epel-package-announce October 2015

epel-package-announce@lists.fedoraproject.org

1 participants
355 discussions

Fedora EPEL 6 Update: ocaml-cppo-1.1.2-2.el6
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-a5ecc6850e 2015-10-26 17:07:58.824727 -------------------------------------------------------------------------------- Name : ocaml-cppo Product : Fedora EPEL 6 Version : 1.1.2 Release : 2.el6 URL : http://mjambon.com/cppo.html Summary : Equivalent of the C preprocessor for OCaml programs Description : Cppo is an equivalent of the C preprocessor targeted at the OCaml language and its variants. The main purpose of cppo is to provide a lightweight tool for simple macro substitution (＃define) and file inclusion (＃include) for the occasional case when this is useful in OCaml. Processing specific sections of files by calling external programs is also possible via ＃ext directives. The implementation of cppo relies on the standard library of OCaml and on the standard parsing tools Ocamllex and Ocamlyacc, which contribute to the robustness of cppo across OCaml versions. -------------------------------------------------------------------------------- Update Information: ocaml-cppo-1.1.2-2.el6 - OCaml 4.02.3 rebuild. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ocaml-cppo' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 6 Update: opensmtpd-5.7.3p1-1.el6
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-d6cc67d0d6 2015-10-26 17:07:58.824664 -------------------------------------------------------------------------------- Name : opensmtpd Product : Fedora EPEL 6 Version : 5.7.3p1 Release : 1.el6 URL : http://www.opensmtpd.org/ Summary : Free implementation of the server-side SMTP protocol as defined by RFC 5321 Description : OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defined by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTPD nowadays is a fairly complete SMTP implementation. OpenSMTPD is primarily developed by Gilles Chehade, Eric Faurot and Charles Longeau; with contributions from various OpenBSD hackers. OpenSMTPD is part of the OpenBSD Project. The software is freely usable and re-usable by everyone under an ISC license. This package uses standard "alternatives" mechanism, you may call "/usr/sbin/alternatives --set mta /usr/sbin/sendmail.opensmtpd" if you want to switch to OpenSMTPD MTA immediately after install, and "/usr/sbin/alternatives --set mta /usr/sbin/sendmail.sendmail" to revert back to Sendmail as a default mail daemon. -------------------------------------------------------------------------------- Update Information: Issues fixed in this release (since 5.7.2): - fix an mda buffer truncation bug which allows a user to create forward files that pass session checks but fail delivery later down the chain, within the user mda; - fix remote buffer overflow in unprivileged pony process; - reworked offline enqueue to better protect against hardlink attacks. ---- Several vulnerabilities have been fixed in OpenSMTPD 5.7.2: - an oversight in the portable version of fgetln() that allows attackers to read and write out-of-bounds memory; - multiple denial-of- service vulnerabilities that allow local users to kill or hang OpenSMTPD; - a stack-based buffer overflow that allows local users to crash OpenSMTPD, or execute arbitrary code as the non-chrooted _smtpd user; - a hardlink attack (or race-conditioned symlink attack) that allows local users to unset the chflags() of arbitrary files; - a hardlink attack that allows local users to read the first line of arbitrary files (for example, root's hash from /etc/master.passwd); - a denial-of-service vulnerability that allows remote attackers to fill OpenSMTPD's queue or mailbox hard-disk partition; - an out- of-bounds memory read that allows remote attackers to crash OpenSMTPD, or leak information and defeat the ASLR protection; - a use-after-free vulnerability that allows remote attackers to crash OpenSMTPD, or execute arbitrary code as the non-chrooted _smtpd user; Further details can be found in Qualys' audit report: http://seclists.org/oss-sec/2015/q4/17 MITRE has assigned one CVE for the use-after-free vulnerability; additional CVEs may be assigned: http://seclists.org/oss-sec/2015/q4/23 External References: https://www.opensmtpd.org/announces/release-5.7.2.txt http://seclists.org/oss- sec/2015/q4/17 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1268837 - opensmtpd-5.7.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1268837 [ 2 ] Bug #1268509 - opensmtpd: 5.7.2 release available https://bugzilla.redhat.com/show_bug.cgi?id=1268509 [ 3 ] Bug #1268795 - CVE-2015-7687 OpenSMTPD: multiple vulnerabilities fixed in 5.7.2 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1268795 [ 4 ] Bug #1268858 - opensmtpd: Remotely triggerable buffer overflow vulnerability in filter_tx_io [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1268858 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update opensmtpd' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: ocaml-biniou-1.0.9-18.el6
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-7d2e328541 2015-10-26 17:07:58.824592 -------------------------------------------------------------------------------- Name : ocaml-biniou Product : Fedora EPEL 6 Version : 1.0.9 Release : 18.el6 URL : http://mjambon.com/biniou.html Summary : Safe and fast binary data format Description : Biniou (pronounced "be new") is a binary data format designed for speed, safety, ease of use and backward compatibility as protocols evolve. Biniou is vastly equivalent to JSON in terms of functionality but allows implementations several times faster (4 times faster than yojson), with 25-35% space savings. Biniou data can be decoded into human-readable form without knowledge of type definitions except for field and variant names which are represented by 31-bit hashes. A program named bdump is provided for routine visualization of biniou data files. -------------------------------------------------------------------------------- Update Information: Exclude ppc64 for EPEL, as ocaml-findlib-devel is not available on it. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ocaml-biniou' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: ocaml-ounit-2.0.0-17.el6
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-7326e51678 2015-10-26 17:07:58.824533 -------------------------------------------------------------------------------- Name : ocaml-ounit Product : Fedora EPEL 6 Version : 2.0.0 Release : 17.el6 URL : http://ounit.forge.ocamlcore.org/ Summary : Unit test framework for OCaml Description : OUnit is a unit test framework for OCaml. It allows one to easily create unit-tests for OCaml code. It is based on HUnit, a unit testing framework for Haskell. It is similar to JUnit, and other xUnit testing frameworks. -------------------------------------------------------------------------------- Update Information: Exclude ppc64 for EPEL, as ocaml-findlib-devel is not available on it. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ocaml-ounit' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: preprocess-1.2.2-2.20150919gitd5ab9a.el6
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-d194a77f7b 2015-10-26 17:07:58.824454 -------------------------------------------------------------------------------- Name : preprocess Product : Fedora EPEL 6 Version : 1.2.2 Release : 2.20150919gitd5ab9a.el6 URL : https://github.com/hplgit/preprocess Summary : A portable multi-language file Python2 preprocessor Description : There are millions of templating systems out there (most of them developed for the web). This isn't one of those, though it does share some basics: a markup syntax for templates that are processed to give resultant text output. The main difference with preprocess.py is that its syntax is hidden in comments (whatever the syntax for comments may be in the target file type) so that the file can still have valid syntax. A comparison with the C preprocessor is more apt. preprocess.py is targeted at build systems that deal with many types of files. Languages for which it works include: C++, Python, Perl, Tcl, XML, JavaScript, CSS, IDL, TeX, Fortran, PHP, Java, Shell scripts (Bash, CSH, etc.) and C#. Preprocess is usable both as a command line app and as a Python module. -------------------------------------------------------------------------------- Update Information: - Update to 1.2.2 - Added 'python-setuptools' as BR on EPEL -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update preprocess' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: fail2ban-0.9.3-1.el6.1
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-71a66aaf59 2015-10-26 17:07:58.824274 -------------------------------------------------------------------------------- Name : fail2ban Product : Fedora EPEL 6 Version : 0.9.3 Release : 1.el6.1 URL : http://fail2ban.sourceforge.net/ Summary : Ban IPs that make too many password failures Description : Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log and bans IP that makes too many password failures. It updates firewall rules to reject the IP address. To use the hostsdeny and shorewall actions you must install tcp_wrappers and shorewall respectively. -------------------------------------------------------------------------------- Update Information: fail2ban-0.9.3-1.el6.1 - Do not use -w with iptables (bug #1272681) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272681 - Adding -w option to iptables breaks on EL6 https://bugzilla.redhat.com/show_bug.cgi?id=1272681 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fail2ban' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-docopt-docopt-go-0-0.1.git.854c423.el7
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-1399 2015-10-26 18:45:06.962412 -------------------------------------------------------------------------------- Name : golang-github-docopt-docopt-go Product : Fedora EPEL 7 Version : 0 Release : 0.1.git.854c423.el7 URL : https://godoc.org/github.com/docopt/docopt.go Summary : Command-line interface description language in Go Description : Docopt helps you create beautiful command-line interfaces easily with Go -------------------------------------------------------------------------------- Update Information: Command-line interface description language in Go -------------------------------------------------------------------------------- References: [ 1 ] Bug #1203167 - Review Request: golang-github-docopt-docopt-go - Command-line interface description language in Go https://bugzilla.redhat.com/show_bug.cgi?id=1203167 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-docopt-docopt-go' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: fvwm-2.6.5-1.el7
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-6618 2015-10-26 18:45:06.962374 -------------------------------------------------------------------------------- Name : fvwm Product : Fedora EPEL 7 Version : 2.6.5 Release : 1.el7 URL : http://www.fvwm.org/ Summary : Highly configurable multiple virtual desktop window manager Description : Fvwm is a window manager for X11. It is designed to minimize memory consumption, provide a 3D look to window frames, and implement a virtual desktop. -------------------------------------------------------------------------------- Update Information: Initial fvwm build for epel7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #223724 - Review Request: fvwm - window manager https://bugzilla.redhat.com/show_bug.cgi?id=223724 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fvwm' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: qgis-2.8.3-1.el7
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-7569 2015-10-26 18:45:06.962333 -------------------------------------------------------------------------------- Name : qgis Product : Fedora EPEL 7 Version : 2.8.3 Release : 1.el7 URL : http://www.qgis.org Summary : A user friendly Open Source Geographic Information System Description : Geographic Information System (GIS) manages, analyzes, and displays databases of geographic information. QGIS supports shape file viewing and editing, spatial data storage with PostgreSQL/PostGIS, projection on-the-fly, map composition, and a number of other features via a plugin interface. QGIS also supports display of various geo-referenced raster and Digital Elevation Model (DEM) formats including GeoTIFF, Arc/Info ASCII Grid, and USGS ASCII DEM. -------------------------------------------------------------------------------- Update Information: Updating to 2.8.3. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update qgis' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: pwauth-2.3.10-9.el7
by updates＠fedoraproject.org 27 Oct '15

27 Oct '15

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2015-7892 2015-10-26 18:45:06.962290 -------------------------------------------------------------------------------- Name : pwauth Product : Fedora EPEL 7 Version : 2.3.10 Release : 9.el7 URL : http://code.google.com/p/pwauth/ Summary : External plugin for mod_authnz_external authenticator Description : Pwauth is an authenticator designed to be used with mod_auth_external or mod_authnz_external and the Apache HTTP daemon to support reasonably secure web authentication out of the system password database on most versions of Unix. -------------------------------------------------------------------------------- Update Information: Add packaging for EPEL7 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update pwauth' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
...
36
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce October 2015