[SECURITY] Fedora EPEL 7 Update: clamav-0.99.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-aacf1b47d6
2018-03-13 17:06:05.103146
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 7
Version : 0.99.4
Release : 1.el7
URL : http://www.clamav.net
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It
includes fixes for: - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423
- CVE-2018-1000085 There are also a few bug fixes that were not assigned
CVE���s, but were important enough to address while we had the chance. One of
these was the notorious file descriptor exhaustion bug that caused outages late
last January. In addition to the above, 0.99.4 fixes: - CVE-2018-0202: Two
newly reported vulnerabilities in the PDF parsing code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1549071 - CVE-2018-1000085 clamav: Out-of-bounds heap read in XAR parser [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549071
[ 2 ] Bug #1550747 - clamav-0.99.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1550747
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: js-jsroot-5.4.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-906874ccee
2018-03-13 17:06:05.103122
--------------------------------------------------------------------------------
Name : js-jsroot
Product : Fedora EPEL 7
Version : 5.4.0
Release : 1.el7
URL : https://jsroot.gsi.de/
Summary : JavaScript ROOT - Interactive numerical data analysis graphics
Description :
JavaScript ROOT provides interactive ROOT-like graphics in web browsers.
Data can be read and displayed from binary and JSON ROOT files.
--------------------------------------------------------------------------------
Update Information:
## Changes in 5.4.0 New supported classes: - TDiamond - TArc -
TCurlyLine - TCurlyArc - TCrown New draw options: - "RX" and "RY" for
TGraph to reverse axis - "noopt" for TGraph to disable drawing optimization
- "CPN" for TCanvas to create color palette from N last colors - "line" for
TGraph2D New features: - support LZ4 compression - tooltips and zooming
in TGraphPolar drawings - TPavesText with multiple underlying paves -
implement all fill styles - draw borders for TWbox - draw all objects from
TList/TObjArray as they appear in list of primitives - let enable/disable
highlight of extra objects in geometry viewer - draw axis labels on both
sides when pad.fTick[x/y] > 1 - make drawing of TCanvas with many primitives
smoother - add fOptTitle, fOptLogx/y/z fields in JSROOT.gStyle Behavior
changes: - disable automatic frame adjustment, can be enabled with
"&adjframe" parameter in URL - when drawing TH2/TH3 scatter plots, always
generate same "random" pattern - use barwidth/baroffset parameters in lego
plots Bug fixes: - use same number of points to draw lines and markers on
the TGraph - correctly draw filled TArrow endings - let combine "L" or "C"
TGraph draw option with others - correct positioning of custom axis labels
- correctly toggle lin/log axes in lego plot - let correctly change marker
attributes interactively
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update js-jsroot' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: arc-gui-clients-0.4.6-15.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-4de440f868
2018-03-13 17:06:05.103099
--------------------------------------------------------------------------------
Name : arc-gui-clients
Product : Fedora EPEL 7
Version : 0.4.6
Release : 15.el7
URL : http://sourceforge.net/projects/arc-gui-clients/
Summary : ARC Graphical Clients
Description :
Provides graphical clients to the NorduGrid ARC middleware.
--------------------------------------------------------------------------------
Update Information:
Fix a crash.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548710 - [abrt] arc-gui-clients: QListData::size(): arcstat-ui killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1548710
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update arc-gui-clients' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: beakerlib-1.17-13.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-51cd8bee88
2018-03-13 17:06:05.103075
--------------------------------------------------------------------------------
Name : beakerlib
Product : Fedora EPEL 7
Version : 1.17
Release : 13.el7
URL : https://github.com/beakerlib
Summary : A shell-level integration testing library
Description :
The BeakerLib project means to provide a library of various helpers, which
could be used when writing operating system level integration tests.
--------------------------------------------------------------------------------
Update Information:
rlRun -s now waits for output logs to be flushed, bz1361246 + bz1416796
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update beakerlib' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: caddy-0.10.10-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-4c5d3907c4
2018-03-13 17:06:05.103052
--------------------------------------------------------------------------------
Name : caddy
Product : Fedora EPEL 7
Version : 0.10.10
Release : 4.el7
URL : https://caddyserver.com
Summary : HTTP/2 web server with automatic HTTPS
Description :
Caddy is the HTTP/2 web server with automatic HTTPS. Official Caddy builds
with customized plugins can be downloaded from https://caddyserver.com. This
package is an unofficial build with the following plugins:
http.realip
tls.dns.cloudflare
tls.dns.digitalocean
tls.dns.dyn
tls.dns.gandi
tls.dns.namecheap
tls.dns.powerdns
tls.dns.rackspace
tls.dns.rfc2136
--------------------------------------------------------------------------------
Update Information:
- Change ProtectSystem from strict to full in unit file on RHEL
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update caddy' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: tlp-1.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-012aa3f97e
2018-03-13 17:06:05.103028
--------------------------------------------------------------------------------
Name : tlp
Product : Fedora EPEL 7
Version : 1.1
Release : 1.el7
URL : http://linrunner.de/en/tlp/tlp.html
Summary : Advanced power management tool for Linux
Description :
TLP brings you the benefits of advanced power management for Linux
without the need to understand every technical detail. TLP comes
with a default configuration already optimized for battery life.
Also an optional install of the smartmontools package enables hard
disk SMART data in tlp-stat (smartctl).
--------------------------------------------------------------------------------
Update Information:
Update to 1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538383 - tlp-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1538383
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tlp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: lynis-2.6.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-d7a6cbf9d8
2018-03-13 17:06:05.103003
--------------------------------------------------------------------------------
Name : lynis
Product : Fedora EPEL 7
Version : 2.6.2
Release : 1.el7
URL : https://cisofy.com/lynis/
Summary : Security and system auditing tool
Description :
Lynis is an auditing and hardening tool for Unix/Linux and you might even call
it a compliance tool. It scans the system and installed software. Then it
performs many individual security control checks. It determines the hardening
state of the machine, detects security issues and provides suggestions to
improve the security defense of the system.
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.2 (rhbz #1539272) ---- Update to 2.6.1 (rhbz #1539272)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539272 - lynis-2.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1539272
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lynis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months