The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5253/openstack-nova... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5300/python-virtual... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5193/moodle-2.1.3-1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5279/unbound-1.4.14... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-3863/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5203/clearsilver-0.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5220/cacti-0.8.7i-2...

The following builds have been pushed to Fedora EPEL 6 updates-testing

Xnee-3.11-1.el6 bluecurve-icon-theme-8.0.2-6.el6 ctpl-0.3.2-4.el6 cxxtest-3.10.1-5.el6 drupal7-7.10-1.el6 dvisvgm-1.0.10-1.el6 flann-1.6.11-1.el6 gccxml-0.9.0-0.7.20111218.el6 glue-validator-1.0.2-3.el6 lcgdm-dav-0.5.4-1.el6 offlineimap-6.3.4-1.el6 openocd-0.5.0-1.el6 php-pear-Net-IDNA2-0.1.1-3.el6 python-virtualenv-1.7-1.el6 python-zmq-2.1.9-3.el6 quazip-0.4.3-1.el6 recoll-1.16.1-3.el6 rubygem-dnsruby-1.53-1.el6 snap-0.6-1.el6 unbound-1.4.14-1.el6 xfwm4-4.8.3-1.el6

Details about builds:

================================================================================ Xnee-3.11-1.el6 (FEDORA-EPEL-2011-5285) X11 environment recorder -------------------------------------------------------------------------------- Update Information:

update to 3.11 uptream update X11 environment recorder X11 environment recorder -------------------------------------------------------------------------------- References:

[ 1 ] Bug #726080 - Review Request: Xnee - X11 environment recorder https://bugzilla.redhat.com/show_bug.cgi?id=726080 [ 2 ] Bug #757733 - When I record, xnee closes completely. https://bugzilla.redhat.com/show_bug.cgi?id=757733 --------------------------------------------------------------------------------

================================================================================ bluecurve-icon-theme-8.0.2-6.el6 (FEDORA-EPEL-2011-5291) Bluecurve icon theme -------------------------------------------------------------------------------- Update Information:

The bluecurve icon theme is required by IceWM. This update lets you fulfill the requirement and actually install IceWM on RHEL6. --------------------------------------------------------------------------------

================================================================================ ctpl-0.3.2-4.el6 (FEDORA-EPEL-2011-5302) Template library and engine written in C -------------------------------------------------------------------------------- Update Information:

This is the initial build for CTPL on EPEL. Please note that the command line tool is not available tue to dependency issues. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #749874 - Please build for EPEL 6 https://bugzilla.redhat.com/show_bug.cgi?id=749874 --------------------------------------------------------------------------------

================================================================================ cxxtest-3.10.1-5.el6 (FEDORA-EPEL-2011-5292) A JUnit-like testing framework for C++ -------------------------------------------------------------------------------- Update Information:

This update fixes the handling of invalid command-line arguments. -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 19 2011 Martin Gieseking martin.gieseking@uos.de - 3.10.1-5 - Fixed https://bugzilla.redhat.com/show_bug.cgi?id=768869 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #768869 - [abrt] cxxtest-3.10.1-4.fc15: cxxtestgen:73:abort:TypeError: expected a character buffer object https://bugzilla.redhat.com/show_bug.cgi?id=768869 --------------------------------------------------------------------------------

================================================================================ drupal7-7.10-1.el6 (FEDORA-EPEL-2011-5296) An open-source content-management platform -------------------------------------------------------------------------------- Update Information:

Update to new 7.10. Full details on update available here: * http://drupal.org/node/1361968 -------------------------------------------------------------------------------- ChangeLog:

* Tue Dec 6 2011 Jon Ciesla limburgher@gmail.com - 7.10-1 - New upstream, BZ 760504. --------------------------------------------------------------------------------

================================================================================ dvisvgm-1.0.10-1.el6 (FEDORA-EPEL-2011-5290) DVI to SVG converter -------------------------------------------------------------------------------- Update Information:

This is a small maintenance release with the following changes: * The new environment variable DVISVGM_COLORS allows user-defined message colors. * The ID format used to reference glyphs and paths has been updated in order to avoid potential ID collisions.

For further information see http://dvisvgm.sourceforge.net -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 19 2011 Martin Gieseking martin.gieseking@uos.de - 1.0.10-1 - updated to upstream release 1.0.10 --------------------------------------------------------------------------------

================================================================================ flann-1.6.11-1.el6 (FEDORA-EPEL-2011-5294) Fast Library for Approximate Nearest Neighbors -------------------------------------------------------------------------------- Update Information:

This update contains the latest upstream release of flann (version 1.6.11) -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 19 2011 Rich Mattes richmattes@gmail.com - 1.6.11-1 - Update to release 1.6.11 * Fri May 13 2011 Rich Mattes richmattes@gmail.com - 1.6.9-1 - Update to 1.6.9 - Make flann-devel require boost-devel for boost/mpi.hpp --------------------------------------------------------------------------------

================================================================================ gccxml-0.9.0-0.7.20111218.el6 (FEDORA-EPEL-2011-5286) XML output extension to GCC -------------------------------------------------------------------------------- Update Information:

Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 19 2011 Mattias Ellert mattias.ellert@fysast.uu.se - 0.9.0-0.7.20111218 - Updated cvs snapshot --------------------------------------------------------------------------------

================================================================================ glue-validator-1.0.2-3.el6 (FEDORA-EPEL-2011-5295) A validation framework for Grid information providers -------------------------------------------------------------------------------- Update Information:

A validation framework for GLUE information -------------------------------------------------------------------------------- References:

[ 1 ] Bug #752829 - Review Request: glue-validator - A validation framework for GLUE 2.0 information https://bugzilla.redhat.com/show_bug.cgi?id=752829 --------------------------------------------------------------------------------

================================================================================ lcgdm-dav-0.5.4-1.el6 (FEDORA-EPEL-2011-5298) HTTP/DAV front end to the DPM/LFC services -------------------------------------------------------------------------------- Update Information:

This package provides the HTTP/DAV frontend to the LCGDM components (DPM and LFC).

The Disk Pool Manager (DPM) is a lightweight grid storage component, allowing access to data using commonly used grid protocols. The LCG File Catalog (LFC) is the main catalog being used by grid communities for both file bookkeeping and metadata. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #749299 - Review Request: lcgdm-dav - HTTP/DAV frontend to the DPM/LFC services https://bugzilla.redhat.com/show_bug.cgi?id=749299 --------------------------------------------------------------------------------

================================================================================ offlineimap-6.3.4-1.el6 (FEDORA-EPEL-2011-5297) Powerful IMAP/Maildir synchronization and reader support -------------------------------------------------------------------------------- Update Information:

OfflineIMAP is a tool to simplify your e-mail reading. With OfflineIMAP, you can read the same mailbox from multiple computers. You get a current copy of your messages on each computer, and changes you make one place will be visible on all other systems. For instance, you can delete a message on your home computer, and it will appear deleted on your work computer as well. OfflineIMAP is also useful if you want to use a mail reader that does not have IMAP support, has poor IMAP support, or does not provide disconnected operation.

--------------------------------------------------------------------------------

================================================================================ openocd-0.5.0-1.el6 (FEDORA-EPEL-2011-5281) Debugging, in-system programming and boundary-scan testing for embedded devices -------------------------------------------------------------------------------- Update Information:

Updated to 0.5.0 -------------------------------------------------------------------------------- ChangeLog:

* Wed Dec 14 2011 Dean Glazeski <dnglaze at gmail.com> - 0.5.0-1 - RPM build for new release. --------------------------------------------------------------------------------

================================================================================ php-pear-Net-IDNA2-0.1.1-3.el6 (FEDORA-EPEL-2011-5283) PHP library for punycode encoding and decoding -------------------------------------------------------------------------------- Update Information:

To support roundcubemail. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #725942 - roundcubemail-0.5.3-1 requires php-pear-Net-IDNA2, which is not available https://bugzilla.redhat.com/show_bug.cgi?id=725942 --------------------------------------------------------------------------------

================================================================================ python-virtualenv-1.7-1.el6 (FEDORA-EPEL-2011-5300) Tool to create isolated Python environments -------------------------------------------------------------------------------- Update Information:

CVE-2011-4617 -------------------------------------------------------------------------------- ChangeLog:

* Tue Dec 20 2011 Steve 'Ashcrow' Milner me@stevemilner.org - 1.7-1 - Update for https://bugzilla.redhat.com/show_bug.cgi?id=769067 * Wed Feb 9 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #769067 - CVE-2011-4617 python-virtualenv XSS https://bugzilla.redhat.com/show_bug.cgi?id=769067 --------------------------------------------------------------------------------

================================================================================ python-zmq-2.1.9-3.el6 (FEDORA-EPEL-2011-5308) Software library for fast, message-based applications -------------------------------------------------------------------------------- Update Information:

Tests subpackage now properly requires the main package -------------------------------------------------------------------------------- ChangeLog:

* Wed Dec 14 2011 Thomas Spura tomspur@fedoraproject.org - 2.1.9-3 - tests package requires main package - filter python3 libs * Thu Dec 8 2011 Thomas Spura tomspur@fedoraproject.org - 2.1.9-2 - use proper buildroot macro - don't include tests twice --------------------------------------------------------------------------------

================================================================================ quazip-0.4.3-1.el6 (FEDORA-EPEL-2011-5282) Qt/C++ wrapper for the minizip library -------------------------------------------------------------------------------- Update Information:

* 2011-09-09 0.4.3 * New test suite using QTestLib. * Fixed bytesAvailable(), pos() and atEnd(). * Added ZIP v1.0 support and disabling data descriptor for compatibility with some older software. * Fixed DLL export/import issues for some symbols. * Added QUAZIP_STATIC macro for compiling as a static library or directly including the source. * Added getFileNameList() and getFileInfoList() convenience functions. * Added some buffering to JlCompress to improve performance.

--------------------------------------------------------------------------------

================================================================================ recoll-1.16.1-3.el6 (FEDORA-EPEL-2011-5288) Desktop full text search tool with Qt GUI -------------------------------------------------------------------------------- Update Information:

Recoll is a personal full text search package for Linux, FreeBSD and other Unix systems. It is based on a very strong back end (Xapian), for which it provides an easy to use, feature-rich, easy administration interface.

--------------------------------------------------------------------------------

================================================================================ rubygem-dnsruby-1.53-1.el6 (FEDORA-EPEL-2011-5304) Ruby DNS(SEC) implementation -------------------------------------------------------------------------------- Update Information:

Updated to 1.53 --------------------------------------------------------------------------------

================================================================================ snap-0.6-1.el6 (FEDORA-EPEL-2011-5277) A modular system backup/restore utility -------------------------------------------------------------------------------- Update Information:

update to v0.6 upstream release initial import of snap -------------------------------------------------------------------------------- References:

[ 1 ] Bug #755890 - Review Request: snap A modular cross-platform system backup/restore utility https://bugzilla.redhat.com/show_bug.cgi?id=755890 --------------------------------------------------------------------------------

================================================================================ unbound-1.4.14-1.el6 (FEDORA-EPEL-2011-5279) Validating, recursive, and caching DNS(SEC) resolver -------------------------------------------------------------------------------- Update Information:

Security update for CVE-2011-4528 / VU#209659 -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 19 2011 Paul Wouters paul@cypherpunks.ca - 1.4.14-1 - Upgraded to 1.4.14 for CVE-2011-4528 / VU#209659 - SSL-wrapped query support for dnssec-trigger - EDNS handling changes - Removed integrated EDNS patches - Disabled use-caps-for-id, GoDaddy domains now break on it - Enabled new harden-below-nxdomain -------------------------------------------------------------------------------- References:

[ 1 ] Bug #769068 - CVE-2011-4528 CVE-2011-4869 unbound 1.4.13 DNS Server multiple crashes https://bugzilla.redhat.com/show_bug.cgi?id=769068 --------------------------------------------------------------------------------

================================================================================ xfwm4-4.8.3-1.el6 (FEDORA-EPEL-2011-5299) Next generation window manager for Xfce -------------------------------------------------------------------------------- Update Information:

A number of small bugfixes. -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 19 2011 Kevin Fenzi kevin@scrye.com - 4.8.3-1 - Update to 4.8.3 * Tue Nov 1 2011 Christoph Wickert cwickert@fedoraproject.org - 4.8.2-1 - Update to 4.8.2 - Remove all upstreamed patches - Apply Nodoka theme only in Fedora * Tue Nov 1 2011 Christoph Wickert cwickert@fedoraproject.org - 4.8.1-5 - Provide window manager for firstboot (#750397) * Sat Oct 15 2011 Christoph Wickert cwickert@fedoraproject.org - 4.8.1-4 - Another patch to fix resizing (#670173) --------------------------------------------------------------------------------