epel-devel June 2013

epel-devel@lists.fedoraproject.org

10 participants
52 discussions

Updating git in EPEL-5 to 1.8.2.1
by Todd Zullinger 13 Jun '13

13 Jun '13

This is a heads up and a request for testing of git-1.8.2.1 on el5 (if anyone here is still using git from EPEL there). https://admin.fedoraproject.org/updates/git-1.8.2.1-1.el5 This update obsoletes an ealier 1.8.1.4 update that didn't get announced here. I don't believe there are any changes from the current 1.7.4.1 release that would make this unacceptable for EPEL, but I could always be wrong. -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Until you spread your wings, you'll have no idea how far you can walk. -- Demotivators (www.despair.com)

2 2

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 12 Jun '13

12 Jun '13

The following Fedora EPEL 6 Security updates need testing: Age URL 604 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 416 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 117 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0376/openconnect-4… 74 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0823/openstack-key… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6024/rubygem-passe… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6034/heat-jeos-9-1… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6044/nrpe-2.14-3.e… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6079/gallery3-3.0.… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-20… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10387/owncloud-4.5… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10392/perl-Module-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10418/python-feedp… The following builds have been pushed to Fedora EPEL 6 updates-testing cellwriter-1.3.5-3.el6 checksec-1.5-2.el6 drupal6-rules-1.5-1.el6 drupal6-strongarm-2.2-1.el6 drupal6-views_bulk_operations-1.14-1.el6 drupal7-date_ical-2.8-1.el6 drupal7-entity-1.1-1.el6 php-Faker-1.2.0-1.el6 python-keystoneclient-0.2.0-2.el6 python-pkgwat-api-0.9-1.el6 python-py9p-1.0.9-2.el6 python-pyroute2-0.1.9-2.el6 python-pyvfs-0.2.10-1.el6 python-requests-1.1.0-4.el6 rarpd-ss981107-42.el6 razorqt-0.5.2-11.el6 Details about builds: ================================================================================ cellwriter-1.3.5-3.el6 (FEDORA-EPEL-2013-10426) Grid-entry natural handwriting input panel -------------------------------------------------------------------------------- Update Information: First cellwriter build for EL-6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #973412 - EPEL package request - cellwriter https://bugzilla.redhat.com/show_bug.cgi?id=973412 -------------------------------------------------------------------------------- ================================================================================ checksec-1.5-2.el6 (FEDORA-EPEL-2013-10424) Tool to check system for binary-hardening -------------------------------------------------------------------------------- Update Information: Modern Linux distributions offer some mitigation techniques to make it harder to exploit software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables (PIE) have made reliably exploiting any vulnerabilities that do exist far more challenging. The checksec script is designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/) security features are being used. As of version 1.3 the script also lists the status of various Linux kernel protection mechanisms. checksec can check binary-files and running processes for hardening features. -------------------------------------------------------------------------------- References: [ 1 ] Bug #973349 - Review Request: checksec - Tool to check system for binary-hardening https://bugzilla.redhat.com/show_bug.cgi?id=973349 -------------------------------------------------------------------------------- ================================================================================ drupal6-rules-1.5-1.el6 (FEDORA-EPEL-2013-10421) It allows site administrators to define conditionally executed actions -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.5 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1711658 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.5-1 - Update to upstream 1.5 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1711658 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #959104 - drupal6-rules-1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=959104 [ 2 ] Bug #971506 - drupal6-rules needs to be updated for Fedora/Epel https://bugzilla.redhat.com/show_bug.cgi?id=971506 -------------------------------------------------------------------------------- ================================================================================ drupal6-strongarm-2.2-1.el6 (FEDORA-EPEL-2013-10425) Strongarm gives a way to override the default variable values -------------------------------------------------------------------------------- Update Information: - Update to upstream 2.2 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1645424 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #959105 - drupal6-strongarm-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=959105 -------------------------------------------------------------------------------- ================================================================================ drupal6-views_bulk_operations-1.14-1.el6 (FEDORA-EPEL-2013-10422) This module augments Views by allowing bulk operations to be executed -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.14 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1925522 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.14-1 - Update to upstream 1.14 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1925522 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #959106 - drupal6-views_bulk_operations-1.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=959106 -------------------------------------------------------------------------------- ================================================================================ drupal7-date_ical-2.8-1.el6 (FEDORA-EPEL-2013-10443) Allows creation of an iCal feed in Views -------------------------------------------------------------------------------- Update Information: - Update to upstream 2.8 release for bug fixes - Upstream changelog for this release is avalble at http://drupal.org/node/2003618 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.8-1 - Update to upstream 2.8 release for bug fixes - Upstream changelog for this release is avalble at http://drupal.org/node/2003618 * Thu Apr 25 2013 Jared Smith <jaredsmith(a)jaredsmith.net> - 2.7-1 - Update to upstream 2.7 release for bug fixes - Upstream changelog for this release is avalble at http://drupal.org/node/1978108 * Thu Feb 28 2013 Jared Smith <jaredsmith(a)jaredsmith.net> - 2.6-1 - Update to upstream 2.6 release - Upstream changelog for this release is avalble at http://drupal.org/node/1928594 -------------------------------------------------------------------------------- References: [ 1 ] Bug #955984 - drupal7-date_ical-2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=955984 -------------------------------------------------------------------------------- ================================================================================ drupal7-entity-1.1-1.el6 (FEDORA-EPEL-2013-10430) Extends the entity API to provide a unified way to deal with entities -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.1 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1983440 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.1-1 - Update to upstream 1.1 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1983440 -------------------------------------------------------------------------------- References: [ 1 ] Bug #958466 - drupal7-entity-1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=958466 -------------------------------------------------------------------------------- ================================================================================ php-Faker-1.2.0-1.el6 (FEDORA-EPEL-2013-10423) A PHP library that generates fake data -------------------------------------------------------------------------------- Update Information: Updated to 1.2.0 * Added new provider for fr_BE locale (jflefebvre) * Updated locale provider to use a static locale list (spawn-guy) * Fixed invalid UTF-8 sequence in domain provider with the Bulgarian provider (Dynom) * Fixed the nl_NL Person provider (Dynom) * Removed all requires and added the autoload definition to composer (Dynom) * Fixed encoding problems in nl_NL Address provider (Dynom) * Added icelandic provider (is_IS) (birkir) * Added en_CA address and phone numbers (cviebrock) * Updated safeEmail provider to be really safe (TimWolla) * Documented alternative randomNumber usage (Seldaek) * Added basic file provider (anroots) * Fixed use of fourth argument on Doctrine addEntity (ecentinela) * Added nl_BE provider (wimvds) * Added Random Float provider (csanquer) * Fixed bug in Faker\ORM\Doctrine\Populator (mmf-amarcos) * Updated ru_RU provider (rmrevin) * Added safe email domain provider (csanquer) * Fixed latitude provider (rumpl) * Fixed unpredictability of fake data generated by Faker\Provider\Base::numberBetween() (goatherd) * Added uuid provider (goatherd) * Added possibility to call methods on Doctrine entities, possibility to generate unique id (nenadalm) * Fixed prefixes typos in 'pl_PL' Person provider (krymen) * Added more fake data to the Ukraininan providers (lysenkobv) * Added more fake data to the Italian providers (EmanueleMinotto) * Fixed spaces appearing in generated emails (alchy58) * Added Armenian (hy_AM) provider (artash) * Added Generation of valid SIREN & SIRET codes to French providers (alexsegura) * Added Dutch (nl_NL) provider (WouterJ) * Fixed missing typehint in Base::__construct() (benja-M-1) * Fixed typo in README (benja-M-1) * Added Ukrainian (ua_UA) provider (rsvasilyev) * Added Turkish (tr_TR) Provider (faridmovsumov) * Fixed executable bit in some PHP files (siwinski) * Added Brazilian Portuguese (pt_BR) provider (oliveiraev) * Added Spanish (es_ES) provider (ivannis) * Fixed Doctrine populator to allow for the population of entity data that has associations to other entities (afishnamedsquish) * Added Danish (da_DK) providers (toin0u) * Cleaned up whitespaces (toin0u) * Fixed utf-8 bug with lowercase generators (toin0u) * Fixed composer.json (Seldaek) * Fixed bug in Doctrine EntityPopulator (beberlei) * Added Finnish (fi_FI) provider (drodil) Full change log: https://github.com/fzaninotto/Faker/blob/v1.2.0/CHANGELOG -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 10 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.2.0-1 - Updated to 1.2.0 - Added php-mbstring require - Updates per new Fedora packaging guidelines for Git repos * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #972499 - php-Faker-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=972499 -------------------------------------------------------------------------------- ================================================================================ python-keystoneclient-0.2.0-2.el6 (FEDORA-EPEL-2013-10437) Python API and CLI for OpenStack Keystone -------------------------------------------------------------------------------- Update Information: update to 0.2.0 without post-Folsom features -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Alan Pevec <apevec(a)redhat.com> 0.2.0-2 - rebuild for EPEL-6 update * Tue Feb 19 2013 Alan Pevec <apevec(a)redhat.com> 0.2.0-1 - update to 0.2.0 without post-Folsom features -------------------------------------------------------------------------------- ================================================================================ python-pkgwat-api-0.9-1.el6 (FEDORA-EPEL-2013-10440) Python API for querying the fedora packages webapp -------------------------------------------------------------------------------- Update Information: Search datagrepper history. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 11 2013 Ralph Bean <rbean(a)redhat.com> - 0.9-1 - Latest upstream. - New history function to search datagrepper. - Subpackages support with patches from Ariel O. Barria. -------------------------------------------------------------------------------- ================================================================================ python-py9p-1.0.9-2.el6 (FEDORA-EPEL-2013-10429) Pure Python implementation of 9P protocol (Plan9) -------------------------------------------------------------------------------- Update Information: I/O improvements -------------------------------------------------------------------------------- ================================================================================ python-pyroute2-0.1.9-2.el6 (FEDORA-EPEL-2013-10436) Pure Python netlink library -------------------------------------------------------------------------------- Update Information: Initial commit of pyroute2 -------------------------------------------------------------------------------- ================================================================================ python-pyvfs-0.2.10-1.el6 (FEDORA-EPEL-2013-10438) Simple python VFS library -------------------------------------------------------------------------------- Update Information: license change, compatibility issues -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter V. Saveliev <peet(a)redhat.com> 0.2.10-1 - Python 3 compatibility issues - unicode literals fixed - license changed from GPLv3+ to GPLv2+ * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-requests-1.1.0-4.el6 (FEDORA-EPEL-2013-10441) HTTP library, written in Python, for human beings -------------------------------------------------------------------------------- Update Information: Fix conditional requiremnt. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 11 2013 Ralph Bean <rbean(a)redhat.com> - 1.1.0-4 - Correct a rhel conditional on python-ordereddict -------------------------------------------------------------------------------- References: [ 1 ] Bug #973274 - Unnecessary dependency on python-ordereddict https://bugzilla.redhat.com/show_bug.cgi?id=973274 -------------------------------------------------------------------------------- ================================================================================ rarpd-ss981107-42.el6 (FEDORA-EPEL-2013-10427) The RARP daemon -------------------------------------------------------------------------------- Update Information: This is a new package, that delivers RARP (Reverse Address Resolution Protocol) daemon. You should install rarpd if you want to set up a RARP server on your network. -------------------------------------------------------------------------------- References: [ 1 ] Bug #226355 - Merge Review: rarpd https://bugzilla.redhat.com/show_bug.cgi?id=226355 -------------------------------------------------------------------------------- ================================================================================ razorqt-0.5.2-11.el6 (FEDORA-EPEL-2013-10433) Lightweight desktop toolbox -------------------------------------------------------------------------------- Update Information: Upower dependency removed for EL. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 TI_Eugene <ti.eugene(a)gmail.com> 0.5.2-11 - upower dependency removed for EL * Wed Jun 5 2013 TI_Eugene <ti.eugene(a)gmail.com> 0.5.2-10 - Fixed %{_datadir}/razor/{razor-panel,razorqt-desktop}/*/ ownership (Bug #970568) --------------------------------------------------------------------------------

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 12 Jun '13

12 Jun '13

The following Fedora EPEL 5 Security updates need testing: Age URL 416 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 311 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 117 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6047/nrpe-2.14-3.e… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6086/libguestfs-1.… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6089/ssmtp-2.61-20… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10388/perl-Module-… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10389/rrdtool-1.2.… The following builds have been pushed to Fedora EPEL 5 updates-testing checksec-1.5-2.el5 drupal6-rules-1.5-1.el5 drupal6-strongarm-2.2-1.el5 drupal6-views_bulk_operations-1.14-1.el5 drupal7-date_ical-2.8-1.el5 drupal7-entity-1.1-1.el5 libbsd-0.5.2-2.el5 Details about builds: ================================================================================ checksec-1.5-2.el5 (FEDORA-EPEL-2013-10428) Tool to check system for binary-hardening -------------------------------------------------------------------------------- Update Information: Modern Linux distributions offer some mitigation techniques to make it harder to exploit software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables (PIE) have made reliably exploiting any vulnerabilities that do exist far more challenging. The checksec script is designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/) security features are being used. As of version 1.3 the script also lists the status of various Linux kernel protection mechanisms. checksec can check binary-files and running processes for hardening features. -------------------------------------------------------------------------------- References: [ 1 ] Bug #973349 - Review Request: checksec - Tool to check system for binary-hardening https://bugzilla.redhat.com/show_bug.cgi?id=973349 -------------------------------------------------------------------------------- ================================================================================ drupal6-rules-1.5-1.el5 (FEDORA-EPEL-2013-10442) It allows site administrators to define conditionally executed actions -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.5 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1711658 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.5-1 - Update to upstream 1.5 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1711658 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #959104 - drupal6-rules-1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=959104 [ 2 ] Bug #971506 - drupal6-rules needs to be updated for Fedora/Epel https://bugzilla.redhat.com/show_bug.cgi?id=971506 -------------------------------------------------------------------------------- ================================================================================ drupal6-strongarm-2.2-1.el5 (FEDORA-EPEL-2013-10439) Strongarm gives a way to override the default variable values -------------------------------------------------------------------------------- Update Information: - Update to upstream 2.2 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1645424 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #959105 - drupal6-strongarm-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=959105 -------------------------------------------------------------------------------- ================================================================================ drupal6-views_bulk_operations-1.14-1.el5 (FEDORA-EPEL-2013-10434) This module augments Views by allowing bulk operations to be executed -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.14 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1925522 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.14-1 - Update to upstream 1.14 release for bug fixes - Upstream changelog for this release is available at https://drupal.org/node/1925522 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #959106 - drupal6-views_bulk_operations-1.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=959106 -------------------------------------------------------------------------------- ================================================================================ drupal7-date_ical-2.8-1.el5 (FEDORA-EPEL-2013-10435) Allows creation of an iCal feed in Views -------------------------------------------------------------------------------- Update Information: - Update to upstream 2.8 release for bug fixes - Upstream changelog for this release is avalble at http://drupal.org/node/2003618 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.8-1 - Update to upstream 2.8 release for bug fixes - Upstream changelog for this release is avalble at http://drupal.org/node/2003618 * Thu Apr 25 2013 Jared Smith <jaredsmith(a)jaredsmith.net> - 2.7-1 - Update to upstream 2.7 release for bug fixes - Upstream changelog for this release is avalble at http://drupal.org/node/1978108 * Thu Feb 28 2013 Jared Smith <jaredsmith(a)jaredsmith.net> - 2.6-1 - Update to upstream 2.6 release - Upstream changelog for this release is avalble at http://drupal.org/node/1928594 -------------------------------------------------------------------------------- References: [ 1 ] Bug #955984 - drupal7-date_ical-2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=955984 -------------------------------------------------------------------------------- ================================================================================ drupal7-entity-1.1-1.el5 (FEDORA-EPEL-2013-10431) Extends the entity API to provide a unified way to deal with entities -------------------------------------------------------------------------------- Update Information: - Update to upstream 1.1 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1983440 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.1-1 - Update to upstream 1.1 release for bug fixes - Upstream changelog for this release is avalble at https://drupal.org/node/1983440 -------------------------------------------------------------------------------- References: [ 1 ] Bug #958466 - drupal7-entity-1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=958466 -------------------------------------------------------------------------------- ================================================================================ libbsd-0.5.2-2.el5 (FEDORA-EPEL-2013-10432) Library providing BSD-compatible functions for portability -------------------------------------------------------------------------------- Update Information: Library providing BSD-compatible functions for portability -------------------------------------------------------------------------------- References: [ 1 ] Bug #973251 - Requesting build of libbsd for EL5 https://bugzilla.redhat.com/show_bug.cgi?id=973251 --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 11 Jun '13

11 Jun '13

The following Fedora EPEL 6 Security updates need testing: Age URL 603 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 415 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 115 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0376/openconnect-4… 73 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0823/openstack-key… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5992/cgit-0.9.2-1.… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5994/mod_security-… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5995/socat-1.7.2.2… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6024/rubygem-passe… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6034/heat-jeos-9-1… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6044/nrpe-2.14-3.e… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6079/gallery3-3.0.… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-20… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10387/owncloud-4.5… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10392/perl-Module-… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10418/python-feedp… The following builds have been pushed to Fedora EPEL 6 updates-testing ansible-1.2-1.el6 ghc-setenv-0.1.0-1.el6 libtomcrypt-1.17-18.el6 libtommath-0.41-16.el6 openstack-heat-2013.1.2-1.el6 openstack-heat-2013.1.2-2.el6 python-fedbadges-0.2.1-1.el6 python-feedparser-5.1.2-2.el6 shellinabox-2.14-24.git88822c1.el6 stoken-0.2-4.el6 Details about builds: ================================================================================ ansible-1.2-1.el6 (FEDORA-EPEL-2013-10412) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to new 1.2 upstream release. See https://github.com/ansible/ansible/blob/devel/CHANGELOG.md for full list of changes. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 10 2013 Kevin Fenzi <kevin(a)scrye.com> 1.2-1 - Update to 1.2 -------------------------------------------------------------------------------- ================================================================================ ghc-setenv-0.1.0-1.el6 (FEDORA-EPEL-2013-10416) Cross-platform library for setting environment variables -------------------------------------------------------------------------------- Update Information: Cross-platform library for setting environment variables. -------------------------------------------------------------------------------- References: [ 1 ] Bug #916553 - Review Request: ghc-setenv - Cross-platform library for setting environment variables https://bugzilla.redhat.com/show_bug.cgi?id=916553 -------------------------------------------------------------------------------- ================================================================================ libtomcrypt-1.17-18.el6 (FEDORA-EPEL-2013-10417) A comprehensive, portable cryptographic toolkit -------------------------------------------------------------------------------- Update Information: Token code generator compatible with RSA SecurID 128-bit (AES) token + required prerequisites -------------------------------------------------------------------------------- References: [ 1 ] Bug #970002 - Package seems abandoned https://bugzilla.redhat.com/show_bug.cgi?id=970002 [ 2 ] Bug #914150 - libtomcrypt: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=914150 -------------------------------------------------------------------------------- ================================================================================ libtommath-0.41-16.el6 (FEDORA-EPEL-2013-10417) A portable number theoretic multiple-precision integer library -------------------------------------------------------------------------------- Update Information: Token code generator compatible with RSA SecurID 128-bit (AES) token + required prerequisites -------------------------------------------------------------------------------- References: [ 1 ] Bug #970002 - Package seems abandoned https://bugzilla.redhat.com/show_bug.cgi?id=970002 [ 2 ] Bug #914150 - libtomcrypt: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=914150 -------------------------------------------------------------------------------- ================================================================================ openstack-heat-2013.1.2-1.el6 (FEDORA-EPEL-2013-10414) OpenStack Orchestration (heat) -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. Update to grizzly final Fix permissions for PID directory Add new Grizzly-rc2 package Fix required dependencies -------------------------------------------------------------------------------- ================================================================================ openstack-heat-2013.1.2-2.el6 (FEDORA-EPEL-2013-10413) OpenStack Orchestration (heat) -------------------------------------------------------------------------------- Update Information: Rebase to 2013.1.2, fix M2Crypto patch -------------------------------------------------------------------------------- ================================================================================ python-fedbadges-0.2.1-1.el6 (FEDORA-EPEL-2013-10420) fedmsg consumer for awarding open badges -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #972148 - Review Request: python-fedbadges - fedmsg consumer for awarding open badges https://bugzilla.redhat.com/show_bug.cgi?id=972148 -------------------------------------------------------------------------------- ================================================================================ python-feedparser-5.1.2-2.el6 (FEDORA-EPEL-2013-10418) Parse RSS and Atom feeds in Python -------------------------------------------------------------------------------- Update Information: Update to 5.1.2 to fix a denial of service flaw. http://code.google.com/p/feedparser/source/browse/NEWS -------------------------------------------------------------------------------- ChangeLog: * Wed May 23 2012 Michael Schwendt <mschwendt(a)fedoraproject.org> - 5.1.2-2 - Also package NEWS files as documentation. - 5.1.2 fixes CVE-2012-2921 (DoS via memory consumption processing ENTITY declarations). * Tue May 22 2012 Michael Schwendt <mschwendt(a)fedoraproject.org> - 5.1.2-1 - Update to 5.1.2 and its security fix (#787401). - Ignore testsuite results for now (#787401). - Set PYTHONPATH in %check section to include files in %buildroot. - Drop CFLAGS usage from spec file, because this is Python. * Sat Feb 4 2012 Haïkel Guémar <hguemar(a)fedoraproject.org> - 5.1-1 - upstream 5.1 (#787401) - spec cleanup - tests disabled - python3 support * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 5.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #824600 - CVE-2012-2921 python-feedparser: DoS via memory consumption processing ENTITY declarations https://bugzilla.redhat.com/show_bug.cgi?id=824600 -------------------------------------------------------------------------------- ================================================================================ shellinabox-2.14-24.git88822c1.el6 (FEDORA-EPEL-2013-10419) Web based AJAX terminal emulator -------------------------------------------------------------------------------- Update Information: Fix SSL support. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 11 2013 Simone Caronni <negativo17(a)gmail.com> - 2.14-24.git88822c1 - Fix SSL support (#973058). - SPEC file cleanup. -------------------------------------------------------------------------------- References: [ 1 ] Bug #973058 - shellinabox ssl support need devel package on el6 https://bugzilla.redhat.com/show_bug.cgi?id=973058 -------------------------------------------------------------------------------- ================================================================================ stoken-0.2-4.el6 (FEDORA-EPEL-2013-10417) Token code generator compatible with RSA SecurID 128-bit (AES) token -------------------------------------------------------------------------------- Update Information: Token code generator compatible with RSA SecurID 128-bit (AES) token + required prerequisites -------------------------------------------------------------------------------- References: [ 1 ] Bug #970002 - Package seems abandoned https://bugzilla.redhat.com/show_bug.cgi?id=970002 [ 2 ] Bug #914150 - libtomcrypt: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=914150 --------------------------------------------------------------------------------

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 11 Jun '13

11 Jun '13

The following Fedora EPEL 5 Security updates need testing: Age URL 415 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 310 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 115 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4… 49 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1-1… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5990/mod_security-… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5991/cgit-0.9.2-1.… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5996/socat-1.7.2.2… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6047/nrpe-2.14-3.e… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6086/libguestfs-1.… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6089/ssmtp-2.61-20… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10388/perl-Module-… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10389/rrdtool-1.2.… The following builds have been pushed to Fedora EPEL 5 updates-testing shellinabox-2.14-24.git88822c1.el5 Details about builds: ================================================================================ shellinabox-2.14-24.git88822c1.el5 (FEDORA-EPEL-2013-10415) Web based AJAX terminal emulator -------------------------------------------------------------------------------- Update Information: Fix SSL support. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 11 2013 Simone Caronni <negativo17(a)gmail.com> - 2.14-24.git88822c1 - Fix SSL support (#973058). - SPEC file cleanup. -------------------------------------------------------------------------------- References: [ 1 ] Bug #973058 - shellinabox ssl support need devel package on el6 https://bugzilla.redhat.com/show_bug.cgi?id=973058 --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 10 Jun '13

10 Jun '13

The following Fedora EPEL 6 Security updates need testing: Age URL 602 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 414 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 114 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0376/openconnect-4… 72 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0823/openstack-key… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5992/cgit-0.9.2-1.… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5994/mod_security-… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5995/socat-1.7.2.2… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6024/rubygem-passe… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6034/heat-jeos-9-1… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6044/nrpe-2.14-3.e… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6079/gallery3-3.0.… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-20… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10387/owncloud-4.5… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10392/perl-Module-… The following builds have been pushed to Fedora EPEL 6 updates-testing cgdb-0.6.7-1.el6 ghc-geniplate-0.6.0.3-1.el6 hardening-check-2.3-2.el6 icewm-1.3.7-7.el6 lfcbase-1.5.5-1.el6 nawk-20121220-1.el6 pdns-recursor-3.5.2-1.el6 python-amqpclt-0.5-1.el6 Details about builds: ================================================================================ cgdb-0.6.7-1.el6 (FEDORA-EPEL-2013-10403) CGDB is a curses-based interface to the GNU Debugger (GDB) -------------------------------------------------------------------------------- Update Information: - Version upgrade to 0.6.7 (Bug fix release). -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 2 2013 Gilboa Davara <gilboad [AT] gmail.com> - 0.6.7-1 - Version upgrade to 0.6.7 (Bug fix release). * Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ghc-geniplate-0.6.0.3-1.el6 (FEDORA-EPEL-2013-10406) Use template Haskell to generate Uniplate-like functions -------------------------------------------------------------------------------- Update Information: Template Haskell for Uniplate-like functions -------------------------------------------------------------------------------- References: [ 1 ] Bug #920174 - Review Request: ghc-geniplate - Use template Haskell to generate Uniplate-like functions https://bugzilla.redhat.com/show_bug.cgi?id=920174 -------------------------------------------------------------------------------- ================================================================================ hardening-check-2.3-2.el6 (FEDORA-EPEL-2013-10405) Tool to check ELF for being built hardened -------------------------------------------------------------------------------- Update Information: hardening-check is a tool to check whether an already compiled ELF file was built using hardening flags. It checks, using readelf, for these hardening characteristics: * Position Independent Executable * Stack protected * Fortify source functions * Read-only relocations * Immediate binding -------------------------------------------------------------------------------- References: [ 1 ] Bug #971836 - Review Request: hardening-check - Tool to check ELF for being built hardened https://bugzilla.redhat.com/show_bug.cgi?id=971836 -------------------------------------------------------------------------------- ================================================================================ icewm-1.3.7-7.el6 (FEDORA-EPEL-2013-10399) Light and configurable window manager -------------------------------------------------------------------------------- Update Information: - Rebuild to get -5 into EL5/6. - "Rebuild program menu" menu entry added. - Emacs replaced fixes (BZ #805939, Ported Debian fix). * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-5 - Bluecurve is still used for menu generation. - "Rebuild program menu" menu entry added. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-4 - Emacs replaced fixes (BZ #805939, Ported Debian fix). - Use gnome-icon-theme instead of bluecurve (BZ #811335). - Gcc 4.7 compile fix. - spec cleanup. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-5 - Bluecurve is still used for menu generation. - "Rebuild program menu" menu entry added. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-4 - Emacs replaced fixes (BZ #805939, Ported Debian fix). - Use gnome-icon-theme instead of bluecurve (BZ #811335). - Gcc 4.7 compile fix. - spec cleanup. -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 9 2013 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-6 - Rebuild to get -5 into EL5/6. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-5 - Bluecurve is still used for menu generation. - "Rebuild program menu" menu entry added. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-4 - Emacs replaced fixes (BZ #805939, Ported Debian fix). - Use gnome-icon-theme instead of bluecurve (BZ #811335). - Gcc 4.7 compile fix. - spec cleanup. -------------------------------------------------------------------------------- References: [ 1 ] Bug #805939 - Emacs hangs (fails to start) under icewm https://bugzilla.redhat.com/show_bug.cgi?id=805939 [ 2 ] Bug #811335 - update the icon theme from bluecurve to gnome https://bugzilla.redhat.com/show_bug.cgi?id=811335 -------------------------------------------------------------------------------- ================================================================================ lfcbase-1.5.5-1.el6 (FEDORA-EPEL-2013-10411) Lemke Foundation Classes -------------------------------------------------------------------------------- Update Information: ... -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 10 2013 Christopher Meng <rpm(a)cicku.me> - 1.5.5-1 - Adaptions for MinGW compilation. - Removed copyright header in files with old FSF adress. -------------------------------------------------------------------------------- ================================================================================ nawk-20121220-1.el6 (FEDORA-EPEL-2013-10409) "The one true awk" descended from UNIX V7 -------------------------------------------------------------------------------- Update Information: upgrade to 20121220 -------------------------------------------------------------------------------- ChangeLog: * Tue May 28 2013 Mark Mckinstry <mmckinst(a)nexcess.net> - 20121220-1 - upgrade to 20121220 - fix YACC variable to match update makefile -------------------------------------------------------------------------------- ================================================================================ pdns-recursor-3.5.2-1.el6 (FEDORA-EPEL-2013-10408) Modern, advanced and high performance recursing/non authoritative name server -------------------------------------------------------------------------------- Update Information: - Update to 3.5.2 - Responses without the QR bit set now get matched up to an outstanding query, so that resolution can be aborted early instead of waiting for a timeout. - The depth limiter changes in 3.5.1 broke some legal domains with lots of indirection. - Slightly improved logging to aid debugging. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 10 2013 Morten Stevens <mstevens(a)imt-systems.com> - 3.5.2-1 - Update to 3.5.2 -------------------------------------------------------------------------------- ================================================================================ python-amqpclt-0.5-1.el6 (FEDORA-EPEL-2013-10410) Versatile AMQP client -------------------------------------------------------------------------------- Update Information: Update to upstream version, rhbz #970848. first build first build first build first build -------------------------------------------------------------------------------- References: [ 1 ] Bug #856545 - Review Request: python-amqpclt - Versatile AMQP client https://bugzilla.redhat.com/show_bug.cgi?id=856545 [ 2 ] Bug #970848 - Upgrade to new upstream version https://bugzilla.redhat.com/show_bug.cgi?id=970848 --------------------------------------------------------------------------------

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 10 Jun '13

10 Jun '13

The following Fedora EPEL 5 Security updates need testing: Age URL 414 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 309 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 114 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4… 48 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1-1… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5990/mod_security-… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5991/cgit-0.9.2-1.… 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5996/socat-1.7.2.2… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6047/nrpe-2.14-3.e… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6086/libguestfs-1.… 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6089/ssmtp-2.61-20… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10388/perl-Module-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10389/rrdtool-1.2.… The following builds have been pushed to Fedora EPEL 5 updates-testing cgdb-0.6.7-1.el5 icewm-1.3.7-7.el5 nawk-20121220-1.el5 pdns-recursor-3.5.2-1.el5 python-amqpclt-0.5-1.el5 Details about builds: ================================================================================ cgdb-0.6.7-1.el5 (FEDORA-EPEL-2013-10400) CGDB is a curses-based interface to the GNU Debugger (GDB) -------------------------------------------------------------------------------- Update Information: - Version upgrade to 0.6.7 (Bug fix release). -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 2 2013 Gilboa Davara <gilboad [AT] gmail.com> - 0.6.7-1 - Version upgrade to 0.6.7 (Bug fix release). * Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ icewm-1.3.7-7.el5 (FEDORA-EPEL-2013-10404) Light and configurable window manager -------------------------------------------------------------------------------- Update Information: - Rebuild to get -5 into EL5/6. - "Rebuild program menu" menu entry added. - Emacs replaced fixes (BZ #805939, Ported Debian fix). * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-5 - Bluecurve is still used for menu generation. - "Rebuild program menu" menu entry added. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-4 - Emacs replaced fixes (BZ #805939, Ported Debian fix). - Use gnome-icon-theme instead of bluecurve (BZ #811335). - Gcc 4.7 compile fix. - spec cleanup. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-5 - Bluecurve is still used for menu generation. - "Rebuild program menu" menu entry added. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-4 - Emacs replaced fixes (BZ #805939, Ported Debian fix). - Use gnome-icon-theme instead of bluecurve (BZ #811335). - Gcc 4.7 compile fix. - spec cleanup. -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 9 2013 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-6 - Rebuild to get -5 into EL5/6. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-5 - Bluecurve is still used for menu generation. - "Rebuild program menu" menu entry added. * Sun Jun 10 2012 Gilboa Davara <gilboad[AT]gmail.com> - 1.3.7-4 - Emacs replaced fixes (BZ #805939, Ported Debian fix). - Use gnome-icon-theme instead of bluecurve (BZ #811335). - Gcc 4.7 compile fix. - spec cleanup. -------------------------------------------------------------------------------- References: [ 1 ] Bug #805939 - Emacs hangs (fails to start) under icewm https://bugzilla.redhat.com/show_bug.cgi?id=805939 [ 2 ] Bug #811335 - update the icon theme from bluecurve to gnome https://bugzilla.redhat.com/show_bug.cgi?id=811335 -------------------------------------------------------------------------------- ================================================================================ nawk-20121220-1.el5 (FEDORA-EPEL-2013-10401) "The one true awk" descended from UNIX V7 -------------------------------------------------------------------------------- Update Information: upgrade to 20121220 -------------------------------------------------------------------------------- ChangeLog: * Tue May 28 2013 Mark Mckinstry <mmckinst(a)nexcess.net> - 20121220-1 - upgrade to 20121220 - fix YACC variable to match update makefile -------------------------------------------------------------------------------- ================================================================================ pdns-recursor-3.5.2-1.el5 (FEDORA-EPEL-2013-10407) Modern, advanced and high performance recursing/non authoritative name server -------------------------------------------------------------------------------- Update Information: - Update to 3.5.2 - Responses without the QR bit set now get matched up to an outstanding query, so that resolution can be aborted early instead of waiting for a timeout. - The depth limiter changes in 3.5.1 broke some legal domains with lots of indirection. - Slightly improved logging to aid debugging. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 10 2013 Morten Stevens <mstevens(a)imt-systems.com> - 3.5.2-1 - Update to 3.5.2 -------------------------------------------------------------------------------- ================================================================================ python-amqpclt-0.5-1.el5 (FEDORA-EPEL-2013-10402) Versatile AMQP client -------------------------------------------------------------------------------- Update Information: Update to upstream version, rhbz #970848. first build first build first build first build -------------------------------------------------------------------------------- References: [ 1 ] Bug #970848 - Upgrade to new upstream version https://bugzilla.redhat.com/show_bug.cgi?id=970848 [ 2 ] Bug #856545 - Review Request: python-amqpclt - Versatile AMQP client https://bugzilla.redhat.com/show_bug.cgi?id=856545 --------------------------------------------------------------------------------

1 0

EPEL Django deprecated
by Matthias Runge 08 Jun '13

08 Jun '13

Hey, just a heads up the package Django has been deprecated or EPEL5 and EPEL6. On EPEL6, you can use Django14 as well, if you don't require Django in version 1.3. Please note, the latter does not receive security updates any more and contains at least one known weakness. For EL5 it's not that simple. Django-1.1 is ways older; I don't know, how many known security issues exist. Newer Django versions require newer python there. -- Matthias Runge <mrunge(a)matthias-runge.de>

5 10

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 08 Jun '13

08 Jun '13

The following Fedora EPEL 6 Security updates need testing: Age URL 600 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 412 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 113 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0376/openconnect-4… 70 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0823/openstack-key… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5992/cgit-0.9.2-1.… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5994/mod_security-… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5995/socat-1.7.2.2… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6024/rubygem-passe… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6034/heat-jeos-9-1… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6044/nrpe-2.14-3.e… 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6079/gallery3-3.0.… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6090/ssmtp-2.61-20… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10387/owncloud-4.5… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10392/perl-Module-… The following builds have been pushed to Fedora EPEL 6 updates-testing datagrepper-0.1.4-3.el6 dfu-util-0.7-1.el6 hg-git-0.4.0-1.el6 libguac-client-rdp-0.7.4-1.el6 libguac-client-vnc-0.7.2-1.el6 log4cplus-1.1.1-1.el6 nodejs-estraverse-1.1.1-1.el6 nodejs-pubcontrol-0.3.2-1.el6 nodejs-stack-trace-0.0.6-3.el6 owncloud-4.5.12-1.el6 perl-Module-Signature-0.73-1.el6 php-Assetic-1.1.1-1.el6 php-Raven-0.6.0-1.el6 php-bartlett-PHP-CompatInfo-2.17.0-2.el6 php-guzzle-Guzzle-3.6.0-1.el6 php-scssphp-0.0.7-1.el6 php-twig-Twig-1.13.1-1.el6 phrel-1.0.2-1.el6 python-fedmsg-meta-fedora-infrastructure-0.1.6-2.el6 python-tahrir-api-0.1.8-1.el6 Details about builds: ================================================================================ datagrepper-0.1.4-3.el6 (FEDORA-EPEL-2013-6106) A webapp to query fedmsg history -------------------------------------------------------------------------------- Update Information: Backport patch from commit 2f8c98b in upstream repo that fixes querying datagrepper with ?start=FOO&end=BAR More flexible API. Fix some early bugs found in staging. Fix python2.6 bug. Initial packaged release of datagrepper Patch a typo. -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 6 2013 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.1.4-3 - Backport patch from commit 2f8c98b in upstream repo -------------------------------------------------------------------------------- ================================================================================ dfu-util-0.7-1.el6 (FEDORA-EPEL-2013-10390) USB Device Firmware Upgrade tool -------------------------------------------------------------------------------- Update Information: The dfu-util package allows firmware downloads, and in some cases, uploads and other operations, for USB devices supporting the DFU class. -------------------------------------------------------------------------------- ================================================================================ hg-git-0.4.0-1.el6 (FEDORA-EPEL-2013-10383) Mercurial Plugin for Communicating with Git Servers -------------------------------------------------------------------------------- Update Information: New RPM. -------------------------------------------------------------------------------- References: [ 1 ] Bug #969812 - Review Request: hg-git - Mercurial Plugin for Communicating with Git Servers https://bugzilla.redhat.com/show_bug.cgi?id=969812 -------------------------------------------------------------------------------- ================================================================================ libguac-client-rdp-0.7.4-1.el6 (FEDORA-EPEL-2013-10395) RDP support for guacd -------------------------------------------------------------------------------- Update Information: Upstream bugfixes to Guacamole RDP and VNC plugins. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Simone Caronni <negativo17(a)gmail.com> - 0.7.4-1 - Update to 0.7.4. -------------------------------------------------------------------------------- ================================================================================ libguac-client-vnc-0.7.2-1.el6 (FEDORA-EPEL-2013-10395) VNC support for guacd -------------------------------------------------------------------------------- Update Information: Upstream bugfixes to Guacamole RDP and VNC plugins. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Simone Caronni <negativo17(a)gmail.com> - 0.7.2-1 - Update to 0.7.2. -------------------------------------------------------------------------------- ================================================================================ log4cplus-1.1.1-1.el6 (FEDORA-EPEL-2013-10384) Logging Framework for C++ -------------------------------------------------------------------------------- Update Information: - update to log4cplus-1.1.1 -------------------------------------------------------------------------------- ChangeLog: * Thu May 23 2013 Tomas Hozza <thozza(a)redhat.com> 1.1.1-1 - update to 1.1.1 -------------------------------------------------------------------------------- ================================================================================ nodejs-estraverse-1.1.1-1.el6 (FEDORA-EPEL-2013-10382) ECMAScript JS AST traversal functions -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #968600 - Review Request: nodejs-estraverse - ECMAScript JS AST traversal functions https://bugzilla.redhat.com/show_bug.cgi?id=968600 -------------------------------------------------------------------------------- ================================================================================ nodejs-pubcontrol-0.3.2-1.el6 (FEDORA-EPEL-2013-10393) HTTP Extensible Pubsub Control Protocol (EPCP) library for Node.js -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #969827 - Review Request: nodejs-pubcontrol - HTTP Extensible Pubsub Control Protocol (EPCP) library for Node.js https://bugzilla.redhat.com/show_bug.cgi?id=969827 -------------------------------------------------------------------------------- ================================================================================ nodejs-stack-trace-0.0.6-3.el6 (FEDORA-EPEL-2013-10397) Node.js module to get v8 stack traces as an array of CallSite objects -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #911069 - Review Request: nodejs-stack-trace - Node.js module to get v8 stack traces as an array of CallSite objects https://bugzilla.redhat.com/show_bug.cgi?id=911069 -------------------------------------------------------------------------------- ================================================================================ owncloud-4.5.12-1.el6 (FEDORA-EPEL-2013-10387) Private file sync and share server -------------------------------------------------------------------------------- Update Information: 4.5.12 4.5.11 -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 8 2013 Gregor Tätzner <brummbq(a)fedoraproject.org> - 4.5.12-1 - 4.5.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #971859 - CVE-2013-2149 owncloud: Cross-site scripting in owncloud jQuery dialogs due improper escaping of filenames in filepicker module (oC-SA-2013-028) https://bugzilla.redhat.com/show_bug.cgi?id=971859 [ 2 ] Bug #962997 - CVE-2013-2039 CVE-2013-2040 CVE-2013-2042 CVE-2013-2043 CVE-2013-2046 owncloud: multiple flaws corrected in version 4.5.11 https://bugzilla.redhat.com/show_bug.cgi?id=962997 -------------------------------------------------------------------------------- ================================================================================ perl-Module-Signature-0.73-1.el6 (FEDORA-EPEL-2013-10392) CPAN signature management utilities and modules -------------------------------------------------------------------------------- Update Information: This update ensures that digest modules are only loaded from absolute paths in @INC, avoiding a potential arbitrary code execution problem (CVE-2013-2145). There are also a variety of internal package clean-ups. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Paul Howarth <paul(a)city-fan.org> - 0.73-1 - Update to 0.73 - Support for gpg under these alternate names: gpg gpg2 gnupg gnupg2 - Don't check gpg version if gpg does not exist - Constrain the user-specified digest name to /^\w+\d+$/ - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145) - This release by AUDREYT -> update source URL - Include Andreas Koenig's GPG key in the SRPM and import it in %prep so that we don't need to get it from a keyserver in %check - Make building non-interactive - Specify all dependencies - Don't need to remove empty directories from the buildroot - Drop %defattr, redundant since rpm 4.4 - Use %{_fixperms} macro rather than our own chmod incantation -------------------------------------------------------------------------------- References: [ 1 ] Bug #971096 - CVE-2013-2145 perl-Module-Signature: arbitrary code execution when verifying SIGNATURE https://bugzilla.redhat.com/show_bug.cgi?id=971096 -------------------------------------------------------------------------------- ================================================================================ php-Assetic-1.1.1-1.el6 (FEDORA-EPEL-2013-10380) Asset Management for PHP -------------------------------------------------------------------------------- Update Information: Updated to 1.1.1 1.1.1 (June 1, 2013) * Fixed cloning of asset collections * Fixed environment var inheritance * Replaced AssetWriter::getCombinations() for BC, even though we don't use it * Added support for @import-once to Less filters 1.1.0 (May 15, 2013) * Added LazyAssetManager::getLastModified() for determining "deep" mtime * Added DartFilter * Added EmberPrecompile * Added GssFilter * Added PhpCssEmbedFilter * Added RooleFilter * Added TypeScriptFilter * Added the possibility to configure additional load paths for less and lessphp * Added the UglifyCssFilter * Fixed the handling of directories in the GlobAsset. #256 * Added Handlebars support * Added Scssphp-compass support * Added the CacheBustingWorker * Added the UglifyJs2Filter Full change log: https://github.com/kriswallsmith/assetic/blob/v1.1.1/CHANGELOG-1.1.md -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.1.1-1 - Updated to 1.1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #970102 - php-Assetic-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=970102 -------------------------------------------------------------------------------- ================================================================================ php-Raven-0.6.0-1.el6 (FEDORA-EPEL-2013-10391) A PHP client for Sentry -------------------------------------------------------------------------------- Update Information: Updated to 0.6.0 0.5.1 to 0.6.0: https://github.com/getsentry/raven-php/compare/0.5.1...0.6.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 0.6.0-1 - Updated to 0.6.0 - Removed tests sub-package -------------------------------------------------------------------------------- References: [ 1 ] Bug #971729 - php-Raven-0.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=971729 -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-CompatInfo-2.17.0-2.el6 (FEDORA-EPEL-2013-6104) Find out version and the extensions required for a piece of code to run -------------------------------------------------------------------------------- Update Information: Additions and changes: * add both support to PHP 5.4.16 and 5.3.26 * update xdebug reference to 2.2.3 * update xhprof reference to 0.9.3 * update libevent reference to 0.1.0 * update amqp reference to 1.2.0 * update gender reference to 1.0.0 * update intl reference to 3.0.0 * update mongo reference to 1.4.1 * update zendopcache reference to 7.0.2 * phar version of CLI tools * CLI tools phpci is renamed to phpcompatinfo to avoid name conflict with http://www.phptesting.org/ Bug fixes: * extension Zend OPcache is not displayed in list-references For now, the RPM provides both "phpci" and "phpcompatinfo" commands. Deprecated "phpci" command will be dropped in a future version. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Remi Collet <remi(a)fedoraproject.org> - 2.17.0-2 - keep phpci command for now * Fri Jun 7 2013 Remi Collet <remi(a)fedoraproject.org> - 2.17.0-1 - Update to 2.17.0 - phpci command renamed to phpcompatinfo -------------------------------------------------------------------------------- ================================================================================ php-guzzle-Guzzle-3.6.0-1.el6 (FEDORA-EPEL-2013-10398) PHP HTTP client library and framework for building RESTful web service clients -------------------------------------------------------------------------------- Update Information: 3.6.0 (2013-05-29) * ServiceDescription now implements ToArrayInterface * Added command.hidden_params to blacklist certain headers from being treated as additionalParameters * Guzzle can now correctly parse incomplete URLs * Mixed casing of headers are now forced to be a single consistent casing across all values for that header. * Messages internally use a HeaderCollection object to delegate handling case-insensitive header resolution * Removed the whole changedHeader() function system of messages because all header changes now go through addHeader(). * Specific header implementations can be created for complex headers. When a message creates a header, it uses a * HeaderFactory which can map specific headers to specific header classes. There is now a Link header and CacheControl header implementation. * Removed from interface: Guzzle\Http\ClientInterface::setUriTemplate * Removed from interface: Guzzle\Http\ClientInterface::setCurlMulti() * Removed Guzzle\Http\Message\Request::receivedRequestHeader() and implemented this functionality in Guzzle\Http\Curl\RequestMediator * Removed the optional $asString parameter from MessageInterface::getHeader(). Just cast the header to a string. * Removed the optional $tryChunkedTransfer option from Guzzle\Http\Message\EntityEnclosingRequestInterface * Removed the $asObjects argument from Guzzle\Http\Message\MessageInterface::getHeaders() * Removed Guzzle\Parser\ParserRegister::get(). Use getParser() * Removed Guzzle\Parser\ParserRegister::set(). Use registerParser(). * All response header helper functions return a string rather than mixing Header objects and strings inconsistently * Removed cURL blacklist support. This is no longer necessary now that Expect, Accept, etc are managed by Guzzle directly via interfaces * Removed the injecting of a request object onto a response object. The methods to get and set a request still exist but are a no-op until removed. * Most classes that used to require a `Guzzle\Service\Command\CommandInterface typehint now request a Guzzle\Service\Command\ArrayCommandInterface. * Added Guzzle\Http\Message\RequestInterface::startResponse() to the RequestInterface to handle injecting a response on a request while the request is still being transferred * The ability to case-insensitively search for header values * Guzzle\Http\Message\Header::hasExactHeader * Guzzle\Http\Message\Header::raw. Use getAll() * Deprecated cache control specific methods on Guzzle\Http\Message\AbstractMessage. Use the CacheControl header object instead. * Guzzle\Service\Command\CommandInterface now extends from ToArrayInterface and ArrayAccess * Added the ability to cast Model objects to a string to view debug information. 3.5.0 (2013-05-13) * Bug: Fixed a regression so that request responses are parsed only once per oncomplete event rather than multiple times * Bug: Better cleanup of one-time events accross the board (when an event is meant to fire once, it will now remove itself from the EventDispatcher) * Bug: Guzzle\Log\MessageFormatter now properly writes "total_time" and "connect_time" values * Bug: Cloning an EntityEnclosingRequest now clones the EntityBody too * Bug: Fixed an undefined index error when parsing nested JSON responses with a sentAs parameter that reference a * non-existent key * Bug: All __call() method arguments are now required (helps with mocking frameworks) * Deprecating Response::getRequest() and now using a shallow clone of a request object to remove a circular reference to help with refcount based garbage collection of resources created by sending a request * Deprecating ZF1 cache and log adapters. These will be removed in the next major version. * Deprecating Response::getPreviousResponse() (method signature still exists, but it'sdeprecated). Use the HistoryPlugin for a history. * Added a responseBody alias for the response_body location * Refactored internals to no longer rely on Response::getRequest() * HistoryPlugin can now be cast to a string * HistoryPlugin now logs transactions rather than requests and responses to more accurately keep track of the requests and responses that are sent over the wire * Added getEffectiveUrl() and getRedirectCount() to Response objects Full change log: https://github.com/guzzle/guzzle/blob/v3.6.0/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 3.6.0-1 - Updated to 3.6.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #962778 - php-guzzle-Guzzle-3.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=962778 -------------------------------------------------------------------------------- ================================================================================ php-scssphp-0.0.7-1.el6 (FEDORA-EPEL-2013-10381) A compiler for SCSS written in PHP -------------------------------------------------------------------------------- Update Information: Updated to 0.0.7 0.0.5 to 0.0.7 change log: * Port various fixes from leafo/lessphp. * Improve filter precision. * Parsing large image data-urls does not work. * Add == and != ops for colors. * @if and @while directives should treat null like false. * Add pscss as bin in composer.json (Christian Lück). * Fix !default bug (James Shannon, Alberto Aldegheri). * Fix mixin content includes (James Shannon, Christian Brandt). * Fix passing of varargs to another mixin. * Fix interpolation bug in expToString() (Matti Jarvinen). Full change log: http://leafo.net/scssphp/#changelog -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 0.0.7-1 - Updated to 0.0.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #967834 - php-scssphp-0.0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=967834 -------------------------------------------------------------------------------- ================================================================================ php-twig-Twig-1.13.1-1.el6 (FEDORA-EPEL-2013-10386) The flexible, fast, and secure template engine for PHP -------------------------------------------------------------------------------- Update Information: Updated to 1.13.1 (see http://blog.twig.sensiolabs.org/post/52290013748/twig-1-13-1-released) * added the possibility to ignore the filesystem constructor argument in Twig_Loader_Filesystem * fixed Twig_Loader_Chain::exists() for a loader which implements Twig_ExistsLoaderInterface * adjusted backtrace call to reduce memory usage when an error occurs * added support for object instances as the second argument of the constant test * fixed the include function when used in an assignment Full change log: https://github.com/fabpot/Twig/blob/v1.13.1/CHANGELOG -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.13.1-1 - Updated to 1.13.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #971730 - php-twig-Twig-1.13.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=971730 -------------------------------------------------------------------------------- ================================================================================ phrel-1.0.2-1.el6 (FEDORA-EPEL-2013-6105) Per Host RatE Limiter -------------------------------------------------------------------------------- Update Information: New RPM. -------------------------------------------------------------------------------- References: [ 1 ] Bug #967153 - Review Request: phrel - Per Host RatE Limiter https://bugzilla.redhat.com/show_bug.cgi?id=967153 -------------------------------------------------------------------------------- ================================================================================ python-fedmsg-meta-fedora-infrastructure-0.1.6-2.el6 (FEDORA-EPEL-2013-10385) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information: Give the planet processor the correct .__name__. Also, a mailman3 processor is available for the future. -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 6 2013 Ralph Bean <rbean(a)redhat.com> - 0.1.6-2 - Removed an old unneeded patch. * Thu Jun 6 2013 Ralph Bean <rbean(a)redhat.com> - 0.1.6-1 - Fix the planet processor name. - Add mailman3 processor for the future. -------------------------------------------------------------------------------- ================================================================================ python-tahrir-api-0.1.8-1.el6 (FEDORA-EPEL-2013-10394) An API for interacting with the Tahrir database -------------------------------------------------------------------------------- Update Information: New features, bugfixes, and relicense to GPLv3+. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Ralph Bean <rbean(a)redhat.com> - 0.1.8-1 - New Invitations API. - Bugfixes to other API functions. - Relicense to GPLv3+ --------------------------------------------------------------------------------

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 08 Jun '13

08 Jun '13

The following Fedora EPEL 5 Security updates need testing: Age URL 412 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 307 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 113 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4… 46 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1-1… 14 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5968/transifex-cli… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5990/mod_security-… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5991/cgit-0.9.2-1.… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5996/socat-1.7.2.2… 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6047/nrpe-2.14-3.e… 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6086/libguestfs-1.… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6089/ssmtp-2.61-20… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10388/perl-Module-… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10389/rrdtool-1.2.… The following builds have been pushed to Fedora EPEL 5 updates-testing perl-Module-Signature-0.73-1.el5 python-virtualenv-1.7.2-2.el5 rrdtool-1.2.27-4.el5 Details about builds: ================================================================================ perl-Module-Signature-0.73-1.el5 (FEDORA-EPEL-2013-10388) CPAN signature management utilities and modules -------------------------------------------------------------------------------- Update Information: This update ensures that digest modules are only loaded from absolute paths in @INC, avoiding a potential arbitrary code execution problem (CVE-2013-2145). There are also a variety of internal package clean-ups. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Paul Howarth <paul(a)city-fan.org> - 0.73-1 - Update to 0.73 - Support for gpg under these alternate names: gpg gpg2 gnupg gnupg2 - Don't check gpg version if gpg does not exist - Constrain the user-specified digest name to /^\w+\d+$/ - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145) - This release by AUDREYT -> update source URL - Include Andreas Koenig's GPG key in the SRPM and import it in %prep so that we don't need to get it from a keyserver in %check - Make building non-interactive - Specify all dependencies - Don't need to remove empty directories from the buildroot - Drop %defattr, redundant since rpm 4.4 - Use %{_fixperms} macro rather than our own chmod incantation -------------------------------------------------------------------------------- References: [ 1 ] Bug #971096 - CVE-2013-2145 perl-Module-Signature: arbitrary code execution when verifying SIGNATURE https://bugzilla.redhat.com/show_bug.cgi?id=971096 -------------------------------------------------------------------------------- ================================================================================ python-virtualenv-1.7.2-2.el5 (FEDORA-EPEL-2013-10396) Tool to create isolated Python environments -------------------------------------------------------------------------------- Update Information: * Switch to an older version of virtualenv because the 1.9.x branch doesn't work with python-2.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #969395 - virtualenv does not work anymore because Python 2.4 support was dropped in virtualenv 1.9 https://bugzilla.redhat.com/show_bug.cgi?id=969395 -------------------------------------------------------------------------------- ================================================================================ rrdtool-1.2.27-4.el5 (FEDORA-EPEL-2013-10389) Round Robin Database Tool to store and display time-series data -------------------------------------------------------------------------------- Update Information: This is an update that adds explicit check to the imginfo format. It may prevent crash/exploit of user space applications which pass user supplied format to the library call without checking. -------------------------------------------------------------------------------- References: [ 1 ] Bug #969311 - CVE-2013-2131 rrdtool: crashes on format string exploit [epel-5] https://bugzilla.redhat.com/show_bug.cgi?id=969311 --------------------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel June 2013