[SECURITY] Fedora EPEL 7 Update: php-ZendFramework2-2.4.7-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7845
2015-09-15 03:26:45.111383
--------------------------------------------------------------------------------
Name : php-ZendFramework2
Product : Fedora EPEL 7
Version : 2.4.7
Release : 2.el7
URL : http://framework.zend.com
Summary : Zend Framework 2
Description :
Zend Framework 2 is an open source framework for developing web applications
and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code
and utilizes most of the new features of PHP 5.3, namely namespaces, late
static binding, lambda functions and closures.
Zend Framework 2 evolved from Zend Framework 1, a successful PHP framework
with over 15 million downloads.
Note: This meta package installs all base Zend Framework component packages
(Authentication, Barcode, Cache, Captcha, Code, Config, Console, Crypt, Db,
Debug, Di, Dom, Escaper, EventManager, Feed, File, Filter, Form, Http, I18n,
InputFilter, Json, Ldap, Loader, Log, Mail, Math, Memory, Mime, ModuleManager,
Mvc, Navigation, Paginator, Permissions-Acl, Permissions-Rbac, ProgressBar,
Serializer, Server, ServiceManager, Session, Soap, Stdlib, Tag, Test, Text,
Uri, Validator, Version, View, XmlRpc) except the optional Cache-apc and
Cache-memcached packages.
--------------------------------------------------------------------------------
Update Information:
Zend Framework Upstream ChangeLogs: * [Version
2.4.7](http://framework.zend.com/changelog/2.4.7/) * [Version
2.4.6](http://framework.zend.com/changelog/2.4.6/) * [Version
2.4.5](http://framework.zend.com/changelog/2.4.5/) * [Version
2.4.4](http://framework.zend.com/changelog/2.4.4/) * [Version
2.4.3](http://framework.zend.com/changelog/2.4.3/) * [Version
2.4.2](http://framework.zend.com/changelog/2.4.2/) * [Version
2.4.1](http://framework.zend.com/changelog/2.4.1/) * [Version
2.4.0](http://framework.zend.com/changelog/2.4.0/)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253250 - CVE-2015-5161 php-ZendFramework: XML external entity injection (XXE) on PHP FPM
https://bugzilla.redhat.com/show_bug.cgi?id=1253250
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-ZendFramework2' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: php-zendframework-zendpdf-2.0.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7781
2015-09-15 00:22:41.626119
--------------------------------------------------------------------------------
Name : php-zendframework-zendpdf
Product : Fedora EPEL 6
Version : 2.0.2
Release : 1.el6
URL : http://framework.zend.com/
Summary : Zend Framework ZendPdf component
Description :
Zend Framework ZendPdf component.
--------------------------------------------------------------------------------
Update Information:
Zend Framework ZendPdf component.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1251034 - Review Request: php-zendframework-zendpdf - Zend Framework ZendPdf component
https://bugzilla.redhat.com/show_bug.cgi?id=1251034
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-zendframework-zendpdf' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: php-horde-Horde-Crypt-2.6.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7795
2015-09-15 00:22:41.626051
--------------------------------------------------------------------------------
Name : php-horde-Horde-Crypt
Product : Fedora EPEL 6
Version : 2.6.1
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde Cryptography API
Description :
The Horde_Crypt package class provides an API for various cryptographic
systems.
--------------------------------------------------------------------------------
Update Information:
**Horde_Crypt 2.6.1** * [mjr] Fix PHP 5.3 incompatibility (Bug #14090)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Crypt' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: wordpress-4.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7796
2015-09-15 00:22:41.625964
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 6
Version : 4.3
Release : 1.el6
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress-4.3/README.fedora
--------------------------------------------------------------------------------
Update Information:
Upstream Annoucement: [WordPress 4.3
“Billie”](https://wordpress.org/news/2015/08/billie/) Release Notes: [Version
4.3](https://codex.wordpress.org/Version_4.3)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: goaccess-0.9.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7833
2015-09-15 00:22:41.625910
--------------------------------------------------------------------------------
Name : goaccess
Product : Fedora EPEL 6
Version : 0.9.3
Release : 1.el6
URL : http://goaccess.io/
Summary : Real-time web log analyzer and interactive viewer
Description :
GoAccess is a real-time web log analyzer and interactive viewer that runs in a
terminal in *nix systems. It provides fast and valuable HTTP statistics for
system administrators that require a visual server report on the fly.
Features:
GoAccess parses the specified web log file and outputs the data to terminal.
* General statistics, bandwidth, etc.
* Time taken to serve the request (useful to track pages that are slowing down.
your site).
* Metrics for cumulative, average and slowest running requests.
* Top visitors.
* Requested files & static files.
* 404 or Not Found.
* Hosts, Reverse DNS, IP Location.
* Operating Systems.
* Browsers and Spiders.
* Referring Sites & URLs.
* Keyphrases.
* Geo Location - Continent/Country/City.
* Visitors Time Distribution.
* HTTP Status Codes.
* Ability to output JSON and CSV.
* Tailor GoAccess to suit your own color taste/schemes.
* Support for large datasets + data persistence.
* Support for IPv6.
* Output statistics to HTML.
and more...
GoAccess allows any custom log format string. Predefined options include, but
not limited to:
* Amazon CloudFront (Download Distribution).
* AWS Elastic Load Balancing.
* Apache/Nginx Common/Combined + VHosts.
* Google Cloud Storage.
* W3C format (IIS).
--------------------------------------------------------------------------------
Update Information:
Changes to GoAccess 0.9.3 - Wednesday, August 26, 2015 - Added the ability to
set custom colors on the terminal output. - Added the ability to process logs
incrementally. - Added a default color palette (Monokai) to the config file.
- Added column headers for every enabled metric on each panel. - Added
cumulative time served metric. - Added maximum time served metric (slowest
running requests). - Added the ability to parse the query string specifier
'%q' from a log file. - Added CloudFlare status codes. - Added command
option to disable column name metrics --no-column-names. - Added AWS Elastic
Load Balancing to the list of predefined log/date/time formats. - Added
DragonFly BSD to the list of OSs. - Added Slackbot to the list of
crawlers/browsers. - Disabled REFERRERS by default. - Ensure bandwidth
metric is displayed only if the %b specifier is parsed. - Fixed issue where
the '--sort-panel' option wouldn't sort certain panels. - Fixed several
compiler warnings. - Set predefined static files when no config file is used.
- Updated Windows 10 user agent from 6.4 (wrong) to 10.0.(actual) Changes to
GoAccess 0.9.2 - Monday, July 06, 2015 - Added ability to fully parse
browsers that contain spaces within a token. - Added multiple user agents to
the list of browsers. - Added the ability to handle time served in
milliseconds as a decimal number `%L`. - Added the ability to parse a
timestamp in microseconds. - Added the ability to parse Google Cloud Storage
access logs. - Added the ability to set a custom title and header in the HTML
report. - Added '%x' as timestamp log-format specifier. - Ensure agents'
hash table is destroyed upon exiting the program. - Ensure 'Game Systems' are
processed correctly. - Ensure visitors panel header is updated depending if
crawlers are parsed or not. - Fixed issue where the date value was set as
time value in the config dialog. - Fixed memory leak in the hits metrics when
using the in-memory storage (GLib). Changes to GoAccess 0.9.1 - Tuesday,
May 26, 2015 - Added additional Nginx-specific status codes. - Added
Applebot to the list of web crawlers. - Added Microsoft Edge to the list of
browsers. - Added the ability to highlight active panel through --hl-header.
- Ensure dump_struct is used only if using __GLIBC__. - Ensure goaccess image
has an alt attribute on the HTML output for valid HTML5. - Ensure the
config file path is displayed when something goes wrong (FATAL). - Ensure
there is a character indicator to see which panel is active. - Fixed Cygwin
compile issue attempting to use -rdynamic. - Fixed issue where a single IP did
not get excluded after an IP range. - Fixed issue where requests show up in
the wrong view even when --no-query-string is used. - Fixed issue where
some browsers were not recognized or marked as 'unknown'. - Fixed memory leak
when excluding an IP range. - Fixed overflows on sort comparison functions.
- Fixed segfault when using on-disk storage and loading persisted data with -a.
- Removed keyphrases menu item from HTML output. - Split iOS devices from Mac
OS X. Changes to GoAccess 0.9 - Thursday, March 19, 2015 - Added ability to
double decode an HTTP referer and agent. - Added ability to sort views through
the command line on initial load. - Added additional data values to the
backtrace report. - Added additional graph to represent the visitors metric on
the HTML output. - Added AM_PROG_CC_C_O to configure.ac - Added 'Android
Lollipop' to the list of operating systems. - Added 'average time served'
metric to all panels. - Added 'bandwidth' metric to all panels. - Added
command line option to disable summary metrics on the CSV output. - Added
numeric formatting to the HTML output to improve readability. - Added request
method specifier to the default W3C log format. - Added support for GeoIP
Country IPv6 and GeoIP City IPv6 through --geoip-database. - Added the
ability to ignore parsing and displaying given panel(s). - Added the ability
to ignore referer sites from being counted. A good case scenario is to
ignore own domains. i.e., owndomain.tld. This also allows ignoring hosts
using wildcards. For instance, *.mydomain.tld or www.mydomain.* or
www?.mydomain.tld - Added time/hour distribution module. e.g., 00-23. -
Added 'visitors' metrics to all panels. - Added Windows 10 (v6.4) to the real
windows user agents. - Changed AC_PREREQ macro version so it builds on old
versions of autoconf. - Changed GEOIP database load to GEOIP_MEMORY_CACHE for
faster lookups. - Changed maximum number of choices to display per panel to
366 fron 300. - Ensure config file is read from home dir if unable to open it
from %sysconfdir% path. - Fixed array overflows when exceeding MAX_*
limits on command line options. - Fixed a SEGFAULT where sscanf could not
handle special chars within the referer. - Fixed character encoding on
geolocation output (ISO-8859 to UTF8). - Fixed issue on wild cards containing
'?' at the end of the string. - Fixed issue where a 'Nothing valid to process'
error was triggered when the number of invalid hits was equal to the number
of valid hits. - Fixed issue where outputting to a file left a zero-byte file
in pwd. - Improved parsing of operating systems. - Refactored log parser so
it allows with ease the addition of new modules. This also attempts to
decouple the core functionality from the rendering functions. It also gives
the flexibility to add children metrics to root metrics for any module.
e.g., Request A was visited by IP1, IP2, IP3, etc. - Restyled HTML output.
Changes to GoAccess 0.8.5 - Sunday, September 14, 2014 - Fixed SEGFAULT when
parsing a malformed request that doesn't have HTTP status.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update goaccess' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: globus-gridftp-server-8.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7838
2015-09-15 00:22:41.625856
--------------------------------------------------------------------------------
Name : globus-gridftp-server
Product : Fedora EPEL 6
Version : 8.7
Release : 1.el6
URL : http://www.globus.org/
Summary : Globus Toolkit - Globus GridFTP Server
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gridftp-server package contains:
Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
- GT6 update (Improvements to globus-gridftp-server-setup-chroot) - Man page for
globus-gridftp-server-setup-chroot now provided by upstream, remove the one from
the source rpm - Add build requires on openssl and fakeroot needed for new tests
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gridftp-server' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: php-Raven-0.12.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7840
2015-09-15 00:22:41.625796
--------------------------------------------------------------------------------
Name : php-Raven
Product : Fedora EPEL 6
Version : 0.12.1
Release : 1.el6
URL : https://github.com/getsentry/raven-php
Summary : A PHP client for Sentry
Description :
A PHP client for Sentry (http://getsentry.com).
--------------------------------------------------------------------------------
Update Information:
#### 0.12.1 - Dont send empty values for various context.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1256982 - php-Raven-0.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1256982
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-Raven' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 6 Update: php-guzzle-Guzzle-3.9.3-5.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7846
2015-09-15 00:22:41.625603
--------------------------------------------------------------------------------
Name : php-guzzle-Guzzle
Product : Fedora EPEL 6
Version : 3.9.3
Release : 5.el6
URL : https://github.com/guzzle/guzzle3
Summary : PHP HTTP client library and framework for building RESTful web service clients
Description :
Guzzle takes the pain out of sending HTTP requests and the redundancy out
of creating web service clients.
Guzzle is a framework that includes the tools needed to create a robust web
service client, including: Service descriptions for defining the inputs and
outputs of an API, resource iterators for traversing paginated resources,
batching for sending a large number of requests as efficiently as possible.
* All the power of cURL with a simple interface
* Persistent connections and parallel requests
* Streams request and response bodies
* Service descriptions for quickly building clients
* Powered by the Symfony2 EventDispatcher
* Use all of the code or only specific components
* Plugins for caching, logging, OAuth, mocks, and more
Optional dependencies:
* Doctrine Cache (1.3 <= php-doctrine-cache < 2.0)
* Monolog (1.0 <= php-Monolog < 2.0)
* Zend Framework 2 Cache (2.0 <= php-ZendFramework2-Cache < 3)
* Zend Framework 2 Log (2.0 <= php-ZendFramework2-Log < 3)
***** EOL NOTICE *****
This package is for Guzzle 3.x. Guzzle 5.x+, the new versions of Guzzle, has
been released and is available as the package "php-guzzlehttp-guzzle". The
documentation for Guzzle version 5+ can be found at http://guzzlephp.org.
Guzzle 3 is only maintained for bug and security fixes. Guzzle 3 will be EOL at
some point in late 2015.
**********************
--------------------------------------------------------------------------------
Update Information:
**RPM-only release** - Raise max version for Zend Framework - Added explicit
autoloader build dependency - Minor cleanups
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-guzzle-Guzzle' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 7 Update: epson-inkjet-printer-escpr-1.5.0-1.1lsb3.2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7616
2015-09-14 02:55:18.436858
--------------------------------------------------------------------------------
Name : epson-inkjet-printer-escpr
Product : Fedora EPEL 7
Version : 1.5.0
Release : 1.1lsb3.2.el7
URL : http://download.ebz.epson.net/dsc/search/01/search/?OSC=LX
Summary : Drivers for Epson inkjet printers
Description :
This package contains drivers for Epson Inkjet printers that use
the New Generation Epson Printer Control Language.
For a detailed list of supported printers, please refer to
http://avasys.jp/english/linux_e/
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.0. * Fixed a problem when using "Rear Feed Slot" as InputSlot. *
Added ppd files of following models - L-565 Series - WF-M5690 Series - WF-M5190
Series - PX-M350F Series - PX-S350 Series * Supported following options -
Brightness - Contrast - Saturation * Updated ESC/P-R library to version 5.4.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update epson-inkjet-printer-escpr' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora EPEL 7 Update: R-3.2.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7689
2015-09-14 02:55:18.436765
--------------------------------------------------------------------------------
Name : R
Product : Fedora EPEL 7
Version : 3.2.2
Release : 1.el7
URL : http://www.r-project.org
Summary : A language for data analysis and graphics
Description :
This is a metapackage that provides both core R userspace and
all R development components.
R is a language and environment for statistical computing and graphics.
R is similar to the award-winning S system, which was developed at
Bell Laboratories by John Chambers et al. It provides a wide
variety of statistical and graphical techniques (linear and
nonlinear modelling, statistical tests, time series analysis,
classification, clustering, ...).
R is designed as a true computer language with control-flow
constructions for iteration and alternation, and it allows users to
add additional functionality by defining new functions. For
computationally intensive tasks, C, C++ and Fortran code can be linked
and called at run time.
--------------------------------------------------------------------------------
Update Information:
Update R to 3.2.2. Rebuild rkward. Update rpy to 2.6.2.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months