The following Fedora EPEL 5 Security updates need testing:
Age URL
750
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
204
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
84
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2....
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1274/mediawiki11...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1324/python-fedo...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1378/botan-1.8.1...
The following builds have been pushed to Fedora EPEL 5 updates-testing
R-3.1.0-5.el5
botan-1.8.14-2.el5
clamav-0.98.3-1.el5
gccxml-0.9.0-0.20.20131209.git9a114c0c.el5
ssldump-0.9-0.9.b3.el5
Details about builds:
================================================================================
R-3.1.0-5.el5 (FEDORA-EPEL-2014-1389)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.1.0. This build of R no longer uses the bundled copies of blas and lapack,
which is why there is no libRblas or libRlapack anymore. This update also includes updates
for all of the dependent packages that needed to be rebuilt to reflect this change.
R 3.1.0
R 3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 7 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.1.0-5
- add blas-devel and lapack-devel as Requires for R-devel/R-core-devel
to ease rebuild pain
* Tue Apr 29 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.1.0-4
- unified spec file for all targets
* Tue Apr 29 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.1.0-3
- epel fixes
* Fri Apr 25 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.1.0-2
- fix core-devel Requires
* Mon Apr 21 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.1.0-1
- update to 3.1.0
* Mon Mar 24 2014 Brent Baude <baude(a)us.ibm.com> - 3.0.3-2
- add ppc64le support
- rhbz #1077819
* Thu Mar 20 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.0.3-1
- update to 3.0.3
- switch to java-headless
* Fri Feb 14 2014 David Tardon <dtardon(a)redhat.com> - 3.0.2-7
- rebuild for new ICU
* Sat Feb 8 2014 Ville Skyttä <ville.skytta(a)iki.fi> - 3.0.2-6
- Install macros to %{_rpmconfigdir}/macros.d where available.
- Fix rpmlint spaces vs tabs warnings.
* Fri Feb 7 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.0.2-5
- add support for system tre (f21+, rhel 7+)
* Fri Feb 7 2014 Orion Poplawski <orion(a)cora.nwra.com> - 3.0.2-4
- Use BR java
* Fri Jan 24 2014 Tom Callaway <spot(a)fedoraproject.org> - 3.0.2-3
- disable lto on non-modern targets (not just ppc)
* Fri Dec 20 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.2-2
- add --with-blas, --enable-lto to configure
* Tue Oct 15 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.2-1
- update to 3.0.2
* Mon Aug 12 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.1-4
- add support for unversioned docdir in F20+
- fix compile on arm (thanks Debian, wish you'd upstreamed that patch)
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.0.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Sat May 18 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.1-2
- conditionalize the ugly hack for fedora 19+
* Fri May 17 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.1-1
- update to 3.0.1
* Sat Apr 13 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.0-2
- add Requires: tex(inconsolata.sty) to -core-devel to fix module PDF building
* Fri Apr 5 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.0.0-1
- update to 3.0.0
* Wed Feb 27 2013 Tom Callaway <spot(a)fedoraproject.org> - 2.15.2-7
- add BuildRequires: xz-devel (for system xz/lzma support)
- create R-core-devel
* Sat Jan 26 2013 Kevin Fenzi <kevin(a)scrye.com> - 2.15.2-6
- Rebuild for new icu
* Sun Jan 20 2013 Tom Callaway <spot(a)fedoraproject.org> - 2.15.2-5
- apply upstream fix for cairo issues (bz 891983)
* Fri Jan 18 2013 Adam Tkac <atkac redhat com> - 2.15.2-4
- rebuild due to "jpeg8-ABI" feature drop
* Tue Nov 27 2012 Tom Callaway <spot(a)fedoraproject.org> - 2.15.2-3
- add Requires: tex(cm-super-ts1.enc) for R-devel
* Tue Nov 27 2012 Tom Callaway <spot(a)fedoraproject.org> - 2.15.2-2
- add additional TeX font requirements to R-devel for Fedora 18+ (due to new texlive)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1074975 - R-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1074975
--------------------------------------------------------------------------------
================================================================================
botan-1.8.14-2.el5 (FEDORA-EPEL-2014-1378)
Crypto library written in C++
--------------------------------------------------------------------------------
Update Information:
Add a patch to fix a bug in primality testing. See also
http://botan.randombit.net/relnotes/1_10_8.html.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 10 2014 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.8.14-2
- Add patch to fix prime testing.
--------------------------------------------------------------------------------
================================================================================
clamav-0.98.3-1.el5 (FEDORA-EPEL-2014-1386)
Anti-virus software
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.98.3
=============
Here are the new features and improvements in ClamAV 0.98.3:
* Support for common raw disk image formats using 512 byte sectors, specifically GPT,
APM, and MBR partitioning.
* Experimental support of OpenIOC files. ClamAV will now extract file hashes from
OpenIOC files residing in the signature database location, and generate ClamAV hash
signatures. ClamAV uses no other OpenIOC features at this time. No OpenIOC files will be
delivered through freshclam. See
openioc.org and
iocbucket.com for additional information
about OpenIOC.
* All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan, clamdtop) now support
IPV6 addresses and configuration parameters.
* Use OpenSSL file hash functions for improved performance. OpenSSL is now prerequisite
software for ClamAV 0.98.3.
* Improved detection of malware scripts within image files. Issue reported by Maarten
Broekman.
* Change to circumvent possible denial of service when processing icons within specially
crafted PE files. Icon limits are now in place with corresponding clamd and clamscan
configuration parameters. This issue was reported by Joxean Koret.
* Improvements to the fidelity of the ClamAV pattern matcher, an issue reported by
Christian Blichmann.
* Opt-in collection of statistics. Statistics collected are: sizes and MD5 hashes of
files, PE file section counts and section MD5 hashes, and names and counts of detected
viruses. Enable statistics collection with the --enable-stats clamscan flag or
StatsEnabled clamd configuration parameter.
* Improvements to ClamAV build process, unit tests, and platform support with assistance
and suggestions by Sebastian Andrzej Siewior, Scott Kitterman, and Dave Simonson.
* Patch by Arkadiusz Miskiewicz to improve error handling in freshclam.
* ClamAV 0.98.3 also includes miscellaneous bug fixes and documentation improvements.
There are also fixes for other minor issues and code quality changes. Please see the
ChangeLog file for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 9 2014 Paul Wouters <pwouters(a)redhat.com> - 0.98.3-1
- Upgrade to 0.98.3
- Fix --with-libcurl parameter to avoid automatic path detection breakage
- openssl-devel is now required for hashing code.
- Added clamsubmit to main package
- Re-enabled --with-llvm as this speeds up deployment a lot.
- Fixed older changelog dates
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1095614 - clamav-0.98.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1095614
--------------------------------------------------------------------------------
================================================================================
gccxml-0.9.0-0.20.20131209.git9a114c0c.el5 (FEDORA-EPEL-2014-1387)
XML output extension to GCC
--------------------------------------------------------------------------------
Update Information:
Add gcc 4.9 support files (copied from 4.8 for now)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 10 2014 Mattias Ellert <mattias.ellert(a)fysast.uu.se> -
0.9.0-0.20.20131209.git9a114c0c
- Copy gcc 4.8 support files for gcc 4.9
--------------------------------------------------------------------------------
================================================================================
ssldump-0.9-0.9.b3.el5 (FEDORA-EPEL-2014-1383)
An SSLv3/TLS network protocol analyzer
--------------------------------------------------------------------------------
Update Information:
- Added a patch which adds further link layer offsets
- Added patch to include traffic with(out) the 802.1Q VLAN header
- Added patch for TLSv1.1/TLSv1.2 application data decrypt support
- Added a patch to update known cipher suites according to IANA
- Added patch with new cipher suites for application data decoding
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 11 2014 Robert Scheck <robert(a)fedoraproject.org> 0.9-0.9.b3
- Added a patch which adds further link layer offsets
- Added patch to include traffic with(out) the 802.1Q VLAN header
- Added patch for TLSv1.1/TLSv1.2 application data decrypt support
- Added a patch to update known cipher suites according to IANA
- Added patch with new cipher suites for application data decoding
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9-0.8.b3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9-0.7.b3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9-0.6.b3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9-0.5.b3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------