The following Fedora EPEL 6 Security updates need testing: Age URL 481 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... 71 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-20.... 24 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10916/ghc-xmonad-co... 14 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11080/python-keysto... 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11101/znc-1.2-0.1.a... 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11100/v8-3.14.5.10-... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11113/zabbix-1.8.17... 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11129/hylafax+-5.5.... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11175/php-symfony2-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-3.7... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11250/Django14-1.4.... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11245/python-virtua... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11194/cacti-0.8.8b-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11183/php-symfony2-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11187/libzrtpcpp-3.... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11222/seamonkey-2.2... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11195/chrony-1.25-3... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11179/libtommath-0....
The following builds have been pushed to Fedora EPEL 6 updates-testing
Django14-1.4.6-1.el6 RBTools-0.5.2-1.el6 ReviewBoard-1.7.13-2.el6 adcli-0.7.3-1.el6 bitlbee-3.2-5.el6 bitlbee-3.2-6.el6 dcap-2.47.8-1.el6 drupal6-views_bulk_operations-1.16-1.el6 drupal7-crumbs-2.0-0.3.beta5.el6 drupal7-markdown-1.2-1.el6 drupal7-tmgmt-1.0-0.5.beta2.el6 fail2ban-0.8.10-2.el6 gimp-paint-studio-2.0-6.el6 mirmon-2.9-1.el6 python-djblets-0.7.17-1.el6 python-virtualenv-1.10.1-1.el6 salt-0.16.3-1.el6 transifex-client-0.9-2.el6 zeroinstall-injector-2.3.3-1.el6
Details about builds:
================================================================================ Django14-1.4.6-1.el6 (FEDORA-EPEL-2013-11250) A high-level Python Web framework -------------------------------------------------------------------------------- Update Information:
This update fixes a potential XSS via is_safe_url -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 14 2013 Matthias Runge mrunge@redhat.com - 1.4.6-1 - security related update (rhbz#997128) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #997128 - Django14: python-django: potential XSS via is_safe_url [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=997128 --------------------------------------------------------------------------------
================================================================================ RBTools-0.5.2-1.el6 (FEDORA-EPEL-2013-11246) Tools for use with ReviewBoard -------------------------------------------------------------------------------- Update Information:
== ANNOUNCEMENT ==
Starting with this release, ReviewBoard will add new sites to the text file /etc/reviewboard/sites when running 'rb-site install'. You can manually add the path to your running site(s) to a file at this location. From now on, the RPM upgrade process will automatically run the 'rb-site upgrade' on any site listed in this file, so you no longer have to!
== Changes ==
=== Djblets ===
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
=== ReviewBoard ===
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
=== RBTools ===
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/ -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Stephen Gallagher sgallagh@redhat.com - 0.5.2-1 - New upstream release 0.5.2 - http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/ * Fri Aug 2 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ ReviewBoard-1.7.13-2.el6 (FEDORA-EPEL-2013-11246) Web-based code review tool -------------------------------------------------------------------------------- Update Information:
== ANNOUNCEMENT ==
Starting with this release, ReviewBoard will add new sites to the text file /etc/reviewboard/sites when running 'rb-site install'. You can manually add the path to your running site(s) to a file at this location. From now on, the RPM upgrade process will automatically run the 'rb-site upgrade' on any site listed in this file, so you no longer have to!
== Changes ==
=== Djblets ===
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
=== ReviewBoard ===
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
=== RBTools ===
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/ -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Stephen Gallagher sgallagh@redhat.com - 1.7.13-2 - New upstream release 1.7.13 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/ - Starting with this release, sites will automatically be upgraded if they are listed in the text file /etc/reviewboard/sites by the path to their site, one per line. --------------------------------------------------------------------------------
================================================================================ adcli-0.7.3-1.el6 (FEDORA-EPEL-2013-11230) Active Directory enrollment -------------------------------------------------------------------------------- Update Information:
Minor bugfix for joining Windows 2003 domain controller -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 7 2013 Stef Walter stefw@redhat.com - 0.7.3-1 - Update to upstream point release 0.7.3 - Don't try to set encryption types on Windows 2003 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.7.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ bitlbee-3.2-5.el6 (FEDORA-EPEL-2013-11244) IRC to other chat networks gateway -------------------------------------------------------------------------------- Update Information:
Fix FTBFS (#992022, new libotr4 on Rawhide) and upgrade to 3.2 -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Matěj Cepl mcepl@redhat.com - 3.2-5 - Add a conditional patch for F>=20 to build with libotr4 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ bitlbee-3.2-6.el6 (FEDORA-EPEL-2013-11236) IRC to other chat networks gateway -------------------------------------------------------------------------------- Update Information:
Listen on IPv6 ports as well, get back NSS crash patch. -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Matěj Cepl mcepl@redhat.com - 3.2-6 - systemd socket should be opened over IPv6 as well (#949303) - return fix for NSS crash (#922447) * Fri Aug 16 2013 Matěj Cepl mcepl@redhat.com - 3.2-5 - Add a conditional patch for F>=20 to build with libotr4 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #949303 - Bitlbee socket not listening on IPv6 https://bugzilla.redhat.com/show_bug.cgi?id=949303 [ 2 ] Bug #922447 - bitlbee crashes on disconnection due to a memory problem https://bugzilla.redhat.com/show_bug.cgi?id=922447 --------------------------------------------------------------------------------
================================================================================ dcap-2.47.8-1.el6 (FEDORA-EPEL-2013-11249) Client Tools for dCache -------------------------------------------------------------------------------- Update Information:
Fixes for large vector requests. -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Mattias Ellert mattias.ellert@fysast.uu.se - 2.47.8-1 - New upstream release - Drop patch dcap-segfault.patch - merged upstream * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.47.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ drupal6-views_bulk_operations-1.16-1.el6 (FEDORA-EPEL-2013-11247) This module augments Views by allowing bulk operations to be executed -------------------------------------------------------------------------------- Update Information:
- Update to upstream 1.16 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1856704 -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Peter Borsa peter.borsa@gmail.com - 1.16-1 - Update to upstream 1.16 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1856704 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #997790 - drupal6-views_bulk_operations-1.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=997790 --------------------------------------------------------------------------------
================================================================================ drupal7-crumbs-2.0-0.3.beta5.el6 (FEDORA-EPEL-2013-11231) The ultimate breadcrumbs module -------------------------------------------------------------------------------- Update Information:
- Update to upstream 2.0-beta5 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2064257 -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Peter Borsa peter.borsa@gmail.com - 2.0-0.3.beta5 - Update to upstream 2.0-beta5 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2064257 * Tue Aug 13 2013 Peter Borsa peter.borsa@gmail.com - 2.0-0.2.beta4 - Update to upstream 2.0-beta4 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2063791 * Thu Aug 8 2013 Peter Borsa peter.borsa@gmail.com - 2.0-0.1.beta1 - Update to upstream 2.0-beta1 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2060015 * Wed Aug 7 2013 Peter Borsa peter.borsa@gmail.com - 1.10-1 - Update to upstream 1.10 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2051987 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #997791 - drupal7-crumbs-2.0-beta5 is available https://bugzilla.redhat.com/show_bug.cgi?id=997791 --------------------------------------------------------------------------------
================================================================================ drupal7-markdown-1.2-1.el6 (FEDORA-EPEL-2013-11237) Provides Markdown filter integration for Drupal input formats. -------------------------------------------------------------------------------- Update Information:
- Update to upstream 1.2 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2065761 -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Peter Borsa peter.borsa@gmail.com - 1.2-1 - Update to upstream 1.2 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2065761 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Feb 13 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #997793 - drupal7-markdown-1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=997793 --------------------------------------------------------------------------------
================================================================================ drupal7-tmgmt-1.0-0.5.beta2.el6 (FEDORA-EPEL-2013-11233) Translation Management Tool -------------------------------------------------------------------------------- Update Information:
- Update to upstream 1.0-beta2 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2066361 -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Peter Borsa peter.borsa@gmail.com - 1.0-0.5.beta2 - Update to upstream 1.0-beta2 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/2066361 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.0-0.4.beta1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #997795 - drupal7-tmgmt-1.0-beta2 is available https://bugzilla.redhat.com/show_bug.cgi?id=997795 --------------------------------------------------------------------------------
================================================================================ fail2ban-0.8.10-2.el6 (FEDORA-EPEL-2013-11243) Ban IPs that make too many password failures -------------------------------------------------------------------------------- Update Information:
Fix hostsdeny permission issue
-------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 16 2013 Orion Poplawski orion@cora.nwra.com - 0.8.10-2 - Add upstream patch to fix hostsdeny permission issue --------------------------------------------------------------------------------
================================================================================ gimp-paint-studio-2.0-6.el6 (FEDORA-EPEL-2013-11229) A collection of tool option presets and brushes for GIMP -------------------------------------------------------------------------------- Update Information:
Gimp Paint Studio has landed. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #989359 - Review Request: gimp-paint-studio - A collection of tool option presets and brushes for GIMP https://bugzilla.redhat.com/show_bug.cgi?id=989359 --------------------------------------------------------------------------------
================================================================================ mirmon-2.9-1.el6 (FEDORA-EPEL-2013-11242) Monitor the status of mirrors -------------------------------------------------------------------------------- Update Information:
New RPM. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #989842 - Review Request: mirmon - Monitor the status of mirrors https://bugzilla.redhat.com/show_bug.cgi?id=989842 --------------------------------------------------------------------------------
================================================================================ python-djblets-0.7.17-1.el6 (FEDORA-EPEL-2013-11246) A collection of useful classes and functions for Django -------------------------------------------------------------------------------- Update Information:
== ANNOUNCEMENT ==
Starting with this release, ReviewBoard will add new sites to the text file /etc/reviewboard/sites when running 'rb-site install'. You can manually add the path to your running site(s) to a file at this location. From now on, the RPM upgrade process will automatically run the 'rb-site upgrade' on any site listed in this file, so you no longer have to!
== Changes ==
=== Djblets ===
http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
=== ReviewBoard ===
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
=== RBTools ===
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.2/ -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Stephen Gallagher sgallagh@redhat.com - 0.7.17-1 - New upstream release 0.7.17 - http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS --------------------------------------------------------------------------------
================================================================================ python-virtualenv-1.10.1-1.el6 (FEDORA-EPEL-2013-11245) Tool to create isolated Python environments -------------------------------------------------------------------------------- Update Information:
From upstream:
* Upgraded pip to v1.4.1 * Upgraded setuptools to v0.9.8
-------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Steve 'Ashcrow' Milner me@stevemilner.org - 1.10.1-1 - Upstream upgraded pip to v1.4.1 - Upstream upgraded setuptools to v0.9.8 (fixes CVE-2013-1633) * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.9.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #994182 - CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism https://bugzilla.redhat.com/show_bug.cgi?id=994182 --------------------------------------------------------------------------------
================================================================================ salt-0.16.3-1.el6 (FEDORA-EPEL-2013-11234) A parallel remote execution system -------------------------------------------------------------------------------- Update Information:
Update to salt-0.16.3 bugfix release -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Andrew Niemantsverdriet andrewniemants@gmail.com - 0.16.3-1 - Update to patch release 0.16.3 * Thu Aug 8 2013 Clint Savage herlo1@gmail.com - 0.16.2-1 - Update to patch release 0.16.2 * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.16.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ transifex-client-0.9-2.el6 (FEDORA-EPEL-2013-11248) Command line tool for Transifex translation management -------------------------------------------------------------------------------- Update Information:
Command line tool for Transifex translation management -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 15 2013 Luis Bazan lbazan@fedoraproject.org - 0.9-2 - add new requirement -------------------------------------------------------------------------------- References:
[ 1 ] Bug #985248 - transifex-client: use system python-backports-ssl_match_hostname https://bugzilla.redhat.com/show_bug.cgi?id=985248 --------------------------------------------------------------------------------
================================================================================ zeroinstall-injector-2.3.3-1.el6 (FEDORA-EPEL-2013-11232) The Zero Install Injector (0launch) -------------------------------------------------------------------------------- Update Information:
2.3.3: http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/7119
- Disable multiarch support on Linux if /lib/ld-linux.so.2 is missing. Otherwise, we try to run 32-bit binaries and get a useless error message. - Trim whitespace inside <arg> elements
2.3.2: http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/7046
- Make "0install run feed.xml" fall back to Python. It was complaining that feed.xml wasn't a selections document. - Added missing --offline option to some commands in the OCaml front-end. - Suppress "Unknown option" error during tab completion. - In --verbose mode, show changes to environment variables.
2.3.1: http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/7038
- Fix mtime check in selections.get_unavailable_selections for native packages. - Always return False for native packages in needs_download if include_packages is False. - When loading selections from a file, convert last-check-mtime attribute to an int (if it is present)
-------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 14 2013 Michel Salim salimma@fedoraproject.org - 2.3.3-1 - Update to 2.3.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #983027 - zeroinstall-injector-2.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=983027 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org