The following Fedora EPEL 5 Security updates need testing:
Age URL
1155
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
609
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
373
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
223
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6573/mbedtls-1.3...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6775/rubygem-ext...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6836/php-htmLawe...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6773/drupal6-6.3...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6811/drupal7-7.3...
The following builds have been pushed to Fedora EPEL 5 updates-testing
R-3.2.1-1.el5
drupal6-6.36-1.el5
drupal7-7.38-1.el5
globus-common-15.30-1.el5
globus-gram-job-manager-14.26-1.el5
globus-gridftp-server-7.26-1.el5
globus-gssapi-gsi-11.19-1.el5
globus-net-manager-0.9-1.el5
lz4-r130-1.el5
myproxy-6.1.14-1.el5
php-htmLawed-1.1.20-1.el5
rubygem-extlib-0.9.16-1.el5
Details about builds:
================================================================================
R-3.2.1-1.el5 (FEDORA-EPEL-2015-6754)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2015 Tom Callaway <spot(a)fedoraproject.org> - 3.2.1-1
- update to 3.2.1
* Tue Jun 16 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon May 4 2015 Jakub Čajka <jcajka(a)redhat.com> - 3.2.0-2
- valgrind is available only on selected arches, fixes build on s390
--------------------------------------------------------------------------------
================================================================================
drupal6-6.36-1.el5 (FEDORA-EPEL-2015-6773)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
- Release 6.36 is a security fix release
- Upstream release notes:
https://www.drupal.org/drupal-6.36-release-notes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2015 Peter Borsa <peter.borsa(a)gmail.com> - 6.36-1
- 6.36, SA-CORE-2015-002
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.35-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1232971 - drupal6-6.36 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1232971
--------------------------------------------------------------------------------
================================================================================
drupal7-7.38-1.el5 (FEDORA-EPEL-2015-6811)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
- Release 7.38 is a security fix release
- Upstream release notes:
https://www.drupal.org/drupal-7.38-release-notes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2015 Peter Borsa <peter.borsa(a)gmail.com> - 7.38-1
- 7.38, DRUPAL-SA-CORE-2015-002.
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
7.37-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1232972 - drupal7-7.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1232972
--------------------------------------------------------------------------------
================================================================================
globus-common-15.30-1.el5 (FEDORA-EPEL-2015-6817)
Globus Toolkit - Common Library
--------------------------------------------------------------------------------
Update Information:
Globus toolkit updates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 15.30-1
- GT6 update (make globus-version executable during build time)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
15.29-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Wed Jun 3 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 15.29-2
- Perl 5.22 rebuild
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-14.26-1.el5 (FEDORA-EPEL-2015-6817)
Globus Toolkit - GRAM Jobmanager
--------------------------------------------------------------------------------
Update Information:
Globus toolkit updates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 14.26-1
- GT6 update (fix state info for running jobs, man pages updates)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
14.25-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-7.26-1.el5 (FEDORA-EPEL-2015-6817)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
Globus toolkit updates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 7.26-1
- GT6 update (man pages updates)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
7.25-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-11.19-1.el5 (FEDORA-EPEL-2015-6817)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
Globus toolkit updates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 11.19-1
- GT6 update (export config file values into environment if not set already)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
11.18-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Fri Jun 5 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 11.18-1
- GT6 update (Change the name compatibility mode in gsi.conf to HYBRID to
match the behavior in 11.14 and earlier. Also some test fixes.)
* Fri May 29 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 11.16-1
- GT6-update (SSL cipher configuration)
--------------------------------------------------------------------------------
================================================================================
globus-net-manager-0.9-1.el5 (FEDORA-EPEL-2015-6817)
Globus Toolkit - Network Manager
--------------------------------------------------------------------------------
Update Information:
Globus toolkit updates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 0.9-1
- GT6 update (cleanups)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lz4-r130-1.el5 (FEDORA-EPEL-2015-6784)
Extremely fast compression algorithm
--------------------------------------------------------------------------------
Update Information:
- New release r130
- Fixed: incompatibility sparse mode vs console.
- Fixed: LZ4IO exits too early when frame crc not present.
- Fixed: incompatibility sparse mode vs append mode.
- Performance fix: big compression speed boost for clang(+30%)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2015 pjp <pjp(a)fedoraproject.org> - r130-1
- Fixed: incompatibility sparse mode vs console.
- Fixed: LZ4IO exits too early when frame crc not present.
- Fixed: incompatibility sparse mode vs append mode.
- Performance fix: big compression speed boost for clang(+30%).
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
r129-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1226494 - lz4-r130 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1226494
[ 2 ] Bug #1233076 - lz4: sparse file support in lz4cat breaks pipes
https://bugzilla.redhat.com/show_bug.cgi?id=1233076
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.14-1.el5 (FEDORA-EPEL-2015-6817)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
Globus toolkit updates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 6.1.14-1
- Update to 6.1.14 (RFC2818 name handling)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.1.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-htmLawed-1.1.20-1.el5 (FEDORA-EPEL-2015-6836)
PHP code to purify and filter HTML
--------------------------------------------------------------------------------
Update Information:
**1.1.20** - 9 June 2015. Fix for a potential security vulnerability arising from
unescaped double-quote character in single-quoted attribute value of some deprecated
elements when tag transformation is enabled; recognition for non-(HTML4) standard
'allowfullscreen' attribute of 'iframe.'
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2015 Remi Collet <remi(a)fedoraproject.org> - 1.1.20-1
- update to 1.1.20
--------------------------------------------------------------------------------
================================================================================
rubygem-extlib-0.9.16-1.el5 (FEDORA-EPEL-2015-6775)
Support library for DataMapper and Merb
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.16
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2015 Mo Morsi <mmorsi(a)redhat.com> - 0.9.16-1
- Update to 0.9.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #917234 - CVE-2013-1802 Ruby Gem extlib: YAML parameter parsing vulnerability
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=917234
--------------------------------------------------------------------------------