The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/chm2pdf-0.9.1-5.el5
https://admin.fedoraproject.org/updates/rt3-3.6.11-1.el5
https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5
https://admin.fedoraproject.org/updates/wordpress-3.1.2-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
eventlog-0.2.12-1.el5
ldns-1.6.8-2.el5
lsyncd-2.0.4-1.el5.1
rt3-3.6.11-1.el5
supybot-fedora-0.2.9.1-2.el5
supybot-koji-0.2-2.el5
Details about builds:
================================================================================
eventlog-0.2.12-1.el5 (FEDORA-EPEL-2011-3239)
Syslog-ng v2 support library
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.12.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 13 2011 Matthias Runge <mrunge(a)matthias-runge.de> - 0.2.12-1
- update to version 0.2.12
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.7-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #701415 - Branch eventlog for EPEL5?
https://bugzilla.redhat.com/show_bug.cgi?id=701415
--------------------------------------------------------------------------------
================================================================================
ldns-1.6.8-2.el5 (FEDORA-EPEL-2011-3235)
Lowlevel DNS(SEC) library with API
--------------------------------------------------------------------------------
Update Information:
Minor bugfix. Bump for EVR
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 3 2011 Paul Wouters <paul(a)xelerance.com> - 1.6.8-2
- rebuilt as previous build was accidentally not released
* Mon Jan 24 2011 Paul Wouters <paul(a)xelerance.com> - 1.6.8-1
- Updated to 1.6.8
* Thu Aug 26 2010 Paul Wouters <paul(a)xelerance.com> - 1.6.6-1
- Upgraded to 1.6.6
--------------------------------------------------------------------------------
================================================================================
lsyncd-2.0.4-1.el5.1 (FEDORA-EPEL-2011-3241)
File change monitoring and synchronization daemon
--------------------------------------------------------------------------------
================================================================================
rt3-3.6.11-1.el5 (FEDORA-EPEL-2011-3238)
Request tracker 3
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2011-0009 : Insecure hashing algorithm used for storage of user passwords
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Xavier Bachelot <xavier(a)bachelot.org> - 3.6.11-1
- Update to 3.6.11 (CVE-2011-1685).
* Wed Jan 26 2011 Xavier Bachelot <xavier(a)bachelot.org> - 3.6.10-2
- Add patch for CVE-2011-0009.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #672250 - CVE-2011-0009 RT3: Insecure hashing algorithm used for storage of
user passwords
https://bugzilla.redhat.com/show_bug.cgi?id=672250
--------------------------------------------------------------------------------
================================================================================
supybot-fedora-0.2.9.1-2.el5 (FEDORA-EPEL-2011-3237)
Plugin for Supybot to interact with Fedora services
--------------------------------------------------------------------------------
Update Information:
fixed requires for supybot and supybot-gribble
Updates the URL to be compatible with pkgdb 0.5.x. Various other fixes
Adds a new mirroradmins command to get the FAS name of mirror admins via IRC.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 3 2011 Dave Riches <david.r(a)ultracar.co.uk> - 0.2.9.1-2
- fixed requires issue for supybot
* Sat Apr 10 2010 Jon Stanley <jonstanley(a)gmail.com> - 0.2.9.1-1
- New upstream 0.2.9.1
* Fri Feb 12 2010 Jon Stanley <jonstanley(a)gmail.com> - 0.2.8-1
- New upstream 0.2.8
--------------------------------------------------------------------------------
================================================================================
supybot-koji-0.2-2.el5 (FEDORA-EPEL-2011-3243)
Plugin for Supybot to interact with Koji instances
--------------------------------------------------------------------------------
Update Information:
fixed requires for supybot and supybot-gribble
This update fixes a bug where Fedora infrastructure was unable to use the plugin. It also
allows the configuration of non-Fedora Koji servers, if this were ever to be used with a
private koji instance, for example.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 3 2011 Dave Riches <david.r(a)ultracar.co.uk> - 0.2-2
- fixed requires for supybot and supybot-gribble
* Wed Jan 12 2011 Jon Stanley <jonstanley(a)gmail.com> - 0.2-1
- New upstream release
--------------------------------------------------------------------------------