The following Fedora EPEL 4 Security updates need testing:
https://admin.fedoraproject.org/updates/Django-1.1.4-1.el4
The following builds have been pushed to Fedora EPEL 4 updates-testing
Django-1.1.4-1.el4
gccxml-0.9.0-0.5.20110208.el4
Details about builds:
================================================================================
Django-1.1.4-1.el4 (FEDORA-EPEL-2011-0298)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2011-0696 and CVE-2011-0697.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2011 Steve Milner <stevem(a)gnulinux.net> - 1.1.4-1
- Fix for CVE-2011-0696 and CVE-2011-0697
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #676357 - CVE-2011-0696 django Flaw in CSRF handling
https://bugzilla.redhat.com/show_bug.cgi?id=676357
[ 2 ] Bug #676359 - CVE-2011-0697 Django Potential XSS in file field rendering
https://bugzilla.redhat.com/show_bug.cgi?id=676359
--------------------------------------------------------------------------------
================================================================================
gccxml-0.9.0-0.5.20110208.el4 (FEDORA-EPEL-2011-0304)
XML output extension to GCC
--------------------------------------------------------------------------------
Update Information:
This update adds support for parsing gcc 4.6 headers.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2011 Mattias Ellert <mattis.ellert(a)fysast.uu.se> - 0.9.0-0.5.20110208
- Updated cvs snapshot
- Add support files for gcc 4.6
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.0-0.4.20100715
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------