Fedora EPEL 5 updates-testing report
updates at fedoraproject.org
updates at fedoraproject.org
Thu Oct 8 18:05:17 UTC 2009
The following builds have been pushed to Fedora EPEL 5 updates-testing
chkrootkit-0.48-14.el5
cobbler-2.0.1-1.el5
deltarpm-3.4-8.el5.1
incron-0.5.5-2.el5
libwpg-0.1.3-4.el5.1
lua-filesystem-1.4.2-1.el5
mydns-1.2.8.27-4.el5
ncrack-0.01-0.7.ALPHA.el5
perl-XML-DOM-XPath-0.14-1.el5
postgresql-pgpool-II-2.2.5-1.el5
python-beaker-1.3.1-6.el5
python-nose-0.10.4-1.el5
python-routes-1.10.3-2.el5
python-weberror-0.10.1-1.el5
python-webhelpers-0.6.4-4.el5
python-webob-0.9.6.1-2.el5
rt3-3.6.9-1.el5
rubygem-trollop-1.15-1.el5
sblim-sfcb-1.3.4-12.el5
sblim-sfcc-2.1.0-1.el5
sdparm-1.03-4.el5
wput-0.6.1-6.el5
Details about builds:
================================================================================
chkrootkit-0.48-14.el5 (FEDORA-EPEL-2009-0597)
Tool to locally check for signs of a rootkit
--------------------------------------------------------------------------------
Update Information:
sync with rawhide
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2009 Manuel "lonely wolf" Wolfshant <wolfy at fedoraproject.org> - 0.48-14
- sync with rawhide. includes the following changes:
Wed Jul 22 2009 Jon Ciesla <limb at jcomserv.net> 0.48-13
- Additional items in chkutmp patch.
Tue Jul 21 2009 Jon Ciesla <limb at jcomserv.net> 0.48-12
- Patch to fix crash in chkutmp on x86_64.
Tue Feb 24 2009 Michael Schwendt <mschwendt at fedoraproject.org> - 0.48-11
- update .desktop file for Icon Theme Specification
- Fedora > 10: conditional BR glibc-static as needed for strings-static
Fri May 30 2008 Michael Schwendt <mschwendt at fedoraproject.org> - 0.48-8
- Let chkproc default to procps version 3.
* Wed Jul 23 2008 Manuel "lonely wolf" Wolfshant <wolfy at fedoraproject.org> - 0.48-8
- fix license tag
--------------------------------------------------------------------------------
================================================================================
cobbler-2.0.1-1.el5 (FEDORA-EPEL-2009-0583)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
Fixes various bugs discovered during testing of 2.0.0. See the mailing list for
more information.
--------------------------------------------------------------------------------
================================================================================
deltarpm-3.4-8.el5.1 (FEDORA-EPEL-2009-0586)
Create deltas between rpms
--------------------------------------------------------------------------------
Update Information:
deltarpm prior to the current build ships with a bundled copy of zlib. This
version of zlib has a known vulnerability with CVE identifier: CAN-2005-1849
This build of deltarpm patches the program to use the system zlib (which was
fixed when the vulnerability was first discovered) instead of the bundled copy.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 30 2009 Toshio Kuratomi <toshio at fedoraproject.org> - 3.4-8.1
- Build against the system zlib, not the bundled library. This remedies the
fact that the included zlib is affected by CAN-2005-1849.
- Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable
of making rsync-friendly compressed files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #526432 - deltarpm contains an own, modified copy of zlib
https://bugzilla.redhat.com/show_bug.cgi?id=526432
--------------------------------------------------------------------------------
================================================================================
incron-0.5.5-2.el5 (FEDORA-EPEL-2009-0598)
Inotify cron system
--------------------------------------------------------------------------------
Update Information:
This build contains a patch to initialize the supplementary groups of processes
that are run from user incrontabs. Without it, these processes run with the
supplementary groups from the incrond process. These groups might include the
group disk, e.g. when the incrond process was started using "service incrond
start". Then the users allowed to create a incrontab table could access raw
disk contents. There might also be other ways to exploit this vulnerability.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 1 2009 Till Maas <opensource at till.name> - 0.5.5-2
- Initialize initgroups when running user incrontabs
--------------------------------------------------------------------------------
================================================================================
libwpg-0.1.3-4.el5.1 (FEDORA-EPEL-2009-0527)
Library for reading WordPerfect Graphics images
--------------------------------------------------------------------------------
================================================================================
lua-filesystem-1.4.2-1.el5 (FEDORA-EPEL-2009-0580)
File System Library for the Lua Programming Language
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440676 - Review Request: lua-filesystem - File System Library for Lua
https://bugzilla.redhat.com/show_bug.cgi?id=440676
--------------------------------------------------------------------------------
================================================================================
mydns-1.2.8.27-4.el5 (FEDORA-EPEL-2009-0585)
A Database based DNS server
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 17 2009 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 1.2.8.27-4
- make mydns start after mysql
--------------------------------------------------------------------------------
================================================================================
ncrack-0.01-0.7.ALPHA.el5 (FEDORA-EPEL-2009-0577)
High-speed network auth cracking tool
--------------------------------------------------------------------------------
Update Information:
Initial ncrack package.
--------------------------------------------------------------------------------
================================================================================
perl-XML-DOM-XPath-0.14-1.el5 (FEDORA-EPEL-2009-0578)
Perl extension to add XPath support to XML::DOM, using XML::XPath engine
--------------------------------------------------------------------------------
================================================================================
postgresql-pgpool-II-2.2.5-1.el5 (FEDORA-EPEL-2009-0582)
Pgpool is a connection pooling/replication server for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
This version fixes various bugs in 2.2.4 or before. - Fix
connection_count_down(). It decrements the connection counter too much in some
corner cases and causes online recover never completes(Tatsuo) - Detect
frontend exiting while waiting for commands complete in other cases such as
internal locks are issued and Parse (Tatsuo) - Fix inifinit loop in
reset_backend(Xavier Noguer, Tatsuo) - Fix Parse() to print actual query when
it detects kind mismatch error(Tatsuo) See NEWS and ChangeLog for more
details.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 4 2009 Devrim Gunduz <devrim at CommandPrompt.com> 2.2.5-1
- Update to 2.2.5, for various fixes described at
http://lists.pgfoundry.org/pipermail/pgpool-general/2009-October/002188.html
- Re-apply a fix for #442372
--------------------------------------------------------------------------------
================================================================================
python-beaker-1.3.1-6.el5 (FEDORA-EPEL-2009-0604)
WSGI middleware layer to provide sessions
--------------------------------------------------------------------------------
Update Information:
Initial release of python-beaker for EL-5
--------------------------------------------------------------------------------
================================================================================
python-nose-0.10.4-1.el5 (FEDORA-EPEL-2009-0601)
A discovery-based unittest extension for Python
--------------------------------------------------------------------------------
Update Information:
Update to version 0.10.4 of nose
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2009 Luke Macken <lmacken at redhat.com> 0.10.4-1
- Update to 0.10.4
--------------------------------------------------------------------------------
================================================================================
python-routes-1.10.3-2.el5 (FEDORA-EPEL-2009-0590)
Rails-like routes for Python
--------------------------------------------------------------------------------
Update Information:
Initial release of python-routes for EL-5
--------------------------------------------------------------------------------
================================================================================
python-weberror-0.10.1-1.el5 (FEDORA-EPEL-2009-0594)
Web Error handling and exception catching middleware
--------------------------------------------------------------------------------
Update Information:
Initial release of python-weberror for EL-5
--------------------------------------------------------------------------------
================================================================================
python-webhelpers-0.6.4-4.el5 (FEDORA-EPEL-2009-0593)
Helper library for aiding the writing of web templates in Python
--------------------------------------------------------------------------------
Update Information:
Initial release of python-webhelpers for EL-5
--------------------------------------------------------------------------------
================================================================================
python-webob-0.9.6.1-2.el5 (FEDORA-EPEL-2009-0587)
WSGI request and response object
--------------------------------------------------------------------------------
Update Information:
An update to the latest stable version of WebOb, needed for Pylons. See the
WebOb news for details on specific changes:
http://pythonpaste.org/webob/news.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 14 2009 Ricky Zhou <ricky at fedoraproject.org> - 0.9.6.1-2
- Change define to global.
- Remove unnecessary BuildRequires on python-devel.
* Tue Mar 10 2009 Ricky Zhou <ricky at fedoraproject.org> - 0.9.6.1-1
- Upstream released new version.
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.9.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Tue Jan 6 2009 Luke Macken <lmacken at redhat.com> 0.9.5-1
- Update to 0.9.5
* Sat Dec 6 2008 Ricky Zhou <ricky at fedoraproject.org> 0.9.4-1
- Upstream released new version.
* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm at gmail.com> - 0.9.3-3
- Rebuild for Python 2.6
--------------------------------------------------------------------------------
================================================================================
rt3-3.6.9-1.el5 (FEDORA-EPEL-2009-0602)
Request tracker 3
--------------------------------------------------------------------------------
Update Information:
All versions of RT from 3.4.6 to 3.8.4 are vulnerable to an escaping bug in the
display of Custom Fields that could allow injection of javascript into the RT
UI. rt 3.6.9 fixes this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2009 Xavier Bachelot <xavier at bachelot.org> - 3.6.9-1
- Update to 3.6.9 [SECURITY] (BZ #526872).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #526872 - Update to rt 3.6.9
https://bugzilla.redhat.com/show_bug.cgi?id=526872
--------------------------------------------------------------------------------
================================================================================
rubygem-trollop-1.15-1.el5 (FEDORA-EPEL-2009-0600)
A command-line option parsing library for ruby
--------------------------------------------------------------------------------
Update Information:
A command-line option parsing library for ruby. Trollop is designed to provide
the maximal amount of GNU-style argument processing in the minimum number of
lines of code (for you, the programmer).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #525210 - Review Request: rubygem-trollop - A command-line option parsing library for ruby
https://bugzilla.redhat.com/show_bug.cgi?id=525210
--------------------------------------------------------------------------------
================================================================================
sblim-sfcb-1.3.4-12.el5 (FEDORA-EPEL-2009-0596)
Small Footprint CIM Broker
--------------------------------------------------------------------------------
Update Information:
Added two patches. One to handle CHARS and string differently and the other to
delete thread information to prevent crashes.
--------------------------------------------------------------------------------
================================================================================
sblim-sfcc-2.1.0-1.el5 (FEDORA-EPEL-2009-0595)
Small Footprint CIM Client Library
--------------------------------------------------------------------------------
Update Information:
Added a new patch to prevent crash during local connect because of uninitialized
structures.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2009 Praveen K Paladugu <praveen_paladugu at dell.com> - 2.1.0-1
- Added a patch to prevent crash because of uninitialized structrues.
--------------------------------------------------------------------------------
================================================================================
sdparm-1.03-4.el5 (FEDORA-EPEL-2009-0592)
List or change SCSI/SATA disk parameters
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
================================================================================
wput-0.6.1-6.el5 (FEDORA-EPEL-2009-0599)
A utility for uploading files or whole directories to remote ftp-servers
--------------------------------------------------------------------------------
More information about the epel-devel-list
mailing list