[SECURITY] Fedora EPEL 7 Update: libgit2-0.24.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3d518cd4b9
2017-04-08 21:42:58.523692
--------------------------------------------------------------------------------
Name : libgit2
Product : Fedora EPEL 7
Version : 0.24.6
Release : 1.el7
URL : http://libgit2.github.com/
Summary : C implementation of the Git core methods as a library with a solid API
Description :
libgit2 is a portable, pure C implementation of the Git core methods
provided as a re-entrant linkable library with a solid API, allowing
you to write native speed custom Git applications in any language
with bindings.
--------------------------------------------------------------------------------
Update Information:
Update to 0.24.6, fixing CVE-2016-10128 CVE-2016-10129 CVE-2016-10130
CVE-2017-5338 CVE-2017-5339
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1411857 - CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 libgit2: Two vulnerabilities fixed in libgit 0.25.1 and 0.24.6
https://bugzilla.redhat.com/show_bug.cgi?id=1411857
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libgit2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: python-wikitcms-2.1.11-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-dedfe2ec8f
2017-04-08 21:42:58.523489
--------------------------------------------------------------------------------
Name : python-wikitcms
Product : Fedora EPEL 7
Version : 2.1.11
Release : 1.el7
URL : https://pagure.io/fedora-qa/python-wikitcms
Summary : Fedora QA wiki test management Python library
Description :
python-wikitcms is a library for interacting with Fedora's wiki-based 'test
management' system. It can:
* Create the pages for release validation test events
* Find existing release validation event pages, in various ways
* Report test results
The wiki-based test management system itself is documented at:
https://fedoraproject.org/wiki/Wikitcms
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of python-wikitcms which enhances the content
of Summary pages a bit (they now contain the image download table, and links to
the individual pages).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-wikitcms' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora EPEL 6 Update: tcpreplay-4.2.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-da3e5ef08f
2017-04-08 21:42:48.216348
--------------------------------------------------------------------------------
Name : tcpreplay
Product : Fedora EPEL 6
Version : 4.2.1
Release : 1.el6
URL : http://tcpreplay.appneta.com/
Summary : Replay captured network traffic
Description :
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay
supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep
a tool to pre-process capture files to allow increased performance under
certain conditions as well as capinfo which provides basic information about
capture files.
--------------------------------------------------------------------------------
Update Information:
Here is what is fixed in this release: - Fix reporting of rates < 1Mbps (#348)
- Option --unique-ip not working properly (#346) ---- Features and fixes
include: - MAC rewriting capabilities by Pedro Arthur (#313) - Fix several
issues identified by Coverity (#305) - Packet distortion --fuzz-seed option by
Gabriel Ganne (#302) - Add --unique-ip-loops option to modify IPs every few
loops (#296) - Netmap startup delay increase (#290) - tcpcapinfo buffer overflow
vulnerablily (#278) - Update git-clone instructions by Kyle McDonald (#277) -
Allow fractions for --pps option (#270) - Print per-loop stats with --stats=0
(#269) - Add protection against packet drift by Guillaume Scott (#268) - Print
flow stats periodically with --stats output (#262) - Include Travis-CI build
support by Ilya Shipitsin (#264) (#285) - tcpreplay won't replay all packets in
a pcap file with --netmap (#255) - First and last packet times in --stats
output (#239) - Switch to wire speed after 30 minutes at 6 Gbps (#210) -
tcprewrite fix checksum properly for fragmented packets (#190) ---- Patch
CVE-2017-6429. Tcpcapinfo utility of Tcpreplay has a buffer overflow
vulnerability associated with parsing a crafted pcap file. This occurs in the
src/tcpcapinfo.c file when capture has a packet that is too large to handle.
References: http://seclists.org/bugtraq/2017/Mar/22 Upstream bug:
https://github.com/appneta/tcpreplay/issues/278
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429521 - CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429521
[ 2 ] Bug #1429522 - CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429522
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tcpreplay' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: libglvnd-0.2.999-14.20170308git8e6e102.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-fe81b727ea
2017-04-07 21:23:29.921006
--------------------------------------------------------------------------------
Name : libglvnd
Product : Fedora EPEL 6
Version : 0.2.999
Release : 14.20170308git8e6e102.el6
URL : https://github.com/NVIDIA/libglvnd
Summary : The GL Vendor-Neutral Dispatch library
Description :
libglvnd is an implementation of the vendor-neutral dispatch layer for
arbitrating OpenGL API calls between multiple vendors on a per-screen basis.
--------------------------------------------------------------------------------
Update Information:
* Fix conditionals for _without_mesa_glvnd_default * Fix other RHEL-
conditionals, too * Update RPM filters for private libraries (includes GLX,
fixes RHEL 6). * Update to latest snapshot, remove upstreamed patches. * Update
release to packaging guidelines format. * Make sure that for Fedora 24 and RHEL
the libraries are always private.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libglvnd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: youtube-dl-2017.03.22-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-0c7dda2aa2
2017-04-07 21:23:29.920948
--------------------------------------------------------------------------------
Name : youtube-dl
Product : Fedora EPEL 6
Version : 2017.03.22
Release : 1.el6
URL : https://yt-dl.org
Summary : A small command-line program to download online videos
Description :
Small command-line program to download videos from YouTube and other sites.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424672 - youtube-dl-2017.03.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1424672
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update youtube-dl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: rktime-0.6-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-2f6ee32139
2017-04-07 21:23:29.920888
--------------------------------------------------------------------------------
Name : rktime
Product : Fedora EPEL 6
Version : 0.6
Release : 3.el6
URL : http://people.redhat.com/rkeech/#rktime
Summary : Multi-zone time display utility
Description :
A command-line utility which displays the time
in multiple timezones in an easy-to-read way, using color
to help indicate which locations are currently in business
hours.
--------------------------------------------------------------------------------
Update Information:
A command-line utility which displays the time in multiple timezones in an easy-
to-read way, using color to help indicate which locations are currently in
business hours.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rktime' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: iftop-1.0-0.14.pre4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-68a7d23fc1
2017-04-07 21:23:29.920830
--------------------------------------------------------------------------------
Name : iftop
Product : Fedora EPEL 6
Version : 1.0
Release : 0.14.pre4.el6
URL : http://www.ex-parrot.com/~pdw/iftop/
Summary : Command line tool that displays bandwidth usage on an interface
Description :
iftop does for network usage what top(1) does for CPU usage. It listens to
network traffic on a named interface and displays a table of current bandwidth
usage by pairs of hosts. Handy for answering the question "why is our ADSL link
so slow?".
--------------------------------------------------------------------------------
Update Information:
- Added patch from upstream to fix DNS resolution (#1120254, #1309755)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1120254 - ip6.arpa lookup failure uses previous successful lookup
https://bugzilla.redhat.com/show_bug.cgi?id=1120254
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update iftop' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: uwsgi-2.0.14-11.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-ef0894f343
2017-04-07 21:23:29.920762
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora EPEL 6
Version : 2.0.14
Release : 11.el6
URL : https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
- Add patch7 to add glib-2.0 pkg-config flags to mono build - Filter uwgi
plugins from automatic provides rhbz#1352089
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1352089 - [uwsgi] need to filter auto-provides
https://bugzilla.redhat.com/show_bug.cgi?id=1352089
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update uwsgi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 6 Update: nedit-5.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-e7c7b8d010
2017-04-07 21:23:29.920605
--------------------------------------------------------------------------------
Name : nedit
Product : Fedora EPEL 6
Version : 5.7
Release : 1.el6
URL : http://nedit.org
Summary : A GUI text editor for systems with X
Description :
NEdit is a GUI text editor for the X Window System. NEdit is
very easy to use, especially if you are familiar with the
Macintosh or Microsoft Windows style of interface.
--------------------------------------------------------------------------------
Update Information:
update to 5.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1106275 - nedit: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1106275
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nedit' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora EPEL 7 Update: pylint-1.6.5-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a40f89d2de
2017-04-07 12:23:53.453387
--------------------------------------------------------------------------------
Name : pylint
Product : Fedora EPEL 7
Version : 1.6.5
Release : 4.el7
URL : http://www.pylint.org/
Summary : Analyzes Python code looking for bugs and signs of poor quality
Description :
Pylint is a Python source code analyzer which looks for programming
errors, helps enforcing a coding standard and sniffs for some code
smells (as defined in Martin Fowler's Refactoring book).
Pylint can be seen as another PyChecker since nearly all tests you
can do with PyChecker can also be done with Pylint. However, Pylint
offers some more features, like checking length of lines of code,
checking if variable names are well-formed according to your coding
standard, or checking if declared interfaces are truly implemented,
and much more.
Additionally, it is possible to write plugins to add your own checks.
--------------------------------------------------------------------------------
Update Information:
Provide python major version links (bug #1439070)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439070 - New name for pylint binaries makes it unusable for automatic testing
https://bugzilla.redhat.com/show_bug.cgi?id=1439070
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pylint' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months