The following Fedora EPEL 6 Security updates need testing: Age URL 545 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... 59 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61-21... 20 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11703/chicken-4.8.0... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11771/mod_fcgid-2.3... 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11803/dropbear-2013... 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11785/phpMyAdmin-3.... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11865/quassel-0.9.1... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11817/ReviewBoard-1... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11880/GraphicsMagic... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11883/salt-0.17.1-1... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11891/libuv-0.10.18...
The following builds have been pushed to Fedora EPEL 6 updates-testing
R-3.0.2-1.el6 collectl-3.6.9-1.el6 go-bindata-0-0.4.git79847ab.el6 golang-github-coreos-go-systemd-0-0.3.git68bc612.el6 golang-github-gorilla-mux-0-0.9.gite718e93.el6 golang-googlecode-goprotobuf-0-0.7.hg61664b8425f3.el6 libuv-0.10.18-1.el6 nodejs-0.10.21-1.el6 pcp-3.8.5-1.el6 python-sgutils-0.2.1-4.el6
Details about builds:
================================================================================ R-3.0.2-1.el6 (FEDORA-EPEL-2013-11898) A language for data analysis and graphics -------------------------------------------------------------------------------- Update Information:
Update R to 3.0.2. -------------------------------------------------------------------------------- ChangeLog:
* Tue Oct 15 2013 Tom Callaway spot@fedoraproject.org - 3.0.2-1 - update to 3.0.2 * Mon Aug 12 2013 Tom Callaway spot@fedoraproject.org - 3.0.1-4 - add support for unversioned docdir in F20+ - fix compile on arm (thanks Debian, wish you'd upstreamed that patch) * Fri Aug 2 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.0.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1020588 - R and friends need an update https://bugzilla.redhat.com/show_bug.cgi?id=1020588 --------------------------------------------------------------------------------
================================================================================ collectl-3.6.9-1.el6 (FEDORA-EPEL-2013-11900) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information:
- update to upstream version 3.6.9 - update to upstream version 3.6.8 - upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8 - upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8 - upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8 - upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8 - upstream changelog at http://collectl.sourceforge.net/Releases.html
-------------------------------------------------------------------------------- ChangeLog:
* Sat Oct 19 2013 Dan Horák <dan[at]danny.cz> - 3.6.9-1 - upgrade to upstream version 3.6.9 * Fri Oct 18 2013 Dan Horák <dan[at]danny.cz> - 3.6.8-1 - upgrade to upstream version 3.6.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1020247 - collectl-3.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1020247 --------------------------------------------------------------------------------
================================================================================ go-bindata-0-0.4.git79847ab.el6 (FEDORA-EPEL-2013-11890) A small utility which generates Go code from any file -------------------------------------------------------------------------------- Update Information:
initial upload. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1018542 - Review Request: go-bindata - A small utility which generates Go code from any file https://bugzilla.redhat.com/show_bug.cgi?id=1018542 --------------------------------------------------------------------------------
================================================================================ golang-github-coreos-go-systemd-0-0.3.git68bc612.el6 (FEDORA-EPEL-2013-11894) Go bindings to systemd socket activation, journal and D-BUS APIs -------------------------------------------------------------------------------- Update Information:
removed double quotes from Provides. Initial upload. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1021062 - remove double quotes from provides https://bugzilla.redhat.com/show_bug.cgi?id=1021062 [ 2 ] Bug #1018533 - Review Request: golang-github-coreos-go-systemd - Go bindings to systemd socket activation, journal and D-BUS APIs https://bugzilla.redhat.com/show_bug.cgi?id=1018533 --------------------------------------------------------------------------------
================================================================================ golang-github-gorilla-mux-0-0.9.gite718e93.el6 (FEDORA-EPEL-2013-11895) A powerful URL router and dispatcher for golang -------------------------------------------------------------------------------- Update Information:
double quotes removed from Provides and BR. noarch for f19+ and rhel7+, exclusivearch otherwise. no longer noarch, cause no golang for ppc64. pkg archives no longer installed, dep for docker. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1020110 - remove double quotes from provides https://bugzilla.redhat.com/show_bug.cgi?id=1020110 [ 2 ] Bug #1001317 - Review Request: golang-github-gorilla-mux - A powerful URL router and dispatcher for golang https://bugzilla.redhat.com/show_bug.cgi?id=1001317 --------------------------------------------------------------------------------
================================================================================ golang-googlecode-goprotobuf-0-0.7.hg61664b8425f3.el6 (FEDORA-EPEL-2013-11897) Go support for Google protocol buffers -------------------------------------------------------------------------------- Update Information:
removed double quotes from Provides. * Initial build -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1020970 - remove double quotes from provides https://bugzilla.redhat.com/show_bug.cgi?id=1020970 [ 2 ] Bug #1018057 - Review Request: golang-googlecode-goprotobuf - Go support for Google protocol buffers https://bugzilla.redhat.com/show_bug.cgi?id=1018057 --------------------------------------------------------------------------------
================================================================================ libuv-0.10.18-1.el6 (FEDORA-EPEL-2013-11891) Platform layer for node.js -------------------------------------------------------------------------------- Update Information:
This release contains a security fix for the http server implementation, please upgrade as soon as possible. For more information, see http://ur1.ca/fwrj8.
2013.10.18, node.js Version 0.10.21 (Stable)
* crypto: clear errors from verify failure (Timothy J Fontaine)
* dtrace: interpret two byte strings (Dave Pacheco)
* fs: fix fs.truncate() file content zeroing bug (Ben Noordhuis)
* http: provide backpressure for pipeline flood (isaacs)
* tls: fix premature connection termination (Ben Noordhuis)
2013.10.19, libuv Version 0.10.18 (Stable)
* unix: fix uv_spawn() NULL pointer deref on ENOMEM (Ben Noordhuis)
* unix: don't close inherited fds on uv_spawn() fail (Ben Noordhuis)
* unix: revert recent FSEvent changes (Ben Noordhuis)
* unix: fix non-synchronized access in signal.c (Ben Noordhuis) -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 18 2013 T.C. Hollingsworth tchollingsworth@gmail.com - 1:0.10.18-1 - new upstream release 0.10.18 https://github.com/joyent/libuv/blob/v0.10.18/ChangeLog --------------------------------------------------------------------------------
================================================================================ nodejs-0.10.21-1.el6 (FEDORA-EPEL-2013-11891) JavaScript runtime -------------------------------------------------------------------------------- Update Information:
This release contains a security fix for the http server implementation, please upgrade as soon as possible. For more information, see http://ur1.ca/fwrj8.
2013.10.18, node.js Version 0.10.21 (Stable)
* crypto: clear errors from verify failure (Timothy J Fontaine)
* dtrace: interpret two byte strings (Dave Pacheco)
* fs: fix fs.truncate() file content zeroing bug (Ben Noordhuis)
* http: provide backpressure for pipeline flood (isaacs)
* tls: fix premature connection termination (Ben Noordhuis)
2013.10.19, libuv Version 0.10.18 (Stable)
* unix: fix uv_spawn() NULL pointer deref on ENOMEM (Ben Noordhuis)
* unix: don't close inherited fds on uv_spawn() fail (Ben Noordhuis)
* unix: revert recent FSEvent changes (Ben Noordhuis)
* unix: fix non-synchronized access in signal.c (Ben Noordhuis) -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 18 2013 T.C. Hollingsworth tchollingsworth@gmail.com - 0.10.21-1 - new upstream release 0.10.21 http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/ - resolves an undisclosed security vulnerability in the http module --------------------------------------------------------------------------------
================================================================================ pcp-3.8.5-1.el6 (FEDORA-EPEL-2013-11899) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information:
Update to upstream bugfix release. -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 18 2013 Nathan Scott nathans@redhat.com - 3.8.5-1 - Update to latest PCP sources. - Disable pcp-pmda-infiniband sub-package on RHEL5 (BZ 1016368) --------------------------------------------------------------------------------
================================================================================ python-sgutils-0.2.1-4.el6 (FEDORA-EPEL-2013-11901) Python support for sg3_utils -------------------------------------------------------------------------------- Update Information:
fix improper chmod of sgutils.so -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org