The following Fedora EPEL 6 Security updates need testing:

https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5300/python-virtual... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribbl... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5373/alpine-2.02-3.... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5379/zabbix-1.8.10-... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5279/unbound-1.4.14... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5388/bugzilla-3.4.1... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5393/openstack-nova... https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5331/phpMyAdmin-3.4...

The following builds have been pushed to Fedora EPEL 6 updates-testing

bugzilla-3.4.13-1.el6 drupal7-advanced_help-1.0-1.el6 drupal7-features-1.0-0.2.beta5.el6 drupal7-pathauto-1.0-1.el6 drupal7-strongarm-2.0-0.2.beta5.el6 drupal7-token-1.0-0.2.beta7.el6 freeDiameter-1.1.1-1.el6 hiredis-0.10.1-1.el6 mcu8051ide-1.4.2-1.el6 nesc-1.3.3-1.el6 openstack-nova-2011.3-14.el6

Details about builds:

================================================================================ bugzilla-3.4.13-1.el6 (FEDORA-EPEL-2011-5388) Bug tracking system -------------------------------------------------------------------------------- Update Information:

This update contains security fixes for CVE-2011-3657 and CVE-2011-3667.

See http://www.bugzilla.org/security/3.4.12/ for details. -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 29 2011 Xavier Bachelot xavier@bachelot.org - 3.4.13-1 - Update to 3.4.13 : security fixes for CVE-2011-3657 and CVE-2011-3667. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #770868 - CVE-2011-3657 CVE-2011-3667 bugzilla: multiple security flaws fixed in 4.1.3, 4.0.2, 3.6.6, and 3.4.12 https://bugzilla.redhat.com/show_bug.cgi?id=770868 --------------------------------------------------------------------------------

================================================================================ drupal7-advanced_help-1.0-1.el6 (FEDORA-EPEL-2011-5389) Allows module developers to store their help outside the module system in html -------------------------------------------------------------------------------- Update Information:

New upstream version. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ drupal7-features-1.0-0.2.beta5.el6 (FEDORA-EPEL-2011-5387) Provides feature management for Drupal -------------------------------------------------------------------------------- Update Information:

New upstream version. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ drupal7-pathauto-1.0-1.el6 (FEDORA-EPEL-2011-5382) Automatically generates path aliases -------------------------------------------------------------------------------- Update Information:

New upstream version. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ drupal7-strongarm-2.0-0.2.beta5.el6 (FEDORA-EPEL-2011-5384) Strongarm gives a way to override the default variable values -------------------------------------------------------------------------------- Update Information:

New upstream version. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ drupal7-token-1.0-0.2.beta7.el6 (FEDORA-EPEL-2011-5392) Provides a method for site designers to control content presentation -------------------------------------------------------------------------------- Update Information:

New upstream version. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ freeDiameter-1.1.1-1.el6 (FEDORA-EPEL-2011-5391) A Diameter protocol open implementation -------------------------------------------------------------------------------- Update Information:

Updated to 1.1.1 -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 29 2011 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> - 1.1.1-1 - Updated to 1.1.1. --------------------------------------------------------------------------------

================================================================================ hiredis-0.10.1-1.el6 (FEDORA-EPEL-2011-5383) A minimalistic C client library for Redis -------------------------------------------------------------------------------- Update Information:

Updated to 0.10.1 -------------------------------------------------------------------------------- ChangeLog:

* Fri Dec 30 2011 Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> 0.10.1-1 - Updated to upstream 0.10.1-28-gd5d8843. --------------------------------------------------------------------------------

================================================================================ mcu8051ide-1.4.2-1.el6 (FEDORA-EPEL-2011-5396) IDE for MCS-51 based microcontrollers -------------------------------------------------------------------------------- Update Information:

Updated to 1.4.2 -------------------------------------------------------------------------------- ChangeLog:

* Fri Dec 30 2011 Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> - 1.4.2-1 - Updated package to 1.4.2 upstream release * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ nesc-1.3.3-1.el6 (FEDORA-EPEL-2011-5386) Compiler used by TinyOS -------------------------------------------------------------------------------- Update Information:

Updated to 1.3.3 -------------------------------------------------------------------------------- ChangeLog:

* Fri Dec 30 2011 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> - 1.3.3-1 - Updated to 1.3.3. - Provide vim files for EL6. * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Aug 18 2010 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> - 1.3.2-3 - Added patch by Till Maas for vim support for nesC. --------------------------------------------------------------------------------

================================================================================ openstack-nova-2011.3-14.el6 (FEDORA-EPEL-2011-5393) OpenStack Compute (nova) -------------------------------------------------------------------------------- Update Information:

Sync up with Fedora spec, to only add fuse group if present Explicitly depend on the fuse package to avoid #767852 Requires manually installing "fuse" first. Also adds libguestfs update Add --yes, --rootpw, and --novapw arguments to openstack-nova-db-setup. Please ensure you have at least python-migrate-0.6-6 installed when testing this Change the default database from sqlite to mysql. -------------------------------------------------------------------------------- ChangeLog:

* Fri Dec 30 2011 Pádraig Brady P@draigBrady.com - 2011.3-14 - Don't require the fuse group (#770927) - Require the fuse package (to avoid #767852) * Wed Dec 14 2011 Pádraig Brady P@draigBrady.com - 2011.3-13 - Sanitize EC2 manifests and image tarballs (#767236, CVE 2011-4596) - update libguestfs support * Tue Dec 6 2011 Russell Bryant rbryant@redhat.com - 2011.3-11 - Add --yes, --rootpw, and --novapw options to openstack-nova-db-setup. * Wed Nov 30 2011 Pádraig Brady P@draigBrady.com - 2011.3-10 - Use updated parallel install versions of epel packages - Add libguestfs support * Tue Nov 29 2011 Pádraig Brady P@draigBrady.com - 2011.3-9 - Update the libvirt dependency from 0.8.2 to 0.8.7 - Ensure we don't access the net when building docs * Tue Nov 29 2011 Russell Bryant rbryant@redhat.com - 2011.3-8 - Change default database to mysql. (#735012) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #767236 - CVE 2011-4596 openstack-nova: Sanitize EC2 manifests and image tarballs https://bugzilla.redhat.com/show_bug.cgi?id=767236 --------------------------------------------------------------------------------