The following Fedora EPEL 6 Security updates need testing:
Age URL
641
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
97
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11865/quassel-0.9.1-1.el6
70
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12079/bip-0.8.9-1.el6
34
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12427/seamonkey-2.21-3.esr2.el6
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0110/drupal7-entity-1.3-1.el6
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0105/strongswan-5.1.1-4.el6
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0166/mediawiki119-1.19.10-1.el6
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0197/drupal7-7.26-1.el6
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0202/transifex-client-0.10-1.el6
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0205/drupal6-6.30-1.el6
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0233/libreswan-3.8-1.el6
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0282/moodle-2.4.8-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
aqbanking-5.3.2-0.1.beta.el6
cups-bjnp-1.2.2-1.el6
gnucash-2.4.15-2.el6
gwenhywfar-4.9.0-0.2.beta.el6
mirrormanager-1.4.4-1.el6
moodle-2.4.8-1.el6
nodejs-bignumber-js-1.2.0-4.el6
pyhoca-cli-0.4.0.2-1.el6
pyhoca-gui-0.4.0.9-2.el6
python-fmn-lib-0.2.0-1.el6
python-fmn-rules-0.1.4-1.el6
python-fmn-web-0.2.0-1.el6
python-fmn-web-0.2.0-2.el6
python-x2go-0.4.0.9-1.el6
ssdeep-2.10-2.el6
x2goclient-4.0.1.3-1.el6
Details about builds:
================================================================================
aqbanking-5.3.2-0.1.beta.el6 (FEDORA-EPEL-2014-0232)
A library for online banking functions and financial data import/export
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest 2.4 release, and updates AqBanking to add
support for SEPA.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 17 2014 Bill Nottingham <nott...@redhat.com> - 5.3.2beta-0.2
- bump to 5.3.2beta
* Wed Jan 15 2014 Bill Nottingham <nott...@redhat.com> - 5.3.1beta-0.1
- update to latest upstream
- disable aqebics for now
* Thu Dec 12 2013 Bill Nottingham <nott...@redhat.com> - 5.0.25-4
- add upstream patches for OFXDirectConnect (#1040224)
* Tue Aug 6 2013 Bill Nottingham <nott...@redhat.com> - 5.0.25-3
- Fix for UnversionedDocDirs feature (#993669)
* Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 5.0.25-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Apr 24 2013 Bill Nottingham <nott...@redhat.com> - 5.0.25-1
- update to 5.0.25
* Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 5.0.22-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 5.0.22-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 19 2012 Bill Nottingham <nott...@redhat.com> - 5.0.22-2
- update to 5.0.22
- fix up rpaths a little cleaner
* Thu Jan 12 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 5.0.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Oct 25 2011 Bill Nottingham <nott...@redhat.com> - 5.0.16-1
- update to 5.0.16
* Thu Oct 20 2011 Marcela Mašláňová <mmasl...@redhat.com> - 5.0.2-3.2
- rebuild with new gmp without compat lib
* Mon Oct 10 2011 Peter Schiffer <pschi...@redhat.com> - 5.0.2-3.1
- rebuild with new gmp
* Mon Feb 21 2011 Bill Nottingham <nott...@redhat.com> - 5.0.2-3
- fix -devel obsoletes
* Wed Feb 16 2011 Bill Nottingham <nott...@redhat.com> - 5.0.2-2
- remove aqpaypal source
* Fri Feb 11 2011 Bill Nottingham <nott...@redhat.com> - 5.0.2-1
- update to latest upstream release
* Mon Feb 7 2011 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 4.2.4-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Aug 22 2010 Rex Dieter <rdie...@fedoraproject.org> - 4.2.4-6
- q4banking: try harder to purge qt3 dep (#626008)
* Sun Aug 22 2010 Rex Dieter <rdie...@fedoraproject.org> - 4.2.4-5
- rebase pkgconfig patch
- q4banking should not depend on qt3 (#626008)
- include %check section, though currently mostly useless
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047126 - Support for SEPA in aqbanking
https://bugzilla.redhat.com/show_bug.cgi?id=1047126
[ 2 ] Bug #1056425 - aqbanking doesn't build qbanking on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=1056425
--------------------------------------------------------------------------------
================================================================================
cups-bjnp-1.2.2-1.el6 (FEDORA-EPEL-2014-0288)
CUPS backend for the Canon BJNP network printers
--------------------------------------------------------------------------------
Update Information:
new upstream release 1.2.2
- Fix crash with newer printers that send an xml-document for printer status
- Fix possible buffer overflow on response buffer
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Louis Lagendijk <llagend...@users.sourceforge.net> - 1.2.2-1
- new upstream release 1.2.2
- Fix crash with newer printers that send an xml-document for printer status
- Fix possible buffer overflow on response buffer
* Wed Jan 22 2014 Louis Lagendijk <llagend...@users.sourceforge.net> - 1.2.1-3
- temporary release for testing
- Fix crash with newer printers that send an xml-document for printer status
- Fix possible buffer overflow on response buffer
* Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1056222 - [abrt] cups-bjnp: strcpy(): bjnp killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1056222
--------------------------------------------------------------------------------
================================================================================
gnucash-2.4.15-2.el6 (FEDORA-EPEL-2014-0232)
Finance management application
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest 2.4 release, and updates AqBanking to add
support for SEPA.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Bill Nottingham <nott...@redhat.com> - 2.4.15-2
- fix now-obsolete qbanking requirement (#1056425)
* Fri Jan 17 2014 Bill Nottingham <nott...@redhat.com> - 2.4.15-1
- update to 2.4.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047126 - Support for SEPA in aqbanking
https://bugzilla.redhat.com/show_bug.cgi?id=1047126
[ 2 ] Bug #1056425 - aqbanking doesn't build qbanking on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=1056425
--------------------------------------------------------------------------------
================================================================================
gwenhywfar-4.9.0-0.2.beta.el6 (FEDORA-EPEL-2014-0232)
A multi-platform helper library for other libraries
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest 2.4 release, and updates AqBanking to add
support for SEPA.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 15 2014 Bill Nottingham <nott...@redhat.com> - 4.9.0-0.2.beta
- update to latest upstream
* Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 4.3.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Apr 23 2013 Bill Nottingham <nott...@redhat.com> - 4.3.3-1
- update to latest upstream
* Thu Feb 14 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 4.3.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jul 19 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 4.3.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 19 2012 Bill Nottingham <nott...@redhat.com> - 4.3.1-2
- update to latest upstream
* Fri Jan 13 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 4.3.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Oct 7 2011 Bill Nottingham <nott...@redhat.com> - 4.3.0-1
- update to latest upstream
* Fri Feb 11 2011 Bill Nottingham <nott...@redhat.com> - 4.0.5-1
- update to latest upstream
* Wed Feb 9 2011 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 3.11.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047126 - Support for SEPA in aqbanking
https://bugzilla.redhat.com/show_bug.cgi?id=1047126
[ 2 ] Bug #1056425 - aqbanking doesn't build qbanking on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=1056425
--------------------------------------------------------------------------------
================================================================================
mirrormanager-1.4.4-1.el6 (FEDORA-EPEL-2014-0281)
Fedora mirror management system
--------------------------------------------------------------------------------
Update Information:
upstream bugfix release
bugfix upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 21 2014 Matt Domsch <mdom...@fedoraproject.org> - 1.4.4-1
- upstream bugfix release
* Wed Dec 18 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.3-1
- upstream bugfix release
- Reduce Fedora-isms to make it more usable for other distributions
* Tue Jul 23 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.2-1
- upstream bugfix release
* Mon Jun 17 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.1-1
- upstream 1.4.1 pure bugfix release
* Fri Jun 14 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.0-1
- upstream 1.4.0 release
* Fri Jan 25 2013 Matt Domsch <mdom...@fedoraproject.org> - 1.4.0-0.1
- initial 1.4 branch for testing
* Sat Jun 9 2012 Matt Domsch <mdom...@fedoraproject.org>
- move -maps to separate subpackage
* Thu Nov 25 2010 Matt Domsch <mdom...@fedoraproject.org>
- add tmpfiles.d file (BZ636623)
--------------------------------------------------------------------------------
================================================================================
moodle-2.4.8-1.el6 (FEDORA-EPEL-2014-0282)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2014-0008,9,10.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Jon Ciesla <limburg...@gmail.com> - 2.4.8-1
- Fix for CVE-2014-0008,9,10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055390 - CVE-2014-0008 CVE-2014-0009 CVE-2014-0010 moodle:
various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1055390
[ 2 ] Bug #1055388 - CVE-2014-0008 CVE-2014-0009 CVE-2014-0010 moodle:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1055388
--------------------------------------------------------------------------------
================================================================================
nodejs-bignumber-js-1.2.0-4.el6 (FEDORA-EPEL-2014-0284)
Library for arbitrary-precision decimal and non-decimal arithmetic
--------------------------------------------------------------------------------
Update Information:
Add exclusivearch on EL6
Fix missing npm(nodejs-bignumber-js) provides, which may resolve dependency
issues when installing this package or other packages that depend on it
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Troy Dawson <tdaw...@redhat.com> - 1.2.0-4
- Add exclusivearch on EL6
* Fri Jan 3 2014 T.C. Hollingsworth <tchollingswo...@gmail.com> - 1.2.0-3
- add macro to invoke dependency generator on EL6
--------------------------------------------------------------------------------
================================================================================
pyhoca-cli-0.4.0.2-1.el6 (FEDORA-EPEL-2014-0114)
Command line X2Go client written in Python
--------------------------------------------------------------------------------
Update Information:
python-x2go:
o Support for passphrase protect SSH keys.
o Support for two-factor authentication as provided
by OpenSSH server 6.2 and above (requires as of yet
unreleased Python Paramiko module).
o many many bugfixes.
o Support pulseaudio (>= 2).
o Expand the "~" character properly.
o Fix detection of color depth on Windows machines.
pyhoca-gui:
o Translation updates.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.2-1
- Update to 0.4.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1056434 - unsatisfied dependency python-cups on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=1056434
--------------------------------------------------------------------------------
================================================================================
pyhoca-gui-0.4.0.9-2.el6 (FEDORA-EPEL-2014-0114)
Graphical X2Go client written in (wx)Python
--------------------------------------------------------------------------------
Update Information:
python-x2go:
o Support for passphrase protect SSH keys.
o Support for two-factor authentication as provided
by OpenSSH server 6.2 and above (requires as of yet
unreleased Python Paramiko module).
o many many bugfixes.
o Support pulseaudio (>= 2).
o Expand the "~" character properly.
o Fix detection of color depth on Windows machines.
pyhoca-gui:
o Translation updates.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.9-2
- No python-cups, use system-config-printer-libs on EL6 (bug #1056434)
* Wed Jan 8 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.9-1
- Update to 0.4.0.9
- Add Requires python-cups
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1056434 - unsatisfied dependency python-cups on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=1056434
--------------------------------------------------------------------------------
================================================================================
python-fmn-lib-0.2.0-1.el6 (FEDORA-EPEL-2014-0290)
Internal API components and model for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-fmn-rules-0.1.4-1.el6 (FEDORA-EPEL-2014-0287)
Message processing rules for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Ralph Bean <rb...@redhat.com> - 0.1.4-1
- Upstream release.
- Added new dep on python-dogpile-cache.
--------------------------------------------------------------------------------
================================================================================
python-fmn-web-0.2.0-1.el6 (FEDORA-EPEL-2014-0292)
Frontend Web Application for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-fmn-web-0.2.0-2.el6 (FEDORA-EPEL-2014-0283)
Frontend Web Application for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Ralph Bean <rb...@redhat.com> - 0.2.0-2
- Correct installation of static dir.
--------------------------------------------------------------------------------
================================================================================
python-x2go-0.4.0.9-1.el6 (FEDORA-EPEL-2014-0114)
Python module providing X2Go client API
--------------------------------------------------------------------------------
Update Information:
python-x2go:
o Support for passphrase protect SSH keys.
o Support for two-factor authentication as provided
by OpenSSH server 6.2 and above (requires as of yet
unreleased Python Paramiko module).
o many many bugfixes.
o Support pulseaudio (>= 2).
o Expand the "~" character properly.
o Fix detection of color depth on Windows machines.
pyhoca-gui:
o Translation updates.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2014 Orion Poplawski <or...@cora.nwra.com> - 0.4.0.9-1
- Update to 0.4.0.9
- Drop python-cups requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1056434 - unsatisfied dependency python-cups on epel6
https://bugzilla.redhat.com/show_bug.cgi?id=1056434
--------------------------------------------------------------------------------
================================================================================
ssdeep-2.10-2.el6 (FEDORA-EPEL-2014-0286)
Compute context triggered piecewise hashes
--------------------------------------------------------------------------------
Update Information:
ssdeep is a program for computing context triggered piecewise hashes (CTPH).
Also called fuzzy hashes, CTPH can match inputs that have homologies. Such
inputs have sequences of identical bytes in the same order, although bytes in
between these sequences may be different in both content and length.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1056460 - Review Request: ssdeep - Compute context triggered
piecewise hashes
https://bugzilla.redhat.com/show_bug.cgi?id=1056460
--------------------------------------------------------------------------------
================================================================================
x2goclient-4.0.1.3-1.el6 (FEDORA-EPEL-2014-0291)
X2Go Client application (Qt4)
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.1.3:
- Fix audio for the Linux X2Go Client
- Rework keyboard setup in session profile manager (support for keyboard
autodetection now)
- Configurable GSSAPI delegation
- Several translation updates (thanks to the i18n team!!!)
- Restrict access to x2goplugin.html to localhost by default.
- Update to 4.0.1.2:
- Provide Keywords: key in .desktop file.
- Store broker HTTPS certificate exceptions in $HOME/.x2go/ssl/exceptions
(before: $HOME/ssl/exceptions). (Fixes: #328).
- Perform sanity checks on data that comes in from X2Go Servers. Prohibit
the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333).
- Add option --broker-cacertfile. Allow usage of non-system-wide installed
(self-signed) SSL certificate chains for https (SSL) session broker
connections. (Fixes: #311).
- Update man page for new --tray-icon cmdline option.
- Update man page for --broker-url. Explain the syntax of <URL>.
- Properly handle (=expand) the "~" character in key filenames. (Brought to
attention by Eldamir on IRC. Thanks!).
- Expand tilde operator for all other file paths handed over to X2Go Client
via sessions file or cmdline parameter.
- Syntax fix of x2goclient.desktop file.
- Test for various file locations of the pulseaudio cookie file.
- Strip whitespaces off of user name, host name and other strings when
loading / saving session profiles. (Fixes: #315).
- New option --tray-icon. Force showing the tray icon, even for hidden
sessions. Also allow creation of .desktop files with --tray-icon optionally
being enabled. (Fixes: #316).
- Update Spanish translation.
- Support for keys "shadowuser" "shadowdisplay" and "shadowmode" in config
file. This allows choosing the default display for shadow sessions.
- Support for GSSApi(Kerberos 5) authentication. Using ssh/scp commands on
Linux and Mac and plink/pscp on Windows.
- Support for ChallengeResponseAuthentication (Google Authenticator)
- Additional check if authentication with GSSApi successfull
- c121b7e2d3d83abdc2d7a29637bc3294e38b2ec3 broke checking if remote command
produce only stderr and not stdout. It made x2goclient crash if x2gostartagent
send LIMIT error. Current commit fixes this issue.
- SshMasterConnection should use current user name if no user name is
specified in session settings
- GSSApi(Kerberos 5) authentication for sshproxy and sshbroker
- Handle SSH host key changes more elegantly and allow user interaction if
such a host key change occurs. (Fixes: #241).
- Update summary and description from upstream
- Split out browser plugin into x2goplugin package
- Add x2goplugin-provider package for apache config
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Orion Poplawski <or...@cora.nwra.com> - 4.0.1.3-1
- Update to 4.0.1.3
- Drop provider patch applied upstream
* Tue Dec 17 2013 Orion Poplawski <or...@cora.nwra.com> - 4.0.1.2-1
- Update to 4.0.1.2
- Update summary and description from upstream
- Split out browser plugin into x2goplugin package
- Add x2goplugin-provider package for apache config
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
