The following Fedora EPEL 6 Security updates need testing:
Age URL
880
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3....
212
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolki...
99
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7....
89
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1693/perl-Email-...
41
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2148/drupal6-6.3...
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2561/pdns-recurs...
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2634/moodle-2.5....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2655/python-oaut...
The following builds have been pushed to Fedora EPEL 6 updates-testing
python-oauth2-1.5.211-7.el6
Details about builds:
================================================================================
python-oauth2-1.5.211-7.el6 (FEDORA-EPEL-2014-2655)
Python support for improved oauth
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 12 2014 Tom Callaway <spot(a)fedoraproject.org> - 1.5.211-7
- Fix CVE-2013-4346 and CVE-2013-4347 (thanks to Philippe Makowski)
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.5.211-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1007746 - CVE-2013-4346 python-oauth2: _check_signature() ignores the nonce
value when validating signed urls
https://bugzilla.redhat.com/show_bug.cgi?id=1007746
[ 2 ] Bug #1007758 - CVE-2013-4347 python-oauth2: Uses poor PRNG in nonce
https://bugzilla.redhat.com/show_bug.cgi?id=1007758
--------------------------------------------------------------------------------