The following Fedora EPEL 5 Security updates need testing:

https://admin.fedoraproject.org/updates/fontforge-20061025-3.el5 https://admin.fedoraproject.org/updates/awstats-6.95-2.el5 https://admin.fedoraproject.org/updates/collectd-4.10.2-1.el5 https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.el5 https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-1.el5

The following builds have been pushed to Fedora EPEL 5 updates-testing

389-ds-base-1.2.7.5-1.el5 collectd-4.10.2-1.el5 mingw32-nsis-2.46-1.el5 netdump-server-0.7.16-23.el5 python-lockfile-0.8-3.el5 tkimg-1.4-1.el5 xrootd-3.0.0-1.el5

Details about builds:

================================================================================ 389-ds-base-1.2.7.5-1.el5 (FEDORA-EPEL-2010-3811) 389 Directory Server (base) -------------------------------------------------------------------------------- Update Information:

1.2.7.5 release - git tag 389-ds-base-1.2.7.5 Bug 663597 - Memory leaks in normalization code -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 16 2010 Rich Megginson rmeggins@redhat.com - 1.2.7.5-1 - 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code -------------------------------------------------------------------------------- References:

[ 1 ] Bug #663597 - massive memory leak in 1.2.7.4 https://bugzilla.redhat.com/show_bug.cgi?id=663597 --------------------------------------------------------------------------------

================================================================================ collectd-4.10.2-1.el5 (FEDORA-EPEL-2010-3805) Statistics collection daemon for filling RRD files -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 16 2010 Alan Pevec apevec@redhat.com 4.10.2-1 - New upstream version 4.10.2 - http://collectd.org/news.shtml#news86 - explicitly disable/enable all plugins, fixes FTBFS bz#660936 * Thu Nov 4 2010 Alan Pevec apevec@redhat.com 4.10.1-1 - New upstream version 4.10.1 http://collectd.org/news.shtml#news85 * Sat Oct 30 2010 Richard W.M. Jones rjones@redhat.com 4.10.0-3 - Bump and rebuild for updated libnetsnmp.so. * Wed Sep 29 2010 jkeating - 4.10.0-2 - Rebuilt for gcc bug 634757 * Sun Sep 19 2010 Robert Scheck robert@fedoraproject.org 4.10.0-1 - New upstream version 4.10.0 (thanks to Mike McGrath) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #663797 - CVE-2010-4336 collectd: DoS via the RRDtool and RRDCacheD plugins https://bugzilla.redhat.com/show_bug.cgi?id=663797 --------------------------------------------------------------------------------

================================================================================ mingw32-nsis-2.46-1.el5 (FEDORA-EPEL-2010-3804) Nullsoft Scriptable Install System -------------------------------------------------------------------------------- Update Information:

This update upgrades NSIS to version 2.46 and re-enables the System plugin. -------------------------------------------------------------------------------- ChangeLog:

* Fri Dec 17 2010 Paolo Bonzini pbonzini@redhat.com - 2.46-1 - Update to 2.46 (#544675) - Make plugins not depend on libgcc_s_sjlj-1.dll (#553971) - Re-enable System.dll plugin, inline Microsoft assembler code was replaced in 2.42 (#509234) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #544675 - mingw32-nsis-2.46 is available https://bugzilla.redhat.com/show_bug.cgi?id=544675 [ 2 ] Bug #553971 - installers created with makensis don't show bitmaps https://bugzilla.redhat.com/show_bug.cgi?id=553971 [ 3 ] Bug #509234 - Please enable building System.dll plugin https://bugzilla.redhat.com/show_bug.cgi?id=509234 --------------------------------------------------------------------------------

================================================================================ netdump-server-0.7.16-23.el5 (FEDORA-EPEL-2010-3807) Server for network kernel message logging and crash dumps -------------------------------------------------------------------------------- Update Information:

Fix poor parsing of /etc/mdadm.conf that can lead to hangs -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 16 2010 Neil Horman nhorman@redhat.com - 0.7.16-23 - Fixed dumpdir specification (bz 660502) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #629003 - mkdumprd: hangs in depsolve_modlist if VirtualBox installed and initrd needs regeneration https://bugzilla.redhat.com/show_bug.cgi?id=629003 --------------------------------------------------------------------------------

================================================================================ python-lockfile-0.8-3.el5 (FEDORA-EPEL-2010-3806) A platform-independent file locking module -------------------------------------------------------------------------------- Update Information:

Use setuptools instead of distutils so we generate the egg-info metadata -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 16 2010 Luke Macken lmacken@redhat.com - 0.8-3 - Use setuptools instead of distutils so we generate the egg-info metadata --------------------------------------------------------------------------------

================================================================================ tkimg-1.4-1.el5 (FEDORA-EPEL-2010-3808) More Image Formats for Tk -------------------------------------------------------------------------------- Update Information:

Final release of tkimg 1.4 -------------------------------------------------------------------------------- ChangeLog:

* Tue Dec 14 2010 Sergio Pascual <sergiopr at fedoraproject.org> - 1.4-1 - Upstream releases 1.4 --------------------------------------------------------------------------------

================================================================================ xrootd-3.0.0-1.el5 (FEDORA-EPEL-2010-3809) Extended ROOT file server -------------------------------------------------------------------------------- Update Information:

New production version release from xrootd.org.

This version includes the FUSE (filesystem in user space) xrootd mount tool. --------------------------------------------------------------------------------