EPEL Fedora 6 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Tue Sep 30 17:39:45 UTC 2014 

The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 891  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
 223  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-2.0.2-4.el6
 110  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26-1.el6
  11  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2655/python-oauth2-1.5.211-7.el6
   6  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2750/libsrtp-1.4.4-10.20101004cvs.el6
   6  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2719/nodejs-0.10.32-1.el6,v8-3.14.5.10-14.el6
   6  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2742/TeXmacs-1.0.7.2-3.el6
   6  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2713/putty-0.63-3.el6
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2850/nginx-1.0.15-7.el6
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2811/nodejs-qs-0.6.6-3.el6
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2821/nodejs-send-0.3.0-4.el6
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2801/seamonkey-2.21-8.ESR_24.8.0.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2969/golang-1.3.2-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2981/check-mk-1.2.4p5-2.el6


The following builds have been pushed to Fedora EPEL 6 updates-testing

    check-mk-1.2.4p5-2.el6
    fntsample-3.2-3.el6
    golang-1.3.2-1.el6
    golang-googlecode-net-0-0.16.hg90e232e2462d.el6
    nfs-ganesha-2.1.0-7.el6
    oflb-asana-math-fonts-0.930-6.el6
    pagul-fonts-1.0-7.el6
    perl-Digest-SHA3-0.22-1.el6
    perl-Excel-Writer-XLSX-0.78-1.el6
    python-drat-0.4.1-1.el6
    python-fedmsg-meta-fedora-infrastructure-0.3.2-1.el6
    salt-2014.1.11-1.el6
    tabish-eeyek-fonts-1.0-6.el6
    wbox-5-8.el6

Details about builds:


================================================================================
 check-mk-1.2.4p5-2.el6 (FEDORA-EPEL-2014-2981)
 A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:

Do not require any other shell than bash since that's the default shell for the Fedora / RHEL distributions
New upstream release providing many security fixes.
New upstream release providing many security fixes.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Sep 30 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p5-2
- Do not require any other shell than bash since that's the default
  shell for the Fedora / RHEL distributions.
* Wed Sep 17 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p5-1
- New upstream release. Fixes CVEs:
  - CVE-2014-5338 
  - CVE-2014-5339
  - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341)
- Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068)
- Turn Wato_Legacy_Eval as True as we want to prevent breakages
  between machines running different Python and/or check-mk releases.
  This is necessary after the 'ast' move from 'pickle' (that was
  generating a insecure API call), however the 'ast' module is still
  not available for RHEL / CentOS 5 machines. The patch is there to 
  avoid miscommunications between different distribution releases. More
  information is available at:
  http://mathias-kettner.com/check_mk_werks.php?werk_id=984.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4
        https://bugzilla.redhat.com/show_bug.cgi?id=1132337
--------------------------------------------------------------------------------


================================================================================
 fntsample-3.2-3.el6 (FEDORA-EPEL-2014-2970)
 A program for making font samples that show Unicode coverage of the font
--------------------------------------------------------------------------------
Update Information:

Backport from f22 branch
--------------------------------------------------------------------------------


================================================================================
 golang-1.3.2-1.el6 (FEDORA-EPEL-2014-2969)
 The Go Programming Language
--------------------------------------------------------------------------------
Update Information:

update to go1.3.2 (bz1147324)
more work to get cgo.a timestamps to line up, due to build-env
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 29 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.3.2-1
- update to go1.3.2 (bz1147324)
* Wed Aug 13 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-22
- more work to get cgo.a timestamps to line up, due to build-env
* Wed Aug 13 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-21
- touch cgo.a regardless
* Wed Aug 13 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-20
- rpm dependency ordering for %post
* Tue Aug 12 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-19
- finally check for a Stale cgo in a %post
* Tue Aug 12 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-18
- explicitly list all the files and directories for the packages trees
* Tue Aug 12 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-17
- explicitly list all the files and directories of the src tree, to preserve timestamps
* Mon Aug 11 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-16
- touch all the built archives to be the same
* Mon Aug 11 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-15
- make golang-src 'noarch' again, since that was not a fix, and takes up more space
* Mon Aug 11 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-14
- update timestamps of source files during %install bz1099206
* Fri Aug  8 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-13
- update timestamps of source during %install bz1099206
* Fri Aug  8 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-12
- set another version constraint on xemacs due to bz1127518
* Wed Aug  6 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-11
- set a version constraint on xemacs due to bz1127518
* Wed Aug  6 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-10
- make the source subpackage arch'ed, instead of noarch
* Tue Jul 15 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-9
- fix the loading of gdb safe-path. bz981356
* Tue Jul  8 2014 Vincent Batts <vbatts at fedoraproject.org> - 1.2.2-8
- `go install std` requires gcc, to build cgo. bz1105901, bz1101508
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1147324 - CVE-2014-7189 golang: TLS client authentication issue fixed in version 1.3.2
        https://bugzilla.redhat.com/show_bug.cgi?id=1147324
--------------------------------------------------------------------------------


================================================================================
 golang-googlecode-net-0-0.16.hg90e232e2462d.el6 (FEDORA-EPEL-2014-2995)
 Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:

Resolves: rhbz#1147193 - update to latest upstream revision
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 29 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 0-0.16.hg90e232e2462d
- Resolves: rhbz#1147193 - update to latest upstream revision 
  90e232e2462dedc03bf3c93358da62d54d55dfb6
- don't redefine gopath, don't own dirs owned by golang
- use golang >= 1.2.1-3 for golang specific rpm macros
- preserve timestamps of copied files
- br stuff from golang-googlecode-text
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1147193 - update to at least version ad01a6fcc8a19d3a4478c836895ffe883bd2ceab
        https://bugzilla.redhat.com/show_bug.cgi?id=1147193
--------------------------------------------------------------------------------


================================================================================
 nfs-ganesha-2.1.0-7.el6 (FEDORA-EPEL-2014-2993)
 Ganesha NFS Server
--------------------------------------------------------------------------------
Update Information:

/etc/sysconfig/nfs-ganesha file added in 2.1, just noticed now
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 29 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com> 2.1.0-7
- install /etc/sysconfig/nfs-ganesha file
* Fri Aug 29 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com>
- Ceph FSAL typo, #1135437
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.1.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 oflb-asana-math-fonts-0.930-6.el6 (FEDORA-EPEL-2014-2984)
 An OpenType font with a MATH table
--------------------------------------------------------------------------------
Update Information:

Initial package
--------------------------------------------------------------------------------


================================================================================
 pagul-fonts-1.0-7.el6 (FEDORA-EPEL-2014-3003)
 Font for Saurashtra script
--------------------------------------------------------------------------------
Update Information:

Initial package
--------------------------------------------------------------------------------


================================================================================
 perl-Digest-SHA3-0.22-1.el6 (FEDORA-EPEL-2014-3014)
 Perl extension for SHA-3
--------------------------------------------------------------------------------
Update Information:

Initial release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1134343 - Review Request: perl-Digest-SHA3 - Perl extension for SHA-3
        https://bugzilla.redhat.com/show_bug.cgi?id=1134343
--------------------------------------------------------------------------------


================================================================================
 perl-Excel-Writer-XLSX-0.78-1.el6 (FEDORA-EPEL-2014-2976)
 Create a new file in the Excel 2007+ XLSX format
--------------------------------------------------------------------------------
Update Information:

Update to 0.78
--------------------------------------------------------------------------------
ChangeLog:

* Tue Sep 30 2014 David Dick <ddick at cpan.org> - 0.78-1
- Update to 0.78
* Thu Aug 28 2014 Jitka Plesnikova <jplesnik at redhat.com> - 0.77-3
- Perl 5.20 rebuild
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.77-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1147432 - perl-Excel-Writer-XLSX-0.78 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1147432
--------------------------------------------------------------------------------


================================================================================
 python-drat-0.4.1-1.el6 (FEDORA-EPEL-2014-3012)
 A reading text analysis tool
--------------------------------------------------------------------------------
Update Information:

Initial package
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1146927 - Review Request: python-drat - A reading text analysis tool
        https://bugzilla.redhat.com/show_bug.cgi?id=1146927
--------------------------------------------------------------------------------


================================================================================
 python-fedmsg-meta-fedora-infrastructure-0.3.2-1.el6 (FEDORA-EPEL-2014-3009)
 Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:

Handle new pkgdb messages, certain legacy messages, and new bugzilla messages.  git messages now return the full patch via a call to msg2long_form
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 29 2014 Ralph Bean <rbean at redhat.com> - 0.3.2-1
- Latest upstream.
- Handle different types of legacy messages.
- git messages now return the full patch via a call to msg2long_form.
- future-proofing against new types of bugzilla messages.
--------------------------------------------------------------------------------


================================================================================
 salt-2014.1.11-1.el6 (FEDORA-EPEL-2014-2989)
 A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:

Update to bugfix release 2014.1.11
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 29 2014 Erik Johnson <erik at saltstack.com> - 2014.1.11-1
- Update to bugfix release 2014.1.11
--------------------------------------------------------------------------------


================================================================================
 tabish-eeyek-fonts-1.0-6.el6 (FEDORA-EPEL-2014-3002)
 Font for Meetei Mayek script
--------------------------------------------------------------------------------
Update Information:

Initial package
--------------------------------------------------------------------------------


================================================================================
 wbox-5-8.el6 (FEDORA-EPEL-2014-3018)
 HTTP testing tool and configuration-less HTTP server
--------------------------------------------------------------------------------
Update Information:

Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------

More information about the epel-devel mailing list