[EPEL-devel] Fedora EPEL 6 updates-testing report

Sat Apr 25 23:52:38 UTC 2015

The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 1099  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
 164  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binutils-2.23.51.0.3-1.el6.1
  58  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0864/nodejs-0.10.36-3.el6,libuv-0.10.34-1.el6,v8-3.14.5.10-17.el6
  24  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1501/strongswan-5.3.0-1.el6
  17  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5720/zarafa-7.1.12-1.el6
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5745/yourls-1.7-3.20150410gitabc7d6c.el6
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5742/asterisk-1.8.32.3-1.el6
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5759/tor-0.2.5.12-1.el6
  11  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5801/seamonkey-2.28-5.ESR_31.6.0.el6
  11  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5690/php-pecl-zendopcache-7.0.5-1.el6
   8  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5859/cherokee-1.2.103-6.el6
   8  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5836/mod_proxy_fcgi-2.4.10-1.20150415gitd45a11f.el6
   3  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5901/dpkg-1.16.16-2.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5964/ikiwiki-3.20150329-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5933/wordpress-4.1.3-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5985/python-crypto2.1-2.1.0-4.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

    elk-3.0.18-10.el6
    etckeeper-1.18.1-2.el6
    fedfind-1.1.4-1.el6
    git-review-1.24-5.el6
    golang-github-matttproud-golang_protobuf_extensions-0-0.3.gitfc2b8d3.el6
    golang-github-prometheus-client_golang-0.4.0-1.el6
    ikiwiki-3.20150329-1.el6
    libmediainfo-0.7.73-2.el6
    libxc-2.1.2-3.el6
    libzen-0.4.31-2.el6
    mediainfo-0.7.73-2.el6
    mimedefang-2.78-1.el6
    python-bloom-0.5.20-1.el6
    python-crypto2.1-2.1.0-4.el6
    python-fedmsg-meta-fedora-infrastructure-0.5.1-1.el6
    root-5.34.30-1.el6
    testdisk-7.0-2.el6
    uwsgi-2.0.9-7.el6
    wordpress-4.1.3-1.el6

Details about builds:

================================================================================
 elk-3.0.18-10.el6 (FEDORA-EPEL-2015-5974)
 FP-LAPW Code
--------------------------------------------------------------------------------
Update Information:

elk-3.0.18
elk-3.0.4
elk-3.0.4
elk-3.0.4
elk-3.0.4
--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 24 2015 Marcin Dulak <Marcin.Dulak at gmail.com> - 3.0.18-10
- upstream update
* Fri Feb 13 2015 Marcin Dulak <Marcin.Dulak at gmail.com> - 3.0.4-10
- upstream update
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1192342 - elk-3.0.4 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1192342
  [ 2 ] Bug #1214710 - elk-3.0.18 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1214710
--------------------------------------------------------------------------------

================================================================================
 etckeeper-1.18.1-2.el6 (FEDORA-EPEL-2015-6002)
 Store /etc in a SCM system (git, mercurial, bzr or darcs)
--------------------------------------------------------------------------------
Update Information:

Package fix: Properly generate HTML from markdown.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 Thomas Moschny <thomas.moschny at gmx.de> - 1.18.1-2
- Fix markdown generation (rhbz#1213776).
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1213776 - README.html is junk
        https://bugzilla.redhat.com/show_bug.cgi?id=1213776
--------------------------------------------------------------------------------

================================================================================
 fedfind-1.1.4-1.el6 (FEDORA-EPEL-2015-5999)
 Fedora Finder finds Fedora
--------------------------------------------------------------------------------
Update Information:

This update introduces fedfind to the official Fedora repositories. fedfind is a tool for finding Fedora images. See https://www.happyassassin.net/fedfind
--------------------------------------------------------------------------------

================================================================================
 git-review-1.24-5.el6 (FEDORA-EPEL-2015-5988)
 A Git helper for integration with Gerrit
--------------------------------------------------------------------------------
Update Information:

This updates adds a missing dependency on python-setuptools, necessary for seamless use in minimal environments.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 24 2015 Pete Zaitcev <zaitcev at redhat.com> - 1.24-5
- Add runtime requirement for setuptools to provide pkg_resources (#1214040)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1214040 - Package git-review with broken deps on epel6
        https://bugzilla.redhat.com/show_bug.cgi?id=1214040
--------------------------------------------------------------------------------

================================================================================
 golang-github-matttproud-golang_protobuf_extensions-0-0.3.gitfc2b8d3.el6 (FEDORA-EPEL-2015-5968)
 Support for streaming Protocol Buffer messages for the Go language (golang)
--------------------------------------------------------------------------------
Update Information:

Bump to upstream fc2b8d3a73c4867e51861bbdd5ae3c1f0869dd6a
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 jchaloup <jchaloup at redhat.com> - 0-0.3.gitfc2b8d3
- Bump to upstream fc2b8d3a73c4867e51861bbdd5ae3c1f0869dd6a
  resolves: #1214797
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1214797 - Tracker for golang-github-matttproud-golang_protobuf_extensions
        https://bugzilla.redhat.com/show_bug.cgi?id=1214797
--------------------------------------------------------------------------------

================================================================================
 golang-github-prometheus-client_golang-0.4.0-1.el6 (FEDORA-EPEL-2015-6001)
 Prometheus instrumentation library for Go applications
--------------------------------------------------------------------------------
Update Information:

Bump to upstream 608ec8b69e284600a7ad1b36514a1e6876e22b9f
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 jchaloup <jchaloup at redhat.com> - 0.4.0-1
- Bump to upstream 608ec8b69e284600a7ad1b36514a1e6876e22b9f
  resolves: #1214784
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1214784 - Tracker for golang-github-prometheus-client_golang
        https://bugzilla.redhat.com/show_bug.cgi?id=1214784
--------------------------------------------------------------------------------

================================================================================
 ikiwiki-3.20150329-1.el6 (FEDORA-EPEL-2015-5964)
 A wiki compiler
--------------------------------------------------------------------------------
Update Information:

Update to the latest stable release of ikiwiki.

See https://ikiwiki.info/news/version_3.20150329/ for the list of changes.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 20 2015 Thomas Moschny <thomas.moschny at gmx.de> - 3.20150329-1
- Update to 3.20150329.
- Minor packaging changes regarding the Python plugin.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1207210 - CVE-2015-2793 ikiwiki: cross-site scripting via openid_identifier
        https://bugzilla.redhat.com/show_bug.cgi?id=1207210
--------------------------------------------------------------------------------

================================================================================
 libmediainfo-0.7.73-2.el6 (FEDORA-EPEL-2015-5967)
 Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:

Update libzen and mediainfo
Update mediainfo to 0.7.73
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr 22 2015 Vasiliy N. Glazov <vascom2 at gmail.com> - 0.7.73-2
- Correct lib version
* Fri Apr 10 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.73-1
- Update to 0.7.73
* Tue Jan 13 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.72-1
- Update to 0.7.72
- Drop some patches
* Wed Dec 10 2014 Ivan Romanov <drizt at land.ru> - 0.7.71-3
- fixed epel7 building
* Sun Dec  7 2014 Ivan Romanov <drizt at land.ru> - 0.7.71-2
- use cmake
--------------------------------------------------------------------------------

================================================================================
 libxc-2.1.2-3.el6 (FEDORA-EPEL-2015-5979)
 Library of exchange and correlation functionals to be used in DFT codes
--------------------------------------------------------------------------------
Update Information:

Update to 2.1.2, with further backported patches to hybrid functionals.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 24 2015 Susi Lehtola <jussilehtola at fedoraproject.org> - 2.1.2-3
- Patch some hybrids.
* Fri Apr 24 2015 Susi Lehtola <jussilehtola at fedoraproject.org> - 2.1.2-2
- Patch broken makefiles.
* Thu Feb 19 2015 Susi Lehtola <jussilehtola at fedoraproject.org> - 2.1.2-1
- Update to 2.1.2.
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 libzen-0.4.31-2.el6 (FEDORA-EPEL-2015-5967)
 Shared library for libmediainfo and medianfo*
--------------------------------------------------------------------------------
Update Information:

Update libzen and mediainfo
Update mediainfo to 0.7.73
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr 22 2015 Vasiliy N. Glazov <vascom2 at gmail.com> - 0.4.31-2
- Correct lib version
* Thu Apr  9 2015 Vasiliy N. Glazov <vascom2 at gmail.com> - 0.4.31-1
- update to 0.4.31
* Thu Jan 15 2015 Ivan Romanov <drizt at land.ru> - 0.4.30-4
- added patch to fix building MediaInfo
--------------------------------------------------------------------------------

================================================================================
 mediainfo-0.7.73-2.el6 (FEDORA-EPEL-2015-5967)
 Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:

Update libzen and mediainfo
Update mediainfo to 0.7.73
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr 22 2015 Vasiliy N. Glazov <vascom2 at gmail.com> - 0.7.73-2
- Rebuild with updated libmediainfo
* Fri Apr 10 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.73-1
- Update to 0.7.73
* Wed Jan 14 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.72-1
- Update to 0.7.72
--------------------------------------------------------------------------------

================================================================================
 mimedefang-2.78-1.el6 (FEDORA-EPEL-2015-5983)
 E-Mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:

MIMEDefang 2.78
===============

  * Fix bug in logic that coalesces multiparts to single-parts if possible; the bug broke DKIM signing.  Fix is courtesy of Peter Nagel.

MIMEDefang 2.77
===============

  * Change old author's name to "Dianne Skoll" in many places.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 Robert Scheck <robert at fedoraproject.org> 2.78-1
- Upgrade to 2.78 (#1213639)
* Wed Apr 22 2015 Robert Scheck <robert at fedoraproject.org> 2.77-1
- Upgrade to 2.77 (#1213639)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1213639 - mimedefang-2.77 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1213639
--------------------------------------------------------------------------------

================================================================================
 python-bloom-0.5.20-1.el6 (FEDORA-EPEL-2015-5997)
 Bloom is a release automation tool
--------------------------------------------------------------------------------
Update Information:

Update to 0.5.20 (rhbz#1214972)
--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 24 2015 Rich Mattes <richmattes at gmail.com> - 0.5.20-1
- Update to 0.5.20 (rhbz#1214972)
* Wed Mar  4 2015 Rich Mattes <richmattes at gmail.com> - 0.5.19-1
- Update to 0.5.19
--------------------------------------------------------------------------------

================================================================================
 python-crypto2.1-2.1.0-4.el6 (FEDORA-EPEL-2015-5985)
 Cryptography library for Python
--------------------------------------------------------------------------------
Update Information:

Add a patch to fix CVE-2012-2417
First EPEL6 release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1206739 - Review Request: python-crypto2.1 - Cryptography library for Python
        https://bugzilla.redhat.com/show_bug.cgi?id=1206739
--------------------------------------------------------------------------------

================================================================================
 python-fedmsg-meta-fedora-infrastructure-0.5.1-1.el6 (FEDORA-EPEL-2015-5966)
 Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:

New zanata processor.  Fixes to anitya processor.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 Ralph Bean <rbean at redhat.com> - 0.5.1-1
- new version
* Thu Apr 23 2015 Ralph Bean <rbean at redhat.com> - 0.5.0-1
- new version
--------------------------------------------------------------------------------

================================================================================
 root-5.34.30-1.el6 (FEDORA-EPEL-2015-5976)
 Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:

root 5.34.30

https://root.cern.ch/drupal/content/root-version-v5-34-00-patch-release-notes

--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 24 2015 Mattias Ellert <mattias.ellert at fysast.uu.se> - 5.34.30-1
- Update to 5.34.30
- New sub-package: root-python3
- Disable hadoop/hdfs support for F23+ (not installable)
- Drop previously backported gcc 5 patches
--------------------------------------------------------------------------------

================================================================================
 testdisk-7.0-2.el6 (FEDORA-EPEL-2015-5972)
 Tool to check and undelete partition, PhotoRec recovers lost files
--------------------------------------------------------------------------------
Update Information:

TestDisk 7.0 fixes several stack overflows. The new photorec is faster.
qphotorec is a qt4 version of PhotoRec.
Full release notes: http://www.cgsecurity.org/wiki/TestDisk_7.0_Release
TestDisk 7.0 fixes several stack overflows.
The new photorec is faster.
qphotorec is a qt4 version of PhotoRec.

Full release notes: http://www.cgsecurity.org/wiki/TestDisk_7.0_Release
TestDisk 7.0 fixes several stack overflows.
The new photorec is faster.
qphotorec is a qt4 version of PhotoRec.

Full release notes: http://www.cgsecurity.org/wiki/TestDisk_7.0_Release
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 23 2015 Christophe Grenier <grenier at cgsecurity.org> - 7.0-2
- rebuild for new ntfs-3g
* Sat Apr 18 2015 Christophe Grenier <grenier at cgsecurity.org> - 7.0-1
- Update to latest version
- This version includes some security fixes.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1116512 - Please update to 7.0
        https://bugzilla.redhat.com/show_bug.cgi?id=1116512
  [ 2 ] Bug #1213070 - testdisk-7.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1213070
  [ 3 ] Bug #1214681 - testdisk 7.x dependency issue
        https://bugzilla.redhat.com/show_bug.cgi?id=1214681
  [ 4 ] Bug #1036410 - [abrt] testdisk-6.14-2.fc20: strcmp: Process /usr/bin/testdisk was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=1036410
--------------------------------------------------------------------------------

================================================================================
 uwsgi-2.0.9-7.el6 (FEDORA-EPEL-2015-6004)
 Fast, self-healing, application container server
--------------------------------------------------------------------------------
Update Information:

Disabled java related plugins (jvm, jwsgi, ring) in el6 ppc64
Initial el6 submission
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1211616 - uwsgi builds on secondary archs
        https://bugzilla.redhat.com/show_bug.cgi?id=1211616
  [ 2 ] Bug #814598 - RFE: Package uwsgi for EPEL
        https://bugzilla.redhat.com/show_bug.cgi?id=814598
--------------------------------------------------------------------------------

================================================================================
 wordpress-4.1.3-1.el6 (FEDORA-EPEL-2015-5933)
 Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:

This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately.

https://wordpress.org/news/2015/04/wordpress-4-1-2/
--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 24 2015 Remi Collet <remi at fedoraproject.org> - 4.1.3-1
- WordPress 4.1.3 Maintenance Release
* Thu Apr 23 2015 Remi Collet <remi at fedoraproject.org> - 4.1.2-1
- WordPress 4.1.2 Security Release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1214650 - wordpress: several vulnerabilities fixed in Wordpress 4.1.2
        https://bugzilla.redhat.com/show_bug.cgi?id=1214650
--------------------------------------------------------------------------------