The following Fedora EPEL 4 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5030/torque-2.5....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4759/phpldapadmi...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4733/cherokee-1....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4945/proftpd-1.3...
The following builds have been pushed to Fedora EPEL 4 updates-testing
torque-2.5.7-4.el4
Details about builds:
================================================================================
torque-2.5.7-4.el4 (FEDORA-EPEL-2011-5030)
Tera-scale Open-source Resource and QUEue manager
--------------------------------------------------------------------------------
Update Information:
This torque update corrects a security vulnerability whereby a user connecting to the
torque pbs_server could impersonate another user present within the torque batch system.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 17 2011 Steve Traylen <steve.traylen(a)cern.ch> - 2.5.7-4
- Empty release for release mistake.
* Thu Nov 17 2011 Steve Traylen <steve.traylen(a)cern.ch> - 2.5.7-3
- Add torque-fix-munge-rhbz#752079.patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #752079 - Torque and Munge impersonation vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=752079
--------------------------------------------------------------------------------