Fedora EPEL 7 Update: cmake3-3.6.1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-0bb497f7ea
2016-09-27 00:24:04.058211
--------------------------------------------------------------------------------
Name : cmake3
Product : Fedora EPEL 7
Version : 3.6.1
Release : 2.el7
URL : http://www.cmake.org
Summary : Cross-platform make system
Description :
CMake is used to control the software compilation process using simple
platform and compiler independent configuration files. CMake generates
native makefiles and workspaces that can be used in the compiler
environment of your choice. CMake is quite sophisticated: it is possible
to support complex environments requiring system configuration, preprocessor
generation, code generation, and template instantiation.
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1353778 - cmake-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1353778
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cmake3' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
[SECURITY] Fedora EPEL 7 Update: wordpress-4.6.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-7e2d0ee701
2016-09-27 00:24:04.058144
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 7
Version : 4.6.1
Release : 1.el7
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress-4.6.1/README.fedora
--------------------------------------------------------------------------------
Update Information:
See upstream announcements: * [WordPress 4.6
���Pepper���](https://wordpress.org/news/2016/08/pepper/) * [WordPress 4.6.1
Security and Maintenance
Release](https://wordpress.org/news/2016/09/wordpress-4-6-1-security-and-
maintenance-release/)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369119 - CVE-2016-6896 CVE-2016-6897 wordpress: Multiple vulnerabilities fixed in wordpress 4.6
https://bugzilla.redhat.com/show_bug.cgi?id=1369119
[ 2 ] Bug #1374479 - CVE-2016-7168 CVE-2016-7169 wordpress: two security issues fixed in 4.6.1
https://bugzilla.redhat.com/show_bug.cgi?id=1374479
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: spdlog-0.10.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-173bc969c7
2016-09-27 00:24:04.058071
--------------------------------------------------------------------------------
Name : spdlog
Product : Fedora EPEL 7
Version : 0.10.0
Release : 1.el7
URL : https://github.com/gabime/spdlog/
Summary : Super fast C++ logging library
Description :
This is a packaged version of the gabime/spdlog header-only C++
logging library available at Github.
--------------------------------------------------------------------------------
Update Information:
- Update to 0.10.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update spdlog' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: php-symfony-2.8.11-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-9d6f740804
2016-09-27 00:24:04.057979
--------------------------------------------------------------------------------
Name : php-symfony
Product : Fedora EPEL 7
Version : 2.8.11
Release : 1.el7
URL : http://symfony.com
Summary : PHP framework for web projects
Description :
PHP framework for web projects
--------------------------------------------------------------------------------
Update Information:
**Version 2.8.11** (2016-09-07) * bug #19859 [ClassLoader] Fix
ClassCollectionLoader inlining with declare(strict_types=1) (nicolas-grekas) *
bug #19780 [FrameworkBundle] Incorrect line break in exception message (500
debug page) (pedroresende) * bug #19595 [form] lazy trans
`post_max_size_message`. (aitboudad) * bug #19870 [DI] Fix setting synthetic
services on ContainerBuilder (nicolas-grekas) * bug #19848 Revert "minor #19689
[DI] Cleanup array_key_exists (ro0NL)" (nicolas-grekas) * bug #19842
[FrameworkBundle] Check for class existence before is_subclass_of (chalasr) *
bug #19827 [BrowserKit] Fix cookie expiration on 32 bit systems (jameshalsall)
**Version 2.8.10** (2016-09-02) * bug #19786 Update profiler's layout to use
flexbox (javiereguiluz) * bug #19794 [VarDumper] Various minor fixes & cleanups
(nicolas-grekas) * bug #19751 Fixes the calendar in constructor to handle null
(wakqasahmed) * bug #19388 [Validator][GroupSequence] fixed GroupSequence
validation ignores PropetyMetadata of parent classes (Sandro Hopf) * bug #19601
[FrameworkBundle] Added friendly exception when constraint validator class does
not exist (yceruto) * bug #19580 [Validator] fixed duplicate constraints with
parent class interfaces (dmaicher) * bug #19647 [Debug] Swap dumper services at
bootstrap (lyrixx) * bug #19685 [DI] Include dynamic services in alternatives
(ro0NL) * bug #19702 [Debug][HttpKernel][VarDumper] Prepare for committed 7.2
changes (aka "small-bc-breaks") (nicolas-grekas) * bug #19704
[DependencyInjection] PhpDumper::isFrozen inconsistency (allflame) * bug #19643
[DependencyInjection] Fix service autowiring inheritance (chalasr) * bug #19667
[SecurityBundle] Add missing deprecation notice for form_login.intention (ro0NL)
* bug #19666 Verify explicitly that the request IP is a valid IPv4 address
(nesk) * bug #19660 Disable CLI color for Windows 10 greater than 10.0.10586
(mlocati) * bug #19663 Exception details break the layout (Dionysis Arvanitis)
* bug #19651 [HttpKernel] Fix HttpCache validation HTTP method (tgalopin) * bug
#19623 [VarDumper] Fix dumping continuations (nicolas-grekas) * bug #19549
[HttpFoundation] fixed Request::getContent() reusage bug (1ma) * bug #19373
[Form] Skip CSRF validation on form when POST max size is exceeded
(jameshalsall) * bug #19541 Fix #19531 [Form] DateType fails parsing when
midnight is not a valid time (mbeccati) * bug #19579 [Process] Strengthen
Windows pipe files opening (again...) (nicolas-grekas) * bug #19564 Added class
existence check if is_subclass_of() fails in compiler passes (SCIF) * bug
#19522 [SwiftMailerBridge] Fix flawed deprecation message (chalasr) * bug
#19510 [Process] Fix double-fread() when reading unix pipes (nicolas-grekas) *
bug #19508 [Process] Fix AbstractPipes::write() for a situation seen on HHVM (at
least) (nicolas-grekas)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
[SECURITY] Fedora EPEL 7 Update: php-horde-Horde-Core-2.26.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-12c4b7b928
2016-09-27 00:24:04.057907
--------------------------------------------------------------------------------
Name : php-horde-Horde-Core
Product : Fedora EPEL 7
Version : 2.26.1
Release : 1.el7
URL : http://pear.horde.org
Summary : Horde Core Framework libraries
Description :
These classes provide the core functionality of the Horde Application
Framework.
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.26.1** * [jan] SECURITY: Add CSRF protection tokens to portal
layout forms and fix open URL redirection (Reported by Florian K��llich). * [jan]
SECURITY: enable CSRF token for configuration form again (Reported by Dawid
Gounski via Beyond Security's SecuriTeam Secure Disclosure program). * [mjr]
Changes to support EAS attachment sync support for Appointment objects. * [mjr]
Refactor ajax weather location autocompleter and add support for metar data. *
[jan] Allow to specify user DN search parameters for LDAP with all bind methods
(Request #11697).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Core' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: php-horde-Horde-Form-2.0.15-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-16bb1aa14d
2016-09-27 00:24:04.057832
--------------------------------------------------------------------------------
Name : php-horde-Horde-Form
Product : Fedora EPEL 7
Version : 2.0.15
Release : 1.el7
URL : http://pear.horde.org
Summary : Horde Form API
Description :
The Horde_Form package provides form rendering, validation, and other
functionality for the Horde Application Framework.
--------------------------------------------------------------------------------
Update Information:
**Horde_Form 2.0.15** * [jan] Catch errors when checking one-time form tokens.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Form' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
[SECURITY] Fedora EPEL 7 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-c7c4c1e885
2016-09-27 00:24:04.057761
--------------------------------------------------------------------------------
Name : php-horde-Horde-Mime-Viewer
Product : Fedora EPEL 7
Version : 2.2.1
Release : 1.el7
URL : http://pear.horde.org
Summary : Horde MIME Viewer Library
Description :
Provides rendering drivers for MIME data.
--------------------------------------------------------------------------------
Update Information:
**Horde_Mime_Viewer 2.2.1** * [jan] SECURITY: Don't render SVG images in the
browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's
SecuriTeam Secure Disclosure program).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375485 - php-horde: XSS vulnerability via SVG images
https://bugzilla.redhat.com/show_bug.cgi?id=1375485
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Mime-Viewer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
[SECURITY] Fedora EPEL 7 Update: php-horde-Horde-Text-Filter-2.3.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-175e2d3d7c
2016-09-27 00:24:04.057700
--------------------------------------------------------------------------------
Name : php-horde-Horde-Text-Filter
Product : Fedora EPEL 7
Version : 2.3.5
Release : 1.el7
URL : http://pear.horde.org/
Summary : Horde Text Filter API
Description :
Common methods for fitering and converting text.
--------------------------------------------------------------------------------
Update Information:
**Horde_Text_Filter 2.3.5** * [jan] SECURITY: Fix XSS via data:text/html
content of form action and xlink attributes (Reported by Liuzhu).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375481 - php-horde: XSS with data:html links and form actions
https://bugzilla.redhat.com/show_bug.cgi?id=1375481
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Text-Filter' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
[SECURITY] Fedora EPEL 7 Update: php-horde-horde-5.2.12-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-f71c0650c3
2016-09-27 00:24:04.057632
--------------------------------------------------------------------------------
Name : php-horde-horde
Product : Fedora EPEL 7
Version : 5.2.12
Release : 1.el7
URL : http://www.horde.org/apps/horde
Summary : Horde Application Framework
Description :
The Horde Application Framework is a flexible, modular, general-purpose web
application framework written in PHP. It provides an extensive array of
components that are targeted at the common problems and tasks involved in
developing modern web applications. It is the basis for a large number of
production-level web applications, notably the Horde Groupware suites. For
more information on Horde or the Horde Groupware suites, visit
http://www.horde.org.
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.12** * [jan] SECURITY: Add CSRF protection tokens to portal layout
forms (Reported by Florian K��llich). * [jan] Fix double loading of hooks.php.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375484 - php-horde: Missing CSRF protection in configuration form and portal layout forms
https://bugzilla.redhat.com/show_bug.cgi?id=1375484
[ 2 ] Bug #1375478 - php-horde: Missing CSRF protection in portal layout forms
https://bugzilla.redhat.com/show_bug.cgi?id=1375478
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-horde' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months
Fedora EPEL 7 Update: php-horde-imp-6.2.16-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-77d6d69d3a
2016-09-27 00:24:04.057565
--------------------------------------------------------------------------------
Name : php-horde-imp
Product : Fedora EPEL 7
Version : 6.2.16
Release : 1.el7
URL : http://www.horde.org/apps/imp
Summary : A web based webmail system
Description :
IMP, the Internet Mail Program, is one of the most popular and widely
deployed open source webmail applications in the world. It allows
universal, web-based access to IMAP and POP3 mail servers and provides
Ajax, mobile and traditional interfaces with a rich range of features
normally found only in desktop email clients.
--------------------------------------------------------------------------------
Update Information:
**imp 6.2.16** * [jan] Optimize deleting or moving a large number of messages.
* [jan] Fix the 'special_mboxes' backend configuration (Bug #14423). * [mjr] Fix
display of application/pkcs-7-mime parts (Bug #14363).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-imp' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 7 months