--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-8c727601c5
2016-03-09 11:33:52.320150
--------------------------------------------------------------------------------
Name : libebml
Product : Fedora EPEL 7
Version : 1.3.3
Release : 3.el7
URL : https://www.matroska.org/
Summary : Extensible Binary Meta Language library
Description :
Extensible Binary Meta Language access library A library for reading
and writing files with the Extensible Binary Meta Language, a binary
pendant to XML.
--------------------------------------------------------------------------------
Update Information:
Update to latest stable upstream release, fixing security issues (CVE-2015-8789,
CVE-2015-8790 and CVE-2015-8791). No incompatible ABI or API changes.
Highlights from upstream changelog: * EbmlMaster::Read(): When the parser
encountered a deeply nested element with an infinite size then a following
element of an upper level was not propagated correctly. Instead the element with
the infinite size was added into the EBML element tree a second time resulting
in memory access after freeing it and multiple attempts to free the same memory
address during destruction. Fixes the issue reported as Cisco TALOS-CAN-0037. *
EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory access. When reading
a EBML variable length integer value a read access beyond the end of the
available buffer was possible if fewer bytes were available than indicated by
the first byte resulting in a heap information leak. *
EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory access. When
reading from a UTF-8 string in which the length indicated by a UTF-8 character's
first byte exceeds the string's actual number of bytes the parser would access
beyond the end of the string resulting in a heap information leak. Fixes the
issue reported as Cisco TALOS-CAN-0036. * EbmlElement::FindNextElement(): Handle
EOF when reading the element size properly. * EbmlString::ValidateSize(): only
allow the same maximum size as EbmlBinary. * EbmlElement::Render(): doesn't
catch exceptions anymore. Instead exceptions generated from the IOCallback class
(e.g. if a write failed) are propagated to the caller. * build system: switched
the build system from hand-crafted Makefiles to an autoconf/automake-based
system. A pkg-config file will be installed as well; its name is ��libebml��.
Patch by Jan Engelhardt <jengelh(a)inai.de>. * EbmlMaster::Read(): when reading
with SCOPE_ALL_DATA only those elements that could successfully be read will be
kept (e.g. defective block groups will be dropped). * EbmlMemoryStream: add a
new class for safe memory access that throws exception on failures. *
EbmlMaster: Fixed read() trying to calculate the end position of elements with
an unknown size. This avoids endless loops and assertions in certain cases. See
https://trac.bunkus.org/ticket/1089
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1303856 - CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1303856
[ 2 ] Bug #1276337 - CVE-2015-8789 libebml: Usa-after-free vulnerability in EblMaster::Read() [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1276337
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libebml' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-d636fa827a
2016-03-09 11:33:52.320093
--------------------------------------------------------------------------------
Name : rabbitmq-server
Product : Fedora EPEL 7
Version : 3.3.5
Release : 17.el7
URL : http://www.rabbitmq.com/
Summary : The RabbitMQ server
Description :
RabbitMQ is an implementation of AMQP, the emerging standard for high
performance enterprise messaging. The RabbitMQ server is a robust and
scalable implementation of an AMQP broker.
--------------------------------------------------------------------------------
Update Information:
* Log something when the app stops, so that we can tell when stop_app etc has
succeeded.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rabbitmq-server' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-3342d978fe
2016-03-09 11:33:52.319938
--------------------------------------------------------------------------------
Name : php-horde-kronolith
Product : Fedora EPEL 7
Version : 4.2.15
Release : 1.el7
URL : http://www.horde.org/apps/kronolith
Summary : A web based calendar
Description :
Kronolith is the Horde calendar application. It provides web-based
calendars backed by a SQL database or a Kolab server. Supported features
include Ajax and mobile interfaces, shared calendars, remote calendars,
invitation management (iCalendar/iTip), free/busy management, resource
management, alarms, recurring events, and a sophisticated day/week view
which handles arbitrary numbers of overlapping events.
--------------------------------------------------------------------------------
Update Information:
**kronolith 4.2.15** * [mjr] Fix typo preventing deletion of events from
dynamic view (Bug #14256). * [jan] Handle gracefully if the base event of an
imported recurrence exception is no longer recurring (Bug #14249). ----
**Kronolith 4.2.14** * [mjr] Fix issue deleting and closing event dialog during
event deletion. * [mjr] Honor the SCHEDULE-AGENT attribute during CalDAV import.
---- **Kronolith 4.2.13** * [mjr] Add missing EAS ghosted property support for
all EAS versions. Prevents potential loss of event data during synchronization.
**Kronolith 4.2.12** * [mjr] Fix missing truncated event description when using
ActiveSync. * [jan] Fix week number in basic view if week starts on Sundays. *
[mjr] Fix issue where new event could be created with exceptions from previously
edited event. * [jan] Mark preferences only available in basic mode. * [jan] Use
access rules compatible with both Apache 2.2 and 2.4. * [jan] Fix accidental
deletion of events if importing recurring events without a UID attribute (Bug
#14208). * [mjr] Honor confirm_delete preference in dynamic view (Bug #14188). *
[mjr] Correctly deal with cancelled meetings via ActiveSync. * [mjr] Fix
visibility of alarm titles when alarm is generated via CLI (Bug #14154). * [mjr]
Fix display of embed code by adding the full url.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-kronolith' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-36488e7933
2016-03-09 11:33:52.319880
--------------------------------------------------------------------------------
Name : php-nette-neon
Product : Fedora EPEL 7
Version : 2.3.4
Release : 1.el7
URL : https://github.com/nette/neon
Summary : Nette NEON: parser and generator for Nette Object Notation
Description :
Nette NEON: parser and generator for Nette Object Notation.
To use this library, you just have to add, in your project:
require_once '/usr/share/php/Nette/Neon/autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.4** * Decoder: fixed entity value conversion in the
entity chain
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-nette-neon' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e89ec01bcd
2016-03-09 11:33:52.319826
--------------------------------------------------------------------------------
Name : php-horde-Horde-Cache
Product : Fedora EPEL 7
Version : 2.5.3
Release : 1.el7
URL : http://pear.horde.org
Summary : Horde Caching API
Description :
This package provides a simple, functional caching API, with the option to
store the cached data on the filesystem, in one of the PHP opcode cache
systems (APC, eAcclerator, XCache, or Zend Performance Suite's content
cache), memcached, or an SQL table.
--------------------------------------------------------------------------------
Update Information:
**Horde_Cache 2.5.3** * [jan] Fix incomplete migration from old to new garbage
collection in file backend (Bug #14258). * [jan] Mark PHP 7 as supported. ----
**Horde_Cache 2.5.2** * [jan] Improve performance and memory consumption of
garbage collection in File driver. * [jan] Fix garbage collection in File
driver. * [jan] Fix caching issues within the same request in the Memcache
driver. * [jan] Fix the Mongo driver's expire() if not using a logger. * [jan]
Add unit tests.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Cache' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-b9bc63bcc3
2016-03-09 11:33:52.319770
--------------------------------------------------------------------------------
Name : ocserv
Product : Fedora EPEL 7
Version : 0.10.12
Release : 1.el7
URL : http://www.infradead.org/ocserv/
Summary : OpenConnect SSL VPN server
Description :
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a
secure, small, fast and configurable VPN server. It implements the OpenConnect
SSL VPN protocol, and has also (currently experimental) compatibility with
clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol
uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS
to provide the secure VPN service.
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ocserv' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-72ad34fd5f
2016-03-09 11:33:52.319710
--------------------------------------------------------------------------------
Name : quantum-espresso
Product : Fedora EPEL 7
Version : 5.3.0
Release : 8.el7
URL : http://www.quantum-espresso.org/
Summary : A suite for electronic-structure calculations and materials modeling
Description :
QUANTUM ESPRESSO is an integrated suite of Open-Source computer codes for
electronic-structure calculations and materials modeling at the nanoscale.
It is based on density-functional theory, plane waves, and pseudopotentials.
Serial version. Includes iotk executables.
--------------------------------------------------------------------------------
Update Information:
use only 2 cores for tests (bug #1308481) ---- explicit Requires are needed
for scalapack, blacs on el6 (bug #1301922)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308481 - test suite fails on machine with lots of cpu cores
https://bugzilla.redhat.com/show_bug.cgi?id=1308481
[ 2 ] Bug #1282893 - Review Request: quantum-espresso - A suite for electronic-structure calculations and materials modeling
https://bugzilla.redhat.com/show_bug.cgi?id=1282893
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update quantum-espresso' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-b0d6d6f7e8
2016-03-09 11:33:52.319646
--------------------------------------------------------------------------------
Name : php-league-flysystem
Product : Fedora EPEL 7
Version : 1.0.17
Release : 1.el7
URL : https://github.com/thephpleague/flysystem
Summary : Filesystem abstraction: Many filesystems, one API
Description :
Flysystem is a filesystem abstraction which allows you to easily swap out
a local filesystem for a remote one.
Autoloader: '/usr/share/php/League/Flysystem/autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.17** - 2016-02-19 * [Util::guessMimeType] Worked around
incorrect detection of assembly mime-type. (#608)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-league-flysystem' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-5c80ce92b0
2016-03-09 11:33:52.319583
--------------------------------------------------------------------------------
Name : php-latte
Product : Fedora EPEL 7
Version : 2.3.10
Release : 1.el7
URL : https://github.com/nette/latte
Summary : Latte: the amazing template engine for PHP
Description :
Latte is a template engine for PHP which eases your work and ensures the
output is protected against vulnerabilities, such as XSS.
Latte is fast: it compiles templates to plain optimized PHP code.
Latte is secure: it is the first PHP engine introducing content-aware escaping.
Latte speaks your language: it has intuitive syntax and helps you to build
better websites easily.
To use this library, you just have to add, in your project:
require_once '/usr/share/php/Latte/autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.10** * Parser: || is not modifier separator #100 *
Engine: fixed CompileException sourceLine on PHP7 * FileLoader: error message
explaining touching, when touch() fails ---- **Released version 2.3.9** *
BlockMacros: fixed enabling snippetMode in the dynamic snippetArea *
Parser::parseMacroTag() fixed extraction of modifier nette/nette#1541
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-latte' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-17092c77f9
2016-03-09 11:33:52.319527
--------------------------------------------------------------------------------
Name : php-nette-finder
Product : Fedora EPEL 7
Version : 2.3.2
Release : 1.el7
URL : https://github.com/nette/finder
Summary : Nette Finder: Files Searching
Description :
Class Nette\Utils\Finder makes browsing the directory structure really easy.
To use this library, you just have to add, in your project:
require_once '/usr/share/php/Nette/Finder/autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.2** * fixed typehints, FilesystemIterator ->
RecursiveDirectoryIterator in filters
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-nette-finder' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------