[EPEL-devel] Fedora EPEL 5 updates-testing report

[updates at fedoraproject.org]

The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 914  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
 368  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.20.12-1.el5
 133  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-1.el5
  29  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1.2.4p5-1.el5
  28  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2853/mediawiki119-1.19.18-1.el5
  13  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3206/phpMyAdmin4-4.0.10.4-1.el5
   9  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3333/catdoc-0.94.2-10.el5
   5  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3455/drupal7-7.32-1.el5
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3549/rubygem-actionpack-2.3.18-1.el5,rubygem-activerecord-2.3.18-1.el5,rubygem-activesupport-2.3.18-1.el5
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3554/rubygem-rails-2.3.18-1.el5,rubygem-actionmailer-2.3.18-1.el5,rubygem-activeresource-2.3.18-1.el5
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3570/tor-0.2.4.25-1.el5


The following builds have been pushed to Fedora EPEL 5 updates-testing

    nginx-0.8.55-5.el5
    rubygem-actionmailer-2.3.18-1.el5
    rubygem-activeresource-2.3.18-1.el5
    rubygem-rails-2.3.18-1.el5
    tor-0.2.4.25-1.el5

Details about builds:


================================================================================
 nginx-0.8.55-5.el5 (FEDORA-EPEL-2014-3569)
 Robust, small and high performance HTTP and reverse proxy server
--------------------------------------------------------------------------------
Update Information:

add vim files (#1142849)
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 22 2014 Jamie Nguyen <jamielinux at fedoraproject.org> - 0.8.55-4
- add vim files (#1142849)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1142849 - [RFE] include nginx vim files
        https://bugzilla.redhat.com/show_bug.cgi?id=1142849
--------------------------------------------------------------------------------


================================================================================
 rubygem-actionmailer-2.3.18-1.el5 (FEDORA-EPEL-2014-3554)
 Service layer for easy email delivery and testing
--------------------------------------------------------------------------------
Update Information:

This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages don't have security updates, but their dependencies of activerecord, activesupport and actionpack do. 


--------------------------------------------------------------------------------


================================================================================
 rubygem-activeresource-2.3.18-1.el5 (FEDORA-EPEL-2014-3554)
 Active Record for web resources
--------------------------------------------------------------------------------
Update Information:

This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages don't have security updates, but their dependencies of activerecord, activesupport and actionpack do. 


--------------------------------------------------------------------------------


================================================================================
 rubygem-rails-2.3.18-1.el5 (FEDORA-EPEL-2014-3554)
 Web-application framework
--------------------------------------------------------------------------------
Update Information:

This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages don't have security updates, but their dependencies of activerecord, activesupport and actionpack do. 


--------------------------------------------------------------------------------


================================================================================
 tor-0.2.4.25-1.el5 (FEDORA-EPEL-2014-3570)
 Anonymizing overlay network for TCP (The onion router)
--------------------------------------------------------------------------------
Update Information:

Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 22 2014 Jamie Nguyen <jamielinux at fedoraproject.org> - 0.2.4.25-1
- update to upstream release 0.2.4.25
- reduce diff between el6 and el5
  (amend URL, amend macros, some whitespace changes for legibility)
* Wed Feb 27 2013 Jamie Nguyen <jamielinux at fedoraproject.org> - 0.2.3.25-1
- rewrite package from scratch for simplicity and clarity
- stick closer with upstream defaults
- update to latest stable release
- add defaults-torrc
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1060758 - CVE-2012-2249 tor: denial of service via a renegotiation attempt
        https://bugzilla.redhat.com/show_bug.cgi?id=1060758
  [ 2 ] Bug #1055014 - CVE-2013-7295 tor: improper random number generation on certain Intel platforms with OpenSSL 1.x
        https://bugzilla.redhat.com/show_bug.cgi?id=1055014
  [ 3 ] Bug #1060768 - CVE-2012-2250 tor: denial of service via link protocol negotiation
        https://bugzilla.redhat.com/show_bug.cgi?id=1060768
--------------------------------------------------------------------------------