Fedora EPEL 5 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Tue May 7 18:13:44 UTC 2013

The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 380  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
 275  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
  80  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4.08-1.el5
  26  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5410/php-geshi-
  14  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-
   8  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5620/phpMyAdmin3-
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5711/openvpn-2.3.1-1.el5

The following builds have been pushed to Fedora EPEL 5 updates-testing


Details about builds:

 gccxml-0.9.0-0.15.20130506.git567213ac.el5 (FEDORA-EPEL-2013-5661)
 XML output extension to GCC
Update Information:

New git snapshot with gcc 4.8 support files included.

* Mon May  6 2013 Mattias Ellert <mattias.ellert at fysast.uu.se> - 0.9.0-0.15.20130506.git567213ac
- Updated git snapshot
- Now contains support files for gcc 4.8
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.9.0-0.14.20120309
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Mon Oct 15 2012 Jon Ciesla <limburgher at gmail.com> - 0.9.0-0.13-20120309
- Provides: bundled(libiberty)

 mksh-46-1.el5 (FEDORA-EPEL-2013-5647)
 MirBSD enhanced version of the Korn Shell
Update Information:

R46 delivers these changes:

  * [tg] dot.mkshrc: prevent lksh from running it
  * [tg] Add the lksh manual page to the mksh distribution
  * [tg] Make both lksh and mksh interpret numbers with a leading digit zero (‘0’) as octal precisely iff “set -o posix” is active
  * [tg] Point out the octal digit and the integer arithmetic differences from POSuX verbosely in the manual pages (point people who need octals to “set -o posix” and who need longs to lksh) and elaborate on the horrors of ISO C Undefined Behaviour which is allowed to delete all your data
  * [tg] Unbreak “set -o” (list flags) in lksh on LP64 machines
  * [tg] Implement Emacs mode PgUp as Vi insert mode Cur↑ for Yofuh
  * [tg] Allow setting both “set -o sh” and “set -o posix”, if done in the same command; shuffle around compatibility levels (mksh/lksh, with -o sh, with -o posix) again; permit a /bin/sh to set either or both
  * [tg] Sync lksh manual page with the exact code ifdefs
  * [tg] Change more use of signed integer to use unsigned instead
  * [tg] Implement “set -o pipefail” like AT&T ksh93 and GNU bash do
  * [tg] dot.mkshrc: provide hd(1) in Pure mksh™ for fallback
  * [tg] Implement VALSUBs (value substitutions): ${|REPLY=foo;}

R45 comes with this bag of changes:

  * [tg] Make “set -x” print the commands run in escaped form
  * [tg] PS4 in dot.mkshrc is now timestamped
  * [tg] The &> GNU bash I/O redir is no longer parsed in -o posix, -o sh modes, lksh (breaks valid scripts)
  * [tg] Implement ${ …;} more efficiently (deleted-open files)
  * [tg] For shf, %#s (if you can get it past GCC’s printf format attribute) calls print_value_quoted, ignoring field width and precision
  * [tg] Catch “typeset =” (regression) with better error message
  * [tg, Tonnerre Lombard] add “doch” alias to dot.mkshrc which just repeats the last input line with sudo(8)
  * [tg] Use unsigned integers for all calculations, to avoid ISO C “Undefined Behaviour” (and implementation-defined behaviour) throughout (most of) the code; emulate signed integer arithmetics using unsigned; not-lksh only
  * [tg] Emulate signed modulo naïvely, for correct sign of the result
  * [tg] Add <<< and >>> for ROL and ROR (rotate left and right, respectively) operations, <<<= and >>> assignments; bitwise AND the RHS of a shift/rotate op with 31 (not for lksh)
  * [tg] Remove a warning by working around a workaround found in dietlibc which works around a bug in broken software such as GNU tar (really!)
  * [tg] Correct and simplify list and categorisation of built-in commands as POSIX special and “everything else” plus a flag to keep assignments
  * [tg] Handle ((foo)) as “let]” internally to avoid a conflict with user-defined functions called let (LP#1156707)
  * [tg] Clean up the code

* Fri May  3 2013 Thorsten Glaser <tg at mirbsd.org> 46-1
- Upgrade mksh to R46
* Wed May  1 2013 Thorsten Glaser <tg at mirbsd.org> 45-1
- Upgrade mksh to R45 and the other files to the accompanying versions
- Drop workaround for GCC PR55009 (no longer needed)
- Use https for homepage

 openvpn-2.3.1-1.el5 (FEDORA-EPEL-2013-5711)
 A full-featured SSL VPN solution
Update Information:

Fix for SSL vulnerability.

* Mon May  6 2013 Jon Ciesla <limburgher at gmail.com> 2.3.1-1
- Update to 2.3.1

  [ 1 ] Bug #960195 - CVE-2013-2061 openvpn: use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt [epel-all]

More information about the epel-devel-list mailing list