Fedora EPEL 6 Update: qpid-dispatch-0.6.1-5.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a490c0189c
2017-02-23 19:52:27.797329
--------------------------------------------------------------------------------
Name : qpid-dispatch
Product : Fedora EPEL 6
Version : 0.6.1
Release : 5.el6
URL : http://qpid.apache.org/
Summary : Dispatch router for Qpid
Description :
A lightweight message router, written in C and built on Qpid Proton, that provides flexible and scalable interconnect between AMQP endpoints or between endpoints and brokers.
--------------------------------------------------------------------------------
Update Information:
Updated "Requires".
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qpid-dispatch' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora EPEL 7 Update: xrdp-0.9.1-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-d1c56cd592
2017-02-23 14:52:21.908972
--------------------------------------------------------------------------------
Name : xrdp
Product : Fedora EPEL 7
Version : 0.9.1
Release : 5.el7
URL : http://www.xrdp.org/
Summary : Open source remote desktop protocol (RDP) server
Description :
xrdp provides a fully functional RDP server compatible with a wide range
of RDP clients, including FreeRDP and Microsoft RDP client.
--------------------------------------------------------------------------------
Update Information:
WARNING: Please note that this update comes with a slightly different syntax of
sesman.ini file, so if you edited this file by hand, you may need to look at the
.rpmnew file and merge any required changes by hand. This release also creates
three files in /etc/xrdp directory if they don't already exist or are empty: -
rsakeys.ini - cert.pem - key.pem Also note that in Fedora, the only backend
that will really work is still Xvnc for now. New features - New xorgxrdp
backend using existing Xorg with additional modules - Improvements to X11rdp
backend - Support for IPv6 (disabled by default) - Initial support for RemoteFX
Codec (disabled by default) - Support for TLS security layer (preferred over RDP
layer if supported by the client) - Support for disabling deprecated SSLv3
protocol and for selecting custom cipher suites in xrdp.ini - Support for
bidirectional fastpath (enabled in both directions by default) - Support clients
that don't support drawing orders, such as MS RDP client for Android, ChromeRDP
(disabled by default) - More configurable login screen - Support for new virtual
channels: - - rdpdr: device redirection - - rdpsnd: audio output - - cliprdr:
clipboard - - xrdpvr: xrdp video redirection channel (can be used along with
NeutrinoRDP client) - Support for disabling virtual channels globally or by
session type - Allow to specify the path for backends (Xorg, X11rdp, Xvnc) -
Added files for systemd support - Multi-monitor support - xrdp-chansrv stroes
logs in ${XDG_DATA_HOME}/xrdp now Security fixes - User's password could be
recovered from the Xvnc password file - X11 authentication was not used
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404972 - CVE-2013-1430 xrdp: Cleartext password shown in file after logging into xrdp session [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1404972
[ 2 ] Bug #1404971 - CVE-2013-1430 xrdp: Cleartext password shown in file after logging into xrdp session [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1404971
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xrdp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: google-authenticator-1.03-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-74c859fe05
2017-02-23 14:52:21.908911
--------------------------------------------------------------------------------
Name : google-authenticator
Product : Fedora EPEL 7
Version : 1.03
Release : 1.el7
URL : https://github.com/google/google-authenticator-libpam/
Summary : One-time pass-code support using open standards
Description :
The Google Authenticator package contains a plug-able authentication
module (PAM) which allows login using one-time pass-codes conforming to
the open standards developed by the Initiative for Open Authentication
(OATH) (which is unrelated to OAuth).
Pass-code generators are available (separately) for several mobile
platforms.
These implementations support the HMAC-Based One-time Password (HOTP)
algorithm specified in RFC 4226 and the Time-based One-time Password
(TOTP) algorithm currently in draft.
--------------------------------------------------------------------------------
Update Information:
Bump to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1099532 - Build google-authenticator for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1099532
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update google-authenticator' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: gdl-0.9.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-68eaea8f28
2017-02-23 14:52:21.908826
--------------------------------------------------------------------------------
Name : gdl
Product : Fedora EPEL 7
Version : 0.9.7
Release : 1.el7
URL : http://gnudatalanguage.sourceforge.net/
Summary : GNU Data Language
Description :
A free IDL (Interactive Data Language) compatible incremental compiler
(i.e. runs IDL programs). IDL is a registered trademark of Research
Systems Inc.
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.7 - Huge gains in plotting speed for X device by bypassing
plplot's X11 color handling. Especially noticeable for remote X11
displays. - Widget numbering scheme aligned to IDL's. - Patched several
buggy output formats (PRINT, etc). - better report of memory size (MEMORY
command) for unix. - .RESET_SESSION OK. - better behaviour of WRITE_GIF and
WRITE_PNG as well as other graphic formats. - Correct setup of !D.N_COLORS and
!P.COLOR when switching devices and decomposed state. - Window-related commands
(WSET,EMPTY,WINDOW...) now correctly handle the managed/widget/free/absent
cases. - ISHFT() now an internal C++ function (for speed). - Begun
implementation of TRIANGULATE when GDL is compiled with the QHULL library. Only
the most basic support is provided. - Experimental: use device
wxWidgets as replacement of X11 and WIN devices (of course when GDL is
linked with the wxWidgets library). This is at the moment triggered by the
environment variable GDL_USE_WX="YES" : setting this variable, the
device 'X' or 'WIN' will actually be a wxWidgets device, with
antialiasing and trueType fonts. - Experimental: calling GDL with option "--
fussy" or setting the environment variable "GDL_IS_FUSSY" enforces
the STRICTARR compiling scheme (array index always between "[]"). This generally
speeds up procedure compilation.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gdl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: qpid-dispatch-0.6.1-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-91dff49f05
2017-02-23 14:52:21.907746
--------------------------------------------------------------------------------
Name : qpid-dispatch
Product : Fedora EPEL 7
Version : 0.6.1
Release : 5.el7
URL : http://qpid.apache.org/
Summary : Dispatch router for Qpid
Description :
A lightweight message router, written in C and built on Qpid Proton, that provides flexible and scalable interconnect between AMQP endpoints or between endpoints and brokers.
--------------------------------------------------------------------------------
Update Information:
Updated "Requires".
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qpid-dispatch' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: mlt-6.4.1-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-712b4b609f
2017-02-23 14:52:21.907350
--------------------------------------------------------------------------------
Name : mlt
Product : Fedora EPEL 7
Version : 6.4.1
Release : 4.el7
URL : http://www.mltframework.org/twiki/bin/view/MLT/
Summary : Toolkit for broadcasters, video editors, media players, transcoders
Description :
MLT is an open source multimedia framework, designed and developed for
television broadcasting.
It provides a toolkit for broadcasters, video editors,media players,
transcoders, web streamers and many more types of applications. The
functionality of the system is provided via an assortment of ready to use
tools, xml authoring components, and an extendible plug-in based API.
--------------------------------------------------------------------------------
Update Information:
Better swig handler for el7 support
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mlt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: epel-rpm-macros-7-13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-1861e967a3
2017-02-23 14:52:21.907286
--------------------------------------------------------------------------------
Name : epel-rpm-macros
Product : Fedora EPEL 7
Version : 7
Release : 13
URL : http://download.fedoraproject.org/pub/epel
Summary : Extra Packages for Enterprise Linux RPM macros
Description :
This package contains the Extra Packages for Enterprise Linux (EPEL) RPM
macros for building EPEL packages.
--------------------------------------------------------------------------------
Update Information:
Add vpath macros for use by meson. ---- Override %_pkgdocdir (bug #1392354)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update epel-rpm-macros' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: hypre-2.11.1-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-30fb5f975e
2017-02-23 14:52:21.907124
--------------------------------------------------------------------------------
Name : hypre
Product : Fedora EPEL 7
Version : 2.11.1
Release : 6.el7
URL : http://www.llnl.gov/casc/hypre/
Summary : High performance matrix preconditioners
Description :
Hypre is a set of matrix preconditioning libraries to aid in the
solution of large systems of linear equations.
--------------------------------------------------------------------------------
Update Information:
Conditionalize mpich-devel%{?_isa}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1397192 - mpich-3.0-devel needs to provide mpich-devel%{_isa}
https://bugzilla.redhat.com/show_bug.cgi?id=1397192
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update hypre' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora EPEL 5 Update: openssl101e-1.0.1e-10.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-90b2cbfdaf
2017-02-23 14:52:11.976976
--------------------------------------------------------------------------------
Name : openssl101e
Product : Fedora EPEL 5
Version : 1.0.1e
Release : 10.el5
URL : http://www.openssl.org/
Summary : A general purpose cryptography library with TLS implementation
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.
--------------------------------------------------------------------------------
Update Information:
OpenSSL ======= Security Fixes -------------- * An integer underflow leading
to an out of bounds read flaw was found in OpenSSL. A remote attacker could
possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL
if it used the RC4-MD5 cipher suite. (CVE-2017-3731) * A denial of service
flaw was found in the way the TLS/SSL protocol defined processing of ALERT
packets during a connection handshake. A remote attacker could use this flaw to
make a TLS/SSL server consume an excessive amount of CPU and fail to accept
connections form other clients. (CVE-2016-8610) * The signing function in
crypto/ecdsa/ecdsa_ossl.c in certain OpenSSL versions and forks is vulnerable to
timing attacks when signing with the standardized elliptic curve P-256 despite
featuring constant-time curve operations and modular inversion. A software
defect omits setting the BN_FLG_CONSTTIME flag for nonces, failing to take a
secure code path in the BN_mod_inverse method and therefore resulting in a
cache-timing attack vulnerability. A malicious user with local access can
recover ECDSA P-256 private keys. (CVE-2016-7056)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1384743 - CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1384743
[ 2 ] Bug #1416852 - CVE-2017-3731 openssl: Truncated packet could crash via OOB read
https://bugzilla.redhat.com/show_bug.cgi?id=1416852
[ 3 ] Bug #1412120 - CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery
https://bugzilla.redhat.com/show_bug.cgi?id=1412120
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openssl101e' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: perl-IO-Socket-Multicast-1.12-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-2cda8d0e61
2017-02-22 21:11:01.860940
--------------------------------------------------------------------------------
Name : perl-IO-Socket-Multicast
Product : Fedora EPEL 6
Version : 1.12
Release : 2.el6
URL : http://search.cpan.org/dist/IO-Socket-Multicast/
Summary : Perl library for sending and receiving multicast messages
Description :
The IO::Socket::Multicast module sub-classes IO::Socket::INET to enable you
to manipulate multicast groups. With this module (and an operating system
that supports multicast), you will be able to receive incoming multicast
transmissions and generate your own outgoing multicast packets.
--------------------------------------------------------------------------------
Update Information:
New perl module for el6, el7, f24, f25. Nothing complicated.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1417316 - Review Request: perl-IO-Socket-Multicast - Perl library for sending and receiving multicast messages
https://bugzilla.redhat.com/show_bug.cgi?id=1417316
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-IO-Socket-Multicast' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months