Fedora EPEL 6 Update: fwsnort-1.6.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0119
2013-01-22 02:41:48
--------------------------------------------------------------------------------
Name : fwsnort
Product : Fedora EPEL 6
Version : 1.6.3
Release : 1.el6
URL : http://www.cipherdyne.org/fwsnort/
Summary : Translates Snort rules into equivalent iptables rules
Description :
fwsnort translates Snort rules into equivalent iptables rules and generates
a Bourne shell script that implements the resulting iptables commands.
In addition, fwsnort (optionally) uses the IPTables::Parse module to parse the
iptables ruleset on the machine to determine which Snort rules are applicable
to the specific iptables policy.
fwsnort is able to translate approximately 60% of all rules from the
Snort-2.3.3 IDS into equivalent iptables rules.
--------------------------------------------------------------------------------
Update Information:
Updated version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fwsnort' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
[SECURITY] Fedora EPEL 6 Update: zabbix20-2.0.4-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0155
2013-01-22 02:43:56
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 6
Version : 2.0.4
Release : 3.el6
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
Solves CVE-2013-1364, see
http://sourceforge.net/mailarchive/forum.php?thread_name=50F832DA.5090407...
New upstream release 2.0.4
This build contains additional patches for:
- ZBX-6101 -- SNMP traps were not processed in maintenances with data collection
- ZBX-3379 -- SNMP polling stopped working when the server was bound to an interface
This build contains the patch for ZBX-6101, where SNMP traps were not processed in maintenances with data collection.
The agent pre-uninstall script was unintentionally empty. It now now stops the agent and removes the agent from chkconfig, like it should.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #901877 - CVE-2013-1364 zabbix: possible to override LDAP configuration parameters via the API [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=901877
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: php-pear-Text-Figlet-1.0.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0137
2013-01-22 02:42:49
--------------------------------------------------------------------------------
Name : php-pear-Text-Figlet
Product : Fedora EPEL 6
Version : 1.0.2
Release : 1.el6
URL : http://pear.php.net/package/Text_Figlet
Summary : Render text using FIGlet fonts
Description :
Engine for use FIGlet fonts to rendering text.
--------------------------------------------------------------------------------
Update Information:
Engine for use FIGlet fonts to rendering text.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #895992 - Review Request: php-pear-Text-Figlet - Render text using FIGlet fonts
https://bugzilla.redhat.com/show_bug.cgi?id=895992
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pear-Text-Figlet' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: ivykis-0.36.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0166
2013-01-22 02:45:26
--------------------------------------------------------------------------------
Name : ivykis
Product : Fedora EPEL 6
Version : 0.36.1
Release : 1.el6
URL : http://libivykis.sourceforge.net/
Summary : Library for asynchronous I/O readiness notification
Description :
ivykis is a library for asynchronous I/O readiness notification.
It is a thin, portable wrapper around OS-provided mechanisms such
as epoll_create(2), kqueue(2), poll(2), poll(7d) (/dev/poll) and
port_create(3C).
ivykis was mainly designed for building high-performance network
applications, but can be used in any event-driven application that
uses poll(2)able file descriptors as its event sources.
--------------------------------------------------------------------------------
Update Information:
Update to 0.36.1.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ivykis' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
[SECURITY] Fedora EPEL 6 Update: php-symfony2-Yaml-2.1.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0128
2013-01-22 02:42:20
--------------------------------------------------------------------------------
Name : php-symfony2-Yaml
Product : Fedora EPEL 6
Version : 2.1.7
Release : 1.el6
URL : http://symfony.com/doc/current/components/yaml.html
Summary : Symfony2 Yaml Component
Description :
The Symfony2 YAML Component parses YAML strings to convert them to PHP arrays.
It is also able to convert PHP arrays to YAML strings.
YAML, YAML Ain't Markup Language, is a human friendly data serialization
standard for all programming languages. YAML is a great format for your
configuration files. YAML files are as expressive as XML files and as readable
as INI files.
The Symfony2 YAML Component implements the YAML 1.2 version of the
specification.
--------------------------------------------------------------------------------
Update Information:
Updated to upstream version 2.1.7
CVE-2013-1397: Ability to enable/disable object support in YAML parsing and dumping
See: http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released
Changelog: https://github.com/symfony/symfony/blob/v2.1.7/CHANGELOG-2.1.md
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony2-Yaml' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: safekeep-1.4.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0134
2013-01-22 02:42:39
--------------------------------------------------------------------------------
Name : safekeep
Product : Fedora EPEL 6
Version : 1.4.1
Release : 1.el6
URL : http://safekeep.sourceforge.net
Summary : The SafeKeep backup system
Description :
SafeKeep is a client/server backup system which enhances the
power of rdiff-backup with simple, centralized configuration.
--------------------------------------------------------------------------------
Update Information:
Upgrade to new upstream version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update safekeep' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
[SECURITY] Fedora EPEL 5 Update: proftpd-1.3.3g-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0139
2013-01-22 02:42:56
--------------------------------------------------------------------------------
Name : proftpd
Product : Fedora EPEL 5
Version : 1.3.3g
Release : 2.el5
URL : http://www.proftpd.org/
Summary : Flexible, stable and highly-configurable FTP server
Description :
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by xinetd instead are included.
--------------------------------------------------------------------------------
Update Information:
Jann Horn reported that there is a possible race condition in the handling of the MKD/XMKD FTP commands, when the UserOwner directive is involved, and the attacker is on the same physical machine as a running proftpd. This race applies to mod_sftp and the handling of the MKDIR SFTP request as well.
Note that using the DefaultRoot directive to restrict sessions mitigates this attack, since the symlinks created by the local attacker will point outside of the chroot(2) area within the FTP session, and thus the ownership change will fail. The default configuration in EPEL applies the DefaultRoot directive to all users except "adm".
The upstream reference for this issue is: http://bugs.proftpd.org/show_bug.cgi?id=3841
This update includes a backport to 1.3.3g of upstream's backport to proftpd 1.3.4 of the fix for this issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892715 - CVE-2012-6095 proftpd: Symlink race condition when applying UserOwner to a newly (ProFTPD) created directory
https://bugzilla.redhat.com/show_bug.cgi?id=892715
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update proftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: libxc-2.0.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0162
2013-01-22 02:44:24
--------------------------------------------------------------------------------
Name : libxc
Product : Fedora EPEL 6
Version : 2.0.1
Release : 1.el6
URL : http://www.tddft.org/programs/octopus/wiki/index.php/Libxc
Summary : Library of exchange and correlation functionals to be used in DFT codes
Description :
libxc is a library of exchange and correlation functionals. Its purpose is to
be used in codes that implement density-functional theory. For the moment, the
library includes most of the local density approximations (LDAs), generalized
density approximation (GGAs), and meta-GGAs. The library provides values for
the energy density and its 1st, 2nd, and (for the LDAs) 3rd derivatives.
--------------------------------------------------------------------------------
Update Information:
Bugfixes to MGGA functionals, all B97-like GGA functionals and GGA C_WL functional.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libxc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: php-pear-Text-Password-1.1.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0138
2013-01-22 02:42:53
--------------------------------------------------------------------------------
Name : php-pear-Text-Password
Product : Fedora EPEL 6
Version : 1.1.1
Release : 1.el6
URL : http://pear.php.net/package/Text_Password
Summary : Creating passwords with PHP
Description :
Text_Password allows one to create pronounceable and unpronounceable
passwords. The full functional range is explained in the manual at
http://pear.php.net/manual/.
--------------------------------------------------------------------------------
Update Information:
Text_Password allows one to create pronounceable and unpronounceable passwords. The full functional range is explained in the manual at http://pear.php.net/manual/.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #895984 - Review Request: php-pear-Text-Password - Creating passwords with PHP
https://bugzilla.redhat.com/show_bug.cgi?id=895984
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pear-Text-Password' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: php-horde-Horde-Date-Parser-2.0.1-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0126
2013-01-22 02:42:11
--------------------------------------------------------------------------------
Name : php-horde-Horde-Date-Parser
Product : Fedora EPEL 6
Version : 2.0.1
Release : 2.el6
URL : http://pear.horde.org
Summary : Horde Date Parser
Description :
Library for natural-language date parsing, with support for multiple
languages and locales
--------------------------------------------------------------------------------
Update Information:
Fix broken dependency on php-ereg (not yet provided by php-common on RHEL-6)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Date-Parser' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months