The following Fedora EPEL 5 Security updates need testing:

https://admin.fedoraproject.org/updates/dokuwiki-0-0.9.20110525.a.el5 https://admin.fedoraproject.org/updates/mingw32-libpng-1.2.37-2.el5 https://admin.fedoraproject.org/updates/rt3-3.6.11-1.el5 https://admin.fedoraproject.org/updates/ejabberd-2.1.8-2.el5 https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5

The following builds have been pushed to Fedora EPEL 5 updates-testing

389-admin-1.1.19-1.el5 389-ds-base-1.2.9-0.2.a2.el5 389-dsgw-1.1.7-1.el5 R-qtl-1.21.2-1.el5 etckeeper-0.55-1.el5 fetch-crl3-3.0.7-1.el5 mingw32-libpng-1.2.37-2.el5 php-voms-admin-0.6-1.el5 python-argparse-1.2.1-2.el5 python26-argparse-1.2.1-3.el5 xrootd-3.0.4-2.el5

Details about builds:

================================================================================ 389-admin-1.1.19-1.el5 (FEDORA-EPEL-2011-3662) 389 Administration Server (admin) -------------------------------------------------------------------------------- Update Information:

look for separate openldap ldif library skip rebranding current brand - add support for different skins -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 28 2011 Rich Megginson rmeggins@redhat.com - 1.1.19-1 - look for separate openldap ldif library * Tue Jun 21 2011 Rich Megginson rmeggins@redhat.com - 1.1.18-1 - skip rebranding current brand - support for skins * Fri May 13 2011 Rich Megginson rmeggins@redhat.com - 1.1.17-1 - 1.1.17 - support "in-place" upgrade and rebranding from Red Hat to 389 - many fixes for coverity issues --------------------------------------------------------------------------------

================================================================================ 389-ds-base-1.2.9-0.2.a2.el5 (FEDORA-EPEL-2011-3654) 389 Directory Server (base) -------------------------------------------------------------------------------- Update Information:

389-ds-base-1.2.9.a2 - several bug fixes - automember improvements look for separate openldap ldif library Split automember regex rules into separate entries writing Inf file shows SchemaFile = ARRAY(0xhexnum) add support for ldif files with changetype: add Auto Membership More Coverity fixes -------------------------------------------------------------------------------- ChangeLog:

* Mon Jun 27 2011 Rich Megginson rmeggins@redhat.com - 1.2.9-0.2.a2 - 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured * Thu May 26 2011 Rich Megginson rmeggins@redhat.com - 1.2.9-0.1.a1 - 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes -------------------------------------------------------------------------------- References:

[ 1 ] Bug #716980 - winsync uses old AD entry if new one not found https://bugzilla.redhat.com/show_bug.cgi?id=716980 --------------------------------------------------------------------------------

================================================================================ 389-dsgw-1.1.7-1.el5 (FEDORA-EPEL-2011-3653) 389 Directory Server Gateway (dsgw) -------------------------------------------------------------------------------- Update Information:

look for separate openldap ldif library -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 28 2011 Rich Megginson rmeggins@redhat.com - 1.1.7-1 - look for separate openldap ldif library - remove old fedora-ds cruft --------------------------------------------------------------------------------

================================================================================ R-qtl-1.21.2-1.el5 (FEDORA-EPEL-2011-3650) Tools for analyzing QTL experiments -------------------------------------------------------------------------------- Update Information:

New version from http://www.rqtl.org/ -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 29 2011 Mattias Ellert mattias.ellert@fysast.uu.se - 1.21.2-1 - New upstream release * Mon Feb 7 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.19.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ etckeeper-0.55-1.el5 (FEDORA-EPEL-2011-3660) Store /etc in a SCM system (git, mercurial, bzr or darcs) -------------------------------------------------------------------------------- Update Information:

Update to 0.55, a bugfix version. From the upstream changelog:

* Avoid being noisy in post-install after automatic yum updates. (Tuomo Soini) * Ignore FHS violating prelink.cache and openvpn-status.log. * Ignore *.LOCK files, as used by selinux policies. * Add AVOID_SPECIAL_FILE_WARNING to config file, and set it in cron job to avoid daily noise. (gulikoza)

Also, the patch to fix error propagation to yum, which makes AVOID_COMMIT_BEFORE_INSTALL work (bz 709487) has been applied upstream. -------------------------------------------------------------------------------- ChangeLog:

* Fri Jun 24 2011 Thomas Moschny thomas.moschny@gmx.de - 0.55-1 - Update to 0.55. --------------------------------------------------------------------------------

================================================================================ fetch-crl3-3.0.7-1.el5 (FEDORA-EPEL-2011-3657) Downloads Certificate Revocation Lists -------------------------------------------------------------------------------- Update Information:

Changes in 3.0.7-1 ---------------------- * CRL modofication time heuristic inadvertently modified file name templates (solves issue kindly reported by Elan Ruusamae) * Expanded representation of tokenisation characters in strings to work around bug in file(1) (rhbz#699546, works around RedHat Bugzilla 699548) -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 28 2011 Steve Traylen steve.traylen@cern.ch - 3.0.7-1 - New upstream 3.0.7 --------------------------------------------------------------------------------

================================================================================ mingw32-libpng-1.2.37-2.el5 (FEDORA-EPEL-2011-3661) MinGW Windows Libpng library -------------------------------------------------------------------------------- Update Information:

Fix for CVE-2011-2501. -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 29 2011 Richard W.M. Jones rjones@redhat.com - 1.2.37-2 - Include fix for CVE-2011-2501 (RHBZ#717510, RHBZ#717511). -------------------------------------------------------------------------------- References:

[ 1 ] Bug #717511 - CVE-2011-2501 libpng: regression of CVE-2004-0421 in 1.2.23+ [epel-5] https://bugzilla.redhat.com/show_bug.cgi?id=717511 --------------------------------------------------------------------------------

================================================================================ php-voms-admin-0.6-1.el5 (FEDORA-EPEL-2011-3601) Web based interface to control VOMS parameters written in PHP -------------------------------------------------------------------------------- Update Information:

PHP VOMS-Admin (PVA) originally implemented the same functions as the traditional JAVA-based VOMS-Admin (v.2.0.18) interface for Apache Tomcat. It was designed to be more flexible and stable, provide easy scalability and minimize resource usage. PVA is fully compatible with the vomsd mysql backend.

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #603346 - Review Request: php-voms-admin - Web based interface to control VOMS parameters written in PHP https://bugzilla.redhat.com/show_bug.cgi?id=603346 --------------------------------------------------------------------------------

================================================================================ python-argparse-1.2.1-2.el5 (FEDORA-EPEL-2011-3655) Optparse inspired command line parser for Python -------------------------------------------------------------------------------- Update Information:

* Add the LICENSE.txt file -------------------------------------------------------------------------------- ChangeLog:

* Wed Jun 29 2011 Toshio Kuratomi toshio@fedoraproject.org - 1.2.1-2 - Include LICENSE.txt file * Wed Jun 29 2011 Toshio Kuratomi toshio@fedoraproject.org - 1.2.1-1 - New compatble upstream with some bugfixes and a GPL2 vompatible license - Enable test suite --------------------------------------------------------------------------------

================================================================================ python26-argparse-1.2.1-3.el5 (FEDORA-EPEL-2011-3659) Optparse inspired command line parser for Python -------------------------------------------------------------------------------- Update Information:

python-argparse compiled for python 2.6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #717681 - Review Request: python26-argparse - Optparse inspired command line parser for Python https://bugzilla.redhat.com/show_bug.cgi?id=717681 --------------------------------------------------------------------------------

================================================================================ xrootd-3.0.4-2.el5 (FEDORA-EPEL-2011-3666) Extended ROOT file server -------------------------------------------------------------------------------- Update Information:

Update of xrootd to version 3.0.4. For a list of new features and fixed bugs see: http://www.xrootd.org/download/ReleaseNotes.html -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 28 2011 Mattias Ellert mattias.ellert@fysast.uu.se - 1:3.0.4-2 - Add missing BuildRequires ncurses-devel * Tue Jun 28 2011 Mattias Ellert mattias.ellert@fysast.uu.se - 1:3.0.4-1.1 - Remove xrootdfs man page on EPEL 4 * Mon Jun 27 2011 Mattias Ellert mattias.ellert@fysast.uu.se - 1:3.0.4-1 - Update to version 3.0.4 - Drop patches fixed upstream: xrootd-man.patch, xrootd-rhel5-no-atomic.patch - Drop the remaining man-pages copied from root - now provided by upstream * Fri Jun 17 2011 Marcela Mašláňová mmaslano@redhat.com - 1:3.0.3-3 - Perl mass rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #716843 - RFE: Please update to 3.0.4 https://bugzilla.redhat.com/show_bug.cgi?id=716843 --------------------------------------------------------------------------------