The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4998/ReviewBoard-1.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4788/phpldapadmin-1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5031/torque-2.5.7-7... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4864/net6-1.3.14-1.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-3863/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4741/cherokee-1.2.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4944/proftpd-1.3.3g... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4969/phpMyAdmin-3.4...

The following builds have been pushed to Fedora EPEL 6 updates-testing

Xnee-3.10-7.el6 atop-1.26-1.el6.1 bitlbee-3.0.3-6.el6 clamsmtp-1.10-5.el6 findthatword-0.1-4.el6 jemalloc-2.2.5-1.el6 python-atfork-0.1.2-1.el6 python-clientform-0.2.7-6.el6 python-mechanize-0.2.5-1.el6 rear-1.12.0-1.el6 torque-2.5.7-7.el6 transmission-2.11-2.el6

Details about builds:

================================================================================ Xnee-3.10-7.el6 (FEDORA-EPEL-2011-5052) X11 environment recorder -------------------------------------------------------------------------------- Update Information:

X11 environment recorder -------------------------------------------------------------------------------- References:

[ 1 ] Bug #726080 - Review Request: Xnee - X11 environment recorder https://bugzilla.redhat.com/show_bug.cgi?id=726080 --------------------------------------------------------------------------------

================================================================================ atop-1.26-1.el6.1 (FEDORA-EPEL-2011-5053) An advanced interactive monitor to view the load on system and process level -------------------------------------------------------------------------------- Update Information:

First EL-6 build. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #755199 - Request: atop for EL6 https://bugzilla.redhat.com/show_bug.cgi?id=755199 --------------------------------------------------------------------------------

================================================================================ bitlbee-3.0.3-6.el6 (FEDORA-EPEL-2011-5061) IRC to other chat networks gateway -------------------------------------------------------------------------------- Update Information:

Fixed MSN login (upstream revision #823) -------------------------------------------------------------------------------- ChangeLog:

* Fri Nov 11 2011 Adam Williamson awilliam@redhat.com - 3.0.3-6 - 823_822.diff: fix MSN login (upstream rev #823) * Thu Aug 4 2011 Matěj Cepl mcepl@redhat.com - 3.0.3-5 - Tiny typo in systemd units. * Sat Jul 30 2011 Matěj Cepl mcepl@redhat.com - 3.0.3-4 - Rebuilt against new libraries. * Thu Jul 28 2011 Matěj Cepl mcepl@redhat.com - 3.0.3-3 - Add Restart=always to systemd (following discussion on upstream #738). -------------------------------------------------------------------------------- References:

[ 1 ] Bug #755649 - Connections to MSN fail https://bugzilla.redhat.com/show_bug.cgi?id=755649 --------------------------------------------------------------------------------

================================================================================ clamsmtp-1.10-5.el6 (FEDORA-EPEL-2011-5048) A SMTP virus scanning system -------------------------------------------------------------------------------- Update Information:

Fixes typo in logrotate configuration -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 21 2011 Nathanael Noblet nathanael@gnat.ca - 1.10-5 - Fix log rotation -------------------------------------------------------------------------------- References:

[ 1 ] Bug #755476 - Inconsistent configuration of log file name https://bugzilla.redhat.com/show_bug.cgi?id=755476 --------------------------------------------------------------------------------

================================================================================ findthatword-0.1-4.el6 (FEDORA-EPEL-2011-5047) A word search maker -------------------------------------------------------------------------------- Update Information:

Added python2-devel BR to fix macro error that caused incorrect file placement. -------------------------------------------------------------------------------- ChangeLog:

* Tue Nov 22 2011 Jon Ciesla limb@jcomserv.net - 0.1-4 - Added BR for python2-devel to fix macro. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #755633 - findthatword installs /findthatword.py https://bugzilla.redhat.com/show_bug.cgi?id=755633 --------------------------------------------------------------------------------

================================================================================ jemalloc-2.2.5-1.el6 (FEDORA-EPEL-2011-5055) General-purpose scalable concurrent malloc implementation -------------------------------------------------------------------------------- Update Information:

This new upstream release is a bugfix release. From the upstream changelog:

- Fix huge_ralloc() race when using mremap(2). This is a serious bug that could cause memory corruption and/or crashes. - Fix huge_ralloc() to maintain chunk statistics. - Fix malloc_stats_print(..., "a") output.

New upstream release

From the upstream release notes:

jemalloc 2.2.3 is now available. This version fixes numerous bugs related to heap profiling.

For the complete ChangeLog, see: http://www.canonware.com/jemalloc/ChangeLog.html

-------------------------------------------------------------------------------- ChangeLog:

* Sun Nov 6 2011 Ingvar Hagelund ingvar@redpill-linpro.com - 2.2.5-1 - New upstream release, closes #75618 * Sun Nov 6 2011 Ingvar Hagelund ingvar@redpill-linpro.com - 2.2.4-1 - New upstream release * Thu Oct 13 2011 Ingvar Hagelund ingvar@redpill-linpro.com - 2.2.3-1 - New upstream release, closes #735057 --------------------------------------------------------------------------------

================================================================================ python-atfork-0.1.2-1.el6 (FEDORA-EPEL-2011-5054) Provides an API to register callbacks when forking -------------------------------------------------------------------------------- Update Information:

Atfork provides a pthread_atfork() work-a-like API for Python 2.4, 2.5 and 2.6 along with fixers to monkey patch standard library modules at run time to be safe in programs using both threading and forking. --------------------------------------------------------------------------------

================================================================================ python-clientform-0.2.7-6.el6 (FEDORA-EPEL-2011-5059) Python module for client-side HTML forms -------------------------------------------------------------------------------- Update Information:

Initial release of python-mechanize and python-clientform for EPEL6 --------------------------------------------------------------------------------

================================================================================ python-mechanize-0.2.5-1.el6 (FEDORA-EPEL-2011-5059) Stateful programmatic web browsing -------------------------------------------------------------------------------- Update Information:

Initial release of python-mechanize and python-clientform for EPEL6 --------------------------------------------------------------------------------

================================================================================ rear-1.12.0-1.el6 (FEDORA-EPEL-2011-5050) Relax and Recover (Rear) is a Linux Disaster Recovery framework -------------------------------------------------------------------------------- Update Information:

Release rear-1.12.0 (Linux disaster recovery software) -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 21 2011 Gratien D'haese <gdha at sourceforge.net> - 1.12.0-1 - placeholder for release --------------------------------------------------------------------------------

================================================================================ torque-2.5.7-7.el6 (FEDORA-EPEL-2011-5031) Tera-scale Open-source Resource and QUEue manager -------------------------------------------------------------------------------- Update Information:

This torque update corrects a security vulnerability whereby a user connecting to the torque pbs_server could impersonate another user present within the torque batch system. -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 21 2011 Steve Traylen steve.traylen@cern.ch - 2.5.7-7 - Add torque-fix-munge-rhbz#752079-PTII.patch * Thu Nov 17 2011 Steve Traylen steve.traylen@cern.ch - 2.5.7-6 - Empty release for release mistake. * Thu Nov 17 2011 Steve Traylen steve.traylen@cern.ch - 2.5.7-5 - Add patch torque-fix-munge-rhbz#752079.patch -------------------------------------------------------------------------------- References:

[ 1 ] Bug #752079 - Torque and Munge impersonation vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=752079 --------------------------------------------------------------------------------

================================================================================ transmission-2.11-2.el6 (FEDORA-EPEL-2011-5056) A lightweight GTK+ BitTorrent client -------------------------------------------------------------------------------- Update Information:

First release of Transmission into EPEL6, initial testing appears to have gone well now releasing for general testing. --------------------------------------------------------------------------------