[SECURITY] Fedora EPEL 7 Update: websvn-2.3.3-12.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-0fc6ac67c6
2016-03-20 22:01:41.490840
--------------------------------------------------------------------------------
Name : websvn
Product : Fedora EPEL 7
Version : 2.3.3
Release : 12.el7
URL : http://www.websvn.info
Summary : Online subversion repository browser
Description :
WebSVN offers a view onto your subversion repositories that's been designed to
reflect the Subversion methodology. You can view the log of any file or
directory and see a list of all the files changed, added or deleted in any
given revision. You can also view the differences between two versions of a
file so as to see exactly what was changed in a particular revision.
--------------------------------------------------------------------------------
Update Information:
- Fix CVE-2016-2511 ---- Install missing javascript directory.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310760 - CVE-2016-2511 websvn: reflected cross-site scripting [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1310760
[ 2 ] Bug #1218590 - javascript dir is missing from RPM
https://bugzilla.redhat.com/show_bug.cgi?id=1218590
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update websvn' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 7 Update: python-acme-0.4.2-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-9760b39c43
2016-03-20 22:01:41.490781
--------------------------------------------------------------------------------
Name : python-acme
Product : Fedora EPEL 7
Version : 0.4.2
Release : 3.el7
URL : https://pypi.python.org/pypi/acme
Summary : Python library for the ACME protocol
Description :
Python libraries implementing the Automatic Certificate Management Environment
(ACME) protocol. It is used by the Let's Encrypt project.
--------------------------------------------------------------------------------
Update Information:
Updated to 0.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1314756 - letsencrypt-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1314756
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-acme' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 7 Update: letsencrypt-0.4.2-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-9760b39c43
2016-03-20 22:01:41.490781
--------------------------------------------------------------------------------
Name : letsencrypt
Product : Fedora EPEL 7
Version : 0.4.2
Release : 3.el7
URL : https://letsencrypt.org/
Summary : A free, automated certificate authority client
Description :
Let's Encrypt is a free, automated certificate authority that aims
to lower the barriers to entry for encrypting all HTTP traffic on the internet.
--------------------------------------------------------------------------------
Update Information:
Updated to 0.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1314756 - letsencrypt-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1314756
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update letsencrypt' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 7 Update: reposurgeon-3.35-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-31bf79ee89
2016-03-20 22:01:41.490611
--------------------------------------------------------------------------------
Name : reposurgeon
Product : Fedora EPEL 7
Version : 3.35
Release : 1.el7
URL : http://www.catb.org/~esr/reposurgeon/
Summary : SCM Repository Manipulation Tool
Description :
Reposurgeon enables risky operations that version-control systems don't want
to let you do, such as editing past comments and metadata and removing
commits. It works with any version control system that can export and import
git fast-import streams, including git, hg, fossil, bzr, CVS and RCS. It can
also read Subversion dump files directly and can thus be used to script
production of very high-quality conversions from Subversion to any supported
DVCS.
--------------------------------------------------------------------------------
Update Information:
3.35: 2016-02-25 - Reposurgeon now runs under either Python 2 or 3. - CVS repos
are recognized by CVSROOT, not a (possibly missing) Attic. 3.34: 2016-02-16 -
Make repocutter DTRT when copyfrom roots are removed by expunge. 3.33:
2016-02-01 - More work on header-order independence for both reposurgeon and
repocutter. 3.32: 2016-01-31 - Handle Subversion dumps as produced by
svndumpfilter with Node-kind first. 3.31: 2016-01-23 - repocutter, a tool for
preprocessing Subversion repos, is now included. - In repotool, a new 'branches'
command lists branches (not tags). - Fix repotool, 'tags' for CVS repo so it
lists only tags, not branches. - In repotool, a new 'compare-branches' command
compares all branches. - In repotool, a new 'compare-all' compares tip, tags,
and branches. - repotool no longer needs to run within a module directory for
CVS. - Move from BSD-3-clause to BSD-2-clause, apply SPDX tag. 3.30: 2016-01-10
- Added "when" command for timestamp conversions. - Fix GitHub issue #42:
Repository.split_commit() produces invalid marks. - Commands now tab-complete
name arguments wherever that makes sense. - Handle format 7 Subversion dumps
with sporadic empty nodes. - Selection sets now remain ordered rather than being
sorted. - There is a new @srt() function to explicitly sort selection sets. -
The reparent command can now specify multiple ancestors. - In SVN repositories,
a tag's subdirectory is now part of its name.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1297398 - reposurgeon-3.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297398
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update reposurgeon' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
[SECURITY] Fedora EPEL 5 Update: websvn-2.3.3-12.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-9c7ed6c982
2016-03-20 15:59:45.236434
--------------------------------------------------------------------------------
Name : websvn
Product : Fedora EPEL 5
Version : 2.3.3
Release : 12.el5
URL : http://www.websvn.info
Summary : Online subversion repository browser
Description :
WebSVN offers a view onto your subversion repositories that's been designed to
reflect the Subversion methodology. You can view the log of any file or
directory and see a list of all the files changed, added or deleted in any
given revision. You can also view the differences between two versions of a
file so as to see exactly what was changed in a particular revision.
--------------------------------------------------------------------------------
Update Information:
- Fix CVE-2016-2511
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310760 - CVE-2016-2511 websvn: reflected cross-site scripting [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1310760
[ 2 ] Bug #1310759 - CVE-2016-2511 websvn: reflected cross-site scripting [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1310759
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update websvn' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
[SECURITY] Fedora EPEL 5 Update: phpMyAdmin4-4.0.10.15-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-de8749748f
2016-03-20 15:59:45.236173
--------------------------------------------------------------------------------
Name : phpMyAdmin4
Product : Fedora EPEL 5
Version : 4.0.10.15
Release : 1.el5
URL : https://www.phpmyadmin.net/
Summary : Handle the administration of MySQL over the World Wide Web
Description :
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the World Wide Web. Most frequently used operations are supported
by the user interface (managing databases, tables, fields, relations, indexes,
users, permissions), while you still have the ability to directly execute any
SQL statement.
Features include an intuitive web interface, support for most MySQL features
(browse and drop databases, tables, views, fields and indexes, create, copy,
drop, rename and alter databases, tables, fields and indexes, maintenance
server, databases and tables, with proposals on server configuration, execute,
edit and bookmark any SQL-statement, even batch-queries, manage MySQL users
and privileges, manage stored procedures and triggers), import data from CSV
and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text
and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers,
creating PDF graphics of your database layout, creating complex queries using
Query-by-example (QBE), searching globally in a database or a subset of it,
transforming stored data into any format using a set of predefined functions,
like displaying BLOB-data as image or download-link and much more...
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.0.10.15 (2016-02-29) ================================= This
version fixes multiple XSS vulnerabilities, see PMASA-2016-11 for more details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1313696 - CVE-2016-2562 phpMyAdmin: man-in-the-middle attack on API call to GitHub (PMASA-2016-13)
https://bugzilla.redhat.com/show_bug.cgi?id=1313696
[ 2 ] Bug #1313695 - CVE-2016-2559 phpMyAdmin: XSS vulnerability in SQL parser (PMASA-2016-10)
https://bugzilla.redhat.com/show_bug.cgi?id=1313695
[ 3 ] Bug #1313224 - CVE-2016-2561 phpMyAdmin: multiple XSS vulnerabilities (PMASA-2016-12)
https://bugzilla.redhat.com/show_bug.cgi?id=1313224
[ 4 ] Bug #1313221 - CVE-2016-2560 phpMyAdmin: multiple XSS vulnerabilities (PMASA-2016-11)
https://bugzilla.redhat.com/show_bug.cgi?id=1313221
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update phpMyAdmin4' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 6 Update: 2ping-3.2.0-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-deac2bbd15
2016-03-19 21:30:39.381699
--------------------------------------------------------------------------------
Name : 2ping
Product : Fedora EPEL 6
Version : 3.2.0
Release : 2.el6
URL : http://www.finnie.org/software/2ping
Summary : Bi-directional ping utility
Description :
2ping is a bi-directional ping utility. It uses 3-way pings (akin to TCP SYN,
SYN/ACK, ACK) and after-the-fact state comparison between a 2ping listener and
a 2ping client to determine which direction packet loss occurs.
--------------------------------------------------------------------------------
Update Information:
big step forward :)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1275261 - 2ping-3.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1275261
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update 2ping' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 6 Update: zmap-2.1.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-755ef7c3bf
2016-03-19 21:30:39.381609
--------------------------------------------------------------------------------
Name : zmap
Product : Fedora EPEL 6
Version : 2.1.1
Release : 1.el6
URL : https://zmap.io
Summary : Network scanner for Internet-wide network studies
Description :
ZMap is an open-source network scanner that enables researchers to easily
perform Internet-wide network studies. With a single machine and a well
provisioned network uplink, ZMap is capable of performing a complete scan of
the IPv4 address space in under 45 minutes, approaching the theoretical limit
of gigabit Ethernet.
ZMap can be used to study protocol adoption over time, monitor service
availability, and help us better understand large systems distributed across
the Internet.
========== WARNING ==========
While ZMap is a powerful tool for researchers, please keep in mind that by
running ZMap, you are potentially scanning the ENTIRE IPv4 address space and
some users may not appreciate your scanning. We encourage ZMap users to
respect requests to stop scanning and to exclude these networks from ongoing
scanning.
--------------------------------------------------------------------------------
Update Information:
Bug fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285133 - zmap has broken deps
https://bugzilla.redhat.com/show_bug.cgi?id=1285133
[ 2 ] Bug #1262512 - zmap-v2.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1262512
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zmap' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 6 Update: mlmmj-1.2.19.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-762682438d
2016-03-19 21:30:39.381522
--------------------------------------------------------------------------------
Name : mlmmj
Product : Fedora EPEL 6
Version : 1.2.19.0
Release : 1.el6
URL : http://mlmmj.org/
Summary : A simple and slim mailing list manager inspired by ezmlm
Description :
Mlmmj(Mailing List Management Made Joyful) is a simple and slim mailing list
manager (MLM) inspired by ezmlm. It works with many different Mail Transport
Agents (MTAs) and is simple for a system adminstrator to install, configure
and integrate with other software. As it uses very few resources, and requires
no daemons, it is ideal for installation on systems where resources are
limited, such as Virtual Private Servers (VPSes).
Although it doesn't aim to include every feature possible, but focuses on
staying mean and lean, and doing what it does do well, it does have a great
set of features, including:
- Archive
- Custom headers / footer
- Fully automated bounce handling (similar to ezmlm)
- Complete requeueing functionality
- Moderation functionality
- Subject prefix
- Subscribers only posting
- Regular expression access control
- Functionality to retrieve old posts
- Web interface
- Digests
- No-mail subscription
- VERP support
- Delivery Status Notification (RFC1891) support
- Rich, customisable texts for automated operations
--------------------------------------------------------------------------------
Update Information:
- Add README.footers and footer-related resources - Support ESMTP so OpenSMTPD
uses 8 bits (Paul Fariello) - Use iconv to convert unknown character sets -
Handle unfolded header lines better - Add a tunable for moderation request
lifetime (Timo Boettcher) - Ensure mlmmj-send always honours tunables (e.g.
relayhost) - Fix reason in denial messages for mails without the list in To: or
CC:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214728 - mlmmj-1.2.19.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1214728
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mlmmj' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months
Fedora EPEL 6 Update: mimetic-0.9.8-6.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-124c58eaf5
2016-03-19 21:30:39.381292
--------------------------------------------------------------------------------
Name : mimetic
Product : Fedora EPEL 6
Version : 0.9.8
Release : 6.el6
URL : http://www.codesink.org/mimetic_mime_library.html
Summary : A full featured C++ MIME library
Description :
mimetic is an Email library (MIME) written in C++ designed to be easy to use
and integrate but yet fast and efficient.
It has been built around the standard lib. This means that you'll not find yet
another string class or list implementation and that you'll feel comfortable
in using this library from the very first time.
Most classes functionalities and behavior will be clear if you ever studied
MIME and its components; if you don't know anything about Internet messages
you'll probably want to read some RFCs to understand the topic and, therefore,
easily use the library whose names, whenever possible, overlap terms adopted
in the standard RFC documents. At the very least: RFC 822, RFC 2045 and RFC
2046.
--------------------------------------------------------------------------------
Update Information:
- fixed char signedness issue for some platforms - spec modernized and cleaned -
epel 6,7 branches provided --- 17.06.2014, 0.9.8 - clang/gcc compilation
fixes in tokenizer.h
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307771 - mimetic: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307771
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mimetic' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 2 months