The following Fedora EPEL 5 Security updates need testing: Age URL 648 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 138 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11560/fail2ban-0.8.... 102 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.... 77 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12091/bip-0.8.9-1.e... 67 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12169/gc-7.1-6.el5 18 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0132/graphviz-2.12-... 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0203/transifex-clie... 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0201/drupal7-7.26-1... 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0200/drupal6-6.30-1... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0400/mediawiki119-1...

The following builds have been pushed to Fedora EPEL 5 updates-testing

mediawiki119-1.19.11-2.el5 pcp-3.8.12-1.el5

Details about builds:

================================================================================ mediawiki119-1.19.11-2.el5 (FEDORA-EPEL-2014-0400) A wiki engine -------------------------------------------------------------------------------- Update Information:

- Update to 1.19.11 - (bug 60339) (CVE-2014-1610) SECURITY: Reported RCE in djvu thumbnailing - Provide mediawiki -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1058981 - CVE-2014-1610 mediawiki: remote code execution via uploaded DjVu or PDF files https://bugzilla.redhat.com/show_bug.cgi?id=1058981 [ 2 ] Bug #1030987 - CVE-2013-4567 CVE-2013-4568 CVE-2013-4572 mediawiki: security releases 1.21.3, 1.20.8, and 1.19.9 https://bugzilla.redhat.com/show_bug.cgi?id=1030987 [ 3 ] Bug #1052962 - CVE-2013-6451 CVE-2013-6452 CVE-2013-6453 CVE-2013-6454 CVE-2013-6472 mediawiki: security releases 1.22.1, 1.21.4 and 1.19.10 https://bugzilla.redhat.com/show_bug.cgi?id=1052962 --------------------------------------------------------------------------------

================================================================================ pcp-3.8.12-1.el5 (FEDORA-EPEL-2014-0399) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information:

Resolves SNMP procfs file ICMP line parse issue (BZ 1055818) -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 29 2014 Nathan Scott nathans@redhat.com - 3.8.12-1 - Resolves SNMP procfs file ICMP line parse issue (BZ 1055818) - Update to latest PCP sources. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1055818 - pmcd SEGV in linux pmda https://bugzilla.redhat.com/show_bug.cgi?id=1055818 --------------------------------------------------------------------------------