[SECURITY] Fedora EPEL 5 Update: openssl101e-1.0.1e-5.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-11c5c57d59
2016-01-06 19:10:14.095960
--------------------------------------------------------------------------------
Name : openssl101e
Product : Fedora EPEL 5
Version : 1.0.1e
Release : 5.el5
URL : http://www.openssl.org/
Summary : A general purpose cryptography library with TLS implementation
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.
--------------------------------------------------------------------------------
Update Information:
A NULL pointer derefernce flaw was found in the way OpenSSL verified signatures
using the RSA PSS algorithm. A remote attacked could possibly use this flaw to
crash a TLS/SSL client using OpenSSL, or a TLS/SSL server using OpenSSL if it
enabled client authentication. (CVE-2015-3194) A memory leak vulnerability was
found in the way OpenSSL parsed PKCS#7 and CMS data. A remote attacker could use
this flaw to cause an application that parses PKCS#7 or CMS data from untrusted
sources to use an excessive amount of memory and possibly crash. (CVE-2015-3195)
A race condition flaw, leading to a double free, was found in the way OpenSSL
handled pre-shared key (PSK) identify hints. A remote attacker could use this
flaw to crash a multi-threaded SSL/TLS client using OpenSSL. (CVE-2015-3196)
---- The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared libraries
which provide various cryptographic algorithms and protocols.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288326 - CVE-2015-3196 OpenSSL: Race condition handling PSK identify hint
https://bugzilla.redhat.com/show_bug.cgi?id=1288326
[ 2 ] Bug #1288322 - CVE-2015-3195 OpenSSL: X509_ATTRIBUTE memory leak
https://bugzilla.redhat.com/show_bug.cgi?id=1288322
[ 3 ] Bug #1288320 - CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter
https://bugzilla.redhat.com/show_bug.cgi?id=1288320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openssl101e' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 7 Update: qpid-cpp-0.34-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-40795af09d
2016-01-06 00:31:34.020174
--------------------------------------------------------------------------------
Name : qpid-cpp
Product : Fedora EPEL 7
Version : 0.34
Release : 5.el7
URL : http://qpid.apache.org
Summary : Libraries for Qpid C++ client applications
Description :
Run-time libraries for AMQP client applications developed using Qpid
C++. Clients exchange messages with an AMQP message broker using
the AMQP protocol.
--------------------------------------------------------------------------------
Update Information:
Resolved bz 1286881.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1286881 - qpidd does not start
https://bugzilla.redhat.com/show_bug.cgi?id=1286881
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qpid-cpp' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 7 Update: darktable-1.6.9-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-106a235579
2016-01-06 00:31:34.020116
--------------------------------------------------------------------------------
Name : darktable
Product : Fedora EPEL 7
Version : 1.6.9
Release : 6.el7
URL : http://www.darktable.org/
Summary : Utility to organize and develop raw images
Description :
Darktable is a virtual light-table and darkroom for photographers:
it manages your digital negatives in a database and lets you view them
through a zoom-able light-table.
It also enables you to develop raw images and enhance them.
--------------------------------------------------------------------------------
Update Information:
rebuild for EPEL7 ---- darktable-1.6.9-5.fc23 - Removed i386 support
darktable-1.6.9-5.fc21 - Added Removed i386 support darktable-1.6.9-5.fc22 -
Added Removed i386 support darktable-1.6.9-5.el7 - Removed i386 support
---- darktable-1.6.9-2.el7 - Rework bundled opencl-headers handling in %prep
(RHBZ#1264933). ---- darktable-1.6.9-1.el7 - Update to 1.6.9 ----
darktable-1.6.9-3.fc23 - Removed x86 32 bit CPU support
darktable-1.6.9-3.fc21 - Removed x86 32 bit CPU support
darktable-1.6.9-3.fc22 - Removed x86 32 bit CPU support darktable-1.6.9-3.el7
- Removed x86 32 bit CPU support ---- darktable-1.6.9-1.el7 - Update to
1.6.9
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update darktable' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 7 Update: libtomcrypt-1.17-23.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-a12955d446
2016-01-06 00:31:34.020051
--------------------------------------------------------------------------------
Name : libtomcrypt
Product : Fedora EPEL 7
Version : 1.17
Release : 23.el7
URL : http://www.libtom.org/?page=features&newsitems=5&whatfile=crypt
Summary : A comprehensive, portable cryptographic toolkit
Description :
A comprehensive, modular and portable cryptographic toolkit that provides
developers with a vast array of well known published block ciphers, one-way hash
functions, chaining modes, pseudo-random number generators, public key
cryptography and a plethora of other routines.
Designed from the ground up to be very simple to use. It has a modular and
standard API that allows new ciphers, hashes and PRNGs to be added or removed
without change to the overall end application. It features easy to use functions
and a complete user manual which has many source snippet examples.
--------------------------------------------------------------------------------
Update Information:
* Workaround for crashing ghostscript on ppc64le - skipping docs
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libtomcrypt' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 7 Update: vertica-python-0.5.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-65c2392616
2016-01-06 00:31:34.019290
--------------------------------------------------------------------------------
Name : vertica-python
Product : Fedora EPEL 7
Version : 0.5.5
Release : 1.el7
URL : https://github.com/uber/vertica-python
Summary : A native Python adapter for the Vertica database
Description :
vertica-python is a native Python adapter for the Vertica
(http://www.vertica.com) database.
--------------------------------------------------------------------------------
Update Information:
update to version 0.5.5 ---- update to version 0.5.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285768 - vertica-python-0.5.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1285768
[ 2 ] Bug #1287914 - vertica-python-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1287914
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update vertica-python' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 7 Update: R-3.2.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-e125f3b2d4
2016-01-06 00:31:34.019195
--------------------------------------------------------------------------------
Name : R
Product : Fedora EPEL 7
Version : 3.2.3
Release : 1.el7
URL : http://www.r-project.org
Summary : A language for data analysis and graphics
Description :
This is a metapackage that provides both core R userspace and
all R development components.
R is a language and environment for statistical computing and graphics.
R is similar to the award-winning S system, which was developed at
Bell Laboratories by John Chambers et al. It provides a wide
variety of statistical and graphical techniques (linear and
nonlinear modelling, statistical tests, time series analysis,
classification, clustering, ...).
R is designed as a true computer language with control-flow
constructions for iteration and alternation, and it allows users to
add additional functionality by defining new functions. For
computationally intensive tasks, C, C++ and Fortran code can be linked
and called at run time.
--------------------------------------------------------------------------------
Update Information:
Update R to 3.2.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1290625 - R-3.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1290625
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 7 Update: koji-containerbuild-0.5.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-18264539b3
2016-01-06 00:31:34.018991
--------------------------------------------------------------------------------
Name : koji-containerbuild
Product : Fedora EPEL 7
Version : 0.5.5
Release : 1.el7
URL : https://github.com/release-engineering/koji-containerbuild
Summary : Koji support for building layered container images
Description :
Koji support for building layered container images
--------------------------------------------------------------------------------
Update Information:
New package - koji plugin to support building layered container images.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284400 - Review Request: koji-containerbuild - Koji support for building layered container images
https://bugzilla.redhat.com/show_bug.cgi?id=1284400
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update koji-containerbuild' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 5 Update: R-3.2.3-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-4d9d2c7114
2016-01-06 00:31:25.707852
--------------------------------------------------------------------------------
Name : R
Product : Fedora EPEL 5
Version : 3.2.3
Release : 1.el5
URL : http://www.r-project.org
Summary : A language for data analysis and graphics
Description :
This is a metapackage that provides both core R userspace and
all R development components.
R is a language and environment for statistical computing and graphics.
R is similar to the award-winning S system, which was developed at
Bell Laboratories by John Chambers et al. It provides a wide
variety of statistical and graphical techniques (linear and
nonlinear modelling, statistical tests, time series analysis,
classification, clustering, ...).
R is designed as a true computer language with control-flow
constructions for iteration and alternation, and it allows users to
add additional functionality by defining new functions. For
computationally intensive tasks, C, C++ and Fortran code can be linked
and called at run time.
--------------------------------------------------------------------------------
Update Information:
Update R to 3.2.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1290625 - R-3.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1290625
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
Fedora EPEL 5 Update: koji-containerbuild-0.5.5-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-62912880b1
2016-01-06 00:31:25.707728
--------------------------------------------------------------------------------
Name : koji-containerbuild
Product : Fedora EPEL 5
Version : 0.5.5
Release : 1.el5
URL : https://github.com/release-engineering/koji-containerbuild
Summary : Koji support for building layered container images
Description :
Koji support for building layered container images
--------------------------------------------------------------------------------
Update Information:
New package - koji plugin to support building layered container images.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284400 - Review Request: koji-containerbuild - Koji support for building layered container images
https://bugzilla.redhat.com/show_bug.cgi?id=1284400
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update koji-containerbuild' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months
[SECURITY] Fedora EPEL 6 Update: xsupplicant-2.2.0-13.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-c1e2a347ee
2016-01-05 18:26:52.914740
--------------------------------------------------------------------------------
Name : xsupplicant
Product : Fedora EPEL 6
Version : 2.2.0
Release : 13.el6
URL : http://www.open1x.org/
Summary : Open Source Implementation of IEEE 802.1x
Description :
This software allows a GNU/Linux or BSD workstation to authenticate with
a RADIUS server using 802.1x and various EAP protocols. The intended
use is for computers with wireless LAN connections to complete a strong
authentication before joining the network.
--------------------------------------------------------------------------------
Update Information:
Fix security issue with tmp file naming.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1276614 - xsupplicant: Usage of fixed temtporary file
https://bugzilla.redhat.com/show_bug.cgi?id=1276614
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xsupplicant' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 4 months