The following Fedora EPEL 5 Security updates need testing:
Age URL
397
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
292
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1....
98
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect...
31
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5799/python-virt...
The following builds have been pushed to Fedora EPEL 5 updates-testing
edg-mkgridmap-4.0.0-4.el5
mozilla-https-everywhere-3.2.2-1.el5
pngquant-1.8.3-5.el5
Details about builds:
================================================================================
edg-mkgridmap-4.0.0-4.el5 (FEDORA-EPEL-2013-5926)
A tool to build the grid map-file from VO servers
--------------------------------------------------------------------------------
Update Information:
Initial release of edg-mkgridmap in Fedora/EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=957815
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-3.2.2-1.el5 (FEDORA-EPEL-2013-5933)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
- Quick turn-around release to unbreak
support.apple.com
- Fixes for a number of other ruleset bugs:
https://eff.org/r.5bSj
- Incremental observatory cert whitelist update
- Implement XHR outstanding request limits to work around TCP connection
-- exhaustion if the SSL Observatory server is slow or down:
--
https://trac.torproject.org/projects/tor/ticket/8670
--
https://bugzilla.mozilla.org/show_bug.cgi?id=856748
- Overdue update to the Observatory cert whitelist
- Other known ruleset fixes: EA, Yandex, Apple
--
https://trac.torproject.org/projects/tor/ticket/8584
--
https://trac.torproject.org/projects/tor/ticket/8571
- Implement XHR outstanding request limits to work around TCP connection
-- exhaustion if the SSL Observatory server is slow or down:
--
https://trac.torproject.org/projects/tor/ticket/8670
--
https://bugzilla.mozilla.org/show_bug.cgi?id=856748
- Overdue update to the Observatory cert whitelist
- Other known ruleset fixes: EA, Yandex, Apple
--
https://trac.torproject.org/projects/tor/ticket/8584
--
https://trac.torproject.org/projects/tor/ticket/8571
- Implement XHR outstanding request limits to work around TCP connection
-- exhaustion if the SSL Observatory server is slow or down:
--
https://trac.torproject.org/projects/tor/ticket/8670
--
https://bugzilla.mozilla.org/show_bug.cgi?id=856748
- Overdue update to the Observatory cert whitelist
- Other known ruleset fixes: EA, Yandex, Apple
--
https://trac.torproject.org/projects/tor/ticket/8584
--
https://trac.torproject.org/projects/tor/ticket/8571
- Implement XHR outstanding request limits to work around TCP connection
-- exhaustion if the SSL Observatory server is slow or down:
--
https://trac.torproject.org/projects/tor/ticket/8670
--
https://bugzilla.mozilla.org/show_bug.cgi?id=856748
- Overdue update to the Observatory cert whitelist
- Other known ruleset fixes: EA, Yandex, Apple
--
https://trac.torproject.org/projects/tor/ticket/8584
--
https://trac.torproject.org/projects/tor/ticket/8571
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 23 2013 Russell Golden <niveusluna(a)niveusluna.org> - 3.2.2-1
- Quick turn-around release to unbreak
support.apple.com
- Fixes for a number of other ruleset bugs:
https://eff.org/r.5bSj
- Incremental observatory cert whitelist update
* Sat May 18 2013 Russell Golden <niveusluna(a)niveusluna.org> - 3.2.1-1
- Implement XHR outstanding request limits to work around TCP connection
-- exhaustion if the SSL Observatory server is slow or down:
--
https://trac.torproject.org/projects/tor/ticket/8670
--
https://bugzilla.mozilla.org/show_bug.cgi?id=856748
- Overdue update to the Observatory cert whitelist
- Other known ruleset fixes: EA, Yandex, Apple
--
https://trac.torproject.org/projects/tor/ticket/8584
--
https://trac.torproject.org/projects/tor/ticket/8571
--------------------------------------------------------------------------------
================================================================================
pngquant-1.8.3-5.el5 (FEDORA-EPEL-2013-5929)
PNG quantization tool for reducing image file size
--------------------------------------------------------------------------------
Update Information:
pngquant converts 24/32-bit RGBA PNG images to 8-bit palette with alpha channel preserved.
Such images are compatible with all modern web browsers and a compatibility setting is
available to help transparency degrade well in Internet Explorer 6. Quantized files are
often 40-70 percent smaller than their 24/32-bit version. pngquant uses the median cut
algorithm.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #962820 - Review Request: pngquant - PNG quantization tool for reducing image
file size
https://bugzilla.redhat.com/show_bug.cgi?id=962820
--------------------------------------------------------------------------------