The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6531/nsd-3.2.13-1.e... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6561/perl-RT-Authen... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6559/Django-1.3.2-1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6547/openstack-nova... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3-1.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6504/moodle-2.1.7-1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6613/drupal6-og-2.4... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6587/dokuwiki-0-0.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl...

The following builds have been pushed to Fedora EPEL 6 updates-testing

ddrescue-1.16-1.el6 dokuwiki-0-0.10.20120125.b.el6 drupal6-og-2.4-1.el6 drupal7-features-1.0-1.el6 drupal7-rules-2.2-1.el6 erlang-skerl-1.1.0-2.el6 fedmsg-0.2.6-2.el6 fedora-packager-0.5.10.0-1.el6 gfal2-2.0.0-1.el6 gfalFS-1.0.0-1.el6 git-review-1.17-2.el6 gridftp-ifce-2.2.0-0.el6 guake-0.4.4-4.el6 ike-2.1.7-6.el6 imapsync-1.498-1.el6 ipplan-4.92-5.b.el6 lcg-util-1.13.0-0.el6 moksha-0.8.8-3.el6 mpi4py-1.3-5.el6 python-eventlet-0.9.17-1.el6 python-virtualenvcontext-0.1.6-1.el6 salt-0.10.2-2.el6 will-crash-0.2-2.el6

Details about builds:

================================================================================ ddrescue-1.16-1.el6 (FEDORA-EPEL-2012-6590) Data recovery tool trying hard to rescue data in case of read errors -------------------------------------------------------------------------------- Update Information:

Update the package to current upstream version 1.16.

-------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 2 2012 Michal Ambroz <rebus AT_ seznam.cz> - 1.16-1 - Update to 1.16. * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.13-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.13-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #591042 - ddrescue-1.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=591042 --------------------------------------------------------------------------------

================================================================================ dokuwiki-0-0.10.20120125.b.el6 (FEDORA-EPEL-2012-6587) Standards compliant simple to use wiki -------------------------------------------------------------------------------- Update Information:

Upgrade to latest upstream -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 2 2012 Andrew Colin Kissa andrew@topdog.za.net - 0-0.10.20120125.b - Latest upstream - Fix Bugzilla bugs #844726, #840255, #795487, #741384, #840686, #835145 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #741384 - CVE-2011-3727 dokuwiki: installation path disclosure via a direct request to a .php file https://bugzilla.redhat.com/show_bug.cgi?id=741384 [ 2 ] Bug #840686 - CVE-2012-0283 dokuwiki: XSS flaw in tpl_mediaFileList() https://bugzilla.redhat.com/show_bug.cgi?id=840686 [ 3 ] Bug #835145 - CVE-2012-3354 dokuwiki: Full path disclosure with PHP error level enabled https://bugzilla.redhat.com/show_bug.cgi?id=835145 [ 4 ] Bug #717146 - CVE-2011-2510 dokuwiki: XSS in DokuWiki's RSS embedding mechanism https://bugzilla.redhat.com/show_bug.cgi?id=717146 --------------------------------------------------------------------------------

================================================================================ drupal6-og-2.4-1.el6 (FEDORA-EPEL-2012-6613) Organic Group Module for Drupal6 -------------------------------------------------------------------------------- Update Information:

Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 3 2012 Anderson Silva ansilva@redhat.com - 2.4-1 - Security update from upstream --------------------------------------------------------------------------------

================================================================================ drupal7-features-1.0-1.el6 (FEDORA-EPEL-2012-6610) Provides feature management for Drupal -------------------------------------------------------------------------------- Update Information:

New upstream version, http://drupal.org/node/1700490. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 3 2012 Peter Borsa peter.borsa@gmail.com - 1.0-1 - New upstream version. * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.0-0.7.rc3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ drupal7-rules-2.2-1.el6 (FEDORA-EPEL-2012-6605) It allows site administrators to define conditionally executed actions -------------------------------------------------------------------------------- Update Information:

New upstream version, http://drupal.org/node/1711652. -------------------------------------------------------------------------------- ChangeLog:

* Sat Aug 4 2012 Peter Borsa peter.borsa@gmail.com - 2.2-1 - New upstream version. * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #845729 - drupal7-rules-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=845729 --------------------------------------------------------------------------------

================================================================================ erlang-skerl-1.1.0-2.el6 (FEDORA-EPEL-2012-6599) Skein hash function for Erlang, via NIFs -------------------------------------------------------------------------------- Update Information:

* Initial build -------------------------------------------------------------------------------- References:

[ 1 ] Bug #652648 - Review Request: erlang-skerl - Skein hash function for Erlang, via NIFs https://bugzilla.redhat.com/show_bug.cgi?id=652648 --------------------------------------------------------------------------------

================================================================================ fedmsg-0.2.6-2.el6 (FEDORA-EPEL-2012-6594) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information:

Require latest moksha. API enhancement. 0.2.5 with more realistic X509 capacity 0.2.4 with fix for disabled ssl 0.2.3 with upstream typo fixes Added deps on m2crypto and python-m2ext /var/log/fedmsg wasn't being created correctly. Require moksha >= 0.8.3. python-argparse fix for epel-6. -------------------------------------------------------------------------------- ChangeLog:

* Mon Jul 30 2012 Ralph Bean rbean@redhat.com - 0.2.6-2 - Require moksha >= 0.8.8 * Mon Jul 30 2012 Ralph Bean rbean@redhat.com - 0.2.6-1 - Upstream bugfixes and API enhancements. * Thu Jul 19 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.2.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sun Jul 15 2012 Ralph Bean rbean@redhat.com - 0.2.5-1 - Upstream crypto updates in preparation for a more realistic X509 setup. * Fri Jul 13 2012 Ralph Bean rbean@redhat.com - 0.2.4-1 - Upstream bugfix for when ssl is disabled. * Wed Jul 11 2012 Ralph Bean rbean@redhat.com - 0.2.3-1 - Upstream bump that fixes some typos. * Tue Jul 10 2012 Ralph Bean rbean@redhat.com - 0.2.2-3 - Added deps on python-argparse for py < 2.7 (rhel6) * Sat Jul 7 2012 Ralph Bean rbean@redhat.com - 0.2.2-2 - Added deps on m2crypto and python-m2ext * Sat Jul 7 2012 Ralph Bean rbean@redhat.com - 0.2.2-1 - Update to fedmsg-irc to fix lineRate issues - fedmsg.crypto module - sign and validate messages * Mon Jun 11 2012 Ralph Bean rbean@redhat.com - 0.2.1-2 - Require moksha >= 0.8.3 * Mon Jun 11 2012 Ralph Bean rbean@redhat.com - 0.2.1-1 - Override producers and consumers entry-points in the hub. Should fix a collision that fedmsg-irc is having with fedoracommunity. * Mon Jun 11 2012 Ralph Bean rbean@redhat.com - 0.2.0-4 - Introduce temporary hard dep on orbited. * Mon Jun 11 2012 Ralph Bean rbean@redhat.com - 0.2.0-3 - /var/log/fedmsg wasn't being created correctly. --------------------------------------------------------------------------------

================================================================================ fedora-packager-0.5.10.0-1.el6 (FEDORA-EPEL-2012-6598) Tools for setting up a fedora maintainer environment -------------------------------------------------------------------------------- Update Information:

fix secondary arch configs to use topurl -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 3 2012 Dennis Gilmore dennis@ausil.us - 0.5.10.0-1 - fix up secondary arch configs for newer koji - clean up message for browser import * Thu Jul 19 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.5.9.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.5.9.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Nov 8 2011 Jesse Keating jkeating@redhat.com - 0.5.9.6-1 - Install secondary-arch files correctly * Mon Nov 7 2011 Jesse Keating jkeating@redhat.com - 0.5.9.5-1 - Move fedpkg to it's own package, no longer part of fedora-packager --------------------------------------------------------------------------------

================================================================================ gfal2-2.0.0-1.el6 (FEDORA-EPEL-2012-6614) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information:

gfal 2.0.0 first release candidate, Synchronisation with EMI 2 Update -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 20 2012 Adrien Devresse <adevress at cern.ch> - 2.0.0-1 - Official initial release candidate of gfal 2.0 - Transfer API is official - gridftp support for performance marker, checksum - gridftp support for gridftpv2, dcau param - SRM support for spacetoken in transfer - SRM abort auto-management - parallel operations in transfers - file protocol dedicated in a plugin - configuration file support - srm timeout support - general purpose checksum operation support - POSIX operation support for gridftp - cleaner plugin API - new documentation - I hope that you will enjoy gfal 2.0 :) --------------------------------------------------------------------------------

================================================================================ gfalFS-1.0.0-1.el6 (FEDORA-EPEL-2012-6592) Filesystem client based on GFAL 2.0 -------------------------------------------------------------------------------- Update Information:

gfalFS first RC 1.0, Synchronisation with EMI 2 Update -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 20 2012 Adrien Devresse <adevress at cern.ch> - 1.0.0-1 - initial 1.0 release - include bug fix for srm and gsiftp url for fgettr --------------------------------------------------------------------------------

================================================================================ git-review-1.17-2.el6 (FEDORA-EPEL-2012-6606) A git helper for integration with Gerrit -------------------------------------------------------------------------------- Update Information:

Add the git-review package to EPEL 6. This is exactly the same package as in Fedora, with the spec slightly adapted. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #840826 - Add git-review in EPEL6 https://bugzilla.redhat.com/show_bug.cgi?id=840826 --------------------------------------------------------------------------------

================================================================================ gridftp-ifce-2.2.0-0.el6 (FEDORA-EPEL-2012-6616) GridFTP library for FTS and lcgutil -------------------------------------------------------------------------------- Update Information:

Update 2.2.0 ( lcgutil 1.13.0 ), Synchronisation with EMI 2 Update -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 20 2012 Adrien Devresse <adevress at cern.ch> - 2.2.0-0 - gridftp version 2 support - EMI 2 Update synchronisation --------------------------------------------------------------------------------

================================================================================ guake-0.4.4-4.el6 (FEDORA-EPEL-2012-6585) Drop-down terminal for GNOME -------------------------------------------------------------------------------- Update Information:

Update to 0.4.3 and - fix the os.kill(pid, signal.SIGTERM) command when the pid is dead. - re-add the patch to fix the notification - add patch to fix the focus on gnome-shell

changes since 0.4.3:

- New icon for both guake and guake-prefs - Improved build scripts for themable icon installation - Updated some autotools files - Fixing a typo in the guake-prefs.desktop file (Zaitor) - wm_class can't be get by gnome-shell css #414 - Add the missing "System" category required by FDO menu specification (Jekyll Wu) - Do not install the system-wide autostart file (Jekyll Wu) - Call window.move/resize only when not in fullscreen mode #403 (Empee584) - Terminal scrolls to the wrong position when hiding and unhiding in fullscreen mode #258 (Empee584) - Toggle fullscreen malfunction #371 (Empee584 & Sylvestre) - Guake overlaped the second screen in a dual-monitor setup with a sidepanel (Sylvestre) - Tree items in Keyboard shortcuts tab of preferences window not localized #280 (Robertd) - Add option to start in fullscreen mode #408 (Dom Sekotill) - Refactoring of the fullscreen logic and addition of the --fullscreen flag (Marcel Partap)

changes since 0.4.3:

- New icon for both guake and guake-prefs - Improved build scripts for themable icon installation - Updated some autotools files - Fixing a typo in the guake-prefs.desktop file (Zaitor) - wm_class can't be get by gnome-shell css #414 - Add the missing "System" category required by FDO menu specification (Jekyll Wu) - Do not install the system-wide autostart file (Jekyll Wu) - Call window.move/resize only when not in fullscreen mode #403 (Empee584) - Terminal scrolls to the wrong position when hiding and unhiding in fullscreen mode #258 (Empee584) - Toggle fullscreen malfunction #371 (Empee584 & Sylvestre) - Guake overlaped the second screen in a dual-monitor setup with a sidepanel (Sylvestre) - Tree items in Keyboard shortcuts tab of preferences window not localized #280 (Robertd) - Add option to start in fullscreen mode #408 (Dom Sekotill) - Refactoring of the fullscreen logic and addition of the --fullscreen flag (Marcel Partap) Update to 0.4.3 Update to 0.4.3 changes since 0.4.3:

- New icon for both guake and guake-prefs - Improved build scripts for themable icon installation - Updated some autotools files - Fixing a typo in the guake-prefs.desktop file (Zaitor) - wm_class can't be get by gnome-shell css #414 - Add the missing "System" category required by FDO menu specification (Jekyll Wu) - Do not install the system-wide autostart file (Jekyll Wu) - Call window.move/resize only when not in fullscreen mode #403 (Empee584) - Terminal scrolls to the wrong position when hiding and unhiding in fullscreen mode #258 (Empee584) - Toggle fullscreen malfunction #371 (Empee584 & Sylvestre) - Guake overlaped the second screen in a dual-monitor setup with a sidepanel (Sylvestre) - Tree items in Keyboard shortcuts tab of preferences window not localized #280 (Robertd) - Add option to start in fullscreen mode #408 (Dom Sekotill) - Refactoring of the fullscreen logic and addition of the --fullscreen flag (Marcel Partap) Update to 0.4.3 Update to 0.4.3 -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 2 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.4-4 - Fix indentation in the patch 3 * Wed Aug 1 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.4-3 - Add patch to allow os.kill(pid, signal.SIGTERM) to fails * Fri Jul 27 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.4-2 - Re-add the fix notification patch * Fri Jul 27 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.4-1 - Update to 0.4.4 - Clean a little bit the spec according to new guidelines * Thu Jul 19 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.4.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue Jun 26 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.3-3 - Add patch to fix the focus issue: RHBZ#828243 - Guake Trac #436 * Tue Jun 12 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.3-2 - Temporary fix for the globalhotkeys * Fri Jun 8 2012 Pierre-Yves Chibon pingou@pingoured.fr - 0.4.3-1 - Update to 0.4.3 - Add Requires: notification-daemon - Drops patches -------------------------------------------------------------------------------- References:

[ 1 ] Bug #831547 - guake doesn't lose focus when hidden https://bugzilla.redhat.com/show_bug.cgi?id=831547 [ 2 ] Bug #815996 - [abrt] guake-0.4.2-7.fc17: guake.py:1201:delete_shell:OSError: [Errno 3] Aucun processus de ce type https://bugzilla.redhat.com/show_bug.cgi?id=815996 --------------------------------------------------------------------------------

================================================================================ ike-2.1.7-6.el6 (FEDORA-EPEL-2012-6619) Shrew Soft VPN Client For Linux -------------------------------------------------------------------------------- Update Information:

Initial build for el6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #802143 - Add ike package to epel6 repo https://bugzilla.redhat.com/show_bug.cgi?id=802143 --------------------------------------------------------------------------------

================================================================================ imapsync-1.498-1.el6 (FEDORA-EPEL-2012-6604) Tool to migrate email between IMAP servers -------------------------------------------------------------------------------- Update Information:

Update to 1.498 -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 2 2012 Nick Bebout nb@fedoraproject.org - 1.498-1 - Upgrade to 1.498 --------------------------------------------------------------------------------

================================================================================ ipplan-4.92-5.b.el6 (FEDORA-EPEL-2012-6612) Web-based IP address manager and tracker -------------------------------------------------------------------------------- Update Information:

Upgrade to latest upstream -------------------------------------------------------------------------------- ChangeLog:

* Sat Aug 4 2012 Andrew Colin Kissa andrew@topdog.za.net - 4.92-5.b - Upgrade to latest upstream - Fix bugzilla #789512 * Tue Jan 18 2011 Andrew Colin Kissa andrew@topdog.za.net - 4.92-4.a - Upgrade to latest upstream - Fix bugzilla #663897 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #789512 - ipplan using deprecated functions https://bugzilla.redhat.com/show_bug.cgi?id=789512 --------------------------------------------------------------------------------

================================================================================ lcg-util-1.13.0-0.el6 (FEDORA-EPEL-2012-6596) Command line tools for wlcg storage system -------------------------------------------------------------------------------- Update Information:

Update 1.13.0, Synchronisation with EMI 2 Update -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 20 2012 Adrien Devresse <adevress at cern.ch> - 1.13.0-0 - gfal 1.0 32 bits problem correction (gfal) - stack smash correction - srm timeout management (srm-ifce) - gridftpv2 support (gridftp-ifce) - first EPEL / EMI update synchronisation --------------------------------------------------------------------------------

================================================================================ moksha-0.8.8-3.el6 (FEDORA-EPEL-2012-6602) A platform for creating real-time web applications -------------------------------------------------------------------------------- Update Information:

Require python-repoze-what. Fixes to txzmq and websockets. ssl for websockets. -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 2 2012 Ralph Bean rbean@redhat.com - 0.8.8-3 - Re-added python-repoze-what to the Requires list. * Thu Jul 19 2012 Ralph Bean rbean@redhat.com - 0.8.8-2 - Patch for ssl-enabled websocket client. * Tue Jul 17 2012 Ralph Bean rbean@redhat.com - 0.8.8-1 - Security fix for websockets. - Bugfix for txzmq subscription. --------------------------------------------------------------------------------

================================================================================ mpi4py-1.3-5.el6 (FEDORA-EPEL-2012-6589) Python bindings of the Message Passing Interface (MPI) -------------------------------------------------------------------------------- Update Information:

Initial import of mpi4py for el6.

On ppc64, there won't be a mpi4py-mpich2 package, as there is no mpich2 available at all. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #562504 - Review Request: mpi4py - Python bindings of the Message Passing Interface (MPI) https://bugzilla.redhat.com/show_bug.cgi?id=562504 --------------------------------------------------------------------------------

================================================================================ python-eventlet-0.9.17-1.el6 (FEDORA-EPEL-2012-6618) Highly concurrent networking library -------------------------------------------------------------------------------- Update Information:

- Update to 0.9.17 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 3 2012 Pádraig Brady <P@draigBrady.com - 0.9.17-1 - Update to 0.9.17 --------------------------------------------------------------------------------

================================================================================ python-virtualenvcontext-0.1.6-1.el6 (FEDORA-EPEL-2012-6595) Switch virtualenvs with a python context manager -------------------------------------------------------------------------------- Update Information:

Upstream version with support for python-2.6. -------------------------------------------------------------------------------- ChangeLog:

* Sat Aug 4 2012 Ralph Bean rbean@redhat.com - 0.1.6-1 - Upstream version with support for python-2.6. * Sat Jul 21 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ salt-0.10.2-2.el6 (FEDORA-EPEL-2012-6591) A parallel remote execution system -------------------------------------------------------------------------------- Update Information:

Fix upstream bug #1730 Update to 0.10.2 -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 2 2012 Clint Savage herlo1@gmail.com - 0.10.2-2 - Fix upstream bug #1730 per RHBZ#845295 * Tue Jul 31 2012 Clint Savage herlo1@gmail.com - 0.10.2-1 - Moved to upstream release 0.10.2 - Removed PyXML as a dependency -------------------------------------------------------------------------------- References:

[ 1 ] Bug #845295 - Fix regression in disk.usage https://bugzilla.redhat.com/show_bug.cgi?id=845295 --------------------------------------------------------------------------------

================================================================================ will-crash-0.2-2.el6 (FEDORA-EPEL-2012-6617) Set of crashing executables written in various languages -------------------------------------------------------------------------------- Update Information:

Initial push of will-crash. Please test and add karma. Initial push of will-crash. Please test and add karma. --------------------------------------------------------------------------------