Fedora EPEL 6 Update: python-fedmsg-meta-fedora-infrastructure-0.0.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13605
2012-12-01 00:32:27
--------------------------------------------------------------------------------
Name : python-fedmsg-meta-fedora-infrastructure
Product : Fedora EPEL 6
Version : 0.0.3
Release : 1.el6
URL : http://pypi.python.org/pypi/fedmsg_meta_fedora_infrastructure
Summary : Metadata providers for Fedora Infrastructure's fedmsg deployment
Description :
Metadata providers for Fedora Infrastructure's fedmsg deployment
fedmsg <http://fedmsg.com> is a set of tools for knitting together
services and webapps into a realtime messaging net. This package contains
metadata provider plugins for the primary deployment of that system:
Fedora Infrastructure <http://fedoraproject.org/wiki/Infrastructure>.
If you were to deploy fedmsg at another site, you would like want to write
your own module like this one that could provide textual representations of
your messages.
--------------------------------------------------------------------------------
Update Information:
Initial import.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #880875 - Review Request: python-fedmsg-meta-fedora-infrastructure - fedmsg metadata providers for Fedora Infrastructure's deployment
https://bugzilla.redhat.com/show_bug.cgi?id=880875
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-fedmsg-meta-fedora-infrastructure' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
[SECURITY] Fedora EPEL 6 Update: drupal7-7.18-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13828
2012-12-20 23:55:05
--------------------------------------------------------------------------------
Name : drupal7
Product : Fedora EPEL 6
Version : 7.18
Release : 1.el6
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple vulnerabilities:
1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)
CVEs have been requested and are not yet assigned.
These flaws have been fixed in Drupal 6.27 and 7.18.
[1] http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws fixed in 6.27/7.18 (SA-CORE-2012-004)
https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
[SECURITY] Fedora EPEL 6 Update: drupal6-6.27-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13828
2012-12-20 23:55:05
--------------------------------------------------------------------------------
Name : drupal6
Product : Fedora EPEL 6
Version : 6.27
Release : 1.el6
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple vulnerabilities:
1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)
CVEs have been requested and are not yet assigned.
These flaws have been fixed in Drupal 6.27 and 7.18.
[1] http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws fixed in 6.27/7.18 (SA-CORE-2012-004)
https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
Fedora EPEL 6 Update: shinken-1.0.1-7.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13789
2012-12-18 00:31:45
--------------------------------------------------------------------------------
Name : shinken
Product : Fedora EPEL 6
Version : 1.0.1
Release : 7.el6
URL : http://shinken-monitoring.org
Summary : Python Monitoring tool
Description :
Shinken is a new monitoring tool written in Python.
The main goal of Shinken is to allow users to have a fully flexible
architecture for their monitoring system that can easily scale to large
environments.
Shinken also provide interfaces with NDODB and Merlin database,
Livestatus connector Shinken does not include any human interfaces.
--------------------------------------------------------------------------------
Update Information:
fix uninstall receiver
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update shinken' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
[SECURITY] Fedora EPEL 6 Update: icecast-2.3.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13176
2012-10-15 17:14:14
--------------------------------------------------------------------------------
Name : icecast
Product : Fedora EPEL 6
Version : 2.3.3
Release : 1.el6
URL : http://www.icecast.org/
Summary : ShoutCast compatible streaming media server
Description :
Icecast is a streaming media server which currently supports Ogg Vorbis
and MP3 audio streams. It can be used to create an Internet radio
station or a privately running jukebox and many things in between. It
is very versatile in that new formats can be added relatively easily and
supports open standards for commuincation and interaction.
--------------------------------------------------------------------------------
Update Information:
New upstream release, fixing CVE bug.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #831180 - Icecast 2.3.3 available
https://bugzilla.redhat.com/show_bug.cgi?id=831180
[ 2 ] Bug #797184 - Apply useful upstream patches
https://bugzilla.redhat.com/show_bug.cgi?id=797184
[ 3 ] Bug #768176 - CVE-2011-4612 icecast2: Newline injection in error.log [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=768176
[ 4 ] Bug #768175 - CVE-2011-4612 icecast2: Newline injection in error.log [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=768175
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update icecast' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
[SECURITY] Fedora EPEL 6 Update: openstack-nova-2012.2.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13784
2012-12-18 00:31:24
--------------------------------------------------------------------------------
Name : openstack-nova
Product : Fedora EPEL 6
Version : 2012.2.2
Release : 1.el6
URL : http://openstack.org/projects/compute/
Summary : OpenStack Compute (nova)
Description :
OpenStack Compute (codename Nova) is open source software designed to
provision and manage large networks of virtual machines, creating a
redundant and scalable cloud computing platform. It gives you the
software, control panels, and APIs required to orchestrate a cloud,
including running instances, managing networks, and controlling access
through users and projects. OpenStack Compute strives to be both
hardware and hypervisor agnostic, currently supporting a variety of
standard hardware configurations and seven major hypervisors.
--------------------------------------------------------------------------------
Update Information:
- Update to folsom stable release 2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #884293 - CVE-2012-5625 OpenStack Nova: Information leak in libvirt LVM-backed instances
https://bugzilla.redhat.com/show_bug.cgi?id=884293
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-nova' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
Fedora EPEL 6 Update: armadillo-3.6.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13781
2012-12-18 00:31:13
--------------------------------------------------------------------------------
Name : armadillo
Product : Fedora EPEL 6
Version : 3.6.1
Release : 1.el6
URL : http://arma.sourceforge.net/
Summary : Fast C++ matrix library with interfaces to LAPACK and ATLAS
Description :
Armadillo is a C++ linear algebra library (matrix maths)
aiming towards a good balance between speed and ease of use.
Integer, floating point and complex numbers are supported,
as well as a subset of trigonometric and statistics functions.
Various matrix decompositions are provided through optional
integration with LAPACK and ATLAS libraries.
A delayed evaluation approach is employed (during compile time)
to combine several operations into one and reduce (or eliminate)
the need for temporaries. This is accomplished through recursive
templates and template meta-programming.
This library is useful if C++ has been decided as the language
of choice (due to speed and/or integration capabilities), rather
than another language like Matlab or Octave.
--------------------------------------------------------------------------------
Update Information:
Armadillo 3.6.1 contains some important bugfixes and updates.
Update Armadillo to latest stable version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update armadillo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
[SECURITY] Fedora EPEL 6 Update: fail2ban-0.8.8-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13786
2012-12-18 00:31:31
--------------------------------------------------------------------------------
Name : fail2ban
Product : Fedora EPEL 6
Version : 0.8.8
Release : 1.el6
URL : http://fail2ban.sourceforge.net/
Summary : Ban IPs that make too many password failures
Description :
Fail2ban scans log files like /var/log/pwdfail or
/var/log/apache/error_log and bans IP that makes too many password
failures. It updates firewall rules to reject the IP address.
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.8 (CVE-2012-5642 Bug #887914)
- Fixes:
Alan Jenkins
* [8c38907] Removed 'POSSIBLE BREAK-IN ATTEMPT' from sshd filter to avoid
banning due to misconfigured DNS. Close gh-64
Yaroslav Halchenko
* [83109bc] IMPORTANT: escape the content of <matches> (if used in
custom action files) since its value could contain arbitrary
symbols. Thanks for discovery go to the NBS System security
team
* [b159eab] do not enable pyinotify backend if pyinotify < 0.8.3
* [37a2e59] store IP as a base, non-unicode str to avoid spurious messages
in the console. Close gh-91
- New features:
David Engeset
* [2d672d1,6288ec2] 'unbanip' command for the client + avoidance of touching
the log file to take 'banip' or 'unbanip' in effect. Close gh-81, gh-86
Yaroslav Halchenko
- Enhancements:
* [2d66f31] replaced uninformative "Invalid command" message with warning log
exception why command actually failed
* [958a1b0] improved failregex to "support" auth.backend = "htdigest"
* [9e7a3b7] until we make it proper module -- adjusted sys.path only if
system-wide run
* [f52ba99] downgraded "already banned" from WARN to INFO level. Closes gh-79
* [f105379] added hints into the log on some failure return codes (e.g. 0x7f00
for this gh-87)
* Various others: travis-ci integration, script to run tests
against all available Python versions, etc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #887914 - CVE-2012-5642 fail2ban: does not escape the content of <matches>
https://bugzilla.redhat.com/show_bug.cgi?id=887914
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fail2ban' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
Fedora EPEL 6 Update: hercules-3.08-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13723
2012-12-10 18:27:52
--------------------------------------------------------------------------------
Name : hercules
Product : Fedora EPEL 6
Version : 3.08
Release : 1.el6
URL : http://www.hercules-390.eu/
Summary : Hercules S/370, ESA/390, and z/Architecture emulator
Description :
Hercules is an emulator for the IBM System/370, ESA/390, and z/Architecture
series of mainframe computers. It is capable of running any IBM operating
system and applications that a real system will run, as long as the hardware
needed is emulated. Hercules can emulate FBA and CKD DASD, tape, printer,
card reader, card punch, channel-to-channel adapter, LCS Ethernet, and
printer-keyboard, 3270 terminal, and 3287 printer devices.
--------------------------------------------------------------------------------
Update Information:
- updated to 3.08 (http://www.hercules-390.eu/hercnew.html)
- clean firewall rules after hercules finish (#884311)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #884311 - duplicate iptables rules
https://bugzilla.redhat.com/show_bug.cgi?id=884311
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update hercules' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months
Fedora EPEL 5 Update: drupal7-context-3.0-0.3.beta5.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13716
2012-12-10 18:27:24
--------------------------------------------------------------------------------
Name : drupal7-context
Product : Fedora EPEL 5
Version : 3.0
Release : 0.3.beta5.el5
URL : http://drupal.org/project/context
Summary : Allows you to manage contextual conditions and reactions of your site
Description :
Context allows you to manage contextual conditions and reactions for different
portions of your site. You can think of each context as representing a "section"
of your site. For each context, you can choose the conditions that trigger this
context to be active and choose different aspects of Drupal that should react to
this active context.
Think of conditions as a set of rules that are checked during page load to see
what context is active. Any reactions that are associated with active contexts
are then fired.
--------------------------------------------------------------------------------
Update Information:
Update to 3.0-beta5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847636 - drupal7-context-3.0-beta5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=847636
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7-context' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 3 months