[SECURITY] Fedora EPEL 6 Update: heimdal-7.5.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-8c9006d462
2018-04-09 18:05:54.552154
--------------------------------------------------------------------------------
Name : heimdal
Product : Fedora EPEL 6
Version : 7.5.0
Release : 1.el6
URL : http://www.h5l.org/
Summary : A Kerberos 5 implementation without export restrictions
Description :
Kerberos 5 is a network authentication and single sign-on system.
Heimdal is a free Kerberos 5 implementation without export restrictions
written from the spec (rfc1510 and successors) including advanced features
like thread safety, IPv6, master-slave replication of Kerberos Key
Distribution Center server and support for ticket delegation (S4U2Self,
S4U2Proxy).
This package can coexist with MIT Kerberos 5 packages. Hesiod is disabled
by default since it is deemed too big a security risk by the packager.
--------------------------------------------------------------------------------
Update Information:
Update to 7.5.0 GA release (CVE-2017-17439)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524546 - CVE-2017-17439 heimdal: NULL pointer dereference via crafted UDP packets
https://bugzilla.redhat.com/show_bug.cgi?id=1524546
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update heimdal' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
[SECURITY] Fedora EPEL 6 Update: optipng-0.7.6-6.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-6aaee32b7e
2018-04-09 18:05:54.552132
--------------------------------------------------------------------------------
Name : optipng
Product : Fedora EPEL 6
Version : 0.7.6
Release : 6.el6
URL : http://optipng.sourceforge.net/
Summary : PNG optimizer and converter
Description :
OptiPNG is a PNG optimizer that recompresses image files to a smaller size,
without losing any information. This program also converts external formats
(BMP, GIF, PNM and TIFF) to optimized PNG, and performs PNG integrity checks
and corrections.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-1000229 and CVE-2017-16938
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1520234 - CVE-2017-1000229 optipng: integer overflow in tiffread.c:minitiff_read_info() leading to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1520234
[ 2 ] Bug #1520227 - CVE-2017-16938 optipng: global buffer overflow in gifread.c:LZWReadByte when parsing malicious GIF
https://bugzilla.redhat.com/show_bug.cgi?id=1520227
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update optipng' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
[SECURITY] Fedora EPEL 6 Update: libmspack-0.6-0.1.alpha.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-4c76ddcc92
2018-04-09 18:05:54.552109
--------------------------------------------------------------------------------
Name : libmspack
Product : Fedora EPEL 6
Version : 0.6
Release : 0.1.alpha.el6
URL : http://www.cabextract.org.uk/libmspack/
Summary : Library for CAB and related files compression and decompression
Description :
The purpose of libmspack is to provide both compression and decompression of
some loosely related file formats used by Microsoft.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-6419 and CVE-2017-11423
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483909 - CVE-2017-6419 libmspack, clamav: heap-based buffer overflow in mspack/lzxd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1483909
[ 2 ] Bug #1472776 - CVE-2017-11423 libmspack, clamav: Stack-based buffer over-read in cabd_read_string function
https://bugzilla.redhat.com/show_bug.cgi?id=1472776
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmspack' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
[SECURITY] Fedora EPEL 6 Update: libbsd-0.8.3-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e3e50897ac
2018-04-09 18:05:54.552082
--------------------------------------------------------------------------------
Name : libbsd
Product : Fedora EPEL 6
Version : 0.8.3
Release : 2.el6
URL : http://libbsd.freedesktop.org/
Summary : Library providing BSD-compatible functions for portability
Description :
libbsd provides useful functions commonly found on BSD systems, and
lacking on others like GNU systems, thus making it easier to port
projects with strong BSD origins, without needing to embed the same
code over and over again on each project.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-2090
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1302622 - CVE-2016-2090 libbsd: heap buffer overflow in fgetwln function
https://bugzilla.redhat.com/show_bug.cgi?id=1302622
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libbsd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
[SECURITY] Fedora EPEL 6 Update: mcollective-2.8.4-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-e2b4b5b2fb
2018-04-09 18:05:54.552000
--------------------------------------------------------------------------------
Name : mcollective
Product : Fedora EPEL 6
Version : 2.8.4
Release : 1.el6
URL : http://puppetlabs.com/mcollective/introduction/
Summary : Application Server for hosting Ruby code on any capable middleware
Description :
The Marionette Collective:
Server for the mcollective Application Server
--------------------------------------------------------------------------------
Update Information:
mcollective-2.8.4-1.el6 - Update to latest upstream - Security fix for
CVE-2014-3251
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1105713 - CVE-2014-3251 mcollective: aes_security.rb file creation vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1105713
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mcollective' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: auter-0.11-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-fcbc36eaca
2018-04-08 05:51:18.808607
--------------------------------------------------------------------------------
Name : auter
Product : Fedora EPEL 7
Version : 0.11
Release : 4.el7
URL : https://github.com/rackerlabs/auter
Summary : Prepare and apply updates
Description :
auter (optionally) pre-downloads updates and then runs automatically on a
set schedule, optionally rebooting to finish applying the updates.
--------------------------------------------------------------------------------
Update Information:
Update to 0.11 with bugfixes applied
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update auter' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: python-neo4j-driver-1.5.3-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-a4646e2f54
2018-04-08 05:51:18.808565
--------------------------------------------------------------------------------
Name : python-neo4j-driver
Product : Fedora EPEL 7
Version : 1.5.3
Release : 2.el7
URL : https://pypi.python.org/pypi/neo4j-driver
Summary : The official Neo4j Python driver
Description :
The official Python Neo4j driver that supports Neo4j 3.0 and above
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562245 - Review Request: python-neo4j-driver - The official Python Neo4j driver
https://bugzilla.redhat.com/show_bug.cgi?id=1562245
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-neo4j-driver' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: python-neomodel-3.2.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-7fb84ce124
2018-04-08 05:51:18.808586
--------------------------------------------------------------------------------
Name : python-neomodel
Product : Fedora EPEL 7
Version : 3.2.5
Release : 1.el7
URL : https://pypi.python.org/pypi/neomodel
Summary : A Python OGM for Neo4j
Description :
A Python Object Graph Mapper (OGM) for the Neo4j graph database
--------------------------------------------------------------------------------
Update Information:
Initial release To install, this requires python-neo4j-driver which is waiting
to be pushed to stable.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-neomodel' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: ansible-2.5.0-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-7ef392255b
2018-04-08 05:51:18.808543
--------------------------------------------------------------------------------
Name : ansible
Product : Fedora EPEL 7
Version : 2.5.0
Release : 2.el7
URL : http://ansible.com
Summary : SSH-based configuration management, deployment, and task execution system
Description :
Ansible is a radically simple model-driven configuration management,
multi-node deployment, and remote task execution system. Ansible works
over SSH and does not require any software or daemons to be installed
on remote nodes. Extension modules can be written in any language and
are transferred to managed machines automatically.
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.0. See
https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v...
for full list of changes. Also a lot of re-working of spec file and full html
docs generated on Fedora releases. ---- Update to 2.4.3.0 bugfix release. See
https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md for full
changes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559852 - ansible-2.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1559852
[ 2 ] Bug #1540767 - ansible-2.4.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1540767
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ansible' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month
Fedora EPEL 7 Update: oci-kvm-hook-0.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1606e32192
2018-04-08 05:51:18.808522
--------------------------------------------------------------------------------
Name : oci-kvm-hook
Product : Fedora EPEL 7
Version : 0.3
Release : 1.el7
URL : https://github.com/stefwalter/oci-kvm-hook
Summary : Golang binary to mount /dev/kvm into OCI containers
Description :
Golang binary to mount /dev/kvm into OCI containers
--------------------------------------------------------------------------------
Update Information:
- Lookup devices cgroup path of target process
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update oci-kvm-hook' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 1 month