The following Fedora EPEL 5 Security updates need testing:
Age URL
187
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13195/drupal7-7.16-1.el5
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13203/389-ds-base-1.2.10.14-2.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13249/viewvc-1.1.17-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13283/pcp-3.6.9-1.el5
82
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13244/dokuwiki-0-0.14.20121013.el5
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13152/cobbler-2.4.0-beta2.el5
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13182/ssmtp-2.61-19.el5
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13192/icecast-2.3.3-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
dmlite-0.4.2-2.el5
dmlite-plugins-adapter-0.4.0-2.el5
dmlite-plugins-librarian-0.4.0-1.el5
dmlite-plugins-memcache-0.4.0-1.el5
dmlite-plugins-mysql-0.4.1-1.el5
dmlite-plugins-s3-0.4.0-1.el5
drupal7-feeds-2.0-0.6.alpha7.el5
ginfo-0.2.4-1.el5
jna-3.5.0-1.el5
lcgdm-1.8.4-1.el5
mimedefang-2.73-3.el5
pcp-3.6.9-1.el5
php-pear-Mail-Mime-1.4.0-2.el5
php-voms-admin-0.6.5-2.el5
salt-0.10.4-1.el5
ucarp-1.5.2-3.1.el5
viewvc-1.1.17-1.el5
zanata-util-0.2.9-1.el5
Details about builds:
================================================================================
dmlite-0.4.2-2.el5 (FEDORA-EPEL-2012-13293)
Common libraries for grid data management and storage
--------------------------------------------------------------------------------
Update Information:
Fixed bugs:
- #869568 - dmlite-libs should own /usr/lib(64)/dmlite
* Mon Sep 24 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 0.4.2-1
- update for new upstream release
- dropped plugin packages (moved to separate individual packages)
* Mon Sep 24 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 0.4.2-1
- update for new upstream release
- dropped plugin packages (moved to separate individual packages)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 0.4.2-2
- #869568 - dmlite-libs should own /usr/lib(64)/dmlite
* Mon Sep 24 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 0.4.2-1
- update for new upstream release
- dropped plugin packages (moved to separate individual packages)
* Sat Sep 22 2012 Remi Collet <r...@fedoraproject.org> - 0.3.0-2
- rebuild against libmemcached.so.11 without SASL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #869568 - dmlite-libs should own /usr/lib(64)/dmlite
https://bugzilla.redhat.com/show_bug.cgi?id=869568
--------------------------------------------------------------------------------
================================================================================
dmlite-plugins-adapter-0.4.0-2.el5 (FEDORA-EPEL-2012-13289)
Adapter plug-in for dmlite
--------------------------------------------------------------------------------
Update Information:
This package provides the adapter plug-in for dmlite. This plug-in provides
both a name-space and pool management implementation which fallback to
forwarding calls to the old DPNS and DPM daemons.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #860607 - Review Request: dmlite-plugins-adapter - Adapter plug-in
for dmlite
https://bugzilla.redhat.com/show_bug.cgi?id=860607
--------------------------------------------------------------------------------
================================================================================
dmlite-plugins-librarian-0.4.0-1.el5 (FEDORA-EPEL-2012-13284)
Librarian plug-in for dmlite
--------------------------------------------------------------------------------
Update Information:
This package provides the librarian plug-in for dmlite. This plug-in handles
the necessary logic to hop between difference replicas when accessing a file
managed by the grid.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #860293 - Review Request: dmlite-plugins-librarian - Librarian
plug-in for dmlite
https://bugzilla.redhat.com/show_bug.cgi?id=860293
--------------------------------------------------------------------------------
================================================================================
dmlite-plugins-memcache-0.4.0-1.el5 (FEDORA-EPEL-2012-13292)
Memcached plug-in for dmlite
--------------------------------------------------------------------------------
Update Information:
This package provides the memcached plug-in for dmlite. It provides a memcached
based implementation of the NS interface.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #860581 - Review Request: dmlite-plugins-memcache - Memcached
plug-in for dmlite
https://bugzilla.redhat.com/show_bug.cgi?id=860581
--------------------------------------------------------------------------------
================================================================================
dmlite-plugins-mysql-0.4.1-1.el5 (FEDORA-EPEL-2012-13302)
MySQL plug-in for dmlite
--------------------------------------------------------------------------------
Update Information:
This package provides the MySQL plug-in for dmlite.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #860600 - Review Request: dmlite-plugins-mysql - MySQL plug-in for
dmlite
https://bugzilla.redhat.com/show_bug.cgi?id=860600
--------------------------------------------------------------------------------
================================================================================
dmlite-plugins-s3-0.4.0-1.el5 (FEDORA-EPEL-2012-13298)
S3 plugin for dmlite
--------------------------------------------------------------------------------
Update Information:
This package provides the S3 plugin for dmlite. It provides access to data
stored in a S3 cloud provider from the DPM namespace.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867801 - Review Request: dmlite-plugins-s3 - S3 plugin for dmlite
https://bugzilla.redhat.com/show_bug.cgi?id=867801
--------------------------------------------------------------------------------
================================================================================
drupal7-feeds-2.0-0.6.alpha7.el5 (FEDORA-EPEL-2012-13315)
An import and aggregation framework for Drupal
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release for a bug fix
Security fix release, https://drupal.org/node/1808832,
http://drupal.org/node/1808282.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2012 Jared Smith <jsm...@fedoraproject.org> - 2.0-0.5.alpha7
- Bug fix update for Drupal issue #1807920: Imported nodes have NULL format.
* Wed Oct 10 2012 Peter Borsa <peter.bo...@gmail.com> - 2.0-0.5.alpha6
- Security fix
* Wed Jul 18 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 2.0-0.4.alpha5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #869917 - drupal7-feeds-2.0-alpha7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=869917
--------------------------------------------------------------------------------
================================================================================
ginfo-0.2.4-1.el5 (FEDORA-EPEL-2012-13308)
A versatile tool for discovering Grid services
--------------------------------------------------------------------------------
Update Information:
New upstream release
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2012 Laurence Field <laurence.fi...@cern.ch> - 0.2.4-1
- Added -b --bind option.
--------------------------------------------------------------------------------
================================================================================
jna-3.5.0-1.el5 (FEDORA-EPEL-2012-13313)
Pure Java access to native libraries
--------------------------------------------------------------------------------
Update Information:
update to 3.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 3.4.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lcgdm-1.8.4-1.el5 (FEDORA-EPEL-2012-13318)
LHC Computing Grid Data Management
--------------------------------------------------------------------------------
Update Information:
Update for new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 3 2012 Ricardo Rocha <ricardo.ro...@cern.ch> - 1.8.4-1
- Update for new upstream release
* Fri Aug 3 2012 David Malcolm <dmalc...@redhat.com> - 1.8.3.1-5
- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
* Thu Jul 19 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.8.3.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jun 11 2012 Petr Pisar <ppi...@redhat.com> - 1.8.3.1-3
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
================================================================================
mimedefang-2.73-3.el5 (FEDORA-EPEL-2012-13314)
E-Mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
Re-enabled embedded perl feature (thanks to Alexander Dalloz)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2012 Robert Scheck <rob...@fedoraproject.org> 2.73-3
- Re-enabled embedded perl feature (thanks to Alexander Dalloz)
* Fri Jul 20 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 2.73-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
pcp-3.6.9-1.el5 (FEDORA-EPEL-2012-13283)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Update to latest PCP sources, and resolve these bugzillas:
- Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
- Fix sar2pcp uninitialised perl variable warning (BZ 859117)
- Fix pcp.py and pmcollectl with older python versions (BZ 852234)
- Added the python PMAPI bindings and an initial python client
in pmcollectl. Separate, new package exists for python libs
for those platforms that split out packages (rpm, deb).
- Added a pcp-testsuite package for those platforms that might
want this (rpm, deb again, mainly)
- Re-introduced the pcp/qa subdirectory in pcp and deprecated
the external pcpqa git tree.
- Fix potential buffer overflow in pmlogger host name handling.
- Reworked the configure --prefix handling to be more like the
rest of the open source world.
- Ensure the __pmDecodeText ident parameter is always set
Resolves Red Hat bugzilla bug #841306.
new upstream release
new upstream release
- Added the python PMAPI bindings and an initial python client
in pmcollectl. Separate, new package exists for python libs
for those platforms that split out packages (rpm, deb).
- Added a pcp-testsuite package for those platforms that might
want this (rpm, deb again, mainly)
- Re-introduced the pcp/qa subdirectory in pcp and deprecated
the external pcpqa git tree.
- Fix potential buffer overflow in pmlogger host name handling.
- Reworked the configure --prefix handling to be more like the
rest of the open source world.
- Ensure the __pmDecodeText ident parameter is always set
Resolves Red Hat bugzilla bug #841306.
new upstream release
- Added the python PMAPI bindings and an initial python client
in pmcollectl. Separate, new package exists for python libs
for those platforms that split out packages (rpm, deb).
- Added a pcp-testsuite package for those platforms that might
want this (rpm, deb again, mainly)
- Re-introduced the pcp/qa subdirectory in pcp and deprecated
the external pcpqa git tree.
- Fix potential buffer overflow in pmlogger host name handling.
- Reworked the configure --prefix handling to be more like the
rest of the open source world.
- Ensure the __pmDecodeText ident parameter is always set
Resolves Red Hat bugzilla bug #841306.
- Added the python PMAPI bindings and an initial python client
in pmcollectl. Separate, new package exists for python libs
for those platforms that split out packages (rpm, deb).
- Added a pcp-testsuite package for those platforms that might
want this (rpm, deb again, mainly)
- Re-introduced the pcp/qa subdirectory in pcp and deprecated
the external pcpqa git tree.
- Fix potential buffer overflow in pmlogger host name handling.
- Reworked the configure --prefix handling to be more like the
rest of the open source world.
- Ensure the __pmDecodeText ident parameter is always set
Resolves Red Hat bugzilla bug #841306.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 12 2012 Nathan Scott <nath...@redhat.com> - 3.6.9-1
- Update to latest PCP sources.
- Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
- Fix sar2pcp uninitialised perl variable warning (BZ 859117)
- Fix pcp.py and pmcollectl with older python versions (BZ 852234)
* Fri Sep 14 2012 Nathan Scott <nath...@redhat.com> - 3.6.8-1
- Update to latest PCP sources.
* Wed Sep 5 2012 Nathan Scott <nath...@redhat.com> - 3.6.6-1.1
- Move configure step from prep to build section of spec (BZ 854128)
* Tue Aug 28 2012 Mark Goodwin <mgood...@redhat.com> - 3.6.6-1
- Update to latest PCP sources, see installed CHANGELOG for details.
- Introduces new python-pcp and pcp-testsuite sub-packages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #858384 - pmcd segv during linux-pmda query
https://bugzilla.redhat.com/show_bug.cgi?id=858384
[ 2 ] Bug #859117 - sar2pcp warnings: use of uninitialized value .... line 171
https://bugzilla.redhat.com/show_bug.cgi?id=859117
[ 3 ] Bug #852234 - pcp 3.6.6-1 pcp.py fails to compile with python2.4 in
epel5
https://bugzilla.redhat.com/show_bug.cgi?id=852234
[ 4 ] Bug #841306 - libpcp additional decoder hardening
https://bugzilla.redhat.com/show_bug.cgi?id=841306
--------------------------------------------------------------------------------
================================================================================
php-pear-Mail-Mime-1.4.0-2.el5 (FEDORA-EPEL-2012-13288)
Classes to create and decode mime messages
--------------------------------------------------------------------------------
Update Information:
also provides php-pear(Mail_mimeDecode)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #741363 - Add provides Mail_mimeDecode for the benefit
https://bugzilla.redhat.com/show_bug.cgi?id=741363
--------------------------------------------------------------------------------
================================================================================
php-voms-admin-0.6.5-2.el5 (FEDORA-EPEL-2012-13280)
Web based interface to control VOMS parameters written in PHP
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2012 Mattias Ellert <mattias.ell...@fysast.uu.se> - 0.6.5-2
- Minor fixes to post installation script
- Add missing package dependencies
* Tue Oct 23 2012 Mattias Ellert <mattias.ell...@fysast.uu.se> - 0.6.5-1
- Update to released version 0.6.5
* Sat Jul 21 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
salt-0.10.4-1.el5 (FEDORA-EPEL-2012-13311)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Updating to upstream version 0.10.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2012 Clint Savage <her...@gmail.com> - 0.10.4-1
- Moved to upstream release 0.10.4
- Patched jcollie/systemd-service-status (SALT@GH#2335) (RHBZ#869669)
--------------------------------------------------------------------------------
================================================================================
ucarp-1.5.2-3.1.el5 (FEDORA-EPEL-2012-13316)
Common Address Redundancy Protocol (CARP) for Unix
--------------------------------------------------------------------------------
Update Information:
Fix for crash if interface is down.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2012 Jon Ciesla <limburg...@gmail.com> - 1.5.2-3.1
- Patch for crash.
* Sat Jan 14 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.5.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Feb 7 2011 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.5.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #693762 - ucarp died when ifdown, leaving address active
https://bugzilla.redhat.com/show_bug.cgi?id=693762
--------------------------------------------------------------------------------
================================================================================
viewvc-1.1.17-1.el5 (FEDORA-EPEL-2012-13249)
Browser interface for CVS and SVN version control repositories
--------------------------------------------------------------------------------
Update Information:
Patch CVE-2012-4533.
Version 1.1.16
- security fix: escape "extra" diff info to avoid XSS attack (issue #515)
- add 'binary_mime_types' configuration option and handling (issue #510)
- fix 'select for diffs' persistence across log pages (issue #512)
- remove lock status and filesize check on directories in remote SVN views
- fix bogus 'Annotation of' page title for non-annotated view (issue #514)
Version 1.1.17 (released 25-Oct-2012)
- fix exception caused by uninitialized variable usage (issue #516)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2012 Bojan Smojver <bo...@rexursive.com> - 1.1.17-1
- bump up to 1.1.17
* Thu Oct 25 2012 Bojan Smojver <bo...@rexursive.com> - 1.1.16-1
- bump up to 1.1.16
- drop patch for CVE-2012-4533, part of the release
* Mon Oct 22 2012 Bojan Smojver <bo...@rexursive.com> - 1.1.15-3
- patch CVE-2012-4533, bug #868606
* Sun Jul 22 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.1.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #868606 - CVE-2012-4533 viewvc: lib/viewvc.py XSS
https://bugzilla.redhat.com/show_bug.cgi?id=868606
--------------------------------------------------------------------------------
================================================================================
zanata-util-0.2.9-1.el5 (FEDORA-EPEL-2012-13319)
Helper scripts for using Zanata
--------------------------------------------------------------------------------
Update Information:
Fixed RHBZ 852951,870259,870261
Maven client support up to 1.8.0-SNAPSHOT
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2012 Ding-Yi Chen <dchen at redhat.com> - 0.2.9-1
- Resolves: Bug 852951 - Failed to parse .../language/list
- Resolves: Bug 870259 - [zanata_zanata_xml_make] should be able do handle
traling / in URL
- Resolves: Bug 870261 - [zanata_zanata_xml_make] Fail to download project
zanata.xml
- Maven support up to 1.8.0-SNAPSHOT
- More comprehensive locale.txt
* Sun Jul 22 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.2.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Tue Jun 19 2012 Petr Pisar <ppi...@redhat.com> - 0.2.8-2
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #852951 - Failed to parse .../language/list
https://bugzilla.redhat.com/show_bug.cgi?id=852951
[ 2 ] Bug #870259 - [zanata_zanata_xml_make] should be able do handle traling
/ in URL
https://bugzilla.redhat.com/show_bug.cgi?id=870259
[ 3 ] Bug #870261 - [zanata_zanata_xml_make] Fail to download project
zanata.xml
https://bugzilla.redhat.com/show_bug.cgi?id=870261
--------------------------------------------------------------------------------
_______________________________________________
epel-devel-list mailing list
epel-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/epel-devel-list
