The following Fedora EPEL 5 Security updates need testing:
Age URL
209
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
104
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1....
2
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13480/cgit-0.9.1...
35
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13152/cobbler-2....
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13443/roundup-1....
30
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13203/389-ds-bas...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13496/mod_securi...
33
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13182/ssmtp-2.61...
32
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13192/icecast-2....
The following builds have been pushed to Fedora EPEL 5 updates-testing
mod_geoip-1.2.7-1.el5
mod_security-2.6.8-2.el5
Details about builds:
================================================================================
mod_geoip-1.2.7-1.el5 (FEDORA-EPEL-2012-13494)
GeoIP module for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.2.7:
- Add support for GEOIP_NETSPEED_REV1
- Experimental support for GEOIP_COUNTRY_EDITION_V6
- Add GEOIP_DOMAIN_EDITION support
--------------------------------------------------------------------------------
================================================================================
mod_security-2.6.8-2.el5 (FEDORA-EPEL-2012-13496)
Security module for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
- Add some missing directives RHBZ #569360
- Backport the fix multipart/invalid part ruleset bypass issue from 2.7 branch
(CVE-2012-4528) (RHBZ #867424, #867773, #867774)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 17 2012 Athmane Madjoudj <athmane(a)fedoraproject.org> 2.6.8-2
- Add some missing directives RHBZ #569360
- Backport the fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
(RHBZ #867424, #867773, #867774)
* Fri Sep 28 2012 Athmane Madjoudj <athmane(a)fedoraproject.org> 2.6.8-1
- Update to 2.6.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867424 - CVE-2012-4528 mod_security: multipart/invalid part ruleset bypass
https://bugzilla.redhat.com/show_bug.cgi?id=867424
--------------------------------------------------------------------------------