--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-2ce3494a09
2016-10-21 13:23:01.966957
--------------------------------------------------------------------------------
Name : sks
Product : Fedora EPEL 7
Version : 1.1.6
Release : 1.el7
URL : https://bitbucket.org/skskeyserver/sks-keyserver
Summary : Synchronizing Key Server
Description :
SKS is a OpenPGP keyserver whose goal is to provide easy to
deploy, decentralized, and highly reliable synchronization.
--------------------------------------------------------------------------------
Update Information:
Update to latest version of sks
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1304429 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1304429
[ 2 ] Bug #1365236 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1365236
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update sks' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-73eab6c7c7
2016-10-21 13:23:01.966882
--------------------------------------------------------------------------------
Name : fail2ban
Product : Fedora EPEL 7
Version : 0.9.5
Release : 3.el7
URL : http://fail2ban.sourceforge.net/
Summary : Daemon to ban hosts that cause multiple authentication errors
Description :
Fail2Ban scans log files and bans IP addresses that makes too many password
failures. It updates firewall rules to reject the IP address. These rules can
be defined by the user. Fail2Ban can read multiple log files such as sshd or
Apache web server ones.
Fail2Ban is able to reduce the rate of incorrect authentications attempts
however it cannot eliminate the risk that weak authentication presents.
Configure services to use only two factor or public/private authentication
mechanisms if you really want to protect services.
This is a meta-package that will install the default configuration. Other
sub-packages are available to install support for other actions and
configurations.
--------------------------------------------------------------------------------
Update Information:
- Update to 0.9.5 - see https://github.com/fail2ban/fail2ban/releases/tag/0.9.5
- Give up being PartOf iptables to allow firewalld restarts to work (bug
#1379141) - Add journalmatch entries for sendmail (bug #1329919) ---- Update
to 0.9.4: Fixes: roundcube-auth jail typo for logpath Fix
dnsToIp resolver for fqdn with large list of IPs (gh-1164) filter.d
/apache-badbots.conf Updated useragent string regex adding escape
for + filter.d/mysqld-auth.conf Updated "Access denied ..."
regex for MySQL 5.6 and later (gh-1211, gh-1332) filter.d/sshd.conf
Updated "Auth fail" regex for OpenSSH 5.9 and later Treat failed and
killed execution of commands identically (only different log messages), which
addresses different behavior on different exit codes of dash and bash (gh-1155)
Fix jail.conf.5 man's section (gh-1226) Fixed default banaction for
allports jails like pam-generic, recidive, etc with new default variable
banaction_allports (gh-1216) Fixed fail2ban-regex stops working on
invalid (wrong encoded) character for python version < 3.x (gh-1248) Use
postfix_log logpath for postfix-rbl jail filters.d/postfix.conf - add
'Sender address rejected: Domain not found' failregex use fail2ban_agent
as user-agent in actions badips, blocklist_de, etc (gh-1271) Fix
ignoring the sender option by action_mw, action_mwl and action_c_mwl
Changed filter.d/asterisk regex for "Call from ..." (few vulnerable now)
Removed compression and rotation count from logrotate (inherit them from the
global logrotate config) New Features: New interpolation feature
for definition config readers - <known/parameter> (means last known init
definition of filters or actions with name parameter). This interpolation makes
possible to extend a parameters of stock filter or action directly in jail
inside jail.local file, without creating a separately filter.d/*.local file. As
extension to interpolation %(known/parameter)s, that does not works for filter
and action init parameters New actions: nftables-multiport
and nftables-allports - filtering using nftables framework. Note: it requires a
pre-existing chain for the filtering rule. New filters:
openhab - domotic software authentication failure with the rest api and web
interface (gh-1223) nginx-limit-req - ban hosts, that were failed
through nginx by limit request processing rate (ngx_http_limit_req_module)
murmur - ban hosts that repeatedly attempt to connect to murmur/mumble-server
with an invalid server password or certificate. haproxy-http-auth -
filter to match failed HTTP Authentications against a HAProxy server New
jails: murmur - bans TCP and UDP from the bad host on the default
murmur port. sshd filter got new failregex to match "maximum
authentication attempts exceeded" (introduced in openssh 6.8) Added
filter for Mac OS screen sharing (VNC) daemon Enhancements: Do not
rotate empty log files Added new date pattern with year after day (e.g.
Sun Jan 23 2005 21:59:59) http://bugs.debian.org/798923 Added openSUSE
path configuration (Thanks Johannes Weberhofer) Allow to split ignoreip
entries by ',' as well as by ' ' (gh-1197) Added a timeout (3 sec) to
urlopen within badips.py action (Thanks M. Maraun) Added check against
atacker's Googlebot PTR fake records (Thanks Pablo Rodriguez Fernandez)
Enhance filter against atacker's Googlebot PTR fake records (gh-1226)
Nginx log paths extended (prefixed with "*" wildcard) (gh-1237) Added
filter for openhab domotic software authentication failure with the rest api and
web interface (gh-1223) Add *_backend options for services to allow
distros to set the default backend per service, set default to systemd for
Fedora as appropriate Performance improvements while monitoring large
number of files (gh-1265). Use associative array (dict) for monitored log files
to speed up lookup operations. Thanks @kshetragia Specified that
fail2ban is PartOf iptables.service firewalld.service in .service file -- would
reload fail2ban if those services are restarted Provides new default
fail2ban_version and interpolation variable fail2ban_agent in jail.conf
Enhance filter 'postfix' to ban incoming SMTP client with no fqdn hostname, and
to support multiple instances of postfix having varying suffix (gh-1331) (Thanks
Tom Hendrikx) files/gentoo-initd to use start-stop-daemon to robustify
restarting the service
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1321460 - asterisk regex needs to be more liberal
https://bugzilla.redhat.com/show_bug.cgi?id=1321460
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fail2ban' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-299648f46c
2016-10-21 13:23:01.966804
--------------------------------------------------------------------------------
Name : python-bitarray
Product : Fedora EPEL 7
Version : 0.8.1
Release : 4.el7
URL : http://pypi.python.org/pypi/bitarray/
Summary : Efficient Array of Booleans --C Extensions
Description :
Bitarrays are sequence types and behave very much like usual lists.
Eight bits are represented by one byte in contiguous block of memory.
The user can select between two representations; little-endian and big-endian.
Most of the functionality is implemented in C.Methods for accessing the machine
representation are provided. This can be useful when bit level access to binary
files is required, such as portable bitmap image files (.pbm). Also, when
dealing with compressed data which uses variable bit length encoding
you may find this module useful.
--------------------------------------------------------------------------------
Update Information:
Add support to epel 7 and 6, disable python3 in el6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-bitarray' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-8e0d13ce58
2016-10-21 13:23:01.966736
--------------------------------------------------------------------------------
Name : mingw-cmocka
Product : Fedora EPEL 7
Version : 1.1.0
Release : 2.el7
URL : http://www.cmocka.org/
Summary : MinGW Lightweight library to simplify and generalize unit tests for C
Description :
Lightweight library to simplify and generalize unit tests for C.
This library is cross-compiled for MinGW.
--------------------------------------------------------------------------------
Update Information:
Corrected package names
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1373782 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1373782
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-cmocka' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-dee865ea7e
2016-10-21 13:23:01.966658
--------------------------------------------------------------------------------
Name : php-udan11-sql-parser
Product : Fedora EPEL 7
Version : 3.4.10
Release : 1.el7
URL : https://github.com/phpmyadmin/sql-parser
Summary : A validating SQL lexer and parser with a focus on MySQL dialect
Description :
A validating SQL lexer and parser with a focus on MySQL dialect.
This library was originally developed for phpMyAdmin during
the Google Summer of Code 2015.
Autoloader: /usr/share/php/SqlParser/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.10** - 2016-10-03 * Fixed API regression on DELETE statement ---
**Version 3.4.9** - 2016-10-03 * Added support for CASE expressions * Support
for parsing and building DELETE statement * Support for parsing subqueries in
FROM clause --- **Version 3.4.8** - 2016-09-22 * No change release to sync
GitHub releases with Packagist ---- **Version 3.4.7** - 2016-09-20 * Fix
parsing of DEFINER without backquotes * Fixed escaping HTML entities in HTML
formatter * Fixed escaping of control chars in CLI formatter ---- **Version
3.4.6** - 2016-09-13 * Fix parsing of REPLACE INTO ... * Fix parsing of INSERT
... ON DUPLICATE KEY UPDATE ... * Extended testsuite * Re-enabled PHP 5.3
support --- **Version 3.4.5** - 2016-09-13 * Fix parsing of INSERT...SELECT
and INSERT...SET syntax * Fix parsing of CREATE TABLE ... PARTITION * Fix
parsing of SET CHARACTER SET, CHARSET, NAMES * Add Support for 'CREATE TABLE
`table_copy` LIKE `table`
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-udan11-sql-parser' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-73b3103b74
2016-10-21 13:23:01.966583
--------------------------------------------------------------------------------
Name : php-phpseclib
Product : Fedora EPEL 7
Version : 2.0.4
Release : 1.el7
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.4** - 2016-08-18 * fix E_DEPRECATED errors on PHP 7.1 (#1041)
* SFTP: speed up downloads (#945) * SFTP: fix infinite loop when uploading
empty file (#995) * ASN1: fix possible infinite loop in decode (#1027) ----
**Version 2.0.3** - 2016-08-18 - BigInteger/RSA: don't compare openssl versions
> 1.0 (#946) - RSA: don't attempt to use the CRT when zero value components
exist (#980) - RSA: zero salt length RSA signatures don't work (#1002) - ASN1:
fix PHP Warning on PHP 7.1 (#1013) - X509: set parameter fields to null for
CSR's / RSA (#914) - CRL optimizations (#1000) - SSH2: fix "Expected
SSH_FXP_STATUS or ..." error (#999) - SSH2: use stream_get_* instead of fread()
/ fgets() (#967) - SFTP: make symlinks support relative target's (#1004) - SFTP:
fix sending stream resulting in zero byte file (#995)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-phpseclib' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-653039c60a
2016-10-21 13:23:01.966515
--------------------------------------------------------------------------------
Name : fluidsynth
Product : Fedora EPEL 7
Version : 1.1.6
Release : 7.el7
URL : http://www.fluidsynth.org/
Summary : Real-time software synthesizer
Description :
FluidSynth is a real-time software synthesizer based on the SoundFont 2
specifications. It is a "software synthesizer". FluidSynth can read MIDI events
from the MIDI input device and render them to the audio device. It features
real-time effect modulation using SoundFont 2.01 modulators, and a built-in
command line shell. It can also play MIDI files (note: FluidSynth was previously
called IIWU Synth).
--------------------------------------------------------------------------------
Update Information:
Initial SD2_mixer build for EPEL 7.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fluidsynth' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-653039c60a
2016-10-21 13:23:01.966515
--------------------------------------------------------------------------------
Name : lash
Product : Fedora EPEL 7
Version : 0.5.4
Release : 26.el7
URL : http://www.nongnu.org/lash/
Summary : LASH Audio Session Handler
Description :
LASH is a session management system for JACK and ALSA audio applications on
GNU/Linux. It allows you to save and restore audio sessions consisting of
multiple interconneced applications, restoring program state (i.e. loaded
patches) and the connections between them.
--------------------------------------------------------------------------------
Update Information:
Initial SD2_mixer build for EPEL 7.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lash' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-653039c60a
2016-10-21 13:23:01.966515
--------------------------------------------------------------------------------
Name : SDL2_mixer
Product : Fedora EPEL 7
Version : 2.0.1
Release : 2.el7
URL : http://www.libsdl.org/projects/SDL_mixer/
Summary : Simple DirectMedia Layer - Sample Mixer Library
Description :
SDL_mixer is a sample multi-channel audio mixer library.
It supports any number of simultaneously playing channels of 16 bit stereo
audio, plus a single channel of music, mixed by the popular FLAC,
MikMod MOD, Timidity MIDI, Ogg Vorbis, and SMPEG MP3 libraries.
--------------------------------------------------------------------------------
Update Information:
Initial SD2_mixer build for EPEL 7.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update SDL2_mixer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------