The following Fedora EPEL 5 Security updates need testing:
Age URL
742 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893
libguestfs-1.20.12-1.el5
507 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626
puppet-2.7.26-1.el5
357 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849
sblim-sfcb-1.3.8-2.el5
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-07f3c26175
drupal7-7.41-1.el5
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516
mcollective-2.8.4-1.el5
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1cb7f30ae9
perl-HTML-Scrubber-0.15-1.el5.1
The following builds have been pushed to Fedora EPEL 5 updates-testing
dssp-2.2.1-6.el5
htop-1.0.3-1.el5
mcollective-2.8.4-1.el5
nordugrid-arc-gangliarc-1.0.0-2.el5
pcp-3.10.8-1.el5
perl-HTML-Scrubber-0.15-1.el5.1
perl-enum-1.11-1.el5
Details about builds:
================================================================================
dssp-2.2.1-6.el5 (FEDORA-EPEL-2015-1a8dc2d36d)
Protein secondary structure assignment
--------------------------------------------------------------------------------
Update Information:
Use __global_ldflags and Boost paths unconditionally per review
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1203749 - Review Request: dssp - Protein secondary structure
assignment
https://bugzilla.redhat.com/show_bug.cgi?id=1203749
--------------------------------------------------------------------------------
================================================================================
htop-1.0.3-1.el5 (FEDORA-EPEL-2015-6cc3eabd11)
Interactive process viewer
--------------------------------------------------------------------------------
Update Information:
htop-1.0.3-1.el5 - Update to latest upstream (1.0.3) - Fix BZ#964208
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #964208 - htop trying to access proc io stats as normal user
https://bugzilla.redhat.com/show_bug.cgi?id=964208
--------------------------------------------------------------------------------
================================================================================
mcollective-2.8.4-1.el5 (FEDORA-EPEL-2015-edbea40516)
Application Server for hosting Ruby code on any capable middleware
--------------------------------------------------------------------------------
Update Information:
mcollective-2.8.4-1.el5 - Update to latest upstream - Security fix for
CVE-2014-3251
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1105713 - CVE-2014-3251 mcollective: aes_security.rb file creation
vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1105713
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-gangliarc-1.0.0-2.el5 (FEDORA-EPEL-2015-b7f714a161)
Ganglia monitoring for ARC services
--------------------------------------------------------------------------------
Update Information:
Ganglia monitoring for ARC services
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1274690 - Review Request: nordugrid-arc-gangliarc - Ganglia
monitoring for ARC services
https://bugzilla.redhat.com/show_bug.cgi?id=1274690
--------------------------------------------------------------------------------
================================================================================
pcp-3.10.8-1.el5 (FEDORA-EPEL-2015-60b17897b4)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
pcp-3.10.8-1.fc21 - Update pmlogger to log an immediate sample first (BZ
1269921) - Add pmOption host and archive setter python APIs (BZ 1270176) -
Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761) - Update to latest
PCP sources. - CHANGELOG : - pmdaslurm: new PMDA exporting HPC scheduler
metrics - pmdalinux: correctly report high speed network link speeds -
pmdalinux: support for wireless network interfaces - pmdalinux: add support
for NVME devices - pmie: fqdn functionality, added %c for action strings
- pmlogextract: runtime reducing instance optimizations - pmlogrewrite:
metric name lex pattern change - pmlogger: change semantics for first
logging operation - rc_pmlogger: shell escape for control file "directory"
field - pcp-atop: update with latest atop features (esp. NFS) - pcp-
atop: fix initial fetch time offset for the globals - pcp-atop: fix -b/-e
options to match man page description - docs: update Quick Ref Guide with
pcp-atop/pcp-atopsar - docs: remove outdated pmatop man page, see pcp-
atop(1) - python api: fix local-context mode type error - python api:
improve handling of non-ascii instance names - python api: simple debugging
interface to access pmDebug - python api: ensure an interruptible sleep is
used - python api: add single host/archive pmOption setter methods -
libpcp: add $PCP_DEBUG to initialize pmDebug - libpcp: extend __pmAF* family
with __pmAFsetup - libpcp: resolve false-context-sharing corner cases -
pcp2graphite: provide a local-context mode option - pmmgr: add the
subtarget-containers option - pmmgr: add pmlogreduce support - rc_pmcd:
be more careful with auto-install/-remove - pmcd: allow dynamic switching of
monitored containers - pmdapmcd: add pmcd.client.container diagnostic metric
- pmdaroot: new metric mapping containers to their cgroups - pmdaroot: add
cgroup heuristics for non-systemd setups - pmdaroot: fix timeliness of
creation of socket connection - pmdads389: add normalized dn cache metrics
- pmdads389: instantaneous vs discrete metric corrections - pmdads389: send
correct error codes when not connected - pmdamounts: correct a number of
32-bit unsafe calculations - pmdanfsclient: improve PMDA error handling
- pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference
clock cycles for NHM and WSM - docs: added upgrade instructions to
pmdaperfevent man page - containers: bindmount /dev/log for syslog messages
- build: fix FreeBSD 10.2 with dtrace probes auto-enabled pcp-3.10.8-1.fc22 -
Update pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption
host and archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man
page with pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG
- pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly
report high speed network link speeds - pmdalinux: support for wireless
network interfaces - pmdalinux: add support for NVME devices - pmie:
fqdn functionality, added %c for action strings - pmlogextract: runtime
reducing instance optimizations - pmlogrewrite: metric name lex pattern
change - pmlogger: change semantics for first logging operation -
rc_pmlogger: shell escape for control file "directory" field - pcp-atop:
update with latest atop features (esp. NFS) - pcp-atop: fix initial fetch
time offset for the globals - pcp-atop: fix -b/-e options to match man page
description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar -
docs: remove outdated pmatop man page, see pcp-atop(1) - python api: fix
local-context mode type error - python api: improve handling of non-ascii
instance names - python api: simple debugging interface to access pmDebug
- python api: ensure an interruptible sleep is used - python api: add single
host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize
pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp:
resolve false-context-sharing corner cases - pcp2graphite: provide a local-
context mode option - pmmgr: add the subtarget-containers option -
pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto-
install/-remove - pmcd: allow dynamic switching of monitored containers
- pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new
metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics
for non-systemd setups - pmdaroot: fix timeliness of creation of socket
connection - pmdads389: add normalized dn cache metrics - pmdads389:
instantaneous vs discrete metric corrections - pmdads389: send correct error
codes when not connected - pmdamounts: correct a number of 32-bit unsafe
calculations - pmdanfsclient: improve PMDA error handling -
pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock
cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent
man page - containers: bindmount /dev/log for syslog messages - build:
fix FreeBSD 10.2 with dtrace probes auto-enabled pcp-3.10.8-1.el5 - Update
pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption host and
archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man page with
pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG -
pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly
report high speed network link speeds - pmdalinux: support for wireless
network interfaces - pmdalinux: add support for NVME devices - pmie:
fqdn functionality, added %c for action strings - pmlogextract: runtime
reducing instance optimizations - pmlogrewrite: metric name lex pattern
change - pmlogger: change semantics for first logging operation -
rc_pmlogger: shell escape for control file "directory" field - pcp-atop:
update with latest atop features (esp. NFS) - pcp-atop: fix initial fetch
time offset for the globals - pcp-atop: fix -b/-e options to match man page
description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar -
docs: remove outdated pmatop man page, see pcp-atop(1) - python api: fix
local-context mode type error - python api: improve handling of non-ascii
instance names - python api: simple debugging interface to access pmDebug
- python api: ensure an interruptible sleep is used - python api: add single
host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize
pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp:
resolve false-context-sharing corner cases - pcp2graphite: provide a local-
context mode option - pmmgr: add the subtarget-containers option -
pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto-
install/-remove - pmcd: allow dynamic switching of monitored containers
- pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new
metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics
for non-systemd setups - pmdaroot: fix timeliness of creation of socket
connection - pmdads389: add normalized dn cache metrics - pmdads389:
instantaneous vs discrete metric corrections - pmdads389: send correct error
codes when not connected - pmdamounts: correct a number of 32-bit unsafe
calculations - pmdanfsclient: improve PMDA error handling -
pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock
cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent
man page - containers: bindmount /dev/log for syslog messages - build:
fix FreeBSD 10.2 with dtrace probes auto-enabled pcp-3.10.8-1.fc23.1 - Update
pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption host and
archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man page with
pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG -
pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly
report high speed network link speeds - pmdalinux: support for wireless
network interfaces - pmdalinux: add support for NVME devices - pmie:
fqdn functionality, added %c for action strings - pmlogextract: runtime
reducing instance optimizations - pmlogrewrite: metric name lex pattern
change - pmlogger: change semantics for first logging operation -
rc_pmlogger: shell escape for control file "directory" field - pcp-atop:
update with latest atop features (esp. NFS) - pcp-atop: fix initial fetch
time offset for the globals - pcp-atop: fix -b/-e options to match man page
description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar -
docs: remove outdated pmatop man page, see pcp-atop(1) - python api: fix
local-context mode type error - python api: improve handling of non-ascii
instance names - python api: simple debugging interface to access pmDebug
- python api: ensure an interruptible sleep is used - python api: add single
host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize
pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp:
resolve false-context-sharing corner cases - pcp2graphite: provide a local-
context mode option - pmmgr: add the subtarget-containers option -
pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto-
install/-remove - pmcd: allow dynamic switching of monitored containers
- pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new
metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics
for non-systemd setups - pmdaroot: fix timeliness of creation of socket
connection - pmdads389: add normalized dn cache metrics - pmdads389:
instantaneous vs discrete metric corrections - pmdads389: send correct error
codes when not connected - pmdamounts: correct a number of 32-bit unsafe
calculations - pmdanfsclient: improve PMDA error handling -
pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock
cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent
man page - containers: bindmount /dev/log for syslog messages - build:
fix FreeBSD 10.2 with dtrace probes auto-enabled ---- Update to latest PCP and
Vector sources. pcp-3.10.7-1.el5 - Resolved pmchart sigsegv opening view
without context (BZ 1256708) - Fixed pmchart memory corruption restoring Saved
Hosts (BZ 1257009) - Fix perl PMDA API double-free on socket error path (BZ
1258862) - Fix python API pmGetOption(3) alignment interface (BZ 1262722) -
Added missing RPM dependencies to several PMDA sub-packages. - Update to latest
stable Vector release for pcp-vector-webapp. - Update to latest PCP sources.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270761 - pmatop -h does not work
https://bugzilla.redhat.com/show_bug.cgi?id=1270761
[ 2 ] Bug #1270176 - Python PMAPI pmSetOptionHostList no workie
https://bugzilla.redhat.com/show_bug.cgi?id=1270176
[ 3 ] Bug #1269921 - pmRecordControl misses the first sample
https://bugzilla.redhat.com/show_bug.cgi?id=1269921
[ 4 ] Bug #1262722 - PCP Python PMAPI pmGetOptionAlignment fails
https://bugzilla.redhat.com/show_bug.cgi?id=1262722
[ 5 ] Bug #1258862 - local_sock() double free error
https://bugzilla.redhat.com/show_bug.cgi?id=1258862
[ 6 ] Bug #1257009 - pmchart connect incorrect host with savedHosts entry in
.config/PCP/pmchart.conf
https://bugzilla.redhat.com/show_bug.cgi?id=1257009
[ 7 ] Bug #1256708 - [abrt] pcp-gui: context(): pmchart killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1256708
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Scrubber-0.15-1.el5.1 (FEDORA-EPEL-2015-1cb7f30ae9)
Library for scrubbing/sanitizing html
--------------------------------------------------------------------------------
Update Information:
perl-HTML-Scrubber-0.15-1.el5.1 - disable tests for ancient builds
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1276648 - CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability when
function "comment" is enabled [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1276648
--------------------------------------------------------------------------------
================================================================================
perl-enum-1.11-1.el5 (FEDORA-EPEL-2015-8dcbb233a2)
C-style enumerated types and bitmask flags in Perl
--------------------------------------------------------------------------------
Update Information:
1.11 2015-10-27 - Updated github repo URL after changing my github
username
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1275854 - perl-enum-1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1275854
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
