The following Fedora EPEL 6 Security updates need testing: Age URL 891 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6 223 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-2.0.2-4.el6 110 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26-1.el6 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2655/python-oauth2-1.5.211-7.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2750/libsrtp-1.4.4-10.20101004cvs.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2719/nodejs-0.10.32-1.el6,v8-3.14.5.10-14.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2742/TeXmacs-1.0.7.2-3.el6 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2713/putty-0.63-3.el6 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2850/nginx-1.0.15-7.el6 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2811/nodejs-qs-0.6.6-3.el6 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2821/nodejs-send-0.3.0-4.el6 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2801/seamonkey-2.21-8.ESR_24.8.0.el6 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2969/golang-1.3.2-1.el6 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2981/check-mk-1.2.4p5-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing check-mk-1.2.4p5-2.el6 fntsample-3.2-3.el6 golang-1.3.2-1.el6 golang-googlecode-net-0-0.16.hg90e232e2462d.el6 nfs-ganesha-2.1.0-7.el6 oflb-asana-math-fonts-0.930-6.el6 pagul-fonts-1.0-7.el6 perl-Digest-SHA3-0.22-1.el6 perl-Excel-Writer-XLSX-0.78-1.el6 python-drat-0.4.1-1.el6 python-fedmsg-meta-fedora-infrastructure-0.3.2-1.el6 salt-2014.1.11-1.el6 tabish-eeyek-fonts-1.0-6.el6 wbox-5-8.el6 Details about builds: ================================================================================ check-mk-1.2.4p5-2.el6 (FEDORA-EPEL-2014-2981) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information: Do not require any other shell than bash since that's the default shell for the Fedora / RHEL distributions New upstream release providing many security fixes. New upstream release providing many security fixes. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 30 2014 Andrea Veri <av...@fedoraproject.org> - 1.2.4p5-2 - Do not require any other shell than bash since that's the default shell for the Fedora / RHEL distributions. * Wed Sep 17 2014 Andrea Veri <av...@fedoraproject.org> - 1.2.4p5-1 - New upstream release. Fixes CVEs: - CVE-2014-5338 - CVE-2014-5339 - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341) - Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068) - Turn Wato_Legacy_Eval as True as we want to prevent breakages between machines running different Python and/or check-mk releases. This is necessary after the 'ast' move from 'pickle' (that was generating a insecure API call), however the 'ast' module is still not available for RHEL / CentOS 5 machines. The patch is there to avoid miscommunications between different distribution releases. More information is available at: http://mathias-kettner.com/check_mk_werks.php?werk_id=984. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 https://bugzilla.redhat.com/show_bug.cgi?id=1132337 -------------------------------------------------------------------------------- ================================================================================ fntsample-3.2-3.el6 (FEDORA-EPEL-2014-2970) A program for making font samples that show Unicode coverage of the font -------------------------------------------------------------------------------- Update Information: Backport from f22 branch -------------------------------------------------------------------------------- ================================================================================ golang-1.3.2-1.el6 (FEDORA-EPEL-2014-2969) The Go Programming Language -------------------------------------------------------------------------------- Update Information: update to go1.3.2 (bz1147324) more work to get cgo.a timestamps to line up, due to build-env -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 29 2014 Vincent Batts <vba...@fedoraproject.org> - 1.3.2-1 - update to go1.3.2 (bz1147324) * Wed Aug 13 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-22 - more work to get cgo.a timestamps to line up, due to build-env * Wed Aug 13 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-21 - touch cgo.a regardless * Wed Aug 13 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-20 - rpm dependency ordering for %post * Tue Aug 12 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-19 - finally check for a Stale cgo in a %post * Tue Aug 12 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-18 - explicitly list all the files and directories for the packages trees * Tue Aug 12 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-17 - explicitly list all the files and directories of the src tree, to preserve timestamps * Mon Aug 11 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-16 - touch all the built archives to be the same * Mon Aug 11 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-15 - make golang-src 'noarch' again, since that was not a fix, and takes up more space * Mon Aug 11 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-14 - update timestamps of source files during %install bz1099206 * Fri Aug 8 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-13 - update timestamps of source during %install bz1099206 * Fri Aug 8 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-12 - set another version constraint on xemacs due to bz1127518 * Wed Aug 6 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-11 - set a version constraint on xemacs due to bz1127518 * Wed Aug 6 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-10 - make the source subpackage arch'ed, instead of noarch * Tue Jul 15 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-9 - fix the loading of gdb safe-path. bz981356 * Tue Jul 8 2014 Vincent Batts <vba...@fedoraproject.org> - 1.2.2-8 - `go install std` requires gcc, to build cgo. bz1105901, bz1101508 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1147324 - CVE-2014-7189 golang: TLS client authentication issue fixed in version 1.3.2 https://bugzilla.redhat.com/show_bug.cgi?id=1147324 -------------------------------------------------------------------------------- ================================================================================ golang-googlecode-net-0-0.16.hg90e232e2462d.el6 (FEDORA-EPEL-2014-2995) Supplementary Go networking libraries -------------------------------------------------------------------------------- Update Information: Resolves: rhbz#1147193 - update to latest upstream revision -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 29 2014 Lokesh Mandvekar <l...@fedoraproject.org> - 0-0.16.hg90e232e2462d - Resolves: rhbz#1147193 - update to latest upstream revision 90e232e2462dedc03bf3c93358da62d54d55dfb6 - don't redefine gopath, don't own dirs owned by golang - use golang >= 1.2.1-3 for golang specific rpm macros - preserve timestamps of copied files - br stuff from golang-googlecode-text -------------------------------------------------------------------------------- References: [ 1 ] Bug #1147193 - update to at least version ad01a6fcc8a19d3a4478c836895ffe883bd2ceab https://bugzilla.redhat.com/show_bug.cgi?id=1147193 -------------------------------------------------------------------------------- ================================================================================ nfs-ganesha-2.1.0-7.el6 (FEDORA-EPEL-2014-2993) Ganesha NFS Server -------------------------------------------------------------------------------- Update Information: /etc/sysconfig/nfs-ganesha file added in 2.1, just noticed now -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 29 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com> 2.1.0-7 - install /etc/sysconfig/nfs-ganesha file * Fri Aug 29 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com> - Ceph FSAL typo, #1135437 * Sun Aug 17 2014 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 2.1.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ oflb-asana-math-fonts-0.930-6.el6 (FEDORA-EPEL-2014-2984) An OpenType font with a MATH table -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ================================================================================ pagul-fonts-1.0-7.el6 (FEDORA-EPEL-2014-3003) Font for Saurashtra script -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ================================================================================ perl-Digest-SHA3-0.22-1.el6 (FEDORA-EPEL-2014-3014) Perl extension for SHA-3 -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1134343 - Review Request: perl-Digest-SHA3 - Perl extension for SHA-3 https://bugzilla.redhat.com/show_bug.cgi?id=1134343 -------------------------------------------------------------------------------- ================================================================================ perl-Excel-Writer-XLSX-0.78-1.el6 (FEDORA-EPEL-2014-2976) Create a new file in the Excel 2007+ XLSX format -------------------------------------------------------------------------------- Update Information: Update to 0.78 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 30 2014 David Dick <dd...@cpan.org> - 0.78-1 - Update to 0.78 * Thu Aug 28 2014 Jitka Plesnikova <jples...@redhat.com> - 0.77-3 - Perl 5.20 rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-...@lists.fedoraproject.org> - 0.77-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1147432 - perl-Excel-Writer-XLSX-0.78 is available https://bugzilla.redhat.com/show_bug.cgi?id=1147432 -------------------------------------------------------------------------------- ================================================================================ python-drat-0.4.1-1.el6 (FEDORA-EPEL-2014-3012) A reading text analysis tool -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146927 - Review Request: python-drat - A reading text analysis tool https://bugzilla.redhat.com/show_bug.cgi?id=1146927 -------------------------------------------------------------------------------- ================================================================================ python-fedmsg-meta-fedora-infrastructure-0.3.2-1.el6 (FEDORA-EPEL-2014-3009) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information: Handle new pkgdb messages, certain legacy messages, and new bugzilla messages. git messages now return the full patch via a call to msg2long_form -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 29 2014 Ralph Bean <rb...@redhat.com> - 0.3.2-1 - Latest upstream. - Handle different types of legacy messages. - git messages now return the full patch via a call to msg2long_form. - future-proofing against new types of bugzilla messages. -------------------------------------------------------------------------------- ================================================================================ salt-2014.1.11-1.el6 (FEDORA-EPEL-2014-2989) A parallel remote execution system -------------------------------------------------------------------------------- Update Information: Update to bugfix release 2014.1.11 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 29 2014 Erik Johnson <e...@saltstack.com> - 2014.1.11-1 - Update to bugfix release 2014.1.11 -------------------------------------------------------------------------------- ================================================================================ tabish-eeyek-fonts-1.0-6.el6 (FEDORA-EPEL-2014-3002) Font for Meetei Mayek script -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ================================================================================ wbox-5-8.el6 (FEDORA-EPEL-2014-3018) HTTP testing tool and configuration-less HTTP server -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list epel-devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/epel-devel