[SECURITY] Fedora EPEL 7 Update: freexl-1.0.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-9111777f91
2018-03-13 17:06:05.102959
--------------------------------------------------------------------------------
Name : freexl
Product : Fedora EPEL 7
Version : 1.0.5
Release : 1.el7
URL : http://www.gaia-gis.it/FreeXL
Summary : Library to extract data from within an Excel spreadsheet
Description :
FreeXL is a library to extract valid data
from within an Excel spreadsheet (.xls)
Design goals:
* simple and lightweight
* stable, robust and efficient
* easily and universally portable
* completely ignore any GUI-related oddity
--------------------------------------------------------------------------------
Update Information:
Fixes several heap-buffer-overflows, see related Bugzilla tickets!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1547892 - heap-buffer-overflow in freexl.c:3912 read_mini_biff_next_record of FreeXL 1.0.4
https://bugzilla.redhat.com/show_bug.cgi?id=1547892
[ 2 ] Bug #1547889 - heap-buffer-overflow in freexl.c:383 parse_unicode_string of FreeXL 1.0.4
https://bugzilla.redhat.com/show_bug.cgi?id=1547889
[ 3 ] Bug #1547885 - heap-buffer-overflow in freexl.c:1866 parse_SST of FreeXL 1.0.4
https://bugzilla.redhat.com/show_bug.cgi?id=1547885
[ 4 ] Bug #1547883 - heap-buffer-overflow in freexl.c:1805 parse_SST parse_SST
https://bugzilla.redhat.com/show_bug.cgi?id=1547883
[ 5 ] Bug #1547879 - heap-buffer-overflow in freexl::destroy_cell of FreeXL 1.0.4
https://bugzilla.redhat.com/show_bug.cgi?id=1547879
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update freexl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: python-toml-0.9.4-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-13d8b1e6c1
2018-03-13 17:06:05.102854
--------------------------------------------------------------------------------
Name : python-toml
Product : Fedora EPEL 7
Version : 0.9.4
Release : 3.el7
URL : https://pypi.python.org/pypi/toml
Summary : Python Library for Tom's Obvious, Minimal Language
Description :
TOML aims to be a minimal configuration file format that's easy to read due to
obvious semantics. TOML is designed to map unambiguously to a hash table. TOML
should be easy to parse into data structures in a wide variety of languages.
This package loads toml file into python dictionary and dump dictionary into
toml file.
--------------------------------------------------------------------------------
Update Information:
Make changes to build the package for EPEL
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-toml' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: GMT-5.4.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-0c8e266959
2018-03-13 17:06:05.102830
--------------------------------------------------------------------------------
Name : GMT
Product : Fedora EPEL 7
Version : 5.4.3
Release : 1.el7
URL : http://gmt.soest.hawaii.edu/
Summary : Generic Mapping Tools
Description :
GMT is an open source collection of ~60 tools for manipulating geographic and
Cartesian data sets (including filtering, trend fitting, gridding, projecting,
etc.) and producing Encapsulated PostScript File (EPS) illustrations ranging
from simple x-y plots via contour maps to artificially illuminated surfaces
and 3-D perspective views. GMT supports ~30 map projections and transforma-
tions and comes with support data such as coastlines, rivers, and political
boundaries.
GMT is developed and maintained by Paul Wessel and Walter H. F. Smith with
help from a global set of volunteers, and is supported by the National
Science Foundation.
NOTE: Specific executables that conflict with other Fedora packages have been
removed. These functions can still be accessed via the GMT wrapper script
with: GMT <function> [args]
--------------------------------------------------------------------------------
Update Information:
- Update to 5.4.3 - Fix GSHHG_ROOT (bug #1545256)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1545256 - gmt cannot find gshhg files
https://bugzilla.redhat.com/show_bug.cgi?id=1545256
[ 2 ] Bug #1449426 - GMT-5.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1449426
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update GMT' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora EPEL 6 Update: clamav-0.99.4-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-7e91105260
2018-03-13 17:08:29.841571
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 6
Version : 0.99.4
Release : 1.el6
URL : http://www.clamav.net/
Summary : Anti-virus software
Description :
Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of
this software is the integration with mail servers (attachment scanning).
The package provides a flexible and scalable multi-threaded daemon, a
command line scanner, and a tool for automatic updating via Internet.
The programs are based on a shared library distributed with the Clam
AntiVirus package, which you can use with your own software. Most
importantly, the virus database is kept up to date
--------------------------------------------------------------------------------
Update Information:
Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It
includes fixes for: - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423
- CVE-2018-1000085 There are also a few bug fixes that were not assigned
CVE���s, but were important enough to address while we had the chance. One of
these was the notorious file descriptor exhaustion bug that caused outages late
last January. In addition to the above, 0.99.4 fixes: - CVE-2018-0202: Two
newly reported vulnerabilities in the PDF parsing code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1549071 - CVE-2018-1000085 clamav: Out-of-bounds heap read in XAR parser [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549071
[ 2 ] Bug #1550747 - clamav-0.99.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1550747
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 6 Update: arc-gui-clients-0.4.6-15.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-d4e57b5eb0
2018-03-13 17:08:29.841548
--------------------------------------------------------------------------------
Name : arc-gui-clients
Product : Fedora EPEL 6
Version : 0.4.6
Release : 15.el6
URL : http://sourceforge.net/projects/arc-gui-clients/
Summary : ARC Graphical Clients
Description :
Provides graphical clients to the NorduGrid ARC middleware.
--------------------------------------------------------------------------------
Update Information:
Fix a crash.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548710 - [abrt] arc-gui-clients: QListData::size(): arcstat-ui killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1548710
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update arc-gui-clients' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora EPEL 7 Update: mingw-wavpack-5.1.0-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-0296296d7c
2018-03-13 17:06:05.102806
--------------------------------------------------------------------------------
Name : mingw-wavpack
Product : Fedora EPEL 7
Version : 5.1.0
Release : 4.el7
URL : http://www.wavpack.com/
Summary : Completely open audiocodec
Description :
WavPack is a completely open audio compression format providing lossless,
high-quality lossy, and a unique hybrid compression mode. Although the
technology is loosely based on previous versions of WavPack, the new
version 4 format has been designed from the ground up to offer unparalleled
performance and functionality.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-6767, CVE-2018-7253, and CVE-2018-7254
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1547735 - CVE-2018-7254 wavpack: Global buffer over-read in ParseCaffHeaderConfig function in cli/caff.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547735
[ 2 ] Bug #1547719 - CVE-2018-7253 wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547719
[ 3 ] Bug #1542550 - CVE-2018-6767 wavpack: stack buffer overread via crafted wav file
https://bugzilla.redhat.com/show_bug.cgi?id=1542550
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-wavpack' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 6 Update: beakerlib-1.17-13.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-18913269a1
2018-03-13 17:08:29.841525
--------------------------------------------------------------------------------
Name : beakerlib
Product : Fedora EPEL 6
Version : 1.17
Release : 13.el6
URL : https://github.com/beakerlib
Summary : A shell-level integration testing library
Description :
The BeakerLib project means to provide a library of various helpers, which
could be used when writing operating system level integration tests.
--------------------------------------------------------------------------------
Update Information:
rlRun -s now waits for output logs to be flushed, bz1361246 + bz1416796
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update beakerlib' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: ima-evm-utils-1.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-6e526ba359
2018-03-13 17:06:05.102783
--------------------------------------------------------------------------------
Name : ima-evm-utils
Product : Fedora EPEL 7
Version : 1.1
Release : 1.el7
URL : http://linux-ima.sourceforge.net/
Summary : IMA/EVM support utilities
Description :
The Trusted Computing Group(TCG) run-time Integrity Measurement Architecture
(IMA) maintains a list of hash values of executables and other sensitive
system files, as they are read or executed. These are stored in the file
systems extended attributes. The Extended Verification Module (EVM) prevents
unauthorized changes to these extended attributes on the file system.
ima-evm-utils is used to prepare the file system for these extended attributes.
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ima-evm-utils' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 7 Update: perl-HTTP-Lite-2.44-12.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-2b6a247182
2018-03-13 17:06:05.102760
--------------------------------------------------------------------------------
Name : perl-HTTP-Lite
Product : Fedora EPEL 7
Version : 2.44
Release : 12.el7
URL : http://search.cpan.org/dist/HTTP-Lite/
Summary : Lightweight HTTP implementation
Description :
HTTP::Lite is a stand-alone lightweight HTTP/1.1 implementation for perl. It is
not intended as a replacement for the fully-features LWP module. Instead, it is
intended for use in situations where it is desirable to install the minimal
number of modules to achieve HTTP support, or where LWP is not a good candidate
due to CPU overhead, such as slower processors. HTTP::Lite is also
significantly faster than LWP.
--------------------------------------------------------------------------------
Update Information:
This update allows EPEL7 to install the perl module HTTP::Lite.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546268 - Please provide a package for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1546268
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-HTTP-Lite' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora EPEL 6 Update: lynis-2.6.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-2d5fccbc12
2018-03-13 17:08:29.841502
--------------------------------------------------------------------------------
Name : lynis
Product : Fedora EPEL 6
Version : 2.6.2
Release : 1.el6
URL : https://cisofy.com/lynis/
Summary : Security and system auditing tool
Description :
Lynis is an auditing and hardening tool for Unix/Linux and you might even call
it a compliance tool. It scans the system and installed software. Then it
performs many individual security control checks. It determines the hardening
state of the machine, detects security issues and provides suggestions to
improve the security defense of the system.
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.2 (rhbz #1539272) ---- Update to 2.6.1 (rhbz #1539272)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539272 - lynis-2.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1539272
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lynis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months