The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/telepathy-gabble-0.8.15-1.el6
https://admin.fedoraproject.org/updates/cgit-0.9-1.el6
https://admin.fedoraproject.org/updates/couchdb-1.0.2-1.el6
https://admin.fedoraproject.org/updates/pywebdav-0.9.4.1-1.el6
https://admin.fedoraproject.org/updates/asterisk-1.8.3-1.el6
https://admin.fedoraproject.org/updates/moodle-1.9.11-1.el6
https://admin.fedoraproject.org/updates/perl-Mail-Box-2.097-1.el6
https://admin.fedoraproject.org/updates/clamav-0.97-3.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
cgit-0.9-1.el6
python-pika-0.9.4-1.el6
Details about builds:
================================================================================
cgit-0.9-1.el6 (FEDORA-EPEL-2011-2720)
A fast web interface for git
--------------------------------------------------------------------------------
Update Information:
In addition to closing a DOS vulnerability (thanks to Jim Meyering), this upstream feature
release adds the following enhancements:
* Support for side-by-side diffs
* Support for repo content in "about" view
* Improved integration with gitolite/gitweb
* Support for git notes in commit/log view
* Support for graph in log view (similar to 'git log --graph')
* Improved handling/display of path filters
* Clients can modify diff view parameters
* Support for directory listings in plain view
* Support for remote branches
* Support for range searches in log view (like 'git log master ^stable)
* Support for expansion of environment vars in certain cgitrc options, which can simplify
virtual hosting
The release announcement has a more complete changelog:
http://article.gmane.org/gmane.comp.version-control.git/168496
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 6 2011 Todd Zullinger <tmz(a)pobox.com> - 0.9-1
- Update to 0.9
- Fixes: CVE-2011-1027
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1027
- Generate and install man page and html docs
- Use libcurl-devel on RHEL >= 6
- Include example filter scripts
- Update example cgitrc
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.2.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #680905 - CVE-2011-1027 cgit: invalid hex escape (e.g., %GG) in query triggers
infinite loop
https://bugzilla.redhat.com/show_bug.cgi?id=680905
--------------------------------------------------------------------------------
================================================================================
python-pika-0.9.4-1.el6 (FEDORA-EPEL-2011-2717)
AMQP 0-9-1 client library for Python
--------------------------------------------------------------------------------
Update Information:
Updated python-pika to version 0.9.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 6 2011 Ilia Cheishvili <ilia.cheishvili(a)gmail.com> - 0.9.4-1
- Upgrade to version 0.9.4
--------------------------------------------------------------------------------