The following Fedora EPEL 5 Security updates need testing:
Age URL
815
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3....
269
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs...
149
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2....
34
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7....
24
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1696/perl-Email-...
18
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1747/mediawiki11...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1803/chrony-1.30...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1824/lz4-r119-1.el5
4
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1780/zarafa-7.1....
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1898/polarssl-1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
CGSI-gSOAP-1.3.6-5.el5
polarssl-1.3.2-2.el5
slowhttptest-1.6-2.el5
Details about builds:
================================================================================
CGSI-gSOAP-1.3.6-5.el5 (FEDORA-EPEL-2014-1758)
GSI plugin for gSOAP
--------------------------------------------------------------------------------
Update Information:
Updated to 1.3.6 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 15 2014 Alejandro Alvarez Ayllon <aalvarez(a)cern.ch> - 1.3.6-5
- Dropped multithreading backport. Causes issues to dpm-srm
* Wed Jul 2 2014 Alejandro Alvarez Ayllon <aalvarez(a)cern.ch> - 1.3.6-4
- Backported fix for multithreading
* Fri Jun 27 2014 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.3.6-3
- Fix broken man page
* Fri Jun 27 2014 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.3.6-2
- Update the source description for the new release
* Fri Jun 27 2014 Alejandro Alvarez Ayllon <aalvarez(a)cern.ch> - 1.3.6-1
- Update for new upstream release
* Fri Jun 6 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.5-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Oct 18 2013 Adrien Devresse <adevress at cern.ch> - 1.3.5-7
- Rebuilt for gsoap release
* Thu Aug 8 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.3.5-6
- Use _pkgdocdir
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
polarssl-1.3.2-2.el5 (FEDORA-EPEL-2014-1898)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- CVE-2014-4911
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 14 2014 Morten Stevens <mstevens(a)imt-systems.com> - 1.3.2-2
- CVE-2014-4911 (rhbz#1118931)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1118929 - CVE-2014-4911 PolarSSL: Denial of Service against GCM enabled
servers (and clients)
https://bugzilla.redhat.com/show_bug.cgi?id=1118929
--------------------------------------------------------------------------------
================================================================================
slowhttptest-1.6-2.el5 (FEDORA-EPEL-2014-1910)
An Application Layer DoS attack simulator
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1119540 - Please build slowhttptest for EPEL6+
https://bugzilla.redhat.com/show_bug.cgi?id=1119540
--------------------------------------------------------------------------------