The following Fedora EPEL 6 Security updates need testing: Age URL 938 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... 157 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26-... 28 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3434/pylint-1.3.1-1... 24 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3527/asterisk-1.8.3... 18 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3647/konversation-1... 18 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3623/Pound-2.6-2.el... 14 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3748/tnftp-20141031... 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3790/facter-1.6.18-... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3851/python-request... 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3927/drupal7-ckedit... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3962/oath-toolkit-2... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4005/nginx-1.0.15-1... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binutils... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3975/polarssl-1.3.2... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2069/php-channel-ph... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4057/moodle-2.5.9-1...
The following builds have been pushed to Fedora EPEL 6 updates-testing
globus-ftp-client-8.16-1.el6 globus-ftp-control-6.3-1.el6 globus-gass-copy-9.13-1.el6 globus-gatekeeper-10.9-1.el6 globus-gram-audit-4.4-1.el6 globus-gram-client-13.11-1.el6 globus-gram-job-manager-14.25-1.el6 globus-gram-job-manager-slurm-2.5-1.el6 globus-gram-protocol-12.12-2.el6 globus-gridftp-server-7.15-1.el6 globus-gss-assist-10.13-1.el6 globus-gssapi-gsi-11.14-1.el6 globus-io-11.2-1.el6 globus-scheduler-event-generator-5.8-1.el6 globus-simple-ca-4.17-1.el6 globus-xio-4.17-1.el6 jabberd-2.2.14-6.el6 kobo-0.5.0-1.el6 llvm-3.4.2-2.el6 lynis-1.6.4-1.el6 perl-App-Daemon-0.22-1.el6 ssh-installkeys-1.9-1.el6
Details about builds:
================================================================================ globus-ftp-client-8.16-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GridFTP Client Library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 8.16-1 - GT6 update - Drop patch globus-ftp-client-undef-macro.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-ftp-control-6.3-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GridFTP Control Library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 6.3-1 - GT6 update - Drop patches globus-ftp-control-memleak.patch and globus-ftp-control-tests-localhost.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-gass-copy-9.13-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - Globus Gass Copy -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 9.13-1 - GT6 update --------------------------------------------------------------------------------
================================================================================ globus-gatekeeper-10.9-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - Globus Gatekeeper -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 10.9-1 - GT6 update --------------------------------------------------------------------------------
================================================================================ globus-gram-audit-4.4-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GRAM Jobmanager Auditing -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 4.4-1 - GT6 update - Drop patch globus-gram-audit-macro.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-gram-client-13.11-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GRAM Client Library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 13.11-1 - GT6 update - Set GLOBUS_HOSTNAME during make check --------------------------------------------------------------------------------
================================================================================ globus-gram-job-manager-14.25-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GRAM Jobmanager -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 14.25-1 - GT6 update - Drop patch globus-gram-job-manager-personal-gk.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-gram-job-manager-slurm-2.5-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - SLURM Job Manager Support -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 2.5-1 - GT6 update --------------------------------------------------------------------------------
================================================================================ globus-gram-protocol-12.12-2.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GRAM Protocol Library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 14 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 12.12-2 - Set GLOBUS_HOSTNAME during make check --------------------------------------------------------------------------------
================================================================================ globus-gridftp-server-7.15-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 7.15-1 - GT6 update - Drop patch globus-gridftp-server-ipv6log.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-gss-assist-10.13-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GSSAPI Assist library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 10.13-1 - GT6 update - Drop patch globus-gss-assist-doxygen.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-gssapi-gsi-11.14-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 11.14-1 - GT6 update - Drop patch globus-gssapi-gsi-doxygen.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-io-11.2-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - uniform I/O interface -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 11.2-1 - GT6 update - Drop patch globus-io-tests-localhost.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-scheduler-event-generator-5.8-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - Scheduler Event Generator -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 5.8-1 - GT6 update - Drop patch globus-scheduler-event-generator-manpages.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ globus-simple-ca-4.17-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - Simple CA Utility -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 4.17-1 - GT6 update --------------------------------------------------------------------------------
================================================================================ globus-xio-4.17-1.el6 (FEDORA-EPEL-2014-4079) Globus Toolkit - Globus XIO Framework -------------------------------------------------------------------------------- Update Information:
Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests.
-------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 13 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 4.17-1 - GT6 update - Drop patches globus-xio-http-tests-localhost.patch and globus-xio-http-tests-header-name-value.patch (fixed upstream) --------------------------------------------------------------------------------
================================================================================ jabberd-2.2.14-6.el6 (FEDORA-EPEL-2014-4094) OpenSource server implementation of the Jabber protocols -------------------------------------------------------------------------------- Update Information:
applied patch for "jabberd and init script issue" (#1161616) -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 14 2014 Adrian Reber adrian@lisas.de - 2.2.14-6 - applied patch for "jabberd and init script issue" (#1161616) provided by Tomas Lestach - made rpmlint happy (changelog dates) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1161616 - jabberd and init script issue https://bugzilla.redhat.com/show_bug.cgi?id=1161616 --------------------------------------------------------------------------------
================================================================================ kobo-0.5.0-1.el6 (FEDORA-EPEL-2014-4085) Python modules for tools development -------------------------------------------------------------------------------- Update Information:
New upstream version. Bump to new upstream release: 0.4.3 Bump to new upstream release: 0.4.3 Bump to new upstream release: 0.4.3 -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 15 2014 Daniel Mach dmach@redhat.com - 0.5.0-1 - Modify shortcuts.run() to pass all **kwargs to Popen(). (Daniel Mach) - Admin page for kobo.auth.User (Tomas Kopecek) - Unset active menu if no other menu is active (Lubomír Sedlář) - Allow rendering menu for bootstrap's navbar (Lubomír Sedlář) - Handle menu items without text as dividers (Lubomír Sedlář) - allow --force in resubmit-tasks CLI command (Tomas Kopecek) - Django 1.6 db transaction model (Tomas Kopecek) - CLI command for viewing log files (Tomas Kopecek) - Display overall time in task page (Tomas Kopecek) - Fix shortcuts.run() to handle errno.EINTR correctly. (Tomas Tomecek) - Don't count assigned tasks into worker load. (Tomas Tomecek) - Human readable state exceptions. (Tomas Kopecek) - Human readable JSONField. (Tomas Kopecek) * Sun Jun 8 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.4.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Jan 17 2014 Daniel Mach dmach@redhat.com - 0.4.3-1 - Rename User model to properly adjust to older db schema. (Tomas Kopecek) - Fix typo in login template. (Tomas Kopecek) - Switch from simplejson to json. (Daniel Mach) --------------------------------------------------------------------------------
================================================================================ llvm-3.4.2-2.el6 (FEDORA-EPEL-2014-4086) The Low Level Virtual Machine -------------------------------------------------------------------------------- Update Information:
Add support for using devtoolset -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 15 2014 Dave Johansen davejohansen@gmail.com 3.4.2-2 - Adding support for using devtoolset -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1139077 - Automatic selection of devtoolset for clang https://bugzilla.redhat.com/show_bug.cgi?id=1139077 --------------------------------------------------------------------------------
================================================================================ lynis-1.6.4-1.el6 (FEDORA-EPEL-2014-4082) Security and system auditing tool -------------------------------------------------------------------------------- Update Information:
== 1.6.4 (2014-11-04) ==
New: - Boot loader detection for AIX [BOOT-5102] - Detection of getcap and lsvg binary - Added filesystem_ext to report - Detect rootsh
Changes: - Hide errors when RPM database is faulty and show suggestion instead [PKGS-7308] - Allow OpenBSD to gather information on listening network ports [NETW-3012] - Don't trigger warning for Shellshock when doing segfault test [SHLL-6290] - Do not run Apache test on OpenBSD and strip control chars [HTTP-6624] - Extended AIDE test with configuration validation test [FIND-4314] - Improved Shellshock test regarding non-Linux support [SHLL-6290] - Added support for gathering volume groups on AIX [FILE-6311] - Properly parse PAM lines and add them to report [AUTH-9264] - Support for boot loader detection on OpenBSD [BOOT-5159] - Added uptime detection for OpenBSD systems [BOOT-5202] - Support for volume groups on AIX [FILE-6312] - Redirect errors when searching for readlink binary
== * 1.6.3 (2014-10-14) ==
New: - Added tests for Shellshock bash vulnerability [SHLL-6290] - Added test to determine if Snoopy is used [ACCT-9636] - New test for qdaemon configuration file [PRNT-2416] - Test for GRUB boot loader password [BOOT-5122] - New test for qdaemon printer jobs [PRNT-2420] - Added ClamXav test for Mac OS X [MALW-3288] - Gentoo vulnerable packages test [PKGS-7393] - New test for qdaemon status [PRNT-2418] - Gentoo package listing [PKGS-7304] - Running Lynis without root permissions will start non-privileged scan - Systemd service and timer example file added - Added grub2-install to binaries
Changes: - Adjustments so insecure SSL protocols are detected in nginx config [HTTP-6710] - Directories will be skipped when searching for nginx log files [HTTP-6720] - Only gather unique name servers from /etc/resolv.conf [NAME-2704] - Properly detect mod_evasive on Gentoo and others [HTTP-6640] - Improved swap partition detection in /etc/fstab [FILE-6336] - Improvements to kernel detection (e.g. Gentoo) [KRNL-5830] - Test for built-in security options in YUM [PKGS-7386] - Improved boot loader detection for GRUB2 [BOOT-5121] - Split GRUB test into two tests [BOOT-5122] - Added Mac OS uptime check [BOOT-5202] - Improved GetHostID function for systems having only ip binary - Improved testing for symlinked binary directories - Minor adjustments to log output - Renamed dev directory to extras
== * 1.6.2 (2014-09-22) ==
New: - IsVirtualMachine function to check if system is running in VM
VM types: Bochs CPU emulation, IBM z/VM, KVM, Linux Containers, libvirt LXC driver (Linux Containers), Microsoft Virtual PC, OpenVZ, Oracle VM VirtualBox, QEMU, Systemd Namespace container, User-Mode Linux (UML), VMware products, XEN
- Detection for SaltStack configuration management tooling - ShowSymlinkPath function to check path behind a symlink - Check of configuration options of pacman [PKGS-7314] - Support for drill binary to check for Lynis update - FileIsEmpty function to check for empty files - Detect updates for Arch Linux [PKGS-7312] - Add detection for machine ID (systemd) - Added linux_config_file to report - Bash completion script for Lynis - Added detection of ss binary
Changes: - Extended system reboot check, to enable it for most Linux versions[KRNL-5830] - Improved inetd test to avoid false positive with xinetd process [INSE-8002] - Permissions check has been adjusted to allow packaging and pentest mode - Added detection for compressed Linux config file [KRNL-5728] - Added support for compressed Linux config file [KRNL-5730] - Store PID file in home directory of the user, if needed - Added usage of ss to gather listening ports [NETW-3012] - Additional permission added to CUPS check [PRNT-2307] - Extended telnet in inetd test [INSE-8016] - Fix for reading at.deny file [SCHD-7720] - Removed individual warnings [BOOT-5184] - Several improvements for Arch Linux -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 14 2014 Christopher Meng rpm@cicku.me - 1.6.4-1 - Update to 1.6.4 --------------------------------------------------------------------------------
================================================================================ perl-App-Daemon-0.22-1.el6 (FEDORA-EPEL-2014-4093) Start an Application as a Daemon -------------------------------------------------------------------------------- Update Information:
Update to 0.22 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 10 2014 Emmanuel Seyman emmanuel@seyman.fr - 0.22-1 - Update to 0.22 * Fri Aug 29 2014 Jitka Plesnikova jplesnik@redhat.com - 0.18-6 - Perl 5.20 rebuild * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.18-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.18-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Aug 2 2013 Petr Pisar ppisar@redhat.com - 0.18-3 - Perl 5.18 rebuild * Thu Feb 14 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.18-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Nov 2 2012 Iain Arnell iarnell@gmail.com 0.18-1 - update to latest upstream version * Sat Oct 27 2012 Iain Arnell iarnell@gmail.com 0.16-1 - update to latest upstream version * Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.15-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jun 30 2012 Petr Pisar ppisar@redhat.com - 0.15-2 - Perl 5.16 rebuild * Sun Feb 26 2012 Iain Arnell iarnell@gmail.com 0.15-1 - update to latest upstream version * Thu Jan 5 2012 Iain Arnell iarnell@gmail.com 0.14-1 - update to latest upstream version * Sat Jul 23 2011 Iain Arnell iarnell@gmail.com 0.13-2 - Perl mass rebuild * Sat Jul 23 2011 Iain Arnell iarnell@gmail.com 0.13-1 - update to latest upstream version - clean up spec for modern rpmbuild * Tue Jul 19 2011 Petr Sabata contyk@redhat.com - 0.11-4 - Perl mass rebuild * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Dec 15 2010 Marcela Maslanova mmaslano@redhat.com - 0.11-2 - 661697 rebuild for fixing problems with vendorach/lib --------------------------------------------------------------------------------
================================================================================ ssh-installkeys-1.9-1.el6 (FEDORA-EPEL-2014-4095) A tool for installing ssh keys on remote sites -------------------------------------------------------------------------------- Update Information:
Fix permissions of $HOME/.ssh/authorized_keys. -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 14 2014 Christopher Meng rpm@cicku.me - 1.9-1 - Update to 1.9 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org