EPEL Fedora 6 updates-testing report

Mon May 19 19:26:07 UTC 2014

The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 757  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
 104  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6.4-1.el6
  89  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-2.0.2-4.el6
  49  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1011/php-ZendFramework-1.12.5-1.el6
   7  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1379/seamonkey-2.21-6.ESR_24.5.0.el6
   7  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1388/botan-1.8.14-2.el6
   3  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1414/gajim-0.14.4-4.el6
   2  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1434/Django14-1.4.13-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1452/php-ZendFramework2-2.2.7-1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

    RBTools-0.6-2.el6
    cmdtest-0.12-1.el6
    php-ZendFramework2-2.2.7-1.el6
    php-horde-Horde-Icalendar-2.0.8-1.el6
    php-horde-Horde-Service-Weather-2.1.0-1.el6
    php-horde-Horde-View-2.0.4-1.el6
    php-horde-horde-5.1.6-3.el6
    php-horde-imp-6.1.7-2.el6
    php-horde-ingo-3.1.4-2.el6
    php-horde-kronolith-4.1.5-2.el6
    php-horde-nag-4.1.4-3.el6
    php-horde-turba-4.1.4-2.el6
    rlwrap-0.41-1.el6
    rubygem-mizuho-0.9.20-4.el6
    tito-0.5.5-1.el6
    vsqlite++-0.3.13-2.el6

Details about builds:

================================================================================
 RBTools-0.6-2.el6 (FEDORA-EPEL-2014-1455)
 Tools for use with ReviewBoard
--------------------------------------------------------------------------------
Update Information:

commit 86475179c6ec5450c3039c7b1296c0b780e2e705
Author: Stephen Gallagher <sgallagh at redhat.com>
Date:   Wed May 14 12:35:31 2014 -0400

    Properly generate parent diffs in git

    The old behavior was to only populate the 'parent_base' attribute
    if the 'base' of the review range did not show up with
    git branch -r --contains <base>

    This fails for many common environments (such as having pushed to
    your private github repository prior to posting the review).
    Presumably, the assumption that was made is that if the base is
    present on a remote branch, it must be already available to
    Review Board. With distributed version-control systems, this is
    not a safe assumption to make.

    With this change, we will always look up the merge base and
    compare it to the review base. If they are different, we will pass
    along the parent_base so that the parent diff can be generated
    correctly.

commit 8a0e94a64e0716f6f91ce835a50f59b62c3b1da1
Author: Georgy Dyuldin <g.dyuldin at gmail.com>
Date:   Fri Apr 25 13:26:33 2014 -0700

    Switch to fuzzy search in setup-repo to match repository path.

    Sometimes repository path on reviewboard server and on local copy of repository
    may contains slight difference (trailing slash, user credentials, etc.) Now rbt
    setup-repo offers repository with closest path to local path.

    Testing done: Ran unit tests.

    Reviewed at https://reviews.reviewboard.org/r/5724/

commit df33dac0b489db80c5a51705550bf53146c1d57b
Author: David Trowbridge <trowbrds at gmail.com>
Date:   Fri Apr 25 13:25:25 2014 -0700

    Fix perforce options access.

    Not all rbt commands add the perforce command-line options, but the p4client
    was accessing them as if they did. Trivial fix.

commit 1cb1c32304569ca96620f76c262e029544990047
Author: David Trowbridge <trowbrds at gmail.com>
Date:   Tue Apr 22 16:17:11 2014 -0700

    Fix -I with svn repositories.

    The line that added the files to the diff command line was indented four spaces
    too many, which made it only work if the code happened to drop into that part
    of the conditional.

    Testing done:
    Posted a change to an SVN working directory for just a single file.

    Reviewed at https://reviews.reviewboard.org/r/5726/
--------------------------------------------------------------------------------
ChangeLog:

* Mon May 19 2014 Stephen Gallagher <sgallagh at redhat.com> 0.6-2
- Properly generate parent diffs in git
- Switch to fuzzy search in setup-repo to match repository path
- Fix perforce options access
- Fix -I with svn repositories
--------------------------------------------------------------------------------

================================================================================
 cmdtest-0.12-1.el6 (FEDORA-EPEL-2014-1464)
 Black-box testing for Unix command line tools
--------------------------------------------------------------------------------
Update Information:

version 0.12:
* yarn: Do not fail a test suite if snapshotting `DATADIR` fails.

version 0.11:
For yarn:

* Report number of scenarios skipped due to an ASSUMING step failing.

* Fix the error message for reporting scenarios without THEN steps
  to include the names of those scenarios only, rather than all
  scenarios. Patch by Pete Fotheringham.

* Yarn now sets `$HOME` to a directory in `$DATADIR`, and creates
  that directory. This means test suites can assume `$HOME` exists,
  but don't use the user's real home directory, which is important for
  test environment hygiene.

* New option `--allow-missing-steps` to allow running a test suite
  with some steps missing. The scenarios with missing steps will be
  skipped. Suggested by Pete Fotheringham.

* The `--test` (`-t`) option should now work again. Thank you
  to Kalle Valo for prodding me.

version 0.10:
* Yarn now cleans the environment when it runs shell commands for the
  implementation steps. The PATH variable is kept from the user's
  environment, every other variable is either removed or hardcoded to
  a specific value. More variables can be added explicitly to the test
  environment with the new `--env NAME=VALUE` option. Additionally
  yarn sets the `SRCDIR` environment variable to point at the root of
  the source tree (the directory where yarn was invoked from).

* A new option, `--timings`, has been added to yarn to report how long
  each scenario and each step took.

* Yarn now reports scenarios skipped because of ASSUMING failing.

* Yarn manual page now documents DATADIR and SRCDIR environment
  variables.

--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 14 2014 Michel Salim <salimma at fedoraproject.org> - 0.12-1
- Update to 0.12
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1016194 - cmdtest-0.12 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1016194
--------------------------------------------------------------------------------

================================================================================
 php-ZendFramework2-2.2.7-1.el6 (FEDORA-EPEL-2014-1452)
 Zend Framework 2
--------------------------------------------------------------------------------
Update Information:

## 2.2.7 (2014-04-015)

### SECURITY UPDATES

- **ZF2014-03:** Potential XSS vector in multiple view helpers due to inappropriate HTML attribute escaping. Many view helpers were using the `escapeHtml()` view helper in order to escape HTML attributes. This release patches them to use the `escapeHtmlAttr()` view helper in these situations.  If you use form or navigation view helpers, or "HTML element" view helpers (such as `gravatar()`, `htmlFlash()`, `htmlPage()`, or `htmlQuicktime()`), we recommend upgrading immediately.
--------------------------------------------------------------------------------
ChangeLog:

* Sun May 18 2014 Shawn Iwinski <shawn.iwinski at gmail.com> 2.2.7-1
- Updated to 2.2.7 (security update for ZF2014-03)
--------------------------------------------------------------------------------

================================================================================
 php-horde-Horde-Icalendar-2.0.8-1.el6 (FEDORA-EPEL-2014-1463)
 iCalendar API
--------------------------------------------------------------------------------
Update Information:

Horde_iCalendar 2.0.8
* [jan] Export VTIMEZONE components only once per TZID (Bug #12988).

Horde_View 2.0.4
* [jan] Change Horde_View_Helper_Date#distanceOfTimeInWords() to not round up the distance.
* [jan] Make Horde_View_Helper_Text#truncate() and truncateMiddle() multibyte-safe (Bug #13163).

Horde_Service_Weather 2.1.0
* [mjr] Fix fetching local observation time from Wwo (Bug #13083, maciej.uhlig at us.edu.pl).

--------------------------------------------------------------------------------
ChangeLog:

* Thu May 15 2014 Remi Collet <remi at fedoraproject.org> - 2.0.8-1
- Update to 2.0.8
--------------------------------------------------------------------------------

================================================================================
 php-horde-Horde-Service-Weather-2.1.0-1.el6 (FEDORA-EPEL-2014-1463)
 Horde Weather Provider
--------------------------------------------------------------------------------
Update Information:

Horde_iCalendar 2.0.8
* [jan] Export VTIMEZONE components only once per TZID (Bug #12988).

Horde_View 2.0.4
* [jan] Change Horde_View_Helper_Date#distanceOfTimeInWords() to not round up the distance.
* [jan] Make Horde_View_Helper_Text#truncate() and truncateMiddle() multibyte-safe (Bug #13163).

Horde_Service_Weather 2.1.0
* [mjr] Fix fetching local observation time from Wwo (Bug #13083, maciej.uhlig at us.edu.pl).

--------------------------------------------------------------------------------
ChangeLog:

* Mon May 19 2014 Remi Collet <remi at fedoraproject.org> - 2.1.0-1
- Update to 2.1.0
--------------------------------------------------------------------------------

================================================================================
 php-horde-Horde-View-2.0.4-1.el6 (FEDORA-EPEL-2014-1463)
 Horde View API
--------------------------------------------------------------------------------
Update Information:

Horde_iCalendar 2.0.8
* [jan] Export VTIMEZONE components only once per TZID (Bug #12988).

Horde_View 2.0.4
* [jan] Change Horde_View_Helper_Date#distanceOfTimeInWords() to not round up the distance.
* [jan] Make Horde_View_Helper_Text#truncate() and truncateMiddle() multibyte-safe (Bug #13163).

Horde_Service_Weather 2.1.0
* [mjr] Fix fetching local observation time from Wwo (Bug #13083, maciej.uhlig at us.edu.pl).

--------------------------------------------------------------------------------
ChangeLog:

* Thu May 15 2014 Remi Collet <remi at fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------

================================================================================
 php-horde-horde-5.1.6-3.el6 (FEDORA-EPEL-2014-1462)
 Horde Application Framework
--------------------------------------------------------------------------------
Update Information:

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of production-level web applications, notably the Horde Groupware suites.

For more information on Horde or the Horde Groupware suites, visit http://www.horde.org.

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #949038 - Review Request: php-horde-horde - Horde Application Framework
        https://bugzilla.redhat.com/show_bug.cgi?id=949038
--------------------------------------------------------------------------------

================================================================================
 php-horde-imp-6.1.7-2.el6 (FEDORA-EPEL-2014-1454)
 A web based webmail system
--------------------------------------------------------------------------------
Update Information:

IMP, the Internet Mail Program, is one of the most popular and widely deployed open source webmail applications in the world. It allows universal, web-based access to IMAP and POP3 mail servers and provides Ajax, mobile and traditional interfaces with a rich range of features normally found only in desktop email clients.

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1087734 - Review Request: php-horde-imp - A web based webmail system
        https://bugzilla.redhat.com/show_bug.cgi?id=1087734
--------------------------------------------------------------------------------

================================================================================
 php-horde-ingo-3.1.4-2.el6 (FEDORA-EPEL-2014-1456)
 An email filter rules manager
--------------------------------------------------------------------------------
Update Information:

Ingo is an email-filter management application. It is fully internationalized, integrated with Horde and the IMP Webmail client, and supports both server-side (Sieve, Procmail, Maildrop) and client-side (IMAP) message filtering.

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1087737 - Review Request: php-horde-ingo - An email filter rules manager
        https://bugzilla.redhat.com/show_bug.cgi?id=1087737
--------------------------------------------------------------------------------

================================================================================
 php-horde-kronolith-4.1.5-2.el6 (FEDORA-EPEL-2014-1460)
 A web based calendar
--------------------------------------------------------------------------------
Update Information:

Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management (iCalendar/iTip), free/busy management, resource management, alarms, recurring events, and a sophisticated day/week view which handles arbitrary numbers of overlapping events.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1087772 - Review Request: php-horde-kronolith - A web based calendar
        https://bugzilla.redhat.com/show_bug.cgi?id=1087772
--------------------------------------------------------------------------------

================================================================================
 php-horde-nag-4.1.4-3.el6 (FEDORA-EPEL-2014-1461)
 A web based task list manager
--------------------------------------------------------------------------------
Update Information:

Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists (i.e., todo lists). It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight project management.

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1087740 - Review Request: php-horde-nag - A web based task list manager
        https://bugzilla.redhat.com/show_bug.cgi?id=1087740
--------------------------------------------------------------------------------

================================================================================
 php-horde-turba-4.1.4-2.el6 (FEDORA-EPEL-2014-1457)
 A web based address book
--------------------------------------------------------------------------------
Update Information:

Turba is the Horde contact management application. Leveraging the Horde framework to provide seamless integration with IMP and other Horde applications, it supports storing contacts in SQL, LDAP, Kolab, and IMSP address books.

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1087742 - Review Request: php-horde-turba - A web based address book
        https://bugzilla.redhat.com/show_bug.cgi?id=1087742
--------------------------------------------------------------------------------

================================================================================
 rlwrap-0.41-1.el6 (FEDORA-EPEL-2014-1453)
 Wrapper for GNU readline
--------------------------------------------------------------------------------
Update Information:

Upstream bugfix release, see NEWS file for details
--------------------------------------------------------------------------------
ChangeLog:

* Mon May 19 2014 Michel Salim <salimma at fedoraproject.org> - 0.41-1
- Update to 0.41
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1095872 - rlwrap-0.40 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1095872
--------------------------------------------------------------------------------

================================================================================
 rubygem-mizuho-0.9.20-4.el6 (FEDORA-EPEL-2014-1459)
 Mizuho documentation formatting tool
--------------------------------------------------------------------------------
Update Information:

Real fix for different sqlite gem name in EPEL6
Fix native templated directory (#1072246), fix epel6 dependencies
Newpackage
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1072246 - TEMPLATES_DIR does not point to proper path
        https://bugzilla.redhat.com/show_bug.cgi?id=1072246
--------------------------------------------------------------------------------

================================================================================
 tito-0.5.5-1.el6 (FEDORA-EPEL-2014-1465)
 A tool for managing rpm based git projects
--------------------------------------------------------------------------------
Update Information:

- Fix bugs in git-annex cleanup method (dcleal at redhat.com)
- Remove excess whitespace on EL6 and duplicate SRPM output (dcleal at redhat.com)

Support older versions of git-annex.
Fix a getcwd error in releaser.
Fix silently failing commands.
Allow builders to run on untagged projects if --test is specified.
Added scl builder option.
Cleanup builders/releasers when interrupted.
Removed dep on gitpython.
Added rpmbuild output to error message.

Significant improvements, new builders/releasers, removal of dead code and refactoring. 
Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
Support older versions of git-annex.
Fix a getcwd error in releaser.
Fix silently failing commands.
Allow builders to run on untagged projects if --test is specified.
Added scl builder option.
Cleanup builders/releasers when interrupted.
Removed dep on gitpython.
Added rpmbuild output to error message.

Significant improvements, new builders/releasers, removal of dead code and refactoring. 
Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 16 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.5-1
- Merge pull request #130 from domcleal/git-annex-cleanup (dgoodwin at rm-rf.ca)
- Fix a test issue. (dgoodwin at redhat.com)
- Fix bugs in git-annex cleanup method (dcleal at redhat.com)
- Remove excess whitespace on EL6 and duplicate SRPM output (dcleal at redhat.com)
* Mon May 12 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.4-1
- make version comparison compat with python2 and python3
  (jumanjiman at gmail.com)
* Mon May 12 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.3-1
- avoid syntax error on el5 (jumanjiman at gmail.com)
- Support pre-5.20131213 versions of git-annex for EL6 (dcleal at redhat.com)
- Add version comparison utility (dcleal at redhat.com)
* Fri May  9 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.2-1
- Fix releaser getcwd error. (dgoodwin at redhat.com)
* Fri May  9 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.1-1
- Raise error on failed run_command. (dgoodwin at redhat.com)
- Allow builder to run in test mode on untagged project (dcleal at redhat.com)
- Add 'scl' builder option for software collection name (dcleal at redhat.com)
- added rpmbuild output to an error raised by tito to easier the error's cause
  analysis (artur.krysiak.warszawa at gmail.com)
- propagate docs to docker public registry (jumanjiman at gmail.com)
- spec: remove dependency on GitPython (jumanjiman at gmail.com)
- Update tito.8.asciidoc (james.slagle at gmail.com)
- Cleanup releasers + builders when interrupted (dcleal at redhat.com)
- make run_command_print() compatible with python3 (msuchy at redhat.com)
- remove unused import "commands" (msuchy at redhat.com)
- Change package-specific config message to debug (dcleal at redhat.com)
* Mon Mar 24 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.0-1
- Prep for python3. (jumanjiman at gmail.com)
- Print output live for longer running rpmbuild commands. (dgoodwin at redhat.com)
- Add GitAnnexBuilder, using git-annex to store blobs (dcleal at redhat.com)
- Remove legacy CvsBuilder and CvsReleaser. (dgoodwin at redhat.com)
- Stop writing temp file to load tito.props from past tag.
  (dgoodwin at redhat.com)
- Remove deprecated support for build.py.props config filename.
  (dgoodwin at redhat.com)
- Remove a very old hack for assuming config from Makefiles.
  (dgoodwin at redhat.com)
- Refactor config overriding. (dgoodwin at redhat.com)
- Move taggers to sub-directory. (dgoodwin at redhat.com)
- Move releasers to sub-directory. (dgoodwin at redhat.com)
- Improved docs for [version_template] section of tito.props
  (chris.a.st.pierre at gmail.com)
- allow empty dist tag in functional tests (jumanjiman at gmail.com)
- docs: createrepo is needed for functional tests (jumanjiman at gmail.com)
- provide config for editorconfig plugins (jumanjiman at gmail.com)
- Add more missing documentation to MANIFEST.in. (dgoodwin at redhat.com)
- Assume a default fetch strategy. (dgoodwin at redhat.com)
- Add markdown docs for FetchBuilder instead of manpage. (dgoodwin at redhat.com)
- Fix releasers and respect offline flag. (dgoodwin at redhat.com)
- Support release with fetch builder. (dgoodwin at redhat.com)
- Add support for passing builder args through a releaser.
  (dgoodwin at redhat.com)
- MANIFEST.in: include README.mkd and asciidoc files (code at alan.grosskurth.ca)
- Rename --builder-arg to just --arg in build command. (dgoodwin at redhat.com)
- Fix issue with releaser temp dir. (dgoodwin at redhat.com)
- Refactor to just one config object. (dgoodwin at redhat.com)
- Make external source builder fetch strategy configurable.
  (dgoodwin at redhat.com)
- Fix buildroot using ~/rpmbuild/BUILDROOT. (dgoodwin at redhat.com)
- Refactor builders to allow separate modules. (dgoodwin at redhat.com)
- Restore building of specific tags. (dgoodwin at redhat.com)
- Start building with external sources and no tag. (dgoodwin at redhat.com)
- Allow possibility of building without a pre-existing tag.
  (dgoodwin at redhat.com)
- Print koji/brew task ID and URL during release. (dgoodwin at redhat.com)
--------------------------------------------------------------------------------

================================================================================
 vsqlite++-0.3.13-2.el6 (FEDORA-EPEL-2014-1450)
 Well designed C++ sqlite 3.x wrapper library
--------------------------------------------------------------------------------
Update Information:

Release of vsqlite++ on el6
--------------------------------------------------------------------------------