The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5152/zabbix-1.8.9-1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5093/python-celery-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5164/phpMyAdmin-3.4... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5193/moodle-2.1.3-1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-3863/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5203/clearsilver-0.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5220/cacti-0.8.7i-1...

The following builds have been pushed to Fedora EPEL 6 updates-testing

Xnee-3.10.93-1.el6 askbot-0.7.34-1.el6 autojump-19-2.el6 bitlbee-3.0.4-1.el6 bluefish-2.0.3-5.el6 cacti-0.8.7i-1.el6 clearsilver-0.10.5-15.el6 cppcheck-1.52-1.el6 gts-0.7.6-19.20111025.el6 nagios-plugins-bdii-1.0.14-1.el6 opensc-0.12.2-2.el6 tinymce-3.4.3.2-4.el6 tinymce-spellchecker-2.0.5-5.el6 xapian-bindings-1.2.7-1.el6 xapian-core-1.2.7-2.el6

Details about builds:

================================================================================ Xnee-3.10.93-1.el6 (FEDORA-EPEL-2011-5204) X11 environment recorder -------------------------------------------------------------------------------- Update Information:

uptream update X11 environment recorder X11 environment recorder -------------------------------------------------------------------------------- References:

[ 1 ] Bug #726080 - Review Request: Xnee - X11 environment recorder https://bugzilla.redhat.com/show_bug.cgi?id=726080 [ 2 ] Bug #757733 - When I record, xnee closes completely. https://bugzilla.redhat.com/show_bug.cgi?id=757733 --------------------------------------------------------------------------------

================================================================================ askbot-0.7.34-1.el6 (FEDORA-EPEL-2011-5202) Question and Answer forum -------------------------------------------------------------------------------- Update Information:

update to 0.7.34

* Returned support of Django 1.2 (Evgeny)

update to 0.7.33

* Made on log in redirect to the forum index page by default and to the question page, if user was reading the question it is still possible to override the ``next`` url parameter or just rely on django's ``LOGIN_REDIRECT_URL`` (Evgeny) * Implemented retraction of offensive flags (Dejan Noveski) * Made automatic dependency checking more complete (Evgeny) 0.7.32 - update to 0.7.32 * Bugfixes in English locale (Evgeny) - 0.7.31 * Added ``askbot_create_test_fixture`` management command (Dejan Noveski) * Integrated new test fixture into the page load test cases (Dejan Noveski) * Added an embeddable widget for the questions list matching tags (Daniel Mican, Evgeny Fadeev, Dejan Noveski) - 0.7.30 * Context-sensitive RSS url (Dejan Noveski) * Implemented new version of skin (Byron Corrales) * Show unused vote count (Tomasz Zielinski) * Categorized live settings (Evgeny) * Merge users management command (Daniel Mican) * Added management command ``send_accept_answer_reminders`` (Evgeny) * Improved the ``askbot-setup`` script (Adolfo, Evgeny) * Merge users management command (Daniel Mican) * Anonymous caching of the question page (Vlad Bokov) * Fixed sharing button bug, css fixes for new template (Alexander Werner) * Added ASKBOT_TRANSLATE_URL setting for url localization(Alexander Werner) * Changed javascript translation model, moved from jqueryi18n to django (Rosandra Cuello Suñol) * Private forum mode (Vlad Bokov) * Improved text search query in Postgresql (Alexander Werner) * Take LANGUAGE_CODE from request (Alexander Werner) * Added support for LOGIN_REDIRECT_URL to the login app (hjwp, Evgeny) * Updated Italian localization (Luca Ferroni) * Added Catalan localization (Jordi Bofill) * Added management command ``askbot_add_test_content`` (Dejan Noveski) * Continued work on refactoring the database schema (Tomasz Zielinski)

minor bug fixes and additional tests update to 0.7.25

* RSS feed for individual question (Sayan Chowdhury)

* allow pre-population of tags via ask a questions link (Adolfo)

* make answering own question one click harder (Adolfo)

* bootstrap mode (Adolfo, Evgeny) update to 0.7.24

* made it possible to disable the anonymous user greeting altogether (Raghu Udiyar)

* added annotations for the meanings of user levels on the "moderation" page. (Jishnu)

* auto-link patterns - e.g. to bug databases - are configurable from settings. (Arun SAG)

---

-------------------------------------------------------------------------------- ChangeLog:

* Sun Dec 11 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.34-1 - update to 0.7.34 * Returned support of Django 1.2 (Evgeny) * Thu Dec 8 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.33-1 - update to 0.7.33 * Made on log in redirect to the forum index page by default and to the question page, if user was reading the question it is still possible to override the ``next`` url parameter or just rely on django's ``LOGIN_REDIRECT_URL`` (Evgeny) * Implemented retraction of offensive flags (Dejan Noveski) * Made automatic dependency checking more complete (Evgeny) * Wed Nov 30 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.32-1 - update to 0.7.32 * Bugfixes in English locale (Evgeny) - 0.7.31 * Added ``askbot_create_test_fixture`` management command (Dejan Noveski) * Integrated new test fixture into the page load test cases (Dejan Noveski) * Added an embeddable widget for the questions list matching tags (Daniel Mican, Evgeny Fadeev, Dejan Noveski) - 0.7.30 * Context-sensitive RSS url (Dejan Noveski) * Implemented new version of skin (Byron Corrales) * Show unused vote count (Tomasz Zielinski) * Categorized live settings (Evgeny) * Merge users management command (Daniel Mican) * Added management command ``send_accept_answer_reminders`` (Evgeny) * Improved the ``askbot-setup`` script (Adolfo, Evgeny) * Merge users management command (Daniel Mican) * Anonymous caching of the question page (Vlad Bokov) * Fixed sharing button bug, css fixes for new template (Alexander Werner) * Added ASKBOT_TRANSLATE_URL setting for url localization(Alexander Werner) * Changed javascript translation model, moved from jqueryi18n to django (Rosandra Cuello Suñol) * Private forum mode (Vlad Bokov) * Improved text search query in Postgresql (Alexander Werner) * Take LANGUAGE_CODE from request (Alexander Werner) * Added support for LOGIN_REDIRECT_URL to the login app (hjwp, Evgeny) * Updated Italian localization (Luca Ferroni) * Added Catalan localization (Jordi Bofill) * Added management command ``askbot_add_test_content`` (Dejan Noveski) * Continued work on refactoring the database schema (Tomasz Zielinski) * Tue Nov 15 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.29-1 - update to 0.7.29 * minor bug fixes and additional tests (Evgeny, Adolfo) * Wed Nov 9 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.27-1 - update to 0.7.27 * implemented new version of skin (Byron Corrales) * show unused vote count (Tomasz Zielinski) * categorized live settings (Evgeny) * added management command ``send_accept_answer_reminders`` (Evgeny) * improved the ``askbot-setup`` script (Adolfo, Evgeny) * merge users management command (Daniel Mican) * anonymous caching of the question page (Vlad Bokov) - 0.7.26 * added settings for email subscription defaults (Adolfo) * resolved duplicate notifications on posts with mentions (Evegeny) * added color-animated transitions when urls with hash tags are visited (Adolfo) * repository tags will be 'automatically added' to new releases (Evgeny) * Thu Oct 6 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.25-1 - update to 0.7.25 * RSS feed for individual question (Sayan Chowdhury) * allow pre-population of tags via ask a questions link (Adolfo) * make answering own question one click harder (Adolfo) * bootstrap mode (Adolfo, Evgeny) * Tue Oct 4 2011 Rahul Sundaram sundaram@fedoraproject.org - 0.7.24-1 - update to 0.7.24 * made it possible to disable the anonymous user greeting altogether (Raghu Udiyar) * added annotations for the meanings of user levels on the "moderation" page. (Jishnu) * auto-link patterns - e.g. to bug databases - are configurable from settings. (Arun SAG) --------------------------------------------------------------------------------

================================================================================ autojump-19-2.el6 (FEDORA-EPEL-2011-5207) A fast way to navigate your filesystem from the command line -------------------------------------------------------------------------------- Update Information:

- Update to version 19 -------------------------------------------------------------------------------- ChangeLog:

* Sun Dec 11 2011 Thibault North tnorth@fedoraproject.org - 19-2 - Add symlink for jumpapplet * Sun Dec 11 2011 Thibault North tnorth@fedoraproject.org - 19-1 - Update to version 19 * Sun Apr 10 2011 Thibault North tnorth@fedoraproject.org - 15-1 - New upstream release * Mon Feb 7 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 14-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ bitlbee-3.0.4-1.el6 (FEDORA-EPEL-2011-5219) IRC to other chat networks gateway -------------------------------------------------------------------------------- Update Information:

Bitlbee version 3.0.4 (released 2011-12-04):

- Merged Skype support. This used to be a separate plugin, and it still is, but by including it with BitlBee by default it will be easier to keep it in sync with changes to BitlBee - Fixed a file descriptor leak bug that may have caused strange behaviour in BitlBee sessions running for a long time - Now fetches Twitter mentions as well if the "fetch_mentions" account setting is enabled - With t.co now all over Twitter, show the original (but truncated) URL between <brackets> - Fixed MSN Messenger login issues ("timeout" while fetching buddy list) - Another (related) GnuTLS compatibility fix (now 2.13+?) -------------------------------------------------------------------------------- ChangeLog:

* Tue Dec 6 2011 Adam Williamson awilliam@redhat.com - 3.0.4-1 - new upstream release 3.0.4 - drop 823_822.diff (merged upstream obviously) --------------------------------------------------------------------------------

================================================================================ bluefish-2.0.3-5.el6 (FEDORA-EPEL-2011-5198) GTK2 web development application for experienced users -------------------------------------------------------------------------------- Update Information:

This is a cumulative bugfix update for bluefish 2.0.3, addressing a number of crash-on-save and crash-on-exit issues with selected fixes from upstream. -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 5 2011 Paul Howarth paul@city-fan.org - 2.0.3-5 - Fix segfault on save file (Gnome bug 645936, #691129) - Fix crash on exit (Gnome bug 665410, #751535) - Update patch for #683497 with further changes from upstream; this may also fix Gnome bug 644495 (#668784, #678737) and 657163 (#732460) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #691129 - [abrt] bluefish-2.0.3-3.fc14: g_type_check_instance_cast: Process /usr/bin/bluefish was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=691129 [ 2 ] Bug #751535 - [abrt] bluefish-2.0.3-4.fc16: g_file_equal: Process /usr/bin/bluefish was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=751535 [ 3 ] Bug #668784 - [abrt] bluefish-2.0.2-5.fc14: g_file_get_basename: Process /usr/bin/bluefish was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=668784 [ 4 ] Bug #678737 - [abrt] bluefish-2.0.2-5.fc14: Process /usr/bin/bluefish was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=678737 [ 5 ] Bug #732460 - [abrt] bluefish-2.0.3-4.fc15: g_cancellable_cancel: Process /usr/bin/bluefish was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=732460 --------------------------------------------------------------------------------

================================================================================ cacti-0.8.7i-1.el6 (FEDORA-EPEL-2011-5220) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information:

Update to 0.8.7i. Upstream release notes are at http://www.cacti.net/release_notes_0_8_7i.php. Notably "Multiple security vulnerabilities". Also, merge some changes that were in Fedora: add mod_security overrides, and block HTTP access to log and rra directories. -------------------------------------------------------------------------------- ChangeLog:

* Sun Dec 11 2011 Ken Dreyer ktdreyer@ktdreyer.com - 0.8.7i-1 - New upstream release (BZ #766573). * Fri Nov 11 2011 Ken Dreyer ktdreyer@ktdreyer.com - 0.8.7h-2 - block HTTP access to log and rra directories (#609856) - overrides for mod_security - set logrotate to su to cacti apache when rotating (#753079) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #766573 - cacti-0.8.7i is available https://bugzilla.redhat.com/show_bug.cgi?id=766573 [ 2 ] Bug #609856 - cacti: no httpd restrictions for log and rra directories https://bugzilla.redhat.com/show_bug.cgi?id=609856 --------------------------------------------------------------------------------

================================================================================ clearsilver-0.10.5-15.el6 (FEDORA-EPEL-2011-5203) Fast and powerful HTML templating system -------------------------------------------------------------------------------- Update Information:

CVE-2011-4357 -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 12 2011 Jon Ciesla limburgher@gmail.com - 0.10.5-15 - Patch for CVE-2011-4357, BZ 757543. * Fri Jun 17 2011 Marcela Mašláňová mmaslano@redhat.com - 0.10.5-14 - Perl mass rebuild * Fri Jun 10 2011 Marcela Mašláňová mmaslano@redhat.com - 0.10.5-13 - Perl 5.14 mass rebuild * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.10.5-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #757543 - clearsilver (neo_cgi): Format string flaw by processing CGI error messages in Python module [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=757543 --------------------------------------------------------------------------------

================================================================================ cppcheck-1.52-1.el6 (FEDORA-EPEL-2011-5214) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information:

Update to newest stable release, see details at http://sourceforge.net/apps/trac/cppcheck/milestone/1.52. -------------------------------------------------------------------------------- ChangeLog:

* Sun Dec 11 2011 Jussi Lehtola jussilehtola@fedoraproject.org - 1.52-1 - Update to 1.52. * Wed Oct 26 2011 Ville Skyttä ville.skytta@iki.fi - 1.51-2 - Include man page and more other docs. - Build with $RPM_LD_FLAGS. - Improve summary and description. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #766259 - cppcheck-1.52 is available https://bugzilla.redhat.com/show_bug.cgi?id=766259 --------------------------------------------------------------------------------

================================================================================ gts-0.7.6-19.20111025.el6 (FEDORA-EPEL-2011-5206) GNU Triangulated Surface Library -------------------------------------------------------------------------------- Update Information:

Add patches from Fedora branch to fix multilib and other issues. Update to latest upstream snapshot and drop upstreamed patches. First build of package for EPEL6 --------------------------------------------------------------------------------

================================================================================ nagios-plugins-bdii-1.0.14-1.el6 (FEDORA-EPEL-2011-5200) Nagios Plugin - check_bdii_entries -------------------------------------------------------------------------------- Update Information:

Nagios Probe for the BDII -------------------------------------------------------------------------------- References:

[ 1 ] Bug #754137 - Review Request: nagios-plugins-bdii - Nagios Probe for the BDII https://bugzilla.redhat.com/show_bug.cgi?id=754137 --------------------------------------------------------------------------------

================================================================================ opensc-0.12.2-2.el6 (FEDORA-EPEL-2011-5218) Smart card library and applications -------------------------------------------------------------------------------- Update Information:

Bugfix update from upstream. -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 17 2011 Tomas Mraz tmraz@redhat.com - 0.12.2-2 - Rebuilt to fix trailing slashes in filelist from rpmbuild bug * Tue Jul 19 2011 Kalev Lember kalevlember@gmail.com - 0.12.2-1 - Update to 0.12.2 (#722659) * Wed May 18 2011 Kalev Lember kalev@smartlink.ee - 0.12.1-1 - Update to 0.12.1 (#705743) - Removed BR libtool-ltdl-devel to build with glibc's libdl instead * Tue Apr 12 2011 Tomas Mraz tmraz@redhat.com - 0.12.0-4 - drop multilib conflicting and duplicated doc file (#695368) * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.12.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #765732 - opensc v0.12.0 is somewhat broken and needs a update atleast to v0.12.1 https://bugzilla.redhat.com/show_bug.cgi?id=765732 --------------------------------------------------------------------------------

================================================================================ tinymce-3.4.3.2-4.el6 (FEDORA-EPEL-2011-5215) Web based Javascript HTML WYSIWYG editor control -------------------------------------------------------------------------------- Update Information:

new package -------------------------------------------------------------------------------- References:

[ 1 ] Bug #608574 - Review Request: tinymce - Web based Javascript HTML WYSIWYG editor control https://bugzilla.redhat.com/show_bug.cgi?id=608574 --------------------------------------------------------------------------------

================================================================================ tinymce-spellchecker-2.0.5-5.el6 (FEDORA-EPEL-2011-5216) TinyMCE spellchecker plugin -------------------------------------------------------------------------------- Update Information:

new package -------------------------------------------------------------------------------- References:

[ 1 ] Bug #608575 - Review Request: tinymce-spellchecker - TinyMCE spellchecker plugin https://bugzilla.redhat.com/show_bug.cgi?id=608575 --------------------------------------------------------------------------------

================================================================================ xapian-bindings-1.2.7-1.el6 (FEDORA-EPEL-2011-5205) Bindings for the Xapian Probabilistic Information Retrieval Library -------------------------------------------------------------------------------- Update Information:

Upstream update -------------------------------------------------------------------------------- ChangeLog:

* Sat Dec 10 2011 Denis Arnaud denis.arnaud_fedora@m4x.org 1.2.7-1 - Update to 1.2.7 --------------------------------------------------------------------------------

================================================================================ xapian-core-1.2.7-2.el6 (FEDORA-EPEL-2011-5205) The Xapian Probabilistic Information Retrieval Library -------------------------------------------------------------------------------- Update Information:

Upstream update -------------------------------------------------------------------------------- ChangeLog:

* Sat Dec 10 2011 Denis Arnaud denis.arnaud_fedora@m4x.org 1.2.7-2 - Re-added libxapian.la, as it is needed in order to build the xapian-bindings package * Sat Dec 10 2011 Denis Arnaud denis.arnaud_fedora@m4x.org 1.2.7-1 - Update to 1.2.7 --------------------------------------------------------------------------------