The following Fedora EPEL 5 Security updates need testing: Age URL 511 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 26 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61-21... 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11418/graphite-web-... 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11448/perl-Crypt-DS... 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11460/python-pyrad-... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11542/glpi-0.83.9.1... 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11560/fail2ban-0.8.... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11582/proftpd-1.3.3...

The following builds have been pushed to Fedora EPEL 5 updates-testing

etckeeper-1.9-1.el5 pcp-3.8.4-1.el5 proftpd-1.3.3g-3.el5 testdisk-6.14-1.el5

Details about builds:

================================================================================ etckeeper-1.9-1.el5 (FEDORA-EPEL-2013-11584) Store /etc in a SCM system (git, mercurial, bzr or darcs) -------------------------------------------------------------------------------- Update Information:

Update to the latest stable release. From the upstream changelog:

* Fix git update-ignore syntax. Closes: #721873 * Avoid listing .gitignored files in .etckeeper file. Closes: #607665 Thanks, Zdenek Crha -------------------------------------------------------------------------------- ChangeLog:

* Thu Sep 12 2013 Thomas Moschny thomas.moschny@gmx.de - 1.9-1 - Update to 1.9. --------------------------------------------------------------------------------

================================================================================ pcp-3.8.4-1.el5 (FEDORA-EPEL-2013-11574) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information:

Update to latest community sources -------------------------------------------------------------------------------- ChangeLog:

* Sun Sep 15 2013 Nathan Scott nathans@redhat.com - 3.8.4-1 - Very minor release containing mostly QA related changes. - Enables many more metrics to be logged for Linux hosts. * Wed Sep 11 2013 Stan Cox scox@redhat.com - 3.8.3-2 - Disable pmcd.stp on el5 ppc. * Mon Sep 9 2013 Nathan Scott nathans@redhat.com - 3.8.3-1 - Default to Unix domain socket (authenticated) local connections. - Introduces new pcp-pmda-infiniband sub-package. - Disable systemtap-sdt-devel usage on ppc. * Sat Aug 3 2013 Petr Pisar ppisar@redhat.com - 3.8.2-1.1 - Perl 5.18 rebuild --------------------------------------------------------------------------------

================================================================================ proftpd-1.3.3g-3.el5 (FEDORA-EPEL-2013-11582) Flexible, stable and highly-configurable FTP server -------------------------------------------------------------------------------- Update Information:

This update addresses an issue with mod_sftp and mod_sftp_pam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. -------------------------------------------------------------------------------- ChangeLog:

* Sat Sep 14 2013 Paul Howarth paul@city-fan.org 1.3.3g-3 - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication (#1007678, upstream bug #3973) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1007680 - proftpd: mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1007680 --------------------------------------------------------------------------------

================================================================================ testdisk-6.14-1.el5 (FEDORA-EPEL-2013-11581) Tool to check and undelete partition, PhotoRec recovers lost files -------------------------------------------------------------------------------- Update Information:

http://www.cgsecurity.org/wiki/TestDisk_6.14_Release -------------------------------------------------------------------------------- ChangeLog:

* Sun Sep 15 2013 Christophe Grenier grenier@cgsecurity.org - 6.14-1 - Update to latest version http://www.cgsecurity.org/wiki/TestDisk_6.14_Release --------------------------------------------------------------------------------