[SECURITY] Fedora EPEL 6 Update: python-pip-1.3.1-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10877
2013-07-17 19:00:38
--------------------------------------------------------------------------------
Name : python-pip
Product : Fedora EPEL 6
Version : 1.3.1
Release : 4.el6
URL : http://www.pip-installer.org
Summary : A tool for installing and managing Python packages
Description :
Pip is a replacement for `easy_install
<http://peak.telecommunity.com/DevCenter/EasyInstall>`_. It uses mostly the
same techniques for finding packages, so packages that were made
easy_installable should be pip-installable as well.
--------------------------------------------------------------------------------
Update Information:
This update has been submitted for testing by toshio.
Backing out rename of pip binary to fix #958377 and updating package summary to match upstream's description.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #963260 - CVE-2013-2098 CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns
https://bugzilla.redhat.com/show_bug.cgi?id=963260
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pip' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
[SECURITY] Fedora EPEL 6 Update: owncloud-4.5.13-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10868
2013-07-17 18:59:59
--------------------------------------------------------------------------------
Name : owncloud
Product : Fedora EPEL 6
Version : 4.5.13
Release : 1.el6
URL : http://owncloud.org
Summary : Private file sync and share server
Description :
ownCloud gives you universal access to your files through a web interface or
WebDAV. It also provides a platform to easily view & sync your contacts,
calendars and bookmarks across all your devices and enables basic editing right
on the web. ownCloud is extendable via a simple but powerful API for
applications and plugins.
--------------------------------------------------------------------------------
Update Information:
4.5.13
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update owncloud' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 6 Update: youtube-dl-2013.07.12-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10861
2013-07-16 18:25:31
--------------------------------------------------------------------------------
Name : youtube-dl
Product : Fedora EPEL 6
Version : 2013.07.12
Release : 1.el6
URL : http://youtube-dl.org
Summary : A small command-line program to download online videos
Description :
Small command-line program to download videos from YouTube and other sites.
--------------------------------------------------------------------------------
Update Information:
New version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #984672 - youtube-dl-2013.07.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=984672
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update youtube-dl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 5 Update: mksh-46-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5647
2013-05-02 19:05:19
--------------------------------------------------------------------------------
Name : mksh
Product : Fedora EPEL 5
Version : 46
Release : 1.el5
URL : https://www.mirbsd.de/mksh.htm
Summary : MirBSD enhanced version of the Korn Shell
Description :
mksh is the MirBSD enhanced version of the Public Domain Korn shell (pdksh),
a bourne-compatible shell which is largely similar to the original AT&T Korn
shell. It includes bug fixes and feature improvements in order to produce a
modern, robust shell good for interactive and especially script use, being a
bourne shell replacement, pdksh successor and an alternative to the C shell.
--------------------------------------------------------------------------------
Update Information:
R46 delivers these changes:
* [tg] dot.mkshrc: prevent lksh from running it
* [tg] Add the lksh manual page to the mksh distribution
* [tg] Make both lksh and mksh interpret numbers with a leading digit zero (‘0’) as octal precisely iff “set -o posix” is active
* [tg] Point out the octal digit and the integer arithmetic differences from POSuX verbosely in the manual pages (point people who need octals to “set -o posix” and who need longs to lksh) and elaborate on the horrors of ISO C Undefined Behaviour which is allowed to delete all your data
* [tg] Unbreak “set -o” (list flags) in lksh on LP64 machines
* [tg] Implement Emacs mode PgUp as Vi insert mode Cur↑ for Yofuh
* [tg] Allow setting both “set -o sh” and “set -o posix”, if done in the same command; shuffle around compatibility levels (mksh/lksh, with -o sh, with -o posix) again; permit a /bin/sh to set either or both
* [tg] Sync lksh manual page with the exact code ifdefs
* [tg] Change more use of signed integer to use unsigned instead
* [tg] Implement “set -o pipefail” like AT&T ksh93 and GNU bash do
* [tg] dot.mkshrc: provide hd(1) in Pure mksh™ for fallback
* [tg] Implement VALSUBs (value substitutions): ${|REPLY=foo;}
R45 comes with this bag of changes:
* [tg] Make “set -x” print the commands run in escaped form
* [tg] PS4 in dot.mkshrc is now timestamped
* [tg] The &> GNU bash I/O redir is no longer parsed in -o posix, -o sh modes, lksh (breaks valid scripts)
* [tg] Implement ${ …;} more efficiently (deleted-open files)
* [tg] For shf, %#s (if you can get it past GCC’s printf format attribute) calls print_value_quoted, ignoring field width and precision
* [tg] Catch “typeset =” (regression) with better error message
* [tg, Tonnerre Lombard] add “doch” alias to dot.mkshrc which just repeats the last input line with sudo(8)
* [tg] Use unsigned integers for all calculations, to avoid ISO C “Undefined Behaviour” (and implementation-defined behaviour) throughout (most of) the code; emulate signed integer arithmetics using unsigned; not-lksh only
* [tg] Emulate signed modulo naïvely, for correct sign of the result
* [tg] Add <<< and >>> for ROL and ROR (rotate left and right, respectively) operations, <<<= and >>> assignments; bitwise AND the RHS of a shift/rotate op with 31 (not for lksh)
* [tg] Remove a warning by working around a workaround found in dietlibc which works around a bug in broken software such as GNU tar (really!)
* [tg] Correct and simplify list and categorisation of built-in commands as POSIX special and “everything else” plus a flag to keep assignments
* [tg] Handle ((foo)) as “let]” internally to avoid a conflict with user-defined functions called let (LP#1156707)
* [tg] Clean up the code
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mksh' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 6 Update: nodejs-expect-dot-js-0.2.0-5.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10833
2013-07-12 18:38:03
--------------------------------------------------------------------------------
Name : nodejs-expect-dot-js
Product : Fedora EPEL 6
Version : 0.2.0
Release : 5.el6
URL : https://npmjs.org/package/expect.js
Summary : Behavior-driven development (BDD) style assertions for Node.js and the browser
Description :
Behavior-driven development (BDD) style assertions for Node.js and the browser.
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #911180 - Review Request: nodejs-expect-dot-js - Behavior-driven development (BDD) style assertions for Node.js and the browser
https://bugzilla.redhat.com/show_bug.cgi?id=911180
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-expect-dot-js' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
[SECURITY] Fedora EPEL 6 Update: moodle-2.3.8-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10839
2013-07-13 18:57:25
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 6
Version : 2.3.8
Release : 1.el6
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
Correct unbundling of php-pear-HTML-Quickform.
Fix for:
MSA-13-0025: XSS vulnerability in YUI library
MSA-13-0026: Personal information leak in IMS-LTI
CVE-2013-2242 MSA-13-0027: Access issue in Chat module
CVE-2013-2243 MSA-13-0028: Answer information revealed in Lesson activity
CVE-2013-2244 MSA-13-0029: XSS risk in conditional activities
CVE-2013-2245 MSA-13-0030: Information leak through RSS
CVE-2013-2246 MSA-13-0031: Personal information leak in Feedback activity
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #947252 - Moodle does not work because PHP error: Cannot redeclare class dml_exception
https://bugzilla.redhat.com/show_bug.cgi?id=947252
[ 2 ] Bug #985654 - moodle: CVE-2013-2242 CVE-2013-2243 CVE-2013-2244 CVE-2013-2245 CVE-2013-2246 moodle: upstream 2.5.1, 2.4.5, 2.3.8, 2.2.11 security fixes [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=985654
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 6 Update: davix-0.2.2-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10570
2013-06-21 18:31:15
--------------------------------------------------------------------------------
Name : davix
Product : Fedora EPEL 6
Version : 0.2.2
Release : 2.el6
URL : https://svnweb.cern.ch/trac/lcgutil/wiki/davix
Summary : Toolkit for Http-based file management
Description :
Davix is a toolkit designed for file operations
with Http based protocols (WebDav, Amazon S3, ...).
Davix provides an API and a set of command line tools.
--------------------------------------------------------------------------------
Update Information:
Initial davix EPEL import ( 0.2.2 )
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update davix' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 5 Update: srm-ifce-1.16.0-0.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10720
2013-07-03 20:17:55
--------------------------------------------------------------------------------
Name : srm-ifce
Product : Fedora EPEL 5
Version : 1.16.0
Release : 0.el5
URL : https://svnweb.cern.ch/trac/lcgutil
Summary : SRM client side library
Description :
srm-ifce is a client side implementation of the SRMv2 specification
for GFAL1/2 and FTS. SRM means Storage Resource Manager Interface, it is a
specification of a SOAP interface providing a generic way to manage
distributed storage systems.
--------------------------------------------------------------------------------
Update Information:
Update to srm-ifce 1.16.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update srm-ifce' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 6 Update: salt-0.16.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10845
2013-07-14 19:53:34
--------------------------------------------------------------------------------
Name : salt
Product : Fedora EPEL 6
Version : 0.16.0
Release : 1.el6
URL : http://saltstack.org/
Summary : A parallel remote execution system
Description :
Salt is a distributed remote execution system used to execute commands and
query data. It was developed in order to bring the best solutions found in
the world of remote execution together and make them better, faster and more
malleable. Salt accomplishes this via its ability to handle larger loads of
information, and not just dozens, but hundreds or even thousands of individual
servers, handle them quickly and through a simple and manageable interface.
--------------------------------------------------------------------------------
Update Information:
Update to feature release 0.16.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update salt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months
Fedora EPEL 6 Update: pyfits-2.4.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10863
2013-07-16 18:25:35
--------------------------------------------------------------------------------
Name : pyfits
Product : Fedora EPEL 6
Version : 2.4.0
Release : 1.el6
URL : http://www.stsci.edu/resources/software_hardware/pyfits
Summary : Python interface to FITS
Description :
PyFITS provides an interface to FITS formatted files under the Python
scripting language. It is useful both for interactive data analysis and for
writing analysis scripts in Python using FITS files as either input or output.
--------------------------------------------------------------------------------
Update Information:
Update to the last version in series 2.x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #984693 - Update pyfits in EPEL6
https://bugzilla.redhat.com/show_bug.cgi?id=984693
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pyfits' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 10 months