epel-devel September 2014

epel-devel@lists.fedoraproject.org

33 participants
84 discussions

EPEL Red Hat Enterprise Linux 5.11 Released
by Stephen John Smoogen 24 Sep '14

24 Sep '14

So Red Hat Enterprise Linux 5.11 is supposed to be the last updated version of the series. I say supposed to be because a long time ago I was told 5.9 and then 5.10 were to be the last versions but that wasn't in a release announcement so I am thinking this is actually the last version. With that in mind, I was wondering what needs users have in the EPEL-5 trees and what we should focus on this tree as it goes sailing into the sunset of 2017 (extended contract support til 2020). I would be happy to act as an 'advocate' in this. -- Stephen J Smoogen.

3 3

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 24 Sep '14

24 Sep '14

The following Fedora EPEL 6 Security updates need testing: Age URL 885 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 217 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-… 104 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26… 94 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1693/perl-Email-Ad… 47 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2148/drupal6-6.33-… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2561/pdns-recursor… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2634/moodle-2.5.8-… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2655/python-oauth2… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2718/check-mk-1.2.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2750/libsrtp-1.4.4… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2719/nodejs-0.10.3… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2698/phpMyAdmin-4.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2742/TeXmacs-1.0.7… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2713/putty-0.63-3.… The following builds have been pushed to Fedora EPEL 6 updates-testing TeXmacs-1.0.7.2-3.el6 cf-sorts-mill-goudy-fonts-3.1-7.el6 check-mk-1.2.4p5-1.el6 collectl-3.7.4-1.el6 davfs2-1.4.7-5.el6 debootstrap-1.0.62-1.el6 dnstop-20140915-1.el6 knot-1.5.3-1.el6 librabbitmq-0.5.2-1.el6 libsrtp-1.4.4-10.20101004cvs.el6 lynis-1.6.1-1.el6 moyogo-molengo-fonts-0.10-9.el6 mozilla-https-everywhere-4.0.1-1.el6 nodejs-0.10.32-1.el6 perl-Parse-CPAN-Packages-Fast-0.08-1.el6 php-horde-Horde-Imap-Client-2.25.1-1.el6 phpMyAdmin-4.0.10.3-2.el6 putty-0.63-3.el6 python-backports-ssl_match_hostname-3.4.0.2-4.el6 python-fmn-consumer-0.3.0-1.el6 python-fmn-lib-0.3.0-1.el6 python-fmn-rules-0.3.0-1.el6 python-fmn-web-0.3.0-2.el6 python-urllib2_kerberos-0.1.6-13.el6 qt5-qtbase-5.3.2-1.el6 qt5-qtconnectivity-5.3.2-1.el6 qt5-qtdeclarative-5.3.2-1.el6 qt5-qtdoc-5.3.2-1.el6 qt5-qtgraphicaleffects-5.3.2-1.el6 qt5-qtimageformats-5.3.2-1.el6 qt5-qtlocation-5.3.2-1.el6 qt5-qtmultimedia-5.3.2-1.el6 qt5-qtquick1-5.3.2-1.el6 qt5-qtquickcontrols-5.3.2-1.el6 qt5-qtscript-5.3.2-1.el6 qt5-qtsensors-5.3.2-1.el6 qt5-qtserialport-5.3.2-1.el6 qt5-qtsvg-5.3.2-1.el6 qt5-qttools-5.3.2-1.el6 qt5-qttranslations-5.3.2-1.el6 qt5-qtwebkit-5.3.2-1.el6 qt5-qtx11extras-5.3.2-1.el6 qt5-qtxmlpatterns-5.3.2-1.el6 reposurgeon-3.12-1.el6 seren-0.0.20-1.el6 sks-1.1.5-7.el6 soscleaner-0.2.2-7.el6 v8-3.14.5.10-14.el6 Details about builds: ================================================================================ TeXmacs-1.0.7.2-3.el6 (FEDORA-EPEL-2014-2742) Structured wysiwyg scientific text editor -------------------------------------------------------------------------------- Update Information: CVE-2010-3394 TeXmacs: insecure library loading vulnerability -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Mark Chappell <tremble(a)tremble.org.uk> - 1.0.7.2-3 - Patch for CVE-2010-3394 -------------------------------------------------------------------------------- References: [ 1 ] Bug #638427 - CVE-2010-3394 TeXmacs: insecure library loading vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=638427 -------------------------------------------------------------------------------- ================================================================================ cf-sorts-mill-goudy-fonts-3.1-7.el6 (FEDORA-EPEL-2014-2667) Goudy Oldstyle and Italic fonts -------------------------------------------------------------------------------- Update Information: add few more fonts to el6 -------------------------------------------------------------------------------- ================================================================================ check-mk-1.2.4p5-1.el6 (FEDORA-EPEL-2014-2718) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information: New upstream release providing many security fixes. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4p5-1 - New upstream release. Fixes CVEs: - CVE-2014-5338 - CVE-2014-5339 - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341) - Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068) - Turn Wato_Legacy_Eval as True as we want to prevent breakages between machines running different Python and/or check-mk releases. This is necessary after the 'ast' move from 'pickle' (that was generating a insecure API call), however the 'ast' module is still not available for RHEL / CentOS 5 machines. The patch is there to avoid miscommunications between different distribution releases. More information is available at: http://mathias-kettner.com/check_mk_werks.php?werk_id=984. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 https://bugzilla.redhat.com/show_bug.cgi?id=1132337 -------------------------------------------------------------------------------- ================================================================================ collectl-3.7.4-1.el6 (FEDORA-EPEL-2014-2691) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information: - update to upstream version 3.7.4 - upstream changelog at http://collectl.sourceforge.net/Releases.html -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Dan Horák <dan[at]danny.cz> - 3.7.4-1 - upgrade to upstream version 3.7.4 (#1140499) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140499 - collectl-3.7.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1140499 -------------------------------------------------------------------------------- ================================================================================ davfs2-1.4.7-5.el6 (FEDORA-EPEL-2014-2711) A filesystem driver for WebDAV -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ debootstrap-1.0.62-1.el6 (FEDORA-EPEL-2014-2688) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information: new upstream release new upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.0.62-1 - new upstream release: + fix warnings caused by change in output of dpkg 1.17.2 + fix reporting of package versions with epoch * Sat Aug 2 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.0.60-1 - new upstream release: + Ubuntu utopic as a symlink to gutsy + Compression support in fallback method for deb archives extraction * Tue Apr 29 2014 Lubomir Rintel <lkundrak(a)v3.sk> 1.0.59-1.2 - Fix chrooting - Fix architecture detection - Drop unneded MAKEDEV patch, as we don't use it anymore * Tue Apr 29 2014 Lubomir Rintel <lkundrak(a)v3.sk> 1.0.59-1.1 - RHEL 7 does not ship MAKEDEV anymore -------------------------------------------------------------------------------- References: [ 1 ] Bug #1136225 - debootstrap-1.0.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1136225 [ 2 ] Bug #1095205 - debootstrap-1.0.60 is available https://bugzilla.redhat.com/show_bug.cgi?id=1095205 -------------------------------------------------------------------------------- ================================================================================ dnstop-20140915-1.el6 (FEDORA-EPEL-2014-2672) Displays information about DNS traffic on your network -------------------------------------------------------------------------------- Update Information: Updated to 20140915 with new-gtlds filter support -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Paul Wouters <pwouters(a)redhat.com> - 20140915-1 - Updated to 20140915 with new-gtlds filter support - Updated warning patch (partially merged upstream) - Added usage patch that was missing the new filter name new-gtlds - Enabled hardening as this application takes in network input -------------------------------------------------------------------------------- ================================================================================ knot-1.5.3-1.el6 (FEDORA-EPEL-2014-2690) An authoritative DNS daemon -------------------------------------------------------------------------------- Update Information: New upstream release (1.5.3): - fix crash on specific incoming IXFR message - fix rare synchronization error during server reload - fix crash in reverse record synthesis module on DNSSEC signed zones - fix message ID and opcode for AXFR-style IXFR responses - fix sending of large responses to remote control commands New upstream release: - CVE-2014-0486: remote crash using crafted DNS message - transfers: do not refuse AXFR answers to IXFR queries - fix storing of hash character '#' in zone file -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.5.3-1 - new upstream release: + fix crash on specific incoming IXFR message + fix rare synchronization error during server reload + fix crash in reverse record synthesis module on DNSSEC signed zones + fix message ID and opcode for AXFR-style IXFR responses + fix sending of large responses to remote control commands * Mon Sep 8 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.5.2-1 - new upstream release: + CVE-2014-0486: remote crash using crafted DNS message + transfers: do not refuse AXFR answers to IXFR queries + fix storing of hash character '#' in zone file -------------------------------------------------------------------------------- ================================================================================ librabbitmq-0.5.2-1.el6 (FEDORA-EPEL-2014-2676) Client library for AMQP -------------------------------------------------------------------------------- Update Information: Changes since v0.5.1 (a.k.a., v0.5.2) - Autoconf: check for htonll as declaration in a header file - SSL: correctly report hostname verification errors. - Build: disable OpenSSL deprecation warnings on OSX - Lib: include platform, version and copyright in AMQP handshake - Examples: print message body in amqp[s]_listen[q] examples - Tools: Add flag to set prefetch for amqp-consume tool -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Remi Collet <remi(a)fedoraproject.org> - 0.5.2-1 - update to 0.5.2 -------------------------------------------------------------------------------- ================================================================================ libsrtp-1.4.4-10.20101004cvs.el6 (FEDORA-EPEL-2014-2750) An implementation of the Secure Real-time Transport Protocol (SRTP) -------------------------------------------------------------------------------- Update Information: Fix CVE-2013-2139 - buffer overflow in application of crypto profiles -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 10 2014 Tom Callaway <spot(a)fedoraproject.org> - 1.4.4-10.20101004cvs - rename internal functions to avoid conflicts (bz 956340) * Mon Dec 30 2013 Tom Callaway <spot(a)fedoraproject.org> - 1.4.4-9.20101004cvs - apply fix for CVE-2013-2139 from https://github.com/cisco/libsrtp/pull/27 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.4-8.20101004cvs - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.4-7.20101004cvs - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Tue Sep 25 2012 Karsten Hopp <karsten(a)redhat.com> 1.4.4-6.20101004cvs - use __PPC64__, not __ppc64__ which is undefined on PPC64 arch * Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.4-5.20101004cvs - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #970697 - CVE-2013-2139 libsrtp: buffer overflow in application of crypto profiles https://bugzilla.redhat.com/show_bug.cgi?id=970697 -------------------------------------------------------------------------------- ================================================================================ lynis-1.6.1-1.el6 (FEDORA-EPEL-2014-2692) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: == 1.6.1 == New: - Added --pentest parameter to run a non-privileged scans (e.g. for pentesting) - Show skipped tests in report if they require root and scan is non-privileged Changes: - Improved vulnerable packages test on Debian based systems (apt-check) [PKGS-7392] - Don't show warnings for 'swap' in 4th column fstab file [FILE-6336] - Remove warning for old files in /tmp [FILE-6354] - CheckUpdates function will have better output when no connection is available - Changes to parameters and functions, to allow penetration tests with Lynis - Test for actual files in /etc/modprobe.d before grepping in it - Improved chown command when file permissions are incorrect - Changed output of update test, show when status is unknown - No scanning of symlinked directories (binaries test) - Extended SafePerms function to also check for UID - Several tests will have root-only bit set now - Improved netstat tests on Arch Linux == 1.6.0 == New: - Added several new plugins to default profile - HostID detection for AIX Changes: - Improvements for log file - GetHostID function improved - Improved detection of security repository for Debian based systems [PKGS-7388] - Set default values for update check, to avoid error message on screen - Cleanup for mail section, adding IMAP and POP3 protocols -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Christopher Meng <rpm(a)cicku.me> - 1.6.1-1 - Update to 1.6.1 -------------------------------------------------------------------------------- ================================================================================ moyogo-molengo-fonts-0.10-9.el6 (FEDORA-EPEL-2014-2667) A Latin typeface for documents -------------------------------------------------------------------------------- Update Information: add few more fonts to el6 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-4.0.1-1.el6 (FEDORA-EPEL-2014-2675) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: 4.0.0 changes - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. 4.0.1 changes - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Russell Golden <niveusluna(a)niveusluna.org> - 4.0.1-1 - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 * Thu Sep 4 2014 Russell Golden <niveusluna(a)niveusluna.org> - 4.0.0-1 - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. * Tue Aug 19 2014 Richard Hughes <richard(a)hughsie.com> - 3.5.3-2 - Add a MetaInfo file for GNOME Software and Apper. -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.32-1.el6 (FEDORA-EPEL-2014-2719) JavaScript runtime -------------------------------------------------------------------------------- Update Information: This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please see the CVE bugs listed below. Changes in this update include: * v8: fix a crash introduced by previous release (Fedor Indutny) * crypto: use domains for any callback-taking method (Chris Dickinson) * http: do not send `0rnrn` in TE HEAD responses (Fedor Indutny) * querystring: fix unescape override (Tristan Berger) * url: Add support for RFC 3490 separators (Mathias Bynens) * v8: backport CVE-2013-6668 * cluster: disconnect should not be synchronous (Sam Roberts) * fs: fix fs.readFileSync fd leak when get RangeError (Jackson Tian) * stream: fix Readable.wrap objectMode falsy values (James Halliday) * timers: fix timers with non-integer delay hanging. (Julien Gilli) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.32-1 - new upstream release 0.10.32 http://blog.nodejs.org/2014/08/19/node-v0-10-31-stable/ http://blog.nodejs.org/2014/09/16/node-v0-10-32-stable/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1074737 - CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 https://bugzilla.redhat.com/show_bug.cgi?id=1074737 -------------------------------------------------------------------------------- ================================================================================ perl-Parse-CPAN-Packages-Fast-0.08-1.el6 (FEDORA-EPEL-2014-2682) Alternative parser for CPAN's package index -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1138924 - Review Request: perl-Parse-CPAN-Packages-Fast - Alternative parser for CPAN's package index https://bugzilla.redhat.com/show_bug.cgi?id=1138924 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Imap-Client-2.25.1-1.el6 (FEDORA-EPEL-2014-2484) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information: Horde_Imap_Client 2.25.1 * [mms] Fix IMAP search results for recent and total messages when it is the only query and the mailbox is not selected. * [mms] Fix client-side message sorting when there are multiple sort criteria and at least one tie in the first sorting criteria. * [mms] Better error handling when attempting to authenticate via IMAP LOGIN command with non-ASCII credentials (Bug #13554). * [mms] Fix sending IMAP APPEND data when the UTF-8 capability is enabled. * [mms] Fix parsing IMAP mailbox list requests when UTF-8 mode is enabled. * [mms] Ensure client sorting tests work reproducibly across systems with varying default locales. Horde_Imap_Client 2.25.0 * [mms] Add support for Gmail-specific WEBALERT response code. * [mms] IMAP/POP3 URL generation split into a more modular library structure. * [mms] Ignore message-specific URL parameters if a search query appears in an IMAP URL. * [mms] Fix encoding/decoding URL elements in IMAP/POP3 URLs. * [mms] Fix setting default port for POP3 URLs. * [mms] Fix client-side reverse sorting. * [mms] Fix client-side sequence sorting, when that is the only sort criteria. * [mms] Use Collator class, if present, to sort string fields on the client side. * [mms] Fix client-side sorting of display addresses. * [mms] Even more improved pseudo-UIDNEXT value for POP3 servers. * [mms] Improved sanity checking so that non-ASCII data is not sent to server in commands where it is not supported. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <remi(a)fedoraproject.org> - 2.25.1-1 - Update to 2.25.1 * Thu Sep 4 2014 Remi Collet <remi(a)fedoraproject.org> - 2.25.0-1 - Update to 2.25.0 - add dependency on php-intl -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.0.10.3-2.el6 (FEDORA-EPEL-2014-2698) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin 4.0.10.3 (2014-09-13) ================================ * [security] DOM based XSS that results to a CSRF that creates a ROOT account in certain conditions -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Robert Scheck <robert(a)fedoraproject.org> 4.0.10.3-2 - Move rm(1) calls from %install to %prep (#1121355 #c10) * Tue Sep 16 2014 Robert Scheck <robert(a)fedoraproject.org> 4.0.10.3-1 - Upgrade to 4.0.10.3 (#1141635) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141635 - CVE-2014-6300 phpMyAdmin: XSS flaw possibly leading to root account creation (PMASA-2014-10) https://bugzilla.redhat.com/show_bug.cgi?id=1141635 -------------------------------------------------------------------------------- ================================================================================ putty-0.63-3.el6 (FEDORA-EPEL-2014-2713) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information: Various bug fixes and security updates Including CVE-2013-4852 Integer overflow, leading to heap-based buffer overflow during SSH handshake CVE-2011-4607 keyboard-interactive replies are not wiped from memory after authentication -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.63-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.63-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Aug 12 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.63-1 - New version Resolves: rhbz#995610 - Dropped perms, CVE-2013-4852, CVE-2013-4206, CVE-2013-4207, CVE-2013-4208 patches (all in upstream) * Thu Aug 8 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-7 - Fixed a heap-corrupting buffer underrun bug in the modmul function Resolves: CVE-2013-4206 - Fixed a buffer overflow vulnerability in the calculation of modular inverses when verifying a DSA signature Resolves: CVE-2013-4207 - Fixed problem when private keys are left in memory after being used by PuTTY tools Resolves: CVE-2013-4208 * Mon Aug 5 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-6 - Fixed integer overflow Resolves: CVE-2013-4852 - Fixed bogus dates in changelog (best estimated) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.62-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.62-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Sep 26 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-3 - Added missing ImageMagick BuildRequires * Wed Sep 19 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-2 - Generated icon from sources * Tue Aug 7 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-1 - New version * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.60-9.20100910svn - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 6 2011 Adam Jackson <ajax(a)redhat.com> - 0.60-8.20100910svn - Rebuild for new libpng * Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.60-7.20100910svn - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #766868 - putty: keyboard-interactive replies are not wiped from memory after authentication [epel-5] https://bugzilla.redhat.com/show_bug.cgi?id=766868 [ 2 ] Bug #766869 - putty: keyboard-interactive replies are not wiped from memory after authentication [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=766869 [ 3 ] Bug #993034 - CVE-2013-4852 putty: Integer overflow, leading to heap-based buffer overflow during SSH handshake [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=993034 -------------------------------------------------------------------------------- ================================================================================ python-backports-ssl_match_hostname-3.4.0.2-4.el6 (FEDORA-EPEL-2014-2758) The ssl.match_hostname() function from Python 3 -------------------------------------------------------------------------------- Update Information: Apply upstream patch to fix namespace handling https://bitbucket.org/brandon/backports.ssl_match_hostname/pull-request/1 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Ralph Bean <rbean(a)redhat.com> - 3.4.0.2-4 - Apply upstream patch to fix python namespace handling. - Narrow down directory ownership to just the ssl_match_hostname module. * Thu Jul 31 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.4.0.2-3 - fix license handling * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066625 - UserWarning when importing fedmsg.meta https://bugzilla.redhat.com/show_bug.cgi?id=1066625 -------------------------------------------------------------------------------- ================================================================================ python-fmn-consumer-0.3.0-1.el6 (FEDORA-EPEL-2014-2738) Backend worker daemon for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Make new users active by default. Improve some cache locking. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Nip time deltas from the future. They are due to clock skew. - Make new users active by default. - Lock the cache on preference update. - Allow group maintainers of packages. -------------------------------------------------------------------------------- ================================================================================ python-fmn-lib-0.3.0-1.el6 (FEDORA-EPEL-2014-2715) Internal API components and model for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Negate-able rules and disable-able filters. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Latest upstream. - New database fields. - Negate-able rules. - Disable-able filters. -------------------------------------------------------------------------------- ================================================================================ python-fmn-rules-0.3.0-1.el6 (FEDORA-EPEL-2014-2736) Message processing rules for Fedora Notifications -------------------------------------------------------------------------------- Update Information: More rules. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Latest upstream. - Remove patch. -------------------------------------------------------------------------------- ================================================================================ python-fmn-web-0.3.0-2.el6 (FEDORA-EPEL-2014-2762) Frontend Web Application for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Negate-able rules and disable-able filters. Negate-able rules and disable-able filters. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.0-2 - Patch two bugs caught in staging. * Mon Sep 15 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.0-1 - Latest upstream. -------------------------------------------------------------------------------- ================================================================================ python-urllib2_kerberos-0.1.6-13.el6 (FEDORA-EPEL-2014-2747) Kerberos over HTTP Negotiate/SPNEGO support for urllib2 -------------------------------------------------------------------------------- Update Information: Fix logging format for Python 2.6 (#1065576) -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 3 2014 Matěj Cepl <mcepl(a)redhat.com> - 0.1.6-13 - Fix logging format for Python 2.6 (#1065576) * Mon Jun 30 2014 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.1.6-12 - Replace python-setuptools-devel BR with python-setuptools -------------------------------------------------------------------------------- References: [ 1 ] Bug #1065576 - Add additional patches to urllib2_kerberos https://bugzilla.redhat.com/show_bug.cgi?id=1065576 -------------------------------------------------------------------------------- ================================================================================ qt5-qtbase-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtBase components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Wed Aug 27 2014 David Tardon <dtardon(a)redhat.com> - 5.3.1-8 - do a normal build with docs * Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 5.3.1-7 - rebuild for ICU 53.1 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtconnectivity-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - Connectivity components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtdeclarative-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtDeclarative component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.1-3 - -qt5 wrappers for qml qmlbundle qmlmin qmlscene * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtdoc-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Main Qt5 Reference Documentation -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 -------------------------------------------------------------------------------- ================================================================================ qt5-qtgraphicaleffects-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtGraphicalEffects component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtimageformats-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtImageFormats component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtlocation-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - Location component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtmultimedia-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - Multimedia support -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Thu Jul 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.1-1.1 - rebuild (for pulseaudio, bug #1117683) -------------------------------------------------------------------------------- ================================================================================ qt5-qtquick1-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) A declarative language for describing user interfaces in Qt5 -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.1-3 - move qml1plugindump, qmlviewer to -devel - qml1plugindump-qt5 wrapper (since qtchooser can handle it) * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtquickcontrols-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - module with set of QtQuick controls -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtscript-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtScript component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtsensors-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - Sensors component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtserialport-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - SerialPort component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtsvg-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - Support for rendering and displaying SVG -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qttools-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtTool components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qttranslations-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtTranslations module -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 -------------------------------------------------------------------------------- ================================================================================ qt5-qtwebkit-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtWebKit components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 5.3.1-3 - rebuild for ICU 53.1 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtx11extras-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - X11 support library -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtxmlpatterns-5.3.2-1.el6 (FEDORA-EPEL-2014-2732) Qt5 - QtXmlPatterns component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ reposurgeon-3.12-1.el6 (FEDORA-EPEL-2014-2749) SCM Repository Manipulation Tool -------------------------------------------------------------------------------- Update Information: - Explicit svn:ignore patterns aren't recursive to lower directories; cope. - A new 'ignores' command has obtions for translation of ignore files. - The --noignores option has been retired. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Christopher Meng <rpm(a)cicku.me> - 3.12-1 - Update to 3.12 - Explicit svn:ignore patterns aren't recursive to lower directories; cope. - A new 'ignores' command has obtions for translation of ignore files. - The --noignores option has been retired. * Thu Aug 28 2014 Christopher Meng <rpm(a)cicku.me> - 3.11-1 - Update to 3.11 - When converting SVN, ignore explicit .gitignores created by git-svn. * Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1143007 - reposurgeon-3.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1143007 -------------------------------------------------------------------------------- ================================================================================ seren-0.0.20-1.el6 (FEDORA-EPEL-2014-2707) Simple VoIP program to create conferences from the terminal -------------------------------------------------------------------------------- Update Information: Version bump Version bump -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Francesco Frassinelli <fraph24(a)gmail.com> - 0.0.20-1 - Version bump * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 1 2014 Francesco Frassinelli <fraph24(a)gmail.com> - 0.0.19-1 - Version bump * Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.18-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ sks-1.1.5-7.el6 (FEDORA-EPEL-2014-2699) Synchronizing Key Server -------------------------------------------------------------------------------- Update Information: Init script fixes -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 11 2014 Nick Bebout <nb(a)fedoraproject.org> - 1.1.5-7 - Fix systemd files * Thu Sep 11 2014 Nick Bebout <nb(a)fedoraproject.org> - 1.1.5-6 - Add systemd support * Thu Aug 21 2014 Kevin Fenzi <kevin(a)scrye.com> - 1.1.5-5 - Rebuild for rpm bug 1131960 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 15 2014 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.1.5-3 - All supprted (primary/secondary) Fedora architectures have ocaml -------------------------------------------------------------------------------- ================================================================================ soscleaner-0.2.2-7.el6 (FEDORA-EPEL-2014-2678) To clean and filter sensitive data from a standard sosreport -------------------------------------------------------------------------------- Update Information: updating soscleaner to 0.2.2 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Jamie Duncan <jduncan(a)redhat.com> 0.2.2 - ability to scrub arbitrary keywords from lists - #41 - updated move to RedHatGov - #40 - stronger processing for /etc/hosts - #38 - better error announcements when user is not root - #37 - artifact location is configurable - #39 * Sun Jul 20 2014 Jamie Duncan <jduncan(a)redhat.com> 0.2.1 - cleaned up version and help output for binary - #29,#35 - made uuid random instead of time-based - #36 - allow for aritrary file scanning - #28 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141538 - update soscleaner to latest version - 0.2.2-7 https://bugzilla.redhat.com/show_bug.cgi?id=1141538 -------------------------------------------------------------------------------- ================================================================================ v8-3.14.5.10-14.el6 (FEDORA-EPEL-2014-2719) JavaScript Engine -------------------------------------------------------------------------------- Update Information: This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please see the CVE bugs listed below. Changes in this update include: * v8: fix a crash introduced by previous release (Fedor Indutny) * crypto: use domains for any callback-taking method (Chris Dickinson) * http: do not send `0rnrn` in TE HEAD responses (Fedor Indutny) * querystring: fix unescape override (Tristan Berger) * url: Add support for RFC 3490 separators (Mathias Bynens) * v8: backport CVE-2013-6668 * cluster: disconnect should not be synchronous (Sam Roberts) * fs: fix fs.readFileSync fd leak when get RangeError (Jackson Tian) * stream: fix Readable.wrap objectMode falsy values (James Halliday) * timers: fix timers with non-integer delay hanging. (Julien Gilli) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 1:3.14.5.10-14 - backport bugfix that eliminates unused-local-typedefs warning - backport security fix: Fix Hydrogen bounds check elimination (CVE-2013-6668; RHBZ#1086120) - backport fix to segfault caused by the above patch * Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 1:3.14.5.10-13 - rebuild for ICU 53.1 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1:3.14.5.10-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1074737 - CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 https://bugzilla.redhat.com/show_bug.cgi?id=1074737 --------------------------------------------------------------------------------

1 0

EPEL Fedora 7 updates-testing report
by updates＠fedoraproject.org 24 Sep '14

24 Sep '14

The following Fedora EPEL 7 Security updates need testing: Age URL 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2573/pdns-recursor… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2657/python-oauth2… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2724/check-mk-1.2.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2748/nodejs-0.10.3… The following builds have been pushed to Fedora EPEL 7 updates-testing ReviewBoard-2.0.7-1.el7 alpine-2.11-2.el7 android-tools-20130123git98d0789-5.el7 bitmap-1.0.7-4.el7 bleachbit-1.4-1.el7 bugwarrior-0.7.0-4.el7 bzrtools-2.6.0-3.el7 caja-1.8.1-1.el7 caja-actions-1.7.1-4.el7 caja-extensions-1.8.0-2.el7 caja-terminal-0.8.1-7.el7 cf-sorts-mill-goudy-fonts-3.1-7.el7 check-mk-1.2.4p5-1.el7 collectl-3.7.4-1.el7 dSFMT-2.2.3-4.el7 datagrepper-0.5.1-1.el7 davfs2-1.4.7-5.el7 debootstrap-1.0.62-1.el7 dnstop-20140915-1.el7 eom-1.8.0-2.el7 gfalFS-1.5.0-3.el7 ghc-http-date-0.0.4-1.el7 ghc-monad-loops-0.4.2.1-1.el7 ghc-monads-tf-0.1.0.2-1.el7 ghc-stm-chans-3.0.0.2-1.el7 gnuradio-3.7.5-2.el7 hub-1.12.1-2.el7 java-dirq-1.4-5.el7 json_simple-1.1.1-10.el7 kdiff3-0.9.98-2.el7 knot-1.5.3-1.el7 lesstif-0.95.2-8.el7 libapreq2-2.13-11.el7.1 libetpan-1.5-3.el7 librabbitmq-0.5.2-1.el7 lynis-1.6.1-1.el7 marco-1.8.1-1.el7 mintmenu-5.5.8-2.el7 mock-1.1.41-2.el7 mod_evasive-1.10.1-16.el7.1 mod_flvx-0-0.7.20100525git.el7.1 mod_geoip-1.2.7-2.el7.1 mod_log_post-0.1.0-7.el7.1 mod_perl-2.0.8-10.20140624svn1602105.el7 moyogo-molengo-fonts-0.10-9.el7 mozilla-https-everywhere-4.0.1-1.el7 mozo-1.8.0-2.el7 nodejs-0.10.32-1.el7 perl-CGI-SpeedyCGI-2.22-16.el7.1 perl-Crypt-OpenSSL-X509-1.803-4.el7 perl-DBIx-Connector-0.53-2.el7 perl-Parse-CPAN-Packages-Fast-0.08-1.el7 perl-Pod-Markdown-2.002-1.el7 php-horde-Horde-Imap-Client-2.25.1-1.el7 php-pecl-mongo-1.5.7-1.el7 python-XStatic-jquery-ui-1.10.4.1-1.el7 python-behave-1.2.4-3.el7 python-bitlyapi-0.1.1-5.el7 python-caja-1.4.0-8.el7 python-djblets-0.8.10-1.el7 python-mock-1.0.1-5.el7 python-moksha-hub-1.4.2-1.el7 python-stomper-0.2.9-1.el7 python-taskw-0.8.6-1.el7 python-twiggy-0.4.5-3.el7 python-urllib2_kerberos-0.1.6-13.el7 qt5-qtbase-5.3.2-1.el7 qt5-qtconnectivity-5.3.2-1.el7 qt5-qtdeclarative-5.3.2-1.el7 qt5-qtdoc-5.3.2-1.el7 qt5-qtgraphicaleffects-5.3.2-1.el7 qt5-qtimageformats-5.3.2-1.el7 qt5-qtlocation-5.3.2-1.el7 qt5-qtmultimedia-5.3.2-1.el7 qt5-qtquick1-5.3.2-1.el7 qt5-qtquickcontrols-5.3.2-1.el7 qt5-qtscript-5.3.2-1.el7 qt5-qtsensors-5.3.2-1.el7 qt5-qtserialport-5.3.2-1.el7 qt5-qtsvg-5.3.2-1.el7 qt5-qttools-5.3.2-1.el7 qt5-qttranslations-5.3.2-1.el7 qt5-qtwebkit-5.3.2-1.el7 qt5-qtx11extras-5.3.2-1.el7 qt5-qtxmlpatterns-5.3.2-1.el7 reposurgeon-3.12-1.el7 seren-0.0.20-1.el7 sks-1.1.5-7.el7 soscleaner-0.2.2-7.el7 task-2.3.0-2.el7 v8-3.14.5.10-14.el7 vanessa_adt-0.0.9-1.el7 xsel-1.2.0-15.el7 Details about builds: ================================================================================ ReviewBoard-2.0.7-1.el7 (FEDORA-EPEL-2014-2666) Web-based code review tool -------------------------------------------------------------------------------- Update Information: New 2.0.7 release of ReviewBoard https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.7/ -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Stephen Gallagher <sgallagh(a)redhat.com> 2.0.7-1 - Update to Review Board bugfix release 2.0.7 - https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.7/ -------------------------------------------------------------------------------- ================================================================================ alpine-2.11-2.el7 (FEDORA-EPEL-2014-2671) powerful, easy to use console email client -------------------------------------------------------------------------------- Update Information: Provide alpine for epel7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1118477 - Requesting EPEL7 alpine package (RFE) https://bugzilla.redhat.com/show_bug.cgi?id=1118477 -------------------------------------------------------------------------------- ================================================================================ android-tools-20130123git98d0789-5.el7 (FEDORA-EPEL-2014-2695) Android platform tools(adb, fastboot) -------------------------------------------------------------------------------- Update Information: New package android-tools for EPEL7. -------------------------------------------------------------------------------- ================================================================================ bitmap-1.0.7-4.el7 (FEDORA-EPEL-2014-2744) Bitmaps editor and converter utilities for the X Window System -------------------------------------------------------------------------------- Update Information: First EPEL7 version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142687 - Please build an EPEL7 version of bitmap https://bugzilla.redhat.com/show_bug.cgi?id=1142687 -------------------------------------------------------------------------------- ================================================================================ bleachbit-1.4-1.el7 (FEDORA-EPEL-2014-2754) Python utility to free disk space and improve privacy -------------------------------------------------------------------------------- Update Information: Update to 1.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Christopher Meng <rpm(a)cicku.me> - 1.4-1 - Update to 1.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130004 - bleachbit-1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1130004 -------------------------------------------------------------------------------- ================================================================================ bugwarrior-0.7.0-4.el7 (FEDORA-EPEL-2014-2759) Sync github, bitbucket, and trac issues with taskwarrior -------------------------------------------------------------------------------- Update Information: branch for el7 -------------------------------------------------------------------------------- ================================================================================ bzrtools-2.6.0-3.el7 (FEDORA-EPEL-2014-2714) Collection of utilities and plugins for Bazaar-NG -------------------------------------------------------------------------------- Update Information: First EPEL7 Build -------------------------------------------------------------------------------- References: [ 1 ] Bug #1139532 - Please build an EPEL7 version of bzrtools https://bugzilla.redhat.com/show_bug.cgi?id=1139532 -------------------------------------------------------------------------------- ================================================================================ caja-1.8.1-1.el7 (FEDORA-EPEL-2014-2716) File manager for MATE -------------------------------------------------------------------------------- Update Information: - update to 1.8.1 release - remove upstreamed patches - remove non needed obsoletes for epel7 - use '--with-gnome --all-name' for find language -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.8.1-1 - update to 1.8.1 release - remove upstreamed patches - remove non needed obsoletes for epel7 - use '--with-gnome --all-name' for find language -------------------------------------------------------------------------------- ================================================================================ caja-actions-1.7.1-4.el7 (FEDORA-EPEL-2014-2665) Caja extension for customizing the context menu -------------------------------------------------------------------------------- Update Information: -build for epel7 -------------------------------------------------------------------------------- ================================================================================ caja-extensions-1.8.0-2.el7 (FEDORA-EPEL-2014-2752) Set of extensions for caja file manager -------------------------------------------------------------------------------- Update Information: - remove non needed osoletes for epel7 -------------------------------------------------------------------------------- ================================================================================ caja-terminal-0.8.1-7.el7 (FEDORA-EPEL-2014-2681) Terminal embedded in Caja -------------------------------------------------------------------------------- Update Information: - build for epel7 -------------------------------------------------------------------------------- ================================================================================ cf-sorts-mill-goudy-fonts-3.1-7.el7 (FEDORA-EPEL-2014-2739) Goudy Oldstyle and Italic fonts -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- ================================================================================ check-mk-1.2.4p5-1.el7 (FEDORA-EPEL-2014-2724) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information: New upstream release providing many security fixes. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4p5-1 - New upstream release. Fixes CVEs: - CVE-2014-5338 - CVE-2014-5339 - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341) - Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068) - Turn Wato_Legacy_Eval as True as we want to prevent breakages between machines running different Python and/or check-mk releases. This is necessary after the 'ast' move from 'pickle' (that was generating a insecure API call), however the 'ast' module is still not available for RHEL / CentOS 5 machines. The patch is there to avoid miscommunications between different distribution releases. More information is available at: http://mathias-kettner.com/check_mk_werks.php?werk_id=984. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 https://bugzilla.redhat.com/show_bug.cgi?id=1132337 -------------------------------------------------------------------------------- ================================================================================ collectl-3.7.4-1.el7 (FEDORA-EPEL-2014-2763) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information: - update to upstream version 3.7.4 - upstream changelog at http://collectl.sourceforge.net/Releases.html -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Dan Horák <dan[at]danny.cz> - 3.7.4-1 - upgrade to upstream version 3.7.4 (#1140499) * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140499 - collectl-3.7.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1140499 -------------------------------------------------------------------------------- ================================================================================ dSFMT-2.2.3-4.el7 (FEDORA-EPEL-2014-2706) Double precision SIMD-oriented Fast Mersenne Twister -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1108765 - Review Request: dSFMT - Double precision SIMD-oriented Fast Mersenne Twister https://bugzilla.redhat.com/show_bug.cgi?id=1108765 -------------------------------------------------------------------------------- ================================================================================ datagrepper-0.5.1-1.el7 (FEDORA-EPEL-2014-2721) A webapp to query fedmsg history -------------------------------------------------------------------------------- Update Information: Hide charts from the main menu for now. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 9 2014 Ralph Bean <rbean(a)redhat.com> - 0.5.1-1 - Hide charts from users. They are too slow on the full dataset. * Mon Sep 8 2014 Ralph Bean <rbean(a)redhat.com> - 0.5.0-1 - Latest upstream. - New dep on python-pygal. -------------------------------------------------------------------------------- ================================================================================ davfs2-1.4.7-5.el7 (FEDORA-EPEL-2014-2735) A filesystem driver for WebDAV -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ debootstrap-1.0.62-1.el7 (FEDORA-EPEL-2014-2733) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.0.62-1 - new upstream release: + fix warnings caused by change in output of dpkg 1.17.2 + fix reporting of package versions with epoch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1136225 - debootstrap-1.0.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1136225 -------------------------------------------------------------------------------- ================================================================================ dnstop-20140915-1.el7 (FEDORA-EPEL-2014-2756) Displays information about DNS traffic on your network -------------------------------------------------------------------------------- Update Information: Updated to 20140915 with new-gtlds filter support -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Paul Wouters <pwouters(a)redhat.com> - 20140915-1 - Updated to 20140915 with new-gtlds filter support - Updated warning patch (partially merged upstream) - Added usage patch that was missing the new filter name new-gtlds - Enabled hardening as this application takes in network input. -------------------------------------------------------------------------------- ================================================================================ eom-1.8.0-2.el7 (FEDORA-EPEL-2014-2693) Eye of MATE image viewer -------------------------------------------------------------------------------- Update Information: - remove non needed obsoletes for epel7 -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.8.0-2 - remove non needed obsoletes for epel7 -------------------------------------------------------------------------------- ================================================================================ gfalFS-1.5.0-3.el7 (FEDORA-EPEL-2014-2751) Filesystem client based on GFAL 2.0 -------------------------------------------------------------------------------- Update Information: Build of gfalFS for epel7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141127 - Please build an EPEL7 build of gfalFS https://bugzilla.redhat.com/show_bug.cgi?id=1141127 -------------------------------------------------------------------------------- ================================================================================ ghc-http-date-0.0.4-1.el7 (FEDORA-EPEL-2014-2708) HTTP Date parser and formatter -------------------------------------------------------------------------------- Update Information: HTTP date parser and formatter -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135906 - Review Request: ghc-http-date - HTTP Date parser and formatter https://bugzilla.redhat.com/show_bug.cgi?id=1135906 -------------------------------------------------------------------------------- ================================================================================ ghc-monad-loops-0.4.2.1-1.el7 (FEDORA-EPEL-2014-2722) Monadic loops -------------------------------------------------------------------------------- Update Information: Monadic loops -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135874 - Review Request: ghc-monad-loops - Monadic loops https://bugzilla.redhat.com/show_bug.cgi?id=1135874 -------------------------------------------------------------------------------- ================================================================================ ghc-monads-tf-0.1.0.2-1.el7 (FEDORA-EPEL-2014-2685) Monad classes using type families -------------------------------------------------------------------------------- Update Information: Monad classes using type families - http://hackage.haskell.org/package/monads-tf -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135933 - Review Request: ghc-monads-tf - Monad classes using type families https://bugzilla.redhat.com/show_bug.cgi?id=1135933 -------------------------------------------------------------------------------- ================================================================================ ghc-stm-chans-3.0.0.2-1.el7 (FEDORA-EPEL-2014-2729) Additional types of channels for STM -------------------------------------------------------------------------------- Update Information: Additional channel types for STM -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135867 - Review Request: ghc-stm-chans - Additional types of channels for STM https://bugzilla.redhat.com/show_bug.cgi?id=1135867 -------------------------------------------------------------------------------- ================================================================================ gnuradio-3.7.5-2.el7 (FEDORA-EPEL-2014-2755) Software defined radio framework -------------------------------------------------------------------------------- Update Information: This is an update fixing several bugs. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.7.5-2 - Added PyOpenGL requirement Resolves: rhbz#1049770 * Mon Sep 1 2014 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.7.5-1 - New version Resolves: rhbz#1135814 -------------------------------------------------------------------------------- ================================================================================ hub-1.12.1-2.el7 (FEDORA-EPEL-2014-2731) A command-line wrapper for git with github shortcuts -------------------------------------------------------------------------------- Update Information: branch for epel7. -------------------------------------------------------------------------------- ================================================================================ java-dirq-1.4-5.el7 (FEDORA-EPEL-2014-2700) Directory based queue -------------------------------------------------------------------------------- Update Information: First EPEL7 build. -------------------------------------------------------------------------------- ================================================================================ json_simple-1.1.1-10.el7 (FEDORA-EPEL-2014-2727) Simple Java toolkit for JSON -------------------------------------------------------------------------------- Update Information: First EPEL7 build -------------------------------------------------------------------------------- ================================================================================ kdiff3-0.9.98-2.el7 (FEDORA-EPEL-2014-2663) Compare + merge 2 or 3 files or directories -------------------------------------------------------------------------------- Update Information: see http://kdiff3.sourceforge.net -------------------------------------------------------------------------------- ================================================================================ knot-1.5.3-1.el7 (FEDORA-EPEL-2014-2720) An authoritative DNS daemon -------------------------------------------------------------------------------- Update Information: New upstream release (1.5.3): - fix crash on specific incoming IXFR message - fix rare synchronization error during server reload - fix crash in reverse record synthesis module on DNSSEC signed zones - fix message ID and opcode for AXFR-style IXFR responses - fix sending of large responses to remote control commands -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.5.3-1 - new upstream release: + fix crash on specific incoming IXFR message + fix rare synchronization error during server reload + fix crash in reverse record synthesis module on DNSSEC signed zones + fix message ID and opcode for AXFR-style IXFR responses + fix sending of large responses to remote control commands * Mon Sep 8 2014 Jan Vcelak <jvcelak(a)fedoraproject.org> 1.5.2-1 - new upstream release: + CVE-2014-0486: remote crash using crafted DNS message + transfers: do not refuse AXFR answers to IXFR queries + fix storing of hash character '#' in zone file -------------------------------------------------------------------------------- ================================================================================ lesstif-0.95.2-8.el7 (FEDORA-EPEL-2014-2712) OSF/Motif library clone -------------------------------------------------------------------------------- Update Information: New build. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142692 - Please build an EPEL7 version of lesstif https://bugzilla.redhat.com/show_bug.cgi?id=1142692 -------------------------------------------------------------------------------- ================================================================================ libapreq2-2.13-11.el7.1 (FEDORA-EPEL-2014-2703) Apache HTTP request library -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <rcollet(a)redhat.com> - 2.13-11.1 - rebuild for _httpd_mmn value -------------------------------------------------------------------------------- ================================================================================ libetpan-1.5-3.el7 (FEDORA-EPEL-2014-2717) Portable, efficient middle-ware for different kinds of mail access -------------------------------------------------------------------------------- Update Information: Rleaseing libetpan for epel7 too, this is a dependency for claws-mail -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141562 - Please add libetpan to epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1141562 -------------------------------------------------------------------------------- ================================================================================ librabbitmq-0.5.2-1.el7 (FEDORA-EPEL-2014-2764) Client library for AMQP -------------------------------------------------------------------------------- Update Information: Changes since v0.5.1 (a.k.a., v0.5.2) - Autoconf: check for htonll as declaration in a header file - SSL: correctly report hostname verification errors. - Build: disable OpenSSL deprecation warnings on OSX - Lib: include platform, version and copyright in AMQP handshake - Examples: print message body in amqp[s]_listen[q] examples - Tools: Add flag to set prefetch for amqp-consume tool -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Remi Collet <remi(a)fedoraproject.org> - 0.5.2-1 - update to 0.5.2 -------------------------------------------------------------------------------- ================================================================================ lynis-1.6.1-1.el7 (FEDORA-EPEL-2014-2743) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: == 1.6.1 == New: - Added --pentest parameter to run a non-privileged scans (e.g. for pentesting) - Show skipped tests in report if they require root and scan is non-privileged Changes: - Improved vulnerable packages test on Debian based systems (apt-check) [PKGS-7392] - Don't show warnings for 'swap' in 4th column fstab file [FILE-6336] - Remove warning for old files in /tmp [FILE-6354] - CheckUpdates function will have better output when no connection is available - Changes to parameters and functions, to allow penetration tests with Lynis - Test for actual files in /etc/modprobe.d before grepping in it - Improved chown command when file permissions are incorrect - Changed output of update test, show when status is unknown - No scanning of symlinked directories (binaries test) - Extended SafePerms function to also check for UID - Several tests will have root-only bit set now - Improved netstat tests on Arch Linux == 1.6.0 == New: - Added several new plugins to default profile - HostID detection for AIX Changes: - Improvements for log file - GetHostID function improved - Improved detection of security repository for Debian based systems [PKGS-7388] - Set default values for update check, to avoid error message on screen - Cleanup for mail section, adding IMAP and POP3 protocols -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Christopher Meng <rpm(a)cicku.me> - 1.6.1-1 - Update to 1.6.1 -------------------------------------------------------------------------------- ================================================================================ marco-1.8.1-1.el7 (FEDORA-EPEL-2014-2709) MATE Desktop window manager -------------------------------------------------------------------------------- Update Information: - update to 1.8.1 release - remove non needed obsoletes for epel7 -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.8.1-1 - update to 1.8.1 release - remove non needed obsoletes for epel7 -------------------------------------------------------------------------------- ================================================================================ mintmenu-5.5.8-2.el7 (FEDORA-EPEL-2014-2687) Advanced Menu for the MATE Desktop -------------------------------------------------------------------------------- Update Information: build for epel7 -------------------------------------------------------------------------------- ================================================================================ mock-1.1.41-2.el7 (FEDORA-EPEL-2014-2760) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: add updated configs for secondary arches -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 msuchy(a)redhat.com - 1.1.41-2 - add updated configs for secondary arches -------------------------------------------------------------------------------- ================================================================================ mod_evasive-1.10.1-16.el7.1 (FEDORA-EPEL-2014-2703) Denial of Service evasion module for Apache -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <rcollet(a)redhat.com> - 1.10.1-16.1 - rebuild for _httpd_mmn value -------------------------------------------------------------------------------- ================================================================================ mod_flvx-0-0.7.20100525git.el7.1 (FEDORA-EPEL-2014-2703) FLV progressive download streaming for the Apache HTTP Server -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <rcollet(a)redhat.com> - 0-0.7.20100525git.1 - rebuild for _httpd_mmn value -------------------------------------------------------------------------------- ================================================================================ mod_geoip-1.2.7-2.el7.1 (FEDORA-EPEL-2014-2703) GeoIP module for the Apache HTTP Server -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <rcollet(a)redhat.com> - 1.2.7-2.1 - rebuild for _httpd_mmn value -------------------------------------------------------------------------------- ================================================================================ mod_log_post-0.1.0-7.el7.1 (FEDORA-EPEL-2014-2703) Module for the Apache web server to log all HTTP POST messages -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <rcollet(a)redhat.com> - 0.1.0-7.1 - rebuild for _httpd_mmn value -------------------------------------------------------------------------------- ================================================================================ mod_perl-2.0.8-10.20140624svn1602105.el7 (FEDORA-EPEL-2014-2703) An embedded Perl interpreter for the Apache HTTP Server -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Jan Kaluza <jkaluza(a)redhat.com> - 2.0.8-10.20140624svn1602105 - update to latest revision of httpd24threading branch to backport latest upstream fixes -------------------------------------------------------------------------------- ================================================================================ moyogo-molengo-fonts-0.10-9.el7 (FEDORA-EPEL-2014-2704) A Latin typeface for documents -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-4.0.1-1.el7 (FEDORA-EPEL-2014-2673) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: 4.0.0 changes - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. 4.0.1 changes - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Russell Golden <niveusluna(a)niveusluna.org> - 4.0.1-1 - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 * Thu Sep 4 2014 Russell Golden <niveusluna(a)niveusluna.org> - 4.0.0-1 - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. * Tue Aug 19 2014 Richard Hughes <richard(a)hughsie.com> - 3.5.3-2 - Add a MetaInfo file for GNOME Software and Apper. -------------------------------------------------------------------------------- ================================================================================ mozo-1.8.0-2.el7 (FEDORA-EPEL-2014-2684) MATE Desktop menu editor -------------------------------------------------------------------------------- Update Information: - remove non needed obsoletes for epel7 -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.8.0-2 - remove non needed obsoletes for epel7 -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.32-1.el7 (FEDORA-EPEL-2014-2748) JavaScript runtime -------------------------------------------------------------------------------- Update Information: This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please see the CVE bugs listed below. Changes in this update include: * v8: fix a crash introduced by previous release (Fedor Indutny) * crypto: use domains for any callback-taking method (Chris Dickinson) * http: do not send `0rnrn` in TE HEAD responses (Fedor Indutny) * querystring: fix unescape override (Tristan Berger) * url: Add support for RFC 3490 separators (Mathias Bynens) * v8: backport CVE-2013-6668 * cluster: disconnect should not be synchronous (Sam Roberts) * fs: fix fs.readFileSync fd leak when get RangeError (Jackson Tian) * stream: fix Readable.wrap objectMode falsy values (James Halliday) * timers: fix timers with non-integer delay hanging. (Julien Gilli) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.32-1 - new upstream release 0.10.32 http://blog.nodejs.org/2014/08/19/node-v0-10-31-stable/ http://blog.nodejs.org/2014/09/16/node-v0-10-32-stable/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1074737 - CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 https://bugzilla.redhat.com/show_bug.cgi?id=1074737 -------------------------------------------------------------------------------- ================================================================================ perl-CGI-SpeedyCGI-2.22-16.el7.1 (FEDORA-EPEL-2014-2703) Speed up perl scripts by running them persistently -------------------------------------------------------------------------------- Update Information: Rebuild of packages initially built against RHEL-7-beta and which require httpd-mmn = 20120211-x86-64. These updated packages correctly require httpd-mmn = 20120211x8664. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <rcollet(a)redhat.com> - 2.22-16.1 - rebuild for _httpd_mmn value -------------------------------------------------------------------------------- ================================================================================ perl-Crypt-OpenSSL-X509-1.803-4.el7 (FEDORA-EPEL-2014-2761) Perl interface to OpenSSL for X509 -------------------------------------------------------------------------------- Update Information: built for el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #996452 - perl-Crypt-OpenSSL-X509-1.804 is available https://bugzilla.redhat.com/show_bug.cgi?id=996452 -------------------------------------------------------------------------------- ================================================================================ perl-DBIx-Connector-0.53-2.el7 (FEDORA-EPEL-2014-2710) Fast, safe DBI connection and transaction management -------------------------------------------------------------------------------- Update Information: perl-DBIx-Connector: initial submission -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141389 - Review Request: perl-DBIx-Connector - Fast, safe DBI connection and transaction management https://bugzilla.redhat.com/show_bug.cgi?id=1141389 -------------------------------------------------------------------------------- ================================================================================ perl-Parse-CPAN-Packages-Fast-0.08-1.el7 (FEDORA-EPEL-2014-2745) Alternative parser for CPAN's package index -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1138924 - Review Request: perl-Parse-CPAN-Packages-Fast - Alternative parser for CPAN's package index https://bugzilla.redhat.com/show_bug.cgi?id=1138924 -------------------------------------------------------------------------------- ================================================================================ perl-Pod-Markdown-2.002-1.el7 (FEDORA-EPEL-2014-2696) Convert POD to Markdown -------------------------------------------------------------------------------- Update Information: This update, to the current upstream release, uses double-asterisk instead of double-underscore for bold Markdown. This allows bold and italic to be nested without confusing parsers. -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 7 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.002-1 - 2.002 bump * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.001-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Apr 24 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.001-1 - 2.001 bump -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Imap-Client-2.25.1-1.el7 (FEDORA-EPEL-2014-2477) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information: Horde_Imap_Client 2.25.1 * [mms] Fix IMAP search results for recent and total messages when it is the only query and the mailbox is not selected. * [mms] Fix client-side message sorting when there are multiple sort criteria and at least one tie in the first sorting criteria. * [mms] Better error handling when attempting to authenticate via IMAP LOGIN command with non-ASCII credentials (Bug #13554). * [mms] Fix sending IMAP APPEND data when the UTF-8 capability is enabled. * [mms] Fix parsing IMAP mailbox list requests when UTF-8 mode is enabled. * [mms] Ensure client sorting tests work reproducibly across systems with varying default locales. Horde_Imap_Client 2.25.0 * [mms] Add support for Gmail-specific WEBALERT response code. * [mms] IMAP/POP3 URL generation split into a more modular library structure. * [mms] Ignore message-specific URL parameters if a search query appears in an IMAP URL. * [mms] Fix encoding/decoding URL elements in IMAP/POP3 URLs. * [mms] Fix setting default port for POP3 URLs. * [mms] Fix client-side reverse sorting. * [mms] Fix client-side sequence sorting, when that is the only sort criteria. * [mms] Use Collator class, if present, to sort string fields on the client side. * [mms] Fix client-side sorting of display addresses. * [mms] Even more improved pseudo-UIDNEXT value for POP3 servers. * [mms] Improved sanity checking so that non-ASCII data is not sent to server in commands where it is not supported. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Remi Collet <remi(a)fedoraproject.org> - 2.25.1-1 - Update to 2.25.1 * Thu Sep 4 2014 Remi Collet <remi(a)fedoraproject.org> - 2.25.0-1 - Update to 2.25.0 - add dependency on php-intl -------------------------------------------------------------------------------- ================================================================================ php-pecl-mongo-1.5.7-1.el7 (FEDORA-EPEL-2014-2730) PHP MongoDB database driver -------------------------------------------------------------------------------- Update Information: Bugs * [PHP-1155] - php_mongo_io_stream_read() should revert to default_socket_timeout if socketTimeoutMS was zero * [PHP-1156] - Use default and block indefinitely for zero and negative connect/socket timeouts, respectively * [PHP-1158] - Driver emits warnings after setting connectTimeoutMS * [PHP-1220] - Client doesn't find Primary after election Improvement * [PHP-1154] - Make connect/read timeouts for blocking and defaults consistent Documentation * [PHP-1157] - Fix documentation for MongoCursor::timeout() default * [PHP-1159] - Document that users may need to copy libsasl.dll to lib path for Windows installs * [PHP-1162] - Update documentation for MongoLog constants * [PHP-1167] - Clarify that $snapshot only prevents duplicates in documentation * [PHP-1216] - Clarify that RS connections to non-canonical hostnames are not kept -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Remi Collet <remi(a)fedoraproject.org> - 1.5.7-1 - Update to 1.5.7 (stable) -------------------------------------------------------------------------------- ================================================================================ python-XStatic-jquery-ui-1.10.4.1-1.el7 (FEDORA-EPEL-2014-2662) jquery-ui (XStatic packaging standard) -------------------------------------------------------------------------------- Update Information: Initial package (rhbz#1135430). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135430 - Review Request: python-XStatic-jquery-ui - jquery-ui (XStatic packaging standard) https://bugzilla.redhat.com/show_bug.cgi?id=1135430 -------------------------------------------------------------------------------- ================================================================================ python-behave-1.2.4-3.el7 (FEDORA-EPEL-2014-2670) Tools for the behavior-driven development, Python style -------------------------------------------------------------------------------- Update Information: Add another patch to fix an Unicode error -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Matěj Cepl <mcepl(a)redhat.com> - 1.2.4-3 - Add another patch to fix an Unicode error (thanks for vbenes for fixing my earlier proposal). -------------------------------------------------------------------------------- ================================================================================ python-bitlyapi-0.1.1-5.el7 (FEDORA-EPEL-2014-2757) A thin python wrapper for the bit.ly REST API -------------------------------------------------------------------------------- Update Information: branch for el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #851745 - Review Request: python-bitlyapi - A thin python wrapper for the bit.ly REST API https://bugzilla.redhat.com/show_bug.cgi?id=851745 -------------------------------------------------------------------------------- ================================================================================ python-caja-1.4.0-8.el7 (FEDORA-EPEL-2014-2701) Python bindings for Caja -------------------------------------------------------------------------------- Update Information: - build for epel7 -------------------------------------------------------------------------------- ================================================================================ python-djblets-0.8.10-1.el7 (FEDORA-EPEL-2014-2666) A collection of useful classes and functions for Django -------------------------------------------------------------------------------- Update Information: New 2.0.7 release of ReviewBoard https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.7/ -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Stephen Gallagher <sgallagh(a)redhat.com> 0.8.10-1 - New upstream release 0.8.10 - https://www.reviewboard.org/docs/releasenotes/djblets/0.8.10/ -------------------------------------------------------------------------------- ================================================================================ python-mock-1.0.1-5.el7 (FEDORA-EPEL-2014-2679) A Python Mocking and Patching Library for Testing -------------------------------------------------------------------------------- Update Information: Rebuild for RHEL-7 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Praveen Kumar <kumarparaveen.nitdgp(a)gmail.com> 1.0.1-5 - Rebuild for RHEL-7 - Disable python3 features * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.0.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 9 2014 Dennis Gilmore <dennis(a)ausil.us> - 1.0.1-3 - rebuild for python 3.4 - disable test suite deps missing -------------------------------------------------------------------------------- References: [ 1 ] Bug #724936 - Review Request: python-mock - A Python Mocking and Patching Library for Testing https://bugzilla.redhat.com/show_bug.cgi?id=724936 -------------------------------------------------------------------------------- ================================================================================ python-moksha-hub-1.4.2-1.el7 (FEDORA-EPEL-2014-2689) Hub components for Moksha -------------------------------------------------------------------------------- Update Information: Support for STOMP-1.1. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean(a)redhat.com> - 1.4.2-1 - Latest upstream with support for STOMP-1.1. -------------------------------------------------------------------------------- ================================================================================ python-stomper-0.2.9-1.el7 (FEDORA-EPEL-2014-2734) A python client implementation of the STOMP protocol -------------------------------------------------------------------------------- Update Information: Support for STOMP-1.1. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.9-1 - New upstream supporting STOMP-1.1. - Use github tarball, https://github.com/oisinmulvihill/stomper/issues/8 - Use python2 macros. * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Feb 27 2014 Luke Macken <lmacken(a)redhat.com> - 0.2.8-1 - Update to 0.2.8 (#949150) - Update the URLs - Modernize the specfile * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141300 - Update to python-stomper-0.2.9 for epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1141300 -------------------------------------------------------------------------------- ================================================================================ python-taskw-0.8.6-1.el7 (FEDORA-EPEL-2014-2702) Python bindings for your taskwarrior database -------------------------------------------------------------------------------- Update Information: branch for el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #848256 - Review Request: python-taskw - Python bindings for your taskwarrior database https://bugzilla.redhat.com/show_bug.cgi?id=848256 -------------------------------------------------------------------------------- ================================================================================ python-twiggy-0.4.5-3.el7 (FEDORA-EPEL-2014-2683) A Pythonic logger -------------------------------------------------------------------------------- Update Information: branch for el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1025292 - Review Request: python-twiggy - A Pythonic logger https://bugzilla.redhat.com/show_bug.cgi?id=1025292 -------------------------------------------------------------------------------- ================================================================================ python-urllib2_kerberos-0.1.6-13.el7 (FEDORA-EPEL-2014-2753) Kerberos over HTTP Negotiate/SPNEGO support for urllib2 -------------------------------------------------------------------------------- Update Information: Fix logging format for Python 2.6 (#1065576) First EPEL7 package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1065576 - Add additional patches to urllib2_kerberos https://bugzilla.redhat.com/show_bug.cgi?id=1065576 -------------------------------------------------------------------------------- ================================================================================ qt5-qtbase-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtBase components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Wed Aug 27 2014 David Tardon <dtardon(a)redhat.com> - 5.3.1-8 - do a normal build with docs * Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 5.3.1-7 - rebuild for ICU 53.1 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtconnectivity-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - Connectivity components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtdeclarative-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtDeclarative component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.1-3 - -qt5 wrappers for qml qmlbundle qmlmin qmlscene * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtdoc-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Main Qt5 Reference Documentation -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 -------------------------------------------------------------------------------- ================================================================================ qt5-qtgraphicaleffects-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtGraphicalEffects component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Jun 17 2014 Jan Grulich <jgrulich(a)redhat.com> - 5.3.1-1 - 5.3.1 * Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 21 2014 Jan Grulich <jgrulich(a)redhat.com> 5.3.0-1 - 5.3.0 -------------------------------------------------------------------------------- ================================================================================ qt5-qtimageformats-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtImageFormats component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtlocation-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - Location component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtmultimedia-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - Multimedia support -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtquick1-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) A declarative language for describing user interfaces in Qt5 -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.1-3 - move qml1plugindump, qmlviewer to -devel - qml1plugindump-qt5 wrapper (since qtchooser can handle it) * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtquickcontrols-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - module with set of QtQuick controls -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtscript-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtScript component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtsensors-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - Sensors component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtserialport-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - SerialPort component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtsvg-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - Support for rendering and displaying SVG -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qttools-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtTool components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qttranslations-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtTranslations module -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 -------------------------------------------------------------------------------- ================================================================================ qt5-qtwebkit-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtWebKit components -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 5.3.1-3 - rebuild for ICU 53.1 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtx11extras-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - X11 support library -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qt5-qtxmlpatterns-5.3.2-1.el7 (FEDORA-EPEL-2014-2726) Qt5 - QtXmlPatterns component -------------------------------------------------------------------------------- Update Information: Qt 5.3.2 bugfix release, see also http://blog.qt.digia.com/blog/2014/09/16/qt-5-3-2-released-with-qt-creator-… -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter(a)fedoraproject.org> 5.3.2-1 - 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ reposurgeon-3.12-1.el7 (FEDORA-EPEL-2014-2674) SCM Repository Manipulation Tool -------------------------------------------------------------------------------- Update Information: - Explicit svn:ignore patterns aren't recursive to lower directories; cope. - A new 'ignores' command has obtions for translation of ignore files. - The --noignores option has been retired. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Christopher Meng <rpm(a)cicku.me> - 3.12-1 - Update to 3.12 - Explicit svn:ignore patterns aren't recursive to lower directories; cope. - A new 'ignores' command has obtions for translation of ignore files. - The --noignores option has been retired. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1143007 - reposurgeon-3.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1143007 -------------------------------------------------------------------------------- ================================================================================ seren-0.0.20-1.el7 (FEDORA-EPEL-2014-2737) Simple VoIP program to create conferences from the terminal -------------------------------------------------------------------------------- Update Information: Version bump -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Francesco Frassinelli <fraph24(a)gmail.com> - 0.0.20-1 - Version bump * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ sks-1.1.5-7.el7 (FEDORA-EPEL-2014-2680) Synchronizing Key Server -------------------------------------------------------------------------------- Update Information: Init script fixes -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 11 2014 Nick Bebout <nb(a)fedoraproject.org> - 1.1.5-7 - Fix systemd files * Thu Sep 11 2014 Nick Bebout <nb(a)fedoraproject.org> - 1.1.5-6 - Add systemd support * Thu Aug 21 2014 Kevin Fenzi <kevin(a)scrye.com> - 1.1.5-5 - Rebuild for rpm bug 1131960 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 15 2014 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.1.5-3 - All supprted (primary/secondary) Fedora architectures have ocaml -------------------------------------------------------------------------------- ================================================================================ soscleaner-0.2.2-7.el7 (FEDORA-EPEL-2014-2664) To clean and filter sensitive data from a standard sosreport -------------------------------------------------------------------------------- Update Information: updating soscleaner to 0.2.2 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Jamie Duncan <jduncan(a)redhat.com> 0.2.2 - ability to scrub arbitrary keywords from lists - #41 - updated move to RedHatGov - #40 - stronger processing for /etc/hosts - #38 - better error announcements when user is not root - #37 - artifact location is configurable - #39 * Sun Jul 20 2014 Jamie Duncan <jduncan(a)redhat.com> 0.2.1 - cleaned up version and help output for binary - #29,#35 - made uuid random instead of time-based - #36 - allow for aritrary file scanning - #28 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141538 - update soscleaner to latest version - 0.2.2-7 https://bugzilla.redhat.com/show_bug.cgi?id=1141538 -------------------------------------------------------------------------------- ================================================================================ task-2.3.0-2.el7 (FEDORA-EPEL-2014-2668) A command-line to do list manager -------------------------------------------------------------------------------- Update Information: branch for el7 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ v8-3.14.5.10-14.el7 (FEDORA-EPEL-2014-2748) JavaScript Engine -------------------------------------------------------------------------------- Update Information: This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please see the CVE bugs listed below. Changes in this update include: * v8: fix a crash introduced by previous release (Fedor Indutny) * crypto: use domains for any callback-taking method (Chris Dickinson) * http: do not send `0rnrn` in TE HEAD responses (Fedor Indutny) * querystring: fix unescape override (Tristan Berger) * url: Add support for RFC 3490 separators (Mathias Bynens) * v8: backport CVE-2013-6668 * cluster: disconnect should not be synchronous (Sam Roberts) * fs: fix fs.readFileSync fd leak when get RangeError (Jackson Tian) * stream: fix Readable.wrap objectMode falsy values (James Halliday) * timers: fix timers with non-integer delay hanging. (Julien Gilli) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 1:3.14.5.10-14 - backport bugfix that eliminates unused-local-typedefs warning - backport security fix: Fix Hydrogen bounds check elimination (CVE-2013-6668; RHBZ#1086120) - backport fix to segfault caused by the above patch * Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 1:3.14.5.10-13 - rebuild for ICU 53.1 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1:3.14.5.10-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1074737 - CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 https://bugzilla.redhat.com/show_bug.cgi?id=1074737 -------------------------------------------------------------------------------- ================================================================================ vanessa_adt-0.0.9-1.el7 (FEDORA-EPEL-2014-2725) Library of Abstract Data Types -------------------------------------------------------------------------------- Update Information: Update to version 0.0.9, prepare for epel7 (bz#1140910). -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Pavel Alexeev <Pahan(a)Hubbitus.info> - 0.0.9-1 - Update to version 0.0.9, prepare for epel7 (bz#1140910). - Some spec cleanup. * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.7-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.7-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.7-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140910 - [RFE] Upgrade vanessa_adt to latest version (0.0.9) https://bugzilla.redhat.com/show_bug.cgi?id=1140910 -------------------------------------------------------------------------------- ================================================================================ xsel-1.2.0-15.el7 (FEDORA-EPEL-2014-2740) Command line clipboard and X selection tool -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142328 - RFE: Please branch for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1142328 --------------------------------------------------------------------------------

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 24 Sep '14

24 Sep '14

The following Fedora EPEL 5 Security updates need testing: Age URL 885 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 339 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1… 104 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26… 94 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1696/perl-Email-Ad… 88 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1747/mediawiki119-… 47 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2153/drupal6-6.33-… 47 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2150/drupal7-7.31-… 17 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2424/389-ds-base-1… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2558/qmmp-0.2.3-3.… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2560/pdns-recursor… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1.2.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2694/TeXmacs-1.0.7… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2686/putty-0.63-3.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2728/phpMyAdmin4-4… The following builds have been pushed to Fedora EPEL 5 updates-testing TeXmacs-1.0.7.2-3.el5 check-mk-1.2.4p5-1.el5 collectl-3.7.4-1.el5 lcmaps-1.6.5-2.el5 mozilla-https-everywhere-4.0.1-1.el5 php53-tcpdf-6.0.091-2.el5 phpMyAdmin4-4.0.10.3-2.el5 putty-0.63-3.el5 python-requests-1.1.0-5.el5 Details about builds: ================================================================================ TeXmacs-1.0.7.2-3.el5 (FEDORA-EPEL-2014-2694) Structured wysiwyg scientific text editor -------------------------------------------------------------------------------- Update Information: CVE-2010-3394 TeXmacs: insecure library loading vulnerability -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Mark Chappell <tremble(a)tremble.org.uk> - 1.0.7.2-3 - Patch for CVE-2010-3394 -------------------------------------------------------------------------------- References: [ 1 ] Bug #638427 - CVE-2010-3394 TeXmacs: insecure library loading vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=638427 -------------------------------------------------------------------------------- ================================================================================ check-mk-1.2.4p5-1.el5 (FEDORA-EPEL-2014-2669) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information: New upstream release providing many security fixes. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4p5-1 - New upstream release. Fixes CVEs: - CVE-2014-5338 - CVE-2014-5339 - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341) - Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068) - Turn Wato_Legacy_Eval as True as we want to prevent breakages between machines running different Python and/or check-mk releases. This is necessary after the 'ast' move from 'pickle' (that was generating a insecure API call), however the 'ast' module is still not available for RHEL / CentOS 5 machines. The patch is there to avoid miscommunications between different distribution releases. More information is available at: http://mathias-kettner.com/check_mk_werks.php?werk_id=984. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 https://bugzilla.redhat.com/show_bug.cgi?id=1132337 -------------------------------------------------------------------------------- ================================================================================ collectl-3.7.4-1.el5 (FEDORA-EPEL-2014-2705) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information: - update to upstream version 3.7.4 - upstream changelog at http://collectl.sourceforge.net/Releases.html -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Dan Horák <dan[at]danny.cz> - 3.7.4-1 - upgrade to upstream version 3.7.4 (#1140499) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140499 - collectl-3.7.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1140499 -------------------------------------------------------------------------------- ================================================================================ lcmaps-1.6.5-2.el5 (FEDORA-EPEL-2014-2746) Grid (X.509) and VOMS credentials to local account mapping service -------------------------------------------------------------------------------- Update Information: Update to upstream version 1.6.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Dennis van Dok <dennisvd(a)nikhef.nl> 1.6.5-2 - Compounded the changelog entries of intermediate versions * Wed Sep 17 2014 Mischa Salle <msalle(a)nikhef.nl> 1.6.5-1 - Do not install very old doc/INSTALL_WITH_WORKSPACE_SERVICE - Install NEWS file - Fix macro expansion for pkgconfig to include only rhel not fedora - Add new interface files, Remove the unused patch - Create empty plugin directory - Do not remove lcmaps_plugin_example related files, as they are not installed -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-4.0.1-1.el5 (FEDORA-EPEL-2014-2741) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: 4.0.0 changes - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. 4.0.1 changes - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Russell Golden <niveusluna(a)niveusluna.org> - 4.0.1-1 - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 * Thu Sep 4 2014 Russell Golden <niveusluna(a)niveusluna.org> - 4.0.0-1 - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. * Tue Aug 19 2014 Richard Hughes <richard(a)hughsie.com> - 3.5.3-2 - Add a MetaInfo file for GNOME Software and Apper. -------------------------------------------------------------------------------- ================================================================================ php53-tcpdf-6.0.091-2.el5 (FEDORA-EPEL-2014-2697) PHP class for generating PDF documents and barcodes -------------------------------------------------------------------------------- Update Information: PHP class for generating PDF documents. * no external libraries are required for the basic functions; * all standard page formats, custom page formats, custom margins and units of measure; * UTF-8 Unicode and Right-To-Left languages; * TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0 fonts; * font subsetting; * methods to publish some XHTML + CSS code, Javascript and Forms; * images, graphic (geometric figures) and transformation methods; * supports JPEG, PNG and SVG images natively, all images supported by GD (GD, GD2, GD2PART, GIF, JPEG, PNG, BMP, XBM, XPM) and all images supported via ImagMagick (http: www.imagemagick.org/www/formats.html) * 1D and 2D barcodes: CODE 39, ANSI MH10.8M-1983, USD-3, 3 of 9, CODE 93, USS-93, Standard 2 of 5, Interleaved 2 of 5, CODE 128 A/B/C, 2 and 5 Digits UPC-Based Extention, EAN 8, EAN 13, UPC-A, UPC-E, MSI, POSTNET, PLANET, RMS4CC (Royal Mail 4-state Customer Code), CBC (Customer Bar Code), KIX (Klant index - Customer index), Intelligent Mail Barcode, Onecode, USPS-B-3200, CODABAR, CODE 11, PHARMACODE, PHARMACODE TWO-TRACKS, Datamatrix ECC200, QR-Code, PDF417; * ICC Color Profiles, Grayscale, RGB, CMYK, Spot Colors and Transparencies; * automatic page header and footer management; * document encryption up to 256 bit and digital signature certifications; * transactions to UNDO commands; * PDF annotations, including links, text and file attachments; * text rendering modes (fill, stroke and clipping); * multiple columns mode; * no-write page regions; * bookmarks and table of content; * text hyphenation; * text stretching and spacing (tracking/kerning); * automatic page break, line break and text alignments including justification; * automatic page numbering and page groups; * move and delete pages; * page compression (requires php-zlib extension); * XOBject templates; * PDF/A-1b (ISO 19005-1:2005) support. By default, TCPDF uses the GD library which is know as slower than ImageMagick solution. You can optionally install php-pecl-imagick; TCPDF will use it. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1121745 - Review Request: php53-tcpdf - PHP class for generating PDF documents https://bugzilla.redhat.com/show_bug.cgi?id=1121745 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin4-4.0.10.3-2.el5 (FEDORA-EPEL-2014-2728) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface (managing databases, tables, fields, relations, indexes, users, permissions), while you still have the ability to directly execute any SQL statement. Features include an intuitive web interface, support for most MySQL features (browse and drop databases, tables, views, fields and indexes, create, copy, drop, rename and alter databases, tables, fields and indexes, maintenance server, databases and tables, with proposals on server configuration, execute, edit and bookmark any SQL-statement, even batch-queries, manage MySQL users and privileges, manage stored procedures and triggers), import data from CSV and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers, creating PDF graphics of your database layout, creating complex queries using Query-by-example (QBE), searching globally in a database or a subset of it, transforming stored data into any format using a set of predefined functions, like displaying BLOB-data as image or download-link and much more... -------------------------------------------------------------------------------- References: [ 1 ] Bug #989660 - CVE-2013-4998 CVE-2013-4999 CVE-2013-5000 phpMyAdmin: Multiple full path disclosure flaws (PMASA-2013-12) https://bugzilla.redhat.com/show_bug.cgi?id=989660 [ 2 ] Bug #989668 - CVE-2013-5003 phpMyAdmin: SQL injection leading to 'control user' role privilege escalation (PMASA-2013-15) https://bugzilla.redhat.com/show_bug.cgi?id=989668 [ 3 ] Bug #1067713 - CVE-2014-1879 phpMyAdmin: XSS in import.php https://bugzilla.redhat.com/show_bug.cgi?id=1067713 [ 4 ] Bug #1117600 - CVE-2014-4348 phpMyAdmin: Self-XSS due to unescaped HTML output in recent/favorite tables navigation https://bugzilla.redhat.com/show_bug.cgi?id=1117600 [ 5 ] Bug #1117601 - CVE-2014-4349 phpMyAdmin: Self-XSS due to unescaped HTML output in navigation items hiding feature https://bugzilla.redhat.com/show_bug.cgi?id=1117601 [ 6 ] Bug #1130865 - CVE-2014-5273 phpMyAdmin: multiple cross-site scripting issues (PMASA-2014-8) https://bugzilla.redhat.com/show_bug.cgi?id=1130865 [ 7 ] Bug #1141635 - CVE-2014-6300 phpMyAdmin: XSS flaw possibly leading to root account creation (PMASA-2014-10) https://bugzilla.redhat.com/show_bug.cgi?id=1141635 -------------------------------------------------------------------------------- ================================================================================ putty-0.63-3.el5 (FEDORA-EPEL-2014-2686) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information: Various bug fixes and security updates Including CVE-2013-4852 Integer overflow, leading to heap-based buffer overflow during SSH handshake CVE-2011-4607 keyboard-interactive replies are not wiped from memory after authentication -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.63-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.63-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Aug 12 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.63-1 - New version Resolves: rhbz#995610 - Dropped perms, CVE-2013-4852, CVE-2013-4206, CVE-2013-4207, CVE-2013-4208 patches (all in upstream) * Thu Aug 8 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-7 - Fixed a heap-corrupting buffer underrun bug in the modmul function Resolves: CVE-2013-4206 - Fixed a buffer overflow vulnerability in the calculation of modular inverses when verifying a DSA signature Resolves: CVE-2013-4207 - Fixed problem when private keys are left in memory after being used by PuTTY tools Resolves: CVE-2013-4208 * Mon Aug 5 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-6 - Fixed integer overflow Resolves: CVE-2013-4852 - Fixed bogus dates in changelog (best estimated) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.62-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.62-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Sep 26 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-3 - Added missing ImageMagick BuildRequires * Wed Sep 19 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-2 - Generated icon from sources * Tue Aug 7 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 0.62-1 - New version * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.60-9.20100910svn - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 6 2011 Adam Jackson <ajax(a)redhat.com> - 0.60-8.20100910svn - Rebuild for new libpng * Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.60-7.20100910svn - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild >>>>>>> master -------------------------------------------------------------------------------- References: [ 1 ] Bug #766868 - putty: keyboard-interactive replies are not wiped from memory after authentication [epel-5] https://bugzilla.redhat.com/show_bug.cgi?id=766868 [ 2 ] Bug #766869 - putty: keyboard-interactive replies are not wiped from memory after authentication [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=766869 [ 3 ] Bug #993034 - CVE-2013-4852 putty: Integer overflow, leading to heap-based buffer overflow during SSH handshake [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=993034 -------------------------------------------------------------------------------- ================================================================================ python-requests-1.1.0-5.el5 (FEDORA-EPEL-2014-2723) HTTP library, written in Python, for human beings -------------------------------------------------------------------------------- Update Information: Initial EL5 build --------------------------------------------------------------------------------

1 0

EPEL NEVR too high Problem with 2 packages in -5 i386
by Stephen John Smoogen 24 Sep '14

24 Sep '14

[I hope this subject is clear on what the problem is] The following packages agg i386 2.5-9.el5 agg-devel i386 2.5-9.el5 fribidi i386 0.19.2-2.el5 fribidi-devel i386 0.19.2-2.el5 are newer than what is in RHEL-5.10 and will cause EPEL to update EL-5. These seem to be the only packages that do this. -- Stephen J Smoogen.

2 3

EPEL Packages in -6 which supercede RHEL-6 packages
by Stephen John Smoogen 24 Sep '14

24 Sep '14

The following packages are in EPEL-6 and replace RHEL-6 packages. They will need to be dealt with ibus-table-chinese-cangjie replacing ibus-table-cangjie.noarch 1.2.0.20100210-1.el6 ibus-table-chinese-erbi replacing ibus-table-erbi.noarch 1.2.0.20090901-8.el6 ibus-table-chinese-scj replacing ibus-table-cangjie.noarch 1.2.0.20100210-1.el6 ibus-table-chinese-wubi-haifeng replacing ibus-table-wubi.noarch 1.2.0.20090715-8.el6 ibus-table-chinese-wubi-jidian replacing ibus-table-wubi.noarch 1.2.0.20090715-8.el6 perl-DateTime-Format-DateParse perl-Locale-Maketext-Gettext perl-Parse-RecDescent python-tw-forms I am guessing the ibus items need a 'conflicts' or something in them. The perl and python packages will need a removal and packages depending on them rebuilt. -- Stephen J Smoogen.

1 0

EPEL Update policy for unstable software
by Milan Bouchet-Valat 20 Sep '14

20 Sep '14

Hi! I've just packaged the Julia language for technical computing for Fedora, and I thought it would be very useful to add it to EPEL7, since a large share of the user base is in academia, on RHEL, CentOS or Scientific Linux machines. But Julia is still unstable, and evolving at a rapid pace. Though compatibility is preserved as much as possible, a few breaking changes are introduced in each major version, about twice a year. On the other hand, until 1.0 is reached, it does not make sense to keep a beta version of Julia and maintain it for years: it will soon become completely useless and even misleading for users. So I wonder whether it makes sense to package it for EPEL7, or whether I'd better wait for 1.0 to be out (which may take a couple of years). Or can I keep a package in the testing repo until that point? Thanks for your help

2 2

EPEL Update policy for unstable software
by Milan Bouchet-Valat 20 Sep '14

20 Sep '14

1 0

EPEL Summary of meeting of 2014-09-19
by Stephen John Smoogen 19 Sep '14

19 Sep '14

=========== #epel: EPEL =========== Meeting started by smooge at 16:01:49 UTC. The full logs are available athttp://meetbot.fedoraproject.org/epel/2014-09-19/epel.2014-09-19-16.01.lo… . Meeting summary --------------- * Greetings and roll call (smooge, 16:02:55) * Agenda (smooge, 16:03:40) * Old Business? (smooge, 16:03:55) * New Business? (smooge, 16:04:02) * RHEL-5.11 (smooge, 16:04:18) * EPEL security items for RHEL-5 (smooge, 16:04:35) * website cleanup (smooge, 16:04:48) * other things (smooge, 16:04:54) * Old Business (smooge, 16:05:30) * New Business (smooge, 16:06:30) * ACTION: smooge will put in an infra trac ticket to create an epel trac (smooge, 16:13:41) * RHEL-5.11 (smooge, 16:15:30) * New Business: Wrangling Relases (smooge, 16:26:29) * Open Flood (smooge, 16:59:35) Meeting ended at 17:03:45 UTC. Action Items ------------ * smooge will put in an infra trac ticket to create an epel trac Action Items, by person ----------------------- * smooge * smooge will put in an infra trac ticket to create an epel trac * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * smooge (96) * Evolution (40) * dgilmore (30) * rdieter (14) * maxamillion (13) * bstinson (8) * stahnma (6) * zodbot (5) * orionp (3) * kushal (2) * nirik (2) * gaurdro (2) * Jeff_S (1) * gaurdro__ (1) * evolution (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 19 Sep '14

19 Sep '14

The following Fedora EPEL 6 Security updates need testing: Age URL 880 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 212 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-… 99 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26… 89 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1693/perl-Email-Ad… 41 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2148/drupal6-6.33-… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2561/pdns-recursor… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2634/moodle-2.5.8-… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2655/python-oauth2… The following builds have been pushed to Fedora EPEL 6 updates-testing python-oauth2-1.5.211-7.el6 Details about builds: ================================================================================ python-oauth2-1.5.211-7.el6 (FEDORA-EPEL-2014-2655) Python support for improved oauth -------------------------------------------------------------------------------- Update Information: Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Tom Callaway <spot(a)fedoraproject.org> - 1.5.211-7 - Fix CVE-2013-4346 and CVE-2013-4347 (thanks to Philippe Makowski) * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.211-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007746 - CVE-2013-4346 python-oauth2: _check_signature() ignores the nonce value when validating signed urls https://bugzilla.redhat.com/show_bug.cgi?id=1007746 [ 2 ] Bug #1007758 - CVE-2013-4347 python-oauth2: Uses poor PRNG in nonce https://bugzilla.redhat.com/show_bug.cgi?id=1007758 --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel September 2014