The following Fedora EPEL 5 Security updates need testing:
Age URL
1096
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
551
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.20.12-1.el5
315
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-1.el5
165
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-1.3.8-2.el5
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5740/perl-Test-Signature-1.11-1.el5,perl-Module-Signature-0.78-1.el5
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5758/tor-0.2.4.27-1.el5
11
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5694/zarafa-7.1.12-1.el5,php53-mapi-7.1.12-1.el5
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5821/cherokee-1.2.103-6.el5
3
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5894/mksh-50f-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5952/pdns-recursor-3.6.3-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5953/wordpress-4.1.2-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
ganglia-3.7.1-1.el5
mod_geoip-1.2.10-1.el5
pdns-recursor-3.6.3-1.el5
wordpress-4.1.2-1.el5
Details about builds:
================================================================================
ganglia-3.7.1-1.el5 (FEDORA-EPEL-2015-5941)
Distributed Monitoring System
--------------------------------------------------------------------------------
Update Information:
Merged from f23 to bring ganglia up to date
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717881 - New ganglia-web version
https://bugzilla.redhat.com/show_bug.cgi?id=717881
--------------------------------------------------------------------------------
================================================================================
mod_geoip-1.2.10-1.el5 (FEDORA-EPEL-2015-5955)
GeoIP module for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
mod_geoip 1.2.10 (2015-03-06)
=============================
- Update docs to note that GeoIP configuration directives cannot be placed in
.htaccess files.
- Fix small memleak (Boris Zentner)
- A segfault when using multi-threaded workers was fixed. (Fix from thinker0.
GitHub #16.)
- Several instances of manual memory management were switched to use the use
Apache's memory pool. (Fix from thinker0. GitHub #16.)
mod_geoip 1.2.9 (2014-03-20)
============================
- Added a new directive, GeoIPScanProxyHeaderField, to specify a custom header
which contains the client's IP address (Sascha Kuehndel)
- Added the ability to forward the result fields to a backend server/proxy via
request header (Sascha Kuehndel)
mod_geoip 1.2.9 (2013-01-08)
============================
- Add GeoIPUseFirstNonPrivateXForwardedForIP option (Boris Zentner)
- Support Apache 2.4 (Boris Zentner)
- Use GeoIP_id_by_addr_v6 instead of GeoIP_country_id_by_addr_v6 (Boris Zentner)
- Include util_script.h to silence warning about ap_add_common_vars (Boris
Zentner)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2015 Robert Scheck <rob...@fedoraproject.org> 1.2.10-1
- Upgrade to 1.2.10 (#1214493)
* Sun Aug 17 2014 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.2.7-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.2.7-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Jan 23 2014 Joe Orton <jor...@redhat.com> - 1.2.7-4
- fix _httpd_mmn expansion in absence of httpd-devel
* Sat Aug 3 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.2.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.2.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214493 - Version bump needed for mod_geoip to pick up various
reliability issues in multi-threading
https://bugzilla.redhat.com/show_bug.cgi?id=1214493
--------------------------------------------------------------------------------
================================================================================
pdns-recursor-3.6.3-1.el5 (FEDORA-EPEL-2015-5952)
Modern, advanced and high performance recursing/non authoritative name server
--------------------------------------------------------------------------------
Update Information:
- Update to 3.6.3
- CVE-2015-1868 (#1213832)
External References:
https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2015 Morten Stevens <mstev...@imt-systems.com> - 3.6.3-1
- Update to 3.6.3
- CVE-2015-1868 (#1213832)
- Disable security status polling by default
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213377 - CVE-2015-1868 pdns: Label decompression bug in PowerDNS
can cause crashes on specific platforms
https://bugzilla.redhat.com/show_bug.cgi?id=1213377
--------------------------------------------------------------------------------
================================================================================
wordpress-4.1.2-1.el5 (FEDORA-EPEL-2015-5953)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
This is a critical security release for all previous versions and we strongly
encourage you to update your sites immediately.
https://wordpress.org/news/2015/04/wordpress-4-1-2/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2015 Remi Collet <r...@fedoraproject.org> - 4.1.2-1
- WordPress 4.1.2 Security Release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214650 - wordpress: several vulnerabilities fixed in Wordpress
4.1.2
https://bugzilla.redhat.com/show_bug.cgi?id=1214650
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
