The following Fedora EPEL 5 Security updates need testing: Age URL 802 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 256 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.... 137 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2.0-1... 21 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-... 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1697/zabbix20-2.0.1... 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1696/perl-Email-Add... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1747/mediawiki119-1... 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1767/cacti-0.8.8b-7... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1780/zarafa-7.1.10-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1803/chrony-1.30-1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
CGSI-gSOAP-1.3.6-4.el5 beakerlib-1.9-3.el5 chrony-1.30-1.el5 gfal2-util-1.0.0-1.el5 lz4-r118-1.el5 pam_mapi-0.2.0-1.el5 s3cmd-1.5.0-0.7.rc1.el5 voms-2.0.11-7.el5
Details about builds:
================================================================================ CGSI-gSOAP-1.3.6-4.el5 (FEDORA-EPEL-2014-1758) GSI plugin for gSOAP -------------------------------------------------------------------------------- Update Information:
Updated to 1.3.6 release -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 2 2014 Alejandro Alvarez Ayllon aalvarez@cern.ch - 1.3.6-4 - Backported fix for multithreading * Fri Jun 27 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 1.3.6-3 - Fix broken man page * Fri Jun 27 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 1.3.6-2 - Update the source description for the new release * Fri Jun 27 2014 Alejandro Alvarez Ayllon aalvarez@cern.ch - 1.3.6-1 - Update for new upstream release * Fri Jun 6 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.5-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Oct 18 2013 Adrien Devresse <adevress at cern.ch> - 1.3.5-7 - Rebuilt for gsoap release * Thu Aug 8 2013 Mattias Ellert mattias.ellert@fysast.uu.se - 1.3.5-6 - Use _pkgdocdir * Fri Aug 2 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Feb 13 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ beakerlib-1.9-3.el5 (FEDORA-EPEL-2014-1818) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information:
bunch of fixes added missing patch for python compatibility rebase to upstream 1.9 --------------------------------------------------------------------------------
================================================================================ chrony-1.30-1.el5 (FEDORA-EPEL-2014-1803) An NTP client/server -------------------------------------------------------------------------------- Update Information:
This is an update to the latest upstream release. This fixes the following security vulnerability:
- Modify chronyc protocol to prevent amplification attacks (CVE-2014-0021) (incompatible with previous protocol version, chronyc supports both)
Changelog is available here: http://chrony.tuxfamily.org/News.html -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 2 2014 Miroslav Lichvar mlichvar@redhat.com 1.30-1 - update to 1.30 (CVE-2014-0021) - return chronyc exit code in init script (#827466) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1054790 - CVE-2014-0021 chrony: DDoS via amplification in cmdmon protocol https://bugzilla.redhat.com/show_bug.cgi?id=1054790 --------------------------------------------------------------------------------
================================================================================ gfal2-util-1.0.0-1.el5 (FEDORA-EPEL-2014-1802) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information:
Update for new upstream release 1.0.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 2 2014 Alejandro Alvarez <aalvarez at cern.ch> - 1.0.0-1 - Update for new upstream 1.0.0 release - Installation done with distutils - Run tests on check stage --------------------------------------------------------------------------------
================================================================================ lz4-r118-1.el5 (FEDORA-EPEL-2014-1813) Extremely fast compression algorithm -------------------------------------------------------------------------------- Update Information:
- New release r118 - Fixed packaging issues. - install libraries under %{_libdir} directory. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 28 2014 pjp pjp@fedoraproject.org - r118-1 - new release - install libraries under appropriate _libdir directories. * Sat Jun 14 2014 pjp pjp@fedoraproject.org - r117-3 - Move shared library object to -devel package. * Sat Jun 7 2014 pjp pjp@fedoraproject.org - r117-2 - Skip static library from installation. * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - r117-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Jun 6 2014 pjp pjp@fedoraproject.org - r117-1 - new release - added lz4c & lz4cat manual pages. * Sun Apr 13 2014 pjp pjp@fedoraproject.org - r116-1 - new release 116 - added lz4cat utility for posix systems * Sat Mar 15 2014 pjp pjp@fedoraproject.org - r114-1 - new release r114 - added RPM_OPT_FLAGS to CFLAGS - introduced a devel package to build liblz4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1113430 - Packaging issues https://bugzilla.redhat.com/show_bug.cgi?id=1113430 --------------------------------------------------------------------------------
================================================================================ pam_mapi-0.2.0-1.el5 (FEDORA-EPEL-2014-1805) PAM module for authentication via MAPI against a Zarafa server -------------------------------------------------------------------------------- Update Information:
- New configuration option for per-user basis feature/service - Added more different configuration examples to documentation -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 1 2014 Robert Scheck robert@fedoraproject.org 0.2.0-1 - Upgrade to 0.2.0 * Fri Jun 6 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Feb 14 2014 David Tardon dtardon@redhat.com - 0.1.2-5 - rebuild for new ICU * Tue Aug 6 2013 Robert Scheck robert@fedoraproject.org 0.1.2-4 - Use %{_pkgdocdir} macro for unversioned docdir (#994018) * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Feb 1 2013 Parag Nemade <paragn AT fedoraproject DOT org> - 0.1.2-2 - Rebuild for icu 50 --------------------------------------------------------------------------------
================================================================================ s3cmd-1.5.0-0.7.rc1.el5 (FEDORA-EPEL-2014-1817) Tool for accessing Amazon Simple Storage Service -------------------------------------------------------------------------------- Update Information:
upstream 1.5.0-rc1 Major upgrade incorporating 5 years of upstream work. upstream 1.5.0-beta1 plus even newer upstream fixes -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 1 2014 Matt Domsch mdomsch@fedoraproject.org - 1.5.0-0.7.rc1 - put back dropped dist tag * Tue Jul 1 2014 Matt Domsch mdomsch@fedoraproject.org - 1.5.0-0.6.rc1 - upstream 1.5.0-rc1 * Sun Jun 8 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.0-0.5.gitb196faa5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Mar 23 2014 Matt Domsch mdomsch@fedoraproject.org - 1.5.0-0.4.git - upstream 1.5.0-beta1 plus even newer upstream fixes * Sun Feb 2 2014 Matt Domsch mdomsch@fedoraproject.org - 1.5.0-0.3.git - upstream 1.5.0-beta1 plus newer upstream fixes * Wed May 29 2013 Matt Domsch mdomsch@fedoraproject.org - 1.5.0-0.2.gita122d97 - more upstream bugfixes - drop pyxattr dep, that codepath got dropped in this release * Mon May 20 2013 Matt Domsch mdomsch@fedoraproject.org - 1.5.0-0.1.gitb1ae0fbe - upstream 1.5.0-alpha3 plus fixes - add dep on pyxattr for the --xattr option * Tue Jun 19 2012 Matt Domsch mdomsch@fedoraproject.org - 1.1.0-0.4.git11e5755e - add local MD5 cache * Mon Jun 18 2012 Matt Domsch mdomsch@fedoraproject.org - 1.1.0-0.3.git7de0789d - parallelize local->remote syncs * Mon Jun 18 2012 Matt Domsch mdomsch@fedoraproject.org - 1.1.0-0.2.gitf881b162 - add hardlink / duplicate file detection support * Fri Mar 9 2012 Matt Domsch mdomsch@fedoraproject.org - 1.1.0-0.1.git2dfe4a65 - build from git for mdomsch patches to s3cmd sync * Thu Feb 23 2012 Dennis Gilmore dennis@ausil.us - 1.0.1-1 - update to 1.0.1 release * Sat Jan 14 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.0.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu May 5 2011 Lubomir Rintel (GoodData) lubo.rintel@gooddata.com - 1.0.0-3 - No hashlib hackery * Wed Feb 9 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Tue Jan 11 2011 Lubomir Rintel (GoodData) lubo.rintel@gooddata.com - 1.0.0-1 - New upstream release * Mon Nov 29 2010 Lubomir Rintel (GoodData) lubo.rintel@gooddata.com - 0.9.9.91-3 - Patch for broken f14 httplib * Thu Jul 22 2010 David Malcolm dmalcolm@redhat.com - 0.9.9.91-2.1 - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild --------------------------------------------------------------------------------
================================================================================ voms-2.0.11-7.el5 (FEDORA-EPEL-2014-1749) Virtual Organization Membership Service -------------------------------------------------------------------------------- Update Information:
Fix stack smashing from SHA2 certificates. Fix gsoap linking. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 2 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 2.0.11-7 - Update the gsoap patch * Thu Jun 26 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 2.0.11-6 - Clean up SHA2 patch * Thu Jun 26 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 2.0.11-5 - Fix compilation problems when strndup is already defined * Thu Jun 26 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 2.0.11-4 - Patch that fixes a stack smash when SHA2 certificates are used * Sun Jun 8 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.0.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild --------------------------------------------------------------------------------