The following Fedora EPEL 5 Security updates need testing:
Age URL
941
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
395
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
160
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
56
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1....
55
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2853/mediawiki11...
21
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3675/Pound-2.6-2...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3784/mantis-1.2....
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3972/nginx-0.8.5...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3983/polarssl-1....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4147/lsyncd-2.1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
dmlite-0.7.2-1.el5
lsyncd-2.1.4-4.el5.1.1
voms-2.0.12-1.el5
Details about builds:
================================================================================
dmlite-0.7.2-1.el5 (FEDORA-EPEL-2014-4132)
Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.2, BugFix for too much verbose logging
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 18 2014 Adrien Devresse <adevress at cern.ch> - 0.7.2-1
- Update to 0.7.2, BugFix for too much verbose logging
--------------------------------------------------------------------------------
================================================================================
lsyncd-2.1.4-4.el5.1.1 (FEDORA-EPEL-2014-4147)
File change monitoring and synchronization daemon
--------------------------------------------------------------------------------
Update Information:
Fix bad shell argument escaping
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 18 2014 Lubomir Rintel <lkundrak(a)v3.sk> - 2.1.4-4.1.1
- Fix bad shell argument escaping
* Wed Sep 25 2013 Troy C. <tzero(a)fedoraproject.org> - 2.1.4-4
- Add log directory (#908151)
- Remove unnecessary service restart in logrotate (#915873)
- Enable PIE compiler flags (#955203)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1165078 - lsyncd: command injection through backticks in a filename
https://bugzilla.redhat.com/show_bug.cgi?id=1165078
--------------------------------------------------------------------------------
================================================================================
voms-2.0.12-1.el5 (FEDORA-EPEL-2014-4134)
Virtual Organization Membership Service
--------------------------------------------------------------------------------
Update Information:
VOMS update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 17 2014 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.12-1
- Update to version 2.0.12
- Drop patches voms-gsoap.patch, voms-sha2-proxy.patch and voms-strndup.patch
(accepted upstream)
- Add alternatives to the client package to allow parallel installation of
the java implementation of the client tools
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.11-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jul 13 2014 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.11-9
- Rebuild properly
* Sun Jul 13 2014 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.11-8
- Rebuild for gsoap 2.8.17 (Fedora 22)
--------------------------------------------------------------------------------