The following Fedora EPEL 6 Security updates need testing: Age URL 54 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6c663378c unrtf-0.21.9-8.el6 23 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-d801e05f92 uwsgi-2.0.17.1-1.el6 15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-aeb81e4fba libpng10-1.0.69-5.el6 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a83d5ad82b redis-3.2.12-1.el6 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b4f8d828cd perl-Parallel-ForkManager-1.20-1.el6 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-68e2f541df pam_yubico-2.26-1.el6 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-4186e02757 seamonkey-2.49.4-2.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

cgit-0.12-2.el6 fedpkg-1.34-3.el6 nodejs-rhea-0.2.17-1.el6 qpid-dispatch-1.2.0-1.el6 qpid-proton-0.24.0-1.el6 rpkg-1.55-1.el6 rubygem-qpid_proton-0.24.0-1.el6

Details about builds:

================================================================================ cgit-0.12-2.el6 (FEDORA-EPEL-2018-40277073c5) A fast web interface for git -------------------------------------------------------------------------------- Update Information:

Fix directory traversal vulnerability References: https://lists.zx2c4.com/pipermail/cgit/2018-August/004176.html https://git.zx2c4.com/cgit/commit/?id=53efaf30b -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 3 2018 Todd Zullinger tmz@pobox.com - 0.12-2 - Fix directory traversal vulnerability --------------------------------------------------------------------------------

================================================================================ fedpkg-1.34-3.el6 (FEDORA-EPEL-2018-857b6ba2e4) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:

fedpkg-1.34-3 Require python-openidc-client 0.6.0 as minimum version --- rpkg: https://docs.pagure.org/rpkg/releases/1.55.html fedpkg: https://docs.pagure.org/fedpkg/releases/1.34.html ---- - Require python2-rpkg-1.54-2 as minimum version ---- - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip- pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 3 2018 Chenxiong Qi cqi@redhat.com - 1.34-3 - Require python-openidc-client 0.6.0 as minimum version * Tue Jul 31 2018 Chenxiong Qi cqi@redhat.com - 1.34-2 - Fix files section for Python 3 build * Tue Jul 24 2018 Chenxiong Qi cqi@redhat.com - 1.34-1 - Get csrf token properly when retry bodhi API call (cqi) - Accept old config with module instead of repo (lsedlar) - Add option --namespace to command request-branch (cqi) - Add argument name and option --namespace to request-repo - #193 #200 (cqi) - Add explicit option --repo for request-branch - #244 (cqi) - Do not use deprecated option module-name (cqi) - Remove compatible code with EL5 in bash completion (cqi) - Handle Bodhi login automatically (cqi) - Refine command override create (cqi) - request-repo: Fix API token help text - #232 (tmz) - Use base_module in clone_config - #230 (tmz) - Extend override by number of days or specific date - #67 (cqi) - Use refactored man from pyrpkg (puiterwijk) - Add new command for creating override in Bodhi - #92 (cqi) - Also remove bodhi url from config (cqi) - Check bodhi version earlier (cqi) - Drop support of bodhi-client 0.9 - #223 (cqi) - Use custom ArgumentParser from pyrpkg.cli (jkucera) - Add OIDC config (puiterwijk) - Fix argparse error in Python 3 - #221 (cqi) * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 1.33-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1.33-4 - Rebuilt for Python 3.7 * Tue May 22 2018 Chenxiong Qi cqi@redhat.com 1.33-3 - Backport: Fix argparse error in Python 3 * Mon May 21 2018 Chenxiong Qi cqi@redhat.com 1.33-2 - Require python2-rpkg-1.54-2 as minimum version * Mon May 14 2018 Chenxiong Qi cqi@redhat.com - 1.33-1 - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip-pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) * Thu May 10 2018 Miro Hron��ok mhroncok@redhat.com - 1.32-2 - Switch to Python 3 on Fedora > 28 and EL > 7 - Drop Groups - Switch to %{buildroot} - Switch to %py_build and _install --------------------------------------------------------------------------------

================================================================================ nodejs-rhea-0.2.17-1.el6 (FEDORA-EPEL-2018-7735eeb80c) A reactive messaging library based on the AMQP protocol -------------------------------------------------------------------------------- Update Information:

Rebase to 0.2.17. -------------------------------------------------------------------------------- ChangeLog:

* Tue Jul 24 2018 Irina Boverman iboverma@redhat.com - 0.2.17-1 - Rebased to 0.2.17 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1582009 - nodejs-rhea-0.2.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1582009 --------------------------------------------------------------------------------

================================================================================ qpid-dispatch-1.2.0-1.el6 (FEDORA-EPEL-2018-db7bdab8d0) Dispatch router for Qpid -------------------------------------------------------------------------------- Update Information:

Rebase to 1.2.0. -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 27 2018 Irina Boverman iboverma@redhat.com - 1.2.0-1 - Rebased to 1.2.0 - Added DISPATCH-1087 patch * Thu May 3 2018 Irina Boverman iboverma@redhat.com - 1.1.0-1 - Rebased to 1.1.0 --------------------------------------------------------------------------------

================================================================================ qpid-proton-0.24.0-1.el6 (FEDORA-EPEL-2018-64c3057b22) A high performance, lightweight messaging library -------------------------------------------------------------------------------- Update Information:

Rebase to 0.24.0. -------------------------------------------------------------------------------- ChangeLog:

* Tue Jul 31 2018 Irina Boverman iboverma@redhat.com - 0.24.0-1 - Rebased to 0.24.0 --------------------------------------------------------------------------------

================================================================================ rpkg-1.55-1.el6 (FEDORA-EPEL-2018-857b6ba2e4) Python library for interacting with rpm+git -------------------------------------------------------------------------------- Update Information:

fedpkg-1.34-3 Require python-openidc-client 0.6.0 as minimum version --- rpkg: https://docs.pagure.org/rpkg/releases/1.55.html fedpkg: https://docs.pagure.org/fedpkg/releases/1.34.html ---- - Require python2-rpkg-1.54-2 as minimum version ---- - Allow running tests against specified rpkg (cqi) - Fix test due to rpkg uses getpass.getuser (cqi) - Getting bodhi version works with Python 3 - #213 (cqi) - Detect Bodhi client by major version - #204 (cqi) - Allow requesting modular repositories without bug ID - #197 (rdossant) - Fix test test_verify_sls_invalid_date - #209 (cqi) - Copy pip- pycurl to ensure pycurl is installed correctly (cqi) - Fix unicode issue for update command in Python 3 - #206 (cqi) - Fix a few E722 code styles errors (cqi) - Fix fake PDC URL in test (cqi) - Use tox to run tests with multiple Python versions (cqi) - Reword error message for missing pagure token - #194 (cqi) - Tell which token ACL is required for request-repo - #195 (cqi) - Rename incorrect references of Koshei to be Anitya (mprahl) -------------------------------------------------------------------------------- ChangeLog:

* Mon Jul 23 2018 Chenxiong Qi cqi@redhat.com - 1.55-1 - Fix installing pycurl for running tests (cqi) - Replace extra module_name with repo_name (cqi) - Replace name module with repo in tests/fixtures/rpkg*.conf (cqi) - Add --fail-fast functionality - #331 (tibbs) - Fix fake spec for build in rawhide (cqi) - Avoid to upload a file with different checksum - #204 (cqi) - Give more information when sources has invalid content - #227 (cqi) - Reserve README.md while import srpm - #149 (cqi) - Set to repo_name property when --name is specified (cqi) - Do not restrict argparse version (cqi) - Check old format args only if there is clone config (cqi) - Fix typo and reword option help and deprecation message (cqi) - Massive replacement of module (cqi) - Deprecate module_name inside rpkg internal (cqi) - Add new option --name and --namespace - #301 (cqi) - Man generator indent workaround (onosek) - Fixing imports in unittests (onosek) - Minor fixes to doc build (cqi) - Fix mistakes during rebase (cqi) - Run document generator script in Py3 explictly (cqi) - Remove warning of nonexisting source/_static/ during doc build (cqi) - Do not generate document for sample rpkg app (cqi) - Exclude subcommand which does not have help (cqi) - Ensure to clean files for generating HTML documents (cqi) - Fix rebase error: add module_build_watch back (cqi) - Fix MANIFEST.in to list files for building doc (cqi) - Rename generate_man_pages.py (cqi) - Generate HTML document and manpage for sample rpkg (cqi) - Simplify doc Makefile (cqi) - Generate commands HTML and man pages (cqi) - Update existing docstrings (cqi) - Generate documents by sphinx - #50 (cqi) - README: new code should be py3 compatible (ktdreyer) - Provide base_module to clone_config templates - #326 (tmz) - Refactor man generator to be reusable (puiterwijk) - Make sure gitcred doesn't land in man (puiterwijk) - Don't inject the credential helper to push if OIDC is unconfigured (puiterwijk) - Add docblocks to gitcred methods and don't quit if OpenIDC is unconfigured (puiterwijk) - Also inject the credential helper with rpkg push (puiterwijk) - Create a "gitcred" command that functions as an OIDC git-credential helper (puiterwijk) * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 1.54-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1.54-3 - Rebuilt for Python 3.7 --------------------------------------------------------------------------------

================================================================================ rubygem-qpid_proton-0.24.0-1.el6 (FEDORA-EPEL-2018-92dc61d804) Ruby language bindings for the Qpid Proton messaging framework -------------------------------------------------------------------------------- Update Information:

Rebase to 0.24.0. -------------------------------------------------------------------------------- ChangeLog:

* Tue Jul 24 2018 Irina Boverman iboverma@redhat.com - 0.24.0-1 - Rebased to 0.24.0 * Sat May 5 2018 Irina Boverman iboverma@redhat.com - 0.22.0-1 - Rebased to 0.22.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1563235 - rubygem-qpid_proton-0.24.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1563235 --------------------------------------------------------------------------------