The following Fedora EPEL 5 Security updates need testing:
Age URL
207
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
102
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13480/cgit-0.9.1...
28
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13203/389-ds-bas...
33
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13152/cobbler-2....
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13443/roundup-1....
31
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13182/ssmtp-2.61...
30
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13192/icecast-2....
The following builds have been pushed to Fedora EPEL 5 updates-testing
ScrollZ-2.2.2-3.el5
cgit-0.9.1-1.el5
Details about builds:
================================================================================
ScrollZ-2.2.2-3.el5 (FEDORA-EPEL-2012-13476)
Advanced IRC client based on ircII code
--------------------------------------------------------------------------------
Update Information:
ScrollZ IRC client
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867334 - Review Request: ScrollZ - ScrollZ IRC client
https://bugzilla.redhat.com/show_bug.cgi?id=867334
--------------------------------------------------------------------------------
================================================================================
cgit-0.9.1-1.el5 (FEDORA-EPEL-2012-13480)
A fast web interface for git
--------------------------------------------------------------------------------
Update Information:
Update to new upsteam version with 2 security fixes, enhancements and misc other bug
fixes. See
http://git.zx2c4.com/cgit/commit/?id=a6a932e198e8b6b564d7a4bb43e78078d829...
for details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 15 2012 Kevin Fenzi <kevin(a)scrye.com> 0.9.1-1
- Update to 0.9.1
- Fixes bug #870714 - CVE-2012-4548
- Fixes bug #820733 - CVE-2012-4465
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.0.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #870714 - CVE-2012-4548 cgit: syntax-highlighting.sh command injection
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=870714
[ 2 ] Bug #820733 - avoid stack-smash when processing unusual commit [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=820733
--------------------------------------------------------------------------------