[SECURITY] Fedora EPEL 6 Update: tor-0.2.9.14-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-8d7c162c64
2018-01-06 19:16:11.497690
--------------------------------------------------------------------------------
Name : tor
Product : Fedora EPEL 6
Version : 0.2.9.14
Release : 1.el6
URL : https://www.torproject.org
Summary : Anonymizing overlay network for TCP
Description :
The Tor network is a group of volunteer-operated servers that allows people to
improve their privacy and security on the Internet. Tor's users employ this
network by connecting through a series of virtual tunnels rather than making a
direct connection, thus allowing both organizations and individuals to share
information over public networks without compromising their privacy. Along the
same line, Tor is an effective censorship circumvention tool, allowing its
users to reach otherwise blocked destinations or content. Tor can also be used
as a building block for software developers to create new communication tools
with built-in privacy features.
This package contains the Tor software that can act as either a server on the
Tor network, or as a client to connect to the Tor network.
--------------------------------------------------------------------------------
Update Information:
Update to latest LTS release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1520864 - CVE-2017-8819 CVE-2017-8820 CVE-2017-8821 CVE-2017-8822 CVE-2017-8823 tor: Multiple vulnerabilities [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1520864
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tor' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 6 Update: whowatch-1.8.5-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-08f2e1b955
2018-01-06 19:16:11.497364
--------------------------------------------------------------------------------
Name : whowatch
Product : Fedora EPEL 6
Version : 1.8.5
Release : 1.el6
URL : http://wizard.ae.krakow.pl/~mike/
Summary : Display information about users currently logged on
Description :
Whowatch is an interactive who-like program that displays information about the
users currently logged on to the machine, in real time. Besides standard
information (login name, tty, host, user's process), the type of the connection
(ie. telnet or ssh) is shown. You can toggle display between users' command or
idle time. You can watch processes tree, navigate in it and send INT and KILL
signals.
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL 6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update whowatch' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora EPEL 7 Update: global-6.5.6-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3970cc8703
2018-01-06 19:16:12.398402
--------------------------------------------------------------------------------
Name : global
Product : Fedora EPEL 7
Version : 6.5.6
Release : 3.el7
URL : http://www.gnu.org/software/global
Summary : Source code tag system
Description :
GNU GLOBAL is a source code tag system that works the same way across
diverse environments. It supports C, C++, Yacc, Java, PHP and
assembler source code.
--------------------------------------------------------------------------------
Update Information:
Security fix for [PUT CVEs HERE]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528415 - CVE-2017-17531 global: Command injection in gozilla.c
https://bugzilla.redhat.com/show_bug.cgi?id=1528415
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update global' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora EPEL 7 Update: thunderbird-enigmail-1.9.9-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-c3fbd2a463
2018-01-06 19:16:12.398352
--------------------------------------------------------------------------------
Name : thunderbird-enigmail
Product : Fedora EPEL 7
Version : 1.9.9
Release : 1.el7
URL : http://enigmail.net/
Summary : Authentication and encryption extension for Mozilla Thunderbird
Description :
Enigmail is an extension to the mail client Mozilla Thunderbird
which allows users to access the authentication and encryption
features provided by GnuPG
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.9. This release addresses security vulnerabilities discovered by
Cure53. Details can be found in the Security Audit Report: https://enigmail.net/
download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528404 - thunderbird-enigmail: Multiple flaws fixed in 1.9.9 [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1528404
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update thunderbird-enigmail' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: wine-2.0.3-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-ee6a84f29c
2018-01-06 19:16:12.398179
--------------------------------------------------------------------------------
Name : wine
Product : Fedora EPEL 7
Version : 2.0.3
Release : 2.el7
URL : http://www.winehq.org/
Summary : A compatibility layer for windows applications
Description :
Wine as a compatibility layer for UNIX to run Windows applications. This
package includes a program loader, which allows unmodified Windows
3.x/9x/NT binaries to run on x86 and x86_64 Unixes. Wine can use native system
.dll files if they are available.
In Fedora wine is a meta-package which will install everything needed for wine
to work smoothly. Smaller setups can be achieved by installing some of the
wine-* sub packages.
--------------------------------------------------------------------------------
Update Information:
Update EPEL 7 from 1.8 branch to 2.0 branch.
https://www.winehq.org/announce/2.0.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1527942 - Wine desktop icons missing
https://bugzilla.redhat.com/show_bug.cgi?id=1527942
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wine' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 6 Update: R-3.4.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3e43d7395c
2018-01-05 13:35:21.411323
--------------------------------------------------------------------------------
Name : R
Product : Fedora EPEL 6
Version : 3.4.3
Release : 1.el6
URL : http://www.r-project.org
Summary : A language for data analysis and graphics
Description :
This is a metapackage that provides both core R userspace and
all R development components.
R is a language and environment for statistical computing and graphics.
R is similar to the award-winning S system, which was developed at
Bell Laboratories by John Chambers et al. It provides a wide
variety of statistical and graphical techniques (linear and
nonlinear modelling, statistical tests, time series analysis,
classification, clustering, ...).
R is designed as a true computer language with control-flow
constructions for iteration and alternation, and it allows users to
add additional functionality by defining new functions. For
computationally intensive tasks, C, C++ and Fortran code can be linked
and called at run time.
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.3, rebuild rpy and rkward to match.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: suricata-4.0.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-59fec64807
2018-01-05 12:01:07.695142
--------------------------------------------------------------------------------
Name : suricata
Product : Fedora EPEL 7
Version : 4.0.3
Release : 1.el7
URL : http://suricata-ids.org/
Summary : Intrusion Detection System
Description :
The Suricata Engine is an Open Source Next Generation Intrusion
Detection and Prevention Engine. This engine is not intended to
just replace or emulate the existing tools in the industry, but
will bring new ideas and technologies to the field. This new Engine
supports Multi-threading, Automatic Protocol Detection (IP, TCP,
UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP
Matching, and GeoIP identification.
--------------------------------------------------------------------------------
Update Information:
Initial release 4.x series for epel ---- Upstream bugfix release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update suricata' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: R-3.4.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-cbd9d53432
2018-01-05 12:01:07.695071
--------------------------------------------------------------------------------
Name : R
Product : Fedora EPEL 7
Version : 3.4.3
Release : 1.el7
URL : http://www.r-project.org
Summary : A language for data analysis and graphics
Description :
This is a metapackage that provides both core R userspace and
all R development components.
R is a language and environment for statistical computing and graphics.
R is similar to the award-winning S system, which was developed at
Bell Laboratories by John Chambers et al. It provides a wide
variety of statistical and graphical techniques (linear and
nonlinear modelling, statistical tests, time series analysis,
classification, clustering, ...).
R is designed as a true computer language with control-flow
constructions for iteration and alternation, and it allows users to
add additional functionality by defining new functions. For
computationally intensive tasks, C, C++ and Fortran code can be linked
and called at run time.
--------------------------------------------------------------------------------
Update Information:
R 3.4.3.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: module-build-service-1.5.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-54fa0115be
2018-01-05 12:01:07.694784
--------------------------------------------------------------------------------
Name : module-build-service
Product : Fedora EPEL 7
Version : 1.5.2
Release : 1.el7
URL : https://pagure.io/fm-orchestrator
Summary : The Module Build Service for Modularity
Description :
The Module Build Service (MBS) coordinates module builds and is responsible
for a number of tasks:
- Providing an interface for module client-side tooling via which module build
submission and build state queries are possible.
- Verifying the input data (modulemd, RPM SPEC files and others) is available
and correct.
- Preparing the build environment in the supported build systems, such as koji.
- Scheduling and building of the module components and tracking the build
state.
- Emitting bus messages about all state changes so that other infrastructure
services can pick up the work.
--------------------------------------------------------------------------------
Update Information:
Changes: * Schedule components based on the weight in Koji (takes into account
all arches) instead of build duration * Support git+https:// git URLs * Honor
custom RPM %_sourcedir (local builds) * Fix filtering component builds by state
name (component-builds API) * Fix "instant complete" builds * Allow filtering on
all table columns * Return a friendly error when the 'id' is provided as a query
parameter * Print a deprecation error when a user tries to use mbs-build * Don't
try to untag stale module builds that don't have any completed components *
Copr: install modules into the buildroot
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update module-build-service' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora EPEL 7 Update: python-mistune-0.8.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-263dafc1ae
2018-01-04 16:01:49.733625
--------------------------------------------------------------------------------
Name : python-mistune
Product : Fedora EPEL 7
Version : 0.8.3
Release : 1.el7
URL : https://github.com/lepture/mistune
Summary : Markdown parser for Python
Description :
The fastest markdown parser in pure Python, inspired by marked.
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.3, fixing CVE-2017-15612 and CVE-2017-16876
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432271 - python-mistune-v0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432271
[ 2 ] Bug #1524595 - CVE-2017-16876 python-mistune: Cross-site-scripting [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1524595
[ 3 ] Bug #1505311 - CVE-2017-15612 python-mistune: XSS via an unexpected newline / crafted email address [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1505311
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-mistune' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months