The following Fedora EPEL 5 Security updates need testing:
Age URL
1096
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
551
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
315
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
165
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-...
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5740/perl-Test-S...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5758/tor-0.2.4.2...
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5694/zarafa-7.1....
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5821/cherokee-1....
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5894/mksh-50f-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5952/pdns-recurs...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5953/wordpress-4...
The following builds have been pushed to Fedora EPEL 5 updates-testing
ganglia-3.7.1-1.el5
mod_geoip-1.2.10-1.el5
pdns-recursor-3.6.3-1.el5
wordpress-4.1.2-1.el5
Details about builds:
================================================================================
ganglia-3.7.1-1.el5 (FEDORA-EPEL-2015-5941)
Distributed Monitoring System
--------------------------------------------------------------------------------
Update Information:
Merged from f23 to bring ganglia up to date
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717881 - New ganglia-web version
https://bugzilla.redhat.com/show_bug.cgi?id=717881
--------------------------------------------------------------------------------
================================================================================
mod_geoip-1.2.10-1.el5 (FEDORA-EPEL-2015-5955)
GeoIP module for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
mod_geoip 1.2.10 (2015-03-06)
=============================
- Update docs to note that GeoIP configuration directives cannot be placed in .htaccess
files.
- Fix small memleak (Boris Zentner)
- A segfault when using multi-threaded workers was fixed. (Fix from thinker0. GitHub
#16.)
- Several instances of manual memory management were switched to use the use Apache's
memory pool. (Fix from thinker0. GitHub #16.)
mod_geoip 1.2.9 (2014-03-20)
============================
- Added a new directive, GeoIPScanProxyHeaderField, to specify a custom header which
contains the client's IP address (Sascha Kuehndel)
- Added the ability to forward the result fields to a backend server/proxy via request
header (Sascha Kuehndel)
mod_geoip 1.2.9 (2013-01-08)
============================
- Add GeoIPUseFirstNonPrivateXForwardedForIP option (Boris Zentner)
- Support Apache 2.4 (Boris Zentner)
- Use GeoIP_id_by_addr_v6 instead of GeoIP_country_id_by_addr_v6 (Boris Zentner)
- Include util_script.h to silence warning about ap_add_common_vars (Boris Zentner)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2015 Robert Scheck <robert(a)fedoraproject.org> 1.2.10-1
- Upgrade to 1.2.10 (#1214493)
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.7-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Jan 23 2014 Joe Orton <jorton(a)redhat.com> - 1.2.7-4
- fix _httpd_mmn expansion in absence of httpd-devel
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214493 - Version bump needed for mod_geoip to pick up various reliability
issues in multi-threading
https://bugzilla.redhat.com/show_bug.cgi?id=1214493
--------------------------------------------------------------------------------
================================================================================
pdns-recursor-3.6.3-1.el5 (FEDORA-EPEL-2015-5952)
Modern, advanced and high performance recursing/non authoritative name server
--------------------------------------------------------------------------------
Update Information:
- Update to 3.6.3
- CVE-2015-1868 (#1213832)
External References:
https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2015 Morten Stevens <mstevens(a)imt-systems.com> - 3.6.3-1
- Update to 3.6.3
- CVE-2015-1868 (#1213832)
- Disable security status polling by default
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213377 - CVE-2015-1868 pdns: Label decompression bug in PowerDNS can cause
crashes on specific platforms
https://bugzilla.redhat.com/show_bug.cgi?id=1213377
--------------------------------------------------------------------------------
================================================================================
wordpress-4.1.2-1.el5 (FEDORA-EPEL-2015-5953)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
This is a critical security release for all previous versions and we strongly encourage
you to update your sites immediately.
https://wordpress.org/news/2015/04/wordpress-4-1-2/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2015 Remi Collet <remi(a)fedoraproject.org> - 4.1.2-1
- WordPress 4.1.2 Security Release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214650 - wordpress: several vulnerabilities fixed in Wordpress 4.1.2
https://bugzilla.redhat.com/show_bug.cgi?id=1214650
--------------------------------------------------------------------------------