The following Fedora EPEL 5 Security updates need testing:
Age URL
942
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
396
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.20.12-1.el5
161
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-1.el5
57
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1.2.4p5-1.el5
56
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2853/mediawiki119-1.19.18-1.el5
22
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3675/Pound-2.6-2.el5.2
15
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3784/mantis-1.2.17-3.el5
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-1.3.8-2.el5
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3972/nginx-0.8.55-6.el5
7
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3983/polarssl-1.3.2-3.el5
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4147/lsyncd-2.1.4-4.el5.1.1
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4166/clamav-0.98.5-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
clamav-0.98.5-1.el5
myproxy-6.1.6-1.el5
Details about builds:
================================================================================
clamav-0.98.5-1.el5 (FEDORA-EPEL-2014-4166)
Anti-virus software
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.98.5
=============
ClamAV 0.98.5 also includes these new features and bug fixes:
* Support for the XDP file format and extracting, decoding, and scanning PDF
files within XDP files. Addition of shared library support for LLVM versions
3.1 - 3.5 for the purpose of just-in-time(JIT) compilation of ClamAV bytecode
signatures. Andreas Cadhalpun submitted the patch implementing this support.
* Enhancements to the clambc command line utility to assist ClamAV bytecode
signature authors by providing introspection into compiled bytecode programs.
* Resolution of many of the warning messages from ClamAV compilation.
* Improved detection of malicious PE files.
* Security fix for ClamAV crash when using 'clamscan -a'. This issue was
identified by Kurt Siefried of Red Hat.
* Security fix for ClamAV crash when scanning maliciously crafted yoda's
crypter files. This issue, as well as several other bugs fixed in this release,
were identified by Damien Millescamp of Oppida.
* ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode. Thanks to
Reinhard Max for supplying the patch.
* Bug fixes and other feature enhancements.
Please see the ChangeLog file or GIT log for further details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 19 2014 Robert Scheck <[email protected]> - 0.98.5-1
- Upgrade to 0.98.5 and updated daily.cvd (#1138101)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1138101 - CVE-2013-6497 ClamAV: -a segmentation fault when
processing files
https://bugzilla.redhat.com/show_bug.cgi?id=1138101
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.6-1.el5 (FEDORA-EPEL-2014-4159)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
MyProxy 6.1.6
* Allow TLS (no longer force SSLv3)
* VOMS support now in a separate package (myproxy-voms)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 19 2014 Mattias Ellert <[email protected]> - 6.1.6-1
- Update to 6.1.6
- Drop patch myproxy-deps.patch (fixed upstream)
- Upstream source moved from sourceforge to the Globus Toolkit github repo
- Use source tarball published by Globus
- Use upstream's init scripts and systemd unit files
- New binary package myproxy-voms (voms support split out as a plugin)
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
