The following Fedora EPEL 5 Security updates need testing:
Age URL
872
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893
libguestfs-1.20.12-1.el5
637
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5
487
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849
sblim-sfcb-1.3.8-2.el5
129
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516
mcollective-2.8.4-1.el5
101
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6
thttpd-2.25b-24.el5
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-64da3a7a91
drupal6-6.38-1.el5
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f158c9e72f
drupal7-7.43-1.el5
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-085f094286
php-htmLawed-1.1.21-1.el5
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-66faa4ea19
openssl101e-1.0.1e-7.el5
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9c7ed6c982
websvn-2.3.3-12.el5
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-de8749748f
phpMyAdmin4-4.0.10.15-1.el5
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-99a440d127
drupal6-emfield-2.7-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
GraphicsMagick-1.3.23-5.el5
check-mk-1.2.6p16-3.el5
drupal6-ctools-1.15-1.el5
drupal6-emfield-2.7-1.el5
drupal6-login_destination-2.13-1.el5
drupal6-pathauto-2.1-1.el5
lcgdm-dav-0.17.1-1.el5
lcms2-2.7-3.el5
Details about builds:
================================================================================
GraphicsMagick-1.3.23-5.el5 (FEDORA-EPEL-2016-684ad9e4b8)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
Restore lcms support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1314898 - LCMS support broken in GraphicsMagick 1.3.23
https://bugzilla.redhat.com/show_bug.cgi?id=1314898
--------------------------------------------------------------------------------
================================================================================
check-mk-1.2.6p16-3.el5 (FEDORA-EPEL-2016-e3c5d11686)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
Make sure the /etc/nagios/auth.serials,htpasswd.users files are not overwritten
at package update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1316086 - check-mk: use %config(noreplace) for /etc/nagios/htpasswd.users
https://bugzilla.redhat.com/show_bug.cgi?id=1316086
--------------------------------------------------------------------------------
================================================================================
drupal6-ctools-1.15-1.el5 (FEDORA-EPEL-2016-fd94dc7f66)
Primarily a set of APIs and tools to improve the developer experience
--------------------------------------------------------------------------------
Update Information:
### 6.x-1.15 This is an incremental bugfix release for ctools, particularly for
newer versions of php 5. (5.4+) ctools is now in bug and security only
maintenance mode. Any future feature requests should be made in the 7.x or
preferably, the 8.x branch. #### Changes since 6.x-1.14: * \#1334894 by
mikeytown2: Warning: Invalid argument supplied for foreach() in
views_content_views_content_type_render() * \#2599688 by jansete: Strict
warning: Declaration of
views_content_plugin_display_panel_pane::options_submit() should be compatible
with views_plugin_display::options_submit(&$form, &$form_state) * Fix 'Only
variables should be passed by reference' error
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293745 - drupal6-ctools-1.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1293745
--------------------------------------------------------------------------------
================================================================================
drupal6-emfield-2.7-1.el5 (FEDORA-EPEL-2016-99a440d127)
An engine for modules to integrate various 3rd party media content providers
--------------------------------------------------------------------------------
Update Information:
### 6.x-2.7 Fixes [Embedded Media Field - Moderately Critical - Access Bypass -
DRUPAL-SA-CONTRIB-2016-004](https://www.drupal.org/node/2666446) #### Changes
since 6.x-2.6: * by dalin: Ensure that width and height are always numbers. *
\#1868588 by tangent: URL detection regex does not match hyphens / breaks HTML
markup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1306475 - drupal6-emfield-2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1306475
--------------------------------------------------------------------------------
================================================================================
drupal6-login_destination-2.13-1.el5 (FEDORA-EPEL-2016-4c1b5d8ed8)
Control where users are directed to once they login
--------------------------------------------------------------------------------
Update Information:
### 6.x-2.13 #### Changes since 6.x-2.12: NOTE: the upgrade will be seamless -
no db schema changes made ( D6 module version does not have its own db tables )
See [#2611674: Number of fixed issues - 9, feeling - priceless! 6.x version
issues
screenshot](https://www.drupal.org/node/2611674) for a screenshot with
all the bugs for D6 finally fixed! This release fixes all known bugs! NOTE2:
Added a new setting on login_destination's settings page:
"use_drupal_goto".
Here is some explanation: - turn on/off the drupal_goto invocation - OFF by
default - we need use_drupal_goto == ON, if we want to use absolute urls on
login redirect, at least until some better way is found - if we have it ON, it
will break modules like content_profile_registration from the content_profile
package. It's ok for you to leave it ON if you don't use that module. As always
test, and double test. We tried to make it as flexible as we can, giving you
control over the drupal_goto usage + sane defaults (its OFF by default).
Changes: * \#1508152 by rsvelko: add new setting: "use_drupal_goto" *
\#1793540
by stewart.adam, rsvelko: Should check if force_password_change module is
enabled when checking if redirection is valid * better function naming:
login_destination_apply_redirect -> __login_destination_should_we_redirect *
\#1577904 by rsvelko: Correct the onscreen PHP Snippet example rewrote
login_destination_redirect_to_path_and_query to make it handle array/string
queries and rawurlencode query/path only when needed settings page rearranged a
bit: move the destination fieldgroup to become first, and the condtition
fieldgroup -> second * better absolute url detection * \#1307478 by chriscohen,
rsvelko: Notice: Undefined property: stdClass::$force_password_change in
login_destination_apply_redirect() * minor edits like: better README language,
stripping CVS keywords, remove trailing whitespace
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1289080 - drupal6-login_destination-2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1289080
--------------------------------------------------------------------------------
================================================================================
drupal6-pathauto-2.1-1.el5 (FEDORA-EPEL-2016-0f49af791c)
Provides a mechanism to automatically generate aliases
--------------------------------------------------------------------------------
Update Information:
### 6.x-2.1 #### Changes since 6.x-2.0: * Fixed pathauto_alias_uniquify() did
not use pathauto_truncate_utf8(). * \#2423077 by Dave Reid, TuWebO: Fixed wrong
parameters passed to truncate_utf8() from pathauto_alias_uniquify(). *
\#1899806: Fixed URL segments with empty tokens inbetween separator resulted in
duplicated backslashes in Pathauto alias. * \#1565850: Added
hook_pathauto_pattern_alter(). Simplify invocations of pathauto_cleanstring() by
both accepting $options['langauge'] and $options['langcode']. * Bug
#973908: Fix
pathauto_cleanstring() lacks language context. * Updated
PATHAUTO_PREG_CLASS_UNICODE_WORD_BOUNDARY to match the Drupal 7 value. *
\#1003490: Renamed 'Bulk update' tab to 'Bulk generate' to better reflect
actual
functionality. * \#1574700 by jgSnell, fletchgqc: Clarified transliteration help
text means US-ASCII instead of ASCII-96. * \#2174603: Added support for an
$options['force'] parameter in pathauto_*_update_alias() callbacks that ignores
the $object->path['pathauto'] value and will always perform aliasing. *
\#1834666 by greggles: Update README.txt maintainers * \#1796920: Fixed
pathauto_action_info() did not define the required 'hooks' property for each
action. * \#1189844: Added hook_action_info() support for bulk updating nodes,
terms, and users with Views Bulk Operations. * Prevent core bug #600836
(infinite batch errors) if new entities are added while the batch processes are
running.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300492 - drupal6-pathauto-2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1300492
--------------------------------------------------------------------------------
================================================================================
lcgdm-dav-0.17.1-1.el5 (FEDORA-EPEL-2016-040c67bb9c)
HTTP/DAV front end to the DPM/LFC services
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.17.1
--------------------------------------------------------------------------------
================================================================================
lcms2-2.7-3.el5 (FEDORA-EPEL-2016-684ad9e4b8)
Color Management Engine
--------------------------------------------------------------------------------
Update Information:
Restore lcms support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1314898 - LCMS support broken in GraphicsMagick 1.3.23
https://bugzilla.redhat.com/show_bug.cgi?id=1314898
--------------------------------------------------------------------------------