The following Fedora EPEL 5 Security updates need testing:
Age URL
1152
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
607
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
371
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
221
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6573/mbedtls-1.3...
The following builds have been pushed to Fedora EPEL 5 updates-testing
airinv-1.00.1-1.el5
airtsp-1.01.2-1.el5
pcp-3.10.5-1.el5
rmol-1.00.1-1.el5
sevmgr-1.00.2-1.el5
trademgen-1.00.1-1.el5
udt-4.11-6.el5
xrdp-0.6.1-3.el5
Details about builds:
================================================================================
airinv-1.00.1-1.el5 (FEDORA-EPEL-2015-6704)
C++ Simulated Airline Inventory Management System library
--------------------------------------------------------------------------------
Update Information:
Travel Market Simulator
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 14 2015 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.1-1
- Removed the dependency on ZeroMQ (only AirInv is dependent on it, not StdAir)
--------------------------------------------------------------------------------
================================================================================
airtsp-1.01.2-1.el5 (FEDORA-EPEL-2015-6738)
C++ Simulated Airline Travel Solution Provider Library
--------------------------------------------------------------------------------
Update Information:
Travel Market Simulator
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #972431 - Rename Request: airtsp - C++ Simulated Airline Travel Solution
Provider Library
https://bugzilla.redhat.com/show_bug.cgi?id=972431
--------------------------------------------------------------------------------
================================================================================
pcp-3.10.5-1.el5 (FEDORA-EPEL-2015-6718)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Most notable change is the packaging split, but there are also a lot of other new features
and bug fixes; see CHANGELOG for details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 15 2015 Mark Goodwin <mgoodwin(a)redhat.com> - 3.10.5-1
- Provide and use non-exit(1)ing pmGetConfig(3) variant (BZ 1187588)
- Resolve a pmdaproc.sh pmlogger restart regression (BZ 1229458)
- Replacement of pmatop/pcp-atop(1) utility (BZ 1160811, BZ 1018575)
- Reduced installation size for minimal applications (BZ 1182184)
- Ensure pmlogger start scripts wait on pmcd startup (BZ 1185760)
- Need to run pmcd at least once before pmval -L will work (BZ 185749)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1187588 - PM_CONTEXT_LOCAL crashes process when /etc/pcp.conf is unreadable
https://bugzilla.redhat.com/show_bug.cgi?id=1187588
[ 2 ] Bug #1229458 - pmda Install should not start pmlogger
https://bugzilla.redhat.com/show_bug.cgi?id=1229458
[ 3 ] Bug #1018575 - pmatop exceptions need better catching
https://bugzilla.redhat.com/show_bug.cgi?id=1018575
[ 4 ] Bug #1182184 - reduced installation footprint for minimal pcp applications
https://bugzilla.redhat.com/show_bug.cgi?id=1182184
[ 5 ] Bug #1185760 - Default pmlogger config depends on pmcd but doesn't ensure it
is running
https://bugzilla.redhat.com/show_bug.cgi?id=1185760
[ 6 ] Bug #185749 - Package Updater can't resolve dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=185749
--------------------------------------------------------------------------------
================================================================================
rmol-1.00.1-1.el5 (FEDORA-EPEL-2015-6692)
C++ library of Revenue Management and Optimisation classes and functions
--------------------------------------------------------------------------------
Update Information:
Travel Market Simulator
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 14 2015 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.1-1
- Removed the dependency on ZeroMQ (only AirInv is dependent on it, not StdAir)
--------------------------------------------------------------------------------
================================================================================
sevmgr-1.00.2-1.el5 (FEDORA-EPEL-2015-6748)
C++ Simulation-Oriented Discrete Event Management Library
--------------------------------------------------------------------------------
Update Information:
Travel Market Simulator
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 14 2015 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.2-1
- Removed the dependency on ZeroMQ (only AirInv is dependent on it, not SEvMgr)
--------------------------------------------------------------------------------
================================================================================
trademgen-1.00.1-1.el5 (FEDORA-EPEL-2015-6716)
C++ Simulated Travel Demand Generation Library
--------------------------------------------------------------------------------
Update Information:
Travel Market Simulator
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 7 2015 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.1-1
- Removed the dependency on ZeroMQ (only AirInv is dependent on it, not StdAir)
* Wed May 22 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-2
- Rebuild for Soci-3.2.1
--------------------------------------------------------------------------------
================================================================================
udt-4.11-6.el5 (FEDORA-EPEL-2015-6700)
UDP based Data Transfer Protocol
--------------------------------------------------------------------------------
Update Information:
Include more headers in devel package
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 16 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 4.11-6
- Include more headers in devel package
- Adapt to new license packaging guidelines
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 4.11-5
- Rebuilt for GCC 5 C++11 ABI change
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1227660 - Missing includefiles
https://bugzilla.redhat.com/show_bug.cgi?id=1227660
--------------------------------------------------------------------------------
================================================================================
xrdp-0.6.1-3.el5 (FEDORA-EPEL-2015-6694)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Default sesman.ini file passes -ac to X server. Remove this parameter: insecure.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 4 2015 Bojan Smojver <bojan(a)rexursive.com> - 0.6.1-3
- remove -ac from X server calls: bug #1105202
- put other sesman.ini changes into a patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1105202 - Insecure setting in the default VNC configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1105202
--------------------------------------------------------------------------------