The following Fedora EPEL 5 Security updates need testing:
Age URL
978
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
433
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
197
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
51
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3784/mantis-1.2....
47
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4430/phpMyAdmin4...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4674/denyhosts-2...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4743/ettercap-0....
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4803/libssh-0.5....
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4527/xrdp-0.6.1-...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4867/glpi-0.83.9...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4917/dokuwiki-0-...
The following builds have been pushed to Fedora EPEL 5 updates-testing
dokuwiki-0-0.23.20140929b.el5
Details about builds:
================================================================================
dokuwiki-0-0.23.20140929b.el5 (FEDORA-EPEL-2014-4917)
Standards compliant simple to use wiki
--------------------------------------------------------------------------------
Update Information:
Update to the 2014-09-29b release which contains various fixes,
notably:\\r\\n\\r\\nSecurity:\\r\\n* CVE-2014-9253 - XSS via SFW file upload\\r\\n*
CVE-2012-6662 - jquery-ui XSS vulnerability\\r\\n\\r\\nBugfixes:\\r\\n* dokuwiki requires
php-xml (RHBZ#1061477)\\r\\n* wrong SELinux file context for writable files/directories
(RHBZ#1064524)\\r\\n* drop httpd requirement (RHBZ#1164396)\\r\\n
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 26 2014 Adam Tkac <vonsch(a)gmail.com> - 0.0.23.20140929b
- update to the latest upstream
- drop requirement of httpd (#1164396)
- fix SELinux file contexts (#1064524)
- require php-xml (#1061477)
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.22.20131208
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064524 - Wrong SELinux type in dokuwiki-selinux package
https://bugzilla.redhat.com/show_bug.cgi?id=1064524
[ 2 ] Bug #1164396 - dokuwiki requires apache
https://bugzilla.redhat.com/show_bug.cgi?id=1164396
[ 3 ] Bug #1150133 - dokuwiki: various security flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1150133
[ 4 ] Bug #1174333 - CVE-2014-9253 dokuwiki: XSS via SFW file upload [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1174333
[ 5 ] Bug #1101095 - New release available - 2014-05-05 "Ponder Stibbons"
https://bugzilla.redhat.com/show_bug.cgi?id=1101095
[ 6 ] Bug #1061477 - wiki:syntax page requires php-xml to render
https://bugzilla.redhat.com/show_bug.cgi?id=1061477
[ 7 ] Bug #1161816 - dokuwiki is 5 months out of date, 2 versions and 3 hotfixes behind
https://bugzilla.redhat.com/show_bug.cgi?id=1161816
[ 8 ] Bug #1150134 - dokuwiki: various security flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1150134
[ 9 ] Bug #1174332 - CVE-2014-9253 dokuwiki: XSS via SFW file upload [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=1174332
[ 10 ] Bug #1166099 - CVE-2012-6662 dokuwiki: jquery-ui: XSS vulnerability in default
content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166099
[ 11 ] Bug #1174331 - CVE-2014-9253 dokuwiki: XSS via SFW file upload [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1174331
--------------------------------------------------------------------------------