The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.el6 https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6 https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el6 https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el6 https://admin.fedoraproject.org/updates/wordpress-3.1.2-1.el6 https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6 https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.el6

The following builds have been pushed to Fedora EPEL 6 updates-testing

MySQL-zrm-2.2.0-1.el6 bzr-gtk-0.100.0-1.el6 chrony-1.25-2.el6 couchdb-1.0.2-4.el6 drupal6-features-1.0-3.el6 drupal6-token-1.16-1.el6 hiredis-0.10.0-3.el6 libidn2-0.5-1.el6 moodle-2.0.3-1.el6 rssh-2.3.3-1.el6 shunit2-2.1.6-3.el6

Details about builds:

================================================================================ MySQL-zrm-2.2.0-1.el6 (FEDORA-EPEL-2011-3370) MySQL backup manager -------------------------------------------------------------------------------- References:

[ 1 ] Bug #692743 - Build for RHEL6 please https://bugzilla.redhat.com/show_bug.cgi?id=692743 --------------------------------------------------------------------------------

================================================================================ bzr-gtk-0.100.0-1.el6 (FEDORA-EPEL-2011-3363) Bazaar plugin for GTK+ interfaces to most Bazaar operations -------------------------------------------------------------------------------- Update Information:

This package was never built for EPEL6. I cleaned up the spec and it works for me with the version of bzr already in EPEL6. --------------------------------------------------------------------------------

================================================================================ chrony-1.25-2.el6 (FEDORA-EPEL-2011-3362) An NTP client/server -------------------------------------------------------------------------------- Update Information:

chrony is a client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system real-time clock or manual input as time references. --------------------------------------------------------------------------------

================================================================================ couchdb-1.0.2-4.el6 (FEDORA-EPEL-2011-3359) A document database server, accessible via a RESTful JSON API -------------------------------------------------------------------------------- Update Information:

- Fixed Futon test failures with Erlang/OTP R14B02 * Ver. 1.0.2 (Bugfix release) * Ver. 1.0.2 (Bugfix release) -------------------------------------------------------------------------------- ChangeLog:

* Thu May 19 2011 Peter Lemenkov lemenkov@gmail.com - 1.0.2-4 - Fixed issue with R14B02 * Thu May 5 2011 Jan Horak jhorak@redhat.com - 1.0.2-3 - Added Spidermonkey 1.8.5 patch * Mon Mar 7 2011 Caolán McNamara caolanm@redhat.com 1.0.2-2 - rebuild for icu 4.6 * Thu Nov 25 2010 Peter Lemenkov lemenkov@gmail.com 1.0.2-1 - Ver. 1.0.2 - Patches were rebased -------------------------------------------------------------------------------- References:

[ 1 ] Bug #674146 - CVE-2010-3854 couchdb: XSS vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=674146 [ 2 ] Bug #674145 - CVE-2010-3854 couchdb: XSS vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=674145 --------------------------------------------------------------------------------

================================================================================ drupal6-features-1.0-3.el6 (FEDORA-EPEL-2011-3369) Provides feature management for Drupal -------------------------------------------------------------------------------- Update Information:

The features module enables the capture and management of features in Drupal. A feature is a collection of Drupal entities which taken together satisfy a certain use-case. The features module enables the capture and management of features in Drupal. A feature is a collection of Drupal entities which taken together satisfy a certain use-case. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #705375 - README.txt should appear in module directory for use in-module https://bugzilla.redhat.com/show_bug.cgi?id=705375 [ 2 ] Bug #698590 - Review Request: drupal6-features - Provides feature management for Drupal https://bugzilla.redhat.com/show_bug.cgi?id=698590 --------------------------------------------------------------------------------

================================================================================ drupal6-token-1.16-1.el6 (FEDORA-EPEL-2011-3358) Tokens are small bits of text that can be placed into larger documents -------------------------------------------------------------------------------- ChangeLog:

* Thu May 19 2011 Peter Borsa peter.borsa@gmail.com - 1.16-1 - New upstream version. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #706046 - drupal6-token-1.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=706046 --------------------------------------------------------------------------------

================================================================================ hiredis-0.10.0-3.el6 (FEDORA-EPEL-2011-3366) A minimalistic C client library for Redis -------------------------------------------------------------------------------- Update Information:

Hiredis is a minimalistic C client library for the Redis database. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #698067 - Review Request: hiredis - A C client library for redis https://bugzilla.redhat.com/show_bug.cgi?id=698067 --------------------------------------------------------------------------------

================================================================================ libidn2-0.5-1.el6 (FEDORA-EPEL-2011-3371) Library to support IDNA2008 internationalized domain names -------------------------------------------------------------------------------- Update Information:

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names (IDN). It is a standalone library, without any dependency on libidn. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #702861 - Review Request: libidn2 - Library to support IDNA2008 internationalized domain names https://bugzilla.redhat.com/show_bug.cgi?id=702861 --------------------------------------------------------------------------------

================================================================================ moodle-2.0.3-1.el6 (FEDORA-EPEL-2011-3360) A Course Management System -------------------------------------------------------------------------------- Update Information:

New upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog:

* Mon May 9 2011 Jon Ciesla limb@jcomserv.net - 2.0.3-1 - New upstream. * Wed Apr 27 2011 Jon Ciesla limb@jcomserv.net - 2.0.2-2 - Moving from Perl-Text-Aspell to aspell. --------------------------------------------------------------------------------

================================================================================ rssh-2.3.3-1.el6 (FEDORA-EPEL-2011-3375) Restricted shell for use with OpenSSH, allowing only scp and/or sftp -------------------------------------------------------------------------------- Update Information:

Security fix -------------------------------------------------------------------------------- ChangeLog:

* Thu May 19 2011 Rahul Sundaram sundaram@fedoraproject.org - 2.3.3-1 - Upstream security fix release. Resolves rhbz#705904 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #705909 - rssh: potential intended restriction bypass in chroot [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=705909 --------------------------------------------------------------------------------

================================================================================ shunit2-2.1.6-3.el6 (FEDORA-EPEL-2011-3357) A xUnit based unit testing for Unix shell scripts -------------------------------------------------------------------------------- Update Information:

shUnit2 is a xUnit unit test framework for Bourne based shell scripts, and it is designed to work in a similar manner to JUnit, PyUnit, etc. If you have ever had the desire to write a unit test for a shell script, shUnit2 can do the job. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #701845 - Review Request: shunit2 - A xUnit based unit testing for Unix shell scripts https://bugzilla.redhat.com/show_bug.cgi?id=701845 --------------------------------------------------------------------------------