--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-63189174a4
2016-10-19 09:27:26.065610
--------------------------------------------------------------------------------
Name : nsd
Product : Fedora EPEL 6
Version : 4.1.13
Release : 1.el6
URL : http://www.nlnetlabs.nl/nsd/
Summary : Fast and lean authoritative DNS Name Server
Description :
NSD is a complete implementation of an authoritative DNS name server.
For further information about what NSD is and what NSD is not please
consult the REQUIREMENTS document which is a part of this distribution.
--------------------------------------------------------------------------------
Update Information:
Updated to 4.1.13 (CVE-2016-6173, OPENPGPKEY support)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1353578 - CVE-2016-6173 nsd: Improper restriction of zone size limit [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1353578
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nsd' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-fdf91ff7a8
2016-10-19 09:27:26.065417
--------------------------------------------------------------------------------
Name : tor
Product : Fedora EPEL 6
Version : 0.2.8.8
Release : 1.el6
URL : https://www.torproject.org
Summary : Anonymizing overlay network for TCP
Description :
The Tor network is a group of volunteer-operated servers that allows people to
improve their privacy and security on the Internet. Tor's users employ this
network by connecting through a series of virtual tunnels rather than making a
direct connection, thus allowing both organizations and individuals to share
information over public networks without compromising their privacy. Along the
same line, Tor is an effective censorship circumvention tool, allowing its
users to reach otherwise blocked destinations or content. Tor can also be used
as a building block for software developers to create new communication tools
with built-in privacy features.
This package contains the Tor software that can act as either a server on the
Tor network, or as a client to connect to the Tor network.
--------------------------------------------------------------------------------
Update Information:
update to upstream release 0.2.8.8
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tor' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7703
2016-10-18 23:19:35.340454
--------------------------------------------------------------------------------
Name : python-shapely
Product : Fedora EPEL 6
Version : 1.5.2
Release : 2.el6
URL : http://toblerity.org/shapely
Summary : Manipulation and analysis of geometric objects in the Cartesian plane
Description :
Shapely is a package for creation, manipulation, and analysis
of planar geometry objects ��� designed especially for developers
of cutting edge geographic information systems. In a nutshell:
Shapely lets you do PostGIS-ish stuff outside the context of a
database using idiomatic Python.
You can use this package with python-matplotlib and numpy.
See README.rst for more information!
--------------------------------------------------------------------------------
Update Information:
Build python-shapely for EL6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #656938 - Review Request: python-shapely - Geometric objects, predicates, and operations
https://bugzilla.redhat.com/show_bug.cgi?id=656938
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-shapely' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-edda50420f
2016-10-18 23:19:35.340382
--------------------------------------------------------------------------------
Name : mongodb
Product : Fedora EPEL 6
Version : 2.4.14
Release : 4.el6
URL : http://www.mongodb.org
Summary : High-performance, schema-free document-oriented database
Description :
Mongo (from "humongous") is a high-performance, open source, schema-free
document-oriented database. MongoDB is written in C++ and offers the following
features:
* Collection oriented storage: easy storage of object/JSON-style data
* Dynamic queries
* Full index support, including on inner objects and embedded arrays
* Query profiling
* Replication and fail-over support
* Efficient storage of binary data including large objects (e.g. photos
and videos)
* Auto-sharding for cloud-level scalability (currently in early alpha)
* Commercial Support Available
A key goal of MongoDB is to bridge the gap between key/value stores (which are
fast and highly scalable) and traditional RDBMS systems (which are deep in
functionality).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-6494
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1362553 - CVE-2016-6494 mongodb: world-readable .dbshell history file
https://bugzilla.redhat.com/show_bug.cgi?id=1362553
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mongodb' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e8602185c5
2016-10-18 23:19:35.340307
--------------------------------------------------------------------------------
Name : links
Product : Fedora EPEL 6
Version : 2.13
Release : 1.el6
URL : http://links.twibright.com/
Summary : Web browser running in both graphics and text mode
Description :
Links is a web browser capable of running in either graphics or text mode.
It provides a pull-down menu system, renders complex pages, has partial HTML
4.0 support (including tables, frames and support for multiple character sets
and UTF-8), supports color and monochrome terminals and allows horizontal
scrolling.
--------------------------------------------------------------------------------
Update Information:
Update to links 2.13 Fixes security issues (see referenced bugs).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1364920 - links: Unix domain sockets shared between anonymous and non-anonymous instances [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1364920
[ 2 ] Bug #881410 - elinks/links: does not properly verify SSL certificates [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=881410
[ 3 ] Bug #812080 - links: possible flaws within the graphics renderer and XBM decoder [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=812080
[ 4 ] Bug #1352033 - links-2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1352033
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update links' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-70edfd442b
2016-10-18 23:19:35.340246
--------------------------------------------------------------------------------
Name : speexdsp
Product : Fedora EPEL 6
Version : 1.2
Release : 0.9.rc3.el6
URL : http://www.speex.org/
Summary : A voice compression format (DSP)
Description :
Speex is a patent-free compression format designed especially for
speech. It is specialized for voice communications at low bit-rates in
the 2-45 kbps range. Possible applications include Voice over IP
(VoIP), Internet audio streaming, audio books, and archiving of speech
data (e.g. voice mail).
This is the DSP package, see the speex package for the codec part.
--------------------------------------------------------------------------------
Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update speexdsp' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e62a847e5c
2016-10-18 23:19:35.340171
--------------------------------------------------------------------------------
Name : lighttpd
Product : Fedora EPEL 6
Version : 1.4.41
Release : 2.el6
URL : http://www.lighttpd.net/
Summary : Lightning fast webserver with light system requirements
Description :
Secure, fast, compliant and very flexible web-server which has been optimized
for high-performance environments. It has a very low memory footprint compared
to other webservers and takes care of cpu-load. Its advanced feature-set
(FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more) make
it the perfect webserver-software for every server that is suffering load
problems.
--------------------------------------------------------------------------------
Update Information:
Directory and permissions fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1201056 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1201056
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lighttpd' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-8501a47a5a
2016-10-18 23:19:35.340094
--------------------------------------------------------------------------------
Name : checksec
Product : Fedora EPEL 6
Version : 1.7.4
Release : 2.el6
URL : http://www.trapkit.de/tools/checksec.html
Summary : Tool to check system for binary-hardening
Description :
Modern Linux distributions offer some mitigation techniques to make it harder
to exploit software vulnerabilities reliably. Mitigations such as RELRO,
NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and
Position Independent Executables (PIE) have made reliably exploiting any
vulnerabilities that do exist far more challenging. The checksec script is
designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/)
security features are being used.
As of version 1.3 the script also lists the status of various Linux kernel
protection mechanisms.
checksec can check binary-files and running processes for hardening features.
--------------------------------------------------------------------------------
Update Information:
###Update to 1.7.4 - Update to forked version - Add missing runtime-dependencies
- Add manpage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1240391 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1240391
[ 2 ] Bug #1380950 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380950
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update checksec' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e3428efd3c
2016-10-18 23:19:35.339994
--------------------------------------------------------------------------------
Name : php-symfony
Product : Fedora EPEL 6
Version : 2.3.42
Release : 1.el6
URL : http://symfony.com
Summary : PHP framework for web projects
Description :
PHP framework for web projects
--------------------------------------------------------------------------------
Update Information:
See [2.3 change
log](https://github.com/symfony/symfony/blob/v2.3.42/CHANGELOG-2.3.md).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340834 - CVE-2016-4423 php-symfony: Large username storage in session [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1340834
[ 2 ] Bug #1340831 - CVE-2016-1902 php-symfony: SecureRandom's fallback not secure when OpenSSL fails [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1340831
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-1e67a046f0
2016-10-18 23:19:35.339906
--------------------------------------------------------------------------------
Name : php-extras
Product : Fedora EPEL 6
Version : 5.3.3
Release : 5.el6
URL : http://www.php.net/
Summary : Additional PHP modules from the standard PHP distribution
Description :
PHP is an HTML-embedded scripting language.
This package contains various additional modules for PHP, which
have not been included in the basic PHP package for Fedora Core.
--------------------------------------------------------------------------------
Update Information:
add missing virtual provides for pdo extensions: * php-pdo_interbase * php-
pdo_dblib
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-extras' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------