The following Fedora EPEL 5 Security updates need testing:
Age URL
779
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893
libguestfs-1.20.12-1.el5
544
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5
393
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849
sblim-sfcb-1.3.8-2.el5
36
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516
mcollective-2.8.4-1.el5
35
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-10d919912b
git-1.8.2.1-2.el5
18
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-80b3d70677
imapsync-1.644-2.el5
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6
thttpd-2.25b-24.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
clamav-0.99-3.el5
lighttpd-1.4.38-1.el5
openssl101e-1.0.1e-4.el5
torque-4.2.10-8.el5
Details about builds:
================================================================================
clamav-0.99-3.el5 (FEDORA-EPEL-2015-b68b5dff17)
Anti-virus software
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.99 contains major new features and changes. YARA rules, Perl Compatible
Regular Expressions, revamped on-access scanning for Linux, and other new
features join the many great features of ClamAV: - Processing of YARA rules
(some limitations - see signatures.pdf). - Support in ClamAV logical signatures
for many of the features added for YARA, such as Perl Compatible Regular
Expressions, alternate strings, and YARA string attributes. See signatures.pdf
for full details. - New and improved on-access scanning for Linux. See the
recent blog post and clamdoc.pdf for details on the new on-access capabilities.
- A new ClamAV API callback function that is invoked when a virus is found. This
is intended primarily for applications running in all-match mode. Any
applications using all-match mode must use the new callback function to record
and report detected viruses. - Configurable default password list to attempt
zip file decryption. - TIFF file support. - A new signature target type for
designating signatures to run against files with unknown file types. - Improved
fidelity of the "data loss prevention" heuristic algorithm. Code supplied by
Bill Parker. - Support for LZMA decompression within Adobe Flash files. -
Support for MSO attachments within Microsoft Office 2003 XML files. - A new
sigtool option(--ascii-normalize) allowing signature authors to more easily
generate normalized versions of ascii files. Please note: If you are using
clamd on-access scanning or have applications using all-match mode, you will
want to review the changes and make any necessary adjustments before using
ClamAV 0.99.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1287327 - clamav-0.99 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1287327
--------------------------------------------------------------------------------
================================================================================
lighttpd-1.4.38-1.el5 (FEDORA-EPEL-2015-6d035fc737)
Lightning fast webserver with light system requirements
--------------------------------------------------------------------------------
Update Information:
http://www.lighttpd.net/2015/12/5/1.4.38/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288708 - lighttpd-1.4.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1288708
--------------------------------------------------------------------------------
================================================================================
openssl101e-1.0.1e-4.el5 (FEDORA-EPEL-2015-1bef47ba4b)
A general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
The OpenSSL toolkit provides support for secure communications between machines.
OpenSSL includes a certificate management tool and shared libraries which
provide various cryptographic algorithms and protocols.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1223990 - Review Request: openssl101e - A general purpose cryptography
library with TLS implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1223990
--------------------------------------------------------------------------------
================================================================================
torque-4.2.10-8.el5 (FEDORA-EPEL-2015-22cbfeb20e)
Tera-scale Open-source Resource and QUEue manager
--------------------------------------------------------------------------------
Update Information:
Resolve momctl into the right package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279565 - Torque will not allocate more than 1 CPU in a cpuset
https://bugzilla.redhat.com/show_bug.cgi?id=1279565
[ 2 ] Bug #1259240 - pbs_mom init script tries to use uninstalled binary
https://bugzilla.redhat.com/show_bug.cgi?id=1259240
[ 3 ] Bug #1231148 - [Wishlist] Please build torque with numa-support and cpuset
https://bugzilla.redhat.com/show_bug.cgi?id=1231148
--------------------------------------------------------------------------------