The following Fedora EPEL 5 Security updates need testing: Age URL 1096 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.1... 551 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.... 315 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-... 165 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-1.3... 14 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5740/perl-Test-Sign... 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5758/tor-0.2.4.27-1... 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5694/zarafa-7.1.12-... 6 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5821/cherokee-1.2.1... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5894/mksh-50f-1.el5 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5952/pdns-recursor-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5953/wordpress-4.1....
The following builds have been pushed to Fedora EPEL 5 updates-testing
ganglia-3.7.1-1.el5 mod_geoip-1.2.10-1.el5 pdns-recursor-3.6.3-1.el5 wordpress-4.1.2-1.el5
Details about builds:
================================================================================ ganglia-3.7.1-1.el5 (FEDORA-EPEL-2015-5941) Distributed Monitoring System -------------------------------------------------------------------------------- Update Information:
Merged from f23 to bring ganglia up to date -------------------------------------------------------------------------------- References:
[ 1 ] Bug #717881 - New ganglia-web version https://bugzilla.redhat.com/show_bug.cgi?id=717881 --------------------------------------------------------------------------------
================================================================================ mod_geoip-1.2.10-1.el5 (FEDORA-EPEL-2015-5955) GeoIP module for the Apache HTTP Server -------------------------------------------------------------------------------- Update Information:
mod_geoip 1.2.10 (2015-03-06) =============================
- Update docs to note that GeoIP configuration directives cannot be placed in .htaccess files. - Fix small memleak (Boris Zentner) - A segfault when using multi-threaded workers was fixed. (Fix from thinker0. GitHub #16.) - Several instances of manual memory management were switched to use the use Apache's memory pool. (Fix from thinker0. GitHub #16.)
mod_geoip 1.2.9 (2014-03-20) ============================
- Added a new directive, GeoIPScanProxyHeaderField, to specify a custom header which contains the client's IP address (Sascha Kuehndel) - Added the ability to forward the result fields to a backend server/proxy via request header (Sascha Kuehndel)
mod_geoip 1.2.9 (2013-01-08) ============================
- Add GeoIPUseFirstNonPrivateXForwardedForIP option (Boris Zentner) - Support Apache 2.4 (Boris Zentner) - Use GeoIP_id_by_addr_v6 instead of GeoIP_country_id_by_addr_v6 (Boris Zentner) - Include util_script.h to silence warning about ap_add_common_vars (Boris Zentner) -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 23 2015 Robert Scheck robert@fedoraproject.org 1.2.10-1 - Upgrade to 1.2.10 (#1214493) * Sun Aug 17 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.7-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.7-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Jan 23 2014 Joe Orton jorton@redhat.com - 1.2.7-4 - fix _httpd_mmn expansion in absence of httpd-devel * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1214493 - Version bump needed for mod_geoip to pick up various reliability issues in multi-threading https://bugzilla.redhat.com/show_bug.cgi?id=1214493 --------------------------------------------------------------------------------
================================================================================ pdns-recursor-3.6.3-1.el5 (FEDORA-EPEL-2015-5952) Modern, advanced and high performance recursing/non authoritative name server -------------------------------------------------------------------------------- Update Information:
- Update to 3.6.3 - CVE-2015-1868 (#1213832)
External References: https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/ -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 23 2015 Morten Stevens mstevens@imt-systems.com - 3.6.3-1 - Update to 3.6.3 - CVE-2015-1868 (#1213832) - Disable security status polling by default -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1213377 - CVE-2015-1868 pdns: Label decompression bug in PowerDNS can cause crashes on specific platforms https://bugzilla.redhat.com/show_bug.cgi?id=1213377 --------------------------------------------------------------------------------
================================================================================ wordpress-4.1.2-1.el5 (FEDORA-EPEL-2015-5953) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information:
This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately.
https://wordpress.org/news/2015/04/wordpress-4-1-2/ -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 23 2015 Remi Collet remi@fedoraproject.org - 4.1.2-1 - WordPress 4.1.2 Security Release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1214650 - wordpress: several vulnerabilities fixed in Wordpress 4.1.2 https://bugzilla.redhat.com/show_bug.cgi?id=1214650 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org