The following Fedora EPEL 5 Security updates need testing:
Age URL
648
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
138
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11560/fail2ban-0...
102
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
77
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12091/bip-0.8.9-...
67
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12169/gc-7.1-6.el5
18
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0132/graphviz-2....
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0203/transifex-c...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0201/drupal7-7.2...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0200/drupal6-6.3...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0400/mediawiki11...
The following builds have been pushed to Fedora EPEL 5 updates-testing
mediawiki119-1.19.11-2.el5
pcp-3.8.12-1.el5
Details about builds:
================================================================================
mediawiki119-1.19.11-2.el5 (FEDORA-EPEL-2014-0400)
A wiki engine
--------------------------------------------------------------------------------
Update Information:
- Update to 1.19.11
- (bug 60339) (CVE-2014-1610) SECURITY: Reported RCE in djvu thumbnailing
- Provide mediawiki
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1058981 - CVE-2014-1610 mediawiki: remote code execution via uploaded DjVu or
PDF files
https://bugzilla.redhat.com/show_bug.cgi?id=1058981
[ 2 ] Bug #1030987 - CVE-2013-4567 CVE-2013-4568 CVE-2013-4572 mediawiki: security
releases 1.21.3, 1.20.8, and 1.19.9
https://bugzilla.redhat.com/show_bug.cgi?id=1030987
[ 3 ] Bug #1052962 - CVE-2013-6451 CVE-2013-6452 CVE-2013-6453 CVE-2013-6454
CVE-2013-6472 mediawiki: security releases 1.22.1, 1.21.4 and 1.19.10
https://bugzilla.redhat.com/show_bug.cgi?id=1052962
--------------------------------------------------------------------------------
================================================================================
pcp-3.8.12-1.el5 (FEDORA-EPEL-2014-0399)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Resolves SNMP procfs file ICMP line parse issue (BZ 1055818)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 29 2014 Nathan Scott <nathans(a)redhat.com> - 3.8.12-1
- Resolves SNMP procfs file ICMP line parse issue (BZ 1055818)
- Update to latest PCP sources.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055818 - pmcd SEGV in linux pmda
https://bugzilla.redhat.com/show_bug.cgi?id=1055818
--------------------------------------------------------------------------------