[SECURITY] Fedora EPEL 7 Update: chromium-61.0.3163.100-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-9179bc1cf5
2017-10-10 19:22:44.151861
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora EPEL 7
Version : 61.0.3163.100
Release : 1.el7
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
Update to 61.0.3163.100. Fixes issue where images were not loading on RHEL 7.
Security fix for CVE-2017-5111, CVE-2017-5112, CVE-2017-5113, CVE-2017-5114,
CVE-2017-5115, CVE-2017-5116, CVE-2017-5117, CVE-2017-5118, CVE-2017-5119,
CVE-2017-5120, CVE-2017-5121, CVE-2017-5122
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1488782 - CVE-2017-5120 chromium-browser: potential https downgrade during redirect navigation
https://bugzilla.redhat.com/show_bug.cgi?id=1488782
[ 2 ] Bug #1488781 - CVE-2017-5119 chromium-browser: use of uninitialized value in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1488781
[ 3 ] Bug #1488779 - CVE-2017-5118 chromium-browser: bypass of content security policy in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1488779
[ 4 ] Bug #1488778 - CVE-2017-5117 chromium-browser: use of uninitialized value in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1488778
[ 5 ] Bug #1488777 - CVE-2017-5116 chromium-browser: type confusion in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1488777
[ 6 ] Bug #1488776 - CVE-2017-5115 chromium-browser: type confusion in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1488776
[ 7 ] Bug #1488775 - CVE-2017-5114 chromium-browser: memory lifecycle issue in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1488775
[ 8 ] Bug #1488774 - CVE-2017-5113 chromium-browser: heap buffer overflow in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1488774
[ 9 ] Bug #1488773 - CVE-2017-5112 chromium-browser: heap buffer overflow in webgl
https://bugzilla.redhat.com/show_bug.cgi?id=1488773
[ 10 ] Bug #1488772 - CVE-2017-5111 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1488772
[ 11 ] Bug #1494392 - CVE-2017-5122 chromium-browser: out-of-bounds access in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1494392
[ 12 ] Bug #1494391 - CVE-2017-5121 chromium-browser: out-of-bounds access in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1494391
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update chromium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: ansible-lint-3.4.15-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-7588b1d6c5
2017-10-10 19:22:44.151825
--------------------------------------------------------------------------------
Name : ansible-lint
Product : Fedora EPEL 7
Version : 3.4.15
Release : 1.el7
URL : https://github.com/willthames/ansible-lint
Summary : Best practices checker for Ansible
Description :
Checks playbooks for practices and behavior that could potentially be improved
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.15 version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494183 - not compatible with ansible 2.4
https://bugzilla.redhat.com/show_bug.cgi?id=1494183
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ansible-lint' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: golang-github-russross-blackfriday-1.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-7ea6dde7a4
2017-10-10 19:22:44.151785
--------------------------------------------------------------------------------
Name : golang-github-russross-blackfriday
Product : Fedora EPEL 7
Version : 1.5
Release : 1.el7
URL : https://github.com/russross/blackfriday
Summary : Markdown processor implemented in Go
Description :
Markdown processor implemented in Go
--------------------------------------------------------------------------------
Update Information:
Update to v1.5 ---- Bump to upstream 5f33e7b7878355cd2b7e6b8eefc48a5472c69f70
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222338 - Tracker for golang-github-russross-blackfriday
https://bugzilla.redhat.com/show_bug.cgi?id=1222338
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update golang-github-russross-blackfriday' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: fedfind-3.6.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-e89a91ba69
2017-10-10 19:22:44.151595
--------------------------------------------------------------------------------
Name : fedfind
Product : Fedora EPEL 7
Version : 3.6.2
Release : 1.el7
URL : https://pagure.io/fedora-qa/fedfind
Summary : Fedora compose and image finder
Description :
Fedora Finder finds Fedora. For now, that means it finds Fedora images
- for stable releases, milestone pre-releases, candidate composes, and
nightly composes. The fedfind package provides a simple CLI for showing
image URLs.
--------------------------------------------------------------------------------
Update Information:
This update fixes [PDC](https://pdc.fedoraproject.org/) queries to work
correctly again. fedfind has always formed such queries using URLs without
trailing slashes, and this must have worked at some point, or none of the
functions that rely on PDC queries ever would have worked. However, current PDC
[seems not to handle API queries without trailing slashes properly at
all](https://github.com/product-definition-center/product-definition-
center/issues/467), just returning a 404 error for an API endpoint URL that
would be valid with a `/` character added. So, this new fedfind version ensures
PDC queries use URLs with a trailing `/`. This should resolve [issue
#9](https://pagure.io/fedora-qa/fedfind/issue/9), and any other issue caused by
PDC queries not working correctly. One practical consequence was that the
metadata for composes produced by Pungi 4 but which had their metadata stripped
on release to the mirror system (e.g. Fedora 24, 25 and 26 stable releases) was
not being retrieved from PDC and modified (as was the optimal path in recent
fedfind releases), but was being fully synthesized by fedfind, which results in
much less data.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fedfind' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: python-falcon-1.3.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-dcd307e2b4
2017-10-09 13:07:47.972492
--------------------------------------------------------------------------------
Name : python-falcon
Product : Fedora EPEL 7
Version : 1.3.0
Release : 1.el7
URL : https://falconframework.org
Summary : An unladen web framework for building APIs and app backends
Description :
Falcon is a high-performance Python framework for building cloud APIs.
It encourages the REST architectural style, and tries to do as little as
possible while remaining highly effective.
--------------------------------------------------------------------------------
Update Information:
- Latest upstream - Enable python34 EPEL subpackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480025 - python-falcon-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1480025
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-falcon' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
[SECURITY] Fedora EPEL 7 Update: libbson-1.3.5-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-e3436f7a95
2017-10-09 13:07:47.972320
--------------------------------------------------------------------------------
Name : libbson
Product : Fedora EPEL 7
Version : 1.3.5
Release : 4.el7
URL : https://github.com/mongodb/libbson
Summary : Building, parsing, and iterating BSON documents
Description :
This is a library providing useful routines related to building, parsing,
and iterating BSON documents <http://bsonspec.org/>.
--------------------------------------------------------------------------------
Update Information:
This release fixes CVE-2017-14227 vulnerability, a crash when parsing an empty
code string of a codewscope type.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494401 - CVE-2017-14227 libbson: Heap based buffer over read in the bson_utf8_validate function
https://bugzilla.redhat.com/show_bug.cgi?id=1494401
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libbson' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: php-SymfonyCmfRouting-1.4.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-2ae2b8fd19
2017-10-08 23:54:55.048932
--------------------------------------------------------------------------------
Name : php-SymfonyCmfRouting
Product : Fedora EPEL 7
Version : 1.4.1
Release : 1.el7
URL : http://symfony.com/doc/master/cmf/book/routing.html
Summary : Extends the Symfony2 routing component for dynamic routes and chaining
Description :
The Symfony CMF Routing component extends the Symfony2 core routing component.
It provides:
* A ChainRouter to run several routers in parallel
* A DynamicRouter that can load routes from any database and can generate
additional information in the route match
Even though it has Symfony in its name, the Routing component does not need the
full Symfony2 Framework and can be used in standalone projects.
Autoloader: /usr/share/php/Symfony/Cmf/Component/Routing/autoload.php
--------------------------------------------------------------------------------
Update Information:
## 1.4.1 * Fix locale matching in candidates
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-SymfonyCmfRouting' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: php-symfony-psr-http-message-bridge-1.0.0-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-8f41aee8f8
2017-10-08 23:54:55.048883
--------------------------------------------------------------------------------
Name : php-symfony-psr-http-message-bridge
Product : Fedora EPEL 7
Version : 1.0.0
Release : 3.el7
URL : https://github.com/symfony/psr-http-message-bridge
Summary : Symfony PSR HTTP message bridge
Description :
Provides integration for PSR7.
Autoloader: /usr/share/php/Symfony/Bridge/PsrHttpMessage/autoload.php
--------------------------------------------------------------------------------
Update Information:
RPM only release - Allow Symfony 3 - Modify tests - Apply patch to fix test
suite with !el6 and zendframework/zend-diactoros
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony-psr-http-message-bridge' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: php-symfony-security-acl-2.8.0-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-afa02aa335
2017-10-08 23:54:55.048837
--------------------------------------------------------------------------------
Name : php-symfony-security-acl
Product : Fedora EPEL 7
Version : 2.8.0
Release : 4.el7
URL : https://github.com/symfony/security-acl
Summary : Symfony Security Component - ACL (Access Control List)
Description :
Symfony Security Component - ACL (Access Control List).
Autoloader: /usr/share/php/Symfony/Component/Security/Acl/autoload.php
--------------------------------------------------------------------------------
Update Information:
RPM only release - Add max versions to BuildRequires - Switch autoloader to
fedora/autoloader - Remove Conflicts for Suggests - Test with SCLs if available
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony-security-acl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months
Fedora EPEL 7 Update: icemon-3.1.0-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-9884c72a89
2017-10-08 23:54:55.048785
--------------------------------------------------------------------------------
Name : icemon
Product : Fedora EPEL 7
Version : 3.1.0
Release : 5.el7
URL : http://kfunk.org/tag/icemon/
Summary : Icecream GUI monitor
Description :
A GUI monitor for Icecream, a distributed compiler system
--------------------------------------------------------------------------------
Update Information:
New package for epel7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update icemon' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months