The following Fedora EPEL 5 Security updates need testing:
Age URL
49
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-12767/pcp-3.6.6-1.el5
179
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13195/drupal7-7.16-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13203/389-ds-base-1.2.10.14-2.el5
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13114/phpMyAdmin3-3.5.3-1.el5
74
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
74
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6588/dokuwiki-0-0.12.20120125.b.el5
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13130/drupal7-feeds-2.0-0.5.alpha6.el5
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13152/cobbler-2.4.0-beta2.el5
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13182/ssmtp-2.61-19.el5
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13192/icecast-2.3.3-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
389-ds-base-1.2.10.14-2.el5
GraphicsMagick-1.3.17-1.el5
drupal7-7.16-1.el5
latex2rtf-2.3.1-1.el5
nagios-plugins-lcgdm-0.9.3-1.el5
perl-Net-STOMP-Client-1.8-1.el5
spandsp-0.0.6-0.8.pre21.el5
Details about builds:
================================================================================
389-ds-base-1.2.10.14-2.el5 (FEDORA-EPEL-2012-13203)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
CVE-2012-4450 389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated
in ACL
issues with modrdn with attribute uniqueness and referential integrity
rebase to 1.2.10.11 to pick up several crash + security fixes
crash bug with multiple transactions and range searches
Ticket #331 - transaction errors with db 4.3 and db 4.2
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
fix cos crash - address some valgrind issues - fix kernel version checking
fix tombstone crash - fix TLS - fix defaultNamingContext
The 1.2.10.0 release - a couple of bug fixes
coverity fixes - valgrind issues - schema repl - ruv tombstone - nsMatchingRule
- account policy fixes - entryrdn improvements
Ticket #272 - add tombstonenumsubordinates to schema
the 389-ds-base 1.2.10.a7 release - several bug fixes - fixes for systemd
fix shutdown crash - fix systemd dirsrv.target - entryusn fix - csn improvements
Bug fixes for setup -u, coverity, modrdn 100% cpu, entryusn, referint txn
fix config del/add mods - memberof is transaction aware
resource limits for simple paged results
slapi_rwlock - transactions - account usability - bug fixes
Fix for managed entry
Fixed source tarball
fix transaction support in ldbm_delete
Ticket #294 - 389 DS Segfaults during replica install in FreeIPA
typo in previous patch
Trac Ticket 396 - Account Usability Control Not Working
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Rich Megginson <rmegg...@redhat.com> - 1.2.10.14-2
- Trac Ticket #340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #860608 - CVE-2012-4450 389-ds-base: Change on
SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=860608
--------------------------------------------------------------------------------
================================================================================
GraphicsMagick-1.3.17-1.el5 (FEDORA-EPEL-2012-13200)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
New bugfix release, fixes regression with sub-8-bit palette png images.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Rex Dieter <rdie...@fedoraproject.org> - 1.3.17-1
- GraphicsMagick-1.3.17 (#866377)
- GraphicsMagick 1.3.13 update breaks some PNGs (#788246)
- --enable-quantum-library-names on f19+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #788246 - GraphicsMagick 1.3.13 update breaks some PNGs
https://bugzilla.redhat.com/show_bug.cgi?id=788246
--------------------------------------------------------------------------------
================================================================================
drupal7-7.16-1.el5 (FEDORA-EPEL-2012-13195)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
Fixes SA-CORE-2012-003 - Drupal core - Arbitrary PHP code execution and
Information disclosure - http://drupal.org/node/1815904
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Orion Poplawski <or...@cora.nwra.com> - 7.16-1
- New upstream - SA-CORE-2012-003 security update
--------------------------------------------------------------------------------
================================================================================
latex2rtf-2.3.1-1.el5 (FEDORA-EPEL-2012-13208)
LaTeX to RTF converter that handles equations, figures, and cross-references
--------------------------------------------------------------------------------
Update Information:
Update to newest stable release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Jussi Lehtola <jussileht...@fedoraproject.org> - 2.3.1-1
- Update to 2.3.1.
* Tue Oct 16 2012 Jussi Lehtola <jussileht...@fedoraproject.org> - 2.3.0-2
- Fixed build in EPEL.
* Tue Oct 16 2012 Jussi Lehtola <jussileht...@fedoraproject.org> - 2.3.0-1
- Update to 2.3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #863015 - latex2rtf-2.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=863015
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-lcgdm-0.9.3-1.el5 (FEDORA-EPEL-2012-13212)
Nagios probes to be run remotely against DPM / LFC nodes
--------------------------------------------------------------------------------
Update Information:
- Update for new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 0.9.3-1
- Update for new upstream release
* Wed Sep 12 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 0.9.2-1
- Added runtime dep on python ldap for dpm-head package
--------------------------------------------------------------------------------
================================================================================
perl-Net-STOMP-Client-1.8-1.el5 (FEDORA-EPEL-2012-13199)
STOMP object oriented client module
--------------------------------------------------------------------------------
Update Information:
updating to latest upstream 1.8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867297 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=867297
--------------------------------------------------------------------------------
================================================================================
spandsp-0.0.6-0.8.pre21.el5 (FEDORA-EPEL-2012-13219)
A DSP library for telephony
--------------------------------------------------------------------------------
Update Information:
Update to 0.0.6pre21
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 18 2012 Jeffrey Ollie <j...@ocjtech.us> - 0.0.6-0.8.pre21
- Update to 0.0.6pre21
* Sat Jul 21 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.0.6-0.7.pre18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.0.6-0.6.pre18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Dec 27 2011 Rex Dieter <rdie...@fedoraproject.org> 0.0.6-0.5.pre18
- use of brackets confuses autotools (#691039)
* Wed Feb 9 2011 Jeffrey C. Ollie <j...@ocjtech.us> - 0.0.6-0.4.pre18
- 0.0.6pre18
* Wed Feb 9 2011 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.0.6-0.3.pre17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Aug 1 2010 Jeffrey C. Ollie <j...@ocjtech.us> - 0.0.6-0.2.pre17
- Update to 0.0.6pre17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #866127 - SpanDSP is over 3 years old - Update request
https://bugzilla.redhat.com/show_bug.cgi?id=866127
--------------------------------------------------------------------------------
_______________________________________________
epel-devel-list mailing list
epel-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/epel-devel-list
