The following Fedora EPEL 5 Security updates need testing:
Age URL
958
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
412
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
177
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
31
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3784/mantis-1.2....
27
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4228/drupal6-6.3...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4231/perltidy-20...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4205/drupal7-7.3...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4275/hivex-1.3.5...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4408/libyaml-0.1...
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4402/antiword-0....
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4403/pkcs11-help...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4430/phpMyAdmin4...
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4441/icecast-2.4...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4475/pwgen-2.07-...
The following builds have been pushed to Fedora EPEL 5 updates-testing
openblas-0.2.13-1.el5
pwgen-2.07-1.el5
sl-5.02-1.el5
Details about builds:
================================================================================
openblas-0.2.13-1.el5 (FEDORA-EPEL-2014-4479)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.13, fixing a bug in sgemm on Sandy Bridge.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 0.2.13-1
- Update to 0.2.13.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171015 - openblas-0.2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1171015
--------------------------------------------------------------------------------
================================================================================
pwgen-2.07-1.el5 (FEDORA-EPEL-2014-4475)
Automatic password generation
--------------------------------------------------------------------------------
Update Information:
Update to 2.07:
* Remove backwards compatibility for no-tty mode. Addresses CVE-2013-4440
* Fail hard if /dev/urandom and /dev/random are not available. Addresses CVE-2013-4442
and Launchpad #1183213 (Closes: #767008)
* Fix pwgen -B so that it doesn't accidentally generate passwords with ambiguous
characters after changing the case of some letters. Addresses Launchpad Bugs #638418 and
#1349863
* Fix potential portability bug on architectures where unsgined ints are not 4 bytes long
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1020220 - CVE-2013-4440 pwgen: non-tty passwords are trivially weak by
default
https://bugzilla.redhat.com/show_bug.cgi?id=1020220
[ 2 ] Bug #1020258 - CVE-2013-4442 pwgen: silent fallback to insecure entropy
https://bugzilla.redhat.com/show_bug.cgi?id=1020258
--------------------------------------------------------------------------------
================================================================================
sl-5.02-1.el5 (FEDORA-EPEL-2014-4489)
Joke command for when you type 'sl' instead of 'ls'
--------------------------------------------------------------------------------
Update Information:
Update to the new upstream (and new build system; #1170931)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1170931 - RFE: update to 5.02
https://bugzilla.redhat.com/show_bug.cgi?id=1170931
--------------------------------------------------------------------------------