Fedora EPEL 7 Update: python-PyMySQL-0.9.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1a1cfa8bb0
2018-10-19 15:41:10.782293
--------------------------------------------------------------------------------
Name : python-PyMySQL
Product : Fedora EPEL 7
Version : 0.9.2
Release : 1.el7
URL : https://pypi.python.org/pypi/PyMySQL/
Summary : Pure-Python MySQL client library
Description :
This package contains a pure-Python MySQL client library. The goal of PyMySQL is
to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython
and Jython.
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1598134 - python-PyMySQL-0.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1598134
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-PyMySQL' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: pam_wrapper-1.0.7-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-dc28341797
2018-10-19 15:41:10.782275
--------------------------------------------------------------------------------
Name : pam_wrapper
Product : Fedora EPEL 7
Version : 1.0.7
Release : 2.el7
URL : http://cwrap.org/
Summary : A tool to test PAM applications and PAM modules
Description :
This component of cwrap allows you to either test your PAM (Linux-PAM
and OpenPAM) application or module.
For testing PAM applications, simple PAM module called pam_matrix is
included. If you plan to test a PAM module you can use the pamtest library,
which simplifies testing of modules. You can combine it with the cmocka
unit testing framework or you can use the provided Python bindings to
write tests for your module in Python.
--------------------------------------------------------------------------------
Update Information:
Fix upgrade path for python-libpamtest ---- Update to version 1.0.7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pam_wrapper' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
[SECURITY] Fedora EPEL 7 Update: php-horde-nag-4.2.19-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-aa0030f9a1
2018-10-19 15:41:10.782207
--------------------------------------------------------------------------------
Name : php-horde-nag
Product : Fedora EPEL 7
Version : 4.2.19
Release : 1.el7
URL : http://www.horde.org/apps/nag
Summary : A web based task list manager
Description :
Nag is a web-based application built upon the Horde Application Framework
which provides a simple, clean interface for managing online task lists
(i.e., todo lists). It also includes strong integration with the other
Horde applications and allows users to share task lists or enable
light-weight project management.
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.19** * [mjr] SECURITY: Fix multiple XSS vulnerabilities when
displaying and filtering task lists.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-nag' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 6 Update: ipv6calc-1.1.0-28.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-a64d5844e7
2018-10-19 14:58:11.473541
--------------------------------------------------------------------------------
Name : ipv6calc
Product : Fedora EPEL 6
Version : 1.1.0
Release : 28.el6
URL : http://www.deepspace6.net/projects/ipv6calc.html
Summary : IPv6 address format change and calculation utility
Description :
ipv6calc is a small utility which formats and calculates IPv4/IPv6 addresses
in different ways.
Install this package, if you want to retrieve information about a particular
IPv4/IPv6/MAC address (-i ADDRESS) or make life easier in adding entries to
reverse IPv6 DNS zones (e.g. -a 2001:db8:1234::1/48).
In addition many format and type conversions are supported, see online help
and/or given URL for more.
Also this package contains additional programs
- ipv6loganon: anonymize Apache web server logs
- ipv6logconv: special Apache web server log converter
(examples included for use with analog)
- ipv6logstats: create statistics from list of IPv4/IPv6 addresses
(examples included for use with gnu-plot)
- mod_ipv6calc: Apache module for anonymization/information logging on-the-fly
Support for following databases
- IP2Location ENABLED
default directory for downloaded db files: /usr/share/IP2Location
(requires also external library on system)
- GeoIP ENABLED
default directory for downloaded db files: /usr/share/GeoIP
(requires also external library on system)
- db-ip.com ENABLED
(once generated database files are found on system)
default directory for generated db files: /usr/share/DBIP
- External ENABLED
default directory for generated db files: /usr/share/ipv6calc/db
Built WITH shared-library
Available rpmbuild rebuild options:
--without ip2location
--without geoip
--without dbip
--without external
--without shared
--without mod_ipv6calc
--------------------------------------------------------------------------------
Update Information:
new release 1.1.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ipv6calc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
[SECURITY] Fedora EPEL 6 Update: php-horde-nag-4.2.19-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-972fa9738c
2018-10-19 14:58:11.473473
--------------------------------------------------------------------------------
Name : php-horde-nag
Product : Fedora EPEL 6
Version : 4.2.19
Release : 1.el6
URL : http://www.horde.org/apps/nag
Summary : A web based task list manager
Description :
Nag is a web-based application built upon the Horde Application Framework
which provides a simple, clean interface for managing online task lists
(i.e., todo lists). It also includes strong integration with the other
Horde applications and allows users to share task lists or enable
light-weight project management.
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.19** * [mjr] SECURITY: Fix multiple XSS vulnerabilities when
displaying and filtering task lists.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-nag' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 7 Update: davix-0.6.9-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-afbca44b01
2018-10-18 04:03:51.319029
--------------------------------------------------------------------------------
Name : davix
Product : Fedora EPEL 7
Version : 0.6.9
Release : 1.el7
URL : http://dmc.web.cern.ch/projects/davix/home
Summary : Toolkit for Http-based file management
Description :
Davix is a toolkit designed for file operations
with Http based protocols (WebDav, Amazon S3, ...).
Davix provides an API and a set of command line tools.
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update davix' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
[SECURITY] Fedora EPEL 7 Update: libmad-0.15.1b-26.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-c906338b6b
2018-10-18 04:03:51.319013
--------------------------------------------------------------------------------
Name : libmad
Product : Fedora EPEL 7
Version : 0.15.1b
Release : 26.el7
URL : http://www.underbit.com/products/mad/
Summary : MPEG audio decoder library
Description :
MAD is a high-quality MPEG audio decoder. It currently supports MPEG-1
and the MPEG-2 extension to Lower Sampling Frequencies, as well as the
so-called MPEG 2.5 format. All three audio layers (Layer I, Layer II,
and Layer III a.k.a. MP3) are fully implemented.
--------------------------------------------------------------------------------
Update Information:
Add patches from Kurt Roeckx
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477498 - CVE-2017-11552 CVE-2018-7263 libmad: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477498
[ 2 ] Bug #1447358 - CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 libmad: Multiple vulnerabilities [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1447358
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmad' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora EPEL 6 Update: davix-0.6.9-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-5eb62e7502
2018-10-18 03:01:30.846002
--------------------------------------------------------------------------------
Name : davix
Product : Fedora EPEL 6
Version : 0.6.9
Release : 1.el6
URL : http://dmc.web.cern.ch/projects/davix/home
Summary : Toolkit for Http-based file management
Description :
Davix is a toolkit designed for file operations
with Http based protocols (WebDav, Amazon S3, ...).
Davix provides an API and a set of command line tools.
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update davix' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
[SECURITY] Fedora EPEL 6 Update: gnutls30-3.5.19-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-83a8fcf606
2018-10-18 03:01:30.845908
--------------------------------------------------------------------------------
Name : gnutls30
Product : Fedora EPEL 6
Version : 3.5.19
Release : 1.el6
URL : https://www.gnutls.org/
Summary : A TLS protocol implementation
Description :
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS
protocols and technologies around them. It provides a simple C language
application programming interface (API) to access the secure communications
protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and
other required structures.
--------------------------------------------------------------------------------
Update Information:
Updated to 3.5.19 ---- Updated to 3.5.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1619524 - CVE-2018-10846 gnutls30: gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1619524
[ 2 ] Bug #1619519 - CVE-2018-10845 gnutls30: gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1619519
[ 3 ] Bug #1619512 - CVE-2018-10844 gnutls30: gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1619512
[ 4 ] Bug #1459797 - CVE-2017-7507 gnutls30: gnutls: Crash upon receiving well-formed status_request extension [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1459797
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gnutls30' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months