The following Fedora EPEL 5 Security updates need testing:
Age URL
511
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
26
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11418/graphite-w...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11448/perl-Crypt...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11460/python-pyr...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11542/glpi-0.83....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11560/fail2ban-0...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11582/proftpd-1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
etckeeper-1.9-1.el5
pcp-3.8.4-1.el5
proftpd-1.3.3g-3.el5
testdisk-6.14-1.el5
Details about builds:
================================================================================
etckeeper-1.9-1.el5 (FEDORA-EPEL-2013-11584)
Store /etc in a SCM system (git, mercurial, bzr or darcs)
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. From the upstream changelog:
* Fix git update-ignore syntax. Closes: #721873
* Avoid listing .gitignored files in .etckeeper file. Closes: #607665 Thanks, Zdenek
Crha
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 12 2013 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.9-1
- Update to 1.9.
--------------------------------------------------------------------------------
================================================================================
pcp-3.8.4-1.el5 (FEDORA-EPEL-2013-11574)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Update to latest community sources
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 15 2013 Nathan Scott <nathans(a)redhat.com> - 3.8.4-1
- Very minor release containing mostly QA related changes.
- Enables many more metrics to be logged for Linux hosts.
* Wed Sep 11 2013 Stan Cox <scox(a)redhat.com> - 3.8.3-2
- Disable pmcd.stp on el5 ppc.
* Mon Sep 9 2013 Nathan Scott <nathans(a)redhat.com> - 3.8.3-1
- Default to Unix domain socket (authenticated) local connections.
- Introduces new pcp-pmda-infiniband sub-package.
- Disable systemtap-sdt-devel usage on ppc.
* Sat Aug 3 2013 Petr Pisar <ppisar(a)redhat.com> - 3.8.2-1.1
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.3g-3.el5 (FEDORA-EPEL-2013-11582)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This update addresses an issue with mod_sftp and mod_sftp_pam in which a malicious client
could cause the server to make extremely large memory requests and potentially crash.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 14 2013 Paul Howarth <paul(a)city-fan.org> 1.3.3g-3
- Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication
(#1007678, upstream bug #3973)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1007680 - proftpd: mod_sftp/mod_sftp_pam invalid pool allocation during
kbdint authentication [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1007680
--------------------------------------------------------------------------------
================================================================================
testdisk-6.14-1.el5 (FEDORA-EPEL-2013-11581)
Tool to check and undelete partition, PhotoRec recovers lost files
--------------------------------------------------------------------------------
Update Information:
http://www.cgsecurity.org/wiki/TestDisk_6.14_Release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 15 2013 Christophe Grenier <grenier(a)cgsecurity.org> - 6.14-1
- Update to latest version
http://www.cgsecurity.org/wiki/TestDisk_6.14_Release
--------------------------------------------------------------------------------