The following Fedora EPEL 6 Security updates need testing:
Age URL
766
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
113
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6.4-1.el6
98
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-2.0.2-4.el6
57
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1011/php-ZendFramework-1.12.5-1.el6
16
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1388/botan-1.8.14-2.el6
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1414/gajim-0.14.4-4.el6
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1452/php-ZendFramework2-2.2.7-1.el6
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1471/chicken-4.8.0.6-2.el6
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1477/drupal7-views-3.8-1.el6
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1475/moodle-2.4.10-1.el6
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1522/check-mk-1.2.4p2-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
check-mk-1.2.4p2-2.el6
gpaw-0.10.0.11364-3.el6
hylafax+-5.5.5-1.el6
jpegoptim-1.4.1-1.el6
perl-Crypt-PBKDF2-0.140890-1.el6
perl-Sys-Detect-Virtualization-0.106-1.el6
sys_basher-1.1.25-2.el6
uthash-1.9.9-6.el6
Details about builds:
================================================================================
check-mk-1.2.4p2-2.el6 (FEDORA-EPEL-2014-1522)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
- Install the mk-job binary on /usr/bin.
- Make sure the proper permissions are given to /var/lib/check_mk_agent/job to
prevent any hard or symlink to be created by a normal user and pointing to any
file on the filesystem exposing it on the check-mk-agent output being run as
root.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 27 2014 Andrea Veri <av...@fedoraproject.org> - 1.2.4p2-2
- Install the mk-job binary on /usr/bin.
- Make sure the proper permissions are given to /var/lib/check_mk_agent/job
to prevent any hard or symlink to be created by a normal user and pointing
to any file on the filesystem exposing it on the check-mk-agent output being
run as root. Fixes BZ #1101669.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101669 - CVE-2014-0243 check-mk: arbitrary file disclosure flaw
as root
https://bugzilla.redhat.com/show_bug.cgi?id=1101669
--------------------------------------------------------------------------------
================================================================================
gpaw-0.10.0.11364-3.el6 (FEDORA-EPEL-2014-1520)
A grid-based real-space PAW method DFT code
--------------------------------------------------------------------------------
Update Information:
A grid-based real-space PAW method DFT code
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1087812 - Review Request: gpaw - A grid-based real-space PAW
method DFT code
https://bugzilla.redhat.com/show_bug.cgi?id=1087812
--------------------------------------------------------------------------------
================================================================================
hylafax+-5.5.5-1.el6 (FEDORA-EPEL-2014-1519)
An enterprise-strength fax server
--------------------------------------------------------------------------------
Update Information:
Update to 5.5.5 fixes several bugs plus add uucp dependency.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 26 2014 Lee Howard <fax...@howardsilvan.com> - 5.5.5-1
- update to 5.5.5
* Thu Apr 24 2014 Lee Howard <fax...@howardsilvan.com> - 5.5.4-3
- add uucp dependency for build and install, bug 998737
* Sat Sep 14 2013 Lee Howard <fax...@howardsilvan.com> - 5.5.4-2
- fix preun stop call to hylafax+ (and not hylafax)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #998737 - /var/spool/hylafax has incorrect ownership and other
hylafax+ RPM problems
https://bugzilla.redhat.com/show_bug.cgi?id=998737
--------------------------------------------------------------------------------
================================================================================
jpegoptim-1.4.1-1.el6 (FEDORA-EPEL-2014-1516)
Utility to optimize JPEG files
--------------------------------------------------------------------------------
Update Information:
Update to version 1.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 28 2014 Denis Fateyev <de...@fateyev.com> - 1.4.1-1
- Update to version 1.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1100425 - jpegoptim-1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1100425
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-PBKDF2-0.140890-1.el6 (FEDORA-EPEL-2014-1511)
PBKDF2 password hashing algorithm
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1098097 - Review Request: perl-Crypt-PBKDF2 - PBKDF2 password
hashing algorithm
https://bugzilla.redhat.com/show_bug.cgi?id=1098097
--------------------------------------------------------------------------------
================================================================================
perl-Sys-Detect-Virtualization-0.106-1.el6 (FEDORA-EPEL-2014-1514)
Library to detect if a UNIX system is running as a virtual machine
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1095662 - Review Request: perl-Sys-Detect-Virtualization - Detect
if a UNIX system is running as a virtual machine
https://bugzilla.redhat.com/show_bug.cgi?id=1095662
--------------------------------------------------------------------------------
================================================================================
sys_basher-1.1.25-2.el6 (FEDORA-EPEL-2014-1512)
A multithreaded hardware exerciser
--------------------------------------------------------------------------------
Update Information:
Added verbose mode to memory tests
--------------------------------------------------------------------------------
================================================================================
uthash-1.9.9-6.el6 (FEDORA-EPEL-2014-1521)
A hash table for C structures
--------------------------------------------------------------------------------
Update Information:
add `%global debug_package %{nil}` to avoid empty debuginfo-pkg
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 28 2014 Björn Esser <bjoern.es...@gmail.com> - 1.9.9-6
- add `%global debug_package %{nil}` to avoid empty debuginfo-pkg.
* Thu May 22 2014 Björn Esser <bjoern.es...@gmail.com> - 1.9.9-5
- revert "Root package should be noarch too".
- add provides %{name} for -devel subpkg.
- add a note about why the mainpkg is arched.
* Wed May 21 2014 Peter Robinson <pbrobin...@fedoraproject.org> 1.9.9-4
- Root package should be noarch too
* Wed May 21 2014 Peter Robinson <pbrobin...@fedoraproject.org> 1.9.9-3
- Build as noarch
* Sun May 18 2014 Christopher Meng <r...@cicku.me> - 1.9.9-2
- Move all files to -devel subpkg.
* Sat Mar 29 2014 Christopher Meng <r...@cicku.me> - 1.9.9-1
- Update to 1.9.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101930 - uthash-debuginfo-1.9.9-5 is empty
https://bugzilla.redhat.com/show_bug.cgi?id=1101930
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
