The following Fedora EPEL 6 Security updates need testing:
Age URL
606
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
120
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11274/ssmtp-2.61-21.el6
62
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11865/quassel-0.9.1-1.el6
35
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-1.el6
21
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12222/drupal6-6.29-1.el6
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12324/munin-2.0.19-1.el6
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12361/libreswan-3.7-1.el6
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12386/v8-3.14.5.10-3.el6
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12403/djvulibre-3.5.25.3-11.el6
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12424/perl-Proc-Daemon-0.14-9.el6
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12426/ngircd-21-1.el6
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12427/seamonkey-2.21-3.esr2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
docker-io-0.7.2-1.el6
drupal7-features-2.0-5.el6
golang-github-syndtr-gocapability-0-0.3.git3454319.el6
gridsite-2.2.0-1.el6
idle3-tools-0.9.1-1.el6
mirrormanager-1.4.3-1.el6
mysql-utilities-1.3.6-1.el6
ngircd-21-1.el6
opendkim-2.9.0-2.el6
perl-Proc-Daemon-0.14-9.el6
seamonkey-2.21-3.esr2.el6
sqlcli-2-3.el6
x2goclient-4.0.1.2-1.el6
Details about builds:
================================================================================
docker-io-0.7.2-1.el6 (FEDORA-EPEL-2013-12416)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
upstream release bump to v0.7.2
update to upstream 0.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Lokesh Mandvekar <l...@redhat.com> - 0.7.2-1
- upstream release bump to v0.7.2
* Fri Dec 6 2013 Vincent Batts <vba...@redhat.com> - 0.7.1-1
- upstream release of v0.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1044373 - docker-io-0.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1044373
--------------------------------------------------------------------------------
================================================================================
drupal7-features-2.0-5.el6 (FEDORA-EPEL-2013-12420)
Provides feature management for Drupal
--------------------------------------------------------------------------------
Update Information:
Quote from the page of Features
Plumber(https://drupal.org/project/features_plumber),
"Note: The d7 version of this module should no longer be necessary when using
more recent versions of Features module. If you feel this is incorrect, please
open an issue."
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Peter Borsa <peter.bo...@gmail.com> - 2.0-5
- Fix Obsolotes line, remove zero
* Wed Dec 18 2013 Peter Borsa <peter.bo...@gmail.com> - 2.0-4
- Obsolete drupal7-features_plumber package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1043582 - according to upstream drupal7-features_plumber is not
required anymore
https://bugzilla.redhat.com/show_bug.cgi?id=1043582
--------------------------------------------------------------------------------
================================================================================
golang-github-syndtr-gocapability-0-0.3.git3454319.el6 (FEDORA-EPEL-2013-12412)
POSIX capability library for the Go programming language
--------------------------------------------------------------------------------
Update Information:
new release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1032750 - Review Request: golang-github-syndtr-gocapability -
POSIX capability library for the Go programming language
https://bugzilla.redhat.com/show_bug.cgi?id=1032750
--------------------------------------------------------------------------------
================================================================================
gridsite-2.2.0-1.el6 (FEDORA-EPEL-2013-12417)
Grid Security for the Web, Web platforms for Grids
--------------------------------------------------------------------------------
Update Information:
New upstream version 2.2.0 and version 1.7.29.
In particular the default for generated keys changes from 512 to 1024 bits.
openssl in RHEL6.5 does no longer supports keys of 512 bits :
https://github.com/CESNET/gridsite/issues/8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Steve Traylen <steve.tray...@cern.ch> - 2.2.0-3
- New upstream 2.2.0 for compat package - default keylength 1024
- New upstream 1.7.29 for compat package - default keylength 1024
- Upstream source URL is now github.
- Drop gridsite-httpd24_v3.patch since fixed upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010547 - packaging issues in gridsite-2.0.4-1.el6
https://bugzilla.redhat.com/show_bug.cgi?id=1010547
--------------------------------------------------------------------------------
================================================================================
idle3-tools-0.9.1-1.el6 (FEDORA-EPEL-2013-12418)
Manipulate the value of the idle3 timer found on recent WD Hard Disk Drives
--------------------------------------------------------------------------------
Update Information:
Add idle3-tools, a small utility to edit some low-level knobs in WD hard drives.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #883104 - Review Request: idle3-tools - Manipulate the value of the
idle3 timer found on recent WD Hard Disk Drives
https://bugzilla.redhat.com/show_bug.cgi?id=883104
--------------------------------------------------------------------------------
================================================================================
mirrormanager-1.4.3-1.el6 (FEDORA-EPEL-2013-12415)
Fedora mirror management system
--------------------------------------------------------------------------------
Update Information:
bugfix upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.3-1
- upstream bugfix release
- Reduce Fedora-isms to make it more usable for other distributions
* Tue Jul 23 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.2-1
- upstream bugfix release
* Mon Jun 17 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.1-1
- upstream 1.4.1 pure bugfix release
* Fri Jun 14 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.0-1
- upstream 1.4.0 release
* Fri Jan 25 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.0-0.1
- initial 1.4 branch for testing
* Sat Jun 9 2012 Matt Domsch <mdom...@fedoraproject.org>
- move -maps to separate subpackage
* Thu Nov 25 2010 Matt Domsch <mdom...@fedoraproject.org>
- add tmpfiles.d file (BZ636623)
--------------------------------------------------------------------------------
================================================================================
mysql-utilities-1.3.6-1.el6 (FEDORA-EPEL-2013-12413)
MySQL Utilities
--------------------------------------------------------------------------------
Update Information:
Upstream changelog:
Release 1.3.6 (Released November 26, 2013)
- BUG#13417229: mysqldbexport/mysqldbimport doesn't work with non-latin data
- BUG#13563921: mysqlmetagrep does not search the body of all objects
- BUG#13572964: mysqlprocgrep missing kill process by id
- BUG#13773247: mysqlserverclone wrongly states it can only clone local server
- BUG#14181681: server info should include the log files (error, general, slow)
- BUG#14725390: multithreaded copy, export, import
- BUG#16226348: test server_info_errors does not execute correctly on windows
- BUG#16386941: Parsing errors to identify treatment instead of use errno
- BUG#17066910: a killed connection can cause failover
- BUG#17214291: cannot access login-path with dashes in the name
- BUG#17217461: mysqluserclone throws exception when --source omitted
- BUG#17242369: extend mysqlfrm to produce .frm file
- BUG#17347424: No MySQL Utilities package for MAC OS X
- BUG#17393523: Utilities can not be upgraded using RPM distribution pkg
- BUG#17393742: Debian pkgs can't use C/py if License types are different
- BUG#17415167: mysqluc crashes when pressing home button on windows
- BUG#17423074: reuse drop_db() function in mut tests instead of redefining it
- BUG#17457402: mysqlindexcheck not displaying best/worst when low data
- BUG#17474810: constraint error copying the employees with mysqldbcopy
- BUG#17475780: mysqlauditadmin unnecessary flush audit log during rotation
- BUG#17510350: mysqldbcompare fails with no error message
- BUG#17548335: clone_db test to copy databases with weird names not executed
- BUG#17622298: mysqldbcopy and mysqldbexport copy and export routines after
views
- BUG#17633465: mysqldbexport requires the replicate user on master
- BUG#17634676: Add missing option to show license type on Utilities
- BUG#17722274: Error when copying db with blob fields
- BUG#17903944: mysqlfailover crashes when non-existing slave is used
- BUG#17908146: metagrep utility crashes when unsupported object-type is used
- BUG#17909223: The backspace key is not recognized by utilities console
- WL#7232: MySQL Utilities: PEP-8 Compliance
Release 1.3.5 (Released August 21, 2013)
- BUG#17061126: mysqldiff needs an auto_increment ignoring option
- BUG#17205680: non-deterministic failure of rpl_admin tests
- BUG#17256821: Commercial and GPL msi distro shares build descriptor
- BUG#17271100: mysqldbexport does not export fkeys
- BUG#17316515: Community distros contain both GPL and Commercial license
- BUG#17353571: GPL & Commercial msi installers create separate installs
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2013 Remi Collet <r...@fedoraproject.org> - 1.3.6-1
- update to 1.3.6 GA
- add mysqlauditadmin and mysqlauditgrep on EPEL-6
* Mon Sep 9 2013 Remi Collet <r...@fedoraproject.org> - 1.3.5-1
- update to 1.3.5 GA
--------------------------------------------------------------------------------
================================================================================
ngircd-21-1.el6 (FEDORA-EPEL-2013-12426)
Next Generation IRC Daemon
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 21.
Fixes a security issue. See http://ngircd.barton.de/doc/NEWS for more detailed
changes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2013 Kevin Fenzi <ke...@scrye.com> 21-1
- Update to 21
* Wed Sep 4 2013 Kevin Fenzi <ke...@scrye.com> 20.3-2
- Fix docs to not include Makefiles. Fixes bug #1004557
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1000722 - ngircd: failure to drop supplementary groups
https://bugzilla.redhat.com/show_bug.cgi?id=1000722
--------------------------------------------------------------------------------
================================================================================
opendkim-2.9.0-2.el6 (FEDORA-EPEL-2013-12414)
A DomainKeys Identified Mail (DKIM) milter to sign and/or verify mail
--------------------------------------------------------------------------------
Update Information:
- Updating to new upstream 2.9.0 for all build version
- Fixing some minor bugs for systemd users.
* Sun Nov 3 2013 Steve Jenkins <steve stevejenkins com> - 2.8.4-4
- Rebuild of all release packages to sync version numbers
* Sun Nov 3 2013 Ville Skytta <ville.sky...@iki.fi> - 2.8.4-3
- Fix path to docs in sample config when doc dir is unversioned (#993997).
* Sat Aug 03 2013 Petr Pisar <ppi...@redhat.com> - 2.8.4-2
- Perl 5.18 rebuild
* Sun Nov 3 2013 Steve Jenkins <steve stevejenkins com> - 2.8.4-4
- Rebuild of all release packages to sync version numbers
* Sun Nov 3 2013 Ville Skytta <ville.sky...@iki.fi> - 2.8.4-3
- Fix path to docs in sample config when doc dir is unversioned (#993997).
* Sat Aug 03 2013 Petr Pisar <ppi...@redhat.com> - 2.8.4-2
- Perl 5.18 rebuild
* Sun Nov 3 2013 Steve Jenkins <steve stevejenkins com> - 2.8.4-4
- Rebuild of all release packages to sync version numbers
* Sun Nov 3 2013 Ville Skytta <ville.sky...@iki.fi> - 2.8.4-3
- Fix path to docs in sample config when doc dir is unversioned (#993997).
* Sat Aug 03 2013 Petr Pisar <ppi...@redhat.com> - 2.8.4-2
- Perl 5.18 rebuild
* Sun Nov 3 2013 Steve Jenkins <steve stevejenkins com> - 2.8.4-4
- Rebuild of all release packages to sync version numbers
* Sun Nov 3 2013 Ville Skytta <ville.sky...@iki.fi> - 2.8.4-3
- Fix path to docs in sample config when doc dir is unversioned (#993997).
* Sat Aug 03 2013 Petr Pisar <ppi...@redhat.com> - 2.8.4-2
- Perl 5.18 rebuild
* Sun Nov 3 2013 Steve Jenkins <steve stevejenkins com> - 2.8.4-4
- Rebuild of all release packages to sync version numbers
* Sun Nov 3 2013 Ville Skytta <ville.sky...@iki.fi> - 2.8.4-3
- Fix path to docs in sample config when doc dir is unversioned (#993997).
* Sat Aug 03 2013 Petr Pisar <ppi...@redhat.com> - 2.8.4-2
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Steve Jenkins <steve stevejenkins com> - 2.9.0-2
- Patch adds user and group to systemd service file (Thx jco...@redhat.com)
- Changed default ownership of /etc/opendkim/keys directory to opendkim user
* Wed Dec 18 2013 Steve Jenkins <steve stevejenkins com> - 2.9.0-1
- Update to use newer upstream 2.9.0 source code
- Added libbsd-devel to BuildRequires
- Removed listrl references from libopendkim files section (handled by
libbsd-devel)
* Sun Nov 3 2013 Steve Jenkins <steve stevejenkins com> - 2.8.4-4
- Rebuild of all release packages to sync version numbers
* Sun Nov 3 2013 Ville Skytta <ville.sky...@iki.fi> - 2.8.4-3
- Fix path to docs in sample config when doc dir is unversioned (#993997).
* Sat Aug 3 2013 Petr Pisar <ppi...@redhat.com> - 2.8.4-2
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1041546 - opendkim.service needs user/group
https://bugzilla.redhat.com/show_bug.cgi?id=1041546
[ 2 ] Bug #993997 - opendkim possibly affected by F-20 unversioned docdir
change
https://bugzilla.redhat.com/show_bug.cgi?id=993997
--------------------------------------------------------------------------------
================================================================================
perl-Proc-Daemon-0.14-9.el6 (FEDORA-EPEL-2013-12424)
Run Perl program as a daemon process
--------------------------------------------------------------------------------
Update Information:
- add patch from debian to fix pidfile with mode 666, CVE-2013-7135
- update to 0.14 http://cpansearch.perl.org/src/DETI/Proc-Daemon-0.14/Changes
- fix wrong-file-end-of-line-encoding and file-not-utf8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Remi Collet <r...@fedoraproject.org> 0.14-9
- fix pidfile with mode 666, patch from debian, CVE-2013-7135
- update to 0.14
http://cpansearch.perl.org/src/DETI/Proc-Daemon-0.14/Changes
- fix wrong-file-end-of-line-encoding and file-not-utf8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1043872 - CVE-2013-7135 perl-Proc-Daemon: writes pidfile with mode
666
https://bugzilla.redhat.com/show_bug.cgi?id=1043872
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.21-3.esr2.el6 (FEDORA-EPEL-2013-12427)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Apply changes for Mozilla Extended Support Release 24.2.0 .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Dmitry Butskoy <dmi...@butskoy.name> 2.21-3.esr2
- apply Extended Support Release patches, derived from the thunderbird
esr24.2.0 tree
--------------------------------------------------------------------------------
================================================================================
sqlcli-2-3.el6 (FEDORA-EPEL-2013-12422)
A command-line SQL query utility
--------------------------------------------------------------------------------
Update Information:
A command-line SQL query utility
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1034523 - Review Request: sqlcli - a tool for running sql queries
from the command line using sqlalchemy
https://bugzilla.redhat.com/show_bug.cgi?id=1034523
--------------------------------------------------------------------------------
================================================================================
x2goclient-4.0.1.2-1.el6 (FEDORA-EPEL-2013-12419)
X2Go Client application (Qt4)
--------------------------------------------------------------------------------
Update Information:
- Update to 4.0.1.2:
- Provide Keywords: key in .desktop file.
- Store broker HTTPS certificate exceptions in $HOME/.x2go/ssl/exceptions
(before: $HOME/ssl/exceptions). (Fixes: #328).
- Perform sanity checks on data that comes in from X2Go Servers. Prohibit
the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333).
- Add option --broker-cacertfile. Allow usage of non-system-wide installed
(self-signed) SSL certificate chains for https (SSL) session broker
connections. (Fixes: #311).
- Update man page for new --tray-icon cmdline option.
- Update man page for --broker-url. Explain the syntax of <URL>.
- Properly handle (=expand) the "~" character in key filenames. (Brought to
attention by Eldamir on IRC. Thanks!).
- Expand tilde operator for all other file paths handed over to X2Go Client
via sessions file or cmdline parameter.
- Syntax fix of x2goclient.desktop file.
- Test for various file locations of the pulseaudio cookie file.
- Strip whitespaces off of user name, host name and other strings when
loading / saving session profiles. (Fixes: #315).
- New option --tray-icon. Force showing the tray icon, even for hidden
sessions. Also allow creation of .desktop files with --tray-icon optionally
being enabled. (Fixes: #316).
- Update Spanish translation.
- Support for keys "shadowuser" "shadowdisplay" and "shadowmode" in config
file. This allows choosing the default display for shadow sessions.
- Support for GSSApi(Kerberos 5) authentication. Using ssh/scp commands on
Linux and Mac and plink/pscp on Windows.
- Support for ChallengeResponseAuthentication (Google Authenticator)
- Additional check if authentication with GSSApi successfull
- c121b7e2d3d83abdc2d7a29637bc3294e38b2ec3 broke checking if remote command
produce only stderr and not stdout. It made x2goclient crash if x2gostartagent
send LIMIT error. Current commit fixes this issue.
- SshMasterConnection should use current user name if no user name is
specified in session settings
- GSSApi(Kerberos 5) authentication for sshproxy and sshbroker
- Handle SSH host key changes more elegantly and allow user interaction if
such a host key change occurs. (Fixes: #241).
- Update summary and description from upstream
- Split out browser plugin into x2goplugin package
- Add x2goplugin-provider package for apache config
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 17 2013 Orion Poplawski <or...@cora.nwra.com> - 4.0.1.2-1
- Update to 4.0.1.2
- Update summary and description from upstream
- Split out browser plugin into x2goplugin package
- Add x2goplugin-provider package for apache config
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-de...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
