The following Fedora EPEL 5 Security updates need testing:
Age URL
874
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893
libguestfs-1.20.12-1.el5
639
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5
489
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849
sblim-sfcb-1.3.8-2.el5
131
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516
mcollective-2.8.4-1.el5
103
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6
thttpd-2.25b-24.el5
14
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-64da3a7a91
drupal6-6.38-1.el5
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f158c9e72f
drupal7-7.43-1.el5
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-085f094286
php-htmLawed-1.1.21-1.el5
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-66faa4ea19
openssl101e-1.0.1e-7.el5
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9c7ed6c982
websvn-2.3.3-12.el5
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-de8749748f
phpMyAdmin4-4.0.10.15-1.el5
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-99a440d127
drupal6-emfield-2.7-1.el5
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-71908aa997
putty-0.63-6.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
dcap-2.47.10-3.el5
globus-proxy-utils-6.14-1.el5
lcgdm-dav-0.17.1-2.el5
munin-2.0.25-10.el5
putty-0.63-6.el5
Details about builds:
================================================================================
dcap-2.47.10-3.el5 (FEDORA-EPEL-2016-d0c721b6c3)
Client Tools for dCache
--------------------------------------------------------------------------------
Update Information:
Fix broken postun scriptlet in dcap-libs.
--------------------------------------------------------------------------------
================================================================================
globus-proxy-utils-6.14-1.el5 (FEDORA-EPEL-2016-1ff7518539)
Globus Toolkit - Globus GSI Proxy Utility Programs
--------------------------------------------------------------------------------
Update Information:
Better support for checking cert names.
--------------------------------------------------------------------------------
================================================================================
lcgdm-dav-0.17.1-2.el5 (FEDORA-EPEL-2016-040c67bb9c)
HTTP/DAV front end to the DPM/LFC services
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.17.1
--------------------------------------------------------------------------------
================================================================================
munin-2.0.25-10.el5 (FEDORA-EPEL-2016-35a61415af)
Network-wide graphing framework (grapher/gatherer)
--------------------------------------------------------------------------------
Update Information:
EL5/6 do not need to install firewalld files BZ# 1315810 - postgresql plugin
default configuration (contrib) BZ# 1315990 - Please remove unnecessary
requirements for munin-node BZ# 1315951 - move /etc/tmpfiles.d/munin.conf to
/usr/lib/tmpfiles.d Remove firewalld Require and associated script. EPEL7 does
not have them. BZ# 1300379 - Please include firewalld service file for munin-
node in RPM package BZ# 1262751 - munin-common should be requires(pre) shadow-
utils package Brought forward munin-2.0.26-406c67e ---- BZ# 1262751 - munin-
common should be requires(pre) shadow-utils package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1315810 - postgresql plugin default configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1315810
[ 2 ] Bug #1315990 - Please remove unnecessary requirements for munin-node
https://bugzilla.redhat.com/show_bug.cgi?id=1315990
[ 3 ] Bug #1315951 - move /etc/tmpfiles.d/munin.conf to /usr/lib/tmpfiles.d
https://bugzilla.redhat.com/show_bug.cgi?id=1315951
[ 4 ] Bug #1300379 - Please include firewalld service file for munin-node in RPM
package
https://bugzilla.redhat.com/show_bug.cgi?id=1300379
[ 5 ] Bug #1262751 - munin-common should be requires(pre) shadow-utils package
https://bugzilla.redhat.com/show_bug.cgi?id=1262751
--------------------------------------------------------------------------------
================================================================================
putty-0.63-6.el5 (FEDORA-EPEL-2016-71908aa997)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
This is an update fixing possible buffer overflow in SCP protocol when parsing
server response (CVE-2016-2563).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1316481 - CVE-2016-2563 putty: old-style scp downloads may allow remote code
execution
https://bugzilla.redhat.com/show_bug.cgi?id=1316481
--------------------------------------------------------------------------------