[SECURITY] Fedora EPEL 7 Update: lame-3.100-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-7ce0091d73
2017-11-07 20:59:23.869058
--------------------------------------------------------------------------------
Name : lame
Product : Fedora EPEL 7
Version : 3.100
Release : 1.el7
URL : http://lame.sourceforge.net/
Summary : Free MP3 audio compressor
Description :
LAME is an open source MP3 encoder whose quality and speed matches
commercial encoders. LAME handles MPEG1,2 and 2.5 layer III encoding
with both constant and variable bitrates.
--------------------------------------------------------------------------------
Update Information:
LAME 3.100 - October 13 2017 ============================ * Rog��rio Brito
* Don't include the debian directory as one that is needed during builds. Patch
taken from Debian's packaging of lame. * Resurrect Owen Taylor's code
dated from 97-11-3 to properly deal with GTK1. This was transplanted back from
aclocal.m4 with a patch provided by Andres Mejia. This change makes it easy to
regenerate autotools' files with a simple invocation of autoconf -vfi. *
Fix possible race condition causing build failures in libmp3lame. Discovered in
automated builds by the Debian project with patch provided by Andres Mejia. *
Robert Hegemann * Improved detection of MPEG audio data in RIFF WAVE
files. Tracker item [ 3545112 ] Invalid sampling detection * New switch
--gain <decibel>, range -20.0 to +12.0, a more convenient way to apply Gain
adjustment in decibels, than the use of --scale <factor>. * Fix for
tracker item [ 3558466 ] Bug in path handling * Fix for tracker item [
3567844 ] problem with Tag genre * Fix for tracker item [ 3565659 ] no
progress indication with pipe input * Fix for tracker item [ 3544957 ]
scale (empty) silent encode without warning * Fix for tracker item [
3580176 ] environment variable LAMEOPT doesn't work anymore * Fix for
tracker item [ 3608583 ] input file name displayed with wrong character encoding
(on windows console with CP_UTF8) * Fix for bug ticket [ #447 ] Fix
dereference NULL and Buffer not NULL terminated issues. Thanks to Surabhi Mishra
* Fix for bug ticket [ #445 ] dereference of a null pointer possible in loop.
Thanks to Renu Tyagi * Fix for bug ticket [ #449 ] Make sure functions
with SSE instructions maintain their own properly aligned stack. Thanks to
Fabian Greffrath * Fix for bug ticket [ #458 ] Multiple Stack and Heap
Corruptions from Malicious File. Thanks to Gareth Evans and Elio Blanca *
Fix for bug ticket [ #460 ] A division by zero vulnerability. Thanks to Wang
Shiyang, Liu Bingchang * Fix for bug ticket [ #461 ] CVE-2017-9410
fill_buffer_resample function in libmp3lame/util.c heap-based buffer over-read
and ap * Fix for bug ticket [ #462 ] CVE-2017-9411 fill_buffer_resample
function in libmp3lame/util.c invalid memory read and application crash *
Fix for bug ticket [ #463 ] CVE-2017-9412 unpack_read_samples function in
frontend/get_audio.c invalid memory read and application crash * Fix for
bug ticket [ #434 ] clip detect scale suggestion unaware of scale input value
* HIP decoder bug fixed: decoding mixed blocks of lower sample frequency Layer3
data resulted in internal buffer overflow (write). Thanks to Henri Salo *
Alexander Leidinger * Feature request, patch ticket [ #27 ] Add
lame_encode_buffer_interleaved_int() by Michael Fink
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470199 - CVE-2015-9099 CVE-2015-9100 CVE-2017-11720 CVE-2017-13712 CVE-2017-15018 CVE-2017-15019 CVE-2017-15045 CVE-2017-15046 CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 CVE-2017-8419 lame: Multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1470199
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lame' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
[SECURITY] Fedora EPEL 7 Update: seamonkey-2.49.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-37b21f1a51
2017-11-07 20:59:23.868295
--------------------------------------------------------------------------------
Name : seamonkey
Product : Fedora EPEL 7
Version : 2.49.1
Release : 1.el7
URL : http://www.seamonkey-project.org
Summary : Web browser, e-mail, news, IRC client, HTML editor
Description :
SeaMonkey is an all-in-one Internet application suite. It includes
a browser, mail/news client, IRC client, JavaScript debugger, and
a tool to inspect the DOM for web pages. It is derived from the
application formerly known as Mozilla Application Suite.
--------------------------------------------------------------------------------
Update Information:
Update to 2.49.1 Based on the Firefox/Thunderbird ESR (extension support
release) code version 52.4.0 Fixes various security issues, see
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ and
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ for
more info. Since the version of 2.48, SeaMonkey uses another disk cache
implementation. It is preferable to clear the cache (even before the update) to
avoid extra disk space usage by the old cache data.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update seamonkey' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: globus-gram-job-manager-scripts-6.10-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-b1990eed4f
2017-11-07 20:59:23.868239
--------------------------------------------------------------------------------
Name : globus-gram-job-manager-scripts
Product : Fedora EPEL 7
Version : 6.10
Release : 1.el7
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - GRAM Job ManagerScripts
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gram-job-manager-scripts package contains:
GRAM Job ManagerScripts
--------------------------------------------------------------------------------
Update Information:
* globus-common 17.2 * globus-ftp-control 8.2 * globus-gram-job-manager-scripts
6.10 * globus-gssapi-gsi 13.2 * globus-gss-assist 11.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gram-job-manager-scripts' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: globus-gss-assist-11.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-b1990eed4f
2017-11-07 20:59:23.868239
--------------------------------------------------------------------------------
Name : globus-gss-assist
Product : Fedora EPEL 7
Version : 11.1
Release : 1.el7
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - GSSAPI Assist library
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gss-assist package contains:
GSSAPI Assist library
--------------------------------------------------------------------------------
Update Information:
* globus-common 17.2 * globus-ftp-control 8.2 * globus-gram-job-manager-scripts
6.10 * globus-gssapi-gsi 13.2 * globus-gss-assist 11.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gss-assist' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: globus-ftp-control-8.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-b1990eed4f
2017-11-07 20:59:23.868239
--------------------------------------------------------------------------------
Name : globus-ftp-control
Product : Fedora EPEL 7
Version : 8.2
Release : 1.el7
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - GridFTP Control Library
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-ftp-control package contains:
GridFTP Control Library
--------------------------------------------------------------------------------
Update Information:
* globus-common 17.2 * globus-ftp-control 8.2 * globus-gram-job-manager-scripts
6.10 * globus-gssapi-gsi 13.2 * globus-gss-assist 11.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-ftp-control' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: globus-gssapi-gsi-13.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-b1990eed4f
2017-11-07 20:59:23.868239
--------------------------------------------------------------------------------
Name : globus-gssapi-gsi
Product : Fedora EPEL 7
Version : 13.2
Release : 1.el7
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - GSSAPI library
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gssapi-gsi package contains:
GSSAPI library
--------------------------------------------------------------------------------
Update Information:
* globus-common 17.2 * globus-ftp-control 8.2 * globus-gram-job-manager-scripts
6.10 * globus-gssapi-gsi 13.2 * globus-gss-assist 11.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gssapi-gsi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: globus-common-17.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-b1990eed4f
2017-11-07 20:59:23.868239
--------------------------------------------------------------------------------
Name : globus-common
Product : Fedora EPEL 7
Version : 17.2
Release : 1.el7
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - Common Library
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-common package contains:
Common Library
--------------------------------------------------------------------------------
Update Information:
* globus-common 17.2 * globus-ftp-control 8.2 * globus-gram-job-manager-scripts
6.10 * globus-gssapi-gsi 13.2 * globus-gss-assist 11.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-common' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: RackTables-0.20.14-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-7a30c12c58
2017-11-07 20:59:23.868185
--------------------------------------------------------------------------------
Name : RackTables
Product : Fedora EPEL 7
Version : 0.20.14
Release : 1.el7
URL : http://racktables.org/
Summary : A data-center asset management system
Description :
A data-center asset management system.
--------------------------------------------------------------------------------
Update Information:
Rebase to v0.20.14 Address BZ1492171
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1492171 - PHP parse error with RackTables-0.20.13-1.el7.noarch
https://bugzilla.redhat.com/show_bug.cgi?id=1492171
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update RackTables' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: perl-Lingua-Translit-0.28-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-beac2c4b27
2017-11-07 20:59:23.868124
--------------------------------------------------------------------------------
Name : perl-Lingua-Translit
Product : Fedora EPEL 7
Version : 0.28
Release : 1.el7
URL : http://search.cpan.org/dist/Lingua-Translit/
Summary : Transliterates text between writing systems
Description :
Lingua::Translit can be used to convert text from one writing system to
another, based on national or international transliteration tables. Where
possible a reverse transliteration is supported.
--------------------------------------------------------------------------------
Update Information:
0.28 -- 2017-10-16 --- * Fixed wrong capitalised Cyrillic A in several
context rules of both "BGN/PCGN RUS Standard" and "BGN/PCGN RUS Strict" - thanks
to Nikola Le��i�� for providing the fix! * Spelling corrections in man page -
thanks to Lucas Kanashiro for providing a patch! * Updated copyright (Netzum
Sorglos Software GmbH).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1503228 - perl-Lingua-Translit-0.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1503228
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Lingua-Translit' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: python-pdir2-0.2.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-7ef0bbc371
2017-11-07 20:59:23.868054
--------------------------------------------------------------------------------
Name : python-pdir2
Product : Fedora EPEL 7
Version : 0.2.2
Release : 1.el7
URL : https://pypi.python.org/pypi/pdir2
Summary : Pretty dir() printing with joy
Description :
An improved version of dir() with better output. Attributes are grouped by
types/functionalities, with beautiful colors. Supports ipython, ptpython,
bpython, and Jupyter Notebook.
--------------------------------------------------------------------------------
Update Information:
- Latest upstream - Remove environment markers from setup.py to allow using
older setuptools - EPEL compatibility
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pdir2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months