The following Fedora EPEL 5 Security updates need testing:
Age URL
375
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
270
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1....
76
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect...
21
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5410/php-geshi-1...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5620/phpMyAdmin3...
The following builds have been pushed to Fedora EPEL 5 updates-testing
drupal6-votingapi-2.3-8.el5
mksh-45-1.el5
mozilla-https-everywhere-3.2-1.el5
Details about builds:
================================================================================
drupal6-votingapi-2.3-8.el5 (FEDORA-EPEL-2013-5645)
Voting API module for Drupal6
--------------------------------------------------------------------------------
Update Information:
VotingAPI for Drupal 6 helps developers who want to use a standardized API
and schema for storing, retrieving, and tabulating votes for Drupal content.
This package provides the following Drupal module:
* votingapi
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #925915 - Please add EPEL 5 package
https://bugzilla.redhat.com/show_bug.cgi?id=925915
--------------------------------------------------------------------------------
================================================================================
mksh-45-1.el5 (FEDORA-EPEL-2013-5647)
MirBSD enhanced version of the Korn Shell
--------------------------------------------------------------------------------
Update Information:
R45 comes with this bag of changes:
* [tg] Make “set -x” print the commands run in escaped form
* [tg] PS4 in dot.mkshrc is now timestamped
* [tg] The &> GNU bash I/O redir is no longer parsed in -o posix, -o sh modes,
lksh (breaks valid scripts)
* [tg] Implement ${ …;} more efficiently (deleted-open files)
* [tg] For shf, %#s (if you can get it past GCC’s printf format attribute) calls
print_value_quoted, ignoring field width and precision
* [tg] Catch “typeset =” (regression) with better error message
* [tg, Tonnerre Lombard] add “doch” alias to dot.mkshrc which just repeats the last
input line with sudo(8)
* [tg] Use unsigned integers for all calculations, to avoid ISO C “Undefined Behaviour”
(and implementation-defined behaviour) throughout (most of) the code; emulate signed
integer arithmetics using unsigned; not-lksh only
* [tg] Emulate signed modulo naïvely, for correct sign of the result
* [tg] Add <<< and >>> for ROL and ROR (rotate left and right,
respectively) operations, <<<= and >>> assignments; bitwise AND the RHS
of a shift/rotate op with 31 (not for lksh)
* [tg] Remove a warning by working around a workaround found in dietlibc which works
around a bug in broken software such as GNU tar (really!)
* [tg] Correct and simplify list and categorisation of built-in commands as POSIX
special and “everything else” plus a flag to keep assignments
* [tg] Handle ((foo)) as “let]” internally to avoid a conflict with user-defined
functions called let (LP#1156707)
* [tg] Clean up the code
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 1 2013 Thorsten Glaser <tg(a)mirbsd.org> 45-1
- Upgrade mksh to R45 and the other files to the accompanying versions
- Drop workaround for GCC PR55009 (no longer needed)
- Use https for homepage
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-3.2-1.el5 (FEDORA-EPEL-2013-5642)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
- Related trac bugs for this release:
https://eff.org/r.b9Qc
- New: MoinMoin
- Fixes: Adobe, Bahn.de, Cloudfront, Dell, Droplr, FBI, Google Maps,
Joomla, Juno Download, Lenovo, New York Times, SEC, Soundcloud,
Tweakers.net, Univ Strasbourg, Vkontakte, Zend
- Disable broken: AirAsia, Netvibes, Newgrounds, Pirate Bay, Russia Today, SVT,
Wolfram Alpha
- Maybe fixed: Quantcast/Tumblr:
https://trac.torproject.org/projects/tor/ticket/8406 (maybe fixed)
- Sync languages and translations from the master branch.
- New languages: Finnish, Norwegian (Bokmål), Slovak, Bulgarian.
- All HTTPS Everywhere users will be now prompted about using the
SSL Observatory.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 1 2013 Russell Golden <niveusluna(a)niveusluna.org> - 3.2-1
- Related trac bugs for this release:
https://eff.org/r.b9Qc
- New: MoinMoin
- Fixes: Adobe, Bahn.de, Cloudfront, Dell, Droplr, FBI, Google Maps,
Joomla, Juno Download, Lenovo, New York Times, SEC, Soundcloud,
Tweakers.net, Univ Strasbourg, Vkontakte, Zend
- Disable broken: AirAsia, Netvibes, Newgrounds, Pirate Bay, Russia Today, SVT,
Wolfram Alpha
- Maybe fixed: Quantcast/Tumblr:
https://trac.torproject.org/projects/tor/ticket/8406 (maybe fixed)
- Sync languages and translations from the master branch.
- New languages: Finnish, Norwegian (Bokmål), Slovak, Bulgarian.
- All HTTPS Everywhere users will be now prompted about using the
SSL Observatory.
--------------------------------------------------------------------------------