The following Fedora EPEL 5 Security updates need testing:
Age URL
914
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
368
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
133
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
29
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1....
28
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2853/mediawiki11...
13
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3206/phpMyAdmin4...
9
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3333/catdoc-0.94...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3455/drupal7-7.3...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3549/rubygem-act...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3554/rubygem-rai...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3570/tor-0.2.4.2...
The following builds have been pushed to Fedora EPEL 5 updates-testing
nginx-0.8.55-5.el5
rubygem-actionmailer-2.3.18-1.el5
rubygem-activeresource-2.3.18-1.el5
rubygem-rails-2.3.18-1.el5
tor-0.2.4.25-1.el5
Details about builds:
================================================================================
nginx-0.8.55-5.el5 (FEDORA-EPEL-2014-3569)
Robust, small and high performance HTTP and reverse proxy server
--------------------------------------------------------------------------------
Update Information:
add vim files (#1142849)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 22 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.8.55-4
- add vim files (#1142849)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1142849 - [RFE] include nginx vim files
https://bugzilla.redhat.com/show_bug.cgi?id=1142849
--------------------------------------------------------------------------------
================================================================================
rubygem-actionmailer-2.3.18-1.el5 (FEDORA-EPEL-2014-3554)
Service layer for easy email delivery and testing
--------------------------------------------------------------------------------
Update Information:
This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages
don't have security updates, but their dependencies of activerecord, activesupport and
actionpack do.
--------------------------------------------------------------------------------
================================================================================
rubygem-activeresource-2.3.18-1.el5 (FEDORA-EPEL-2014-3554)
Active Record for web resources
--------------------------------------------------------------------------------
Update Information:
This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages
don't have security updates, but their dependencies of activerecord, activesupport and
actionpack do.
--------------------------------------------------------------------------------
================================================================================
rubygem-rails-2.3.18-1.el5 (FEDORA-EPEL-2014-3554)
Web-application framework
--------------------------------------------------------------------------------
Update Information:
This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages
don't have security updates, but their dependencies of activerecord, activesupport and
actionpack do.
--------------------------------------------------------------------------------
================================================================================
tor-0.2.4.25-1.el5 (FEDORA-EPEL-2014-3570)
Anonymizing overlay network for TCP (The onion router)
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 22 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.2.4.25-1
- update to upstream release 0.2.4.25
- reduce diff between el6 and el5
(amend URL, amend macros, some whitespace changes for legibility)
* Wed Feb 27 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.2.3.25-1
- rewrite package from scratch for simplicity and clarity
- stick closer with upstream defaults
- update to latest stable release
- add defaults-torrc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1060758 - CVE-2012-2249 tor: denial of service via a renegotiation attempt
https://bugzilla.redhat.com/show_bug.cgi?id=1060758
[ 2 ] Bug #1055014 - CVE-2013-7295 tor: improper random number generation on certain
Intel platforms with OpenSSL 1.x
https://bugzilla.redhat.com/show_bug.cgi?id=1055014
[ 3 ] Bug #1060768 - CVE-2012-2250 tor: denial of service via link protocol negotiation
https://bugzilla.redhat.com/show_bug.cgi?id=1060768
--------------------------------------------------------------------------------