[EPEL-devel] Fedora EPEL 6 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Fri Feb 27 22:41:47 UTC 2015 

The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 1042  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
 106  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binutils-2.23.51.0.3-1.el6.1
  95  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4242/facter-1.6.18-8.el6
  83  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4485/python-tornado-2.2.1-7.el6
  65  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4884/mapserver-6.0.4-1.el6
  63  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4918/dokuwiki-0-0.23.20140929b.el6
  45  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0232/chicken-4.9.0.1-2.el6
  22  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0644/perl-Gtk2-1.2495-1.el6
  19  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0696/drupal7-path_breadcrumbs-3.2-1.el6
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0701/unbound-1.5.1-1.el6
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0738/drupal6-views-2.18-1.el6
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0740/python-crypto2.6-2.6.1-2.el6
  12  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0779/drupal7-views-3.10-1.el6
   1  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0942/novnc-0.5.1-2.el6
   1  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0864/nodejs-0.10.36-3.el6,libuv-0.10.34-1.el6,v8-3.14.5.10-17.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0992/libpng10-1.0.63-1.el6
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0985/drupal7-entity-1.6-1.el6


The following builds have been pushed to Fedora EPEL 6 updates-testing

    abduco-0.3-1.el6
    drupal6-admin_menu-1.9-1.el6
    drupal7-entity-1.6-1.el6
    drupal7-migrate-2.7-1.el6
    golang-github-beorn7-perks-0-0.1.gitb965b61.el6
    golang-github-docker-spdystream-0-0.1.git29e1da2.el6
    golang-github-golang-groupcache-0-0.1.git604ed57.el6
    golang-github-gorilla-websocket-0-0.1.gitab5b3a6.el6
    golang-github-prometheus-client_golang-0-0.2.git39e4bc8.el6
    golang-github-shurcooL-sanitized_anchor_name-0-0.1.git8e87604.el6
    ikiwiki-3.20150107-1.el6
    libpng10-1.0.63-1.el6
    mydns-1.2.8.31-2.el6
    perl-Monitoring-Plugin-0.38-1.el6.1
    python-fudge-1.0.3-6.el6

Details about builds:


================================================================================
 abduco-0.3-1.el6 (FEDORA-EPEL-2015-1003)
 Session management in a clean and simple way
--------------------------------------------------------------------------------
Update Information:

Update to 0.3 release
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 26 2015 Denis Fateyev <denis at fateyev.com> - 0.3-1
- Update to 0.3 release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1194491 - abduco-0.3 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1194491
--------------------------------------------------------------------------------


================================================================================
 drupal6-admin_menu-1.9-1.el6 (FEDORA-EPEL-2015-0990)
 Provides a dropdown menu to most administrative tasks
--------------------------------------------------------------------------------
Update Information:

## 6.x-1.9

- Issue #2360249 by pvasili, konstantin.komelin, Eyal Shalev, ofry, Plazik, dalin, gngn, marcmueller: Fixed tertiary menu items not visible in Firefox 34.
- Issue #927018 by DamienMcKenna, mikeytown2: Fixed PHP notice in admin_menu_link_build().
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Shawn Iwinski <shawn.iwinski at gmail.com> - 1.9-1
- Updated to 1.9 (BZ #1195728)
- Removed RPM README b/c it only explained common Drupal workflow
- %license usage
- Spec cleanup
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.8-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Aug  3 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.8-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.8-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1195728 - drupal6-admin_menu-1.9 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1195728
--------------------------------------------------------------------------------


================================================================================
 drupal7-entity-1.6-1.el6 (FEDORA-EPEL-2015-0985)
 Extends the entity API to provide a unified way to deal with entities
--------------------------------------------------------------------------------
Update Information:

## 7.x-1.6

See [SA-CONTRIB-2015-053 - Entity API - Cross Site Scripting (XSS)](https://www.drupal.org/node/2437905)

Changes since 7.x-1.5:

- by klausi: Sanitize field labels before passing them to the Token API.
- Issue #2264079 by Amitaibu, fago: Fixed $wrapper->access() might be wrong for single entity reference field.
- Issue #2039601 by DuaelFr, fago: Added Ease EntityMetadataWrapper usage with a getter.
- Issue #2160355 by wodenx, gmercer, fgm, jgullstr: Fixed Trying to get property of non-object in entity_metadata_user_access().
- Issue #1651824 by meatsack | joachim: Fixed 'entity_test' table has incorrect declaration of foreign keys.
- Issue #2309697 by kristiaanvandeneynde; joachim: Fixed variable mistake in entity_views_handler_relationship_by_bundle.
- Issue #2003826 by greenmother, stella, jazzdrive3, fago: Fixed template_preprocess_entity does not check for existing 'path' index.
- Issue #1104286: Support generating database schema for date properties.
- Issue #2013473 by fietserwin: Title attribute of image field not listed as possible token.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Shawn Iwinski <shawn.iwinski at gmail.com> - 1.6-1
- Updated to 1.6 (BZ #1196750 / SA-CONTRIB-2015-053)
- Removed RPM README b/c it only explained common Drupal workflow
- %license usage
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196750 - drupal7-entity-1.6 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1196750
--------------------------------------------------------------------------------


================================================================================
 drupal7-migrate-2.7-1.el6 (FEDORA-EPEL-2015-0991)
 Import content from external sources
--------------------------------------------------------------------------------
Update Information:

# Migrate 2.7

## Bug fixes

- 2415597 - Make batching of SQL sources optional, and force map_joinable FALSE.

# Migrate 2.7 Release Candidate 1

## Features and enhancements

- 2296911 - Add a source handler for IBM DB2.
- 2256761 - Add a destination handler for variables.
- 2047815 - Support multi-column source keys in idlist.
- 1751438 - Add spreadsheet source plugin.

## Bug fixes

- 2403593 - SQL batching messes up cases with altered queries, such as idlist.
- 2298969 - Verify wizard validation function exists.
- 2268863 - Fix drush --all option.
- 2410523 - Remove inconsistent escaping of migrate_drush_path.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Shawn Iwinski <shawn.iwinski at gmail.com> - 2.7-1
- Updated to 2.7 (BZ #1191439)
- Removed RPM README b/c it only explained common Drupal workflow
- %license usage
- Spec cleanup
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.6-0.2.rc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1191439 - drupal7-migrate-2.7 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1191439
--------------------------------------------------------------------------------


================================================================================
 golang-github-beorn7-perks-0-0.1.gitb965b61.el6 (FEDORA-EPEL-2015-0986)
 Effective Computation of Things
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196432 - Review Request: golang-github-beorn7-perks - Effective Computation of Things
        https://bugzilla.redhat.com/show_bug.cgi?id=1196432
--------------------------------------------------------------------------------


================================================================================
 golang-github-docker-spdystream-0-0.1.git29e1da2.el6 (FEDORA-EPEL-2015-1004)
 A multiplexed stream library using spdy
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196363 - Review Request: golang-github-docker-spdystream - A multiplexed stream library using spdy
        https://bugzilla.redhat.com/show_bug.cgi?id=1196363
--------------------------------------------------------------------------------


================================================================================
 golang-github-golang-groupcache-0-0.1.git604ed57.el6 (FEDORA-EPEL-2015-1008)
 Caching and cache-filling library as a replacement for memcached in many cases
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196368 - Review Request: golang-github-golang-groupcache - Caching and cache-filling library as a replacement for memcached in many cases
        https://bugzilla.redhat.com/show_bug.cgi?id=1196368
--------------------------------------------------------------------------------


================================================================================
 golang-github-gorilla-websocket-0-0.1.gitab5b3a6.el6 (FEDORA-EPEL-2015-0995)
 A WebSocket implementation for Go
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196361 - Review Request: golang-github-gorilla-websocket - A WebSocket implementation for Go
        https://bugzilla.redhat.com/show_bug.cgi?id=1196361
--------------------------------------------------------------------------------


================================================================================
 golang-github-prometheus-client_golang-0-0.2.git39e4bc8.el6 (FEDORA-EPEL-2015-1005)
 Prometheus instrumentation library for Go applications
--------------------------------------------------------------------------------
Update Information:

Bump to upstream 39e4bc83f974fb141a9e67c042b26322bacc917b
First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1190442 - Review Request: golang-github-prometheus-client_golang - Prometheus instrumentation library for Go applications
        https://bugzilla.redhat.com/show_bug.cgi?id=1190442
--------------------------------------------------------------------------------


================================================================================
 golang-github-shurcooL-sanitized_anchor_name-0-0.1.git8e87604.el6 (FEDORA-EPEL-2015-0980)
 Package sanitized_anchor_name provides a func to create sanitized anchor names
--------------------------------------------------------------------------------
Update Information:

First package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196551 - Review Request: golang-github-shurcooL-sanitized_anchor_name - Package sanitized_anchor_name provides a func to create sanitized anchor names
        https://bugzilla.redhat.com/show_bug.cgi?id=1196551
--------------------------------------------------------------------------------


================================================================================
 ikiwiki-3.20150107-1.el6 (FEDORA-EPEL-2015-0988)
 A wiki compiler
--------------------------------------------------------------------------------
Update Information:

Update to the latest stable version of ikiwiki, 3.20150107.

See https://ikiwiki.info/news/version_3.20150107/ for the full list of changes.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Feb 22 2015 Thomas Moschny <thomas.moschny at gmx.de> - 3.20150107-1
- Update to 3.20150107.
--------------------------------------------------------------------------------


================================================================================
 libpng10-1.0.63-1.el6 (FEDORA-EPEL-2015-0992)
 Old version of libpng, needed to run old binaries
--------------------------------------------------------------------------------
Update Information:

This update addresses a couple of buffer overflows that might allow context-dependent attackers to execute arbitrary code via very wide PNG images.

--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Paul Howarth <paul at city-fan.org> - 1.0.63-1
- Update to 1.0.63
  - Issue a png_error() instead of a png_warning() when width is potentially
    too large for the architecture, in case the calling application has
    overridden the default 1,000,000-column limit (fixes CVE-2014-9495 and
    CVE-2015-0973)
  - Quieted some harmless warnings from Coverity-scan
  - Display user limits in the output from pngtest (not packaged)
  - Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000; it only
    affects the maximum memory that can be allocated to an ancillary chunk,
    and does not limit the size of IDAT data, which is instead limited by
    PNG_USER_WIDTH_MAX
  - Rebuilt configure scripts with automake-1.15 and libtool-2.4.6
- Update soname patch
* Fri Nov 21 2014 Paul Howarth <paul at city-fan.org> 1.0.62-1
- update to 1.0.62
  - avoid out-of-bounds memory access while checking version string in
    pngread.c and pngwrite.c
  - build fix for Windows
- use %license where possible
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> 1.0.61-3
- rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> 1.0.61-2
- rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1179186 - CVE-2014-9495 libpng: buffer overflow in png_combine_row
        https://bugzilla.redhat.com/show_bug.cgi?id=1179186
  [ 2 ] Bug #1177327 - CVE-2015-0973 libpng: Heap-buffer overflow png_combine_row() with very wide interlaced images
        https://bugzilla.redhat.com/show_bug.cgi?id=1177327
--------------------------------------------------------------------------------


================================================================================
 mydns-1.2.8.31-2.el6 (FEDORA-EPEL-2015-1007)
 A Database based DNS server
--------------------------------------------------------------------------------
Update Information:

Fix build of the mydns-pgsql so that it actually supports pgsql (#985909)
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 26 2015 Matej Cepl <mcepl at redhat.com> - 1.2.8.31-2
- Fix build of the mydns-pgsql so that it actually supports pgsql (#985909)
  Thanks for the patch by Tomasz Sterna.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #985909 - mydns-pgsql is built for MySQL
        https://bugzilla.redhat.com/show_bug.cgi?id=985909
--------------------------------------------------------------------------------


================================================================================
 perl-Monitoring-Plugin-0.38-1.el6.1 (FEDORA-EPEL-2015-0987)
 Family of modules to streamline writing plugins for various monitoring systems
--------------------------------------------------------------------------------
Update Information:

First EPEL6 build
--------------------------------------------------------------------------------


================================================================================
 python-fudge-1.0.3-6.el6 (FEDORA-EPEL-2015-0989)
 A Python module for using fake objects (mocks and stubs) to test real ones
--------------------------------------------------------------------------------
Update Information:

Fudge is a Python module for using fake objects (mocks and stubs) to test real ones.
--------------------------------------------------------------------------------

More information about the epel-devel mailing list