) PHP code to purify and filter HTML -------------------------------------------------------------------------------- Update Information: Version 1.1.15 - 11 August 2013 * Improved tidying/prettifying functionality -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Remi Collet <remi(a)fedoraproject.org> - 1.1.15-2 - update to 1.1.15 --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 24 Aug '13

24 Aug '13

The following Fedora EPEL 6 Security updates need testing: Age URL 489 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11175/php-symfony2… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-3.… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11194/cacti-0.8.8b… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11183/php-symfony2… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11187/libzrtpcpp-3… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11222/seamonkey-2.… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11195/chrony-1.25-… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11179/libtommath-0… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11250/Django14-1.4… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11245/python-virtu… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11257/drupal7-enti… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61-2… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11301/drupal7-them… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11291/ansible-1.2.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11311/roundcubemai… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11327/php-pear-Aut… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11330/ngircd-20.3-… The following builds have been pushed to Fedora EPEL 6 updates-testing glances-1.7.1-1.el6 ngircd-20.3-1.el6 php-htmLawed-1.1.15-2.el6 php-pear-Auth-OpenID-2.2.2-7.el6 python-sparklines-0.9-2.el6 rabbitmq-server-3.1.5-1.el6 tinymce-3.5.8-1.el6 wordpress-3.6-1.el6 zabbix20-2.0.8-1.el6 Details about builds: ================================================================================ glances-1.7.1-1.el6 (FEDORA-EPEL-2013-11328) CLI curses based monitoring tool -------------------------------------------------------------------------------- Update Information: Update to 1.7.1 update to 1.7 update to 1.7 update to 1.7 -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Edouard Bourguignon <madko(a)linuxed.net> - 1.7.1-1 - Update to 1.7.1 * Sun Aug 11 2013 Edouard Bourguignon <madko(a)linuxed.net> - 1.7-1 - Update to 1.7 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Apr 18 2013 Michel Salim <salimma(a)fedoraproject.org> - 1.6.1-1 - Update to 1.6.1 * Tue Mar 19 2013 Michel Salim <salimma(a)fedoraproject.org> - 1.6-2 - On el5, build against python26 stack -------------------------------------------------------------------------------- References: [ 1 ] Bug #999006 - glances-1.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=999006 [ 2 ] Bug #995805 - glances-1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=995805 -------------------------------------------------------------------------------- ================================================================================ ngircd-20.3-1.el6 (FEDORA-EPEL-2013-11330) Next Generation IRC Daemon -------------------------------------------------------------------------------- Update Information: Fix for a denial of service/crash issue -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 24 2013 Kevin Fenzi <kevin(a)scrye.com> 20.3-1 - Update to 20.3. Fixes bug #1000690 - Fix for CVE-2013-5580 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 20.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1000690 - ngircd-20.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1000690 -------------------------------------------------------------------------------- ================================================================================ php-htmLawed-1.1.15-2.el6 (FEDORA-EPEL-2013-11324) PHP code to purify and filter HTML -------------------------------------------------------------------------------- Update Information: Version 1.1.15 - 11 August 2013 * Improved tidying/prettifying functionality -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Remi Collet <remi(a)fedoraproject.org> - 1.1.15-2 - update to 1.1.15 -------------------------------------------------------------------------------- ================================================================================ php-pear-Auth-OpenID-2.2.2-7.el6 (FEDORA-EPEL-2013-11327) PHP OpenID -------------------------------------------------------------------------------- Update Information: fixes for CVE-2013-4701 -------------------------------------------------------------------------------- References: [ 1 ] Bug #999687 - CVE-2013-4701 php-pear-Auth-OpenID: XML External Entity issue allows for reading arbitrary files or excessive resource consumption https://bugzilla.redhat.com/show_bug.cgi?id=999687 -------------------------------------------------------------------------------- ================================================================================ python-sparklines-0.9-2.el6 (FEDORA-EPEL-2013-11322) A unicode sparkline generation library -------------------------------------------------------------------------------- Update Information: Require argparses. Initial packaging. -------------------------------------------------------------------------------- References: [ 1 ] Bug #999596 - Review Request: python-sparklines - python-sparklines is a unicode sparkline generation library https://bugzilla.redhat.com/show_bug.cgi?id=999596 -------------------------------------------------------------------------------- ================================================================================ rabbitmq-server-3.1.5-1.el6 (FEDORA-EPEL-2013-11323) The RabbitMQ server -------------------------------------------------------------------------------- Update Information: * New Upstream Release - 3.1.5 (bugfix release) -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 24 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.5-1 - New Upstream Release - 3.1.5 (bugfix release) * Wed Aug 7 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.4-1 - New Upstream Release - 3.1.4 (bugfix release) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sat Jun 29 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.3-1 - New Upstream Release - 3.1.3 (fixes issue bug in the management plugin) * Tue Jun 25 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.2-1 - New Upstream Release - 3.1.2 (works with Erlang R16B01) * Sun Mar 17 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 3.0.4-1 - New Upstream Release - 3.0.4 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.8.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Tue Oct 2 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 2.8.7-1 - New Upstream Release - 2.8.7 * Sat Aug 18 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 2.8.5-1 - New Upstream Release - 2.8.5 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.8.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jul 12 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 2.8.4-1 - New Upstream Release - 2.8.4 * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #850289 - Introduce new systemd-rpm macros in rabbitmq-server spec file https://bugzilla.redhat.com/show_bug.cgi?id=850289 [ 2 ] Bug #948651 - contents of rabbitmq-server package different if built from source vs yum -y install rabbitmq-server https://bugzilla.redhat.com/show_bug.cgi?id=948651 [ 3 ] Bug #951518 - rabbitmq-server and ulimit nofile limit. https://bugzilla.redhat.com/show_bug.cgi?id=951518 [ 4 ] Bug #880703 - upgrade rabbitmq-server to include important updates https://bugzilla.redhat.com/show_bug.cgi?id=880703 -------------------------------------------------------------------------------- ================================================================================ tinymce-3.5.8-1.el6 (FEDORA-EPEL-2013-11326) Web based Javascript HTML WYSIWYG editor control -------------------------------------------------------------------------------- Update Information: This update provides the latest upstream version of tinymce (all 3.x releases are compatible, newer builds provide only bugfixes and new functionality) and removes a pre-built Flash binary from the package, whose inclusion was contrary to Fedora policy: https://fedoraproject.org/wiki/Packaging:Guidelines#No_inclusion_of_pre-bui… . The effect of this removal is that the media embedding plugin will only embed an HTML5 video player; it will not try and use a Flash plugin to provide a player widget if HTML5 video is not possible for the given browser and media type. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Adam Williamson <awilliam(a)redhat.com> - 3.5.8-1 - bump to latest upstream release - drop pre-build Flash blobs, patch media plugin not to try and use moxieplayer * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4.3.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4.3.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4.3.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4.3.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1000266 - tinymce contains bundled Flash and Shockwave files https://bugzilla.redhat.com/show_bug.cgi?id=1000266 -------------------------------------------------------------------------------- ================================================================================ wordpress-3.6-1.el6 (FEDORA-EPEL-2013-11325) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information: This update provides the latest upstream release of Wordpress, 3.6, with bug fixes and new features. Fedora does not try to stick with old branches of Wordpress as upstream does not support them, instead encouraging all deployments to update to the latest release. It also removes several Flash and Silverlight binaries which the package was previously shipping in pre-compiled form. This is not compatible with Fedora guidelines. It would not be straightforward to compile these during the package build process, so they have had to be removed. The impact of these changes has been documented in the README.fedora file. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 22 2013 Adam Williamson <awilliam(a)redhat.com> - 3.6.0-1 - update to 3.6.0 - drop pre-compiled Flash and Silverlight binaries - #1000267 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1000267 - wordpress contains bundled Flash and Silverlight files https://bugzilla.redhat.com/show_bug.cgi?id=1000267 -------------------------------------------------------------------------------- ================================================================================ zabbix20-2.0.8-1.el6 (FEDORA-EPEL-2013-11321) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: http://www.zabbix.com/rn2.0.8.php Notice: This release of the package moves the fping files away from /tmp to ~zabbixsrv/tmp. Please review your SELinux policy! The README file reflects this change and now has a SELinux section. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 23 2013 Volker Fröhlich <volker27(a)gmx.at> - 2.0.8-1 - New upstream release - Create and configure a spooling directory for fping files outside of /tmp - Update README to reflect that and add a SELinux section - Drop PrivateTmp from systemd unit files - Drop patch for ZBX-6526 (solved upstream) - Drop patch for CVE-2012-6086 (solved upstream) - Correct path for the flash applet when removing - Truncate changelog --------------------------------------------------------------------------------

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel August 2013