Fedora EPEL 5 Update: perl-Class-MethodMaker-2.20-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0578
2014-02-16 10:01:17
--------------------------------------------------------------------------------
Name : perl-Class-MethodMaker
Product : Fedora EPEL 5
Version : 2.20
Release : 2.el5
URL : http://search.cpan.org/~schwigon/Class-MethodMaker/
Summary : Perl module for creating generic object-oriented methods
Description :
Class::MethodMaker solves the problem of having to continually write accessor
methods for your objects that perform standard tasks.
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream release, removes some test files that had a non-free license (see https://github.com/renormalist/class-methodmaker/issues/2).
There are also an assortment of minor bug fixes but nothing that should affect compatibility.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Class-MethodMaker' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
[SECURITY] Fedora EPEL 6 Update: zabbix-1.8.20-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0574
2014-02-16 10:01:08
--------------------------------------------------------------------------------
Name : zabbix
Product : Fedora EPEL 6
Version : 1.8.20
Release : 1.el6
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
ZABBIX is software that monitors numerous parameters of a network and
the health and integrity of servers. ZABBIX uses a flexible
notification mechanism that allows users to configure e-mail based
alerts for virtually any event. This allows a fast reaction to server
problems. ZABBIX offers excellent reporting and data visualisation
features based on the stored data. This makes ZABBIX ideal for
capacity planning.
ZABBIX supports both polling and trapping. All ZABBIX reports and
statistics, as well as configuration parameters are accessed through a
web-based front end. A web-based front end ensures that the status of
your network and the health of your servers can be assessed from any
location. Properly configured, ZABBIX can play an important role in
monitoring IT infrastructure. This is equally true for small
organisations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn1.8.20.php
Also solves 3 security issues:
- [ZBX-7703] fixed being able to switch users without proper credentials
when using HTTP authentication; reference CVE-2014-1682
- [ZBX-6721] fixed LDAP authentication; reference CVE-2013-5572
- [ZBX-7693] fixed admin user being able to update media for other users;
reference CVE-2014-1685
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1061563 - CVE-2014-1682 zabbix: API issue allows users to impersonate other users
https://bugzilla.redhat.com/show_bug.cgi?id=1061563
[ 2 ] Bug #1013963 - CVE-2013-5572 zabbix: password leakage
https://bugzilla.redhat.com/show_bug.cgi?id=1013963
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
[SECURITY] Fedora EPEL 5 Update: zabbix20-2.0.11-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0560
2014-02-16 10:00:37
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 5
Version : 2.0.11
Release : 1.el5
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn2.0.11.php
Also solves 3 security issues:
- [ZBX-7703] fixed being able to switch users without proper credentials
when using HTTP authentication; reference CVE-2014-1682
- [ZBX-6721] fixed LDAP authentication; reference CVE-2013-5572
- [ZBX-7693] fixed admin user being able to update media for other users;
reference CVE-2014-1685
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013963 - CVE-2013-5572 zabbix: password leakage
https://bugzilla.redhat.com/show_bug.cgi?id=1013963
[ 2 ] Bug #1061563 - CVE-2014-1682 zabbix: API issue allows users to impersonate other users
https://bugzilla.redhat.com/show_bug.cgi?id=1061563
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
[SECURITY] Fedora EPEL 6 Update: zabbix20-2.0.11-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0583
2014-02-16 10:01:29
--------------------------------------------------------------------------------
Name : zabbix20
Product : Fedora EPEL 6
Version : 2.0.11
Release : 1.el6
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
http://www.zabbix.com/rn2.0.11.php
Also solves 3 security issues:
- [ZBX-7703] fixed being able to switch users without proper credentials
when using HTTP authentication; reference CVE-2014-1682
- [ZBX-6721] fixed LDAP authentication; reference CVE-2013-5572
- [ZBX-7693] fixed admin user being able to update media for other users;
reference CVE-2014-1685
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013963 - CVE-2013-5572 zabbix: password leakage
https://bugzilla.redhat.com/show_bug.cgi?id=1013963
[ 2 ] Bug #1061563 - CVE-2014-1682 zabbix: API issue allows users to impersonate other users
https://bugzilla.redhat.com/show_bug.cgi?id=1061563
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix20' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
Fedora EPEL 5 Update: stompclt-1.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0550
2014-02-16 10:00:10
--------------------------------------------------------------------------------
Name : stompclt
Product : Fedora EPEL 5
Version : 1.1
Release : 1.el5
URL : http://cern.ch/lionel.cons/perl/stompclt/
Summary : Versatile STOMP client
Description :
stompclt is a versatile tool to interact with messaging brokers speaking
STOMP and/or message queues (see Messaging::Message::Queue) on disk.
It receives messages (see Messaging::Message) from an incoming module,
optionally massaging them (i.e. filtering and/or modifying), and sends
them to an outgoing module. Depending on which modules are used, the tool
can perform different operations.
--------------------------------------------------------------------------------
Update Information:
Update to upstream version, rhbz #1061604.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1061604 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=1061604
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update stompclt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
Fedora EPEL 6 Update: php-sabre-dav-1.8.8-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0529
2014-02-14 18:30:52
--------------------------------------------------------------------------------
Name : php-sabre-dav
Product : Fedora EPEL 6
Version : 1.8.8
Release : 1.el6
URL : https://github.com/fruux/sabre-dav
Summary : WebDAV Framework for PHP
Description :
What is SabreDAV
SabreDAV allows you to easily add WebDAV support to a PHP application.
SabreDAV is meant to cover the entire standard, and attempts to allow
integration using an easy to understand API.
Feature list:
* Fully WebDAV compliant
* Supports Windows XP, Windows Vista, Mac OS/X, DavFSv2, Cadaver, Netdrive,
Open Office, and probably more.
* Passing all Litmus tests.
* Supporting class 1, 2 and 3 Webdav servers.
* Locking support.
* Custom property support.
* CalDAV (tested with Evolution, iCal, iPhone and Lightning).
* CardDAV (tested with OS/X addressbook, the iOS addressbook and Evolution).
* Over 97% unittest code coverage.
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog:
* Fixed: Potential security vulnerability in the http client.
* Fixed: Issue #374: Don't urlescape colon (:) when it's not required.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-sabre-dav' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
Fedora EPEL 6 Update: stompclt-1.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0576
2014-02-16 10:01:13
--------------------------------------------------------------------------------
Name : stompclt
Product : Fedora EPEL 6
Version : 1.1
Release : 1.el6
URL : http://cern.ch/lionel.cons/perl/stompclt/
Summary : Versatile STOMP client
Description :
stompclt is a versatile tool to interact with messaging brokers speaking
STOMP and/or message queues (see Messaging::Message::Queue) on disk.
It receives messages (see Messaging::Message) from an incoming module,
optionally massaging them (i.e. filtering and/or modifying), and sends
them to an outgoing module. Depending on which modules are used, the tool
can perform different operations.
--------------------------------------------------------------------------------
Update Information:
Update to upstream version, rhbz #1061604.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1061604 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=1061604
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update stompclt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
Fedora EPEL 6 Update: haveged-1.9.1-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0554
2014-02-16 10:00:21
--------------------------------------------------------------------------------
Name : haveged
Product : Fedora EPEL 6
Version : 1.9.1
Release : 2.el6
URL : http://www.irisa.fr/caps/projects/hipsor/
Summary : A Linux entropy source using the HAVEGE algorithm
Description :
A Linux entropy source using the HAVEGE algorithm
Haveged is a user space entropy daemon which is not dependent upon the
standard mechanisms for harvesting randomness for the system entropy
pool. This is important in systems with high entropy needs or limited
user interaction (e.g. headless servers).
Haveged uses HAVEGE (HArdware Volatile Entropy Gathering and Expansion)
to maintain a 1M pool of random bytes used to fill /dev/random
whenever the supply of random bits in /dev/random falls below the low
water mark of the device. The principle inputs to haveged are the
sizes of the processor instruction and data caches used to setup the
HAVEGE collector. The haveged default is a 4kb data cache and a 16kb
instruction cache. On machines with a cpuid instruction, haveged will
attempt to select appropriate values from internal tables.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.9.1
Updated to version 1.9.1
Update to version 1.4
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update haveged' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
Fedora EPEL 6 Update: oz-0.12.0-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0519
2014-02-11 17:16:20
--------------------------------------------------------------------------------
Name : oz
Product : Fedora EPEL 6
Version : 0.12.0
Release : 2.el6
URL : http://github.com/clalancette/oz
Summary : Library and utilities for automated guest OS installs
Description :
Oz is a set of libraries and utilities for doing automated guest OS
installations, with minimal input from the user.
--------------------------------------------------------------------------------
Update Information:
Add patch to fix qcow2 image type
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update oz' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month
Fedora EPEL 6 Update: cloud-init-0.7.4-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0369
2014-01-27 18:41:23
--------------------------------------------------------------------------------
Name : cloud-init
Product : Fedora EPEL 6
Version : 0.7.4
Release : 2.el6
URL : http://launchpad.net/cloud-init
Summary : Cloud instance init scripts
Description :
Cloud-init is a set of init scripts for cloud instances. Cloud instances
need special scripts to run during initialization to retrieve and install
ssh keys and to let the user run various scripts.
--------------------------------------------------------------------------------
Update Information:
Add runtime requirement on python-jsonpatch
update to 0.7.4 [BZ:907547]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #907547 - Cloud-Init needs updating to support CloudStack/CloudPlatform
https://bugzilla.redhat.com/show_bug.cgi?id=907547
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cloud-init' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 1 month