The following Fedora EPEL 5 Security updates need testing: Age URL 1152 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 607 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.... 371 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-... 221 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-1.3... 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6573/mbedtls-1.3.11...

The following builds have been pushed to Fedora EPEL 5 updates-testing

airinv-1.00.1-1.el5 airtsp-1.01.2-1.el5 pcp-3.10.5-1.el5 rmol-1.00.1-1.el5 sevmgr-1.00.2-1.el5 trademgen-1.00.1-1.el5 udt-4.11-6.el5 xrdp-0.6.1-3.el5

Details about builds:

================================================================================ airinv-1.00.1-1.el5 (FEDORA-EPEL-2015-6704) C++ Simulated Airline Inventory Management System library -------------------------------------------------------------------------------- Update Information:

Travel Market Simulator -------------------------------------------------------------------------------- ChangeLog:

* Sun Jun 14 2015 Denis Arnaud denis.arnaud_fedora@m4x.org - 1.00.1-1 - Removed the dependency on ZeroMQ (only AirInv is dependent on it, not StdAir) --------------------------------------------------------------------------------

================================================================================ airtsp-1.01.2-1.el5 (FEDORA-EPEL-2015-6738) C++ Simulated Airline Travel Solution Provider Library -------------------------------------------------------------------------------- Update Information:

Travel Market Simulator -------------------------------------------------------------------------------- References:

[ 1 ] Bug #972431 - Rename Request: airtsp - C++ Simulated Airline Travel Solution Provider Library https://bugzilla.redhat.com/show_bug.cgi?id=972431 --------------------------------------------------------------------------------

================================================================================ pcp-3.10.5-1.el5 (FEDORA-EPEL-2015-6718) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information:

Most notable change is the packaging split, but there are also a lot of other new features and bug fixes; see CHANGELOG for details. -------------------------------------------------------------------------------- ChangeLog:

* Mon Jun 15 2015 Mark Goodwin mgoodwin@redhat.com - 3.10.5-1 - Provide and use non-exit(1)ing pmGetConfig(3) variant (BZ 1187588) - Resolve a pmdaproc.sh pmlogger restart regression (BZ 1229458) - Replacement of pmatop/pcp-atop(1) utility (BZ 1160811, BZ 1018575) - Reduced installation size for minimal applications (BZ 1182184) - Ensure pmlogger start scripts wait on pmcd startup (BZ 1185760) - Need to run pmcd at least once before pmval -L will work (BZ 185749) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1187588 - PM_CONTEXT_LOCAL crashes process when /etc/pcp.conf is unreadable https://bugzilla.redhat.com/show_bug.cgi?id=1187588 [ 2 ] Bug #1229458 - pmda Install should not start pmlogger https://bugzilla.redhat.com/show_bug.cgi?id=1229458 [ 3 ] Bug #1018575 - pmatop exceptions need better catching https://bugzilla.redhat.com/show_bug.cgi?id=1018575 [ 4 ] Bug #1182184 - reduced installation footprint for minimal pcp applications https://bugzilla.redhat.com/show_bug.cgi?id=1182184 [ 5 ] Bug #1185760 - Default pmlogger config depends on pmcd but doesn't ensure it is running https://bugzilla.redhat.com/show_bug.cgi?id=1185760 [ 6 ] Bug #185749 - Package Updater can't resolve dependencies https://bugzilla.redhat.com/show_bug.cgi?id=185749 --------------------------------------------------------------------------------

================================================================================ rmol-1.00.1-1.el5 (FEDORA-EPEL-2015-6692) C++ library of Revenue Management and Optimisation classes and functions -------------------------------------------------------------------------------- Update Information:

Travel Market Simulator -------------------------------------------------------------------------------- ChangeLog:

* Sun Jun 14 2015 Denis Arnaud denis.arnaud_fedora@m4x.org - 1.00.1-1 - Removed the dependency on ZeroMQ (only AirInv is dependent on it, not StdAir) --------------------------------------------------------------------------------

================================================================================ sevmgr-1.00.2-1.el5 (FEDORA-EPEL-2015-6748) C++ Simulation-Oriented Discrete Event Management Library -------------------------------------------------------------------------------- Update Information:

Travel Market Simulator -------------------------------------------------------------------------------- ChangeLog:

* Sun Jun 14 2015 Denis Arnaud denis.arnaud_fedora@m4x.org - 1.00.2-1 - Removed the dependency on ZeroMQ (only AirInv is dependent on it, not SEvMgr) --------------------------------------------------------------------------------

================================================================================ trademgen-1.00.1-1.el5 (FEDORA-EPEL-2015-6716) C++ Simulated Travel Demand Generation Library -------------------------------------------------------------------------------- Update Information:

Travel Market Simulator -------------------------------------------------------------------------------- ChangeLog:

* Sun Jun 7 2015 Denis Arnaud denis.arnaud_fedora@m4x.org - 1.00.1-1 - Removed the dependency on ZeroMQ (only AirInv is dependent on it, not StdAir) * Wed May 22 2013 Denis Arnaud denis.arnaud_fedora@m4x.org - 1.00.0-2 - Rebuild for Soci-3.2.1 --------------------------------------------------------------------------------

================================================================================ udt-4.11-6.el5 (FEDORA-EPEL-2015-6700) UDP based Data Transfer Protocol -------------------------------------------------------------------------------- Update Information:

Include more headers in devel package -------------------------------------------------------------------------------- ChangeLog:

* Tue Jun 16 2015 Mattias Ellert mattias.ellert@fysast.uu.se - 4.11-6 - Include more headers in devel package - Adapt to new license packaging guidelines * Sat May 2 2015 Kalev Lember kalevlember@gmail.com - 4.11-5 - Rebuilt for GCC 5 C++11 ABI change -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1227660 - Missing includefiles https://bugzilla.redhat.com/show_bug.cgi?id=1227660 --------------------------------------------------------------------------------

================================================================================ xrdp-0.6.1-3.el5 (FEDORA-EPEL-2015-6694) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information:

Default sesman.ini file passes -ac to X server. Remove this parameter: insecure. -------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 4 2015 Bojan Smojver bojan@rexursive.com - 0.6.1-3 - remove -ac from X server calls: bug #1105202 - put other sesman.ini changes into a patch -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1105202 - Insecure setting in the default VNC configuration https://bugzilla.redhat.com/show_bug.cgi?id=1105202 --------------------------------------------------------------------------------