Fedora EPEL 5 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Mon Mar 11 19:37:17 UTC 2013 

The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 323  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
 218  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
  24  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4.08-1.el5
  17  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0425/nginx-0.8.55-3.el5
   2  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0518/euca2ools-2.1.3-1.el5
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0609/php-Smarty-2.6.27-1.el5
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0598/firebird-2.1.5.18496.0-4.el5


The following builds have been pushed to Fedora EPEL 5 updates-testing

    dpm-xrootd-3.3.1-1.el5
    firebird-2.1.5.18496.0-4.el5
    gengetopt-2.22.5-4.el5
    nordugrid-arc-2.0.1-4.el5
    pcp-3.7.0-1.el5
    php-Smarty-2.6.27-1.el5
    php53-simplepie-1.3.1-5.el5
    root-5.28.00h-3.el5
    xrootd-3.3.1-1.el5

Details about builds:


================================================================================
 dpm-xrootd-3.3.1-1.el5 (FEDORA-EPEL-2013-0549)
 XROOT interface to the Disk Pool Manager (DPM)
--------------------------------------------------------------------------------
Update Information:

Update to xrootd 3.3.1.

http://xrootd.cern.ch/cgi-bin/cgit.cgi/xrootd/tree/docs/ReleaseNotes.txt?id=v3.3.1

--------------------------------------------------------------------------------


================================================================================
 firebird-2.1.5.18496.0-4.el5 (FEDORA-EPEL-2013-0598)
 SQL relational database management system
--------------------------------------------------------------------------------
Update Information:

fix CVE-2013-2492.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 10 2013 Philippe Makowski <makowski at fedoraproject.org>  2.1.5.18496.0-4
- added patch from upstream to fix Firebird CORE-4058 CVE-2013-2492
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #919549 - CVE-2013-2492 Firebird: CNCT info remote stack buffer overflow
        https://bugzilla.redhat.com/show_bug.cgi?id=919549
--------------------------------------------------------------------------------


================================================================================
 gengetopt-2.22.5-4.el5 (FEDORA-EPEL-2013-0597)
 Tool to write command line option parsing code for C programs
--------------------------------------------------------------------------------
Update Information:

gengetopt is a new package in EPEL 5.
--------------------------------------------------------------------------------


================================================================================
 nordugrid-arc-2.0.1-4.el5 (FEDORA-EPEL-2013-0549)
 Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:

Update to xrootd 3.3.1.

http://xrootd.cern.ch/cgi-bin/cgit.cgi/xrootd/tree/docs/ReleaseNotes.txt?id=v3.3.1

--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar  8 2013 Mattias Ellert <mattias.ellert at fysast.uu.se> - 2.0.1-4
- Rebuild for xrootd 3.3
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.0.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 pcp-3.7.0-1.el5 (FEDORA-EPEL-2013-0610)
 System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:

Upstream feature and bugfix release
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 10 2013 Nathan Scott <nathans at redhat.com> - 3.7.0-1
- Update to latest PCP sources.
- Migrate all configuration files below the /etc/pcp hierarchy.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.6.10-2.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #891688 - sar2pcp doesn't grok f17 /var/lib/sa files
        https://bugzilla.redhat.com/show_bug.cgi?id=891688
--------------------------------------------------------------------------------


================================================================================
 php-Smarty-2.6.27-1.el5 (FEDORA-EPEL-2013-0609)
 Template/Presentation Framework for PHP
--------------------------------------------------------------------------------
Update Information:

Fix for CVE-2012-4437, XSS due improper sanitization of messages within SmartyException.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 11 2013 Jon Ciesla <limburgher at gmail.com> - 2.6.27-1
- Update to 2.6.27 to fix CVE-2012-4437, BZ 920149.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #920149 - CVE-2012-4437 php-Smarty: XSS due improper sanitization of messages within SmartyException [epel-5]
        https://bugzilla.redhat.com/show_bug.cgi?id=920149
--------------------------------------------------------------------------------


================================================================================
 php53-simplepie-1.3.1-5.el5 (FEDORA-EPEL-2013-0621)
 Simple RSS Library in PHP
--------------------------------------------------------------------------------
Update Information:

SimplePie is a very fast and easy-to-use class, written in PHP, that puts the 'simple' back into 'really simple syndication'. Flexible enough to suit beginners and veterans alike, SimplePie is focused on speed, ease of use, compatibility and standards compliance.


--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #857724 - Review Request: php53-simplepie.spec - Simple RSS Library in PHP
        https://bugzilla.redhat.com/show_bug.cgi?id=857724
--------------------------------------------------------------------------------


================================================================================
 root-5.28.00h-3.el5 (FEDORA-EPEL-2013-0549)
 Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:

Update to xrootd 3.3.1.

http://xrootd.cern.ch/cgi-bin/cgit.cgi/xrootd/tree/docs/ReleaseNotes.txt?id=v3.3.1

--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar  2 2013 Mattias Ellert <mattias.ellert at fysast.uu.se> - 5.28.00h-3
- Rebuild for xrootd 3.3
- Backport gfal fixes
--------------------------------------------------------------------------------


================================================================================
 xrootd-3.3.1-1.el5 (FEDORA-EPEL-2013-0549)
 Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:

Update to xrootd 3.3.1.

http://xrootd.cern.ch/cgi-bin/cgit.cgi/xrootd/tree/docs/ReleaseNotes.txt?id=v3.3.1

--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar  6 2013 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1:3.3.1-1
- Update to version 3.3.1
- Remove the java package - no longer part of upstream sources
- Drop patches fixed upstream: xrootd-cryptoload.patch, xrootd-init.patch and
  xrootd-perl.patch
- Drop obsolete patch: xrootd-java.patch
- Add private-devel package for deprecated header files
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1:3.2.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jan 17 2013 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1:3.2.7-1
- Update to version 3.2.7
- Split libs package into libs, client-libs and server-libs
- Split devel package into devel, client-devel and server-devel
* Fri Oct 12 2012 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1:3.2.5-1
- Update to version 3.2.5
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1:3.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Wed Jul 11 2012 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1:3.2.2-1
- Update to version 3.2.2
* Mon Jun 11 2012 Petr Pisar <ppisar at redhat.com> - 1:3.2.1-2
- Perl 5.16 rebuild
* Thu May 17 2012 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1:3.2.1-1
- Update to version 3.2.1
* Sat Mar 17 2012 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1:3.1.1-1
- Update to version 3.1.1
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1:3.0.5-3
- Rebuilt for c++ ABI breakage
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1:3.0.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------

More information about the epel-devel-list mailing list