The following Fedora EPEL 5 Security updates need testing:
Age URL
416
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
311
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1....
117
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6047/nrpe-2.14-3...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6086/libguestfs-...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-6089/ssmtp-2.61-...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10388/perl-Modul...
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-10389/rrdtool-1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
checksec-1.5-2.el5
drupal6-rules-1.5-1.el5
drupal6-strongarm-2.2-1.el5
drupal6-views_bulk_operations-1.14-1.el5
drupal7-date_ical-2.8-1.el5
drupal7-entity-1.1-1.el5
libbsd-0.5.2-2.el5
Details about builds:
================================================================================
checksec-1.5-2.el5 (FEDORA-EPEL-2013-10428)
Tool to check system for binary-hardening
--------------------------------------------------------------------------------
Update Information:
Modern Linux distributions offer some mitigation techniques to make it harder to exploit
software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack
Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables
(PIE) have made reliably exploiting any vulnerabilities that do exist far more
challenging. The checksec script is designed to test what *standard* Linux OS and PaX
(
http://pax.grsecurity.net/) security features are being used. As of version 1.3 the
script also lists the status of various Linux kernel protection mechanisms. checksec can
check binary-files and running processes for hardening features.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #973349 - Review Request: checksec - Tool to check system for
binary-hardening
https://bugzilla.redhat.com/show_bug.cgi?id=973349
--------------------------------------------------------------------------------
================================================================================
drupal6-rules-1.5-1.el5 (FEDORA-EPEL-2013-10442)
It allows site administrators to define conditionally executed actions
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.5 release for bug fixes
- Upstream changelog for this release is avalble at
https://drupal.org/node/1711658
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.5-1
- Update to upstream 1.5 release for bug fixes
- Upstream changelog for this release is avalble at
https://drupal.org/node/1711658
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #959104 - drupal6-rules-1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=959104
[ 2 ] Bug #971506 - drupal6-rules needs to be updated for Fedora/Epel
https://bugzilla.redhat.com/show_bug.cgi?id=971506
--------------------------------------------------------------------------------
================================================================================
drupal6-strongarm-2.2-1.el5 (FEDORA-EPEL-2013-10439)
Strongarm gives a way to override the default variable values
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 2.2 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/1645424
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #959105 - drupal6-strongarm-2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=959105
--------------------------------------------------------------------------------
================================================================================
drupal6-views_bulk_operations-1.14-1.el5 (FEDORA-EPEL-2013-10434)
This module augments Views by allowing bulk operations to be executed
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.14 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/1925522
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.14-1
- Update to upstream 1.14 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/1925522
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #959106 - drupal6-views_bulk_operations-1.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=959106
--------------------------------------------------------------------------------
================================================================================
drupal7-date_ical-2.8-1.el5 (FEDORA-EPEL-2013-10435)
Allows creation of an iCal feed in Views
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 2.8 release for bug fixes
- Upstream changelog for this release is avalble at
http://drupal.org/node/2003618
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 2.8-1
- Update to upstream 2.8 release for bug fixes
- Upstream changelog for this release is avalble at
http://drupal.org/node/2003618
* Thu Apr 25 2013 Jared Smith <jaredsmith(a)jaredsmith.net> - 2.7-1
- Update to upstream 2.7 release for bug fixes
- Upstream changelog for this release is avalble at
http://drupal.org/node/1978108
* Thu Feb 28 2013 Jared Smith <jaredsmith(a)jaredsmith.net> - 2.6-1
- Update to upstream 2.6 release
- Upstream changelog for this release is avalble at
http://drupal.org/node/1928594
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #955984 - drupal7-date_ical-2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=955984
--------------------------------------------------------------------------------
================================================================================
drupal7-entity-1.1-1.el5 (FEDORA-EPEL-2013-10431)
Extends the entity API to provide a unified way to deal with entities
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 1.1 release for bug fixes
- Upstream changelog for this release is avalble at
https://drupal.org/node/1983440
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2013 Peter Borsa <peter.borsa(a)gmail.com> - 1.1-1
- Update to upstream 1.1 release for bug fixes
- Upstream changelog for this release is avalble at
https://drupal.org/node/1983440
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #958466 - drupal7-entity-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=958466
--------------------------------------------------------------------------------
================================================================================
libbsd-0.5.2-2.el5 (FEDORA-EPEL-2013-10432)
Library providing BSD-compatible functions for portability
--------------------------------------------------------------------------------
Update Information:
Library providing BSD-compatible functions for portability
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #973251 - Requesting build of libbsd for EL5
https://bugzilla.redhat.com/show_bug.cgi?id=973251
--------------------------------------------------------------------------------