The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/mod_fcgid-2.2-11.el5
https://admin.fedoraproject.org/updates/udunits2-2.1.19-1.el5.1
https://admin.fedoraproject.org/updates/xpdf-3.02-16.el5
https://admin.fedoraproject.org/updates/libvpx-0.9.5-2.el5
https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-1.el5
https://admin.fedoraproject.org/updates/proftpd-1.3.3c-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
libvpx-0.9.5-2.el5
lyx-1.6.8-1.el5
xrdp-0.5.0-0.13.el5
Details about builds:
================================================================================
libvpx-0.9.5-2.el5 (FEDORA-EPEL-2010-3682)
VP8 Video Codec SDK
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.5 and apply patch from upstream to resolve CVE-2010-4203 libvpx: memory
corruption flaw.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 17 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> 0.9.5-2
- apply patch from upstream git (Change I6266aba7), should resolve CVE-2010-4203
* Mon Nov 1 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> 0.9.5-1
- update to 0.9.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #651213 - CVE-2010-4203 libvpx: memory corruption flaw
https://bugzilla.redhat.com/show_bug.cgi?id=651213
--------------------------------------------------------------------------------
================================================================================
lyx-1.6.8-1.el5 (FEDORA-EPEL-2010-3681)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
New upstream bugfix release, see also
http://www.lyx.org/announce/1_6_8.txt
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 18 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.8-1
- lyx-1.6.8
--------------------------------------------------------------------------------
================================================================================
xrdp-0.5.0-0.13.el5 (FEDORA-EPEL-2010-3680)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 18 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 0.5.0-0.13
- up to git tag a9cfc235211a49c69c3cce3f98ee5976ff8103a4
* Thu Nov 18 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> -
0.5.0-0.12.03172010
- fix logrotate to not restart xrdp and drop all open connections
* Mon Oct 4 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> -
0.5.0-0.11.03172010
- Load a default keymap when current keymap doesnt exist
* Thu Jul 8 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> -
0.5.0-0.10.03172010
- fix rhbz #611669 (load environment variables)
* Thu Mar 18 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> -
0.5.0-0.9.03172010
- buildrequires libXfixes-devel
* Thu Mar 18 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> -
0.5.0-0.8.03172010
- buildrequires libX11-devel
* Thu Mar 18 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> -
0.5.0-0.7.03172010
- sync with last xrdp cvs
* Wed Sep 16 2009 Tomas Mraz <tmraz(a)redhat.com> - 0.5.0-0.6.20090811cvs
- use password-auth instead of system-auth
--------------------------------------------------------------------------------