Fedora EPEL 5 updates-testing report

[updates at fedoraproject.org]

The following Fedora EPEL 5 Security updates need testing:

    https://admin.fedoraproject.org/updates/mod_fcgid-2.2-11.el5
    https://admin.fedoraproject.org/updates/udunits2-2.1.19-1.el5.1
    https://admin.fedoraproject.org/updates/xpdf-3.02-16.el5
    https://admin.fedoraproject.org/updates/libvpx-0.9.5-2.el5
    https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-1.el5
    https://admin.fedoraproject.org/updates/proftpd-1.3.3c-1.el5


The following builds have been pushed to Fedora EPEL 5 updates-testing

    libvpx-0.9.5-2.el5
    lyx-1.6.8-1.el5
    xrdp-0.5.0-0.13.el5

Details about builds:


================================================================================
 libvpx-0.9.5-2.el5 (FEDORA-EPEL-2010-3682)
 VP8 Video Codec SDK
--------------------------------------------------------------------------------
Update Information:

Update to 0.9.5 and apply patch from upstream to resolve CVE-2010-4203 libvpx: memory corruption flaw.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 17 2010 Tom "spot" Callaway <tcallawa at redhat.com> 0.9.5-2
- apply patch from upstream git (Change I6266aba7), should resolve CVE-2010-4203
* Mon Nov  1 2010 Tom "spot" Callaway <tcallawa at redhat.com> 0.9.5-1
- update to 0.9.5
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #651213 - CVE-2010-4203 libvpx: memory corruption flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=651213
--------------------------------------------------------------------------------


================================================================================
 lyx-1.6.8-1.el5 (FEDORA-EPEL-2010-3681)
 WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:

New upstream bugfix release, see also http://www.lyx.org/announce/1_6_8.txt
--------------------------------------------------------------------------------
ChangeLog:

* Thu Nov 18 2010 Rex Dieter <rdieter at fedoraproject.org> - 1.6.8-1
- lyx-1.6.8
--------------------------------------------------------------------------------


================================================================================
 xrdp-0.5.0-0.13.el5 (FEDORA-EPEL-2010-3680)
 Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
ChangeLog:

* Thu Nov 18 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.13
- up to git tag a9cfc235211a49c69c3cce3f98ee5976ff8103a4
* Thu Nov 18 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.12.03172010
- fix logrotate to not restart xrdp and drop all open connections
* Mon Oct  4 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.11.03172010
- Load a default keymap when current keymap doesnt exist
* Thu Jul  8 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.10.03172010
- fix rhbz #611669 (load environment variables)
* Thu Mar 18 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.9.03172010
- buildrequires libXfixes-devel
* Thu Mar 18 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.8.03172010
- buildrequires libX11-devel
* Thu Mar 18 2010 Itamar Reis Peixoto <itamar at ispbrasil.com.br> - 0.5.0-0.7.03172010
- sync with last xrdp cvs
* Wed Sep 16 2009 Tomas Mraz <tmraz at redhat.com> - 0.5.0-0.6.20090811cvs
- use password-auth instead of system-auth
--------------------------------------------------------------------------------