The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6419/nsd-3.2.12-...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6441/puppet-2.6....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6383/raptor-1.4....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
The following builds have been pushed to Fedora EPEL 5 updates-testing
389-ds-base-1.2.10.13-1.el5
389-ds-base-1.2.10.14-1.el5
bacula-2.4.4-5.el5
bacula-docs-2.4.4-4.el5
cciss_vol_status-1.09-4.el5
cpuid-20120601-1.el5
csslint-0.9.8-1.el5
dmlite-0.3.0-1.el5
drbdlinks-1.22-1.el5
genders-1.18-6.el5
gridsite-1.7.21-3.el5
hping3-0.0.20051105-8.el5
mock-1.0.30-1.el5
nsd-3.2.12-1.el5
puppet-2.6.17-2.el5
python26-cheetah-2.4.4-3.el5
python26-configobj-4.7.2-5.el5
python26-pycurl-7.15.5.1-9.el5
Details about builds:
================================================================================
389-ds-base-1.2.10.13-1.el5 (FEDORA-EPEL-2012-6445)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
issues with modrdn with attribute uniqueness and referential integrity
rebase to 1.2.10.11 to pick up several crash + security fixes
crash bug with multiple transactions and range searches
Ticket #331 - transaction errors with db 4.3 and db 4.2
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
fix cos crash - address some valgrind issues - fix kernel version checking
fix tombstone crash - fix TLS - fix defaultNamingContext
The 1.2.10.0 release - a couple of bug fixes
coverity fixes - valgrind issues - schema repl - ruv tombstone - nsMatchingRule - account
policy fixes - entryrdn improvements
Ticket #272 - add tombstonenumsubordinates to schema
the 389-ds-base 1.2.10.a7 release - several bug fixes - fixes for systemd
fix shutdown crash - fix systemd dirsrv.target - entryusn fix - csn improvements
Bug fixes for setup -u, coverity, modrdn 100% cpu, entryusn, referint txn
fix config del/add mods - memberof is transaction aware
resource limits for simple paged results
slapi_rwlock - transactions - account usability - bug fixes
Fix for managed entry
Fixed source tarball
fix transaction support in ldbm_delete
Ticket #294 - 389 DS Segfaults during replica install in FreeIPA
typo in previous patch
Trac Ticket 396 - Account Usability Control Not Working
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 16 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.13-1
- Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin
enabled
- Ticket #405 - referint modrdn not working if case is different
* Wed Jun 27 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.12-1
- Ticket 378 - unhashed#user#password visible after changing password
- fix typo in previous patch
- Trac Ticket 396 - Account Usability Control Not Working
* Tue Jun 26 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.11-1
- rebase to 1.2.10.11 to pick up several crash + security fixes
- Ticket 365 - passwords in clear text in the audit log
- Ticket 378 - unhashed#user#password visible after changing password http
- Ticket 390 - [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process
/usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- Ticket #382 - DS Shuts down intermittently
- Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
- Ticket #361: Bad DNs in ACIs can segfault ns-slapd
- Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming
object
- Ticket #347 - IPA dirsvr seg-fault during system longevity test
* Tue Apr 10 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-5
- Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process
/usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- typo in previous patch
* Tue Apr 10 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-4
- Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process
/usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- same as Ticket #336
* Wed Mar 28 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-3
- Ticket #331 - transaction errors with db 4.3 and db 4.2
* Tue Mar 13 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-2
- rebuild
* Tue Mar 13 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-1
- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
* Mon Mar 5 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.3-1
- b05139b memleak in normalize_mods2bvals
- c0eea24 memleak in mep_parse_config_entry
- 90bc9eb handle null smods
- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
- Ticket #306 - void function cannot return value
- ticket 304 - Fix kernel version checking in dsktune
* Thu Feb 23 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.2-1
- Trac Ticket #298 - crash when replicating orphaned tombstone entry
- Ticket #281 - TLS not working with latest openldap
- Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
- Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse
- Ticket #124 - add Provides: ldif2ldbm to rpm
* Tue Feb 14 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.1-1
- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA
* Mon Feb 13 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.0-1
- Ticket 284 - Remove unnecessary SNMP MIB files
- Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
- Ticket 175 - logconv.pl improvements
* Thu Feb 2 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.10.rc1
- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers
to system resources
- Ticket #281 - TLS not working with latest openldap
- Ticket #280 - extensible binary filters do not work
- Ticket #279 - filter normalization does not use matching rules
- Trac Ticket #275 - Invalid read reported by valgrind
- Ticket #277 - cannot set repl referrals or state
- Ticket #278 - Schema replication update failed: Invalid syntax
- Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through
Auth plugin is enabled
- Ticket #13 - slapd process exits when put the database on read only mode while updates
are coming to the server
- Ticket #87 - Manpages fixes
- c493fb4 fix a couple of minor coverity issues
- Ticket #55 - Limit of 1024 characters for nsMatchingRule
- Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
- Ticket #6 - protocol error from proxied auth operation
- Ticket #38 - nisDomain schema is incorrect
- Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
- Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
- Ticket #22 - RFE: Support sendmail LDAP routing schema
- Ticket #161 - Review and address latest Coverity issues
- Ticket #140 - incorrect memset parameters
- Trac Ticket 35 - Log not clear enough on schema errors
- Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
- Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if
IPv4-mapped-IPv6 address is given
* Tue Jan 24 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.9.a8
- Ticket #272 - add tombstonenumsubordinates to schema
* Mon Jan 23 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.8.a7
- fixes for systemd - remove .pid files after shutting down servers
- Ticket #263 - add systemd include directive
- Ticket #264 - upgrade needs better check for "server is running"
* Fri Jan 20 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.7.a7
- Ticket #262 - pid file not removed with systemd
- Ticket #50 - server should not call a plugin after the plugin close function is called
- Ticket #18 - Data inconsitency during replication
- Ticket #49 - better handling for server shutdown while long running tasks are active
- Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
- Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
- Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
- 6aaeb77 add a hack to disable sasl hostname canonicalization
- Ticket 168 - minssf should not apply to rootdse
- Ticket #177 - logconv.pl doesn't detect restarts
- Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without
validating
- Ticket 75 - Unconfigure plugin opperations are being called.
- Ticket 26 - Please support setting defaultNamingContext in the rootdse.
- Ticket #71 - unable to delete managed entry config
- Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
- Ticket #256 - debug build assertion in ACL_EvalDestroy()
- Ticket #4 - bak2db gets stuck in infinite loop
- Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr,
server DoS
- Ticket #3: acl cache overflown problem
- Ticket 1 - pre-normalize filter and pre-compile substring regex - and other
optimizations
- Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full
DN.
* Thu Dec 15 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.6.a6
- Bug 755725 - 389 programs linked against openldap crash during shutdown
- Bug 755754 - Unable to start dirsrv service using systemd
- Bug 745259 - Incorrect entryUSN index under high load in replicated environment
- d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
- 5910551 csn_init_as_string should not use sscanf
- b53ba00 reduce calls to csn_as_string and slapi_log_error
- c897267 fix member variable name error in slapi_uniqueIDFormat
- 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
- 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
- Bug 751645 - crash when simple paged fails to send entry to client
- Bug 752155 - Use restorecon after creating init script lock file
* Fri Nov 4 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.5.a5
- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine
'updateSystemD'
- Bug 750625 750624 750622 744946 Coverity issues
- Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
- Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
- Bug 745259 - Incorrect entryUSN index under high load in replicated environment
- f639711 Reduce the number of DN normalization
- c06a8fa Keep unhashed password psuedo-attribute in the adding entry
- Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
- 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
- d316a67 Change referential integrity to be a betxnpostoperation plugin
* Fri Oct 7 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.4.a4
- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
- 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
- b6d3ba7 pass the plugin config entry to the plugin init function
- 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
- Bug 743966 - Compiler warnings in account usability plugin
* Wed Oct 5 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.a3-0.3
- 498c42b fix transaction support in ldbm_delete
* Wed Oct 5 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.a2-0.2
- Bug 740942 - allow resource limits to be set for paged searches independently of limits
for other searches/operations
- Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
- Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
* Tue Sep 27 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.a1-0.1
- Bug 739172 - Allow separate fractional attrs for incremental and total protocols
- 6120b3d Make all backend operations transaction aware
- 056cc35 Add support for pre/post db transaction plugins
- Bug 736712 - Modifying ruv entry deadlocks server
- Bug 590826 - Reloading database from ldif causes changelog to emit "data no longer
matches" errors
- Bug 730387 - Add slapi_rwlock API and use POSIX rwlocks
- Bug 611438 - Add Account Usability Control support
* Tue Sep 13 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9.10-3
- added back fedora-ds-base stuff so as not to break dependencies
* Wed Sep 7 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9.10-2
- corrected source
* Wed Sep 7 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9.10-1
- Bug 735114 - renaming a managed entry does not update mepmanagedby
--------------------------------------------------------------------------------
================================================================================
389-ds-base-1.2.10.14-1.el5 (FEDORA-EPEL-2012-6458)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Ticket #410 - Referential integrity plug-in does not work when update interval is not
zero
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 18 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.14-1
- Ticket #410 - Referential integrity plug-in does not work when update interval is not
zero
* Mon Jul 16 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.13-1
- Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin
enabled
- Ticket #405 - referint modrdn not working if case is different
* Wed Jun 27 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.12-1
- Ticket 378 - unhashed#user#password visible after changing password
- fix typo in previous patch
- Trac Ticket 396 - Account Usability Control Not Working
* Tue Jun 26 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.11-1
- rebase to 1.2.10.11 to pick up several crash + security fixes
- Ticket 365 - passwords in clear text in the audit log
- Ticket 378 - unhashed#user#password visible after changing password http
- Ticket 390 - [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process
/usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- Ticket #382 - DS Shuts down intermittently
- Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
- Ticket #361: Bad DNs in ACIs can segfault ns-slapd
- Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming
object
- Ticket #347 - IPA dirsvr seg-fault during system longevity test
* Tue Apr 10 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-5
- Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process
/usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- typo in previous patch
* Tue Apr 10 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-4
- Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process
/usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- same as Ticket #336
* Wed Mar 28 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-3
- Ticket #331 - transaction errors with db 4.3 and db 4.2
* Tue Mar 13 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-2
- rebuild
* Tue Mar 13 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.4-1
- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
* Mon Mar 5 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.3-1
- b05139b memleak in normalize_mods2bvals
- c0eea24 memleak in mep_parse_config_entry
- 90bc9eb handle null smods
- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
- Ticket #306 - void function cannot return value
- ticket 304 - Fix kernel version checking in dsktune
* Thu Feb 23 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.2-1
- Trac Ticket #298 - crash when replicating orphaned tombstone entry
- Ticket #281 - TLS not working with latest openldap
- Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
- Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse
- Ticket #124 - add Provides: ldif2ldbm to rpm
* Tue Feb 14 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.1-1
- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA
* Mon Feb 13 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.0-1
- Ticket 284 - Remove unnecessary SNMP MIB files
- Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
- Ticket 175 - logconv.pl improvements
* Thu Feb 2 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.10.rc1
- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers
to system resources
- Ticket #281 - TLS not working with latest openldap
- Ticket #280 - extensible binary filters do not work
- Ticket #279 - filter normalization does not use matching rules
- Trac Ticket #275 - Invalid read reported by valgrind
- Ticket #277 - cannot set repl referrals or state
- Ticket #278 - Schema replication update failed: Invalid syntax
- Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through
Auth plugin is enabled
- Ticket #13 - slapd process exits when put the database on read only mode while updates
are coming to the server
- Ticket #87 - Manpages fixes
- c493fb4 fix a couple of minor coverity issues
- Ticket #55 - Limit of 1024 characters for nsMatchingRule
- Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
- Ticket #6 - protocol error from proxied auth operation
- Ticket #38 - nisDomain schema is incorrect
- Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
- Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
- Ticket #22 - RFE: Support sendmail LDAP routing schema
- Ticket #161 - Review and address latest Coverity issues
- Ticket #140 - incorrect memset parameters
- Trac Ticket 35 - Log not clear enough on schema errors
- Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
- Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if
IPv4-mapped-IPv6 address is given
* Tue Jan 24 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.9.a8
- Ticket #272 - add tombstonenumsubordinates to schema
* Mon Jan 23 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.8.a7
- fixes for systemd - remove .pid files after shutting down servers
- Ticket #263 - add systemd include directive
- Ticket #264 - upgrade needs better check for "server is running"
* Fri Jan 20 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.7.a7
- Ticket #262 - pid file not removed with systemd
- Ticket #50 - server should not call a plugin after the plugin close function is called
- Ticket #18 - Data inconsitency during replication
- Ticket #49 - better handling for server shutdown while long running tasks are active
- Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
- Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
- Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
- 6aaeb77 add a hack to disable sasl hostname canonicalization
- Ticket 168 - minssf should not apply to rootdse
- Ticket #177 - logconv.pl doesn't detect restarts
- Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without
validating
- Ticket 75 - Unconfigure plugin opperations are being called.
- Ticket 26 - Please support setting defaultNamingContext in the rootdse.
- Ticket #71 - unable to delete managed entry config
- Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
- Ticket #256 - debug build assertion in ACL_EvalDestroy()
- Ticket #4 - bak2db gets stuck in infinite loop
- Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr,
server DoS
- Ticket #3: acl cache overflown problem
- Ticket 1 - pre-normalize filter and pre-compile substring regex - and other
optimizations
- Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full
DN.
* Thu Dec 15 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.6.a6
- Bug 755725 - 389 programs linked against openldap crash during shutdown
- Bug 755754 - Unable to start dirsrv service using systemd
- Bug 745259 - Incorrect entryUSN index under high load in replicated environment
- d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
- 5910551 csn_init_as_string should not use sscanf
- b53ba00 reduce calls to csn_as_string and slapi_log_error
- c897267 fix member variable name error in slapi_uniqueIDFormat
- 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
- 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
- Bug 751645 - crash when simple paged fails to send entry to client
- Bug 752155 - Use restorecon after creating init script lock file
* Fri Nov 4 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.5.a5
- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine
'updateSystemD'
- Bug 750625 750624 750622 744946 Coverity issues
- Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
- Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
- Bug 745259 - Incorrect entryUSN index under high load in replicated environment
- f639711 Reduce the number of DN normalization
- c06a8fa Keep unhashed password psuedo-attribute in the adding entry
- Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
- 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
- d316a67 Change referential integrity to be a betxnpostoperation plugin
* Fri Oct 7 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10-0.4.a4
- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
- 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
- b6d3ba7 pass the plugin config entry to the plugin init function
- 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
- Bug 743966 - Compiler warnings in account usability plugin
* Wed Oct 5 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.a3-0.3
- 498c42b fix transaction support in ldbm_delete
* Wed Oct 5 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.a2-0.2
- Bug 740942 - allow resource limits to be set for paged searches independently of limits
for other searches/operations
- Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
- Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
* Tue Sep 27 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.10.a1-0.1
- Bug 739172 - Allow separate fractional attrs for incremental and total protocols
- 6120b3d Make all backend operations transaction aware
- 056cc35 Add support for pre/post db transaction plugins
- Bug 736712 - Modifying ruv entry deadlocks server
- Bug 590826 - Reloading database from ldif causes changelog to emit "data no longer
matches" errors
- Bug 730387 - Add slapi_rwlock API and use POSIX rwlocks
- Bug 611438 - Add Account Usability Control support
* Tue Sep 13 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9.10-3
- added back fedora-ds-base stuff so as not to break dependencies
* Wed Sep 7 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9.10-2
- corrected source
* Wed Sep 7 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9.10-1
- Bug 735114 - renaming a managed entry does not update mepmanagedby
--------------------------------------------------------------------------------
================================================================================
bacula-2.4.4-5.el5 (FEDORA-EPEL-2012-6421)
Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:
SPEC file changes and cleanup: removed useless manual, split off docs subpackage making it
noarch, SysV init scripts cleanup, build requirements fixed
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Simone Caronni <negativo17(a)gmail.com> 2.4.4-5
- Spool directory owned only by common subpackage (rhbz#718299).
- Backport patch from Bacula 3.0.2 to fix logwatch (rhbz#643932).
* Wed Jul 18 2012 Simone Caronni <negativo17(a)gmail.com> 2.4.4-4
- Remove fedora-usermgmt entirely, see thread at:
http://lists.fedoraproject.org/pipermail/packaging/2011-December/008034.html
- Add devel subpackage.
- Remove docs subpackage.
- Rename patches and delete unused ones from git.
- Remove conditionals for sqlite versions as this package will die with RHEL 5.
* Wed Jul 18 2012 Simone Caronni <negativo17(a)gmail.com> 2.4.4-3
- Removed commented stuff that will never come back.
- Cleaned up init files.
- Get rid of useless defines.
- Spec file formatting.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #643932 - logwatch script hard-codes possible date ranges
https://bugzilla.redhat.com/show_bug.cgi?id=643932
[ 2 ] Bug #718299 - conflicting ownership of /var/spool/bacula
https://bugzilla.redhat.com/show_bug.cgi?id=718299
--------------------------------------------------------------------------------
================================================================================
bacula-docs-2.4.4-4.el5 (FEDORA-EPEL-2012-6421)
Bacula documentation
--------------------------------------------------------------------------------
Update Information:
SPEC file changes and cleanup: removed useless manual, split off docs subpackage making it
noarch, SysV init scripts cleanup, build requirements fixed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #643932 - logwatch script hard-codes possible date ranges
https://bugzilla.redhat.com/show_bug.cgi?id=643932
[ 2 ] Bug #718299 - conflicting ownership of /var/spool/bacula
https://bugzilla.redhat.com/show_bug.cgi?id=718299
--------------------------------------------------------------------------------
================================================================================
cciss_vol_status-1.09-4.el5 (FEDORA-EPEL-2012-6424)
Show status of logical drives attached to HP Smartarray controllers
--------------------------------------------------------------------------------
Update Information:
Add new device IDs.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 10 2012 Joshua Roys <roysjosh(a)gmail.com> - 1.09-4
- add new device IDs (use patch from
https://raw.github.com/zeha/cciss-vol-status/master/debian/patches/device...)
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.09-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.09-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cpuid-20120601-1.el5 (FEDORA-EPEL-2012-6443)
Dumps information about the CPU(s)
--------------------------------------------------------------------------------
Update Information:
* Sun Jul 15 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 20120601-1 - Updated
to new upstream version 20120601
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 15 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 20120601-1
- Updated to new upstream version 20120601
* Sun Feb 26 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 20120225-1
- Updated to new upstream version 20120225
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
20110305-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Sun Mar 6 2011 Fabian Affolter <mail(a)fabian-affolter.ch> - 20110305-1
- Updated to new upstream version 20110305
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
20101002-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
csslint-0.9.8-1.el5 (FEDORA-EPEL-2012-6416)
Detecting potential problems in CSS code
--------------------------------------------------------------------------------
Update Information:
Upstream 0.9.8
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 17 2012 Guillaume Kulakowski <guillaume DOT kulakowski AT fedoraproject DOT
org> - 0.9.8-1
- Upstream 0.9.8
--------------------------------------------------------------------------------
================================================================================
dmlite-0.3.0-1.el5 (FEDORA-EPEL-2012-6461)
Common libraries for grid data management and storage
--------------------------------------------------------------------------------
Update Information:
Update for new upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3.0-1
- Update for new upstream release
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
drbdlinks-1.22-1.el5 (FEDORA-EPEL-2012-6428)
A program for managing links into a DRBD shared partition
--------------------------------------------------------------------------------
Update Information:
Upstream changes:
- Changing configs-to-clean to be under "/var/lib" rather than
"/var/run" (found by Alan Robertson, RHEL 6.x will clean out
"/var/run/drbdlinks")
- Adding a syslog note to drbdlinksclean when it cleans up copied configs.
- The XML meta-data needs to have blank lines removed (reported by Alan Robertson)
- Supporting being run as an OCF resource (thanks to Alan Robertson for testing and
providing fixes for the OCFS code)
- Adding "initialize_shared_storage" mode (suggested by Alan Robertson)
- Adding "checklinks" mode (suggested by Alan Robertson)
- Enhancing the README
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Robert Scheck <robert(a)fedoraproject.org> 1.22-1
- Upgrade to 1.22
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.20-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.20-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
genders-1.18-6.el5 (FEDORA-EPEL-2012-6454)
Static cluster configuration database
--------------------------------------------------------------------------------
Update Information:
This is a new package and would be nice to have available to EPEL. No dependant packages
so should have minimal impact.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #810010 - Review Request: genders - file based database for cluster managment
https://bugzilla.redhat.com/show_bug.cgi?id=810010
--------------------------------------------------------------------------------
================================================================================
gridsite-1.7.21-3.el5 (FEDORA-EPEL-2012-6426)
Grid Security for the Web, Web platforms for Grids
--------------------------------------------------------------------------------
Update Information:
- Update for new upstream release - 1.7.21
- Added compatibility with the EMI project packaging (exposing EMI package names, added
missing tools)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Ricardo Rocha <ricardo.rocha(a)cern.ch> - 1.7.21-3
- Up release of compat package
* Mon Jul 16 2012 Ricardo Rocha <ricardo.rocha(a)cern.ch> - 1.7.21-2
- Rebuild with proper tarballs
* Mon Jul 16 2012 Ricardo Rocha <ricardo.rocha(a)cern.ch> - 1.7.21-1
- Upstream to 1.7.21, compliance with EMI project gridsite packaging
- Removed unused patches
--------------------------------------------------------------------------------
================================================================================
hping3-0.0.20051105-8.el5 (FEDORA-EPEL-2012-6449)
TCP/IP stack auditing and much more
--------------------------------------------------------------------------------
Update Information:
Fixes typo in hping output
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #781325 - Trivial typo in ping output statistics
https://bugzilla.redhat.com/show_bug.cgi?id=781325
--------------------------------------------------------------------------------
================================================================================
mock-1.0.30-1.el5 (FEDORA-EPEL-2012-6429)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
Added mockchain which takes a mock config and a series of srpms, rebuilds the srpms one by
one, adding each resulting rpm to a local repository so that they are available as build
deps to the next package being built
Remove EPEL-4 configs
fix problem in scm.py with SSH_AUTH_SOCK [BZ# 803217]
fix baseurl (remove dist-) for f17 configs [BZ# 795409]
fix incorrect setting of gid in UidManager.changeOwner() [BZ# 782449]
allow chroot group to be configurable [BZ# 719099]
Remove EPEL-4 configs
fix problem in scm.py with SSH_AUTH_SOCK [BZ# 803217]
fix baseurl (remove dist-) for f17 configs [BZ# 795409]
fix incorrect setting of gid in UidManager.changeOwner() [BZ# 782449]
allow chroot group to be configurable [BZ# 719099]
Remove EPEL-4 configs
fix problem in scm.py with SSH_AUTH_SOCK [BZ# 803217]
fix baseurl (remove dist-) for f17 configs [BZ# 795409]
fix incorrect setting of gid in UidManager.changeOwner() [BZ# 782449]
allow chroot group to be configurable [BZ# 719099]
Remove EPEL-4 configs
fix problem in scm.py with SSH_AUTH_SOCK [BZ# 803217]
fix baseurl (remove dist-) for f17 configs [BZ# 795409]
fix incorrect setting of gid in UidManager.changeOwner() [BZ# 782449]
allow chroot group to be configurable [BZ# 719099]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2012 Clark Williams <williams(a)redhat.com> - 1.0.30-1
- modified startup code to only set mock group [BZ# 809676]
- add CLONE_NEWUTS to unshare(2) call [BZ# 818445]
- from Seth Vidal <skvidal at fedoraproject.org>:
- add mockchain to mock [BZ# 812477]
- from Marko Myllynen <myllynen(a)redhat.com>:
- fix write_tar check in scm.py [BZ# 828677]
- from Masatake YAMATO <yamato(a)redhat.com>:
- added option to set a plugin parameter value [BZ# 754321]
* Thu Mar 29 2012 Clark Williams <williams(a)redhat.com> - 1.0.29-1
- fix SCM problem with SSH_AUTH_SOCK [BZ# 803217]
- remove EPEL 4 configs
- fix baseurl (remove dist-) for f17 configs [BZ# 795409]
- fix incorrect setting of gid in UidManager.changeOwner() [BZ# 782449]
- From Chris St Pierre <chris.a.st.pierre(a)gmail.com>:
- allow chroot group to be configure option [BZ# 719099]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #809676 - Mock and FreeIPA group detection issues.
https://bugzilla.redhat.com/show_bug.cgi?id=809676
--------------------------------------------------------------------------------
================================================================================
nsd-3.2.12-1.el5 (FEDORA-EPEL-2012-6419)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2012-2978: NSD denial of service vulnerability from non-standard DNS packet
from any host
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Paul Wouters <pwouters(a)redhat.com> - 3.2.12-1
- Upgraded to 3.2.12 which fixes CVE-2012-2978 (rhbz#841268)
* Tue Jul 17 2012 Paul Wouters <pwouters(a)redhat.com> - 3.2.11-1
- Updated to 3.2.11 (minor fixes and minor features)
* Sun Nov 27 2011 Paul Wouters <paul(a)xelerance.com> - 3.2.9-1
- Updated to 3.2.9 (Minimum responses, less nsec3 hashing)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #841268 - CVE-2012-2978: nsd: NSD denial of service vulnerability from
non-standard DNS packet from any host on the internet.
https://bugzilla.redhat.com/show_bug.cgi?id=841268
--------------------------------------------------------------------------------
================================================================================
puppet-2.6.17-2.el5 (FEDORA-EPEL-2012-6441)
A network tool for managing many disparate systems
--------------------------------------------------------------------------------
Update Information:
This is an upstream security release. It addresses a number of issues found in
puppet-2.6.x. The Red Hat security team has rated this update as having low security
impact.
Refer to the upstream release notes and bugzilla entries for further details.
http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.17
NetworkManager compatibility should be improved in this release, thanks to Orion Poplawski
(any bugs in implementing Orion's suggested dispatcher script are my own).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2012 Todd Zullinger <tmz(a)pobox.com> - 2.6.17-2
- Corrected CVE list, 2.6 is not affected by CVE-2012-3866
* Wed Jul 11 2012 Todd Zullinger <tmz(a)pobox.com> - 2.6.17-1
- Update to 2.6.17, fixes CVE-2012-3864, CVE-2012-3865, CVE-2012-3867
- Improve NetworkManager compatibility, thanks to Orion Poplawski (#532085)
- Preserve timestamps when installing files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #839130 - CVE-2012-3864 puppet: authenticated clients allowed to read
arbitrary files from the puppet master
https://bugzilla.redhat.com/show_bug.cgi?id=839130
[ 2 ] Bug #839131 - CVE-2012-3865 puppet: authenticated clients allowed to delete
arbitrary files on the puppet master
https://bugzilla.redhat.com/show_bug.cgi?id=839131
[ 3 ] Bug #839158 - CVE-2012-3867 puppet: insufficient validation of agent names in CN
of SSL certificate requests
https://bugzilla.redhat.com/show_bug.cgi?id=839158
--------------------------------------------------------------------------------
================================================================================
python26-cheetah-2.4.4-3.el5 (FEDORA-EPEL-2012-6456)
Template engine and code-generator
--------------------------------------------------------------------------------
Update Information:
First release of python cheetah for python 2.6 on epel5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #840050 - Review Request: python26-cheetah - Template engine and
code-generator
https://bugzilla.redhat.com/show_bug.cgi?id=840050
--------------------------------------------------------------------------------
================================================================================
python26-configobj-4.7.2-5.el5 (FEDORA-EPEL-2012-6457)
Config file reading, writing, and validation
--------------------------------------------------------------------------------
Update Information:
First release of python configobj for python 2.6 on EPEL 5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #840447 - Review Request: python26-configobj - Configuration file reading,
writing, and validation
https://bugzilla.redhat.com/show_bug.cgi?id=840447
--------------------------------------------------------------------------------
================================================================================
python26-pycurl-7.15.5.1-9.el5 (FEDORA-EPEL-2012-6427)
A Python interface to libcurl
--------------------------------------------------------------------------------
Update Information:
First release of python pycurl for python 2.6 on EPEL5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #682553 - Review Request: python26-pycurl - A Python interface to libcurl
https://bugzilla.redhat.com/show_bug.cgi?id=682553
--------------------------------------------------------------------------------