Fedora EPEL 5 updates-testing report

The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 347  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1...
 242  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2...
  47  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4....
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0711/git-1.8.1.4-2....
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0728/puppet-2.6.18-...
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0734/drupal7-views-...
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0754/boost141-1.41....
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0819/libarchive-2.8...
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0837/drupal7-rules-...
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0898/drupal7-ctools...
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0897/wordpress-plug...

The following builds have been pushed to Fedora EPEL 5 updates-testing

cobbler-2.4.0-beta4.el5
    drupal7-7.22-1.el5
    drupal7-ctools-1.3-1.el5
    drupal7-features-2.0-0.2.beta2.el5
    facter-1.6.18-3.el5
    wordpress-plugin-bad-behavior-2.2.13-1.el5

Details about builds:

================================================================================
 cobbler-2.4.0-beta4.el5 (FEDORA-EPEL-2013-0913)
 Boot server configurator
--------------------------------------------------------------------------------
Update Information:

New upstream release
New upstream release
New release
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr  3 2013 James Cammarata  2.4.0-beta4
- 2.4.0-beta4 release
* Wed Feb 13 2013 Fedora Release Engineering  - 2.4.0-beta3.2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Tue Jan  8 2013 Remi Collet   2.4.0-beta3.1
- fix configuration for httpd 2.4, #871383
- own /usr/share/cobbler
* Wed Dec 12 2012 James Cammarata  2.4.0-beta3
- New release 2.4.0-beta3
* Thu Oct 11 2012 James Cammarata  2.4.0-beta2
- Modified spec version/release to be 2.4.0-beta2 ([e-mail])
- fixing up a bad commit merge ([e-mail])
* Thu Oct 11 2012 James Cammarata  2.4.0-beta1
- Beta Release 1 of 2.4.0
- BUGFIX - Issue #329 - Systems no longer allow an add with an image for a
  parent ([e-mail])
- BUGFIX - Issue #327 - revert 5afcff7 and fix in a more sane way
  ([e-mail])
- Removed some duplicates created by reapplying a patch ([e-mail])
- BUGFIX - Issue #267 - old python-virtinst does not support --boot
  ([e-mail])
- Revise install_post_puppet.py to use newer puppet syntax
  ([e-mail])
- Get rid of deprecated Puppet syntax so that cobbler works with Puppet 3.0
  ([e-mail])
- Added ubuntu to dist check for named.conf location
  ([e-mail])
- Expanded automatic determination of tftpboot path, isc dhcp and bind service
  names and config files based on distro. ([e-mail])
- Make the service name for DHCP and DNS restarts configurable for better
  portable between distros. ([e-mail])
- Serial based on formatted date and revision number ([e-mail])
- Correct undefined variable name ([e-mail])
- fix merge Issue #252 BUGFIX and #262 ([e-mail])
- Add check for valid driver_type before executing qemu-img ([e-mail])
- fix mistake remove import. ([e-mail])
- move exec method to utils.py, and catch unexpected exception.
  ([e-mail])
- not check driver type on create method. ([e-mail])
- BUGFIX - Issue #305 - Incorrect Kickstart file when gPXE enabled
  ([e-mail])
- BUGFIX - Issue #304 - Cobbler does not store values correctly for ksmeta
  Objects were getting flattened improperly, so it was losing escapes/quoting
  for values with spaces ([e-mail])
- add vmdk and raw file create support. ([e-mail])
- BUGFIX - Issue #267 - old python-virtinst does not support --boot
  ([e-mail])
- Modified spec version/release to be 2.4.0-beta-1 ([e-mail])
- Initial commit for mysql backend support ([e-mail])
- BUGFIX - Issue #277 - move webroot to /srv/www for debian/ubuntu
  ([e-mail])
- FEATURE - adding 'zonetype' variable for DNS zone rendering ([e-mail])
- BUGFIX - Issue #278 - cobbler import fails for ubuntu images due to rsync
  args ([e-mail])
- BUGFIX - Issue #285 - update cobbler man page for incorrect options
  ([e-mail])
- BUGFIX - Issue #241 - adding distro with blank name via XMLRPC should not
  work ([e-mail])
- BUGFIX - Issue #272 - allow anamon to log entries when building systems based
  on profiles (no corresponding system record) ([e-mail])
- BUGFIX - Issue #252 - fuzzy match on lvs name returns a false match
  preventing LV creation ([e-mail])
- BUGFIX - Issue #287 - patch to allow templar to work without a config, which
  was breaking the tftpd.py script ([e-mail])
- add qcow2 driver type ([e-mail])
- fix koan qemu-machine-type param test. ([e-mail])
- Only cosmetic cleanup - removed commands that were commented out, added
  spaces for more clear code ([e-mail])
- Modified sample.seed to make use kickstart_start and kickstart_done snippets
  for debian. As a result the following cobbler features work for debian:   -
  prevent net boot looping   - cobbler status reflects debian installations   -
  preseed file is downloaded a nd saved on the installed system as
  /var/log/cobbler.seed Also made download_config_files_deb snippet, make use
  of late_command New post_run_deb snippet allows to execute post installation
  script. ([e-mail])
- Some changes for testing ([e-mail])
- Minor fix for urlparse on older pythons (>2.5) ([e-mail])
- FEATURE - Issue #253 - Use PEERDNS=no for DHCP interfaces when name servers
  are specified ([e-mail])
- install-tree for debian/ubuntu modified to take tree= from meta data. http,
  ftp and nfs remote tree locations supported ([e-mail])
- add support of custom logical volume name ([e-mail])
- Partial revert of 87acfc8b, and a minor change to bring the koan extra-args
  inline with the PXE args ([e-mail])
- New default preseed, and a few minor changes to make ubuntu auto install work
  better ([e-mail])
- Add support for qemu machine type to emulate (option --qemu-machine-type).
  ([e-mail])
- Modern x86 kernels have 2048 char limit and this is needed to support
  configurations with kickstart+NIC kernel params. Otherwise koan refuses to
  accept the param list. ([e-mail])
- Allow koan's -S option to work for SuSE breed. Also remove -S for breed=None,
  as I assume "Red Hat" is not a sane assumption for all Distros without a
  breed. ([e-mail])
- Only add a udev net rule for an interface if the MAC is set. This fixes
  behaviour whereby a dummy udev rule at eth0 forces the first NIC to get eth1
  post-install. ([e-mail])
- Make the domainname setting be the full eth0 DNS Name, minus the first dotted
  part (and not the FQDN). ([e-mail])
- BUGFIX - Issue #252 - fuzzy match on lvs name returns a false match
  preventing LV creation ([e-mail])
- Added back in the filesystem loader. ([e-mail])
- BUGFIX - Issue #247 - Reposync does not work from the web interface
  ([e-mail])
- BUGFIX - Issue #246 - CentOS 5.x install fence_tools to /sbin/
  ([e-mail])
- Fix post_report trigger typo ([e-mail])
- Some fixes for koan running with an old virt-install ([e-mail])
- Define pxe_menu_items variable when creating PXE files for systems
  ([e-mail])
- Refactor PXE and GRUB menu item creation into a separate function
  ([e-mail])
- django 1.4 and later have deprecated the old TEMPLATE_LOADERS and replaced
  them with a new app_directories.Loader ([e-mail])
- Add support for UEFI boot to the subnet, but not for defined systems yet.
  ([e-mail])
- Fix redhat import whitelist for Fedora 17 ([e-mail])
- Fix unittest on the case of haven't virt-install libs. ([e-mail])
- os_version for debian should be similar to ubunty for virt-install to work
  changed tree in app.py so that I can use debian mirror different from cobbler
  server ([e-mail])
- fedora 17 changed the output of ifconfig command. This will make IFNAME set
  in snippets again ([e-mail])
- remove edit for now ([e-mail])
- Fixed snippets for bonded_bridge_slave and a few other fixes for koan/web GUI
  ([e-mail])
- Initial support for bonded_bridge_slave type. TODO: modifying snippets to
  actually make it work... ([e-mail])
- The webui_sessions directory belongs only to cobbler-web
  ([e-mail])
- RPM: put cobbler*.conf files only in /etc/httpd/conf.d
  ([e-mail])
- better fix for pull request #228 ([e-mail])
- make rpms failed because the misc/ directory containing the augeas lense
  could not be found. this simple diff fixes that. ([e-mail])
- Ubuntu actually requires auto=true in kopts See
  http://serverfault.com/a/144290/39018 ([e-mail])
- Whitespace cleanup for the new openvz stuff ([e-mail])
- Remove dead code (useless imports) ([e-mail])
- BUGFIX extra-args option problems ([e-mail])
- FIX koan virt-install tests. ([e-mail])
- added debian support to prevent net boot looping ([e-mail])
- README.openvz: - added ([e-mail])
- scripts/ovz-install: - added support for "services" kickstart option -
  corrected repos and installation source processing ([e-mail])
- cobbler.spec, setup.py: - added scripts/ovz-install ([e-mail])
- koan/openvzcreate.py, scripts/ovz-install: - changes in copyright notice
  ([e-mail])
- koan/app.py: - bug in koan: size of freespace on VG expressed as float with
  comma, but need fload with point ([e-mail])
- koan/app.py: - added type "openvz" ([e-mail])
- cobbler/collection.py: - openvz containers doesn't need to boot from PXE, so
  we prevent PXE-menu creation for such profiles. ([e-mail])
- cobbler/item_profile.py, cobbler/utils.py: - added "openvz" virtualization
  type ([e-mail])
- cobbler/item_system.py: - added openvz for virt_type ([e-mail])
- [BUGFIX] template errors can hit an exception path that references an
  undefined variable ([e-mail])
- If the call to int() fails, inum has no value, thus the reference to inum in
  the except clause causes an UnboundLocalError when it tries to reference
  inum. ([e-mail])
- Add new ubuntu (alpha) version to codes.py ([e-mail])
- Not all remove current ifcfg- post_install_network_config ([e-mail])
- Update systemctl script to resolve some issues ([e-mail])
- More spec fixes ([e-mail])
- Removing replicate_use_default_rsync_options setting and setting
  replicate_rsync_options to existing rsync default.  Issue #58
  ([e-mail])
- Commit for RFE: Expose rsync options during replication.  Issue #58
  ([e-mail])
- Yet more HTML/CSS fixes, cleaning up some overly large inputs caused by other
  CSS changes ([e-mail])
- More HTML/CSS improvements for new weblayout ([e-mail])
- CSS improvements for the tabbed layout ([e-mail])
- Fix for settings edit using the new tab format ([e-mail])
- Added a cancel button to replace the reset button ([e-mail])
- Fix saving of multiselect fields ([e-mail])
- Modification to generic_edit template to use tabs for categories plus some
  miscellaneous cleanup ([e-mail])
- Adding an example line for redhat imports to the whitelist file
  ([e-mail])
- Another minor fix for suse imports - fixing up name when using --available-as
  (already done in other import modules) - allowing multiple arch imports (also
  already done in other imports) ([e-mail])
- Some fixups for suse using --available-as ([e-mail])
- Fix for import when using --available-as - currently rsyncs full remote tree,
  changing that to only import files in a white list - some modifications to
  import modules to clean some things up and make available-as work better -
  fix in utils.py for path_tail, which was not working right and appending the
  full path ([e-mail])
- Run the same sed command on the default distributed config file to ensure
  consistent indentation ([e-mail])
- Add setting to enable/disable dynamic settings changes Adding
  cobblersettings.aug to distributed files, since we need a copy that doesn't
  insert tabs Added a "cobbler check" that checks if dynamic settings is
  enabled and prints a sed command to cleanup the settings file spacing/indents
  ([e-mail])
- Change cli command "settings" to "setting" to match other commands (which are
  not plurarlized) ([e-mail])
- Removing commented-out try/except block in config.py, didn't mean to commit
  this ([e-mail])
- Fixed/improved CLI reporting for settings ([e-mail])
- Added support for validating setting type when saving Also fixed up the
  augeas stuff to save lists and hashes correctly ([e-mail])
- Fix for incorrect redirect when login times out when looking at a setting
  edit ([e-mail])
- Dynamic settings edit support for the web GUI ([e-mail])
- Added ability to write settings file via augeas ([e-mail])
- Initial support for modifying settings live Changed settings do not survive a
  reboot and revert to what's in /etc/cobbler/settings TODO:  * report --name
  show a single setting  * validate settings based on type (string, list, bool,
  etc.)  * web support for editing  * persisting settings after change
  ([e-mail])
- Branch for 2.4.0, updated spec and setup.py ([e-mail])
--------------------------------------------------------------------------------

================================================================================
 drupal7-7.22-1.el5 (FEDORA-EPEL-2013-0903)
 An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:

New maintenance release of Drupal 7. Release notes: http://drupal.org/drupal-7.22-release-notes
Add rpmmacros subpackage to simplify module packaging.
New Drupal release, http://drupal.org/drupal-7.21-release-notes.
New upstream 7.20, resolves SA-CORE-2013-002. Release notes upstream: http://drupal.org/drupal-7.20-release-notes
New Drupal release, http://drupal.org/drupal-7.21-release-notes.
New upstream 7.20, resolves SA-CORE-2013-002
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr  4 2013 Peter Borsa  - 7.22-1
- 7.22
* Thu Mar  7 2013 Peter Borsa  - 7.21-1
- 7.21
* Thu Feb 21 2013 Paul W. Frields  - 7.20-1
- 7.20, SA-CORE-2013-002 (#913403)
* Fri Jan 25 2013 Jon Ciesla  - 7.19-2
- README update for cron_key, BZ 902234.
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #923932 - Add macros to drupal7
        https://bugzilla.redhat.com/show_bug.cgi?id=923932
  [ 2 ] Bug #918902 - drupal7-7.21 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=918902
  [ 3 ] Bug #913403 - drupal7-7.20 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=913403
--------------------------------------------------------------------------------

================================================================================
 drupal7-ctools-1.3-1.el5 (FEDORA-EPEL-2013-0898)
 This suite is primarily a set of APIs and tools for other Drupal modules
--------------------------------------------------------------------------------
Update Information:

New security release.
Release notes: http://drupal.org/node/1960424
SA-CONTRIB-2013-041: http://drupal.org/node/1960406
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr  4 2013 Peter Borsa  - 1.3-1
- Upstream 1.3 release
- SA-CONTRIB-2013-041
* Wed Feb 13 2013 Fedora Release Engineering  - 1.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 drupal7-features-2.0-0.2.beta2.el5 (FEDORA-EPEL-2013-0907)
 Provides feature management for Drupal
--------------------------------------------------------------------------------
Update Information:

New upstream version, http://drupal.org/node/1956610.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr  4 2013 Peter Borsa  - 2.0-0.2.beta2
- New upstream version.
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #929393 - drupal7-features-2.0-beta2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=929393
--------------------------------------------------------------------------------

================================================================================
 facter-1.6.18-3.el5 (FEDORA-EPEL-2013-0896)
 Command and ruby library for gathering system information
--------------------------------------------------------------------------------
Update Information:

This is an upstream bugfix which resolves numerous issues.  For full details, refer to the upstream release notes:

http://projects.puppetlabs.com/projects/facter/wiki

In addition, this update applies a backported fix for the virtual fact when facter is run by a non-root user:

https://projects.puppetlabs.com/issues/19989
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr  3 2013 Todd Zullinger  - 1.6.18-3
- Avoid warnings when virt-what produces no output
* Tue Apr  2 2013 Todd Zullinger  - 1.6.18-2
- Apply upstream patch to filter virt-what warnings from virtual fact
* Mon Mar 18 2013 Todd Zullinger  - 1.6.18-1
- Update to 1.6.18
- Restart puppet in %postun (#806370)
- Require virt-what for improved KVM detection (#905592)
- Ensure man page is installed on EL < 7
* Tue Mar 12 2013 Vít Ondruch  - 1.6.17-2
- Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
* Mon Feb 25 2013 Jeroen van Meeuwen  - 1.6.17-1
- New upstream version, fixes rhbz #892734
* Wed Feb 13 2013 Fedora Release Engineering  - 1.6.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Tue Dec  4 2012 Michael Stahnke  - 1.6.16-1
- Update to 1.6.16
* Wed Nov 28 2012 Michael Stahnke  -  1.6.15-1
- Rebase to 1.6.15
- Put asc file back as Source1
* Fri Nov  9 2012 Michael Stahnke  - 1.6.13-2
- Add patch for ec2 fix
- Rebase to 1.6.14 via bz 871211
* Mon Oct 29 2012 Michael Stahnke  - 1.6.13-1
- Rebase to 1.6.13
* Thu Jul 19 2012 Fedora Release Engineering  - 1.6.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #806370 - facter should restart puppet on upgrade if it is running
        https://bugzilla.redhat.com/show_bug.cgi?id=806370
  [ 2 ] Bug #836313 - Detects SELinux as being disabled/false
        https://bugzilla.redhat.com/show_bug.cgi?id=836313
  [ 3 ] Bug #892734 - Ipaddress fact broken in F17, already fixed upstream
        https://bugzilla.redhat.com/show_bug.cgi?id=892734
  [ 4 ] Bug #905592 - virtual fact is not set correctly for KVM (including RHEV) under RHEL
        https://bugzilla.redhat.com/show_bug.cgi?id=905592
  [ 5 ] Bug #871211 - Please update facter to the latest upstream (patch included)
        https://bugzilla.redhat.com/show_bug.cgi?id=871211
--------------------------------------------------------------------------------

================================================================================
 wordpress-plugin-bad-behavior-2.2.13-1.el5 (FEDORA-EPEL-2013-0897)
 Bad Behavior plugin for WordPress
--------------------------------------------------------------------------------
Update Information:

Update to 2.2.13 - fixes security bug
--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 20 2013 Nick Bebout  - 2.2.13-1
- Upgrade to 2.2.13
* Fri Feb 15 2013 Fedora Release Engineering  - 2.0.42-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sun Jul 22 2012 Fedora Release Engineering  - 2.0.42-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering  - 2.0.42-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #848125 - CVE-2012-4271 wordpress-plugin-bad-behavior: multiple XSS flaws
        https://bugzilla.redhat.com/show_bug.cgi?id=848125
--------------------------------------------------------------------------------