The following Fedora EPEL 5 Security updates need testing:
Age URL
817
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849
sblim-sfcb-1.3.8-2.el5
460
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516
mcollective-2.8.4-1.el5
432
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6
thttpd-2.25b-24.el5
42
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ce45574ab6
libbsd-0.8.3-2.el5
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-cfdd99a20e
opus-1.0.3-2.el5
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6060d622d3
irssi-0.8.21-1.el5
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-58347aa9ad
libesmtp-1.0.4-8.el5
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-90276ab407
bitlbee-3.2.2-5.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
libidn2-0.16-1.el5
libunistring-0.9.3-5.el5
Details about builds:
================================================================================
libidn2-0.16-1.el5 (FEDORA-EPEL-2017-176d4a4d76)
Library to support IDNA2008 internationalized domain names
--------------------------------------------------------------------------------
Update Information:
Libidn2 0.16 (released 2017-01-16) ================================== *
build: Fix idn2_cmd.h build rule * API and ABI is backwards compatible with
the previous version Libidn2 0.15 (released 2017-01-14)
================================== * Fix out-of-bounds read * Fix NFC input
conversion (regression) * Shrink TR46 static mapping data * API and ABI is
backwards compatible with the previous version Libidn2 0.14 (released
2016-12-30) ================================== * build: Fix gentr46map build
* API and ABI is backwards compatible with the previous version Libidn2 0.13
(released 2016-12-29) ================================== * build: Doesn't
download external files during build * doc: Clarify license * build:
Generate ChangeLog file properly * doc: API documentation related to TR46
flags * API and ABI is backwards compatible with the previous version
Libidn2 0.12 (released 2016-12-26) ================================== * All
changes by Tim R��hsen <tim.ruehsen(a)gmx.de> except stated otherwise *
Builds/links with libunistring * Fix two possible crashes with unchecked NULL
pointers * Memleak fix, reported by Hanno B��ck <hanno(a)hboeck.de> * Binary
search for codepoints in tables * Do not taint output variable on error in
idn2_register_u8() * Do not taint output variable on error in idn2_lookup_u8()
* Update to Unicode 6.3.0 IDNA tables * Add TR46 / UTS#46 support to API and
idn2 utility * Add NFC quick check * Add make target 'check-coverage' for
test coverage report * Add tests to increase test code coverage * API and
ABI is backwards compatible with the previous version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1416642 - libidn2-0.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1416642
--------------------------------------------------------------------------------
================================================================================
libunistring-0.9.3-5.el5 (FEDORA-EPEL-2017-229fa8a597)
GNU Unicode string library
--------------------------------------------------------------------------------
Update Information:
This portable C library implements Unicode string types in three flavours:
(UTF-8, UTF-16, UTF-32), together with functions for character processing
(names, classifications, properties) and functions for string processing
(iteration, formatted output, width, word breaks, line breaks, normalization,
case folding and regular expressions).
--------------------------------------------------------------------------------