Fedora EPEL 7 Update: s3fs-fuse-1.84-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-9a65bf65cb
2018-10-31 13:56:49.107566
--------------------------------------------------------------------------------
Name : s3fs-fuse
Product : Fedora EPEL 7
Version : 1.84
Release : 3.el7
URL : https://github.com/s3fs-fuse/s3fs-fuse
Summary : FUSE-based file system backed by Amazon S3
Description :
s3fs is a FUSE file system that allows you to mount an Amazon S3 bucket as a
local file system. It stores files natively and transparently in S3 (i.e.,
you can use other programs to access the same files). Maximum file size=64GB
(limited by s3fs, not Amazon).
s3fs is stable and is being used in number of production environments, e.g.,
rsync backup to s3.
--------------------------------------------------------------------------------
Update Information:
Require fuse package on runtime to allow mounting with systemd, mount command or
/etc/fstab (#1637669)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637669 - s3fs unable to mount volumes via mount or systemd unless fuse package is installed
https://bugzilla.redhat.com/show_bug.cgi?id=1637669
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update s3fs-fuse' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: mosquitto-1.5.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-aa66b877bb
2018-10-31 13:56:49.107549
--------------------------------------------------------------------------------
Name : mosquitto
Product : Fedora EPEL 7
Version : 1.5.3
Release : 1.el7
URL : http://mosquitto.org/
Summary : An Open Source MQTT v3.1/v3.1.1 Broker
Description :
Mosquitto is an open source message broker that implements the MQ Telemetry
Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method
of carrying out messaging using a publish/subscribe model. This makes it
suitable for "machine to machine" messaging such as with low power sensors
or mobile devices such as phones, embedded computers or micro-controllers
like the Arduino.
--------------------------------------------------------------------------------
Update Information:
Release 1.5.3 Security: * Fix CVE-2018-12543. If a message is sent to
Mosquitto with a topic that begins with $, but is not $SYS, then an assert that
should be unreachable is triggered and Mosquitto will exit. Broker: * Elevate
log level to warning for situation when socket limit is hit. * Remove
requirement to use `user root` in snap package config files. * Fix retained
messages not sent by bridges on outgoing topics at the first connection. *
Documentation fixes. * Fix duplicate clients being added to by_id hash before
the old client was removed. * Fix Windows version not starting if include_dir
did not contain any files. Build: * Various fixes to ease building. Further
details here: http://mosquitto.org/ChangeLog.txt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1588904 - CVE-2017-7654 mosquitto: Memory leak allows unauthenticated clients to send crafted CONNECT packets causing a denial of service [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1588904
[ 2 ] Bug #1588901 - CVE-2017-7653 mosquitto: Improper handling of UTF-8 strings allows malicious clients to cause other clients to disconnect [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1588901
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mosquitto' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: libuv-1.23.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-d797366c77
2018-10-31 13:56:49.107517
--------------------------------------------------------------------------------
Name : libuv
Product : Fedora EPEL 7
Version : 1.23.2
Release : 1.el7
URL : http://libuv.org/
Summary : Platform layer for node.js
Description :
libuv is a new platform layer for Node. Its purpose is to abstract IOCP on
Windows and libev on Unix systems. We intend to eventually contain all platform
differences in this library.
--------------------------------------------------------------------------------
Update Information:
Update to the latest libuv 1.23.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libuv' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: knot-2.6.9-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-79d6867298
2018-10-31 13:56:49.107503
--------------------------------------------------------------------------------
Name : knot
Product : Fedora EPEL 7
Version : 2.6.9
Release : 2.el7
URL : http://www.knot-dns.cz
Summary : High-performance authoritative DNS server
Description :
Knot DNS is a high-performance authoritative DNS server implementation.
--------------------------------------------------------------------------------
Update Information:
Knot DNS 2.6.9 (2018-08-14) =========================== Improvements:
------------- - Added zone wire size to zone loading log message - Added debug
log message for each unsuccessful remote address operation Bugfixes: ---------
- Zone not flushed after re-signing during zone load #594 - Server crashes when
committing empty zone transaction - Incoming IXFR with on-slave signing
sometimes leads to memory corruption #595
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update knot' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: purple-facebook-0.9.5-11.9ff9acf9fa14.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-01af2ad74b
2018-10-31 13:56:49.107489
--------------------------------------------------------------------------------
Name : purple-facebook
Product : Fedora EPEL 7
Version : 0.9.5
Release : 11.9ff9acf9fa14.el7
URL : https://github.com/dequis/purple-facebook
Summary : Facebook protocol plugin for purple2
Description :
Purple Facebook implements the Facebook Messenger protocol for pidgin,
finch, and libpurple. While the primary implementation is for purple3,
this plugin is back-ported for purple2.
This project is not affiliated with Facebook, Inc.
--------------------------------------------------------------------------------
Update Information:
- Backported upstream patch for Facebook Work Chat. - Backported pull-request
adding an option to show inactive friends as away. - Backported pull-request
fixing compiler warnings. - Add disclaimer to %description. - Optimize
sortability of patches. - Refactor patches for smooth alignment.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update purple-facebook' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: libbson-1.3.5-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-bc87c43cdd
2018-10-31 13:56:49.107475
--------------------------------------------------------------------------------
Name : libbson
Product : Fedora EPEL 7
Version : 1.3.5
Release : 6.el7
URL : https://github.com/mongodb/libbson
Summary : Building, parsing, and iterating BSON documents
Description :
This is a library providing useful routines related to building, parsing,
and iterating BSON documents <http://bsonspec.org/>.
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap-based buffer over-read when parsing a mallformed BSON
document (CVE-2018-16790).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1627923 - CVE-2018-16790 libbson: Heap-based buffer over-read in _bson_iter_next_internal in bson-iter.c
https://bugzilla.redhat.com/show_bug.cgi?id=1627923
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libbson' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: roca-detect-1.2.12-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-68039ba023
2018-10-31 13:56:49.107457
--------------------------------------------------------------------------------
Name : roca-detect
Product : Fedora EPEL 7
Version : 1.2.12
Release : 4.el7
URL : https://crocs.fi.muni.cz/public/papers/rsa_ccs17
Summary : Key fingerprinting tools for CVE-2017-15361
Description :
This tool is related to the ACM CCS 2017 conference paper #124 Return of the
Coppersmith���s Attack: Practical Factorization of Widely Used RSA
Moduli.
https://crocs.fi.muni.cz/public/papers/rsa_ccs17
Install this to test public RSA keys for the presence of the vulnerability
described by CVE-2017-15361.
--------------------------------------------------------------------------------
Update Information:
This is a somewhat belated new package that checks RSA keys for the known
vulnerability described in CVE-2017-15361. RSA key generators *should* be
checking for this automatically by now, but this lets you make sure.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1503915 - Review Request: roca-detect - test RSA public keys for ROCA vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1503915
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update roca-detect' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: exim-4.91-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-7e345c64c3
2018-10-31 13:56:49.107390
--------------------------------------------------------------------------------
Name : exim
Product : Fedora EPEL 7
Version : 4.91
Release : 1.el7
URL : http://www.exim.org/
Summary : The exim mail transfer agent
Description :
Exim is a message transfer agent (MTA) developed at the University of
Cambridge for use on Unix systems connected to the Internet. It is
freely available under the terms of the GNU General Public Licence. In
style it is similar to Smail 3, but its facilities are more
general. There is a great deal of flexibility in the way mail can be
routed, and there are extensive facilities for checking incoming
mail. Exim can be installed in place of sendmail, although the
configuration of exim is quite different to that of sendmail.
--------------------------------------------------------------------------------
Update Information:
This is new version of exim fixing many bugs, for list see upstream changelog.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1615158 - Exim TLS error
https://bugzilla.redhat.com/show_bug.cgi?id=1615158
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update exim' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: zstd-1.3.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-130a37bb85
2018-10-28 20:15:19.590328
--------------------------------------------------------------------------------
Name : zstd
Product : Fedora EPEL 7
Version : 1.3.6
Release : 1.el7
URL : https://github.com/facebook/zstd
Summary : Zstd compression library
Description :
Zstd, short for Zstandard, is a fast lossless compression algorithm,
targeting real-time compression scenarios at zlib-level compression ratio.
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zstd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 6 Update: zstd-1.3.6-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-077809f366
2018-10-28 19:37:49.387446
--------------------------------------------------------------------------------
Name : zstd
Product : Fedora EPEL 6
Version : 1.3.6
Release : 1.el6
URL : https://github.com/facebook/zstd
Summary : Zstd compression library
Description :
Zstd, short for Zstandard, is a fast lossless compression algorithm,
targeting real-time compression scenarios at zlib-level compression ratio.
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zstd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months