The following Fedora EPEL 5 Security updates need testing:
Age URL
380
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
275
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
80
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4.08-1.el5
26
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5410/php-geshi-1.0.8.11-3.el5
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1-1.el5
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5620/phpMyAdmin3-3.5.8.1-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5711/openvpn-2.3.1-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
gccxml-0.9.0-0.15.20130506.git567213ac.el5
mksh-46-1.el5
openvpn-2.3.1-1.el5
Details about builds:
================================================================================
gccxml-0.9.0-0.15.20130506.git567213ac.el5 (FEDORA-EPEL-2013-5661)
XML output extension to GCC
--------------------------------------------------------------------------------
Update Information:
New git snapshot with gcc 4.8 support files included.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2013 Mattias Ellert <mattias.ell...@fysast.uu.se> -
0.9.0-0.15.20130506.git567213ac
- Updated git snapshot
- Now contains support files for gcc 4.8
* Wed Feb 13 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 0.9.0-0.14.20120309
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Mon Oct 15 2012 Jon Ciesla <limburg...@gmail.com> - 0.9.0-0.13-20120309
- Provides: bundled(libiberty)
--------------------------------------------------------------------------------
================================================================================
mksh-46-1.el5 (FEDORA-EPEL-2013-5647)
MirBSD enhanced version of the Korn Shell
--------------------------------------------------------------------------------
Update Information:
R46 delivers these changes:
* [tg] dot.mkshrc: prevent lksh from running it
* [tg] Add the lksh manual page to the mksh distribution
* [tg] Make both lksh and mksh interpret numbers with a leading digit zero
(‘0’) as octal precisely iff “set -o posix” is active
* [tg] Point out the octal digit and the integer arithmetic differences from
POSuX verbosely in the manual pages (point people who need octals to “set -o
posix” and who need longs to lksh) and elaborate on the horrors of ISO C
Undefined Behaviour which is allowed to delete all your data
* [tg] Unbreak “set -o” (list flags) in lksh on LP64 machines
* [tg] Implement Emacs mode PgUp as Vi insert mode Cur↑ for Yofuh
* [tg] Allow setting both “set -o sh” and “set -o posix”, if done in the same
command; shuffle around compatibility levels (mksh/lksh, with -o sh, with -o
posix) again; permit a /bin/sh to set either or both
* [tg] Sync lksh manual page with the exact code ifdefs
* [tg] Change more use of signed integer to use unsigned instead
* [tg] Implement “set -o pipefail” like AT&T ksh93 and GNU bash do
* [tg] dot.mkshrc: provide hd(1) in Pure mksh™ for fallback
* [tg] Implement VALSUBs (value substitutions): ${|REPLY=foo;}
R45 comes with this bag of changes:
* [tg] Make “set -x” print the commands run in escaped form
* [tg] PS4 in dot.mkshrc is now timestamped
* [tg] The &> GNU bash I/O redir is no longer parsed in -o posix, -o sh
modes, lksh (breaks valid scripts)
* [tg] Implement ${ …;} more efficiently (deleted-open files)
* [tg] For shf, %#s (if you can get it past GCC’s printf format attribute)
calls print_value_quoted, ignoring field width and precision
* [tg] Catch “typeset =” (regression) with better error message
* [tg, Tonnerre Lombard] add “doch” alias to dot.mkshrc which just repeats
the last input line with sudo(8)
* [tg] Use unsigned integers for all calculations, to avoid ISO C “Undefined
Behaviour” (and implementation-defined behaviour) throughout (most of) the
code; emulate signed integer arithmetics using unsigned; not-lksh only
* [tg] Emulate signed modulo naïvely, for correct sign of the result
* [tg] Add <<< and >>> for ROL and ROR (rotate left and right, respectively)
operations, <<<= and >>> assignments; bitwise AND the RHS of a shift/rotate op
with 31 (not for lksh)
* [tg] Remove a warning by working around a workaround found in dietlibc
which works around a bug in broken software such as GNU tar (really!)
* [tg] Correct and simplify list and categorisation of built-in commands as
POSIX special and “everything else” plus a flag to keep assignments
* [tg] Handle ((foo)) as “let]” internally to avoid a conflict with
user-defined functions called let (LP#1156707)
* [tg] Clean up the code
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 3 2013 Thorsten Glaser <t...@mirbsd.org> 46-1
- Upgrade mksh to R46
* Wed May 1 2013 Thorsten Glaser <t...@mirbsd.org> 45-1
- Upgrade mksh to R45 and the other files to the accompanying versions
- Drop workaround for GCC PR55009 (no longer needed)
- Use https for homepage
--------------------------------------------------------------------------------
================================================================================
openvpn-2.3.1-1.el5 (FEDORA-EPEL-2013-5711)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Fix for SSL vulnerability.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2013 Jon Ciesla <limburg...@gmail.com> 2.3.1-1
- Update to 2.3.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #960195 - CVE-2013-2061 openvpn: use of non-constant-time memcmp in
HMAC comparison in openvpn_decrypt [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=960195
--------------------------------------------------------------------------------
_______________________________________________
epel-devel-list mailing list
epel-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/epel-devel-list
