The following Fedora EPEL 5 Security updates need testing: Age URL 810 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 265 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.... 145 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2.0-1... 29 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-... 20 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1696/perl-Email-Add... 14 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1747/mediawiki119-1... 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1767/cacti-0.8.8b-7... 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1803/chrony-1.30-1.... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1824/lz4-r119-1.el5 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1780/zarafa-7.1.10-...
The following builds have been pushed to Fedora EPEL 5 updates-testing
cmockery2-1.3.8-2.el5 dmlite-plugins-memcache-0.6.4-1.el5 heimdal-1.6.0-0.9.20140621gita5adc06.el5 php53-mapi-7.1.10-2.el5 salt-2014.1.7-3.el5 zarafa-7.1.10-2.el5
Details about builds:
================================================================================ cmockery2-1.3.8-2.el5 (FEDORA-EPEL-2014-1877) Lightweight C unit testing framework -------------------------------------------------------------------------------- Update Information:
pkgconfig dependency -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 11 2014 Luis Pabon, Jr. lpabon@redhat.com - 1.3.8-2 - pkgconfig dependency * Mon Jul 7 2014 Luis Pabon, Jr. lpabon@redhat.com - 1.3.8-1 - clang support --------------------------------------------------------------------------------
================================================================================ dmlite-plugins-memcache-0.6.4-1.el5 (FEDORA-EPEL-2014-1884) Memcached plugin for dmlite -------------------------------------------------------------------------------- Update Information:
Update for new upstream release -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 18 2014 Martin Hellmich mhellmic@cern.ch - 0.6.4-1 - Update for new upstream release * Thu May 15 2014 Martin Hellmich mhellmic@cern.ch - 0.6.3-1 - Update for new upstream release --------------------------------------------------------------------------------
================================================================================ heimdal-1.6.0-0.9.20140621gita5adc06.el5 (FEDORA-EPEL-2014-1784) A Kerberos 5 implementation without export restrictions -------------------------------------------------------------------------------- Update Information:
First EPEL release. (Review Request at RHBZ 613001) --------------------------------------------------------------------------------
================================================================================ php53-mapi-7.1.10-2.el5 (FEDORA-EPEL-2014-1780) The PHP MAPI extension by Zarafa -------------------------------------------------------------------------------- Update Information:
Zarafa Collaboration Platform 7.1.10 final [44973] ==================================================
General -------
This release brings a few new features while maintaining stability. This release is identical to the RC since no reports have arrived upstream and additional testing has not shown up any issues.
Backend -------
- ZCP-12380: Avoid violating RFC 3501 at partial IMAP fetch request - ZCP-12337: Provide support for offline S/MIME public certificates - ZCP-12226: ZWS breaks opensource build - ZCP-12219: Enhance MariaDB support by modifying sql_mode - ZCP-12162: Implement "Reinvite" for Zarafa ical - ZCP-11730: zarafa-mailbox-permissions man page error - ZCP-11835: zarafa-set-oof does not accept argument "-n" - ZCP-12115: support ubuntu 14.04 - ZCP-12142: Patch: Option to disable all plaintext authentications unless SSL/TLS is used - ZCP-12162: Implement "Reinvite" for Zarafa ical - ZCP-12200: Patch: POP3 RESP-CODES and AUTH-RESP-CODE support in Zarafa-Gateway - ZCP-12013: Log the reason why a socket error was thrown - ZCP-12219: Enhance MariaDB support by modifying sql_mode - ZCP-12227: Enhance DAgent log level prios - ZCP-12232: Patch: POP3 CAPA (CAPABILITIES) support in Zarafa-Gateway - ZCP-12234: Include email adress when forwarding mails with a rule (community contribution) - ZCP-12270: Change maintainer line for debian packages - ZCP-12338: Allow administrators to backup archive stores (show GUID via zarafa-admin) - ZCP-12339: Personal archive store not opened if archive server name in ADS does not match the casing of the actual name. - ZCP-12340: Patch: Repair broken ssl_enable_v2 setting for Zarafa 7.1.x - ZCP-12342: Zarafa-backup creates empty folders for skipped companies - ZCP-9899: Update GSoap to 2.8.x -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 11 2014 Robert Scheck robert@fedoraproject.org 7.1.10-2 - Added a workaround to really support MariaDB (#995870) - Re-added a patch to allow building without zarafa-search * Sun Jun 29 2014 Robert Scheck robert@fedoraproject.org 7.1.10-1 - Upgrade to 7.1.10 * Fri Jun 20 2014 Remi Collet rcollet@redhat.com - 7.1.9-2.1 - rebuild for https://fedoraproject.org/wiki/Changes/Php56 - add numerical prefix to extension configuration file * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 7.1.9-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu May 22 2014 Petr Machata pmachata@redhat.com - 7.1.9-2 - Rebuild for boost 1.55.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1073618 - CVE-2014-0103 zarafa: passwords stored in cleartext on server https://bugzilla.redhat.com/show_bug.cgi?id=1073618 --------------------------------------------------------------------------------
================================================================================ salt-2014.1.7-3.el5 (FEDORA-EPEL-2014-1876) A parallel remote execution system -------------------------------------------------------------------------------- Update Information:
Add logrotate script and update to bugfix release 2014.1.7 -------------------------------------------------------------------------------- ChangeLog:
* Thu Jul 10 2014 Erik Johnson erik@saltstack.com - 2014.1.7-3 - Add logrotate script * Thu Jul 10 2014 Erik Johnson erik@saltstack.com - 2014.1.7-1 - Update to bugfix release 2014.1.7 --------------------------------------------------------------------------------
================================================================================ zarafa-7.1.10-2.el5 (FEDORA-EPEL-2014-1780) Open Source Edition of the Zarafa Collaboration Platform -------------------------------------------------------------------------------- Update Information:
Zarafa Collaboration Platform 7.1.10 final [44973] ==================================================
General -------
This release brings a few new features while maintaining stability. This release is identical to the RC since no reports have arrived upstream and additional testing has not shown up any issues.
Backend -------
- ZCP-12380: Avoid violating RFC 3501 at partial IMAP fetch request - ZCP-12337: Provide support for offline S/MIME public certificates - ZCP-12226: ZWS breaks opensource build - ZCP-12219: Enhance MariaDB support by modifying sql_mode - ZCP-12162: Implement "Reinvite" for Zarafa ical - ZCP-11730: zarafa-mailbox-permissions man page error - ZCP-11835: zarafa-set-oof does not accept argument "-n" - ZCP-12115: support ubuntu 14.04 - ZCP-12142: Patch: Option to disable all plaintext authentications unless SSL/TLS is used - ZCP-12162: Implement "Reinvite" for Zarafa ical - ZCP-12200: Patch: POP3 RESP-CODES and AUTH-RESP-CODE support in Zarafa-Gateway - ZCP-12013: Log the reason why a socket error was thrown - ZCP-12219: Enhance MariaDB support by modifying sql_mode - ZCP-12227: Enhance DAgent log level prios - ZCP-12232: Patch: POP3 CAPA (CAPABILITIES) support in Zarafa-Gateway - ZCP-12234: Include email adress when forwarding mails with a rule (community contribution) - ZCP-12270: Change maintainer line for debian packages - ZCP-12338: Allow administrators to backup archive stores (show GUID via zarafa-admin) - ZCP-12339: Personal archive store not opened if archive server name in ADS does not match the casing of the actual name. - ZCP-12340: Patch: Repair broken ssl_enable_v2 setting for Zarafa 7.1.x - ZCP-12342: Zarafa-backup creates empty folders for skipped companies - ZCP-9899: Update GSoap to 2.8.x -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 11 2014 Robert Scheck robert@fedoraproject.org 7.1.10-2 - Added a workaround to really support MariaDB (#995870) - Re-added a patch to allow building without zarafa-search * Sun Jun 29 2014 Robert Scheck robert@fedoraproject.org 7.1.10-1 - Upgrade to 7.1.10 * Fri Jun 20 2014 Remi Collet rcollet@redhat.com - 7.1.9-2.1 - rebuild for https://fedoraproject.org/wiki/Changes/Php56 - add numerical prefix to extension configuration file * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 7.1.9-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu May 22 2014 Petr Machata pmachata@redhat.com - 7.1.9-2 - Rebuild for boost 1.55.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1073618 - CVE-2014-0103 zarafa: passwords stored in cleartext on server https://bugzilla.redhat.com/show_bug.cgi?id=1073618 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org