The following Fedora EPEL 5 Security updates need testing:
Age URL
387
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
282
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-2.el5
87
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0366/openconnect-4.08-1.el5
21
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5517/git-1.8.2.1-1.el5
14
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5620/phpMyAdmin3-3.5.8.1-1.el5
6
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5711/openvpn-2.3.1-1.el5
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-5799/python-virtualenv-1.9.1-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
pcp-3.8.0-1.el5
python-virtualenv-1.9.1-1.el5
Details about builds:
================================================================================
pcp-3.8.0-1.el5 (FEDORA-EPEL-2013-5796)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 14 2013 Nathan Scott <nath...@redhat.com> - 3.8.0-1
- Update to latest PCP sources.
- Validate metric names passed into pmiAddMetric (BZ 958019)
- Install log directories with correct ownership (BZ 960858)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #958019 - pmiAddMetric accepts out of bounds characters
https://bugzilla.redhat.com/show_bug.cgi?id=958019
[ 2 ] Bug #960858 - Incorrect directory owners in pcp
https://bugzilla.redhat.com/show_bug.cgi?id=960858
--------------------------------------------------------------------------------
================================================================================
python-virtualenv-1.9.1-1.el5 (FEDORA-EPEL-2013-5799)
Tool to create isolated Python environments
--------------------------------------------------------------------------------
Update Information:
* Fixes two security issues with the bundled copy of pip:
- Insecure tempdir usage CVE-2013-1888
- Uses http:// to download packages instead of https://
See changelog at: http://pypi.python.org/pypi/virtualenv#id2
Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for
information.
Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for
information.
See changelog at: http://pypi.python.org/pypi/virtualenv#id2
Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for
information.
Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for
information.
See changelog at: http://pypi.python.org/pypi/virtualenv#id2
Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for
information.
Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for
information.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 14 2013 Toshio Kuratomi <tos...@fedoraproject.org> - 1.9.1-1
- Update to upstream 1.9.1 because of security issues with the bundled
python-pip in older releases. This is just a quick fix until a
python-virtualenv maintainer can unbundle the python-pip package
see: https://bugzilla.redhat.com/show_bug.cgi?id=749378
* Thu Feb 14 2013 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.7.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Tue Aug 14 2012 Steve Milner <m...@stevemilner.org> - 1.7.2-1
- Update for upstream bug fixes.
- Added path for versioned binary.
- Patch no longer required.
* Sat Jul 21 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.7.1.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Wed Mar 14 2012 Steve 'Ashcrow' Milner <m...@stevemilner.org> - 1.7.1.2-1
- Update for upstream bug fixes.
- Added patch for sphinx building
* Sat Jan 14 2012 Fedora Release Engineering <rel-...@lists.fedoraproject.org>
- 1.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #923974 - CVE-2013-1888 python-pip: insecure temporary directory
usage
https://bugzilla.redhat.com/show_bug.cgi?id=923974
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list
epel-de...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel
