Fedora EPEL 7 Update: owncloud-7.0.4-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1141
2015-03-08 20:53:28
--------------------------------------------------------------------------------
Name : owncloud
Product : Fedora EPEL 7
Version : 7.0.4
Release : 3.el7
URL : http://owncloud.org
Summary : Private file sync and share server
Description :
ownCloud gives you universal access to your files through a web interface or
WebDAV. It also provides a platform to easily view & sync your contacts,
calendars and bookmarks across all your devices and enables basic editing right
on the web. ownCloud is extendable via a simple but powerful API for
applications and plugins.
--------------------------------------------------------------------------------
Update Information:
This update provides some improvements to the Apache configuration files that are included in the package to ease deployment (and to a smaller extent, also the Nginx configuration file).
Most notably, this should fix the 'app store' function by providing the necessary Alias:
Alias /owncloud/apps-appstore /var/lib/owncloud/apps
if you have edited the /etc/httpd/conf.d/owncloud.conf file locally, the packaged version will install as owncloud.conf.rpmnew. We recommend you merge the changes into your own version, or keep the packaged owncloud.conf and move your changes to a file which overrides it, such as z-owncloud-local.conf .
The update also provides a (hopefully) more convenient method for enabling and disabling remote access to the ownCloud installation. You can simply symlink the file owncloud-access-conf.avail to enable remote access, e.g.:
ln -s /etc/httpd/conf.d/owncloud-access.conf.avail /etc/httpd/conf.d/z-owncloud-access.conf
as long as the target name ends in .conf and sorts alphabetically after 'owncloud.conf', it will supersede owncloud.conf and enable remote access. If you need to lock down access to the server, you can simply remove the symlink.
This removes the need for you to provide the appropriate syntax yourself, and the symlink approach will mean that if the required configuration changes in future ownCloud releases, the packaged owncloud-access.conf.avail file can be updated and your installation will keep working with no need for you to make manual changes.
The new approach makes use of some files containing common directives, to be included by the .conf files (to reduce duplication of these directives between different config files and sections). These are named with the suffix .inc. Note that they only take effect when included by files whose names end with .conf. Only files whose name end with .conf are directly read by Apache.
There are no functional changes to ownCloud itself in this update, it is concerned only with the web server configuration files.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update owncloud' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
[SECURITY] Fedora EPEL 7 Update: rdiff-backup-1.2.8-11.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1135
2015-03-08 20:53:14
--------------------------------------------------------------------------------
Name : rdiff-backup
Product : Fedora EPEL 7
Version : 1.2.8
Release : 11.el7
URL : http://www.nongnu.org/rdiff-backup/
Summary : Convenient and transparent local/remote incremental mirror/backup
Description :
rdiff-backup is a script, written in Python, that backs up one
directory to another and is intended to be run periodically (nightly
from cron for instance). The target directory ends up a copy of the
source directory, but extra reverse diffs are stored in the target
directory, so you can still recover files lost some time ago. The idea
is to combine the best features of a mirror and an incremental
backup. rdiff-backup can also operate in a bandwidth efficient manner
over a pipe, like rsync. Thus you can use rdiff-backup and ssh to
securely back a hard drive up to a remote location, and only the
differences from the previous backup will be transmitted.
--------------------------------------------------------------------------------
Update Information:
Changes in librsync 1.0.0 (2015-01-23)
======================================
* SECURITY: CVE-2014-8242: librsync previously used a truncated MD4 "strong" check sum to match blocks. However, MD4 is not cryptographically strong. It's possible that an attacker who can control the contents of one part of a file could use it to control other regions of the file, if it's transferred using librsync/rdiff. For example this might occur in a database, mailbox, or VM image containing some attacker-controlled data. To mitigate this issue, signatures will by default be computed with a 256-bit BLAKE2 hash. Old versions of librsync will complain about a bad magic number when given these signature files. Backward compatibility can be obtained using the new `rdiff sig --hash=md4` option or through specifying the "signature magic" in the API, but this should not be used when either the old or new file contain untrusted data. Deltas generated from those signatures will also use BLAKE2 during generation, but produce output that can be read by old versions. See https://github.com/librsync/librsync/issues/5. Thanks to Michael Samuel <miknet.net> for reporting this and offering an initial patch.
* Various build fixes, thanks Timothy Gu.
* Improved rdiff man page from Debian.
* Improved librsync.spec file for building RPMs.
* Fixed bug #1110812 'internal error: job made no progress'; on large files.
* Moved hosting to https://github.com/librsync/librsync/
* Travis-CI.org integration test at https://travis-ci.org/librsync/librsync/
* Remove bundled copy of popt; it must be installed separately.
* You can set `$LIBTOOLIZE` before running `autogen.sh`, for example on OS X Homebrew where it is called `glibtoolize`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1126712 - CVE-2014-8242 librsync: MD4 collision file corruption
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rdiff-backup' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
[SECURITY] Fedora EPEL 7 Update: duplicity-0.6.24-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1135
2015-03-08 20:53:14
--------------------------------------------------------------------------------
Name : duplicity
Product : Fedora EPEL 7
Version : 0.6.24
Release : 5.el7
URL : http://www.nongnu.org/duplicity/
Summary : Encrypted bandwidth-efficient backup using rsync algorithm
Description :
Duplicity incrementally backs up files and directory by encrypting
tar-format volumes with GnuPG and uploading them to a remote (or
local) file server. In theory many protocols for connecting to a
file server could be supported; so far ssh/scp, local file access,
rsync, ftp, HSI, WebDAV and Amazon S3 have been written.
Because duplicity uses librsync, the incremental archives are space
efficient and only record the parts of files that have changed since
the last backup. Currently duplicity supports deleted files, full
unix permissions, directories, symbolic links, fifos, device files,
but not hard links.
--------------------------------------------------------------------------------
Update Information:
Changes in librsync 1.0.0 (2015-01-23)
======================================
* SECURITY: CVE-2014-8242: librsync previously used a truncated MD4 "strong" check sum to match blocks. However, MD4 is not cryptographically strong. It's possible that an attacker who can control the contents of one part of a file could use it to control other regions of the file, if it's transferred using librsync/rdiff. For example this might occur in a database, mailbox, or VM image containing some attacker-controlled data. To mitigate this issue, signatures will by default be computed with a 256-bit BLAKE2 hash. Old versions of librsync will complain about a bad magic number when given these signature files. Backward compatibility can be obtained using the new `rdiff sig --hash=md4` option or through specifying the "signature magic" in the API, but this should not be used when either the old or new file contain untrusted data. Deltas generated from those signatures will also use BLAKE2 during generation, but produce output that can be read by old versions. See https://github.com/librsync/librsync/issues/5. Thanks to Michael Samuel <miknet.net> for reporting this and offering an initial patch.
* Various build fixes, thanks Timothy Gu.
* Improved rdiff man page from Debian.
* Improved librsync.spec file for building RPMs.
* Fixed bug #1110812 'internal error: job made no progress'; on large files.
* Moved hosting to https://github.com/librsync/librsync/
* Travis-CI.org integration test at https://travis-ci.org/librsync/librsync/
* Remove bundled copy of popt; it must be installed separately.
* You can set `$LIBTOOLIZE` before running `autogen.sh`, for example on OS X Homebrew where it is called `glibtoolize`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1126712 - CVE-2014-8242 librsync: MD4 collision file corruption
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update duplicity' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
[SECURITY] Fedora EPEL 7 Update: librsync-1.0.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1135
2015-03-08 20:53:14
--------------------------------------------------------------------------------
Name : librsync
Product : Fedora EPEL 7
Version : 1.0.0
Release : 1.el7
URL : http://librsync.sourcefrog.net/
Summary : Rsync libraries
Description :
librsync implements the "rsync" algorithm, which allows remote
differencing of binary files. librsync computes a delta relative to a
file's checksum, so the two files need not both be present to generate
a delta.
This library was previously known as libhsync up to version 0.9.0.
The current version of this package does not implement the rsync
network protocol and uses a delta format slightly more efficient than
and incompatible with rsync 2.4.6.
--------------------------------------------------------------------------------
Update Information:
Changes in librsync 1.0.0 (2015-01-23)
======================================
* SECURITY: CVE-2014-8242: librsync previously used a truncated MD4 "strong" check sum to match blocks. However, MD4 is not cryptographically strong. It's possible that an attacker who can control the contents of one part of a file could use it to control other regions of the file, if it's transferred using librsync/rdiff. For example this might occur in a database, mailbox, or VM image containing some attacker-controlled data. To mitigate this issue, signatures will by default be computed with a 256-bit BLAKE2 hash. Old versions of librsync will complain about a bad magic number when given these signature files. Backward compatibility can be obtained using the new `rdiff sig --hash=md4` option or through specifying the "signature magic" in the API, but this should not be used when either the old or new file contain untrusted data. Deltas generated from those signatures will also use BLAKE2 during generation, but produce output that can be read by old versions. See https://github.com/librsync/librsync/issues/5. Thanks to Michael Samuel <miknet.net> for reporting this and offering an initial patch.
* Various build fixes, thanks Timothy Gu.
* Improved rdiff man page from Debian.
* Improved librsync.spec file for building RPMs.
* Fixed bug #1110812 'internal error: job made no progress'; on large files.
* Moved hosting to https://github.com/librsync/librsync/
* Travis-CI.org integration test at https://travis-ci.org/librsync/librsync/
* Remove bundled copy of popt; it must be installed separately.
* You can set `$LIBTOOLIZE` before running `autogen.sh`, for example on OS X Homebrew where it is called `glibtoolize`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1126712 - CVE-2014-8242 librsync: MD4 collision file corruption
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update librsync' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
Fedora EPEL 6 Update: milter-regex-2.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1159
2015-03-08 20:54:08
--------------------------------------------------------------------------------
Name : milter-regex
Product : Fedora EPEL 6
Version : 2.0
Release : 1.el6
URL : http://www.benzedrine.cx/milter-regex.html
Summary : Milter plug-in for regular expression filtering
Description :
Milter-regex is a milter based filter that makes it possible to filter
emails using regular expressions.
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream release, adds a couple of new options:
* -j (chroot)
* -l (log level)
It also adds support for STARTTLS macro checking.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1197717 - Compile milter-regex 2.0 for EPEL 6
https://bugzilla.redhat.com/show_bug.cgi?id=1197717
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update milter-regex' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
Fedora EPEL 7 Update: libmatekbd-1.8.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1201
2015-03-10 14:48:58
--------------------------------------------------------------------------------
Name : libmatekbd
Product : Fedora EPEL 7
Version : 1.8.1
Release : 1.el7
URL : http://mate-desktop.org
Summary : Libraries for mate kbd
Description :
Libraries for matekbd
--------------------------------------------------------------------------------
Update Information:
update to latest release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmatekbd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
Fedora EPEL 7 Update: marco-1.8.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1201
2015-03-10 14:48:58
--------------------------------------------------------------------------------
Name : marco
Product : Fedora EPEL 7
Version : 1.8.3
Release : 1.el7
URL : http://mate-desktop.org
Summary : MATE Desktop window manager
Description :
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
update to latest release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update marco' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
Fedora EPEL 6 Update: fts-3.2.32-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1150
2015-03-08 20:53:45
--------------------------------------------------------------------------------
Name : fts
Product : Fedora EPEL 6
Version : 3.2.32
Release : 1.el6
URL : http://fts3-service.web.cern.ch/
Summary : File Transfer Service V3
Description :
The File Transfer Service V3 is the successor of File Transfer Service V2.
It is a service and a set of command line tools for managing third party
transfers, most importantly the aim of FTS3 is to transfer the data produced
by CERN's LHC into the computing GRID.
--------------------------------------------------------------------------------
Update Information:
fts 3.2.32 release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
Fedora EPEL 6 Update: git-review-1.24-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1068
2015-03-08 20:50:51
--------------------------------------------------------------------------------
Name : git-review
Product : Fedora EPEL 6
Version : 1.24
Release : 4.el6
URL : https://github.com/openstack-infra/git-review
Summary : A Git helper for integration with Gerrit
Description :
An extension for source control system Git that creates and manages review
requests in the patch management system Gerrit. It replaces the rfc.sh script.
--------------------------------------------------------------------------------
Update Information:
This update provides upstream version 1.24, which replaces the version 1.17 previously available. It should be fully compatible and provides a large number of bugfixes and new features.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update git-review' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month
Fedora EPEL 6 Update: getmail-4.47.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1128
2015-03-08 20:52:58
--------------------------------------------------------------------------------
Name : getmail
Product : Fedora EPEL 6
Version : 4.47.0
Release : 1.el6
URL : http://pyropus.ca/software/getmail/
Summary : POP3, IMAP4 and SDPS mail retriever with Maildir delivery
Description :
getmail is a secure, flexible, reliable and easy-to-use
mail retriever for POP3, IMAP4 and SDPS.
It delivers mail into a Maildir or mbox file.
It is designed to replace other mail retrievers such as fetchmail.
Getmail is written entirely in python.
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update getmail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 1 month