Fedora EPEL 6 Update: ripright-0.9-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7517
2015-08-23 02:26:42.019389
--------------------------------------------------------------------------------
Name : ripright
Product : Fedora EPEL 6
Version : 0.9
Release : 3.el6
URL : http://www.mcternan.me.uk/ripright/
Summary : A minimal CD ripper
Description :
RipRight is a minimal CD ripper for Linux modeled on autorip. It can run as
a daemon and will automatically start ripping any CD found in the drive after
which the disc will be ejected. Ripping is always to FLAC lossless audio
format with tags taken from the community-maintained MusicBrainz lookup
service and cover art from Amazon where possible. If a disc is unknown to
MusicBrainz, the CD will be ejected without ripping and can also be
optionally rejected if cover art cannot be found.
With RipRight, ripping a CD collection is just a matter of feeding your Linux
PC each CD in turn and waiting while they are ripped. CDs which are
immediately ejected can be checked with the MusicBrainz Picard tool which
allows CD identifiers to be uploaded to the website database. Any errors or
inaccuracies in the database records can also be edited on the MusicBrainz.
--------------------------------------------------------------------------------
Update Information:
* Rebuild for ImageMagick-6.7.2.7-2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249941 - Needs to be rebuilt for new ImageMagick
https://bugzilla.redhat.com/show_bug.cgi?id=1249941
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ripright' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
[SECURITY] Fedora EPEL 6 Update: nagios-plugins-2.0.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7535
2015-08-23 02:26:42.019358
--------------------------------------------------------------------------------
Name : nagios-plugins
Product : Fedora EPEL 6
Version : 2.0.3
Release : 1.el6
URL : https://www.nagios-plugins.org/
Summary : Host/service/network monitoring program plugins for Nagios
Description :
Nagios is a program that will monitor hosts and services on your
network, and to email or page you when a problem arises or is
resolved. Nagios runs on a Unix server as a background or daemon
process, intermittently running checks on various services that you
specify. The actual service checks are performed by separate "plugin"
programs which return the status of the checks to Nagios. This package
contains those plugins.
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114841 - CVE-2014-4702 nagios-plugins: check_icmp Arbitrary Option File Read
https://bugzilla.redhat.com/show_bug.cgi?id=1114841
[ 2 ] Bug #1098531 - CVE-2014-4701 CVE-2014-4703 nagios-plugins: check_dhcp Arbitrary Option File Read
https://bugzilla.redhat.com/show_bug.cgi?id=1098531
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios-plugins' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
Fedora EPEL 6 Update: rubygem-thor-0.18.1-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7528
2015-08-23 02:26:42.019304
--------------------------------------------------------------------------------
Name : rubygem-thor
Product : Fedora EPEL 6
Version : 0.18.1
Release : 3.el6
URL : http://whatisthor.com/
Summary : Scripting framework that replaces rake, sake and rubigen
Description :
Thor is a scripting framework that replaces rake, sake and rubigen.
--------------------------------------------------------------------------------
Update Information:
Build of rubygem-thor from f21 to epel6 It can also help to solve rubygem-
bundler dependency bug: https://bugzilla.redhat.com/show_bug.cgi?id=908061
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-thor' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
[SECURITY] Fedora EPEL 5 Update: wordpress-4.2.4-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7370
2015-08-23 02:26:39.682987
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 5
Version : 4.2.4
Release : 1.el5
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress-4.2.4/README.fedora
--------------------------------------------------------------------------------
Update Information:
**WordPress 4.2.4 Security and Maintenance Release** WordPress 4.2.4 is now
available. This is a security release for all previous versions and we strongly
encourage you to update your sites immediately. This release addresses six
issues, including three cross-site scripting vulnerabilities and a potential SQL
injection that could be used to compromise a site, which were discovered by
Marc-Alexandre Montpas of Sucuri, Helen Hou-Sandí of the WordPress security
team, Netanel Rubin of Check Point, and Ivan Grigorov. It also includes a fix
for a potential timing side-channel attack, discovered by Johannes Schmitt of
Scrutinizer, and prevents an attacker from locking a post from being edited,
discovered by Mohamed A. Baset. Our thanks to those who have practiced
responsible disclosure of security issues. WordPress 4.2.4 also fixes four
bugs. For more information, see: the release notes or consult the list of
changes. * the release notes: https://codex.wordpress.org/Version_4.2.4 * the
list of changes:
https://core.trac.wordpress.org/log/branches/4.2?rev=33573&stop_rev=33396
**WordPress 4.2.3 Security and Maintenance Release** WordPress 4.2.3 is now
available. This is a security release for all previous versions and we strongly
encourage you to update your sites immediately. WordPress versions 4.2.2 and
earlier are affected by a cross-site scripting vulnerability, which could allow
users with the Contributor or Author role to compromise a site. This was
initially reported by Jon Cave and fixed by Robert Chapin, both of the WordPress
security team, and later reported by Jouko Pynnönen. We also fixed an issue
where it was possible for a user with Subscriber permissions to create a draft
through Quick Draft. Reported by Netanel Rubin from Check Point Software
Technologies. Our thanks to those who have practiced responsible disclosure
of security issues. WordPress 4.2.3 also contains fixes for 20 bugs from 4.2.
For more information, see: * the release notes:
https://codex.wordpress.org/Version_4.2.3 * the list of changes:
https://core.trac.wordpress.org/log/branches/4.2?rev=33382&stop_rev=32430
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246396 - CVE-2015-5622 CVE-2015-5623 wordpress: cross-site scripting and permission issue fixed in wordpress 4.2.3
https://bugzilla.redhat.com/show_bug.cgi?id=1246396
[ 2 ] Bug #1250583 - CVE-2015-2213 CVE-2015-5730 CVE-2015-5731 CVE-2015-5732 CVE-2015-5733 CVE-2015-5734 wordpress: cross-site scripting vulnerabilities and a potential SQL injection
https://bugzilla.redhat.com/show_bug.cgi?id=1250583
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
Fedora EPEL 5 Update: drupal7-feeds-2.0-0.13.beta1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7544
2015-08-23 02:26:39.682933
--------------------------------------------------------------------------------
Name : drupal7-feeds
Product : Fedora EPEL 5
Version : 2.0
Release : 0.13.beta1.el5
URL : http://drupal.org/project/feeds
Summary : Aggregates RSS/Atom/RDF feeds, imports CSV files and more
Description :
Import or aggregate data as nodes, users, taxonomy terms or simple database
records.
This package provides the following Drupal modules:
* feeds
* feeds_import
* feeds_news (requires drupal7-features and drupal7-views)
* feeds_ui
--------------------------------------------------------------------------------
Update Information:
## 7.x-2.0-beta1 Changes since 7.x-2.0-alpha9: * Issue #2038525 by
twistor, larsdesigns, DamienMcKenna: SimplePie Plugin Installation Documentation
in README.txt * Issue #1449464 by klausi, cbergmann: Own cache Bin for feeds *
Issue #2515196 by twistor: Only transliterate downloaded files. * Issue
#2510788 by twistor: Remove query string from path in FeedsEnclosure. * Issue
#2514300 by twistor: Fatal error when I try to import feed items * Issue
#2511738 by deminy: Incorrect File Inclusion * Issue #2509444 by twistor: Field
Feeds Presave Not Importing User Fields * Issue #2509464 by twistor,
joelpittet: Feeds module cannot find its parser module due to filesystem
restriction * Issue #2509464 by twistor, Max1: Feeds module cannot find its
parser module due to filesystem restriction * Issue #2364103 by Luxian,
MegaChriz: Feeds error log crashes when log messages are too long * Issue
#1953008 by MegaChriz, twistor, klausi: PHP Fatal error: Nesting level too deep
- recursive dependency? in FeedsProcessor.inc on line 199 * Issue #1107522 by
MegaChriz, twistor, ditcheva, nielsonm, franz, Niklas Fiekas, cthiebault, Uhkis,
gcb, mparker17, guillaumev: Framework for expected behavior when importing
empty/blank values + text field fix * Issue #2092895 by mikran, MegaChriz,
twistor: Block users not included in feed * Issue #2500185 by angel.h,
MegaChriz: Error when having an entity without base table * Issue #2496735 by
twistor, diarmy: For PHP 5.6.0 and above, Feeds should allow the use of cURL if
open_basedir is enabled * Issue #1848498 by twistor: Respect allowed file
extensions in file mapper * Issue #2502419 by klausi: Log messages XSS attack
vector * Issue #2495145 by twistor, cashwilliams, greggles, klausi: Possible
XSS in PuSHSubscriber.inc * Issue #2488036 by MegaChriz, orannezelehcim:
Modules that define both an importer and a plugin can not be disabled * Issue
#2333029 by twistor, MegaChriz: Extend mapping API to allow for defaults and
multiple callbacks * Issue #2497507 by twistor: Pass plugin definition to
FeedsPlugin objects * Add test for #2489006. * Issue #2489006 by donquixote:
Uninitialized array in taxonomy_feeds_set_target() * Issue #2497729 by twistor:
Implement all methods on FeedsMissingPlugin * Issue #2469219 by MegaChriz,
twistor: Remove the Generic Entity Processor * Issue #1058424 by thijsvdanker:
Port date mapper patch to d7 version to support dates before 13 Dec 1901 *
Remove useless libraries test dependency. * Issue #2427497 by ttaylor249:
Fetching feed via SSL through proxy doesn't work * Issue #1978722 by klausi,
ultimike: Entity property info for feeds node is broken * Issue #1988970 by
msti: FeedsCSV parser - download template should use the default delimiter *
Issue #2468401 by jiff: HTTP fetcher does not correctly decode urlencoded basic
auth params * Issue #1815070 by twistor, joelpittet: No more mapping for
numeric (boolean, decimal, integer, floats, and lists of them) fields * Issue
#2339383 by mikran, MegaChriz, joelpittet: Items missing from feeds do not
affect item hash even when action is taken based on that * Issue #2333009 by
MegaChriz: Add importer validator for Views * Issue #2415283 by MegaChriz: Some
tests are not executed by testbot * Issue #1829212 by alan-io1, agupta,
MegaChriz, ac: SQLSTATE[42S22]: Column not found: 1054 Unknown column
'feeds_item.entity_type' in 'on clause' * Issue #2419111 by make77, MegaChriz:
Configuration option to allow invalid SSL certificates is not used when option
"Auto detect feeds" is enabled * Issue #2357981 by MegaChriz:
hook_feeds_presave: $entity_id is missing * Issue #2011240 by ressa, Abelito:
How to import the description of a file? * Issue #2397219 by joachim,
MegaChriz: docs for my_module_mapper_unique() don't match implementation in
tests * Issue #2397199 by joachim, MegaChriz: summary line for
hook_feeds_processor_targets_alter() docs mentions nodes & is too long * Remove
unused code from common_syndication_parser.inc. * Issue #1982286 by AdamPS:
Recoverable fatal error * Issue #2341407 by vinmassaro, twistor: Fix missing
file/image mappings caused by #1080386-by-adding">#1080386 by adding:uri to
mappings * Issue #2379915 by hydrant-mark, twistor: Taxonomy Mapper: Assumes
there will only ever be one matching term * Issue #2387419 by MegaChriz: Auto
detect dependencies when putting Feeds importer in a feature * Issue #2363779
by Niremizov, MegaChriz: CSVParser Source form translation fix * Issue #2053355
by ufku, vinmassaro: Notice: Undefined variable: file FeedsParser.inc:388 *
Issue #2390199 by GuyPaddock: Unhelpful failure upon uploading an empty CSV file
* Issue #2308343 by MegaChriz, twistor, joelpittet, kruser: File upload
disappears with Bootstrap Theme (abuse of #description in theme_feeds_upload())
* Issue #1887632 by joelpittet: Exception: Empty configuration identifier. *
Issue #2379407 by twistor, MegaChriz: Make module required if plugins are in use
* Issue #2248009 by twistor | djdevin: Fixed Remove the population of
->source_config from FeedsPlugin. * Issue #2218999 by fietserwin: Fixed
Warning: Invalid argument supplied for foreach() in element_children() (line
6420 of includescommon.inc). * Issue #2349245 by Niremizov: Fixed error on
importing empty csv file with no headers. * Issue #2339983 by mikran: Fixed
Unpublished nodes message has a wrong format_plural() parameter. * Issue
#2328605 by ekes, twistor: Fixed Unique item checking:
FeedsProcessor::existingEntityId(). * Issue #2305919 by twistor: Fixed Return
404 when trying to edit a non-existent feed. * Issue #1062178 by mansspams,
MegaChriz, gmclelland, specky_rum, Dave Reid | iccle: Added configuration option
to allow invalid/unverified or (self certified) SSL certificates. * Issue
#1470530 by stefan.r, GaëlG, mikran, Cottser, gnucifer, MegaChriz, vinmassaro,
kostajh, Mithrandir, riho, jaanhoinatski, nrambeck, byronveale, dbassendine,
PsycleInteractive, imclean: Added Unpublish/Delete nodes not included in feed.
* Issue #2305929 by twistor, MegaChriz: Show message that mapping settings must
be saved after changes. * Issue #2304247 by MegaChriz, undertext | twistor:
Update included Feeds Import Feature. * Issue #2307379 by twistor: Fixed Add
FeedsConfigurable::hasConfigForm(). * Issue #661606 by MegaChriz, twistor,
Cottser, scottrigby, manojbisht_drupal, Mohammed J. Razem, agileadam, emilyf,
tmsimont, bradjones1, hairqles, ldavisrobeson, selim13, a.ross, chromix,
g089h515r806 | lunk_rat: Added Support unique targets in mappers. * Issue
#2008168 by JeroenT | scottalan: Update included Feeds News Feature. * Issue
#2224643 by hanoii, MegaChriz: Added Support for input format configuration on a
per-field basis . * Issue #1981504 by twistor | Dale Baldwin: Fixed Status
Report has a notification to install SimplePie library when SimplePie module
isn't even installed. * Issue #962912 by twistor, MegaChriz, Peacog, Niklas
Fiekas | willmoy: Added Mapping to node summary. * Backport assertFieldByXPath
fix from 8.x * Issue #2175525 by MegaChriz | Max2505: Added User admin is not
authorized to create content type. * Issue #2275893 by twistor, dagomar: Fixed
Process in background doesn't work on non-periodic imports. * Issue #2275893
Add tests for import in background. * Add a long csv file where the guids are
ordered. * Fix FeedsWebTestCase::removeMappings. * Issue #1561200 by szt,
osopolar: Added Use machine names for better identification of similar field
names. * Issue #2192819 by twistor, klausi: FeedsHTTPFetcherResult should store
the result between batches. * Issue #1231332 by klausi, twistor | nyl auster:
Periodic import imports only one file per cron. * Issue #2192851 by klausi:
Hook_feeds_after_import() should have access to exceptions. * Issue #2190551 by
twistor: Hook_feeds_before_import only executes during form submission. * Issue
#1852048 by ianthomas_uk: Comments suggest exceptions are ignore, when in fact
they are rethrown. * Issue #1722180 by pcambra: Clear plugins cache on
feeds_cache_clear. * Issue #2093651 by twistor: Simplify target callbacks. *
Issue #1305698 by dman: Additional validation when creating terms - assert the
Vocabulary is valid. * Issue #1113312 by Niklas Fiekas: Show import page in
admin overlay. * Issue #2053355 by osopolar: Notice: Undefined variable: file
FeedsParser.inc:388. * Issue #1537776 by David_Rothstein | RyFo18: Importing a
single 21st century year defaults to the current year. * Issue #1333266 by
dastagg | webchick: Link to feed importers broken when no feed importers exist.
* Issue #1951736 by twistor, John Morahan: Discovery sometimes fails. * Issue
#1996240 by msti, MegaChriz: Duplicate fields in CSV template. * Issue #930652
by twistor, tristanoneil | alex_b: Expiry batching broken. * Issue #1884516 by
aaronbauman: Import with taxonomy term mapping fails if term name exceeds db
size. * Issue #2046335 by twistor, j0rd: Http:// prefix and error 1002. *
Issue #1485870 by brad.bulger, twistor: Remove custom error reporting for
SimplePie. * Issue #2178563 by twistor | alibama: Entityform does not seem to
work. * Issue #2174303 by twistor | bdanin: Feeds importer importer -- context
and mapping not working. * Issue #1107522 by ditcheva, Uhkis, cthiebault,
franz, nielsonm, Niklas Fiekas, twistor, mparker17, Lasac, guillaumev | jptl:
Framework for expected behavior when importing empty/blank values + text field
fix. * Issue #1033202 by jamesdixon, jamsilver, twistor, james.williams, Steven
Jones, vordude, j0rd, mErilainen, gmario, rickmanelius, imclean, dasjo,
guillaumev, jlyon, gilgabar, elliotttf, mukesh.agarwal17, patcon, wesnick,
Bevan, kreynen, Grayside, fago, spotzero: [Meta] Generic entity processor. *
Issue #2149829 by chilic: Import/Update 0 value to text field. * Issue #2150989
by chilic | osopolar: SimpleTest fails: Undefined index: content-type, Notice
file: http_request.inc Line: 57. * Issue #1984962 by mvd81NL, redsd, twistor:
Fixed Use a 0 as mapping source. * Issue #1159806 by VladimirAus, bigjim | Slim
Pickens: Added proxy support. * Issue #1989196 by beeradb: Fixed Never Pass
FeedsDateTime objects into date_create(). * Issue #1222750 by Brandonian,
twistor, lyricnz: Added SimplePie 1.3 support. * Issue #1080386 by elizzle,
twistor, rhouse, AndyF, chadmkidner, retiredpro, slefevre1, moonray, asgorobets,
jwmeyerson: Added How to get title and alt fields into your image import for
drupal 7 feeds. * Use user-supplied id if available on import. * Issue #777888
by WorldFallz, liquidcms, firfin, tmsimont | timwood: Followup to importing
importers. * Fix validation for importing importers.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1242139 - drupal7-feeds-2.0-beta1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1242139
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7-feeds' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
Fedora EPEL 7 Update: calligra-l10n-2.9.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7262
2015-08-22 17:36:31.316558
--------------------------------------------------------------------------------
Name : calligra-l10n
Product : Fedora EPEL 7
Version : 2.9.6
Release : 1.el7
URL : http://www.calligra-suite.org/
Summary : Language files for calligra
Description :
Language files for calligra.
--------------------------------------------------------------------------------
Update Information:
New upstream stable/bugfix release. See also
https://www.calligra.org/news/calligra-2-9-6-released/
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update calligra-l10n' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
Fedora EPEL 7 Update: calligra-2.9.6-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7262
2015-08-22 17:36:31.316558
--------------------------------------------------------------------------------
Name : calligra
Product : Fedora EPEL 7
Version : 2.9.6
Release : 6.el7
URL : http://www.calligra-suite.org/
Summary : An integrated office suite
Description :
An integrated office suite.
--------------------------------------------------------------------------------
Update Information:
New upstream stable/bugfix release. See also
https://www.calligra.org/news/calligra-2-9-6-released/
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update calligra' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
[SECURITY] Fedora EPEL 7 Update: wordpress-4.2.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7366
2015-08-22 17:36:31.316457
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 7
Version : 4.2.4
Release : 1.el7
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress-4.2.4/README.fedora
--------------------------------------------------------------------------------
Update Information:
**WordPress 4.2.4 Security and Maintenance Release** WordPress 4.2.4 is now
available. This is a security release for all previous versions and we strongly
encourage you to update your sites immediately. This release addresses six
issues, including three cross-site scripting vulnerabilities and a potential SQL
injection that could be used to compromise a site, which were discovered by
Marc-Alexandre Montpas of Sucuri, Helen Hou-Sandí of the WordPress security
team, Netanel Rubin of Check Point, and Ivan Grigorov. It also includes a fix
for a potential timing side-channel attack, discovered by Johannes Schmitt of
Scrutinizer, and prevents an attacker from locking a post from being edited,
discovered by Mohamed A. Baset. Our thanks to those who have practiced
responsible disclosure of security issues. WordPress 4.2.4 also fixes four
bugs. For more information, see: the release notes or consult the list of
changes. * the release notes: https://codex.wordpress.org/Version_4.2.4 * the
list of changes:
https://core.trac.wordpress.org/log/branches/4.2?rev=33573&stop_rev=33396
**WordPress 4.2.3 Security and Maintenance Release** WordPress 4.2.3 is now
available. This is a security release for all previous versions and we strongly
encourage you to update your sites immediately. WordPress versions 4.2.2 and
earlier are affected by a cross-site scripting vulnerability, which could allow
users with the Contributor or Author role to compromise a site. This was
initially reported by Jon Cave and fixed by Robert Chapin, both of the WordPress
security team, and later reported by Jouko Pynnönen. We also fixed an issue
where it was possible for a user with Subscriber permissions to create a draft
through Quick Draft. Reported by Netanel Rubin from Check Point Software
Technologies. Our thanks to those who have practiced responsible disclosure
of security issues. WordPress 4.2.3 also contains fixes for 20 bugs from 4.2.
For more information, see: * the release notes:
https://codex.wordpress.org/Version_4.2.3 * the list of changes:
https://core.trac.wordpress.org/log/branches/4.2?rev=33382&stop_rev=32430
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246396 - CVE-2015-5622 CVE-2015-5623 wordpress: cross-site scripting and permission issue fixed in wordpress 4.2.3
https://bugzilla.redhat.com/show_bug.cgi?id=1246396
[ 2 ] Bug #1250583 - CVE-2015-2213 CVE-2015-5730 CVE-2015-5731 CVE-2015-5732 CVE-2015-5733 CVE-2015-5734 wordpress: cross-site scripting vulnerabilities and a potential SQL injection
https://bugzilla.redhat.com/show_bug.cgi?id=1250583
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
Fedora EPEL 7 Update: waf-1.8.12-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7379
2015-08-22 17:36:31.316365
--------------------------------------------------------------------------------
Name : waf
Product : Fedora EPEL 7
Version : 1.8.12
Release : 1.el7
URL : https://github.com/waf-project/waf
Summary : A Python-based build system
Description :
Waf is a Python-based framework for configuring, compiling and
installing applications. It is a replacement for other tools such as
Autotools, Scons, CMake or Ant.
--------------------------------------------------------------------------------
Update Information:
NEW IN WAF 1.8.12 ----------------- * Fixed a regression when building in
sub-folders - https://github.com/waf-project/waf/issues/1590 * New mac_files
attribute which is expected to replace mac_resources in waf 1.9 (demos/mac_app/)
* env = env.derive().detach() to simplify deep copies
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update waf' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months
Fedora EPEL 7 Update: python-regex-2015.07.19-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7324
2015-08-22 17:36:31.316261
--------------------------------------------------------------------------------
Name : python-regex
Product : Fedora EPEL 7
Version : 2015.07.19
Release : 1.el7
URL : https://code.google.com/p/mrab-regex-hg
Summary : Alternative regular expression module, to replace re
Description :
This new regex implementation is intended eventually to replace
Python's current re module implementation.
For testing and comparison with the current 're' module the new
implementation is in the form of a module called 'regex'.
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version 2015.07.19.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-regex' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 9 months