EPEL Fedora 5 updates-testing report

[updates at fedoraproject.org]

The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 680  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
 171  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11560/fail2ban-0.8.10-4.el5
 135  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.20.12-1.el5
 110  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12091/bip-0.8.9-1.el5
 100  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12169/gc-7.1-6.el5
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2.0-1.el5
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0542/drupal6-ctools-1.11-1.el5
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0541/drupal7-ctools-1.4-1.el5
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0533/drupal6-filefield-3.12-1.el5
  15  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0572/drupal6-image_resize_filter-1.14-1.el5
   9  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0645/easy-rsa-2.2.2-1.el5
   2  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0702/mod_auth_shadow-2.3-2.el5


The following builds have been pushed to Fedora EPEL 5 updates-testing

    gfal2-python-1.4.1-1.el5
    mediawiki119-1.19.12-2.el5
    root-5.34.17-1.el5

Details about builds:


================================================================================
 gfal2-python-1.4.1-1.el5 (FEDORA-EPEL-2014-0725)
 Python bindings for gfal 2.0
--------------------------------------------------------------------------------
Update Information:

Release 1.4.1 of gfal2 python bindings, see RELEASE-NOTES for details
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 28 2014 Adrien Devresse <adevress at cern.ch> - 1.4.1-1
- Release 1.4.1 of gfal2 python bindings, see RELEASE-NOTES for details
* Sat Nov 16 2013 Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-2
- Install docs to %{_pkgdocdir} where available (#993774).
- Own doc dirs.
--------------------------------------------------------------------------------


================================================================================
 mediawiki119-1.19.12-2.el5 (FEDORA-EPEL-2014-0726)
 A wiki engine
--------------------------------------------------------------------------------
Update Information:

Fix permissions on cache and images directories.
Update to 1.19.12
Update to 1.19.12
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar  3 2014 Patrick Uiterwijk (LOCAL) <puiterwijk at redhat.com> - 1.19.12-2
- Fix directory permissions
* Fri Feb 28 2014 Patrick Uiterwijk (LOCAL) <puiterwijk at redhat.com> - 1.19.12-1
- Update to 1.19.12
- (bug 60771) SECURITY: Disallow uploading SVG files using non-whitelisted namespaces. Also disallow iframe elements. User will get an error including the namespace name if they use a non- whitelisted namespace.
- (bug 61346) SECURITY: Make token comparison use constant time. It seems like our token comparison would be vulnerable to timing attacks. This will take constant time.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1062131 - Unable to open CDB file for write
        https://bugzilla.redhat.com/show_bug.cgi?id=1062131
--------------------------------------------------------------------------------


================================================================================
 root-5.34.17-1.el5 (FEDORA-EPEL-2014-0733)
 Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:

ROOT 5.34.17

http://root.cern.ch/drupal/content/root-version-v5-34-00-patch-release-notes

--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 26 2014 Mattias Ellert <mattias.ellert at fysast.uu.se> - 5.34.17-1
- Update to 5.34.17
--------------------------------------------------------------------------------