The following Fedora EPEL 5 Security updates need testing:

https://admin.fedoraproject.org/updates/phpMyAdmin-2.11.11.1-1.el5 https://admin.fedoraproject.org/updates/udunits2-2.1.19-1.el5.1 https://admin.fedoraproject.org/updates/libvpx-0.9.5-2.el5 https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-1.el5

The following builds have been pushed to Fedora EPEL 5 updates-testing

jhead-2.90-2.el5 logjam-4.6.0-1.el5.1 phpMyAdmin-2.11.11.1-1.el5 python-gzipstream-1.4.3-1.el5 python-pbs-4.3.0-5.el5 python26-PyXML-0.8.4-23.el5 wxGTK-2.8.11-2.el5

Details about builds:

================================================================================ jhead-2.90-2.el5 (FEDORA-EPEL-2010-3723) Tool for displaying EXIF data embedded in JPEG images -------------------------------------------------------------------------------- Update Information:

This is an update that fixes a crash with the '-autorot' option. -------------------------------------------------------------------------------- ChangeLog:

* Tue Nov 30 2010 Adrian Reber adrian@lisas.de - 2.90-2 - added patch to fix "[abrt] jhead-2.90-1.fc14: ClearOrientation" (#655727) * Wed Aug 4 2010 Adrian Reber adrian@lisas.de - 2.90-1 - updated to 2.90 * Fri Jul 24 2009 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.87-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #655727 - [abrt] jhead-2.90-1.fc14: ClearOrientation: Process /usr/bin/jhead was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=655727 --------------------------------------------------------------------------------

================================================================================ logjam-4.6.0-1.el5.1 (FEDORA-EPEL-2010-3728) GTK2 client for LiveJournal -------------------------------------------------------------------------------- Update Information:

Update to 4.6.0 (first major point release update in years, thanks to a new upstream maintainer). Fixes many memory leaks, among other things. -------------------------------------------------------------------------------- ChangeLog:

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #648967 - few patches were updated https://bugzilla.redhat.com/show_bug.cgi?id=648967 --------------------------------------------------------------------------------

================================================================================ phpMyAdmin-2.11.11.1-1.el5 (FEDORA-EPEL-2010-3724) Web based MySQL browser written in php -------------------------------------------------------------------------------- Update Information:

Changes for 2.11.11.1 (2010-11-29)

- [security] XSS on db search, see PMASA-2010-8 - http://www.phpmyadmin.net/home_page/security/PMASA-2010-8.php - CVE-2010-4329 -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 29 2010 Robert Scheck robert@fedoraproject.org 2.11.11.1-1 - Upstream released 2.11.11.1 --------------------------------------------------------------------------------

================================================================================ python-gzipstream-1.4.3-1.el5 (FEDORA-EPEL-2010-3729) Streaming zlib (gzip) support for python -------------------------------------------------------------------------------- Update Information:

new package -------------------------------------------------------------------------------- References:

[ 1 ] Bug #657531 - Review Request: python-gzipstream - Streaming zlib (gzip) support for python https://bugzilla.redhat.com/show_bug.cgi?id=657531 --------------------------------------------------------------------------------

================================================================================ python-pbs-4.3.0-5.el5 (FEDORA-EPEL-2010-3727) PBS/Torque python module -------------------------------------------------------------------------------- Update Information:

The python-pbs package provides pbs_python and is a wrapper class for the Torque C library. With this package you now can write utilities/extensions in Python instead of C. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #631964 - Review Request: python-pbs - PBS/Torque python module https://bugzilla.redhat.com/show_bug.cgi?id=631964 --------------------------------------------------------------------------------

================================================================================ python26-PyXML-0.8.4-23.el5 (FEDORA-EPEL-2010-3725) XML libraries for python -------------------------------------------------------------------------------- Update Information:

An XML package for Python. The distribution contains a validating XML parser, an implementation of the SAX and DOM programming interfaces and an interface to the Expat parser.

python26-PyXML provides a python26 compatible version of PyXML.

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #585598 - Review Request: python26-PyXML - XML libraries for python https://bugzilla.redhat.com/show_bug.cgi?id=585598 --------------------------------------------------------------------------------

================================================================================ wxGTK-2.8.11-2.el5 (FEDORA-EPEL-2010-3730) GTK2 port of the wxWidgets GUI library -------------------------------------------------------------------------------- ChangeLog:

* Mon Nov 29 2010 Dan Horák <dan[at]danny.cz> - 2.8.11-2 - added fix for crashes during DnD (#626012) - bakefiles are included in devel subpackage (#626314) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #626012 - [abrt] filezilla-3.3.3-1.fc13: Process /usr/bin/filezilla was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=626012 --------------------------------------------------------------------------------