The following Fedora EPEL 5 Security updates need testing:
Age URL
829
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
284
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
164
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2....
48
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
39
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1696/perl-Email-...
33
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1747/mediawiki11...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1945/cobbler-2.4...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1919/drupal6-6.3...
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2046/drupal7-7.3...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1996/fail2ban-0....
The following builds have been pushed to Fedora EPEL 5 updates-testing
fail2ban-0.8.13-2.el5
iperf3-3.0.6-1.el5
lua-cyrussasl-1.0.0-1.el5
Details about builds:
================================================================================
fail2ban-0.8.13-2.el5 (FEDORA-EPEL-2014-1996)
Ban IPs that make too many password failures
--------------------------------------------------------------------------------
Update Information:
- Update to 0.8.13
- Re-enable sshd-iptables by default
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 29 2014 Orion Poplawski <orion(a)cora.nwra.com> - 0.8.13-2
- Re-enable sshd-iptables by default
* Mon Jul 21 2014 Orion Poplawski <orion(a)cora.nwra.com> - 0.8.13-1
- Update to 0.8.13 (should fix bug #1047363)
- Use upstream's logrotate script (bug #891798)
* Tue Dec 3 2013 Adam Tkac <vonsch(a)gmail.com> - 0.8.11-2
- include post-release patch for apache-auth filter
- fix firewalld support (#979622, comment 18)
* Mon Nov 25 2013 Adam Tkac <vonsch(a)gmail.com> - 0.8.11-1
- update to 0.8.11 (#1034355)
- drop part of the fail2ban-0.8.3-init.patch (merged)
- fail2ban-hostsdeny.patch has been merged
- fail2ban-mailx.patch has been merged
- fail2ban-notmp.patch has been merged
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1059937 - CVE-2013-7176 fail2ban: remote denial of service in postfix filter
[epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=1059937
[ 2 ] Bug #1059936 - CVE-2013-7177 fail2ban: remote denial of service in cyrus-imap
filter [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=1059936
[ 3 ] Bug #670437 - Fail2ban can't start on OpenVZ host system
https://bugzilla.redhat.com/show_bug.cgi?id=670437
[ 4 ] Bug #990545 - SELinux reveals leaked file descriptors
https://bugzilla.redhat.com/show_bug.cgi?id=990545
--------------------------------------------------------------------------------
================================================================================
iperf3-3.0.6-1.el5 (FEDORA-EPEL-2014-2075)
Measurement tool for TCP/UDP bandwidth performance
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 30 2014 Susant Sahani <ssahani(a)redhat.com> 3.0.6-1
- Update to 3.0.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1124763 - iperf3-3.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1124763
--------------------------------------------------------------------------------
================================================================================
lua-cyrussasl-1.0.0-1.el5 (FEDORA-EPEL-2014-2070)
Cyrus SASL library for Lua
--------------------------------------------------------------------------------
Update Information:
Lua bindings for the Cyrus SASL APIs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1102098 - Review Request: lua-cyrussasl - Cyrus SASL library for Lua
https://bugzilla.redhat.com/show_bug.cgi?id=1102098
--------------------------------------------------------------------------------