Fedora EPEL 7 Update: php-composer-spdx-licenses-1.1.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-4d8bb29f68
2015-10-26 18:45:06.961346
--------------------------------------------------------------------------------
Name : php-composer-spdx-licenses
Product : Fedora EPEL 7
Version : 1.1.2
Release : 1.el7
URL : https://github.com/composer/spdx-licenses
Summary : SPDX licenses list and validation library
Description :
SPDX licenses list and validation library.
Originally written as part of composer/composer,
now extracted and made available as a stand-alone library.
--------------------------------------------------------------------------------
Update Information:
**composer/spdx-licenses 1.1.2** * added new licenses.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-composer-spdx-licenses' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
[SECURITY] Fedora EPEL 7 Update: opensmtpd-5.7.3p1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-13c5827d5c
2015-10-26 18:45:06.961304
--------------------------------------------------------------------------------
Name : opensmtpd
Product : Fedora EPEL 7
Version : 5.7.3p1
Release : 1.el7
URL : http://www.opensmtpd.org/
Summary : Free implementation of the server-side SMTP protocol as defined by RFC 5321
Description :
OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defined
by RFC 5321, with some additional standard extensions. It allows ordinary
machines to exchange e-mails with other systems speaking the SMTP protocol.
Started out of dissatisfaction with other implementations, OpenSMTPD nowadays
is a fairly complete SMTP implementation. OpenSMTPD is primarily developed
by Gilles Chehade, Eric Faurot and Charles Longeau; with contributions from
various OpenBSD hackers. OpenSMTPD is part of the OpenBSD Project.
The software is freely usable and re-usable by everyone under an ISC license.
This package uses standard "alternatives" mechanism, you may call
"/usr/sbin/alternatives --set mta /usr/sbin/sendmail.opensmtpd"
if you want to switch to OpenSMTPD MTA immediately after install, and
"/usr/sbin/alternatives --set mta /usr/sbin/sendmail.sendmail" to revert
back to Sendmail as a default mail daemon.
--------------------------------------------------------------------------------
Update Information:
Issues fixed in this release (since 5.7.2): - fix an mda buffer truncation bug
which allows a user to create forward files that pass session checks but fail
delivery later down the chain, within the user mda; - fix remote buffer
overflow in unprivileged pony process; - reworked offline enqueue to better
protect against hardlink attacks. ---- Several vulnerabilities have been fixed
in OpenSMTPD 5.7.2: - an oversight in the portable version of fgetln() that
allows attackers to read and write out-of-bounds memory; - multiple denial-of-
service vulnerabilities that allow local users to kill or hang OpenSMTPD; - a
stack-based buffer overflow that allows local users to crash OpenSMTPD, or
execute arbitrary code as the non-chrooted _smtpd user; - a hardlink attack (or
race-conditioned symlink attack) that allows local users to unset the chflags()
of arbitrary files; - a hardlink attack that allows local users to read the
first line of arbitrary files (for example, root's hash from
/etc/master.passwd); - a denial-of-service vulnerability that allows remote
attackers to fill OpenSMTPD's queue or mailbox hard-disk partition; - an out-
of-bounds memory read that allows remote attackers to crash OpenSMTPD, or leak
information and defeat the ASLR protection; - a use-after-free vulnerability
that allows remote attackers to crash OpenSMTPD, or execute arbitrary code as
the non-chrooted _smtpd user; Further details can be found in Qualys' audit
report: http://seclists.org/oss-sec/2015/q4/17 MITRE has assigned one CVE for
the use-after-free vulnerability; additional CVEs may be assigned:
http://seclists.org/oss-sec/2015/q4/23 External References:
https://www.opensmtpd.org/announces/release-5.7.2.txt http://seclists.org/oss-
sec/2015/q4/17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1268837 - opensmtpd-5.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1268837
[ 2 ] Bug #1268509 - opensmtpd: 5.7.2 release available
https://bugzilla.redhat.com/show_bug.cgi?id=1268509
[ 3 ] Bug #1268795 - CVE-2015-7687 OpenSMTPD: multiple vulnerabilities fixed in 5.7.2 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1268795
[ 4 ] Bug #1268858 - opensmtpd: Remotely triggerable buffer overflow vulnerability in filter_tx_io [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1268858
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update opensmtpd' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: php-myclabs-deep-copy-1.4.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-374d2d1a38
2015-10-26 18:45:06.961267
--------------------------------------------------------------------------------
Name : php-myclabs-deep-copy
Product : Fedora EPEL 7
Version : 1.4.0
Release : 1.el7
URL : https://github.com/myclabs/DeepCopy
Summary : Create deep copies (clones) of your objects
Description :
DeepCopy helps you create deep copies (clones) of your objects.
It is designed to handle cycles in the association graph.
--------------------------------------------------------------------------------
Update Information:
** myclabs/deep-copy 1.4.0** * Support private properties of parent classes
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-myclabs-deep-copy' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: quiterss-0.18.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-4df7c41533
2015-10-26 18:45:06.961227
--------------------------------------------------------------------------------
Name : quiterss
Product : Fedora EPEL 7
Version : 0.18.2
Release : 1.el7
URL : http://quiterss.org/
Summary : RSS/Atom aggregator
Description :
Qt-based RSS/Atom aggregator.
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update quiterss' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: preprocess-1.2.2-2.20150919gitd5ab9a.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-c014bcdbb4
2015-10-26 18:45:06.961178
--------------------------------------------------------------------------------
Name : preprocess
Product : Fedora EPEL 7
Version : 1.2.2
Release : 2.20150919gitd5ab9a.el7
URL : https://github.com/hplgit/preprocess
Summary : A portable multi-language file Python2 preprocessor
Description :
There are millions of templating systems out there
(most of them developed for the web).
This isn't one of those, though it does share some basics:
a markup syntax for templates that are processed to give resultant text output.
The main difference with preprocess.py is that its syntax is hidden in comments
(whatever the syntax for comments may be in the target file type)
so that the file can still have valid syntax.
A comparison with the C preprocessor is more apt.
preprocess.py is targeted at build systems that deal with many types of files.
Languages for which it works include: C++, Python, Perl, Tcl, XML, JavaScript,
CSS, IDL, TeX, Fortran, PHP, Java, Shell scripts (Bash, CSH, etc.) and C#.
Preprocess is usable both as a command line app and as a Python module.
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.2 - Added 'python-setuptools' as BR on EPEL
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update preprocess' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: mate-notification-daemon-1.10.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-8a12fcb39d
2015-10-26 18:45:06.961133
--------------------------------------------------------------------------------
Name : mate-notification-daemon
Product : Fedora EPEL 7
Version : 1.10.2
Release : 1.el7
URL : http://mate-desktop.org
Summary : Notification daemon for MATE Desktop
Description :
Notification daemon for MATE Desktop
--------------------------------------------------------------------------------
Update Information:
mate-notification-daemon-1.10.2-1.el7 - update to 1.10.2 release - remove
upstreamed patches
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mate-notification-daemon' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: lightdm-1.10.5-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-dccbf33063
2015-10-26 18:45:06.961090
--------------------------------------------------------------------------------
Name : lightdm
Product : Fedora EPEL 7
Version : 1.10.5
Release : 6.el7
URL : https://launchpad.net/lightdm/1.10
Summary : A cross-desktop Display Manager
Description :
Lightdm is a display manager that:
* Is cross-desktop - supports different desktops
* Supports different display technologies
* Is lightweight - low memory usage and fast performance
--------------------------------------------------------------------------------
Update Information:
drop listen.patch for < f22 (and epel-7)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269247 - xserver-allow-tcp=true doesn't work anymore
https://bugzilla.redhat.com/show_bug.cgi?id=1269247
[ 2 ] Bug #1274642 - No graphical login with xserver-allow-tcp=true
https://bugzilla.redhat.com/show_bug.cgi?id=1274642
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lightdm' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: 0install-2.10-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-0c7398485f
2015-10-26 18:45:06.961048
--------------------------------------------------------------------------------
Name : 0install
Product : Fedora EPEL 7
Version : 2.10
Release : 2.el7
URL : http://0install.net
Summary : A decentralized cross-distribution software installation system
Description :
Zero Install is a decentralized cross-distribution software
installation system available under the LGPL. It allows software
developers to publish programs directly from their own web-sites,
while supporting features familiar from centralized distribution
repositories such as shared libraries, automatic updates and digital
signatures. It is intended to complement, rather than replace, the
operating system's package management. 0install packages never
interfere with those provided by the distribution.
0install does not define a new packaging format; unmodified tarballs
or zip archives can be used. Instead, it defines an XML metadata
format to describe these packages and the dependencies between them. A
single metadata file can be used on multiple platforms (e.g. Ubuntu,
Debian, Fedora, openSUSE, Mac OS X and Windows), assuming binary or
source archives are available that work on those systems.
0install also has some interesting features not often found in
traditional package managers. For example, while it will share
libraries whenever possible, it can always install multiple versions
of a package in parallel when there are conflicting
requirements. Installation is always side-effect-free (each package is
unpacked to its own directory and will not touch shared directories
such as /usr/bin), making it ideal for use with sandboxing
technologies and virtualization.
The XML file describing the program's requirements can also be
included in a source-code repository, allowing full dependency
handling for unreleased developer versions. For example, a user can
clone a Git repository and build and test the program, automatically
downloading newer versions of libraries where necessary, without
interfering with the versions of those libraries installed by their
distribution, which continue to be used for other software.
--------------------------------------------------------------------------------
Update Information:
0install-2.10-2.fc21 - Upstream update to 2.10. 0install-2.10-2.fc22 -
Upstream update to 2.10. 0install-2.10-2.fc23 - Upstream update to 2.10.
0install-2.10-2.el7 - Upstream update to 2.10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1070093 - 0install-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1070093
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update 0install' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: php-mikey179-vfsstream-1.6.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-74d708e6bf
2015-10-26 18:45:06.961008
--------------------------------------------------------------------------------
Name : php-mikey179-vfsstream
Product : Fedora EPEL 7
Version : 1.6.0
Release : 1.el7
URL : https://github.com/mikey179/vfsStream
Summary : PHP stream wrapper for a virtual file system
Description :
vfsStream is a PHP stream wrapper for a virtual file system that may be
helpful in unit tests to mock the real file system.
It can be used with any unit test framework, like PHPUnit or SimpleTest.
To use this library, you just have to add, in your project:
require_once '/usr/share/php/org/bovigo/vfs/autoload.php';
--------------------------------------------------------------------------------
Update Information:
** Release 1.6.0 ** * added vfsStreamWrapper::unregister(), provided by
@malkusch with #114 * fixed #115: incorrect handling of .. in root directory
on PHP 5.5, fix provided by @acoulton with #116
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-mikey179-vfsstream' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: ceph-0.80.7-0.6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-40bf39f476
2015-10-26 18:45:06.960967
--------------------------------------------------------------------------------
Name : ceph
Product : Fedora EPEL 7
Version : 0.80.7
Release : 0.6.el7
URL : http://ceph.com/
Summary : User space components of the Ceph file system
Description :
Ceph is a massively scalable, open-source, distributed
storage system that runs on commodity hardware and delivers object,
block and file system storage.
--------------------------------------------------------------------------------
Update Information:
ceph-0.80.7-0.6.el7 - remove python-rados and python-rbd packages to avoid
package conflicts - see http://tracker.ceph.com/issues/11104#change-59701 for
details ---- This update adds version numbers to Ceph's RPM "Obsoletes"
directives. This should reduce the conflict between newer ceph.com releases
where the python- and -devel RPMs have not yet been split. See also
http://tracker.ceph.com/issues/11104
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269416 - [ceph] yum-plugin-priorities does not blacklist all the obsoleted packages
https://bugzilla.redhat.com/show_bug.cgi?id=1269416
[ 2 ] Bug #1193182 - ceph has unversioned obsoletes
https://bugzilla.redhat.com/show_bug.cgi?id=1193182
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ceph' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months