[SECURITY] Fedora EPEL 6 Update: icecast-2.4.4-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-018b328024
2018-11-24 00:35:33.186837
--------------------------------------------------------------------------------
Name : icecast
Product : Fedora EPEL 6
Version : 2.4.4
Release : 1.el6
URL : http://www.icecast.org/
Summary : ShoutCast compatible streaming media server
Description :
Icecast is a streaming media server which currently supports
Ogg Vorbis and MP3 audio streams. It can be used to create an
Internet radio station or a privately running jukebox and many
things in between. It is very versatile in that new formats
can be added relatively easily and supports open standards for
communication and interaction.
--------------------------------------------------------------------------------
Update Information:
This release fixes buffer overflows in URL authentication code (CVE-2018-18820),
a crash in htpasswd authentication if no filename is set, a crash on
xsltApplyStylesheet() error, and a crash on malformed Opus streams. It also
corrects global listener counter. It stops displaying hashed user passwords for
security concerns. It adds support for announcing Opus streams to YP catalogs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646721 - CVE-2018-18820 icecast: buffer overflow in URL auth code
https://bugzilla.redhat.com/show_bug.cgi?id=1646721
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update icecast' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 6 Update: php-phpseclib-2.0.12-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-45d6ced59f
2018-11-22 05:45:27.332616
--------------------------------------------------------------------------------
Name : php-phpseclib
Product : Fedora EPEL 6
Version : 2.0.12
Release : 1.el6
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.12** - 2018-11-04 - SSH2: fixes relating to delayed global
requests (#1271) - SSH2: setEngine -> setPreferredEngine (#1294) - SSH2: reset
$this->bitmap when the connection fails (#1298) - SSH2: add ping() method
(#1298) - SSH2: add support for rsa-sha2-256 / rsa-sha2-512 (RFC8332) - SFTP:
make rawlist give same result regardless of stat cache (#1287) - Hash: save
hashed keys for re-use
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-phpseclib' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: mingw-SDL2_image-2.0.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-df2d5af2fe
2018-11-22 00:50:09.823211
--------------------------------------------------------------------------------
Name : mingw-SDL2_image
Product : Fedora EPEL 7
Version : 2.0.4
Release : 1.el7
URL : http://www.libSDL.org/projects/SDL_image/
Summary : MinGW Windows port of the Image loading library for SDL2
Description :
Simple DirectMedia Layer (SDL2) is a cross-platform multimedia library
designed to provide fast access to the graphics frame buffer and audio
device. This package contains a simple library for loading images of
various formats (BMP, PPM, PCX, GIF, JPEG, PNG) as SDL2 surfaces.
--------------------------------------------------------------------------------
Update Information:
mingw-SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a
number of security issues.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling
https://bugzilla.redhat.com/show_bug.cgi?id=1500450
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-SDL2_image' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: mingw-SDL2_mixer-2.0.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-df2d5af2fe
2018-11-22 00:50:09.823211
--------------------------------------------------------------------------------
Name : mingw-SDL2_mixer
Product : Fedora EPEL 7
Version : 2.0.4
Release : 1.el7
URL : http://www.libSDL.org/projects/SDL_mixer/
Summary : MinGW Windows port of Simple DirectMedia Layer's Sample Mixer Library
Description :
A simple multi-channel audio mixer for SDL2. It supports 4 channels of
16 bit stereo audio, plus a single channel of music, mixed by the popular
MikMod MOD library.
--------------------------------------------------------------------------------
Update Information:
mingw-SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a
number of security issues.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling
https://bugzilla.redhat.com/show_bug.cgi?id=1500450
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-SDL2_mixer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: mingw-SDL2-2.0.9-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-df2d5af2fe
2018-11-22 00:50:09.823211
--------------------------------------------------------------------------------
Name : mingw-SDL2
Product : Fedora EPEL 7
Version : 2.0.9
Release : 1.el7
URL : http://www.libsdl.org/
Summary : MinGW Windows port of SDL2 cross-platform multimedia library
Description :
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library
designed to provide fast access to the graphics frame buffer and audio
device.
--------------------------------------------------------------------------------
Update Information:
mingw-SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a
number of security issues.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling
https://bugzilla.redhat.com/show_bug.cgi?id=1500450
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-SDL2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: SDL2_image-2.0.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-be918c58c6
2018-11-22 00:50:09.823198
--------------------------------------------------------------------------------
Name : SDL2_image
Product : Fedora EPEL 7
Version : 2.0.4
Release : 1.el7
URL : http://www.libsdl.org/projects/SDL_image/
Summary : Image loading library for SDL
Description :
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library
designed to provide fast access to the graphics frame buffer and audio
device. This package contains a simple library for loading images of
various formats (BMP, PPM, PCX, GIF, JPEG, PNG) as SDL surfaces.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-3977
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1646575
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update SDL2_image' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: php-phpseclib-2.0.12-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-8e43b4a888
2018-11-22 00:50:09.823090
--------------------------------------------------------------------------------
Name : php-phpseclib
Product : Fedora EPEL 7
Version : 2.0.12
Release : 1.el7
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.12** - 2018-11-04 - SSH2: fixes relating to delayed global
requests (#1271) - SSH2: setEngine -> setPreferredEngine (#1294) - SSH2: reset
$this->bitmap when the connection fails (#1298) - SSH2: add ping() method
(#1298) - SSH2: add support for rsa-sha2-256 / rsa-sha2-512 (RFC8332) - SFTP:
make rawlist give same result regardless of stat cache (#1287) - Hash: save
hashed keys for re-use
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-phpseclib' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: mkvtoolnix-28.2.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-cbfa290941
2018-11-21 00:42:59.085094
--------------------------------------------------------------------------------
Name : mkvtoolnix
Product : Fedora EPEL 7
Version : 28.2.0
Release : 1.el7
URL : https://mkvtoolnix.download/
Summary : Matroska container manipulation utilities
Description :
Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle
streams into and from Matroska containers.
--------------------------------------------------------------------------------
Update Information:
# Version 28.2.0 "The Awakening" 2018-10-25 ## Bug fixes * mkvmerge, mkvinfo,
mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a
case of memory being accessed after it had been freed earlier. This can be
triggered by specially crafted Matroska files and lead to arbitrary code
execution. The vulnerability was reported as Cisco TALOS 2018-0694 on
2018-10-25. # Version 28.1.0 "Morning Child" 2018-10-23 ## Bug fixes *
mkvmerge: AV1 parser: fixed an error in the sequence header parser if neither
the `reduced_still_picture_header` nor the `frame_id_numbers_present_flag` is
set. Part of the fix for #2410. * mkvmerge: AV1 parser: when creating the `av1C`
structure for the Codec Private element the sequence header OBU wasn't copied
completely: its common data (type field & OBU size among others) was missing.
Part of the fix for #2410. * mkvmerge: Matroska reader, AV1: mkvmerge will try
to re-create the `av1C` data stored in Codec Private when reading AV1 from
Matroska or WebM files created by mkvmerge v28.0.0. Part of the fix for #2410. *
MKVToolNix GUI: info tool: the tool will no longer stop scanning elements when
an EBML Void element is found after the first Cluster element. Fixes #2413. #
Version 28.0.0 "Voice In My Head" 2018-10-20 ## New features and enhancements
* mkvmerge: AV1 parser: updated the code for the finalized AV1 bitstream
specification. Part of the implementation of #2261. * mkvmerge: AV1 packetizer:
updated the code for the finalized AV1-in-Matroska & WebM mapping specification.
Part of the implementation of #2261. * mkvmerge: AV1 support: the `--engage
enable_av1` option has been removed again. Part of the implementation of #2261.
* mkvmerge: MP4 reader: added support for AV1. Part of the implementation of
#2261. * mkvmerge: DTS: implemented dialog normalization gain removal for
extension substreams. Implements #2377. * mkvmerge, mkvextract: simple text
subtitles: added a workaround for simple text subtitle tracks that don't contain
a duration. Implements #2397. * mkvextract: added support for extracting AV1 to
IVF. Part of the implementation of #2261. * mkvextract: IVF extractor (AV1, VP8,
VP9): precise values will be used for the frame rate numerator & denominator
header fields for certain well-known values of the track's default duration. *
mkvmerge: VP9: mkvmerge will now create codec private data according to the VP9
codec mapping described in the WebM specifications. Implements #2379. *
MKVToolNix GUI: automatic scaling for high DPI displays is activated if the GUI
is compiled with Qt ��� 5.6.0. Fixes #1996 and #2383. * MKVToolNix GUI: added a
menu item ("Help" ��� "System information") for displaying information about the
system MKVToolNix is running on in order to make debugging easier. * MKVToolNix
GUI: multiplexer, header editor: the user can enter a list of predefined track
names in the preferences. She can later select from them in "track name" combo
box. Implements #2230. ## Bug fixes * mkvmerge: JSON identification: fixed a
bug when removing invalid UTF-8 data from strings before they're output as JSON.
Fixes #2398. * mkvmerge: MP4/QuickTime reader: fixed handling of PCM audio with
FourCC `in24`. Fixes #2391. * mkvmerge: MPEG transport stream reader, teletext
subtitles: the decision whether or not to keep frames around in order to
potentially merge them with the following frame is made sooner. That avoids
problems if there are large gaps between teletext subtitle frames which could
lead to frames being interleaved too late. Fixes #2393. * mkvextract: IVF
extractor (AV1, VP8, VP8): the frame rate header fields weren't clamped to 16
bits properly causing wrong frame rates to be written in certain situations. *
mkvpropedit, MKVToolNix GUI's header editor: fixed file corruption when a one-
byte space must be covered with a new EBML void element but all surrounding
elements have a "size length" field that's eight bytes long already. Fixes
#2406.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644258 - CVE-2018-4022 mkvtoolnix: MKVINFO read_one_element code execution vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1644258
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mkvtoolnix' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: percolator-3.02.01-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-c1d80487c7
2018-11-21 00:42:59.085083
--------------------------------------------------------------------------------
Name : percolator
Product : Fedora EPEL 7
Version : 3.02.01
Release : 1.el7
URL : https://github.com/percolator/percolator
Summary : Software for postprocessing of shotgun proteomics data
Description :
The first step in analyzing an mass spectrometry assay is to match
the harvested spectra against a target database
using database search engines such as Sequest and Mascot,
a process that renders list of peptide-spectrum matches.
However, it is not trivial to assess the accuracy
of these identifications.
Percolator uses a semi-supervised machine learning to
discriminate correct from incorrect peptide-spectrum matches,
and calculates accurate statistics such as q-value (FDR)
and posterior error probabilities.
--------------------------------------------------------------------------------
Update Information:
- Update to 3.02.01
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update percolator' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: xsd-4.0.0-25.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-aa9c7b8fb0
2018-11-21 00:42:59.085072
--------------------------------------------------------------------------------
Name : xsd
Product : Fedora EPEL 7
Version : 4.0.0
Release : 25.el7
URL : http://www.codesynthesis.com/products/xsd/
Summary : W3C XML schema to C++ data binding compiler
Description :
CodeSynthesis XSD is an open-source, cross-platform W3C XML Schema to
C++ data binding compiler. Provided with an XML instance specification
(XML Schema), it generates C++ classes that represent the given
vocabulary as well as parsing and serialization code.
You can then access the data stored in XML using types and functions
that semantically correspond to your application domain rather than
dealing with intricacies of reading and writing XML.
--------------------------------------------------------------------------------
Update Information:
- New rebuilds
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xsd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months