[SECURITY] Fedora EPEL 6 Update: ansible-2.2.1.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-dbfb398104
2017-01-31 17:13:46.147080
--------------------------------------------------------------------------------
Name : ansible
Product : Fedora EPEL 6
Version : 2.2.1.0
Release : 1.el6
URL : http://ansible.com
Summary : SSH-based configuration management, deployment, and task execution system
Description :
Ansible is a radically simple model-driven configuration management,
multi-node deployment, and remote task execution system. Ansible works
over SSH and does not require any software or daemons to be installed
on remote nodes. Extension modules can be written in any language and
are transferred to managed machines automatically.
--------------------------------------------------------------------------------
Update Information:
Update to ansible 2.2.1. Fixes several CVEs as well as a number of other
bugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
for full changes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1396176 - CVE-2016-8647 Ansible: in some circumstances the mysql_user module may fail to correctly change a password [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1396176
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ansible' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: R-Rcpp-0.12.9-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-6bac35a719
2017-01-31 17:13:46.147008
--------------------------------------------------------------------------------
Name : R-Rcpp
Product : Fedora EPEL 6
Version : 0.12.9
Release : 1.el6
URL : http://cran.r-project.org/web/packages/Rcpp/
Summary : Seamless R and C++ Integration
Description :
The Rcpp package provides R functions as well as C++ classes which
offer a seamless integration of R and C++. Many R data types and
objects can be mapped back and forth to C++ equivalents which
facilitates both writing of new code as well as easier integration of
third-party libraries.
Documentation about Rcpp is provided by several vignettes included in
this package, via the Rcpp Gallery site at http://gallery.rcpp.org,
the paper by Eddelbuettel and Francois (2011, JSS), and the book by
Eddelbuettel (2013, Springer).
See citation("Rcpp") for details on the last two.
--------------------------------------------------------------------------------
Update Information:
http://dirk.eddelbuettel.com/blog/2017/01/15/#rcpp_0.12.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413514 - Version 0.12.9 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=1413514
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R-Rcpp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora EPEL 6 Update: pdns-recursor-3.7.4-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-663073e313
2017-01-31 17:13:46.146821
--------------------------------------------------------------------------------
Name : pdns-recursor
Product : Fedora EPEL 6
Version : 3.7.4
Release : 1.el6
URL : http://powerdns.com
Summary : Modern, advanced and high performance recursing/non authoritative name server
Description :
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this
package if you need a dns cache for your network.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073,
CVE-2016-7074
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413517 - CVE-2016-2120 CVE-2016-7068 CVE-2016-7072 CVE-2016-7073 CVE-2016-7074 pdns: Multiple security vulnerabilities fixed in latest versions
https://bugzilla.redhat.com/show_bug.cgi?id=1413517
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pdns-recursor' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: uwsgi-2.0.14-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-37685faf8d
2017-01-31 03:53:19.168807
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora EPEL 7
Version : 2.0.14
Release : 6.el7
URL : https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
Adding the cheaper_busyness plugin (Jorge Gallegos)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413076 - Package uwsgi busyness ("cheaper_busyness") plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1413076
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update uwsgi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: hitch-1.4.4-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-9ca0efb2d7
2017-01-31 03:53:19.168736
--------------------------------------------------------------------------------
Name : hitch
Product : Fedora EPEL 7
Version : 1.4.4
Release : 2.el7
URL : https://hitch-tls.org/
Summary : Network proxy that terminates TLS/SSL connections
Description :
hitch is a network proxy that terminates TLS/SSL connections and forwards the
unencrypted traffic to some backend. It is designed to handle 10s of thousands
of connections efficiently on multicore machines.
--------------------------------------------------------------------------------
Update Information:
New upstream release. A bugfix and comptibility release. From the upstream
changelog: * OpenSSL 1.1.0 compatibility fixes. OpenSSL 1.1.0 is now fully
supported with Hitch. * Fix a bug in the OCSP refresh code that could make it
loop with immediate refreshes flooding an OCSP responder. * Force the
SSL_OP_SINGLE_DH_USE setting. This protects against an OpenSSL vulnerability
where a remote attacker could discover private DH exponents (CVE-2016-0701).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405948 - OSCP stapling not working by default
https://bugzilla.redhat.com/show_bug.cgi?id=1405948
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update hitch' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: pcre2-10.21-12.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-389e9670e5
2017-01-31 03:53:19.168597
--------------------------------------------------------------------------------
Name : pcre2
Product : Fedora EPEL 7
Version : 10.21
Release : 12.el7
URL : http://www.pcre.org/
Summary : Perl-compatible regular expression library
Description :
PCRE2 is a re-working of the original PCRE (Perl-compatible regular
expression) library to provide an entirely new API.
PCRE2 is written in C, and it has its own API. There are three sets of
functions, one for the 8-bit library, which processes strings of bytes, one
for the 16-bit library, which processes strings of 16-bit values, and one for
the 32-bit library, which processes strings of 32-bit values. There are no C++
wrappers.
The distribution does contain a set of C wrapper functions for the 8-bit
library that are based on the POSIX regular expression API (see the pcre2posix
man page). These can be found in a library called libpcre2posix. Note that
this just provides a POSIX calling interface to PCRE2; the regular expressions
themselves still follow Perl syntax and semantics. The POSIX API is
restricted, and does not give full access to all of PCRE2's facilities.
--------------------------------------------------------------------------------
Update Information:
This release fixes compiling a class with Unicode properties and without UTF
mode. It also fixes an ouf-of-bound read in pcre2test tool within POSIX mode.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pcre2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: python-pyroute2-0.4.10-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-fcc4b83391
2017-01-31 03:53:19.168383
--------------------------------------------------------------------------------
Name : python-pyroute2
Product : Fedora EPEL 7
Version : 0.4.10
Release : 1.el7
URL : https://github.com/svinota/pyroute2
Summary : Pure Python netlink library
Description :
PyRoute2 provides several levels of API to work with Netlink
protocols, such as Generic Netlink, RTNL, TaskStats, NFNetlink,
IPQ.
--------------------------------------------------------------------------------
Update Information:
devlink fd leak fix ---- critical fd leak fix ---- uplift to 0.4.x ----
critical NetNS fd leak fix
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pyroute2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: uwsgi-2.0.14-6.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a88cb17807
2017-01-31 04:09:23.232671
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora EPEL 6
Version : 2.0.14
Release : 6.el6
URL : https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
Adding the cheaper_busyness plugin (Jorge Gallegos) ---- enable psgi plugin on
el7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update uwsgi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: hitch-1.4.4-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-df71990a9f
2017-01-31 04:09:23.232624
--------------------------------------------------------------------------------
Name : hitch
Product : Fedora EPEL 6
Version : 1.4.4
Release : 2.el6
URL : https://hitch-tls.org/
Summary : Network proxy that terminates TLS/SSL connections
Description :
hitch is a network proxy that terminates TLS/SSL connections and forwards the
unencrypted traffic to some backend. It is designed to handle 10s of thousands
of connections efficiently on multicore machines.
--------------------------------------------------------------------------------
Update Information:
New upstream release. A bugfix and comptibility release. From the upstream
changelog: * OpenSSL 1.1.0 compatibility fixes. OpenSSL 1.1.0 is now fully
supported with Hitch. * Fix a bug in the OCSP refresh code that could make it
loop with immediate refreshes flooding an OCSP responder. * Force the
SSL_OP_SINGLE_DH_USE setting. This protects against an OpenSSL vulnerability
where a remote attacker could discover private DH exponents (CVE-2016-0701).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405948 - OSCP stapling not working by default
https://bugzilla.redhat.com/show_bug.cgi?id=1405948
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update hitch' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: pcre2-10.21-12.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-7f94ea5689
2017-01-31 04:09:23.232569
--------------------------------------------------------------------------------
Name : pcre2
Product : Fedora EPEL 6
Version : 10.21
Release : 12.el6
URL : http://www.pcre.org/
Summary : Perl-compatible regular expression library
Description :
PCRE2 is a re-working of the original PCRE (Perl-compatible regular
expression) library to provide an entirely new API.
PCRE2 is written in C, and it has its own API. There are three sets of
functions, one for the 8-bit library, which processes strings of bytes, one
for the 16-bit library, which processes strings of 16-bit values, and one for
the 32-bit library, which processes strings of 32-bit values. There are no C++
wrappers.
The distribution does contain a set of C wrapper functions for the 8-bit
library that are based on the POSIX regular expression API (see the pcre2posix
man page). These can be found in a library called libpcre2posix. Note that
this just provides a POSIX calling interface to PCRE2; the regular expressions
themselves still follow Perl syntax and semantics. The POSIX API is
restricted, and does not give full access to all of PCRE2's facilities.
--------------------------------------------------------------------------------
Update Information:
This release fixes compiling a class with Unicode properties and without UTF
mode. It also fixes an ouf-of-bound read in pcre2test tool within POSIX mode.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pcre2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months