[SECURITY] Fedora EPEL 7 Update: redis-3.2.10-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-07d2039ffa
2017-09-04 16:15:25.642641
--------------------------------------------------------------------------------
Name : redis
Product : Fedora EPEL 7
Version : 3.2.10
Release : 2.el7
URL : http://redis.io
Summary : A persistent key-value database
Description :
Redis is an advanced key-value store. It is often referred to as a data
structure server since keys can contain strings, hashes, lists, sets and
sorted sets.
You can run atomic operations on these types, like appending to a string;
incrementing the value in a hash; pushing to a list; computing set
intersection, union and difference; or getting the member with highest
ranking in a sorted set.
In order to achieve its outstanding performance, Redis works with an
in-memory dataset. Depending on your use case, you can persist it either
by dumping the dataset to disk every once in a while, or by appending
each command to a log.
Redis also supports trivial-to-setup master-slave replication, with very
fast non-blocking first synchronization, auto-reconnection on net split
and so forth.
Other features include Transactions, Pub/Sub, Lua scripting, Keys with a
limited time-to-live, and configuration settings to make Redis behave like
a cache.
You can use Redis from most programming languages also.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream Redis, backport packaging fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433968 - Redis 3.2.3 in EPEL 7 has multiple (including critical) security vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1433968
[ 2 ] Bug #1444988 - Redis libexec shutdown script
https://bugzilla.redhat.com/show_bug.cgi?id=1444988
[ 3 ] Bug #1474461 - Redis package does not have a directory for sentinel logrotate
https://bugzilla.redhat.com/show_bug.cgi?id=1474461
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update redis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: perl-Statistics-Descriptive-3.0612-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-308d0de0af
2017-09-04 16:15:25.642579
--------------------------------------------------------------------------------
Name : perl-Statistics-Descriptive
Product : Fedora EPEL 7
Version : 3.0612
Release : 6.el7
URL : http://search.cpan.org/dist/Statistics-Descriptive/
Summary : Perl module of basic descriptive statistical functions
Description :
This module provides basic functions used in descriptive statistics. It has
an object oriented design and supports two different types of data storage
and calculation objects: sparse and full. With the sparse method, none of
the data is stored and only a few statistical measures are available. Using
the full method, the entire data set is retained and additional functions
are available.
--------------------------------------------------------------------------------
Update Information:
Added to EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479090 - perl-Statistics-Descriptive missing in epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1479090
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Statistics-Descriptive' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: php-horde-nag-4.2.16-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a2b2852890
2017-09-04 16:15:25.642521
--------------------------------------------------------------------------------
Name : php-horde-nag
Product : Fedora EPEL 7
Version : 4.2.16
Release : 1.el7
URL : http://www.horde.org/apps/nag
Summary : A web based task list manager
Description :
Nag is a web-based application built upon the Horde Application Framework
which provides a simple, clean interface for managing online task lists
(i.e., todo lists). It also includes strong integration with the other
Horde applications and allows users to share task lists or enable
light-weight project management.
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.16** * [jan] Fix parsing sub-tasks from the quick enter dialog (Bug
#14681). * [jan] Fix positioning of due time drop down list (Bug #12288). *
[jan] Improve compatibilty when synchronizing tasks via CalDAV/ICS (Bug #14057).
* [jan] Fix exporting multiple tags to iCalendar CATEGORIES (Bug #14057). *
[jan] Don't include external tasks into drop down list for parent tasks. * [jan]
Fix redirecting to task list after completing a task (Bug #14678). ---- **nag
4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed
start dates (Bug #14634).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-nag' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 7 Update: dmlite-0.8.8-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-64f66147e6
2017-09-04 16:15:25.641446
--------------------------------------------------------------------------------
Name : dmlite
Product : Fedora EPEL 7
Version : 0.8.8
Release : 1.el7
URL : https://svnweb.cern.ch/trac/lcgdm/wiki/Dpm/Dev/Dmlite
Summary : Lcgdm grid data management and storage framework
Description :
This package provides the dmlite framework that implements common
logic for data management and storage for the Lcg grid.
--------------------------------------------------------------------------------
Update Information:
* new upstream release ---- * new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449040 - Broken postun scriptlet
https://bugzilla.redhat.com/show_bug.cgi?id=1449040
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dmlite' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 6 Update: partclone-0.3.5a-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-dd1fbf8208
2017-09-04 16:15:26.004827
--------------------------------------------------------------------------------
Name : partclone
Product : Fedora EPEL 6
Version : 0.3.5a
Release : 3.el6
URL : http://partclone.org/
Summary : Utility to clone and restore a partition
Description :
Partclone provides utilities to clone and restore used blocks on a partition
and is designed for higher compatibility of the file system by using existing
libraries, e.g. e2fslibs is used to read and write the ext2 partition.
--------------------------------------------------------------------------------
Update Information:
Partclone provides utilities to clone and restore used blocks on a partition and
is designed for higher compatibility of the file system by using existing
libraries, e.g. e2fslibs is used to read and write the ext2 partition.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404895 - Review Request: partclone - File System Clone Utilities
https://bugzilla.redhat.com/show_bug.cgi?id=1404895
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update partclone' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 6 Update: globus-gridftp-server-control-5.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-969e1af8bb
2017-09-04 16:15:26.004713
--------------------------------------------------------------------------------
Name : globus-gridftp-server-control
Product : Fedora EPEL 6
Version : 5.2
Release : 1.el6
URL : http://toolkit.globus.org/
Summary : Globus Toolkit - Globus GridFTP Server Library
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gridftp-server-control package contains:
Globus GridFTP Server Library
--------------------------------------------------------------------------------
Update Information:
Allow 400 responses to stat failures.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gridftp-server-control' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
[SECURITY] Fedora EPEL 6 Update: redis-3.2.10-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-0ad4c424f0
2017-09-04 16:15:26.004652
--------------------------------------------------------------------------------
Name : redis
Product : Fedora EPEL 6
Version : 3.2.10
Release : 2.el6
URL : http://redis.io
Summary : A persistent key-value database
Description :
Redis is an advanced key-value store. It is often referred to as a data
structure server since keys can contain strings, hashes, lists, sets and
sorted sets.
You can run atomic operations on these types, like appending to a string;
incrementing the value in a hash; pushing to a list; computing set
intersection, union and difference; or getting the member with highest
ranking in a sorted set.
In order to achieve its outstanding performance, Redis works with an
in-memory dataset. Depending on your use case, you can persist it either
by dumping the dataset to disk every once in a while, or by appending
each command to a log.
Redis also supports trivial-to-setup master-slave replication, with very
fast non-blocking first synchronization, auto-reconnection on net split
and so forth.
Other features include Transactions, Pub/Sub, Lua scripting, Keys with a
limited time-to-live, and configuration settings to make Redis behave like
a cache.
You can use Redis from most programming languages also.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream Redis and backport packaging fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1140366 - redis EPEL6 version is old
https://bugzilla.redhat.com/show_bug.cgi?id=1140366
[ 2 ] Bug #1123629 - Init script rely on configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1123629
[ 3 ] Bug #909083 - Missing LSB header in redis init script
https://bugzilla.redhat.com/show_bug.cgi?id=909083
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update redis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
[SECURITY] Fedora EPEL 6 Update: firebird-2.5.7.27050.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3f527c60d9
2017-09-04 16:15:26.004578
--------------------------------------------------------------------------------
Name : firebird
Product : Fedora EPEL 6
Version : 2.5.7.27050.0
Release : 1.el6
URL : http://www.firebirdsql.org/
Summary : SQL relational database management system
Description :
This package contains common files between firebird-classic, firebird-superclassic and
firebird-superserver. You will need this if you want to use either one.
--------------------------------------------------------------------------------
Update Information:
update to 2.5.7, Security fix for CVE-2017-6369
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1425330 - CVE-2017-6369 firebird: Access to undesired external modules during 'Restrict' configuration mode
https://bugzilla.redhat.com/show_bug.cgi?id=1425330
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update firebird' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 6 Update: php-horde-nag-4.2.16-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-2a7bc9a153
2017-09-04 16:15:26.004516
--------------------------------------------------------------------------------
Name : php-horde-nag
Product : Fedora EPEL 6
Version : 4.2.16
Release : 1.el6
URL : http://www.horde.org/apps/nag
Summary : A web based task list manager
Description :
Nag is a web-based application built upon the Horde Application Framework
which provides a simple, clean interface for managing online task lists
(i.e., todo lists). It also includes strong integration with the other
Horde applications and allows users to share task lists or enable
light-weight project management.
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.16** * [jan] Fix parsing sub-tasks from the quick enter dialog (Bug
#14681). * [jan] Fix positioning of due time drop down list (Bug #12288). *
[jan] Improve compatibilty when synchronizing tasks via CalDAV/ICS (Bug #14057).
* [jan] Fix exporting multiple tags to iCalendar CATEGORIES (Bug #14057). *
[jan] Don't include external tasks into drop down list for parent tasks. * [jan]
Fix redirecting to task list after completing a task (Bug #14678). ---- **nag
4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed
start dates (Bug #14634).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-nag' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years
Fedora EPEL 6 Update: cmake-fedora-2.9.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-ba8a5d9dc4
2017-09-04 16:15:26.004458
--------------------------------------------------------------------------------
Name : cmake-fedora
Product : Fedora EPEL 6
Version : 2.9.3
Release : 1.el6
URL : https://pagure.io/cmake-fedora/
Summary : CMake helper modules for fedora developers
Description :
cmake-fedora consist a set of cmake modules that provides
helper macros and targets for fedora developers.
--------------------------------------------------------------------------------
Update Information:
- Fixed cmake-fedora-fedpkg failed to push to bodhi. - Target tag_pre now
depends on target module-only. ---- Fixed the cmake-fedora-fedpkg related path
SRPM bug - Bugs: + Fixed RHBZ#1475682 - ChangeLog failed to update after
doing the git reset --hard HEAD ---- Migrate changes like fedorahosted to
pagure. And move from pkgdb to product definition center (PDC). - Enhancement:
+ cmake-fedora-pkgdb new sub-commands: - git-branch package: List the git-
branches of package - newest-nvr: Return NVR of master branch - newest-
changelog: Return the latest ChangeLog in master branch. - Changes: + koji-
build-scratch is now back to use koji build --scratch +
MANAGE_UPLOAD_FEDORAHOSTED is marked as depreciated But MANAGE_UPLOAD_PAGURE
is not implemented yet, as pagure does not support scp upload yet - Bugs:
+ Fixed RHBZ#1424757 - cmake-fedora: failed to handle f26-pending + Fixed
RHBZ#1425263 - cmake-fedora: migrate from fedorahosted to pagure + Fixed
fedpkg --dist depreciate warning
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475682 - ChangeLog failed to update after doing the git reset --hard HEAD
https://bugzilla.redhat.com/show_bug.cgi?id=1475682
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cmake-fedora' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years