The following Fedora EPEL 6 Security updates need testing:
Age URL
768
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
115
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6...
100
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolki...
59
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1011/php-ZendFra...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1414/gajim-0.14....
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1452/php-ZendFra...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1471/chicken-4.8...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1477/drupal7-vie...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1475/moodle-2.4....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1522/check-mk-1....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1536/xmlsec1-1.2...
The following builds have been pushed to Fedora EPEL 6 updates-testing
OCE-0.15-3.el6.1
bitlbee-3.2.1-4.el6
freecad-0.13-7.el6
lua-json-1.3.2-2.el6
lua-lunit-0.5-1.el6
php-pear-text-wiki-1.2.1-3.el6
python-django-extensions-1.3.7-1.el6
python-flask-login-0.2.11-1.el6
python-okaara-1.0.34-1.el6
rubygem-narray-0.6.0.9-1.el6
smesh-5.1.2.2-10.svn55.el6
xmlsec1-1.2.19-3.el6
Details about builds:
================================================================================
OCE-0.15-3.el6.1 (FEDORA-EPEL-2014-1524)
OpenCASCADE Community Edition
--------------------------------------------------------------------------------
Update Information:
Initial build of freecad and dependencies for EL6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #458974 - Review Request: OCE - OpenCASCADE Community Edition
https://bugzilla.redhat.com/show_bug.cgi?id=458974
[ 2 ] Bug #459125 - Review Request: freecad - A general purpose 3D CAD modeler
https://bugzilla.redhat.com/show_bug.cgi?id=459125
[ 3 ] Bug #1097368 - Review Request: smesh - OpenCascade based MESH framework
https://bugzilla.redhat.com/show_bug.cgi?id=1097368
[ 4 ] Bug #1102621 - FreeCAD fails to start properly due to undefined symbol
https://bugzilla.redhat.com/show_bug.cgi?id=1102621
--------------------------------------------------------------------------------
================================================================================
bitlbee-3.2.1-4.el6 (FEDORA-EPEL-2014-1542)
IRC to other chat networks gateway
--------------------------------------------------------------------------------
Update Information:
Add server_args to /etc/xinetd.d/bitlbee (#1102062)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2014 Matěj Cepl <mcepl(a)redhat.com> - 3.2.1-4
- Add server_args to /etc/xinetd.d/bitlbee (#1102062)
* Wed Feb 5 2014 Matěj Cepl <mcepl(a)redhat.com> - 3.2.1-3
- Eliminate our own bitlbee.xinetd by patching the upstream one.
* Wed Dec 18 2013 Robert Scheck <robert(a)fedoraproject.org> 3.2.1-2
- Some spec file cleanups and ensure that RHEL 5 builds again
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1102062 - error in /etc/xinetd.d/bitlbee
https://bugzilla.redhat.com/show_bug.cgi?id=1102062
--------------------------------------------------------------------------------
================================================================================
freecad-0.13-7.el6 (FEDORA-EPEL-2014-1524)
A general purpose 3D CAD modeler
--------------------------------------------------------------------------------
Update Information:
Initial build of freecad and dependencies for EL6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #458974 - Review Request: OCE - OpenCASCADE Community Edition
https://bugzilla.redhat.com/show_bug.cgi?id=458974
[ 2 ] Bug #459125 - Review Request: freecad - A general purpose 3D CAD modeler
https://bugzilla.redhat.com/show_bug.cgi?id=459125
[ 3 ] Bug #1097368 - Review Request: smesh - OpenCascade based MESH framework
https://bugzilla.redhat.com/show_bug.cgi?id=1097368
[ 4 ] Bug #1102621 - FreeCAD fails to start properly due to undefined symbol
https://bugzilla.redhat.com/show_bug.cgi?id=1102621
--------------------------------------------------------------------------------
================================================================================
lua-json-1.3.2-2.el6 (FEDORA-EPEL-2014-1539)
JSON Parser/Constructor for Lua
--------------------------------------------------------------------------------
Update Information:
LuaJSON is a customizable JSON decoder/encoder, using LPEG for parsing.
--------------------------------------------------------------------------------
================================================================================
lua-lunit-0.5-1.el6 (FEDORA-EPEL-2014-1537)
Unit testing framework for Lua
--------------------------------------------------------------------------------
Update Information:
Lunit is a unit testing framework for lua, written in lua.
Lunit provides 26 assert functions, and a few misc functions for usage in an easy unit
testing framework.
Lunit comes with a test suite to test itself. The testsuite consists of approximately 710
assertions.
--------------------------------------------------------------------------------
================================================================================
php-pear-text-wiki-1.2.1-3.el6 (FEDORA-EPEL-2014-1540)
Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text
--------------------------------------------------------------------------------
Update Information:
Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text markup. This is the base
engine for all of the Text_Wiki sub-classes
The text transformation is done in 2 steps. The chosen parser uses markup rules to
tokenize the tags and content.
Renderers output the tokens and text into the requested format. The tokenized form
replaces the tags by a protected byte value associated
to an index in an options table. This form shares up to 50 rules by all parsers and
renderers.
The package is intented for versatile transformers as well as converters. Text_Wiki is
delivered with its own parser, which is used by Yawiki or Horde's Wicked and three
basic renderers: XHTML , LaTeX and plain text. Strong sanitizing of XHTML is default.
It is highly configurable and can be easily extended.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1098625 - Review Request: php-pear-text-wiki - Transforms Wiki and BBCode
markup into XHTML, LaTeX or plain text
https://bugzilla.redhat.com/show_bug.cgi?id=1098625
--------------------------------------------------------------------------------
================================================================================
python-django-extensions-1.3.7-1.el6 (FEDORA-EPEL-2014-1534)
Extensions for Django
--------------------------------------------------------------------------------
Update Information:
New version
New version.
New version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2014 Richard Marko <rmarko(a)fedoraproject.org> - 1.3.7-1
- New version
* Thu Oct 24 2013 Richard Marko <rmarko(a)fedoraproject.org> - 1.2.5-1
- New version
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Apr 18 2013 Richard Marko <rmarko(a)fedoraproject.org> - 1.1.1-1
- New version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1001129 - python-django-extensions-1.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1001129
--------------------------------------------------------------------------------
================================================================================
python-flask-login-0.2.11-1.el6 (FEDORA-EPEL-2014-1541)
User session management for Flask
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.11
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Richard Marko <rmarko(a)fedoraproject.org> - 0.2.11-1
- Update to 0.2.11
--------------------------------------------------------------------------------
================================================================================
python-okaara-1.0.34-1.el6 (FEDORA-EPEL-2014-1535)
Python command line utilities
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.34
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 28 2014 Jay Dobies <jason.dobies(a)redhat.com> 1.0.34-1
- Added build requirement on python-mock (jason.dobies(a)redhat.com)
* Wed May 28 2014 Jay Dobies <jason.dobies(a)redhat.com> 1.0.33-1
- fixing a bug where prompting for password in python 2.4 caused an error
(mhrivnak(a)redhat.com)
- Updated project URL (jason.dobies(a)redhat.com)
- Initial addition of extension functionality (jason.dobies(a)redhat.com)
- Added simple validators for the Option validate_func
(jason.dobies(a)redhat.com)
- Added general int parser (jason.dobies(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
rubygem-narray-0.6.0.9-1.el6 (FEDORA-EPEL-2014-1538)
N-dimensional Numerical Array class for Ruby
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.9-1
- new upstream release (#1103230)
* Mon May 26 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-14
- preserve `%{gem_extdir_mri}/gem.build_complete` on Fedora >= 21
- no need to modify gemspec
* Sat May 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-13
- fix gemspec on Fedora >= 21
- remove `%{gem_extdir_mri}/gem_make.out` again
* Sat May 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-12
- one must NOT delete `%{gem_extdir_mri}/gem_make.out`
* Thu May 1 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-11
- rebuilt for libruby.so.2.0() so-name bump
* Sun Dec 22 2013 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-10
- package must not obsolete itself
- improved indention
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1103230 - rubygem-narray-0.6.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1103230
--------------------------------------------------------------------------------
================================================================================
smesh-5.1.2.2-10.svn55.el6 (FEDORA-EPEL-2014-1524)
OpenCascade based MESH framework
--------------------------------------------------------------------------------
Update Information:
Initial build of freecad and dependencies for EL6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #458974 - Review Request: OCE - OpenCASCADE Community Edition
https://bugzilla.redhat.com/show_bug.cgi?id=458974
[ 2 ] Bug #459125 - Review Request: freecad - A general purpose 3D CAD modeler
https://bugzilla.redhat.com/show_bug.cgi?id=459125
[ 3 ] Bug #1097368 - Review Request: smesh - OpenCascade based MESH framework
https://bugzilla.redhat.com/show_bug.cgi?id=1097368
[ 4 ] Bug #1102621 - FreeCAD fails to start properly due to undefined symbol
https://bugzilla.redhat.com/show_bug.cgi?id=1102621
--------------------------------------------------------------------------------
================================================================================
xmlsec1-1.2.19-3.el6 (FEDORA-EPEL-2014-1536)
Library providing support for "XML Signature" and "XML Encryption"
standards
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.19
- fixes CVE-2011-1425 on xslt file creation
- Fix missing links to unversioned shared library files
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.2.19-3
- Fix duplicate documentation (#1001250)
- Turn on verbose build output via V=1 make
- Use %?_isa in explicit package deps
- Fix base package Group tag to "System Environment/Libraries"
- Remove %defattr
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Mar 25 2013 Daniel Veillard <veillard(a)redhat.com> - 1.2.19-1
- Update to upstream release 1.2.19
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.18-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.18-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.18-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Thu May 12 2011 Daniel Veillard <veillard(a)redhat.com> - 1.2.18-1
- Update to upstream release 1.2.18
* Mon Apr 11 2011 Daniel Veillard <veillard(a)redhat.com> - 1.2.17-1
- Update to upstream release 1.2.17
- fixes CVE-2011-1425 on xslt file creation
* Tue Mar 22 2011 Daniel Veillard <veillard(a)redhat.com> - 1.2.16-4
- Fix missing links to unversioned shared library files 541599
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.16-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #692793 - CVE-2011-1425 xmlsec1: arbitrary file creation when verifying
signatures [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=692793
[ 2 ] Bug #752508 - xmlsec1-openssl in EPEL 6 not providing symlink from
libxmlsec1-openssl.so
https://bugzilla.redhat.com/show_bug.cgi?id=752508
--------------------------------------------------------------------------------