Fedora EPEL 6 Update: php-horde-Horde-Core-2.19.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1118
2015-03-08 20:52:36
--------------------------------------------------------------------------------
Name : php-horde-Horde-Core
Product : Fedora EPEL 6
Version : 2.19.2
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde Core Framework libraries
Description :
These classes provide the core functionality of the Horde Application
Framework.
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.19.1**
* [jan] Revert to using ECB mode for encryption, to not break existing credentials (Bug #13869).
* [mjr] Fix replying to email from search results in some broken ActiveSync clients (Bug #13878).
* [jan] Fix propagating the LDAP hostspec configuration field (Bug #13872).
**Horde_Core 2.19.2**
* [mjr] Fix combination X509 and http plain authentication with ActiveSync.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Core' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
[SECURITY] Fedora EPEL 6 Update: libmspack-0.5-0.1.alpha.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1177
2015-03-08 20:54:44
--------------------------------------------------------------------------------
Name : libmspack
Product : Fedora EPEL 6
Version : 0.5
Release : 0.1.alpha.el6
URL : http://www.cabextract.org.uk/libmspack/
Summary : Library for CAB and related files compression and decompression
Description :
The purpose of libmspack is to provide both compression and decompression of
some loosely related file formats used by Microsoft.
--------------------------------------------------------------------------------
Update Information:
updated to bugfix release 0.5alpha
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1196153 - libmspack: off-by-one(?) buffer under-read in mspack/lzxd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1196153
[ 2 ] Bug #1196157 - libmspack: off-by-one buffer over-read in mspack/mszipd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1196157
[ 3 ] Bug #1180177 - libmspack: pointer arithmetic overflow during CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1180177
[ 4 ] Bug #1180175 - libmspack: denial of service while processing crafted CHM file (floating point exception)
https://bugzilla.redhat.com/show_bug.cgi?id=1180175
[ 5 ] Bug #1178867 - CVE-2014-9556 libmspack: buffer overflow causing denial of service in qtmd_decompress()
https://bugzilla.redhat.com/show_bug.cgi?id=1178867
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmspack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 7 Update: qsstv-8.2.10-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1149
2015-03-08 20:53:44
--------------------------------------------------------------------------------
Name : qsstv
Product : Fedora EPEL 7
Version : 8.2.10
Release : 1.el7
URL : http://users.telenet.be/on4qz/qsstv/
Summary : Qt-based slow-scan TV and fax
Description :
Qsstv is a program for receiving slow-scan television and fax. These are
modes used by hamradio operators. Qsstv uses a soundcard to send and
receive images.
--------------------------------------------------------------------------------
Update Information:
-fix for autosave button in rx (enable disable on the fly without restarting, next image will be autosaved if enabled)
-fix manual save button in rx, is now working
-when saving file, filename has now hours with leading zeroes
-hybrid password is now correctly loaded/saved
-xml interface (flrig) is now working again
-changed Sensitivity in SSTV
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1197538 - qsstv-8.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1197538
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qsstv' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 6 Update: php-horde-Horde-Group-2.0.5-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1122
2015-03-08 20:52:43
--------------------------------------------------------------------------------
Name : php-horde-Horde-Group
Product : Fedora EPEL 6
Version : 2.0.5
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde User Groups System
Description :
Package for managing and accessing the Horde groups system.
--------------------------------------------------------------------------------
Update Information:
**Horde_Group 2.0.5**
* [jan] Add schema definition for LDAP groups.
* [jan] Don't throw exception from listUsers() if group not found in LDAP directory (Bug #13879).
**Horde_HashTable 1.2.3**
* [jan] Fix setting key prefixes.
**Horde_Http 2.1.4**
* [jan] Make Horde_Http_Base_Response::headers array keys lowercase again (Bug #13843).
* [jan] Fix return code from multi-request actions in Peclhttp2 driver.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Group' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 6 Update: php-horde-Horde-Http-2.1.4-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1122
2015-03-08 20:52:43
--------------------------------------------------------------------------------
Name : php-horde-Horde-Http
Product : Fedora EPEL 6
Version : 2.1.4
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde HTTP libraries
Description :
This package provides a set of classes for making HTTP requests.
Optional dependency: php-pecl-http or php-pecl-http1
--------------------------------------------------------------------------------
Update Information:
**Horde_Group 2.0.5**
* [jan] Add schema definition for LDAP groups.
* [jan] Don't throw exception from listUsers() if group not found in LDAP directory (Bug #13879).
**Horde_HashTable 1.2.3**
* [jan] Fix setting key prefixes.
**Horde_Http 2.1.4**
* [jan] Make Horde_Http_Base_Response::headers array keys lowercase again (Bug #13843).
* [jan] Fix return code from multi-request actions in Peclhttp2 driver.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Http' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 6 Update: php-horde-Horde-HashTable-1.2.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1122
2015-03-08 20:52:43
--------------------------------------------------------------------------------
Name : php-horde-Horde-HashTable
Product : Fedora EPEL 6
Version : 1.2.3
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde Hash Table Interface
Description :
Provides an abstract API to access various hash table implementations.
--------------------------------------------------------------------------------
Update Information:
**Horde_Group 2.0.5**
* [jan] Add schema definition for LDAP groups.
* [jan] Don't throw exception from listUsers() if group not found in LDAP directory (Bug #13879).
**Horde_HashTable 1.2.3**
* [jan] Fix setting key prefixes.
**Horde_Http 2.1.4**
* [jan] Make Horde_Http_Base_Response::headers array keys lowercase again (Bug #13843).
* [jan] Fix return code from multi-request actions in Peclhttp2 driver.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-HashTable' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 6 Update: golang-github-rackspace-gophercloud-1.0.0-5.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1056
2015-03-08 20:50:29
--------------------------------------------------------------------------------
Name : golang-github-rackspace-gophercloud
Product : Fedora EPEL 6
Version : 1.0.0
Release : 5.el6
URL : https://github.com/rackspace/gophercloud
Summary : The Go SDK for Openstack http://gophercloud.io
Description :
Gophercloud currently lets you authenticate with OpenStack providers to create
and manage servers. We are working on extending the API to further include
cloud files, block storage, DNS, databases, security groups,
and other features.
This library is still in the very early stages of development.
--------------------------------------------------------------------------------
Update Information:
Fix root provide, replace double % with one
Fix Provides, used import_path macro instead of its value
Bump to upstream 6753165c3bb83a2b41bc495210509eacb12926d6
Bump to upstream 75c3fecab50deff8ff90bce2147a9d3140c5a13f
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1153733 - Review Request: golang-github-rackspace-gophercloud - The Go SDK for Openstack http://gophercloud.io
https://bugzilla.redhat.com/show_bug.cgi?id=1153733
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update golang-github-rackspace-gophercloud' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 6 Update: HepMC-2.06.09-9.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1172
2015-03-08 20:54:35
--------------------------------------------------------------------------------
Name : HepMC
Product : Fedora EPEL 6
Version : 2.06.09
Release : 9.el6
URL : http://lcgapp.cern.ch/project/simu/HepMC/
Summary : C++ Event Record for Monte Carlo Generators
Description :
The HepMC package is an object oriented event record written in C++
for High Energy Physics Monte Carlo Generators. Many extensions from
HEPEVT, the Fortran HEP standard, are supported: the number of entries
is unlimited, spin density matrices can be stored with each vertex,
flow patterns (such as color) can be stored and traced, integers
representing random number generator states can be stored, and an
arbitrary number of event weights can be included. Particles and
vertices are kept separate in a graph structure, physically similar to
a physics event. The added information supports the modularization of
event generators. The package has been kept as simple as possible with
minimal internal/external dependencies. Event information is accessed
by means of iterators supplied with the package.
--------------------------------------------------------------------------------
Update Information:
Avoid hexfloat notation (gcc 5), Use greater allowed epsilon for test (fixes i686 build).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update HepMC' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora EPEL 7 Update: srm-ifce-1.22.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1133
2015-03-08 20:53:10
--------------------------------------------------------------------------------
Name : srm-ifce
Product : Fedora EPEL 7
Version : 1.22.2
Release : 1.el7
URL : https://svnweb.cern.ch/trac/lcgutil
Summary : SRM client side library
Description :
srm-ifce is a client side implementation of the SRMv2 specification
for GFAL1/2 and FTS. SRM means Storage Resource Manager Interface, it is a
specification of a SOAP interface providing a generic way to manage
distributed storage systems.
--------------------------------------------------------------------------------
Update Information:
Release of srm-ifce 1.22.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update srm-ifce' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
[SECURITY] Fedora EPEL 6 Update: dokuwiki-0-0.24.20140929c.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-1107
2015-03-08 20:52:11
--------------------------------------------------------------------------------
Name : dokuwiki
Product : Fedora EPEL 6
Version : 0
Release : 0.24.20140929c.el6
URL : http://www.dokuwiki.org/dokuwiki
Summary : Standards compliant simple to use wiki
Description :
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating
documentation of any kind. It has a simple but powerful syntax which makes sure
the datafiles remain readable outside the Wiki and eases the creation of
structured texts.
All data is stored in plain text files no database is required.
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2015-2172
* There's a security hole in the ACL plugins remote API component. The plugin failes to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also has permissions to set up their own ACL rules and thus circumventing any existing rules.
Update to the 2014-09-29b release which contains various fixes, notably:
Security:
* CVE-2014-9253 - XSS via SFW file upload
* CVE-2012-6662 - jquery-ui XSS vulnerability
Bugfixes:
* dokuwiki requires php-xml (RHBZ#1061477)
* wrong SELinux file context for writable files/directories (RHBZ#1064524)
* drop httpd requirement (RHBZ#1164396)
Update to the 2014-09-29b release which contains various fixes, notably:
Security:
* CVE-2014-9253 - XSS via SFW file upload
* CVE-2012-6662 - jquery-ui XSS vulnerability
Bugfixes:
* dokuwiki requires php-xml (RHBZ#1061477)
* wrong SELinux file context for writable files/directories (RHBZ#1064524)
* drop httpd requirement (RHBZ#1164396)
Update to the 2014-09-29b release which contains various fixes, notably:
Security:
* CVE-2014-9253 - XSS via SFW file upload
* CVE-2012-6662 - jquery-ui XSS vulnerability
Bugfixes:
* dokuwiki requires php-xml (RHBZ#1061477)
* wrong SELinux file context for writable files/directories (RHBZ#1064524)
* drop httpd requirement (RHBZ#1164396)
Update to the 2014-09-29b release which contains various fixes, notably:
Security:
* CVE-2014-9253 - XSS via SFW file upload
* CVE-2012-6662 - jquery-ui XSS vulnerability
Bugfixes:
* dokuwiki requires php-xml (RHBZ#1061477)
* wrong SELinux file context for writable files/directories (RHBZ#1064524)
* drop httpd requirement (RHBZ#1164396)
This update adds dokuwiki package to EPEL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1197822 - CVE-2015-2172 dokuwiki: privilege escalation in RPC API
https://bugzilla.redhat.com/show_bug.cgi?id=1197822
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dokuwiki' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years