[SECURITY] Fedora EPEL 7 Update: php-PHPMailer-5.2.22-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-fbb2447c6e
2017-01-24 19:29:51.810047
--------------------------------------------------------------------------------
Name : php-PHPMailer
Product : Fedora EPEL 7
Version : 5.2.22
Release : 1.el7
URL : https://github.com/PHPMailer/PHPMailer
Summary : PHP email transport class with a lot of features
Description :
Full Featured Email Transfer Class for PHP. PHPMailer features:
* Supports emails digitally signed with S/MIME encryption!
* Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs
* Works on any platform.
* Supports Text & HTML emails.
* Embedded image support.
* Multipart/alternative emails for mail clients that do not read
HTML email.
* Flexible debugging.
* Custom mail headers.
* Redundant SMTP servers.
* Support for 8bit, base64, binary, and quoted-printable encoding.
* Word wrap.
* Multiple fs, string, and binary attachments (those from database,
string, etc).
* SMTP authentication.
* Tested on multiple SMTP servers: Sendmail, qmail, Postfix, Gmail,
Imail, Exchange, etc.
* Good documentation, many examples included in download.
* It's swift, small, and simple.
--------------------------------------------------------------------------------
Update Information:
**Version 5.2.22** (January 5th 2017) * **SECURITY** Fix
[CVE-2017-5223](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-...,
local file disclosure vulnerability if content passed to `msgHTML()` is sourced
from unfiltered user input. Reported by Yongxiang Li of Asiasecurity. The fix
for this means that calls to `msgHTML()` without a `$basedir` will not import
images with relative URLs, and relative URLs containing `..` will be ignored. *
Add simple contact form example * Emoji in test content ---- **Version
5.2.21** (December 28th 2016) * Fix missed number update in version file - no
functional changes ---- **Version 5.2.20** (December 28th 2016) *
**SECURITY** Critical security update for CVE-2016-10045 please update now!
Thanks to [Dawid Golunski](https://legalhackers.com) and Paul Buonopane
(Zenexer). ---- ** Version 5.2.19** (December 26th 2016) * Minor cleanup
---- ** Version 5.2.18** (December 24th 2016) * **SECURITY** Critical security
update for CVE-2016-10033 please update now! Thanks to [Dawid
Golunski](https://legalhackers.com). * Add ability to extract the SMTP
transaction ID from some common SMTP success messages * Minor documentation
tweaks ---- ** Version 5.2.17** (December 9th 2016) * This is officially the
last feature release of 5.2. Security fixes only from now on; use PHPMailer 6.0!
* Allow DKIM private key to be provided as a string * Provide mechanism to allow
overriding of boundary and message ID creation * Improve Brazilian Portuguese,
Spanish, Swedish, Romanian, and German translations * PHP 7.1 support for
Travis-CI * Fix some language codes * Add security notices * Improve DKIM
compatibility in older PHP versions * Improve trapping and capture of SMTP
connection errors * Improve passthrough of error levels for debug output *
PHPDoc cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409489 - CVE-2016-10033 phpmailer: Parameter injection via mail() function
https://bugzilla.redhat.com/show_bug.cgi?id=1409489
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-PHPMailer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: rdiff-backup-1.2.8-12.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-2db901196f
2017-01-24 19:29:51.809995
--------------------------------------------------------------------------------
Name : rdiff-backup
Product : Fedora EPEL 7
Version : 1.2.8
Release : 12.el7
URL : http://www.nongnu.org/rdiff-backup/
Summary : Convenient and transparent local/remote incremental mirror/backup
Description :
rdiff-backup is a script, written in Python, that backs up one
directory to another and is intended to be run periodically (nightly
from cron for instance). The target directory ends up a copy of the
source directory, but extra reverse diffs are stored in the target
directory, so you can still recover files lost some time ago. The idea
is to combine the best features of a mirror and an incremental
backup. rdiff-backup can also operate in a bandwidth efficient manner
over a pipe, like rsync. Thus you can use rdiff-backup and ssh to
securely back a hard drive up to a remote location, and only the
differences from the previous backup will be transmitted.
--------------------------------------------------------------------------------
Update Information:
Add patch to better handle hardlinks. Fixes bug #1409435
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409435 - Hardlinks are causing errors and head to skipping these files
https://bugzilla.redhat.com/show_bug.cgi?id=1409435
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rdiff-backup' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: kwalletcli-3.00-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-29ac1fc3d7
2017-01-24 19:29:51.809923
--------------------------------------------------------------------------------
Name : kwalletcli
Product : Fedora EPEL 7
Version : 3.00
Release : 2.el7
URL : https://www.mirbsd.org/kwalletcli.htm
Summary : CLI for the KDE Wallet
Description :
A command-line interface to the KDE Wallet, for KDE 4 and KF5 (so shell
scripts, Python, etc. do not need to use DCOP or D-Bus directly to access it
to store passwords, instead being able to call this convenient wrapper). KF5
does come with a kwallet-query utility, however, it requires the caller to
know the name of the default wallet, which most scripts won���t know, and lacks
kwalletcli���s extra utilities.
--------------------------------------------------------------------------------
Update Information:
Fix shbang for scripts ---- A command-line interface to the KDE Wallet, for
KDE 4 and KF5 (so shell scripts, Python, etc. do not need to use DCOP or D-Bus
directly to access it to store passwords, instead being able to call this
convenient wrapper). KF5 does come with a kwallet-query utility, however, it
requires the caller to know the name of the default wallet, which most scripts
won���t know, and lacks kwalletcli���s extra utilities.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409000 - Review Request: kwalletcli - CLI for the KDE Wallet
https://bugzilla.redhat.com/show_bug.cgi?id=1409000
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update kwalletcli' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: ustl-2.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-0bd9b7c703
2017-01-24 19:29:51.809865
--------------------------------------------------------------------------------
Name : ustl
Product : Fedora EPEL 7
Version : 2.5
Release : 1.el7
URL : http://msharov.github.io/ustl/
Summary : A size-optimized STL implementation
Description :
The C++ standard template library (STL) is a collection of common containers
and algorithms in template form. Unfortunately its standard incarnation
shipped with gcc is implemented without much concern for code size. Not only
is the library itself large, the current version being over a megabyte in
size, but with all the code you instantiate by using a vector for each of
your containers, it is easy to become fearful and opt for using static
arrays instead or, worse yet, abandon C++ altogether for C. This is
especially painful to former DOS assembly programmers like myself, who fret
endlessly when the size of the executable crosses the magic 64k boundary,
forgetting that nobody cares about memory anymore.
Of course, these days everyone has gigabytes of RAM and has no compunction
about loading up OpenOffice, whose source tree is over a gigabyte in size.
Why then bother with saving a kilobyte of code here and there? I can't really
say. Maybe it's that warm fuzzy knowledge that you are making maximum possible
use of your computer's resources. Maybe it's that thrill you get after
expressing your program's functionality in the fewest possible instructions
and the minimum imaginable overhead. Or maybe it really is of no importance
and any code bloat will be easily overcome by faster processors in some near
future. I just know what I like, and it's the sight of clean, concise, and
fast code. Therefore this library.
--------------------------------------------------------------------------------
Update Information:
v2.5 --- - Implement chrono. - Implement ratio. - Implement gcd and lcm. -
Implement exchange, clamp, minmax, and minmax_element algorithms. - Implement
front_insert_iterator and move_iterator. - Add uninitialized_default_construct
and uninitialized_value_construct. - Implement uninitialized_move, destroy_at,
and destroy_n. - Add void_t, is_swappable, and common_type type traits. -
Implement c++11 float fields in numeric_limits. - Implement ostringstream fill
and setfill manip. - Fix some clang compatibility warnings. - Give descriptive
names to tests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1398782 - ustl-2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1398782
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ustl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: composer-1.3.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-c20e010beb
2017-01-24 19:29:51.809814
--------------------------------------------------------------------------------
Name : composer
Product : Fedora EPEL 7
Version : 1.3.1
Release : 1.el7
URL : https://getcomposer.org/
Summary : Dependency Manager for PHP
Description :
Composer helps you declare, manage and install dependencies of PHP projects,
ensuring you have the right stack everywhere.
Documentation: https://getcomposer.org/doc/
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.1** - 2017-01-07 * Fixed dist downloads from Bitbucket *
Fixed some regressions related to xdebug disabling * Fixed `--minor-only` flag
in `outdated` command * Fixed handling of config.platform.php which did not
replace other php-* package's versions ---- **Version 1.3.0** - 2016-12-24
* Fixed handling of annotated git tags vs lightweight tags leading to useless
updates sometimes * Fixed ext-xdebug not being require-able anymore due to
automatic xdebug disabling * Fixed case insensitivity of remove command ----
**Version 1.3.0-RC** - 2016-12-11 * Added workaround for xdebug performance
impact by restarting PHP without xdebug automatically in case it is enabled *
Added `--minor-only` to the `outdated` command to only show updates to minor
versions and ignore new major versions * Added `--apcu-autoloader` to the
`update`/`install` commands and `--apcu` to `dump-autoload` to enable an APCu-
caching autoloader, which can be more efficient than --classmap-authoritative if
you attempt to autoload many classes that do not exist, or if you can not use
authoritative classmaps for some reason * Added summary of operations to be
executed before they run, and made execution output more compact * Added `php-
debug` and `php-zts` virtual platform packages * Added `gitlab-token` auth
config for GitLab private tokens * Added `--strict` to the `outdated` command
to return a non-zero exit code when there are outdated packages * Added
ability to call php scripts using the current php interpreter (instead of
finding php in PATH by default) in script handlers via `@php ...` * Added
`COMPOSER_ALLOW_XDEBUG` env var to circumvent the xdebug-disabling behavior *
Added `COMPOSER_MIRROR_PATH_REPOS` env var to force mirroring of path
repositories vs symlinking * Added `COMPOSER_DEV_MODE` env var that is set by
Composer to forward the dev mode to script handlers * Fixed support for git
2.11 * Fixed output from zip and rar leaking out when an error occured *
Removed `hash` from composer.lock, only `content-hash` is now used which should
reduce conflicts * Minor fixes and performance improvements
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update composer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: python-httpretty-0.8.14-1.20161011git70af1f8.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-fb7e41f3a7
2017-01-24 19:29:51.809755
--------------------------------------------------------------------------------
Name : python-httpretty
Product : Fedora EPEL 7
Version : 0.8.14
Release : 1.20161011git70af1f8.el7
URL : http://falcao.it/HTTPretty/
Summary : HTTP request mock tool for Python
Description :
Once upon a time a python developer wanted to use a RESTful API, everything was
fine but until the day he needed to test the code that hits the RESTful API:
what if the API server is down? What if its content has changed?
Don't worry, HTTPretty is here for you.
--------------------------------------------------------------------------------
Update Information:
This update provides version 0.8.14 of httpretty. This is a significant update
over the previous 0.8.3, but so far as I am aware, there are no backward-
incompatible changes (please comment if you find any). The package now has its
test suite enabled (aside from a few tests that require remote trips), and all
tests pass for all releases, so we have some confidence this in fact works
correctly now. Python 3 compatibility is also greatly improved. 0.8.3 was
entirely broken with more recent urllib3, requests, and openssl versions, and
had many compatibility issues with Python 3.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-httpretty' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: rust-1.14.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-05192150bc
2017-01-24 19:29:51.809694
--------------------------------------------------------------------------------
Name : rust
Product : Fedora EPEL 7
Version : 1.14.0
Release : 1.el7
URL : https://www.rust-lang.org
Summary : The Rust Programming Language
Description :
Rust is a systems programming language that runs blazingly fast, prevents
segfaults, and guarantees thread safety.
This package includes the Rust compiler and documentation generator.
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.14](https://blog
.rust-lang.org/2016/12/22/Rust-1.14.html).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: cargo-0.15.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-05192150bc
2017-01-24 19:29:51.809694
--------------------------------------------------------------------------------
Name : cargo
Product : Fedora EPEL 7
Version : 0.15.0
Release : 1.el7
URL : https://crates.io/
Summary : Rust's package manager and build tool
Description :
Cargo is a tool that allows Rust projects to declare their various dependencies
and ensure that you'll always get a repeatable build.
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.14](https://blog
.rust-lang.org/2016/12/22/Rust-1.14.html).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cargo' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: python-flock-0.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-24d1a7af06
2017-01-24 19:29:51.809643
--------------------------------------------------------------------------------
Name : python-flock
Product : Fedora EPEL 7
Version : 0.1
Release : 1.el7
URL : https://github.com/misli/python-flock
Summary : Flock object for with statement
Description :
Flock object uses fcntl.flock to lock (resp. unlock)
file descriptor (fd) with operation (op)
when entering (resp. leaving) runtime context related to it.
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409889 - Add python-flock to epel
https://bugzilla.redhat.com/show_bug.cgi?id=1409889
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-flock' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora EPEL 7 Update: python-ddt-1.1.1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-98bb0f0063
2017-01-24 19:29:51.809588
--------------------------------------------------------------------------------
Name : python-ddt
Product : Fedora EPEL 7
Version : 1.1.1
Release : 2.el7
URL : https://github.com/txels/ddt
Summary : Python library to multiply test cases
Description :
DDT (Data-Driven Tests) allows you to multiply one test case by running it with
different test data, and make it appear as multiple test cases. It is used in
combination with other testing frameworks like unittest and nose.
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-ddt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months