The following Fedora EPEL 5 Security updates need testing:
Age URL
334
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
229
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1....
34
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect...
27
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0425/nginx-0.8.5...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0518/euca2ools-2...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0609/php-Smarty-...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0598/firebird-2....
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0683/mimetex-1.7...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0711/git-1.8.1.4...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0728/puppet-2.6....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0734/drupal7-vie...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0754/boost141-1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
boost141-1.41.0-4.el5
collectl-3.6.7-1.el5
thunderbird-lightning-1.9.1-1.el5
Details about builds:
================================================================================
boost141-1.41.0-4.el5 (FEDORA-EPEL-2013-0754)
The free peer-reviewed portable C++ source libraries
--------------------------------------------------------------------------------
Update Information:
- Add explicitly the missing runtime dependencies between some boost subpackages
(backported from boost-1.41.0-15)
- Do not overflow allocated chunk size in Boost.Pool (backported from boost-1.41.0-15,
resolves: #828860 and CVE-2012-2677)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2013 Robert Scheck <robert(a)fedoraproject.org> 1.41.0-4
- Add explicitly the missing runtime dependencies between some
boost subpackages (backported from boost-1.41.0-15)
- Do not overflow allocated chunk size in Boost.Pool (backported
from boost-1.41.0-15, resolves: #828860 and CVE-2012-2677)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #828856 - CVE-2012-2677 boost: ordered_malloc() overflow
https://bugzilla.redhat.com/show_bug.cgi?id=828856
--------------------------------------------------------------------------------
================================================================================
collectl-3.6.7-1.el5 (FEDORA-EPEL-2013-0750)
A utility to collect various Linux performance data
--------------------------------------------------------------------------------
Update Information:
- update to upstream version 3.6.7
- upstream changelog at
http://collectl.sourceforge.net/Releases.html
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 22 2013 Dan Horák <dan[at]danny.cz> - 3.6.7-1
- upgrade to upstream version 3.6.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #924161 - collectl-3.6.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=924161
--------------------------------------------------------------------------------
================================================================================
thunderbird-lightning-1.9.1-1.el5 (FEDORA-EPEL-2013-0753)
The calendar extension to Thunderbird
--------------------------------------------------------------------------------
Update Information:
- Update to 1.9.1 for TB 17
- Add patch to fix alarm handling after suspend (bug #910976)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 19 2013 Orion Poplawski <orion(a)cora.nwra.com> - 1.9.1-1
- Update to 1.9.1
- Add patch to fix alarm handling after suspend (bug #910976)
- ExcludeArch ppc for now
* Tue Nov 20 2012 Jan Horak <jhorak(a)redhat.com> - 1.9-1
- Update to 1.9
- Bump required TB version
- Drop gcc47 patch
- Add patches from EL5 thunderbird srpm
--------------------------------------------------------------------------------