The following Fedora EPEL 6 Security updates need testing: Age URL 772 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6 766 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6 656 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6 627 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6 238 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e3e50897ac libbsd-0.8.3-2.el6 134 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-c0d33ae70f tnef-1.4.14-1.el6 36 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-e8124f23c8 heimdal-7.4.0-1.el6 26 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-99fb0d61b0 chicken-4.12.0-3.el6 26 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ab5ed7f894 python-tablib-0.11.5-1.el6 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-87be2d4d20 potrace-1.15-1.el6 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-938c876edd php-PHPMailer-5.2.24-1.el6 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-035ed8efb3 qpdf-5.1.1-5.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3f527c60d9 firebird-2.5.7.27050.0-1.el6 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0ad4c424f0 redis-3.2.10-2.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing configsnap-0.13-1.el6 fedfind-3.6.0-1.el6 fedpkg-1.29-1.el6 firebird-2.5.7.27050.0-1.el6 golang-github-russross-blackfriday-1.2-20.el6 libmediainfo-0.7.98-1.el6 libzen-0.4.36-1.el6 mediainfo-0.7.98-1.el6 php-horde-nag-4.2.16-1.el6 redis-3.2.10-2.el6 rpkg-1.50-1.el6 youtube-dl-2017.08.13-1.el6 Details about builds: ================================================================================ configsnap-0.13-1.el6 (FEDORA-EPEL-2017-c32d22da83) Record and compare system state -------------------------------------------------------------------------------- Update Information: Update to 0.13 -------------------------------------------------------------------------------- ================================================================================ fedfind-3.6.0-1.el6 (FEDORA-EPEL-2017-11f5498c56) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This update adds support for the new modular composes, with 'Fedora-Modular' as their shortnames. Currently only Rawhide and Branched nightly modular composes are supported. ---- This new version of fedfind handles an unusual situation where its local cache directory (which is usually `~/.cache/fedfind`, but can be a temporary directory if that location is not writeable) disappears during the lifetime of a fedfind-using process. Previously, this would cause the process to crash, as fedfind wasn't written to handle this eventuality. There are no other changes in this update. -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.29-1.el6 (FEDORA-EPEL-2017-1c685ce277) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: # Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable - Non-zero is returned when local command fails - More Python 3 compatible - Allow container builds from any namespace - Supply namespace to lookaside (if enabled) # rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and description of new-sources and upload commands - 1248737 (cqi) - Set autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals (cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) - Make tests and covered code compatible with Py3 (cqi) - Add requirements files (cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests (cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when rpmbuild fails in local command (cqi) - Report deprecation of config via logger (lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid DeprecationWarning for messages for users (lsedlar) - Supply namespace to lookaside (if enabled) (lsedlar) - Support reading koji config from profile - #187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend --release instead of --dist in mockbuild --help (tmz) - Allow overriding container build target by downstream (lsedlar) - Add a separate property for namespace (lsedlar) - Allow container builds from any namespace (maxamillion) - Make osbs support optional (cqi) - make osbs dependency optional (pavlix) - Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when lookaside cache server stops sending data (jkaluza) - Make --module-name work with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) - More document in README - #189 (cqi) - Make new command be able to print unicode - #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load module name correctly even if push url ends in slash - #192 (cqi) - Replace fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6 invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches to build completions (ville.skytta) - Add ppc64le to arch completions (ville.skytta) - Explain how to write a note in multiple lines in update template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify passing arguments when creating Command object - #14 (cqi) - Set koji profile for secondary arch immediately (cqi) - Use profile to load Koji configuration - #97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special handling of s390 specific packages (dan) - Replace fedorahosted.org with pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112 (cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440 (cqi) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248737 - What is the difference between new-sources and upload? https://bugzilla.redhat.com/show_bug.cgi?id=1248737 [ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=1412224 [ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build fails https://bugzilla.redhat.com/show_bug.cgi?id=1410300 -------------------------------------------------------------------------------- ================================================================================ firebird-2.5.7.27050.0-1.el6 (FEDORA-EPEL-2017-3f527c60d9) SQL relational database management system -------------------------------------------------------------------------------- Update Information: update to 2.5.7, Security fix for CVE-2017-6369 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1425330 - CVE-2017-6369 firebird: Access to undesired external modules during 'Restrict' configuration mode https://bugzilla.redhat.com/show_bug.cgi?id=1425330 -------------------------------------------------------------------------------- ================================================================================ golang-github-russross-blackfriday-1.2-20.el6 (FEDORA-EPEL-2017-187eb3e5c4) Markdown processor implemented in Go -------------------------------------------------------------------------------- Update Information: Bump to upstream 0ba0f2b6ed7c475a92e4df8641825cb7a11d1fa3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1222338 - Tracker for golang-github-russross-blackfriday https://bugzilla.redhat.com/show_bug.cgi?id=1222338 -------------------------------------------------------------------------------- ================================================================================ libmediainfo-0.7.98-1.el6 (FEDORA-EPEL-2017-a8b9732138) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Update mediainfo to 0.7.98. -------------------------------------------------------------------------------- ================================================================================ libzen-0.4.36-1.el6 (FEDORA-EPEL-2017-a8b9732138) Shared library for libmediainfo and medianfo* -------------------------------------------------------------------------------- Update Information: Update mediainfo to 0.7.98. -------------------------------------------------------------------------------- ================================================================================ mediainfo-0.7.98-1.el6 (FEDORA-EPEL-2017-a8b9732138) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Update mediainfo to 0.7.98. -------------------------------------------------------------------------------- ================================================================================ php-horde-nag-4.2.16-1.el6 (FEDORA-EPEL-2017-2a7bc9a153) A web based task list manager -------------------------------------------------------------------------------- Update Information: **nag 4.2.16** * [jan] Fix parsing sub-tasks from the quick enter dialog (Bug #14681). * [jan] Fix positioning of due time drop down list (Bug #12288). * [jan] Improve compatibilty when synchronizing tasks via CalDAV/ICS (Bug #14057). * [jan] Fix exporting multiple tags to iCalendar CATEGORIES (Bug #14057). * [jan] Don't include external tasks into drop down list for parent tasks. * [jan] Fix redirecting to task list after completing a task (Bug #14678). ---- **nag 4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed start dates (Bug #14634). -------------------------------------------------------------------------------- ================================================================================ redis-3.2.10-2.el6 (FEDORA-EPEL-2017-0ad4c424f0) A persistent key-value database -------------------------------------------------------------------------------- Update Information: Update to latest upstream Redis and backport packaging fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140366 - redis EPEL6 version is old https://bugzilla.redhat.com/show_bug.cgi?id=1140366 [ 2 ] Bug #1123629 - Init script rely on configuration https://bugzilla.redhat.com/show_bug.cgi?id=1123629 [ 3 ] Bug #909083 - Missing LSB header in redis init script https://bugzilla.redhat.com/show_bug.cgi?id=909083 -------------------------------------------------------------------------------- ================================================================================ rpkg-1.50-1.el6 (FEDORA-EPEL-2017-1c685ce277) Python library for interacting with rpm+git -------------------------------------------------------------------------------- Update Information: # Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable - Non-zero is returned when local command fails - More Python 3 compatible - Allow container builds from any namespace - Supply namespace to lookaside (if enabled) # rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and description of new-sources and upload commands - 1248737 (cqi) - Set autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals (cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) - Make tests and covered code compatible with Py3 (cqi) - Add requirements files (cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests (cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when rpmbuild fails in local command (cqi) - Report deprecation of config via logger (lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid DeprecationWarning for messages for users (lsedlar) - Supply namespace to lookaside (if enabled) (lsedlar) - Support reading koji config from profile - #187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend --release instead of --dist in mockbuild --help (tmz) - Allow overriding container build target by downstream (lsedlar) - Add a separate property for namespace (lsedlar) - Allow container builds from any namespace (maxamillion) - Make osbs support optional (cqi) - make osbs dependency optional (pavlix) - Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when lookaside cache server stops sending data (jkaluza) - Make --module-name work with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) - More document in README - #189 (cqi) - Make new command be able to print unicode - #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load module name correctly even if push url ends in slash - #192 (cqi) - Replace fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6 invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches to build completions (ville.skytta) - Add ppc64le to arch completions (ville.skytta) - Explain how to write a note in multiple lines in update template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify passing arguments when creating Command object - #14 (cqi) - Set koji profile for secondary arch immediately (cqi) - Use profile to load Koji configuration - #97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special handling of s390 specific packages (dan) - Replace fedorahosted.org with pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112 (cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440 (cqi) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248737 - What is the difference between new-sources and upload? https://bugzilla.redhat.com/show_bug.cgi?id=1248737 [ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=1412224 [ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build fails https://bugzilla.redhat.com/show_bug.cgi?id=1410300 -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2017.08.13-1.el6 (FEDORA-EPEL-2017-9c9375262b) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Update to latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476633 - youtube-dl-2017.08.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=1476633 [ 2 ] Bug #1476989 - [abrt] youtube-dl: write_string(): utils.py:1400:write_string:OSError: [Errno 5] Input/output error https://bugzilla.redhat.com/show_bug.cgi?id=1476989 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx