The following Fedora EPEL 6 Security updates need testing: Age URL 641 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6 97 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11865/quassel-0.9.1-1.el6 70 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-1.el6 34 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12427/seamonkey-2.21-3.esr2.el6 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0110/drupal7-entity-1.3-1.el6 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0105/strongswan-5.1.1-4.el6 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0166/mediawiki119-1.19.10-1.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0197/drupal7-7.26-1.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0202/transifex-client-0.10-1.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0205/drupal6-6.30-1.el6 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0233/libreswan-3.8-1.el6 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0282/moodle-2.4.8-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing aqbanking-5.3.2-0.1.beta.el6 cups-bjnp-1.2.2-1.el6 gnucash-2.4.15-2.el6 gwenhywfar-4.9.0-0.2.beta.el6 mirrormanager-1.4.4-1.el6 moodle-2.4.8-1.el6 nodejs-bignumber-js-1.2.0-4.el6 pyhoca-cli-0.4.0.2-1.el6 pyhoca-gui-0.4.0.9-2.el6 python-fmn-lib-0.2.0-1.el6 python-fmn-rules-0.1.4-1.el6 python-fmn-web-0.2.0-1.el6 python-fmn-web-0.2.0-2.el6 python-x2go-0.4.0.9-1.el6 ssdeep-2.10-2.el6 x2goclient-4.0.1.3-1.el6 Details about builds: ================================================================================ aqbanking-5.3.2-0.1.beta.el6 (FEDORA-EPEL-2014-0232) A library for online banking functions and financial data import/export -------------------------------------------------------------------------------- Update Information: This updates GnuCash to the latest 2.4 release, and updates AqBanking to add support for SEPA. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 17 2014 Bill Nottingham <nott...@redhat.com> - 5.3.2beta-0.2 - bump to 5.3.2beta * Wed Jan 15 2014 Bill Nottingham <nott...@redhat.com> - 5.3.1beta-0.1 - update to latest upstream - disable aqebics for now * Thu Dec 12 2013 Bill Nottingham <nott...@redhat.com> - 5.0.25-4 - add upstream patches for OFXDirectConnect (#1040224) * Tue Aug 6 2013 Bill Nottingham <nott...@redhat.com> - 5.0.25-3 - Fix for UnversionedDocDirs feature (#993669) * Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 5.0.25-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Apr 24 2013 Bill Nottingham <nott...@redhat.com> - 5.0.25-1 - update to 5.0.25 * Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 5.0.22-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 5.0.22-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jan 19 2012 Bill Nottingham <nott...@redhat.com> - 5.0.22-2 - update to 5.0.22 - fix up rpaths a little cleaner * Thu Jan 12 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 5.0.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Oct 25 2011 Bill Nottingham <nott...@redhat.com> - 5.0.16-1 - update to 5.0.16 * Thu Oct 20 2011 Marcela Mašláňová <mmasl...@redhat.com> - 5.0.2-3.2 - rebuild with new gmp without compat lib * Mon Oct 10 2011 Peter Schiffer <pschi...@redhat.com> - 5.0.2-3.1 - rebuild with new gmp * Mon Feb 21 2011 Bill Nottingham <nott...@redhat.com> - 5.0.2-3 - fix -devel obsoletes * Wed Feb 16 2011 Bill Nottingham <nott...@redhat.com> - 5.0.2-2 - remove aqpaypal source * Fri Feb 11 2011 Bill Nottingham <nott...@redhat.com> - 5.0.2-1 - update to latest upstream release * Mon Feb 7 2011 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 4.2.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Sun Aug 22 2010 Rex Dieter <rdie...@fedoraproject.org> - 4.2.4-6 - q4banking: try harder to purge qt3 dep (#626008) * Sun Aug 22 2010 Rex Dieter <rdie...@fedoraproject.org> - 4.2.4-5 - rebase pkgconfig patch - q4banking should not depend on qt3 (#626008) - include %check section, though currently mostly useless -------------------------------------------------------------------------------- References: [ 1 ] Bug #1047126 - Support for SEPA in aqbanking https://bugzilla.redhat.com/show_bug.cgi?id=1047126 [ 2 ] Bug #1056425 - aqbanking doesn't build qbanking on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=1056425 -------------------------------------------------------------------------------- ================================================================================ cups-bjnp-1.2.2-1.el6 (FEDORA-EPEL-2014-0288) CUPS backend for the Canon BJNP network printers -------------------------------------------------------------------------------- Update Information: new upstream release 1.2.2 - Fix crash with newer printers that send an xml-document for printer status - Fix possible buffer overflow on response buffer -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Louis Lagendijk <llagend...@users.sourceforge.net> - 1.2.2-1 - new upstream release 1.2.2 - Fix crash with newer printers that send an xml-document for printer status - Fix possible buffer overflow on response buffer * Wed Jan 22 2014 Louis Lagendijk <llagend...@users.sourceforge.net> - 1.2.1-3 - temporary release for testing - Fix crash with newer printers that send an xml-document for printer status - Fix possible buffer overflow on response buffer * Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 1.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056222 - [abrt] cups-bjnp: strcpy(): bjnp killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1056222 -------------------------------------------------------------------------------- ================================================================================ gnucash-2.4.15-2.el6 (FEDORA-EPEL-2014-0232) Finance management application -------------------------------------------------------------------------------- Update Information: This updates GnuCash to the latest 2.4 release, and updates AqBanking to add support for SEPA. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Bill Nottingham <nott...@redhat.com> - 2.4.15-2 - fix now-obsolete qbanking requirement (#1056425) * Fri Jan 17 2014 Bill Nottingham <nott...@redhat.com> - 2.4.15-1 - update to 2.4.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1047126 - Support for SEPA in aqbanking https://bugzilla.redhat.com/show_bug.cgi?id=1047126 [ 2 ] Bug #1056425 - aqbanking doesn't build qbanking on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=1056425 -------------------------------------------------------------------------------- ================================================================================ gwenhywfar-4.9.0-0.2.beta.el6 (FEDORA-EPEL-2014-0232) A multi-platform helper library for other libraries -------------------------------------------------------------------------------- Update Information: This updates GnuCash to the latest 2.4 release, and updates AqBanking to add support for SEPA. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 15 2014 Bill Nottingham <nott...@redhat.com> - 4.9.0-0.2.beta - update to latest upstream * Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 4.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Apr 23 2013 Bill Nottingham <nott...@redhat.com> - 4.3.3-1 - update to latest upstream * Thu Feb 14 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 4.3.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Jul 19 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 4.3.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jan 19 2012 Bill Nottingham <nott...@redhat.com> - 4.3.1-2 - update to latest upstream * Fri Jan 13 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 4.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Fri Oct 7 2011 Bill Nottingham <nott...@redhat.com> - 4.3.0-1 - update to latest upstream * Fri Feb 11 2011 Bill Nottingham <nott...@redhat.com> - 4.0.5-1 - update to latest upstream * Wed Feb 9 2011 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 3.11.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1047126 - Support for SEPA in aqbanking https://bugzilla.redhat.com/show_bug.cgi?id=1047126 [ 2 ] Bug #1056425 - aqbanking doesn't build qbanking on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=1056425 -------------------------------------------------------------------------------- ================================================================================ mirrormanager-1.4.4-1.el6 (FEDORA-EPEL-2014-0281) Fedora mirror management system -------------------------------------------------------------------------------- Update Information: upstream bugfix release bugfix upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 21 2014 Matt Domsch <mdom...@fedoraproject.org> - 1.4.4-1 - upstream bugfix release * Wed Dec 18 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.3-1 - upstream bugfix release - Reduce Fedora-isms to make it more usable for other distributions * Tue Jul 23 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.2-1 - upstream bugfix release * Mon Jun 17 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.1-1 - upstream 1.4.1 pure bugfix release * Fri Jun 14 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.0-1 - upstream 1.4.0 release * Fri Jan 25 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.0-0.1 - initial 1.4 branch for testing * Sat Jun 9 2012 Matt Domsch <mdom...@fedoraproject.org> - move -maps to separate subpackage * Thu Nov 25 2010 Matt Domsch <mdom...@fedoraproject.org> - add tmpfiles.d file (BZ636623) -------------------------------------------------------------------------------- ================================================================================ moodle-2.4.8-1.el6 (FEDORA-EPEL-2014-0282) A Course Management System -------------------------------------------------------------------------------- Update Information: Fix for CVE-2014-0008,9,10. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Jon Ciesla <limburg...@gmail.com> - 2.4.8-1 - Fix for CVE-2014-0008,9,10. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1055390 - CVE-2014-0008 CVE-2014-0009 CVE-2014-0010 moodle: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1055390 [ 2 ] Bug #1055388 - CVE-2014-0008 CVE-2014-0009 CVE-2014-0010 moodle: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1055388 -------------------------------------------------------------------------------- ================================================================================ nodejs-bignumber-js-1.2.0-4.el6 (FEDORA-EPEL-2014-0284) Library for arbitrary-precision decimal and non-decimal arithmetic -------------------------------------------------------------------------------- Update Information: Add exclusivearch on EL6 Fix missing npm(nodejs-bignumber-js) provides, which may resolve dependency issues when installing this package or other packages that depend on it -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Troy Dawson <tdaw...@redhat.com> - 1.2.0-4 - Add exclusivearch on EL6 * Fri Jan 3 2014 T.C. Hollingsworth <tchollingswo...@gmail.com> - 1.2.0-3 - add macro to invoke dependency generator on EL6 -------------------------------------------------------------------------------- ================================================================================ pyhoca-cli-0.4.0.2-1.el6 (FEDORA-EPEL-2014-0114) Command line X2Go client written in Python -------------------------------------------------------------------------------- Update Information: python-x2go: o Support for passphrase protect SSH keys. o Support for two-factor authentication as provided by OpenSSH server 6.2 and above (requires as of yet unreleased Python Paramiko module). o many many bugfixes. o Support pulseaudio (>= 2). o Expand the "~" character properly. o Fix detection of color depth on Windows machines. pyhoca-gui: o Translation updates. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 8 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.2-1 - Update to 0.4.0.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056434 - unsatisfied dependency python-cups on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=1056434 -------------------------------------------------------------------------------- ================================================================================ pyhoca-gui-0.4.0.9-2.el6 (FEDORA-EPEL-2014-0114) Graphical X2Go client written in (wx)Python -------------------------------------------------------------------------------- Update Information: python-x2go: o Support for passphrase protect SSH keys. o Support for two-factor authentication as provided by OpenSSH server 6.2 and above (requires as of yet unreleased Python Paramiko module). o many many bugfixes. o Support pulseaudio (>= 2). o Expand the "~" character properly. o Fix detection of color depth on Windows machines. pyhoca-gui: o Translation updates. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.9-2 - No python-cups, use system-config-printer-libs on EL6 (bug #1056434) * Wed Jan 8 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.9-1 - Update to 0.4.0.9 - Add Requires python-cups -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056434 - unsatisfied dependency python-cups on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=1056434 -------------------------------------------------------------------------------- ================================================================================ python-fmn-lib-0.2.0-1.el6 (FEDORA-EPEL-2014-0290) Internal API components and model for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-fmn-rules-0.1.4-1.el6 (FEDORA-EPEL-2014-0287) Message processing rules for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Ralph Bean <rb...@redhat.com> - 0.1.4-1 - Upstream release. - Added new dep on python-dogpile-cache. -------------------------------------------------------------------------------- ================================================================================ python-fmn-web-0.2.0-1.el6 (FEDORA-EPEL-2014-0292) Frontend Web Application for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-fmn-web-0.2.0-2.el6 (FEDORA-EPEL-2014-0283) Frontend Web Application for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Ralph Bean <rb...@redhat.com> - 0.2.0-2 - Correct installation of static dir. -------------------------------------------------------------------------------- ================================================================================ python-x2go-0.4.0.9-1.el6 (FEDORA-EPEL-2014-0114) Python module providing X2Go client API -------------------------------------------------------------------------------- Update Information: python-x2go: o Support for passphrase protect SSH keys. o Support for two-factor authentication as provided by OpenSSH server 6.2 and above (requires as of yet unreleased Python Paramiko module). o many many bugfixes. o Support pulseaudio (>= 2). o Expand the "~" character properly. o Fix detection of color depth on Windows machines. pyhoca-gui: o Translation updates. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 8 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.9-1 - Update to 0.4.0.9 - Drop python-cups requires -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056434 - unsatisfied dependency python-cups on epel6 https://bugzilla.redhat.com/show_bug.cgi?id=1056434 -------------------------------------------------------------------------------- ================================================================================ ssdeep-2.10-2.el6 (FEDORA-EPEL-2014-0286) Compute context triggered piecewise hashes -------------------------------------------------------------------------------- Update Information: ssdeep is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056460 - Review Request: ssdeep - Compute context triggered piecewise hashes https://bugzilla.redhat.com/show_bug.cgi?id=1056460 -------------------------------------------------------------------------------- ================================================================================ x2goclient-4.0.1.3-1.el6 (FEDORA-EPEL-2014-0291) X2Go Client application (Qt4) -------------------------------------------------------------------------------- Update Information: Update to 4.0.1.3: - Fix audio for the Linux X2Go Client - Rework keyboard setup in session profile manager (support for keyboard autodetection now) - Configurable GSSAPI delegation - Several translation updates (thanks to the i18n team!!!) - Restrict access to x2goplugin.html to localhost by default. - Update to 4.0.1.2: - Provide Keywords: key in .desktop file. - Store broker HTTPS certificate exceptions in $HOME/.x2go/ssl/exceptions (before: $HOME/ssl/exceptions). (Fixes: #328). - Perform sanity checks on data that comes in from X2Go Servers. Prohibit the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333). - Add option --broker-cacertfile. Allow usage of non-system-wide installed (self-signed) SSL certificate chains for https (SSL) session broker connections. (Fixes: #311). - Update man page for new --tray-icon cmdline option. - Update man page for --broker-url. Explain the syntax of <URL>. - Properly handle (=expand) the "~" character in key filenames. (Brought to attention by Eldamir on IRC. Thanks!). - Expand tilde operator for all other file paths handed over to X2Go Client via sessions file or cmdline parameter. - Syntax fix of x2goclient.desktop file. - Test for various file locations of the pulseaudio cookie file. - Strip whitespaces off of user name, host name and other strings when loading / saving session profiles. (Fixes: #315). - New option --tray-icon. Force showing the tray icon, even for hidden sessions. Also allow creation of .desktop files with --tray-icon optionally being enabled. (Fixes: #316). - Update Spanish translation. - Support for keys "shadowuser" "shadowdisplay" and "shadowmode" in config file. This allows choosing the default display for shadow sessions. - Support for GSSApi(Kerberos 5) authentication. Using ssh/scp commands on Linux and Mac and plink/pscp on Windows. - Support for ChallengeResponseAuthentication (Google Authenticator) - Additional check if authentication with GSSApi successfull - c121b7e2d3d83abdc2d7a29637bc3294e38b2ec3 broke checking if remote command produce only stderr and not stdout. It made x2goclient crash if x2gostartagent send LIMIT error. Current commit fixes this issue. - SshMasterConnection should use current user name if no user name is specified in session settings - GSSApi(Kerberos 5) authentication for sshproxy and sshbroker - Handle SSH host key changes more elegantly and allow user interaction if such a host key change occurs. (Fixes: #241). - Update summary and description from upstream - Split out browser plugin into x2goplugin package - Add x2goplugin-provider package for apache config -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Orion Poplawski <or...@cora.nwra.com> - 4.0.1.3-1 - Update to 4.0.1.3 - Drop provider patch applied upstream * Tue Dec 17 2013 Orion Poplawski <or...@cora.nwra.com> - 4.0.1.2-1 - Update to 4.0.1.2 - Update summary and description from upstream - Split out browser plugin into x2goplugin package - Add x2goplugin-provider package for apache config -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list epel-devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/epel-devel