[SECURITY] Fedora EPEL 6 Update: zabbix20-2.0.6-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11090
2013-08-01 19:26:33
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 6
Version : 2.0.6
Release : 3.el6
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
This update solves a security issue involving the use of libcurl in the code used to access the eztexting service. It potentially allows for man-in-the-middle attacks. The issue was described as CVE-2012-6086.
Please refer to https://support.zabbix.com/browse/ZBX-5924 for details!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893414 - CVE-2012-6086 zabbix20: Improper use of cURL API might lead to improper SSL certificate verification (MiTM) [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=893414
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: python-pbr-0.5.19-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11084
2013-08-01 19:26:22
--------------------------------------------------------------------------------
Name : python-pbr
Product : Fedora EPEL 6
Version : 0.5.19
Release : 2.el6
URL : http://pypi.python.org/pypi/pbr
Summary : Python Build Reasonableness
Description :
PBR is a library that injects some useful and sensible default behaviors into
your setuptools run. It started off life as the chunks of code that were copied
between all of the OpenStack projects. Around the time that OpenStack hit 18
different projects each with at least 3 active branches, it seems like a good
time to make that code into a proper re-usable library.
--------------------------------------------------------------------------------
Update Information:
This build corrected a packaging issue, no other things changed.
update to latest stable version. Safe for all users to update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #983008 - python-pbr-0.5.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=983008
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pbr' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: nodejs-ronn-0.4.0-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11060
2013-08-01 19:25:40
--------------------------------------------------------------------------------
Name : nodejs-ronn
Product : Fedora EPEL 6
Version : 0.4.0
Release : 3.el6
URL : https://github.com/kapouer/ronnjs
Summary : Markdown to roff/html converter
Description :
Javascript port of ronn, using markdown-js to produce roff man pages. Not fully
compatible with ronn, although it aims to be, wherever possible.
--------------------------------------------------------------------------------
Update Information:
Rebuild to restrict to compatible architectures.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-ronn' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: nodejs-should-1.2.2-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11070
2013-08-01 19:25:57
--------------------------------------------------------------------------------
Name : nodejs-should
Product : Fedora EPEL 6
Version : 1.2.2
Release : 3.el6
URL : https://github.com/visionmedia/should.js
Summary : A test framework agnostic BDD-style assertions for Node.js
Description :
should is an expressive, readable, test framework agnostic, behavior-driven
development (BDD)-style assertion library for Node.js.
It extends the Object prototype with a single non-enumerable getter that
allows you to express how that object should behave.
should literally extends Node's assert module. For example,
should.equal(str, 'foo') will work, just as assert.equal(str, 'foo') would,
and should.AssertionError is assert.AssertionError, meaning any test framework
supporting this constructor will function properly with should.
--------------------------------------------------------------------------------
Update Information:
Rebuild to restrict to compatible architectures.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-should' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: nodejs-sax-0.5.4-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11038
2013-08-01 19:24:52
--------------------------------------------------------------------------------
Name : nodejs-sax
Product : Fedora EPEL 6
Version : 0.5.4
Release : 2.el6
URL : https://github.com/isaacs/sax-js
Summary : A streaming SAX-style XML parser in JavaScript for Node.js
Description :
This is a SAX-style streaming XML parser in JavaScript for Node.js.
It is:
- A very simple tool to parse through an XML string.
- A stepping stone to a streaming HTML parser.
- A handy way to deal with RSS and other mostly-ok-but-kinda-broken XML docs.
--------------------------------------------------------------------------------
Update Information:
Rebuild to restrict to compatible architectures.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-sax' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: guacamole-server-0.8.2-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10973
2013-07-26 17:13:08
--------------------------------------------------------------------------------
Name : guacamole-server
Product : Fedora EPEL 6
Version : 0.8.2
Release : 2.el6
URL : http://guac-dev.org/
Summary : Server-side native components that form the Guacamole proxy
Description :
Guacamole is an HTML5 remote desktop gateway.
Guacamole provides access to desktop environments using remote desktop protocols
like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing
access to multiple desktops through a web browser.
No browser plugins are needed, and no client software needs to be installed. The
client requires nothing more than a web browser supporting HTML5 and AJAX.
The main web application is provided by the "guacamole-client" package.
--------------------------------------------------------------------------------
Update Information:
Updated Guacamole with printing support on RDP plugin and .
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #985814 - Review Request: guacamole-client - Server-side Java components that form the Guacamole application
https://bugzilla.redhat.com/show_bug.cgi?id=985814
[ 2 ] Bug #985818 - Review Request: guacamole-server - Server-side native components that form the Guacamole proxy
https://bugzilla.redhat.com/show_bug.cgi?id=985818
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update guacamole-server' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
[SECURITY] Fedora EPEL 5 Update: zabbix20-2.0.6-3.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11075
2013-08-01 19:26:06
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 5
Version : 2.0.6
Release : 3.el5
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
This update solves a security issue involving the use of libcurl in the code used to access the eztexting service. It potentially allows for man-in-the-middle attacks. The issue was described as CVE-2012-6086.
Please refer to https://support.zabbix.com/browse/ZBX-5924 for details!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #893414 - CVE-2012-6086 zabbix20: Improper use of cURL API might lead to improper SSL certificate verification (MiTM) [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=893414
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: weasyprint-0.19.2-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11032
2013-08-01 19:24:36
--------------------------------------------------------------------------------
Name : weasyprint
Product : Fedora EPEL 6
Version : 0.19.2
Release : 3.el6
URL : http://weasyprint.org/
Summary : Utility to render HTML and CSS to PDF
Description :
WeasyPrint can render HTML and CSS to PDF. It aims to support web standards
for printing.
--------------------------------------------------------------------------------
Update Information:
Utility and Python library to render HTML and CSS to PDF
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #986608 - Review Request: weasyprint - Utility and Python library to render HTML and CSS to PDF
https://bugzilla.redhat.com/show_bug.cgi?id=986608
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update weasyprint' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 5 Update: openvpn-2.3.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11043
2013-08-01 19:25:02
--------------------------------------------------------------------------------
Name : openvpn
Product : Fedora EPEL 5
Version : 2.3.2
Release : 1.el5
URL : http://openvpn.net/
Summary : A full-featured SSL VPN solution
Description :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port. It can use the Marcus Franz Xaver Johannes Oberhumer's LZO library
for compression.
--------------------------------------------------------------------------------
Update Information:
Correct init script flag order.
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #988755 - Wrong order for --config and --cd in Init script
https://bugzilla.redhat.com/show_bug.cgi?id=988755
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openvpn' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months
Fedora EPEL 6 Update: openvpn-2.3.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11057
2013-08-01 19:25:26
--------------------------------------------------------------------------------
Name : openvpn
Product : Fedora EPEL 6
Version : 2.3.2
Release : 1.el6
URL : http://openvpn.net/
Summary : A full-featured SSL VPN solution
Description :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port. It can use the Marcus Franz Xaver Johannes Oberhumer's LZO library
for compression.
--------------------------------------------------------------------------------
Update Information:
Correct init script flag order.
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #988755 - Wrong order for --config and --cd in Init script
https://bugzilla.redhat.com/show_bug.cgi?id=988755
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openvpn' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 9 months