The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6072/lighttpd-1.4.31-1.el5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6026/nut-2.2.2-3.el5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5958/socat-1.7.2.1-1.el5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5973/python-crypto-2.0.1-5.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
cobbler-2.2.3-1.el5
duply-1.5.6-1.el5
latex2rtf-2.2.0-2.el5
lighttpd-1.4.31-1.el5
since-1.1-5.el5
Details about builds:
================================================================================
cobbler-2.2.3-1.el5 (FEDORA-EPEL-2012-6076)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
New upstream release - 2.2.3-1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 5 2012 James Cammarata <[email protected]> 2.2.3-1
- [BUGFIX] add dns to kernel commandline when using static interface
([email protected])
- [BUGFIX] issue #196 - repo environment variables bleed into other repos
during sync process This patch has reposync cleanup/restore any environment
variables that were changed during the process ([email protected])
- BUGFIX quick dirty fix to work around an issue where cobbler would not log in
ldap
usernames which contain uppercase characters. at line 60 instead of "if user
in data", "if user.lower() in data" is used. It would appear the parser puts
the usernames in data[] in lowercase, and the comparison fails because "user"
does hold capitalizations. ([email protected])
- [BUGFIX] simplify SELinux check reporting
* Remove calls to semanage, policy prevents apps from running that directly
(and speeds up check immensely)
* Point users at a wiki page which will contain details on ensuring cobbler
works with SELinux properly ([email protected])
- [BUGFIX] issue #117 - incorrect permissions on files in /var/lib/cobbler
([email protected])
- [BUGFIX] issue #183 - update objects mgmt classes field when a mgmt class is
renamed ([email protected])
- [BUGFIX] adding some untracked directories and the new augeas lense to the
setup.py and cobbler.spec files ([email protected])
- [FEATURE] Added ability to disable grubby --copy-default behavior for distros
that may
have problems with it ([email protected])
- [SECURITY] Major changes to power commands:
* Fence options are now based on /usr/sbin/fence_* - so basically anything
the
fence agents package provides.
* Templates will now be sourced from
/etc/cobbler/power/fence_<powertype>.template.
These templates are optional, and are only required if you want to do extra
options for a given command. - All options for the fence agent command are
sent
over STDIN.
* Support for ipmitool is gone, use fence_ipmilan instead (which uses
ipmitool
under the hood anyway). This may apply to other power types if they were
provided
by a fence_ command.
* Modified labels for the power options to be more descriptive.
([email protected])
- [BUGFIX] issue #136 - don't allow invalid characters in names when copying
objects ([email protected])
- [BUGFIX] issue #168 - change input_string_or_list to use shlex for split This
function was using a regular string split, which did not allow quoted or
escaped strings to be preserved. ([email protected])
- [BUGFIX] Correct method to process the template file. This Fixes the previous
issue
and process the template. ([email protected])
- [BUGFIX] issue #170 - koan now checks length of drivers list before indexing
([email protected])
- [BUGFIX] Issue #153 - distro delete doesn't remove link from
/var/www/cobbler/links Link was being created incorrectly during the import
([email protected])
- [FEATURE] snippets: save/restore boot-device on ppc64 on fedora17
([email protected])
- [BUGFIX] Fixed typo in pre_anamon ([email protected])
- [BUGFIX] Added use of $http_port to server URL in pre_anamon and post_anamon
([email protected])
- [BUGFIX] Fixed dnsmasq issue regarding missing dhcp-host entries
([email protected])
- [BUGFIX] in buildiso for RedHat based systems. The interface->ip resolution
was
broken when ksdevice=bootif (default) ([email protected])
- [BUGFIX] rename failed for distros that did not live under ks_mirror
([email protected])
- [BUGFIX] Partial revert of commit 3c81dd3081 - incorrectly removed the
'extends'
template directive, breaking rendering in django ([email protected])
- [BUGFIX] Reverting commit 1d6c53a97, which was breaking spacewalk Changed the
web
interface stuff to use the existing extended_version() remote call
([email protected])
- [BUGFIX] Minor fix for serializer_pretty_json change, setting indent to 0 was
still
causing more formatted JSON to be output ([email protected])
- [SECURITY] Adding PrivateTmp=yes to the cobblerd.service file for systemd
([email protected])
- [FEATURE] add a config option to enable pretty JSON output (disabled by
default)
([email protected])
- [BUGFIX] issue #107 - creating xendomains link for autoboot fails Changing an
exception to a printed warning, there's no need to completely bomb out on the
process for this ([email protected])
- [BUGFIX] issue #28 - Cobbler drops errors on the floor during a replicate
Added additional logging to add_ functions to report an error if the add_item
call returns False ([email protected])
- [BUGFIX] add requirement for python-simplejson to koan's package
([email protected])
- [BUGFIX] action_sync: fix sync_dhcp remote calls ([email protected])
- [BUGFIX] Add support for KVM paravirt ([email protected])
- [BUGFIX] Makefile updates for debian/ubuntu systems ([email protected])
- [BUGFIX] fix infinite netboot cycle with ppc64 systems ([email protected])
- [BUGFIX] Don't allow Templar classes to be created without a valid config
There are a LOT of places in the templar.py code that use self.settings
without checking to make sure a valid config was passed in. This could cause
random stack dumps when templating, so it's better to force a config to be
passed in. Thankfully, there were only two pieces of code that actually did
this, one of which was the tftpd management module which was fixed elsewhere.
([email protected])
- [BUGFIX] instance of Templar() was being created without a config passed in
This caused a stack dump when the manage_in_tftpd module tried to access the
config settings ([email protected])
- [BUGFIX] Fix for issue #17 - Make cobbler import be more squeaky when it
doesn't
import anything ([email protected])
- [FEATURE] autoyast_sample: save and restore boot device order
([email protected])
- [BUGFIX] Fix for issue #105 - buildiso fails Added a new option for buildiso:
--mkisofs-opts, which allows specifying extra options to mkisofs TODO: add
input box to web interface for this option ([email protected])
- [BUGFIX] incorrect lower-casing of kickstart paths - regression from issue
- [FEATURE] Automatically detect and support bind chroot ([email protected])
- [FEATURE] Add yumopts to kickstart repos ([email protected])
- [BUGFIX] Fix issue with cobbler system reboot ([email protected])
- [BUGFIX] fix stack trace in write_pxe_file if distro==None
([email protected])
- [BUGFIX] Changed findkeys function to be consisten with keep_ssh_host_keys
snippet
([email protected])
- [BUGFIX] Fix for issue #15 - cobbler image command does not recognize
--image-type=memdisk ([email protected])
- [BUGFIX] Issue #13 - reposync with --tries > 1 always repeats, even on
success The success flag was being set when the reposync ran, but didn't
break out of the retry loop - easy fix ([email protected])
- [BUGFIX] Fix for issue #42 - kickstart not found error when path has leading
space ([email protected])
- [BUGFIX] Fix for issue #26 - Web Interface: Profile Edit
* Added jquery UI stuff
* Added javascript to generic_edit template to make all selects in the
class "edit" resizeable
([email protected])
- [BUGFIX] Fix for issue #53 - cobbler system add without --profile exits 0,
but does nothing ([email protected])
- [BUGFIX] Issue #73 - Broken symlinks on distro rename from web_gui
([email protected])
- regular OS version maintenance ([email protected])
- [BUGFIX] let koan not overwrite existing initrd+kernel ([email protected])
- [FEATURE] koan:
* Port imagecreate to virt-install ([email protected])
* Port qcreate to virt-install ([email protected])
* Port xen creation to virt-install ([email protected])
- [FEATURE] new snippet allows for certificate-based RHN registration
([email protected])
- [FEATURE] Have autoyast by default behave more like RHEL, regarding
networking etc.
([email protected])
- [BUGFIX] sles patches ([email protected])
- [BUGFIX] Simple fix for issue where memtest entries were not getting created
after
installing memtest86+ and doing a cobbler sync ([email protected])
- [BUGFIX] REMOTE_ADDR was not being set in the arguments in calls to CobblerSvc
instance causing ip address not to show up in install.log.
([email protected])
- [BUGFIX] add missing import of shutil ([email protected])
- [BUGFIX] add a sample kickstart file for ESXi ([email protected])
- [BUGFIX] the ESXi installer allows two nameservers to be defined
([email protected])
- [BUGFIX] close file descriptors on backgrounded processes to avoid hanging
%pre
([email protected])
- [BUGFIX] rsync copies the repositories with --delete hence deleting
everyhting local
that isn't on the source server. The createrepo then creates (following the
default settings) a cache directory ... which is deleted by the next rsync
run. Putting the cache directory in the rsync exclude list avoids this
deletion and speeds up running reposync dramatically. ([email protected])
- [BUGFIX] Properly blame SELinux for httpd_can_network_connect type errors on
initial
setup. ([email protected])
- fix install=... kernel parameter when importing a SUSE distro ([email protected])
- [BUGFIX] Force Django to use the system's TIME_ZONE by default.
([email protected])
- [FEATURE] Separated check for permissions from file existence check.
([email protected])
- [BUGFIX] If the xendomain symlink already exists, a clearer error will be
produced.
([email protected])
- [FEATURE] Adding support for ESXi5, and fixing a few minor things (like not
having a
default kickstart for esxi4) Todos: * The esxi*-ks.cfg files are empty, and
need proper kickstart templates * Import bug testing and general kickstart
testing ([email protected])
- [FEATURE] Adding basic support for gPXE ([email protected])
- [FEATURE] Add arm as a valid architecture. ([email protected])
- [SECURITY] Changes PYTHON_EGG_CACHE to a safer path owned just by the
webserver.
([email protected])
- [BUGFIX] koan: do not include ks_meta args when obtaining tree When obtaining
the tree
for Ubuntu machines, ensure that ks_meta args are not passed as part of the
tree if they exist. ([email protected])
- [FEATURE] koan: Use grub2 for --replace-self instead of grubby The koan option
'--replace-self' uses grubby, which relies on grub1, to replace a local
installation by installing the new kernel/initrd into grub menu entries.
Ubuntu/Debian no longer uses it grub1. This patch adds the ability to use
grub2 to add the kernel/initrd downloaded to a menuentry. On reboot, it will
boot from the install kernel reinstalling the system. Fixes (LP: #766229)
([email protected])
- [BUGFIX] Fix reposync missing env variable for debmirror Fixes missing HOME
env
variable for debmirror by hardcoding the environment variable to
/var/lib/cobbler ([email protected])
- [BUGFIX] Fix creation of repo mirror when importing iso. Fixes the creation
of a
disabled repo mirror when importing ISO's such as the mini.iso that does not
contain any mirror/packages. Additionally, really enables 'apt' as possible
repository. ([email protected])
- [BUGFIX] adding default_template_type to settings.py, caused some issues with
templar when the setting was not specified in the /etc/cobbler/settings
([email protected])
- [BUGFIX] fix for following issue: can't save networking options of a system
in cobbler web interface. (#8) ([email protected])
- [BUGFIX] Add a new setting to force CLI commands to use the localhost for
xmlrpc
([email protected])
- [BUGFIX] Don't blow up on broken links under /var/www/cobbler/links
([email protected])
- [SECURITY] Making https the default for the cobbler web GUI. Also modifying
the cobbler-
web RPM build to require mod_ssl and mod_wsgi (missing wsgi was an oversight,
just correcting it now) ([email protected])
- [FEATURE] Adding authn_pam. This also creates a new setting -
authn_pam_service, which
allows the user to configure which PAM service they want to use for cobblerd.
The default is the 'login' service ([email protected])
- [SECURITY] Change in cobbler.spec to modify permissions on webui sessions
directory to
prevent non-privileged user acccess to the session keys ([email protected])
- [SECURITY] Enabling CSRF protection for the web interface ([email protected])
- [SECURITY] Convert all yaml loads to safe_loads for security/safety reasons.
https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/858883 ([email protected])
- [FEATURE] Added the setting 'default_template_type' to the settings file, and
created
logic to use that in Templar().render(). Also added an option to the same
function to pass the template type in as an argument. ([email protected])
- [FEATURE] Initial commit for adding support for other template languages,
namely jinja2
in this case ([email protected])
--------------------------------------------------------------------------------
================================================================================
duply-1.5.6-1.el5 (FEDORA-EPEL-2012-6062)
Wrapper for duplicity
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version. From the upstream changelog:
* commands purge, purge-full have no default value anymore for security
reasons; instead max value can be given via cmd line or must be set in profile;
else an error is shown.
* minor man page modifications
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 5 2012 Thomas Moschny <[email protected]> - 1.5.6-1
- Updte to 1.5.6.
--------------------------------------------------------------------------------
================================================================================
latex2rtf-2.2.0-2.el5 (FEDORA-EPEL-2012-6077)
LaTeX to RTF converter that handles equations, figures, and cross-references
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 7 2012 Jussi Lehtola <[email protected]> - 2.2.0-2
- Fix configuration directory location.
* Mon Jun 4 2012 Jussi Lehtola <[email protected]> - 2.2.0-1
- Update to 2.2.0.
* Fri Jan 13 2012 Fedora Release Engineering <[email protected]>
- 2.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Feb 7 2011 Fedora Release Engineering <[email protected]>
- 2.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lighttpd-1.4.31-1.el5 (FEDORA-EPEL-2012-6072)
Lightning fast webserver with light system requirements
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2011-4362 by updating to the latest release. It also
fixes problems that had been reported with previous releases, such as
ssl-related crashes on startup.
This update fixes some minor SSL related problems, as well as a connection
stall bug.
This update fixes some minor SSL related problems, as well as a connection
stall bug.
This update fixes some minor SSL related problems, as well as a connection
stall bug.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 6 2012 Matthias Saou <[email protected]> 1.4.31-1
- Update to 1.4.31 (#828198).
* Tue Apr 17 2012 Jon Ciesla <[email protected]> - 1.4.30-2
- service file patch per BZ 720210.
* Mon Mar 26 2012 Matthias Saou <[email protected]> 1.4.30-1
- Update to 1.4.30 (#768903).
- Update mod_geoip patch.
- Remove upstreamed ssl_no_ecdh patch.
* Fri Feb 10 2012 Petr Pisar <[email protected]> - 1.4.29-3
- Rebuild against PCRE 8.30
* Fri Jan 13 2012 Fedora Release Engineering <[email protected]>
- 1.4.29-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Sun Aug 21 2011 Matthias Saou <[email protected]> 1.4.29-1
- Re-update to 1.4.29, including ssl_no_ecdh to fix build (#625737).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #758624 - CVE-2011-4362 lighttpd: Out of bounds read due to a
signedness error (DoS, crash)
https://bugzilla.redhat.com/show_bug.cgi?id=758624
--------------------------------------------------------------------------------
================================================================================
since-1.1-5.el5 (FEDORA-EPEL-2012-6069)
Stateful tail replacement
--------------------------------------------------------------------------------
Update Information:
This is a new package for EPEL 5.
--------------------------------------------------------------------------------
_______________________________________________
epel-devel-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/epel-devel-list
