The following Fedora EPEL 5 Security updates need testing:

https://admin.fedoraproject.org/updates/mod_fcgid-2.2-11.el5 https://admin.fedoraproject.org/updates/glpi-0.72.4-3.svn11497.el5 https://admin.fedoraproject.org/updates/gromacs-4.5.2-1.el5 https://admin.fedoraproject.org/updates/pootle-2.1.2-1.el5 https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-1.el5 https://admin.fedoraproject.org/updates/proftpd-1.3.3c-1.el5

The following builds have been pushed to Fedora EPEL 5 updates-testing

fribidi-0.19.2-2.el5 iodine-0.6.0-0.rc1.6.el5

Details about builds:

================================================================================ fribidi-0.19.2-2.el5 (FEDORA-EPEL-2010-3668) Library implementing the Unicode Bidirectional Algorithm -------------------------------------------------------------------------------- Update Information:

The fribidi Unicode bidirectional library from Fedora --------------------------------------------------------------------------------

================================================================================ iodine-0.6.0-0.rc1.6.el5 (FEDORA-EPEL-2010-3667) Solution to tunnel IPv4 data through a DNS server -------------------------------------------------------------------------------- ChangeLog:

* Tue Oct 26 2010 Pavel Alexeev Pahan@Hubbitus.info - 0.6.0-0.rc1.6 - Add -DLINUX to build options (BZ#644310, thanks to Andy Shevchenko) - Fix service scripts to find binaries in /usr/sbin instead of /usr/bin (BZ#644299 thanks to Andy Shevchenko) - Add 0600 file attributes to prevent password access from regular users (BZ#644305). - In comments configs add IODINE(D)_PASS variables description (BZ#644317). * Wed Sep 29 2010 jkeating - 0.6.0-0.rc1.4.2 - Rebuilt for gcc bug 634757 * Wed Sep 29 2010 jkeating - 0.6.0-0.rc1.4.1 - Rebuilt for gcc bug 634757 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #644305 - Password is visible to non-root users https://bugzilla.redhat.com/show_bug.cgi?id=644305 [ 2 ] Bug #644299 - mistakes in the init script and packaging make this unusable https://bugzilla.redhat.com/show_bug.cgi?id=644299 [ 3 ] Bug #644317 - [RFE] use IODINE_PASS and IODINED_PASS as a pssword holders https://bugzilla.redhat.com/show_bug.cgi?id=644317 [ 4 ] Bug #644310 - iodine is compiled wrongly, thus, totally unusable https://bugzilla.redhat.com/show_bug.cgi?id=644310 --------------------------------------------------------------------------------