The following Fedora EPEL 5 Security updates need testing:
Age URL
269
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
164
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
46
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13612/drupal6-ctools-1.10-1.el5
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0011/drupal7-context-3.0-0.3.beta6.el5
19
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13873/BackupPC-3.2.1-10.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0102/ettercap-0.7.3-21.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
ettercap-0.7.3-21.el5
kobo-0.3.7-1.el5
openblas-0.2.5-7.el5
perl-Net-STOMP-Client-2.0-1.el5
perl-No-Worries-0.8-1.el5
shellinabox-2.14-20.git88822c1.el5
zeromq-2.2.0-4.el5
Details about builds:
================================================================================
ettercap-0.7.3-21.el5 (FEDORA-EPEL-2013-0102)
Network traffic sniffer/analyser, NCURSES interface version
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2013-0722.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 14 2013 Jon Ciesla <limburg...@gmail.com> - 0.7.3-21
- Fix for CVE-2013-0722.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #894096 - CVE-2013-0722 ettercap: stack-based buffer overflow when
parsing hosts list [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=894096
--------------------------------------------------------------------------------
================================================================================
kobo-0.3.7-1.el5 (FEDORA-EPEL-2013-0104)
Python modules for tools development
--------------------------------------------------------------------------------
Update Information:
a new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 16 2013 Daniel Mach <dm...@redhat.com> - 0.3.7-1
- Proxy support enhancement (Tomas Mlcoch)
- Improve task ordering. (Daniel Mach)
- Better formatting in Traceback output. (Tomas Tomecek)
- Add JSONField.value_to_string() method. (Tomas Tomecek)
- Improve task dir deletion and task files view. (Tomas Tomecek)
- allow line buffering for shortcuts.run() (Tomas Kopecek)
- Allow to specify buffer_size in shortcuts.run(). (Daniel Mach)
- Add rpmlib.get_changelogs_from_header() and pkgset.RpmWrapper.changelogs.
(Daniel Mach)
- Support https_proxy environ variable (Tomas Mlcoch)
- Create pid file in a more secure way. (Daniel Mach)
- Create empty kobo.django.auth.models module to fix crashes in Django 1.4.
(Daniel Mach)
- Add shortcuts.makedirs() function which is identical to os.makedirs but
doesn't fail on existing dirs. (Daniel Mach)
- Fix typo in the 404.html template. (Daniel Mach)
- Fix traceback on undefined workdir in kobo.shortcuts.run(). (Daniel Mach)
- Add help-rst command which generates rst documentation for all
CommandOptionParser's commands. (Daniel Mach)
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.5-7.el5 (FEDORA-EPEL-2013-0091)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
First release in Fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #739398 - Review Request: openblas - An optimized BLAS library
based on GotoBLAS2
https://bugzilla.redhat.com/show_bug.cgi?id=739398
--------------------------------------------------------------------------------
================================================================================
perl-Net-STOMP-Client-2.0-1.el5 (FEDORA-EPEL-2013-0092)
STOMP object oriented client module
--------------------------------------------------------------------------------
Update Information:
Update to 2.0, rhbz #893464.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 15 2013 Massimo Paladin <massimo.pala...@gmail.com> - 2.0-1
- New upstream 2.0, rhbz#893464.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893464 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=893464
--------------------------------------------------------------------------------
================================================================================
perl-No-Worries-0.8-1.el5 (FEDORA-EPEL-2013-0090)
Perl coding without worries
--------------------------------------------------------------------------------
Update Information:
Update to 0.8, rhbz #895876.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 16 2013 Massimo Paladin <massimo.pala...@gmail.com> 0.8-1
- Updating to upstream 0.8 rhbz#895876.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #895876 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=895876
--------------------------------------------------------------------------------
================================================================================
shellinabox-2.14-20.git88822c1.el5 (FEDORA-EPEL-2013-0094)
Web based AJAX terminal emulator
--------------------------------------------------------------------------------
Update Information:
Bug fix build
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 14 2013 Simone Caronni <negativ...@gmail.com> - 2.14-20.git88822c1
- Added define for RHEL 5 (rhbz#894903).
- Updated spec to new packaging guidelines for github sources.
* Wed Jan 9 2013 Simone Caronni <negativ...@gmail.com> - 2.14-19.git88822c1f
- Fix SysV init scripts.
* Wed Jan 9 2013 Simone Caronni <negativ...@gmail.com> - 2.14-18.git88822c1f
- Updated init script according to Fedora template (#893129)
https://fedoraproject.org/wiki/Packaging:SysVInitScript?rd=Packaging/SysVInitScript
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893129 - condrestart mode fails in init script
/etc/rc.d/init.d/shellinaboxd
https://bugzilla.redhat.com/show_bug.cgi?id=893129
[ 2 ] Bug #894903 - sharedstatedir set to /usr/com in SPEC
https://bugzilla.redhat.com/show_bug.cgi?id=894903
--------------------------------------------------------------------------------
================================================================================
zeromq-2.2.0-4.el5 (FEDORA-EPEL-2013-0114)
Software library for fast, message-based applications
--------------------------------------------------------------------------------
Update Information:
Delete foreign files with dubious license in %%prep before building the package.
Also update to 2.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 14 2013 Thomas Spura <toms...@fedoraproject.org> - 2.2.0-4
- delete foreign files with dubious license in %prep (#892111)
* Mon Dec 24 2012 Thomas Spura <toms...@fedoraproject.org> - 2.2.0-3
- add bcond_without pgm macro (Jose Pedro Oliveira, #867182)
- remove bundled pgm
- build against openpgm
* Sun Jul 22 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 2.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Apr 26 2012 Thomas Spura <toms...@fedoraproject.org> - 2.2.0-1
- update to 2.2.0
* Sat Jan 7 2012 Thomas Spura <toms...@fedoraproject.org> - 2.1.11-1
- update to 2.1.11 (as part of rebuilding with gcc-4.7)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892111 - zeromq is non-free (licensed under AFPL) file included
https://bugzilla.redhat.com/show_bug.cgi?id=892111
--------------------------------------------------------------------------------
_______________________________________________
epel-devel-list mailing list
epel-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/epel-devel-list
