The following Fedora EPEL 5 Security updates need testing:
Age URL
718
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
173
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
53
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2....
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0984/munin-2.0.2...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0988/libyaml-0.1...
8
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1041/mod_securit...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1047/check-mk-1....
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1074/cacti-0.8.8...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1096/wordpress-3...
The following builds have been pushed to Fedora EPEL 5 updates-testing
lcgdm-1.8.8-4.el5
perl-HTML-FormatText-WithLinks-0.14-1.el5
pynag-0.8.5-1.el5
wordpress-3.8.2-1.el5
Details about builds:
================================================================================
lcgdm-1.8.8-4.el5 (FEDORA-EPEL-2014-1093)
LHC Computing Grid Data Management
--------------------------------------------------------------------------------
Update Information:
Patches for dpm-listspaces
Backported patch for GLOBUS_THREAD_MODEL
Update for new upstream release 1.8.8
Update for new upstream release 1.8.8
Backported patch for GLOBUS_THREAD_MODEL
Update for new upstream release 1.8.8
Update for new upstream release 1.8.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 10 2014 Alejandro Alvarez <aalvarez(a)cern.ch> - 1.8.8-4
- Patch: LCGDM-1380 and LCGDM-1386
* Fri Mar 28 2014 Alejandro Alvarez <aalvarez(a)cern.ch> - 1.8.8-3
- Patch: dpm-drain: needs GLOBUS_THREAD_MODEL set
* Fri Mar 14 2014 Alejandro Alvarez <aalvarez(a)cern.ch> - 1.8.8-2
- Upstream provided a wrong tag by mistake. Rebuild with the new code
* Wed Mar 12 2014 Alejandro Alvarez <aalvarez(a)cern.ch> - 1.8.8-1
- Update for new upstream release
--------------------------------------------------------------------------------
================================================================================
perl-HTML-FormatText-WithLinks-0.14-1.el5 (FEDORA-EPEL-2014-1094)
HTML to text conversion with links as footnotes
--------------------------------------------------------------------------------
Update Information:
HTML::FormatText::WithLinks - HTML to text conversion with links as footnotes
--------------------------------------------------------------------------------
================================================================================
pynag-0.8.5-1.el5 (FEDORA-EPEL-2014-1098)
Python modules and utilities for Nagios plugins and configuration
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 10 2014 Tomas Edwardsson <tommi(a)tommi.org> 0.8.5-1
- Updated to latest upstream version
* Mon Jan 6 2014 Tomas Edwardsson <tommi(a)tommi.org> 0.7.0-2
- Update invalid changelog entries
--------------------------------------------------------------------------------
================================================================================
wordpress-3.8.2-1.el5 (FEDORA-EPEL-2014-1096)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Upstream announcement:
http://wordpress.org/news/2014/04/wordpress-3-8-2/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 9 2014 Remi Collet <remi(a)fedoraproject.org> - 3.8.2-1
- update to 3.8.2 Security Release
- fix privilege escalation issue CVE-2014-0165
- fix authentication bypass issue CVE-2014-0166
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1085858 - CVE-2014-0166 wordpress: authentication bypass via forged cookies
https://bugzilla.redhat.com/show_bug.cgi?id=1085858
[ 2 ] Bug #1085866 - CVE-2014-0165 wordpress: privilege escalation issue allowing
contributors to publish posts
https://bugzilla.redhat.com/show_bug.cgi?id=1085866
--------------------------------------------------------------------------------