EPEL Fedora 5 updates-testing report - epel-devel - Fedora mailing-lists

14 Jun 2014


      The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 783  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1...
 238  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1....
 118  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2.0-1...
  14  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1544/python26-mod_w...
   9  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1575/chkrootkit-0.4...
   2  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-...
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1651/python-jinja2-...
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1646/python26-jinja...
The following builds have been pushed to Fedora EPEL 5 updates-testing
python-jinja2-2.2.1-2.el5
    python26-jinja2-2.5.5-5.el5
Details about builds:
================================================================================
 python-jinja2-2.2.1-2.el5 (FEDORA-EPEL-2014-1651)
 General purpose template engine
--------------------------------------------------------------------------------
Update Information:
Add patch to fix CVE-2014-1402.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 13 2014 Thomas Moschny thomas.moschny@gmx.de - 2.2.1-2
- Fix CVE-2014-1402 (using patch from RHSA-2014:0747).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1051421 - CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use
        https://bugzilla.redhat.com/show_bug.cgi?id=1051421
--------------------------------------------------------------------------------
================================================================================
 python26-jinja2-2.5.5-5.el5 (FEDORA-EPEL-2014-1646)
 General purpose template engine
--------------------------------------------------------------------------------
Update Information:
Add patch to fix CVE-2014-1402.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 14 2014 Thomas Moschny thomas.moschny@gmx.de - 2.5.5-5
- Fix CVE-2014-1402 (using patch from RHSA-2014:0747).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1051421 - CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use
        https://bugzilla.redhat.com/show_bug.cgi?id=1051421
--------------------------------------------------------------------------------