Fedora EPEL 6 Update: zabbix-1.8.18-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11809
2013-10-10 17:27:47
--------------------------------------------------------------------------------
Name : zabbix
Product : Fedora EPEL 6
Version : 1.8.18
Release : 1.el6
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
ZABBIX is software that monitors numerous parameters of a network and
the health and integrity of servers. ZABBIX uses a flexible
notification mechanism that allows users to configure e-mail based
alerts for virtually any event. This allows a fast reaction to server
problems. ZABBIX offers excellent reporting and data visualisation
features based on the stored data. This makes ZABBIX ideal for
capacity planning.
ZABBIX supports both polling and trapping. All ZABBIX reports and
statistics, as well as configuration parameters are accessed through a
web-based front end. A web-based front end ensures that the status of
your network and the health of your servers can be assessed from any
location. Properly configured, ZABBIX can play an important role in
monitoring IT infrastructure. This is equally true for small
organisations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn1.8.18.php
The following issues were already sorted out in 1.8.17-3:
- ZBX-6804
- ZBX-5924
An SQL injection vulnerability inside frontend and API was discovered and mended:
https://support.zabbix.com/browse/ZBX-7091
CVE-2013-5743
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
[SECURITY] Fedora EPEL 6 Update: dropbear-2013.59-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11803
2013-10-10 17:27:36
--------------------------------------------------------------------------------
Name : dropbear
Product : Fedora EPEL 6
Version : 2013.59
Release : 1.el6
URL : http://matt.ucc.asn.au/dropbear/dropbear.html
Summary : SSH2 server and client
Description :
Dropbear is a relatively small SSH server and client. Dropbear
is particularly useful for "embedded"-type Linux (or other Unix)
systems, such as wireless routers.
--------------------------------------------------------------------------------
Update Information:
New version/Unbundle libtom*/harden build/AArch64 support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1017983 - CVE-2013-4421 dropbear: memory exhaustion DoS via large decompressed payloads
https://bugzilla.redhat.com/show_bug.cgi?id=1017983
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dropbear' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 6 Update: nodejs-mysql-2.0.0-alpha9.2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11789
2013-10-10 17:27:07
--------------------------------------------------------------------------------
Name : nodejs-mysql
Product : Fedora EPEL 6
Version : 2.0.0
Release : alpha9.2.el6
URL : http://github.com/felixge/node-mysql
Summary : A node.js driver for mysql
Description :
This is a node.js driver for mysql.
It is written in JavaScript, does not require compiling,
and is 100% MIT licensed.
--------------------------------------------------------------------------------
Update Information:
Fix require-all dependancy to work with version in Fedora
Newpackage
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-mysql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
[SECURITY] Fedora EPEL 6 Update: roundcubemail-0.9.5-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11925
2013-10-22 18:00:28
--------------------------------------------------------------------------------
Name : roundcubemail
Product : Fedora EPEL 6
Version : 0.9.5
Release : 1.el6
URL : http://www.roundcube.net
Summary : Round Cube Webmail is a browser-based multilingual IMAP client
Description :
RoundCube Webmail is a browser-based multilingual IMAP client
with an application-like user interface. It provides full
functionality you expect from an e-mail client, including MIME
support, address book, folder manipulation, message searching
and spell checking. RoundCube Webmail is written in PHP and
requires a database: MySQL, PostgreSQL and SQLite are known to
work. The user interface is fully skinnable using XHTML and
CSS 2.
--------------------------------------------------------------------------------
Update Information:
Roundcubemail just released new 0.9.5 version with fixes for VCE2013-6172(will be available soon).
Hotfix: https://github.com/roundcube/roundcubemail/commit/4109bb26ce.diff
Full announcement:
--------
We just published new releases which fix a recently reported
vulnerability that allows an attacker to overwrite configuration
settings using user preferences. This can result in random file
access, manipulated SQL queries and even code execution. The latter
one only affects versions 0.8.6 and older.
Beside the security fix, the 0.9.5 release also includes other minor
bug fixes and improvements. Most notably it brings the default spell
checker back after Google suspended their public spell checking
service.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1021735 - CVE-2013-6172: Vulnerability in handling _session argument of utils/save-prefs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1021735
[ 2 ] Bug #1021965 - CVE-2013-6172 roundcubemail: vulnerability in handling _session argument of utils/save-prefs [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1021965
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update roundcubemail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 5 Update: zabbix20-2.0.9-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11795
2013-10-10 17:27:19
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 5
Version : 2.0.9
Release : 1.el5
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn2.0.9.php
The following issues were already sorted out in 2.0.8-3:
- ZBX-6804
- ZBX-6922
- ZBX-6992
- ZBX-7091
An SQL injection vulnerability inside frontend and API was discovered and mended:
https://support.zabbix.com/browse/ZBX-7091
CVE-2013-5743
Additional improvements:
- Patch for failing XML host import (ZBX-6922)
- SQL speed-up patch for graphs (ZBX-6804)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 6 Update: python-flask-assets-0.8-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11805
2013-10-10 17:27:40
--------------------------------------------------------------------------------
Name : python-flask-assets
Product : Fedora EPEL 6
Version : 0.8
Release : 2.el6
URL : http://github.com/miracle2k/flask-assets
Summary : Asset management for flask
Description :
Integrates the webassets library with Flask, adding support
for merging, minifying and compiling CSS and Javascript files.
--------------------------------------------------------------------------------
Update Information:
Added python-webassets as require.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1014147 - python-flask-assets: python-webassets missing as Requires
https://bugzilla.redhat.com/show_bug.cgi?id=1014147
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-flask-assets' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 5 Update: mozilla-https-everywhere-3.4.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11798
2013-10-10 17:27:26
--------------------------------------------------------------------------------
Name : mozilla-https-everywhere
Product : Fedora EPEL 5
Version : 3.4.2
Release : 1.el5
URL : https://eff.org/https-everywhere
Summary : HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
Description :
HTTPS Everywhere is a Firefox extension produced as a collaboration between
The Tor Project and the Electronic Frontier Foundation. It encrypts your
communications with a number of major websites.
Many sites on the web offer some limited support for encryption over HTTPS,
but make it difficult to use. For instance, they may default to unencrypted
HTTP, or fill encrypted pages with links that go back to the unencrypted site.
The HTTPS Everywhere extension fixes these problems by rewriting all requests
to these sites to HTTPS.
--------------------------------------------------------------------------------
Update Information:
- HTTPS Everywhere builds are now deterministic!
- Global memory leak bug fixes
- Updated rules: Craigslist, Apple.com, Microsoft, CloudFront, UKLocalGov,
-- Bing, Cengage
- New rules from dev: IPTorrents.com, TvTorrents
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-https-everywhere' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 6 Update: qt5-qtdoc-5.1.1-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11790
2013-10-10 17:27:09
--------------------------------------------------------------------------------
Name : qt5-qtdoc
Product : Fedora EPEL 6
Version : 5.1.1
Release : 2.el6
URL : http://qt-project.org/
Summary : Main Qt5 Reference Documentation
Description :
QtDoc contains the main Qt Reference Documentation, which includes
overviews, Qt topics, and examples not specific to any Qt module.
--------------------------------------------------------------------------------
Update Information:
Main Qt5 Reference Documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010727 - Review Request: qt5-qtdoc - Main Qt5 Reference Documentation
https://bugzilla.redhat.com/show_bug.cgi?id=1010727
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qt5-qtdoc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 6 Update: zabbix20-2.0.9-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11791
2013-10-10 17:27:11
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 6
Version : 2.0.9
Release : 1.el6
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn2.0.9.php
The following issues were already sorted out in 2.0.8-3:
- ZBX-6804
- ZBX-6922
- ZBX-6992
- ZBX-7091
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months
Fedora EPEL 6 Update: python-behave-1.2.3-7.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11944
2013-10-24 18:20:33
--------------------------------------------------------------------------------
Name : python-behave
Product : Fedora EPEL 6
Version : 1.2.3
Release : 7.el6
URL : http://pypi.python.org/pypi/behave
Summary : Tools for the behavior-driven development, Python style
Description :
Behavior-driven development (or BDD) is an agile software development
technique that encourages collaboration between developers, QA and non-
technical or business participants in a software project.
*behave* uses tests written in a natural language style, backed up by
Python code.
--------------------------------------------------------------------------------
Update Information:
Initial import of new package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #987622 - Review Request: python-behave - Tools for the behaviour-driven development, Python style
https://bugzilla.redhat.com/show_bug.cgi?id=987622
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-behave' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 6 months