The following Fedora EPEL 6 Security updates need testing:
Age URL
501
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11198/filezilla-...
16
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11301/drupal7-th...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11327/php-pear-A...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11330/ngircd-20....
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11311/roundcubem...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11393/nagios-3.5...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11395/cacti-0.8....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11417/graphite-w...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11429/mediawiki1...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11445/perl-Crypt...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11453/python-pyr...
The following builds have been pushed to Fedora EPEL 6 updates-testing
glite-lbjp-common-db-3.2.8-2.el6
glite-px-proxyrenewal-1.3.34-1.el6.1
httpie-0.6.0-6.el6
jasmine-node-1.11.0-1.el6
jbig2dec-0.11-8.el6
lxc-0.9.0-2.el6
nodejs-escodegen-0.0.26-1.el6
nodejs-esprima-1.0.4-1.el6
nodejs-estraverse-1.3.0-1.el6
nodejs-eventemitter2-0.4.13-1.el6
nodejs-gaze-0.4.1-1.el6
nodejs-globule-0.1.0-1.el6
nodejs-jasmine-growl-reporter-0.0.2-1.el6
packagedb-cli-1.5.1-1.el6
plowshare-0.9.4-0.44.20130901git.el6
python-dns-1.11.1-1.el6
python-pyrad-2.0-3.el6
transifex-client-0.9-3.el6
Details about builds:
================================================================================
glite-lbjp-common-db-3.2.8-2.el6 (FEDORA-EPEL-2013-11465)
Database engine abstraction wrapper used in L&B and JP services
--------------------------------------------------------------------------------
Update Information:
Database engine abstraction wrapper used in gLite L&B and JP services.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1001351 - Review Request: glite-lbjp-common-db - Database engine abstraction
wrapper
https://bugzilla.redhat.com/show_bug.cgi?id=1001351
--------------------------------------------------------------------------------
================================================================================
glite-px-proxyrenewal-1.3.34-1.el6.1 (FEDORA-EPEL-2013-11466)
gLite proxyrenewal renews existing proxy certificates for grid users
--------------------------------------------------------------------------------
Update Information:
The gLite proxyrenewal daemon is responsible for secure and controlled way of periodical
renewal of user proxy certificates. Its primary goal is to support long-time jobs running
on the grid.
The gLite proxyrenewal daemon is responsible for secure and controlled way of periodical
renewal of user proxy certificates. Its primary goal is to support long-time jobs running
on the grid.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892698 - Review Request: glite-px-proxyrenewal - Tools for renew of the
existing proxy certificates for grid users
https://bugzilla.redhat.com/show_bug.cgi?id=892698
--------------------------------------------------------------------------------
================================================================================
httpie-0.6.0-6.el6 (FEDORA-EPEL-2013-11451)
A Curl-like tool for humans
--------------------------------------------------------------------------------
Update Information:
Add httpie to EPEL6!
--------------------------------------------------------------------------------
================================================================================
jasmine-node-1.11.0-1.el6 (FEDORA-EPEL-2013-11456)
DOM-less JS behavior-driven development (BDD) testing framework for Node
--------------------------------------------------------------------------------
Update Information:
* nodejs-jasmine-growl-reporter: Initial package.
* nodejs-globule: Initial package.
* nodejs-gaze: Update to 0.4.1, which is a minor bugfix release.
* jasmine-node: Update to 1.11.0, which is a minor bugfix release and adds --growl
notification option.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.11.0-1
- update to upstream release 1.11.0
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.10.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1002250 - Review Request: nodejs-globule - An easy-to-use wildcard globbing
library for Node.js
https://bugzilla.redhat.com/show_bug.cgi?id=1002250
[ 2 ] Bug #1002254 - Review Request: nodejs-jasmine-growl-reporter - Growl notifications
when running Jasmine tests
https://bugzilla.redhat.com/show_bug.cgi?id=1002254
--------------------------------------------------------------------------------
================================================================================
jbig2dec-0.11-8.el6 (FEDORA-EPEL-2013-11458)
A decoder implementation of the JBIG2 image compression format
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
================================================================================
lxc-0.9.0-2.el6 (FEDORA-EPEL-2013-11454)
Linux Resource Containers
--------------------------------------------------------------------------------
Update Information:
Update LXC to the latest stable upstream version, containing numerous bug fixes.
Update LXC to the latest stable upstream version, containing numerous bug fixes.
This package also contains more templates (in the -templates subpackage) again.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #835125 - no templates
https://bugzilla.redhat.com/show_bug.cgi?id=835125
[ 2 ] Bug #855109 - File capabilities check fails on 3.5.x kernels
https://bugzilla.redhat.com/show_bug.cgi?id=855109
[ 3 ] Bug #875778 - lxc-0.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=875778
[ 4 ] Bug #920732 - A fresh created F18 container cannot be started
https://bugzilla.redhat.com/show_bug.cgi?id=920732
[ 5 ] Bug #964976 - No man available in LXC 0.7.5 (including lxc-doc)
https://bugzilla.redhat.com/show_bug.cgi?id=964976
--------------------------------------------------------------------------------
================================================================================
nodejs-escodegen-0.0.26-1.el6 (FEDORA-EPEL-2013-11463)
ECMAScript code generator
--------------------------------------------------------------------------------
Update Information:
Update nodejs-escodegen to 0.0.26, which has a series of new features and bug fixes.
Upstream commits:
https://github.com/Constellation/escodegen/commits/0.0.26
Update nodejs-estraverse to 1.3.0, which is a minor bugfix release.
Upstream commits:
https://github.com/Constellation/estraverse/commits/1.3.0
Update nodejs-esprima to 1.0.4, which is a minor bugfix release.
Upstream commits:
https://github.com/ariya/esprima/commits/1.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 4 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.0.26-1
- update to upstream release 0.0.26
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.0.23-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-esprima-1.0.4-1.el6 (FEDORA-EPEL-2013-11463)
ECMAScript parsing infrastructure for multipurpose analysis
--------------------------------------------------------------------------------
Update Information:
Update nodejs-escodegen to 0.0.26, which has a series of new features and bug fixes.
Upstream commits:
https://github.com/Constellation/escodegen/commits/0.0.26
Update nodejs-estraverse to 1.3.0, which is a minor bugfix release.
Upstream commits:
https://github.com/Constellation/estraverse/commits/1.3.0
Update nodejs-esprima to 1.0.4, which is a minor bugfix release.
Upstream commits:
https://github.com/ariya/esprima/commits/1.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 4 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.0.4-1
- update to upstream release 1.0.4
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-estraverse-1.3.0-1.el6 (FEDORA-EPEL-2013-11463)
ECMAScript JS AST traversal functions
--------------------------------------------------------------------------------
Update Information:
Update nodejs-escodegen to 0.0.26, which has a series of new features and bug fixes.
Upstream commits:
https://github.com/Constellation/escodegen/commits/0.0.26
Update nodejs-estraverse to 1.3.0, which is a minor bugfix release.
Upstream commits:
https://github.com/Constellation/estraverse/commits/1.3.0
Update nodejs-esprima to 1.0.4, which is a minor bugfix release.
Upstream commits:
https://github.com/ariya/esprima/commits/1.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 4 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.3.0-1
- update to upstream release 1.3.0
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-eventemitter2-0.4.13-1.el6 (FEDORA-EPEL-2013-11461)
A Node.js event emitter implementation with namespaces, wildcards and TTL
--------------------------------------------------------------------------------
Update Information:
* Update to upstream release 0.4.13, which is a minor bugfix release.
* Upstream commits:
https://github.com/hij1nx/EventEmitter2/commits/0.4.13
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 4 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.13-1
- update to upstream release 0.4.13
- remove local patch that has been accepted upstream
- add script to download test/ directory as upstream have decided to remove it
from the npm tarball
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4.12-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-gaze-0.4.1-1.el6 (FEDORA-EPEL-2013-11456)
A globbing fs.watch wrapper built from parts of other watch libraries
--------------------------------------------------------------------------------
Update Information:
* nodejs-jasmine-growl-reporter: Initial package.
* nodejs-globule: Initial package.
* nodejs-gaze: Update to 0.4.1, which is a minor bugfix release.
* jasmine-node: Update to 1.11.0, which is a minor bugfix release and adds --growl
notification option.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 26 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.1-1
- update to upstream release 0.4.1
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1002250 - Review Request: nodejs-globule - An easy-to-use wildcard globbing
library for Node.js
https://bugzilla.redhat.com/show_bug.cgi?id=1002250
[ 2 ] Bug #1002254 - Review Request: nodejs-jasmine-growl-reporter - Growl notifications
when running Jasmine tests
https://bugzilla.redhat.com/show_bug.cgi?id=1002254
--------------------------------------------------------------------------------
================================================================================
nodejs-globule-0.1.0-1.el6 (FEDORA-EPEL-2013-11456)
An easy-to-use wildcard globbing library for Node.js
--------------------------------------------------------------------------------
Update Information:
* nodejs-jasmine-growl-reporter: Initial package.
* nodejs-globule: Initial package.
* nodejs-gaze: Update to 0.4.1, which is a minor bugfix release.
* jasmine-node: Update to 1.11.0, which is a minor bugfix release and adds --growl
notification option.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1002250 - Review Request: nodejs-globule - An easy-to-use wildcard globbing
library for Node.js
https://bugzilla.redhat.com/show_bug.cgi?id=1002250
[ 2 ] Bug #1002254 - Review Request: nodejs-jasmine-growl-reporter - Growl notifications
when running Jasmine tests
https://bugzilla.redhat.com/show_bug.cgi?id=1002254
--------------------------------------------------------------------------------
================================================================================
nodejs-jasmine-growl-reporter-0.0.2-1.el6 (FEDORA-EPEL-2013-11456)
Growl notifications when running Jasmine tests
--------------------------------------------------------------------------------
Update Information:
* nodejs-jasmine-growl-reporter: Initial package.
* nodejs-globule: Initial package.
* nodejs-gaze: Update to 0.4.1, which is a minor bugfix release.
* jasmine-node: Update to 1.11.0, which is a minor bugfix release and adds --growl
notification option.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1002250 - Review Request: nodejs-globule - An easy-to-use wildcard globbing
library for Node.js
https://bugzilla.redhat.com/show_bug.cgi?id=1002250
[ 2 ] Bug #1002254 - Review Request: nodejs-jasmine-growl-reporter - Growl notifications
when running Jasmine tests
https://bugzilla.redhat.com/show_bug.cgi?id=1002254
--------------------------------------------------------------------------------
================================================================================
packagedb-cli-1.5.1-1.el6 (FEDORA-EPEL-2013-11462)
A CLI for pkgdb
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.1 which fixes a bug in the log-in mechanism
Update to 1.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2013 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 1.5.1-1
- Update to 1.5.1
- Fixes RHBZ#995430 and RHBZ#970120
* Thu May 23 2013 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 1.5.0-1
- Update to 1.5.0
- Fixes RHBZ#966196
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #966196 - pkgdb-cli gives incorrect error messages
https://bugzilla.redhat.com/show_bug.cgi?id=966196
--------------------------------------------------------------------------------
================================================================================
plowshare-0.9.4-0.44.20130901git.el6 (FEDORA-EPEL-2013-11452)
Download and upload files from file-sharing websites
--------------------------------------------------------------------------------
Update Information:
Update to new upstream snapshot.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 4 2013 Elder Marco <eldermarco(a)fedoraproject.org> -
0.9.4-0.44.20130901git
- New upstream snapshot
--------------------------------------------------------------------------------
================================================================================
python-dns-1.11.1-1.el6 (FEDORA-EPEL-2013-11455)
DNS toolkit for Python
--------------------------------------------------------------------------------
Update Information:
New since 1.11.0:
Nothing
Bugs fixed since 1.11.1:
dns.resolver.Resolver erroneously referred to 'retry_servfail'
instead of 'self.retry_servfail'.
dns.tsigkeyring.to_text() would fail trying to convert the
keyname to text.
Multi-message TSIGs were broken for algorithms other than
HMAC-MD5 because we weren't passing the right digest module to
the HMAC code.
dns.dnssec._find_candidate_keys() tried to extract the key
from the wrong variable name.
$GENERATE tests were not backward compatible with python 2.4.
APL RR trailing zero suppression didn't work due to insufficient
python 3 porting. [dnspython3 only]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2013 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.11.1-1
- New since 1.11.0:
-
- Nothing
-
- Bugs fixed since 1.11.1:
-
- dns.resolver.Resolver erroneously referred to 'retry_servfail'
- instead of 'self.retry_servfail'.
-
- dns.tsigkeyring.to_text() would fail trying to convert the
- keyname to text.
-
- Multi-message TSIGs were broken for algorithms other than
- HMAC-MD5 because we weren't passing the right digest module to
- the HMAC code.
-
- dns.dnssec._find_candidate_keys() tried to extract the key
- from the wrong variable name.
-
- $GENERATE tests were not backward compatible with python 2.4.
-
- APL RR trailing zero suppression didn't work due to insufficient
- python 3 porting. [dnspython3 only]
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Sun Jul 7 2013 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.11.0-2
- Integrate Python 2.6 packaging, EPEL5, EPEL6 support
* Sun Jul 7 2013 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.11.0-1
- New since 1.10.0:
-
- $GENERATE support
-
- TLSA RR support
-
- Added set_flags() method to dns.resolver.Resolver
-
- Bugs fixed since 1.10.0:
-
- Names with offsets >= 2^14 are no longer added to the
- compression table.
-
- The "::" syntax is not used to shorten a single 16-bit section
- of the text form an IPv6 address.
-
- Caches are now locked.
-
- YXDOMAIN is raised if seen by the resolver.
-
- Empty rdatasets are not printed.
-
- DNSKEY key tags are no longer assumed to be unique.
* Sat Feb 16 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 1.10.0-3
- add python3-dns subpackage (rhbz#911933)
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.10.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pyrad-2.0-3.el6 (FEDORA-EPEL-2013-11453)
Python RADIUS client
--------------------------------------------------------------------------------
Update Information:
* Better random number generator
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 5 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 2.0-3
- Better random number generator
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Jul 11 2013 Christopher Meng <rpm(a)cicku.me> - 2.0-1
- Update to 2.0 version.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Sep 6 2010 Peter Lemenkov <lemenkov(a)gmail.com> - 1.1-5
- Cleaned up spec-file
- Added %check section
- Dropped support for fedora > 9
* Thu Jul 22 2010 David Malcolm <dmalcolm(a)redhat.com> - 1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #911682 - CVE-2013-0294 python-pyrad: poor randomness leads to predictable
password hashing and RADIUS IDs
https://bugzilla.redhat.com/show_bug.cgi?id=911682
--------------------------------------------------------------------------------
================================================================================
transifex-client-0.9-3.el6 (FEDORA-EPEL-2013-11248)
Command line tool for Transifex translation management
--------------------------------------------------------------------------------
Update Information:
Command line tool for Transifex translation management
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 26 2013 Luis Bazan <lbazan(a)fedoraproject.org> - 0.9-3
- remove dependency
* Thu Aug 15 2013 Luis Bazan <lbazan(a)fedoraproject.org> - 0.9-2
- add new requirement
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #985248 - transifex-client: use system python-backports-ssl_match_hostname
https://bugzilla.redhat.com/show_bug.cgi?id=985248
--------------------------------------------------------------------------------