The following Fedora EPEL 6 Security updates need testing: Age URL 590 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... 104 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61-21... 46 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11865/quassel-0.9.1... 19 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-1.e... 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12156/varnish-2.1.5... 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12154/mediawiki119-... 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12171/drupal7-7.24-... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12199/lynis-1.3.5-1... 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12222/drupal6-6.29-... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12238/seamonkey-2.2...

The following builds have been pushed to Fedora EPEL 6 updates-testing

ReviewBoard-1.7.19-1.el6 amavisd-new-2.8.0-8.el6 gimp-separate+-0.5.8-9.el6 heartbeat-3.0.4-2.el6 kaffeine-1.2.2-8.el6 mup-6.2-1.el6 python-ase-3.8.1.3440-8.el6 python-djblets-0.7.24-1.el6 qsstv-7.1.7-1.el6 x2goserver-4.0.1.9-1.el6

Details about builds:

================================================================================ ReviewBoard-1.7.19-1.el6 (FEDORA-EPEL-2013-12274) Web-based code review tool -------------------------------------------------------------------------------- Update Information:

* Wed Nov 27 2013 Stephen Gallagher sgallagh@redhat.com - 1.7.19-1 - New upstream bugfix release 1.7.19 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.19/ - New Features: * Added support for two-factor authentication for GitHub. - Performance Improvements: * Re-introduced browser caching on the review request page. - Web API Changes: * Added the mirror_path field to Repository Resource. - Bug Fixes: * Fixed the default focus on the Review dialog. The top-most field now always has default focus. * Fixed displaying review requests for groups on a Local Site. * Prevented rare crashes with Local Sites using the new permissions support without any granted permissions. * Fixed HTTP basic authentication with the web API when using fastcgi. -------------------------------------------------------------------------------- ChangeLog:

* Wed Nov 27 2013 Stephen Gallagher sgallagh@redhat.com - 1.7.19-1 - New upstream bugfix release 1.7.19 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.19/ - New Features: * Added support for two-factor authentication for GitHub. - Performance Improvements: * Re-introduced browser caching on the review request page. - Web API Changes: * Added the mirror_path field to Repository Resource. - Bug Fixes: * Fixed the default focus on the Review dialog. The top-most field now always has default focus. * Fixed displaying review requests for groups on a Local Site. * Prevented rare crashes with Local Sites using the new permissions support without any granted permissions. * Fixed HTTP basic authentication with the web API when using fastcgi. --------------------------------------------------------------------------------

================================================================================ amavisd-new-2.8.0-8.el6 (FEDORA-EPEL-2013-12271) Email filter with virus scanner and spamassassin support -------------------------------------------------------------------------------- Update Information:

- Commented ripole(1) decoder as the binary is not packaged - Commented tnef(1) decoder as the perl module is a dependency -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 2 2013 Robert Scheck robert@fedoraproject.org 2.8.0-8 - Commented ripole(1) decoder as the binary is not packaged - Commented tnef(1) decoder as the perl module is a dependency * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.8.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Jul 18 2013 Petr Pisar ppisar@redhat.com - 2.8.0-6 - Perl 5.18 rebuild * Fri May 10 2013 Adam Williamson awilliam@redhat.com - 2.8.0-5 - init_network.patch: don't source /etc/sysconfig/network in initscript --------------------------------------------------------------------------------

================================================================================ gimp-separate+-0.5.8-9.el6 (FEDORA-EPEL-2013-12272) Rudimentary CMYK support for The GIMP -------------------------------------------------------------------------------- Update Information:

New package containing rudimentary CMYK support for The GIMP. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #34 - wrong permissions of /usr/doc/gimp-manual* https://bugzilla.redhat.com/show_bug.cgi?id=34 [ 2 ] Bug #913289 - Review Request: gimp-separate+ - A plug-in providing rudimentary CMYK support for The GIMP https://bugzilla.redhat.com/show_bug.cgi?id=913289 [ 3 ] Bug #35 - Bugs in /etc/rc.d/init.d/gated script https://bugzilla.redhat.com/show_bug.cgi?id=35 --------------------------------------------------------------------------------

================================================================================ heartbeat-3.0.4-2.el6 (FEDORA-EPEL-2013-12278) Messaging and membership subsystem for High-Availability Linux -------------------------------------------------------------------------------- Update Information:

Fix for changed paths in cluster-glue in rhel 6.5, compile fixes. -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 30 2013 Kevin Fenzi kevin@scrye.com 3.0.4-2 - Apply patch to work around cluster-glue changes in rhel. - fixes 1028127 and 869826 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1028127 - Heartbeat not working on centos6 after last update https://bugzilla.redhat.com/show_bug.cgi?id=1028127 [ 2 ] Bug #869826 - heartbeat 'HA_LIBHBDIR' undeclared with cluster-glue-libs-devel-1.0.5-6.el6. Change also changes file locations in pacemaker-1.1.7-6.el6 https://bugzilla.redhat.com/show_bug.cgi?id=869826 --------------------------------------------------------------------------------

================================================================================ kaffeine-1.2.2-8.el6 (FEDORA-EPEL-2013-12277) KDE media player -------------------------------------------------------------------------------- Update Information:

Kaffeine is a KDE media player. What makes it different from the others is its excellent support of digital TV (DVB). Kaffeine has user-friendly interface, so that even first time users can start immediately playing their movies: from DVD (including DVD menus, titles, chapters, etc.), VCD or a file. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1036442 - Kaffeine in Fedora EPEL 6 https://bugzilla.redhat.com/show_bug.cgi?id=1036442 --------------------------------------------------------------------------------

================================================================================ mup-6.2-1.el6 (FEDORA-EPEL-2013-12270) A music notation program that can also generate MIDI files -------------------------------------------------------------------------------- Update Information:

Updated for Mup 6.2.

-------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 25 2013 Greg Bailey gbailey@lxpro.com - 6.2-1 - Update to 6.2 * Wed Aug 7 2013 Greg Bailey gbailey@lxpro.com - 6.1-7 - Cleanup documentation directory macros (Chuck Anderson) * Mon Aug 5 2013 Greg Bailey gbailey@lxpro.com - 6.1-6 - Install documentation to an unversioned subdir for Fedora >= 20 (#992308) * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 6.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ python-ase-3.8.1.3440-8.el6 (FEDORA-EPEL-2013-12273) Atomic Simulation Environment -------------------------------------------------------------------------------- Update Information:

Should fix https://bugzilla.redhat.com/show_bug.cgi?id=1010479#c10 New upstream version fixes the conflict with the_silver_searcher New upstream version fixes the conflict with the_silver_searcher New upstream version fixes the conflict with the_silver_searcher New upstream version fixes the conflict with the_silver_searcher -------------------------------------------------------------------------------- ChangeLog:

* Sat Nov 30 2013 Marcin Dulak Marcin.Dulak@gmail.com - 3.8.1.3440-8 - fix Exec in ase-gui.desktop - remove MANIFEST.in from %doc - PATH modified for tests to include scripts dir * Fri Nov 22 2013 Marcin Dulak Marcin.Dulak@gmail.com - 3.8.1.3440-7 - new upstream version, old patches removed -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1010479 - Binary name conflict with python-ase and the_silver_searcher https://bugzilla.redhat.com/show_bug.cgi?id=1010479 --------------------------------------------------------------------------------

================================================================================ python-djblets-0.7.24-1.el6 (FEDORA-EPEL-2013-12274) A collection of useful classes and functions for Django -------------------------------------------------------------------------------- Update Information:

* Wed Nov 27 2013 Stephen Gallagher sgallagh@redhat.com - 1.7.19-1 - New upstream bugfix release 1.7.19 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.19/ - New Features: * Added support for two-factor authentication for GitHub. - Performance Improvements: * Re-introduced browser caching on the review request page. - Web API Changes: * Added the mirror_path field to Repository Resource. - Bug Fixes: * Fixed the default focus on the Review dialog. The top-most field now always has default focus. * Fixed displaying review requests for groups on a Local Site. * Prevented rare crashes with Local Sites using the new permissions support without any granted permissions. * Fixed HTTP basic authentication with the web API when using fastcgi. -------------------------------------------------------------------------------- ChangeLog:

* Wed Nov 27 2013 Stephen Gallagher sgallagh@redhat.com - 0.7.24-1 - New upstream release 0.7.24 - http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.24.NEWS * djblets.util.http: * Fixed ETag matching --------------------------------------------------------------------------------

================================================================================ qsstv-7.1.7-1.el6 (FEDORA-EPEL-2013-12275) Qt-based slow-scan TV and fax -------------------------------------------------------------------------------- Update Information:

Update to latest upsream release, 7.1.7. --------------------------------------------------------------------------------

================================================================================ x2goserver-4.0.1.9-1.el6 (FEDORA-EPEL-2013-12236) X2Go server daemon scripts -------------------------------------------------------------------------------- Update Information:

Update to 4.0.1.9 - incorporate changes from 4.0.0.7 LTS bugfix release.

- Drop incorrect keyboard patch- Use mktemp instead of tempfile - Fix Xsession.d link creation - Add patch to fix keyboard setting (bug #1033876)

Update to 4.0.1.8:

- Fix resizing when resuming sessions. - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). Update to 4.0.1.8:

- Fix resizing when resuming sessions. - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). Update to 4.0.1.8:

- Fix resizing when resuming sessions. - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 2 2013 Orion Poplawski orion@cora.nwra.com - 4.0.1.9-1 - Update to 4.0.1.9 - Drop incorrect keyboard patch * Wed Nov 27 2013 Orion Poplawski orion@cora.nwra.com - 4.0.1.8-2 - Use mktemp instead of tempfile - BR xorg-x11-xinit for Xsession.d link creation - Add patch to fix keyboard setting (bug #1033876) * Sat Nov 23 2013 Orion Poplawski orion@cora.nwra.com - 4.0.1.8-1 - Update to 4.0.1.8 - Fix x2gocleansessions init script for EL6 (bug #1031150) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1031150 - x2goserver init script needs stop and to create /tmp/.X11-unix/ directory https://bugzilla.redhat.com/show_bug.cgi?id=1031150 --------------------------------------------------------------------------------