epel-package-announce May 2018

epel-package-announce@lists.fedoraproject.org

1 participants
285 discussions

Fedora EPEL 7 Update: prelude-lml-rules-4.1.0-1.el7
by updates＠fedoraproject.org 28 May '18

28 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-a6470d96b1 2018-05-28 16:46:00.916146 -------------------------------------------------------------------------------- Name : prelude-lml-rules Product : Fedora EPEL 7 Version : 4.1.0 Release : 1.el7 URL : https://www.prelude-siem.org/ Summary : Prelude LML community ruleset Description : Rules for Prelude LML contributed by the community. -------------------------------------------------------------------------------- Update Information: Bump 4.1.0 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update prelude-lml-rules' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: prelude-lml-4.1.0-1.el7
by updates＠fedoraproject.org 28 May '18

28 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-b32c26c5a4 2018-05-28 16:46:00.916122 -------------------------------------------------------------------------------- Name : prelude-lml Product : Fedora EPEL 7 Version : 4.1.0 Release : 1.el7 URL : https://www.prelude-siem.org/ Summary : Log analyzer sensor with IDMEF output Description : The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports log files in the BSD syslog format and is able to analyze any log file by using the PCRE library. It can apply log file specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected. -------------------------------------------------------------------------------- Update Information: Bump 4.1 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update prelude-lml' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: prelude-manager-4.1.1-2.el7
by updates＠fedoraproject.org 28 May '18

28 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-3b3cfbabb5 2018-05-28 16:46:00.916071 -------------------------------------------------------------------------------- Name : prelude-manager Product : Fedora EPEL 7 Version : 4.1.1 Release : 2.el7 URL : https://www.prelude-siem.org/ Summary : Bus communicator for Prelude modules and other IDMEF agents Description : Prelude Manager is the main program of the Prelude SIEM suite. It is a multithreaded server which handles connections from the Prelude modules. It is able to register local or remote agents, let the operator configure them remotely, receive alerts, and store alerts in a database or any format supported by reporting plugins, thus providing centralized logging and analysis. The IDMEF standard is used for alert representation. Support for filtering plugins allows you to hook in different places in the Manager to define custom criteria for alert logging. -------------------------------------------------------------------------------- Update Information: Bump 4.1 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update prelude-manager' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: fmf-0.4-1.el6
by updates＠fedoraproject.org 28 May '18

28 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-142e7c3179 2018-05-28 16:06:08.419018 -------------------------------------------------------------------------------- Name : fmf Product : Fedora EPEL 6 Version : 0.4 Release : 1.el6 URL : https://github.com/psss/fmf Summary : Flexible Metadata Format Description : The fmf Python module and command line tool implement a flexible format for defining metadata in plain text files which can be stored close to the source code. Thanks to hierarchical structure with support for inheritance and elasticity it provides an efficient way to organize data into well-sized text documents. This package contains the command line tool. -------------------------------------------------------------------------------- Update Information: Initial release of Flexible Metadata Format -------------------------------------------------------------------------------- References: [ 1 ] Bug #1575645 - Review Request: fmf - Flexible Metadata Format https://bugzilla.redhat.com/show_bug.cgi?id=1575645 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fmf' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: prosody-0.10.1-1.el6
by updates＠fedoraproject.org 27 May '18

27 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-c313d160b2 2018-05-27 20:16:20.544168 -------------------------------------------------------------------------------- Name : prosody Product : Fedora EPEL 6 Version : 0.10.1 Release : 1.el6 URL : https://prosody.im/ Summary : Flexible communications server for Jabber/XMPP Description : Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols. -------------------------------------------------------------------------------- Update Information: Prosody 0.10.1 ============== See upstream's blog post at https://blog.prosody.im/prosody-0-10-1-released/ for a full overview of the release changes. Security -------- * SQL: Ensure user archives are purged when a user account is deleted (fixes #1009) Fixes and improvements ---------------------- * Core: More robust signal handling (fixes #1047, #1029) * MUC: Ensure that elements which match our from are stripped (fixes #1055) * MUC: More robust handling of storage failures (fixes #1091, #1091) * mod_mam: Ensure a user's archiving preferences apply even when they are offline (fixes #1024) * Compatibility improvements with LuaSec 0.7, improving curve support * mod_stanza_debug: New module that logs full stanzas sent and received for debugging purposes * mod_mam: Implement option to enable MAM implicitly when client support is detected (#867) * mod_mam: Add an option for whether to include 'total' counts by default in queries (for performance) * MUC: send muc#stanza_id feature as per XEP-0045 v1.31 (fixes #1097) Minor changes ------------- * SQL: Suppress error log if a transaction failed but was retried ok * core.stanza_router: Verify that xmlns exists for firing stanza/iq/xmlns/name events (fixes #1022) (thanks SamWhited) * mod_carbons: Synthesize a 'to' attribute for carbons of stanzas to "self" (fixes #956) * Core: Re-enable timestamps by default when logging to files (fixes #1004) * HTTP: Report HTML Content-Type on error pages (fixes #1030) * mod_c2s: Set a default value for c2s_timeout (fixes #1036) * prosodyctl: Fix traceback with lfs < 1.6.2 and show warning * Fix incorrect '::' compression of a single 0-group which broke some IPv6 address matching * mod_dialback: Copy function from mod_s2s instead of depending on it, which made it harder to disable s2s (fixes #1050) * mod_storage_sql: Add an index to SQL archive stores to improve performance of some queries * MUC: Don't attempt to reply to errors with more errors (fixes #1122) * Module API: Fix parameter order to http client callbacks * mod_blocklist: Allow mod_presence to handle subscription stanzas before bouncing outgoing presence (fixes #575) * mod_http_files: Fix directory listing cache entries not expiring (fixes #1130) Please also read the upgrade notes at https://prosody.im/doc/release/0.10.0#upgrade_notes if you are upgrading from 0.9.x. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1578371 - prosody-0.10.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1578371 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update prosody' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: ocserv-0.12.1-1.el6
by updates＠fedoraproject.org 27 May '18

27 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-89b8c4c8d4 2018-05-27 20:16:20.544146 -------------------------------------------------------------------------------- Name : ocserv Product : Fedora EPEL 6 Version : 0.12.1 Release : 1.el6 URL : http://www.infradead.org/ocserv/ Summary : OpenConnect SSL VPN server Description : OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS to provide the secure VPN service. -------------------------------------------------------------------------------- Update Information: - Update to upstream 0.12.1 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1581111 - ocserv cannot connect and pid is wrong https://bugzilla.redhat.com/show_bug.cgi?id=1581111 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ocserv' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: php-ringcentral-psr7-1.2.2-1.el6
by updates＠fedoraproject.org 27 May '18

27 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-407388a63e 2018-05-27 20:16:20.544095 -------------------------------------------------------------------------------- Name : php-ringcentral-psr7 Product : Fedora EPEL 6 Version : 1.2.2 Release : 1.el6 URL : https://github.com/ringcentral/psr7 Summary : PSR-7 message implementation Description : This repository contains a partial PSR-7 [1] message implementation, several stream decorators, and some helpful functionality like query string parsing. Currently missing ServerRequestInterface and UploadedFileInterface; a pull request for these features is welcome. Autoloader: /usr/share/php/RingCentral/Psr7/autoload.php [1] http://www.php-fig.org/psr/psr-7/ -------------------------------------------------------------------------------- Update Information: This repository contains a partial PSR-7 [1] message implementation, several stream decorators, and some helpful functionality like query string parsing. Currently missing ServerRequestInterface and UploadedFileInterface; a pull request for these features is welcome. [1] http://www.php-fig.org/psr/psr-7/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1570304 - Review Request: php-ringcentral-psr7 - PSR-7 message implementation https://bugzilla.redhat.com/show_bug.cgi?id=1570304 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-ringcentral-psr7' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: SDL2_gfx-1.0.3-1.el7
by updates＠fedoraproject.org 27 May '18

27 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-20c3b6be2a 2018-05-27 20:11:43.790305 -------------------------------------------------------------------------------- Name : SDL2_gfx Product : Fedora EPEL 7 Version : 1.0.3 Release : 1.el7 URL : http://www.ferzkopp.net/Software/SDL2_gfx-2.0/ Summary : SDL2 graphics drawing primitives and other support functions Description : Library providing graphics drawing primitives and other support functions wrapped up in an addon library for the Simple Direct Media version 2 (SDL2) cross-platform API layer. -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update SDL2_gfx' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: SDL2-2.0.8-5.el7
by updates＠fedoraproject.org 27 May '18

27 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-20c3b6be2a 2018-05-27 20:11:43.790305 -------------------------------------------------------------------------------- Name : SDL2 Product : Fedora EPEL 7 Version : 2.0.8 Release : 5.el7 URL : http://www.libsdl.org/ Summary : Cross-platform multimedia library Description : Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update SDL2' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: SDL2_mixer-2.0.2-2.el7
by updates＠fedoraproject.org 27 May '18

27 May '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-20c3b6be2a 2018-05-27 20:11:43.790305 -------------------------------------------------------------------------------- Name : SDL2_mixer Product : Fedora EPEL 7 Version : 2.0.2 Release : 2.el7 URL : https://www.libsdl.org/projects/SDL_mixer/ Summary : Simple DirectMedia Layer - Sample Mixer Library Description : SDL_mixer is a sample multi-channel audio mixer library. It supports any number of simultaneously playing channels of 16 bit stereo audio, plus a single channel of music, mixed by the popular FLAC, MikMod MOD, Timidity MIDI, Ogg Vorbis, and SMPEG MP3 libraries. -------------------------------------------------------------------------------- Update Information: SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of security issues, and enabling new features based on RHEL 7.5: wayland, vulkan, etc. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500453 [ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552133 [ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552168 [ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552172 [ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552182 [ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552186 [ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552191 [ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1552197 [ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1568145 [ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1500735 [ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages) https://bugzilla.redhat.com/show_bug.cgi?id=1524386 [ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2 https://bugzilla.redhat.com/show_bug.cgi?id=1512015 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update SDL2_mixer' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
...
29
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce May 2018