The following Fedora EPEL 5 Security updates need testing: Age URL 260 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 155 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2... 37 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13612/drupal6-ctool... 84 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13182/ssmtp-2.61-19... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13873/BackupPC-3.2.... 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0011/drupal7-contex... 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13886/php-pear-CAS-...

The following builds have been pushed to Fedora EPEL 5 updates-testing

augeas-1.0.0-1.el5 cacti-0.8.8a-5.el5 ldapdiff-1.4.1-1.el5 mozilla-https-everywhere-3.1.2-1.el5 python-httplib2-0.7.7-1.el5 spec2scl-0.3.4-1.el5

Details about builds:

================================================================================ augeas-1.0.0-1.el5 (FEDORA-EPEL-2013-0031) A library for changing configuration files -------------------------------------------------------------------------------- Update Information:

See https://github.com/hercules-team/augeas/blob/master/NEWS for details -------------------------------------------------------------------------------- ChangeLog:

* Fri Jan 4 2013 David Lutterkort lutter@redhat.com - 1.0.0-1 - New version; remove all patches --------------------------------------------------------------------------------

================================================================================ cacti-0.8.8a-5.el5 (FEDORA-EPEL-2013-0036) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information:

Remove non-free Javascript files and use a Free jQuery implementation instead. Move "README.cacti" to "README.fedora". -------------------------------------------------------------------------------- ChangeLog:

* Fri Jan 4 2013 Ken Dreyer ktdreyer@ktdreyer.com - 0.8.8a-5 - Install our README file as README.fedora * Fri Jan 4 2013 Tom Callaway spot@fedoraproject.org - 0.8.8a-4 - remove non-free treeview bits (replace with jquery future code from 0.8.9 trunk) * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.8.8a-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #888207 - Cacti included non-free Java Scripts files. https://bugzilla.redhat.com/show_bug.cgi?id=888207 --------------------------------------------------------------------------------

================================================================================ ldapdiff-1.4.1-1.el5 (FEDORA-EPEL-2013-0029) Tool for incremental LDAP directory updates based on ldif files -------------------------------------------------------------------------------- Update Information:

ldapdiff combines "diff" and "patch" functionality in one application. The difference is, that ldapdiff is not designed for use on flat ascii files, it is designed for "patching" ldap directories using ldif files. --------------------------------------------------------------------------------

================================================================================ mozilla-https-everywhere-3.1.2-1.el5 (FEDORA-EPEL-2013-0034) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information:

* Release 3.1.2, since 3.1.1 was accidentally mis-tagged * Fixes for: AmazonAWS/Datawrapper, Cachefly, Cloudfront/C-SPAN, Hetzner.de KeyDrive/Snapnames, QT, openDesktop, OpenTTD, WhiskeyMedia https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/001432.... https://trac.torproject.org/projects/tor/ticket/7608 https://trac.torproject.org/projects/tor/ticket/7567 https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/001432.... https://trac.torproject.org/projects/tor/ticket/7560 https://trac.torproject.org/projects/tor/ticket/7796 * Disable broken: FlossManuals, Pastebin, Poste.it, Ustream, TED, AusGamers https://trac.torproject.org/projects/tor/ticket/7731 https://trac.torproject.org/projects/tor/ticket/7850 https://trac.torproject.org/projects/tor/ticket/7840 https://trac.torproject.org/projects/tor/ticket/7548 * Increase Observatory deployment (65%->85%) * Update cert whitelist -------------------------------------------------------------------------------- ChangeLog:

* Thu Jan 3 2013 Russell Golden niveusluna@niveusluna.org - 3.1.2-1 - Fixes for: AmazonAWS/Datawrapper, Cachefly, Cloudfront/C-SPAN, Hetzner.de KeyDrive/Snapnames, QT, openDesktop, OpenTTD, WhiskeyMedia https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/001432.... https://trac.torproject.org/projects/tor/ticket/7608 https://trac.torproject.org/projects/tor/ticket/7567 https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/001432.... https://trac.torproject.org/projects/tor/ticket/7560 https://trac.torproject.org/projects/tor/ticket/7796 - Disable broken: FlossManuals, Pastebin, Poste.it, Ustream, TED, AusGamers https://trac.torproject.org/projects/tor/ticket/7731 https://trac.torproject.org/projects/tor/ticket/7850 https://trac.torproject.org/projects/tor/ticket/7840 https://trac.torproject.org/projects/tor/ticket/7548 - Increase Observatory deployment (65>85%) - Update cert whitelist --------------------------------------------------------------------------------

================================================================================ python-httplib2-0.7.7-1.el5 (FEDORA-EPEL-2013-0025) A comprehensive HTTP client library -------------------------------------------------------------------------------- Update Information:

Upstream update to 0.7.7 Which says:

0.7.7 More fixes for App Engine, now less likely to swallow important exceptions. Adding proxy_info_from_* methods to Python3. Reviewed in https://codereview.appspot.com/6588078/. Added GeoTrust cert Make httplib2.Http() instances pickleable. Reviewed in https://codereview.appspot.com/6506074/

The following issues have been fixed:

229 python3 httplib2 clobbers multiple headers of same key 230 Expose meaningful exception for App Engine URLFetch ResponseTooLargeError 231 Expose App Engine URLFetch DeadlineExceededError for debugging purposes

0.7.6 Fixes for App Engine 2.7. -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 2 2013 Ding-Yi Chen <dchen at redhat.com> - 0.7.7-1 - Upstream update to 0.7.7 * Sat Aug 4 2012 David Malcolm dmalcolm@redhat.com - 0.7.4-7 - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #857431 - Version 0.7.6 is available upstream https://bugzilla.redhat.com/show_bug.cgi?id=857431 --------------------------------------------------------------------------------

================================================================================ spec2scl-0.3.4-1.el5 (FEDORA-EPEL-2013-0039) Convert RPM specfiles to be SCL ready -------------------------------------------------------------------------------- Update Information:

New package for el5. --------------------------------------------------------------------------------