The following Fedora EPEL 5 Security updates need testing:
Age URL
508
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
22
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11276/ssmtp-2.61...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11396/cacti-0.8....
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11418/graphite-w...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11448/perl-Crypt...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11460/python-pyr...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11542/glpi-0.83....
The following builds have been pushed to Fedora EPEL 5 updates-testing
glpi-0.83.9.1-4.el5
ldapvi-1.7-17.el5
openvpn-2.3.2-2.el5
php-htmLawed-1.1.16-1.el5
Details about builds:
================================================================================
glpi-0.83.9.1-4.el5 (FEDORA-EPEL-2013-11542)
Free IT asset management software
--------------------------------------------------------------------------------
Update Information:
Security improvement: restrict access to installation wizard from local server only.
Remote access need to be explicitly allowed in configuration
(/etc/httpd/conf.d/glpi.conf).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 12 2013 Remi Collet <remi(a)fedoraproject.org> - 0.83.9.1-4
- restrict access for install to local for security
- drop bundled Flash files files, #1000251
- Add a missing requirement on crontabs to spec file
--------------------------------------------------------------------------------
================================================================================
ldapvi-1.7-17.el5 (FEDORA-EPEL-2013-11548)
An interactive LDAP client
--------------------------------------------------------------------------------
Update Information:
Add fix of double free() crash (#949157), also fix old FSF address
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 11 2013 Matěj Cepl <mcepl(a)redhat.com> - 1.7-17
- Add fix of double free() crash (#949157)
- Fix old FSF address
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #949157 - [PATCH] fix use-after-free in sasl code
https://bugzilla.redhat.com/show_bug.cgi?id=949157
--------------------------------------------------------------------------------
================================================================================
openvpn-2.3.2-2.el5 (FEDORA-EPEL-2013-11545)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Enable --enable-x509-alt-username.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 12 2013 Jon Ciesla <limburgher(a)gmail.com> 2.3.2-2
- Enable --enable-x509-alt-username, BZ 1007184.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1007184 - Request to enable the "--enable-x509-alt-username"
compile-time option
https://bugzilla.redhat.com/show_bug.cgi?id=1007184
--------------------------------------------------------------------------------
================================================================================
php-htmLawed-1.1.16-1.el5 (FEDORA-EPEL-2013-11555)
PHP code to purify and filter HTML
--------------------------------------------------------------------------------
Update Information:
htmLawed 1.1.16, 29 August 2013:
- fix for a potential security vulnerability arising from specialy encoded space
characters in URL schemes/protocols
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 12 2013 Remi Collet <remi(a)fedoraproject.org> - 1.1.16-1
- update to 1.1.16, fix for a potential security vulnerability
arising from specialy encoded space characters in URL schemes/protocols
--------------------------------------------------------------------------------