The following Fedora EPEL 5 Security updates need testing:
Age URL
900
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
355
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
119
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
62
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2150/drupal7-7.3...
32
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2424/389-ds-base...
15
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1....
15
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2694/TeXmacs-1.0...
15
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2686/putty-0.63-...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2853/mediawiki11...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2895/libvncserve...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3041/rssh-2.3.4-...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3114/mksh-50c-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3206/phpMyAdmin4...
The following builds have been pushed to Fedora EPEL 5 updates-testing
R-3.1.1-7.el5
beakerlib-1.9-6.el5
nagios-plugins-fts-3.2.0-1.el5
perl-Test-XML-0.08-2.el5
php53-tcpdf-6.0.095-1.el5
phpMyAdmin4-4.0.10.4-1.el5
Details about builds:
================================================================================
R-3.1.1-7.el5 (FEDORA-EPEL-2014-3220)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Fix java Requires/BuildRequires to be more permissive.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Orion Poplawski <orion(a)cora.nwra.com> - 3.1.1-7
- Just BR/R java instead of java-1.5.0-gcj (bug #1110684)
* Tue Sep 16 2014 David Sommerseth <davids(a)redhat.com> - 3.1.1-6
- Setting ulimit when running make check, to avoid segfault due to too small stack (needed
on PPC64)
* Tue Aug 26 2014 David Tardon <dtardon(a)redhat.com> - 3.1.1-5
- rebuild for ICU 53.1
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1110684 - R-java update has new dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1110684
--------------------------------------------------------------------------------
================================================================================
beakerlib-1.9-6.el5 (FEDORA-EPEL-2014-3209)
A shell-level integration testing library
--------------------------------------------------------------------------------
Update Information:
fix of regexp issue on bash v3, fixes bz1150672
bz1142535: check count of rpm.mi objects instead of relying on bool coercion
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 8 2014 Dalibor Pospisil <dapospis(a)redhat.com> - 1.9-6
- fix of regexp issue on bash v3, fixes bz1150672
* Mon Oct 6 2014 Dalibor Pospisil <dapospis(a)redhat.com> - 1.9-5
- bz1142535: check count of rpm.mi objects instead of relying on bool coercion
- remove trailing spaces from beakerlib_rpm and beakerlib_redhat_rpm elements
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1150672 - rlIsRhel '>5' not working
https://bugzilla.redhat.com/show_bug.cgi?id=1150672
[ 2 ] Bug #1142535 - [regression] "rlJournalStart: Failed to initialize the
journal. Bailing out..." on RHEL5
https://bugzilla.redhat.com/show_bug.cgi?id=1142535
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-fts-3.2.0-1.el5 (FEDORA-EPEL-2014-3214)
Nagios probes to be run remotely against FTS3 machines
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1149178 - Review Request: nagios-plugins-fts - provides the nagios probes for
FTS3
https://bugzilla.redhat.com/show_bug.cgi?id=1149178
--------------------------------------------------------------------------------
================================================================================
perl-Test-XML-0.08-2.el5 (FEDORA-EPEL-2014-3222)
Compare XML in perl tests
--------------------------------------------------------------------------------
Update Information:
This is the first Fedora/EPEL release of perl-Test-XML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1148580 - Review Request: perl-Test-XML - Compare XML in perl tests
https://bugzilla.redhat.com/show_bug.cgi?id=1148580
--------------------------------------------------------------------------------
================================================================================
php53-tcpdf-6.0.095-1.el5 (FEDORA-EPEL-2014-3232)
PHP class for generating PDF documents and barcodes
--------------------------------------------------------------------------------
Update Information:
6.0.095 (2014-10-02)
* Bug item #979 "New Timezone option overwriting current timezone" was
fixed.
6.0.094 (2014-09-30)
* Bug item #978 "Variable Undefined: $cborder" was fixed.
6.0.093 (2014-09-02)
* Security fix: some serialize/unserialize methods were replaced with
json_encode/json_decode to avoid a potential object injection with user supplied content.
Thanks to ownCloud Inc. for reporting this issue.
* K_TIMEZONE constant was added to the default configuration to supress date-time
warnings.
6.0.092 (2014-09-01)
* Bug item #956 "Monospaced fonts are not alignd at the baseline" was fixed.
* Bug item #964 "Problem when changing font size" was fixed.
* Bug item #969 "ImageSVG with radialGradient problem" was fixed.
* sRGB.icc file was replaced with the one from the Debian package icc-profiles-free
(2.0.1+dfsg-1)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 5 2014 Remi Collet <remi(a)fedoraproject.org> - 6.0.095-1
- update to 6.0.095
* Thu Oct 2 2014 Remi Collet <remi(a)fedoraproject.org> - 6.0.094-1
- update to 6.0.094
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin4-4.0.10.4-1.el5 (FEDORA-EPEL-2014-3206)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.0.10.4 (2014-10-01)
================================
* [security] XSS vulnerabilities in table search and table structure pages
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 2 2014 Robert Scheck <robert(a)fedoraproject.org> 4.0.10.4-1
- Upgrade to 4.0.10.4 (#1148664)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1148664 - CVE-2014-7217 phpmyadmin: cross-site scripting (XSS) flaw fixed in
versions 4.0.10.4, 4.1.14.5, and 4.2.9.1 (PMASA-2014-11)
https://bugzilla.redhat.com/show_bug.cgi?id=1148664
--------------------------------------------------------------------------------