The following Fedora EPEL 5 Security updates need testing:
Age URL
958
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
412
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.20.12-1.el5
177
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-1.el5
31
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3784/mantis-1.2.17-3.el5
27
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-1.3.8-2.el5
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4228/drupal6-6.34-1.el5
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4231/perltidy-20070801-2.el5
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4205/drupal7-7.34-1.el5
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4275/hivex-1.3.5-6.el5
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4408/libyaml-0.1.2-8.el5
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4402/antiword-0.37-17.el5
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4403/pkcs11-helper-1.11-3.el5,openvpn-2.3.6-1.el5
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4430/phpMyAdmin4-4.0.10.7-1.el5
1
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4441/icecast-2.4.1-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4475/pwgen-2.07-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
openblas-0.2.13-1.el5
pwgen-2.07-1.el5
sl-5.02-1.el5
Details about builds:
================================================================================
openblas-0.2.13-1.el5 (FEDORA-EPEL-2014-4479)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.13, fixing a bug in sgemm on Sandy Bridge.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 5 2014 Susi Lehtola <jussileht...@fedoraproject.org> - 0.2.13-1
- Update to 0.2.13.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1171015 - openblas-0.2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1171015
--------------------------------------------------------------------------------
================================================================================
pwgen-2.07-1.el5 (FEDORA-EPEL-2014-4475)
Automatic password generation
--------------------------------------------------------------------------------
Update Information:
Update to 2.07:
* Remove backwards compatibility for no-tty mode. Addresses CVE-2013-4440
* Fail hard if /dev/urandom and /dev/random are not available. Addresses
CVE-2013-4442 and Launchpad #1183213 (Closes: #767008)
* Fix pwgen -B so that it doesn't accidentally generate passwords with
ambiguous characters after changing the case of some letters. Addresses
Launchpad Bugs #638418 and #1349863
* Fix potential portability bug on architectures where unsgined ints are not 4
bytes long
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1020220 - CVE-2013-4440 pwgen: non-tty passwords are trivially
weak by default
https://bugzilla.redhat.com/show_bug.cgi?id=1020220
[ 2 ] Bug #1020258 - CVE-2013-4442 pwgen: silent fallback to insecure entropy
https://bugzilla.redhat.com/show_bug.cgi?id=1020258
--------------------------------------------------------------------------------
================================================================================
sl-5.02-1.el5 (FEDORA-EPEL-2014-4489)
Joke command for when you type 'sl' instead of 'ls'
--------------------------------------------------------------------------------
Update Information:
Update to the new upstream (and new build system; #1170931)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1170931 - RFE: update to 5.02
https://bugzilla.redhat.com/show_bug.cgi?id=1170931
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
