The following Fedora EPEL 5 Security updates need testing:
Age URL
529
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
43
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61...
19
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11560/fail2ban-0...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11667/xpdf-3.03-...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11749/zabbix20-2...
The following builds have been pushed to Fedora EPEL 5 updates-testing
NLopt-2.4-2.git20130903.35e6377.el5
check-mk-1.2.2p2-3.el5
liblinear-1.93-3.el5
up-imapproxy-1.2.8-0.3.20130726svn14389.el5
zabbix20-2.0.8-3.el5
Details about builds:
================================================================================
NLopt-2.4-2.git20130903.35e6377.el5 (FEDORA-EPEL-2013-11745)
Open-Source library for nonlinear optimization
--------------------------------------------------------------------------------
Update Information:
adaptions for new Python-guidelines
NLopt is a library for nonlinear local and global optimization, for functions with and
without gradient information. It is designed as as simple, unified interface and
packaging of several free/open-source nonlinear optimization libraries. It features
bindings for GNU Guile, Octave and Python. This build has been made with C++-support
enabled.
NLopt is a library for nonlinear local and global optimization, for functions with and
without gradient information. It is designed as as simple, unified interface and
packaging of several free/open-source nonlinear optimization libraries. It features
bindings for GNU Guile, Octave and Python. This build has been made with C++-support
enabled.
NLopt is a library for nonlinear local and global optimization, for functions with and
without gradient information. It is designed as as simple, unified interface and
packaging of several free/open-source nonlinear optimization libraries. It features
bindings for GNU Guile, Octave and Python. This build has been made with C++-support
enabled.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1004209 - Review Request: NLopt - Open-Source library for nonlinear
optimization
https://bugzilla.redhat.com/show_bug.cgi?id=1004209
--------------------------------------------------------------------------------
================================================================================
check-mk-1.2.2p2-3.el5 (FEDORA-EPEL-2013-11742)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
Introducing check-mk on EPEL 5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1006686 - Package request: check-mk-agent for RHEL5
https://bugzilla.redhat.com/show_bug.cgi?id=1006686
--------------------------------------------------------------------------------
================================================================================
liblinear-1.93-3.el5 (FEDORA-EPEL-2013-11752)
Library for Large Linear Classification
--------------------------------------------------------------------------------
Update Information:
adaptions for new Python-guidelines
generate .pc-file on-the-fly
minor cleanup
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 2 2013 Björn Esser <bjoern.esser(a)gmail.com> - 1.93-3
- adaptions for new Python-guidelines
- generate .pc-file on-the-fly
- minor cleanup
--------------------------------------------------------------------------------
================================================================================
up-imapproxy-1.2.8-0.3.20130726svn14389.el5 (FEDORA-EPEL-2013-11751)
University of Pittsburgh IMAP Proxy
--------------------------------------------------------------------------------
Update Information:
Update to upstream SVN to get bug fixes, including username/password length
Sync with Rawhide
Sync with rawhide
--------------------------------------------------------------------------------
================================================================================
zabbix20-2.0.8-3.el5 (FEDORA-EPEL-2013-11749)
Open-source monitoring solution for your IT infrastructure
--------------------------------------------------------------------------------
Update Information:
An SQL injection vulnerability inside frontend and API was discovered and mended:
https://support.zabbix.com/browse/ZBX-7091
CVE-2013-5743
Additional improvements:
- Patch for failing XML host import (ZBX-6922)
- SQL speed-up patch for graphs (ZBX-6804)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 23 2013 Volker Fröhlich <volker27(a)gmx.at> - 2.0.8-3
- Add SQL speed-up patch (ZBX-6804)
- Add SQL injection vulnerability patch (ZBX-7091, CVE-2013-5743)
- Add patch for failing XML host import (ZBX-6922)
* Fri Sep 13 2013 Volker Fröhlich <volker27(a)gmx.at> - 2.0.8-2
- Add php-ldap as a requirement for the frontend
- Add patch for ZBX-6992
--------------------------------------------------------------------------------