The following Fedora EPEL 5 Security updates need testing:
Age URL
326
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
221
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
27
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4.08-1.el5
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0425/nginx-0.8.55-3.el5
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0518/euca2ools-2.1.3-1.el5
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0609/php-Smarty-2.6.27-1.el5
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0598/firebird-2.1.5.18496.0-4.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0664/puppet-2.6.18-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
389-dsgw-1.1.10-1.el5
bdii-5.2.17-2.el5
bitlbee-3.2-2.el5
drupal6-feeds-1.0-0.11.beta13.el5
drupal7-i18n-1.8-0.el5
drupal7-jquery_update-2.3-1.el5
drupal7-libraries-2.1-1.el5
glue-schema-2.0.10-1.el5
graphite-web-0.9.10-8.el5
libguestfs-1.20.4-2.el5
ndjbdns-1.05.7-1.el5
puppet-2.6.18-1.el5
python-bucky-0.2.4-1.el5
salt-0.13.2-1.el5
Details about builds:
================================================================================
389-dsgw-1.1.10-1.el5 (FEDORA-EPEL-2013-0677)
389 Directory Server Gateway (dsgw)
--------------------------------------------------------------------------------
Update Information:
Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Mark Reynolds <mreyno...@redhat.com> - 1.1.10-1
- ce71231 Bump version to 1.1.10
- Ticket 606 - DSGW - format string errors
--------------------------------------------------------------------------------
================================================================================
bdii-5.2.17-2.el5 (FEDORA-EPEL-2013-0676)
The Berkeley Database Information Index (BDII)
--------------------------------------------------------------------------------
Update Information:
Updated versions of bdii and glue-schema from the EMI 3 release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Mattias Ellert <mattias.ell...@fysast.uu.se> - 5.2.17-2
- Don't use _libdir macro for noarch package
* Thu Mar 14 2013 Mattias Ellert <mattias.ell...@fysast.uu.se> - 5.2.17-1
- New upstream version 5.2.17
* Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 5.2.13-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bitlbee-3.2-2.el5 (FEDORA-EPEL-2013-0674)
IRC to other chat networks gateway
--------------------------------------------------------------------------------
Update Information:
Add accidentially lost OTR support for RHEL 5 and 6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Robert Scheck <rob...@fedoraproject.org> 3.2-2
- Add accidentially lost OTR support for RHEL 5 and 6 (#919912)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919912 - Cannot apply latest bitlbee update due to dependency
issues
https://bugzilla.redhat.com/show_bug.cgi?id=919912
--------------------------------------------------------------------------------
================================================================================
drupal6-feeds-1.0-0.11.beta13.el5 (FEDORA-EPEL-2013-0663)
An import and aggregation framework for Drupal
--------------------------------------------------------------------------------
Update Information:
New upstream release, http://drupal.org/node/1869526.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Peter Borsa <peter.bo...@gmail.com> - 1.0-0.11.beta13
- New upstream version 1.0-beta13
* Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.0-0.10.beta12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.0-0.9.beta12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892543 - drupal6-feeds-1.0-beta13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=892543
--------------------------------------------------------------------------------
================================================================================
drupal7-i18n-1.8-0.el5 (FEDORA-EPEL-2013-0675)
Collection of modules to extend Drupal core multilingual capabilities
--------------------------------------------------------------------------------
Update Information:
New upstream release, http://drupal.org/node/1887374.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2013 Scott Dodson <sdod...@redhat.com> 1.8-0
- Update to 1.8
- Make sure drupal7-variable > 2.0
* Wed Jul 18 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #895024 - drupal7-i18n-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=895024
--------------------------------------------------------------------------------
================================================================================
drupal7-jquery_update-2.3-1.el5 (FEDORA-EPEL-2013-0651)
Updates the version of jQuery to 1.5.2 and jQuery UI 1.8.11
--------------------------------------------------------------------------------
Update Information:
New upstream release, http://drupal.org/node/1912546.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #909894 - drupal7-jquery_update-2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=909894
--------------------------------------------------------------------------------
================================================================================
drupal7-libraries-2.1-1.el5 (FEDORA-EPEL-2013-0668)
The common denominator for all Drupal components and external libraries
--------------------------------------------------------------------------------
Update Information:
New upstream release, http://drupal.org/node/1938254.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Peter Borsa <peter.bo...@gmail.com> - 2.1-1
- Update to 2.1
* Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 2.0-1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919812 - drupal7-libraries-2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=919812
--------------------------------------------------------------------------------
================================================================================
glue-schema-2.0.10-1.el5 (FEDORA-EPEL-2013-0676)
LDAP schema files for the GLUE 1.3 and GLUE 2.0 Schema
--------------------------------------------------------------------------------
Update Information:
Updated versions of bdii and glue-schema from the EMI 3 release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 14 2013 Mattias Ellert <mattias.ell...@fysast.uu.se> - 2.0.10-1
- Update to release 2.0.10
* Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 2.0.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
graphite-web-0.9.10-8.el5 (FEDORA-EPEL-2013-0678)
A Django webapp for enterprise scalable realtime graphing
--------------------------------------------------------------------------------
Update Information:
Correctly pull in fonts.
Initial package import.
Initial package import.
Initial package import.
Initial package import.
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.20.4-2.el5 (FEDORA-EPEL-2013-0667)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream stable branch version 1.20.4.
New upstream stable branch version 1.20.3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Richard W.M. Jones <rjo...@redhat.com> - 1:1.20.4-2
- Rebase to upstream stable branch version 1.20.4.
* Mon Mar 11 2013 Richard W.M. Jones <rjo...@redhat.com> - 1:1.20.3-6
- Fix various small bugs and tests.
- Remove Fedora RPM database files from the tarball.
* Sun Mar 10 2013 Richard W.M. Jones <rjo...@redhat.com> - 1:1.20.3-3
- Add patch to define O_CLOEXEC in tests.
- Fix double-free bug in EPEL5-specific patch.
* Sat Mar 9 2013 Richard W.M. Jones <rjo...@redhat.com> - 1:1.20.3-1
- Rebase to upstream stable branch version 1.20.3.
--------------------------------------------------------------------------------
================================================================================
ndjbdns-1.05.7-1.el5 (FEDORA-EPEL-2013-0650)
New djbdns: usable djbdns
--------------------------------------------------------------------------------
Update Information:
Release 1.05.7 fixes a bug about reading servers/mydomain.com files correctly;
adds couple of new features which allow servers to listen on multiple IP
addresses and to respond from a correct IP when listening on 0.0.0.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 24 2013 pjp <pj.pan...@yahoo.co.in> - 1.05.7-1
- Build & install walldns server.
- Removed install commands for systemd unit files.
- Merge patch to bind servers to multiple IP addresses.
- Patch to respond to original destination address BZ#917580.
- Update to correctly read servers/mydomain.dom files BZ#913651.
* Thu Feb 14 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.05.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #913667 - Merge patch to support listening on multiple IP
interfaces on multi-home systems.
https://bugzilla.redhat.com/show_bug.cgi?id=913667
[ 2 ] Bug #917580 - Server accept connections on one ip but always sends
replies back on the first ip in the same segment
https://bugzilla.redhat.com/show_bug.cgi?id=917580
[ 3 ] Bug #913651 - dnscache resolver ignores ..servers/mydomain.com files.
https://bugzilla.redhat.com/show_bug.cgi?id=913651
--------------------------------------------------------------------------------
================================================================================
puppet-2.6.18-1.el5 (FEDORA-EPEL-2013-0664)
A network tool for managing many disparate systems
--------------------------------------------------------------------------------
Update Information:
Updates to EPEL for Puppet 2.6 for security issues disclosed 13-MAR-2013 from
Puppet Labs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 11 2013 Michael Stahnke <stah...@puppetlabs.com> - 2.6.18-1
- Fixes for CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654
- and CVE-2013-1655 CVE-2013-2274 CVE-2013-2275
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919770 - CVE-2013-1654 Puppet: SSL protocol downgrade
https://bugzilla.redhat.com/show_bug.cgi?id=919770
[ 2 ] Bug #919774 - CVE-2013-1653 Puppet: kick connection HTTP PUT request
arbitrary code execution
https://bugzilla.redhat.com/show_bug.cgi?id=919774
[ 3 ] Bug #919775 - CVE-2013-1655 Puppet: Master code loading Ruby symbols
vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=919775
[ 4 ] Bug #919783 - CVE-2013-1640 Puppet: catalog request code execution
https://bugzilla.redhat.com/show_bug.cgi?id=919783
[ 5 ] Bug #919784 - CVE-2013-1652 Puppet: HTTP GET request catalog retrieval
https://bugzilla.redhat.com/show_bug.cgi?id=919784
[ 6 ] Bug #919785 - CVE-2013-2275 Puppet: default auth.conf allows
authenticated node to submit a report for any other node
https://bugzilla.redhat.com/show_bug.cgi?id=919785
--------------------------------------------------------------------------------
================================================================================
python-bucky-0.2.4-1.el5 (FEDORA-EPEL-2013-0658)
CollectD and StatsD adapter for Graphite
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Jonathan Steffan <jstef...@fedoraproject.org> - 0.2.4-1
- Update to 0.2.4
* Thu Feb 14 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.2.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
salt-0.13.2-1.el5 (FEDORA-EPEL-2013-0672)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to upstream patch release 0.13.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2013 Clint Savage <her...@gmail.com> - 0.13.2-1
- Update to upstream patch release 0.13.2
--------------------------------------------------------------------------------
_______________________________________________
epel-devel-list mailing list
epel-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/epel-devel-list
