The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/mod_fcgid-2.2-11.el5
https://admin.fedoraproject.org/updates/glpi-0.72.4-3.svn11497.el5
https://admin.fedoraproject.org/updates/gromacs-4.5.2-1.el5
https://admin.fedoraproject.org/updates/pootle-2.1.2-1.el5
https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-1.el5
https://admin.fedoraproject.org/updates/proftpd-1.3.3c-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
fribidi-0.19.2-2.el5
iodine-0.6.0-0.rc1.6.el5
Details about builds:
================================================================================
fribidi-0.19.2-2.el5 (FEDORA-EPEL-2010-3668)
Library implementing the Unicode Bidirectional Algorithm
--------------------------------------------------------------------------------
Update Information:
The fribidi Unicode bidirectional library from Fedora
--------------------------------------------------------------------------------
================================================================================
iodine-0.6.0-0.rc1.6.el5 (FEDORA-EPEL-2010-3667)
Solution to tunnel IPv4 data through a DNS server
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 26 2010 Pavel Alexeev <Pahan(a)Hubbitus.info> - 0.6.0-0.rc1.6
- Add -DLINUX to build options (BZ#644310, thanks to Andy Shevchenko)
- Fix service scripts to find binaries in /usr/sbin instead of /usr/bin (BZ#644299 thanks
to Andy Shevchenko)
- Add 0600 file attributes to prevent password access from regular users (BZ#644305).
- In comments configs add IODINE(D)_PASS variables description (BZ#644317).
* Wed Sep 29 2010 jkeating - 0.6.0-0.rc1.4.2
- Rebuilt for gcc bug 634757
* Wed Sep 29 2010 jkeating - 0.6.0-0.rc1.4.1
- Rebuilt for gcc bug 634757
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #644305 - Password is visible to non-root users
https://bugzilla.redhat.com/show_bug.cgi?id=644305
[ 2 ] Bug #644299 - mistakes in the init script and packaging make this unusable
https://bugzilla.redhat.com/show_bug.cgi?id=644299
[ 3 ] Bug #644317 - [RFE] use IODINE_PASS and IODINED_PASS as a pssword holders
https://bugzilla.redhat.com/show_bug.cgi?id=644317
[ 4 ] Bug #644310 - iodine is compiled wrongly, thus, totally unusable
https://bugzilla.redhat.com/show_bug.cgi?id=644310
--------------------------------------------------------------------------------