[SECURITY] Fedora EPEL 7 Update: yadifa-2.2.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-0f92580f68
2017-10-17 17:00:39.951803
--------------------------------------------------------------------------------
Name : yadifa
Product : Fedora EPEL 7
Version : 2.2.6
Release : 1.el7
URL : http://www.yadifa.eu
Summary : Lightweight authoritative Name Server with DNSSEC capabilities
Description :
YADIFA is a name server implementation developed from scratch by .eu.
It is portable across multiple operating systems and supports DNSSEC,
TSIG, DNS notify, DNS update, IPv6.
--------------------------------------------------------------------------------
Update Information:
20170912: YADIFA 2.2.6 --- Fixes an issue where a maliciously crafted message
may block the server.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494005 - CVE-2017-14339 yadifa: Infinite loop due to insufficient checks in the DNS packet parser
https://bugzilla.redhat.com/show_bug.cgi?id=1494005
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update yadifa' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: petsc-3.7.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-95cf1c696b
2017-10-17 17:00:39.951737
--------------------------------------------------------------------------------
Name : petsc
Product : Fedora EPEL 7
Version : 3.7.7
Release : 1.el7
URL : https://www.mcs.anl.gov/petsc
Summary : Portable Extensible Toolkit for Scientific Computation
Description :
PETSc, pronounced PET-see (the S is silent), is a suite of data structures
and routines for the scalable (parallel) solution of scientific applications
modeled by partial differential equations.
--------------------------------------------------------------------------------
Update Information:
- Update to 3.7.7 - Move petscvariables/petscrules under a private directory of
libdir
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update petsc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: openboardview-7.3-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-dced3e892c
2017-10-17 17:00:39.951652
--------------------------------------------------------------------------------
Name : openboardview
Product : Fedora EPEL 7
Version : 7.3
Release : 5.el7
URL : http://openboardview.org
Summary : Viewer for PCB layouts
Description :
Software for viewing PCB/Laptop/Motherboard Layouts.
* Dynamic part outline rendering, including complex connectors
* Annotations, for leaving notes about parts, nets, pins or location
* Configurable colour themes
* Configurable DPI to facilitate usage on 4K monitors
* Tablet usage with OSD controls
* Slower CPU systems through adjustable features
* Reads FZ (with key), BRD, BRD2, BDV and BV* formats
* Combined search system finds parts, pins and nets all within single search
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openboardview' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: nova-agent-2.1.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3fb011c248
2017-10-17 17:00:39.951600
--------------------------------------------------------------------------------
Name : nova-agent
Product : Fedora EPEL 7
Version : 2.1.6
Release : 1.el7
URL : https://github.com/Rackspace-DOT/nova-agent
Summary : Agent for setting up clean servers on Xen
Description :
Python agent for setting up clean servers on Xen using xenstore data.
--------------------------------------------------------------------------------
Update Information:
This is a new package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nova-agent' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: php-simplesamlphp-saml2-2.3.4-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-cf386c54c3
2017-10-17 17:00:39.951405
--------------------------------------------------------------------------------
Name : php-simplesamlphp-saml2
Product : Fedora EPEL 7
Version : 2.3.4
Release : 5.el7
URL : https://github.com/simplesamlphp/saml2
Summary : SAML2 PHP library from SimpleSAMLphp
Description :
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp [1],
used by OpenConext [2]. This library started as a collaboration between
UNINETT [3] and SURFnet [4] but everyone is invited to contribute.
Autoloader: /usr/share/php/SAML2/autoload.php
[1] https://www.simplesamlphp.org/
[2] https://www.openconext.org/
[3] https://www.uninett.no/
[4] https://www.surfnet.nl/
--------------------------------------------------------------------------------
Update Information:
RPM only release - Test with SCLs if available - Add max version constraint to
mockery/mockery BuildRequires
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-simplesamlphp-saml2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: python-resultsdb_api-2.0.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a114abab9a
2017-10-16 15:50:27.889169
--------------------------------------------------------------------------------
Name : python-resultsdb_api
Product : Fedora EPEL 7
Version : 2.0.0
Release : 1.el7
URL : https://pagure.io/taskotron/resultsdb_api
Summary : Interface api to ResultsDB
Description :
Interface api to ResultsDB
--------------------------------------------------------------------------------
Update Information:
This build updates EPEL7 to the newer API for resultsdb
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1496476 - Update to v2.0.0
https://bugzilla.redhat.com/show_bug.cgi?id=1496476
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-resultsdb_api' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
[SECURITY] Fedora EPEL 7 Update: tor-0.2.9.12-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-abe6f98ebf
2017-10-16 15:50:27.889139
--------------------------------------------------------------------------------
Name : tor
Product : Fedora EPEL 7
Version : 0.2.9.12
Release : 1.el7
URL : https://www.torproject.org
Summary : Anonymizing overlay network for TCP
Description :
The Tor network is a group of volunteer-operated servers that allows people to
improve their privacy and security on the Internet. Tor's users employ this
network by connecting through a series of virtual tunnels rather than making a
direct connection, thus allowing both organizations and individuals to share
information over public networks without compromising their privacy. Along the
same line, Tor is an effective censorship circumvention tool, allowing its
users to reach otherwise blocked destinations or content. Tor can also be used
as a building block for software developers to create new communication tools
with built-in privacy features.
This package contains the Tor software that can act as either a server on the
Tor network, or as a client to connect to the Tor network.
--------------------------------------------------------------------------------
Update Information:
update to upstream release 0.2.9.12 (SECURITY) (#1494860)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494860 - tor-0.2.9.10-1.el7.x86_64 is unsecure and out of date
https://bugzilla.redhat.com/show_bug.cgi?id=1494860
[ 2 ] Bug #1493512 - CVE-2017-0380 tor: Stack disclosure in hidden services logs when SafeLogging disabled [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1493512
[ 3 ] Bug #1493513 - CVE-2017-0380 tor: Stack disclosure in hidden services logs when SafeLogging disabled [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1493513
[ 4 ] Bug #1461275 - CVE-2017-0375 CVE-2017-0376 tor: Multiple vulnerabilities [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1461275
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tor' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
[SECURITY] Fedora EPEL 7 Update: openvpn-2.4.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-4826761f5d
2017-10-16 15:50:27.889109
--------------------------------------------------------------------------------
Name : openvpn
Product : Fedora EPEL 7
Version : 2.4.4
Release : 1.el7
URL : https://community.openvpn.net/
Summary : A full-featured SSL VPN solution
Description :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library
for compression.
--------------------------------------------------------------------------------
Update Information:
Maintenance release with several minor upstream bugfixes and a security fix
related to legacy configurations deploying the deprecated `key-method 1`
configuration option
([CVE-2017-12166](https://community.openvpn.net/openvpn/wiki/CVE-2017-12166)).
From this update of, OpenVPN will use the lz4 compression library from Fedora
EPEL instead of the upstream bundled library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1497109 - CVE-2017-12166 openvpn: Incorrect bounds check in read_key() with 'key-method 1'
https://bugzilla.redhat.com/show_bug.cgi?id=1497109
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openvpn' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: perl-XML-SemanticDiff-1.0006-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a5868e23c3
2017-10-16 15:50:27.889081
--------------------------------------------------------------------------------
Name : perl-XML-SemanticDiff
Product : Fedora EPEL 7
Version : 1.0006
Release : 1.el7
URL : http://search.cpan.org/dist/XML-SemanticDiff/
Summary : Perl extension for comparing XML documents
Description :
XML::SemanticDiff provides a way to compare the contents and structure of two
XML documents. By default, it returns a list of hashrefs where each hashref
describes a single difference between the two docs.
--------------------------------------------------------------------------------
Update Information:
This update fixes the module treating a zero node value as the same as being
undefined or missing (https://rt.cpan.org/Public/Bug/Display.html?id=84546).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-XML-SemanticDiff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: globus-gssapi-gsi-13.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-1dc5d03ce3
2017-10-16 15:50:27.889049
--------------------------------------------------------------------------------
Name : globus-gssapi-gsi
Product : Fedora EPEL 7
Version : 13.1
Release : 1.el7
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - GSSAPI library
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gssapi-gsi package contains:
GSSAPI library
--------------------------------------------------------------------------------
Update Information:
Globus Toolkit update. * globus-ftp-control 8.1 * globus-gass-copy 9.28 *
globus-gridftp-server 12.3 * globus-gssapi-gsi 13.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gssapi-gsi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month