[SECURITY] Fedora EPEL 7 Update: SDL2_image-2.0.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-20c3b6be2a
2018-05-27 20:11:43.790305
--------------------------------------------------------------------------------
Name : SDL2_image
Product : Fedora EPEL 7
Version : 2.0.3
Release : 1.el7
URL : http://www.libsdl.org/projects/SDL_image/
Summary : Image loading library for SDL
Description :
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library
designed to provide fast access to the graphics frame buffer and audio
device. This package contains a simple library for loading images of
various formats (BMP, PPM, PCX, GIF, JPEG, PNG) as SDL surfaces.
--------------------------------------------------------------------------------
Update Information:
SDL2 refresh for EPEL 7: update to latest upstream releases, fixing a number of
security issues, and enabling new features based on RHEL 7.5: wayland, vulkan,
etc.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500453 - CVE-2017-2887 SDL_image: Multiple vulnerabilities [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1500453
[ 2 ] Bug #1552133 - CVE-2017-12122 SDL2_image: code execution in the ILBM image rendering [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552133
[ 3 ] Bug #1552168 - CVE-2017-14441 SDL2_image: code execution vulnerability exists in the ICO image rendering [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552168
[ 4 ] Bug #1552172 - CVE-2017-14440 SDL2_image: code execution in the ILBM image rendering [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552172
[ 5 ] Bug #1552182 - CVE-2017-14449 SDL2_image: double-Free in the XCF image rendering [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552182
[ 6 ] Bug #1552186 - CVE-2017-14448 SDL2_image: code execution in the XCF image rendering [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552186
[ 7 ] Bug #1552191 - CVE-2017-14450 SDL2_image: buffer overflow in the GIF image parsing [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552191
[ 8 ] Bug #1552197 - CVE-2017-14442 SDL2_image: code execution in the BMP image rendering [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1552197
[ 9 ] Bug #1568145 - CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 SDL2_image: various flaws [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1568145
[ 10 ] Bug #1500735 - CVE-2017-2888 SDL2: SDL: Integer overflow while creating a new RGB surface [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1500735
[ 11 ] Bug #1524386 - SDL2 CMake files trigger CMP0004 policy failure (fixed in latest Fedora packages)
https://bugzilla.redhat.com/show_bug.cgi?id=1524386
[ 12 ] Bug #1512015 - SDL2_mixer sources bundle smpeg2
https://bugzilla.redhat.com/show_bug.cgi?id=1512015
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update SDL2_image' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: qt-creator-4.1.0-4.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-76920e5888
2018-05-27 20:11:43.790237
--------------------------------------------------------------------------------
Name : qt-creator
Product : Fedora EPEL 7
Version : 4.1.0
Release : 4.el7
URL : http://qt-project.org/wiki/Category:Tools::QtCreator
Summary : Cross-platform IDE for Qt
Description :
Qt Creator is a cross-platform IDE (integrated development environment)
tailored to the needs of Qt developers.
--------------------------------------------------------------------------------
Update Information:
Rebuild for qt5-5.9.2.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qt-creator' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: prosody-0.10.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-c55afe1dd7
2018-05-27 20:11:43.790187
--------------------------------------------------------------------------------
Name : prosody
Product : Fedora EPEL 7
Version : 0.10.1
Release : 1.el7
URL : https://prosody.im/
Summary : Flexible communications server for Jabber/XMPP
Description :
Prosody is a flexible communications server for Jabber/XMPP written in Lua.
It aims to be easy to use, and light on resources. For developers it aims
to be easy to extend and give a flexible system on which to rapidly develop
added functionality, or prototype new protocols.
--------------------------------------------------------------------------------
Update Information:
Prosody 0.10.1 ============== See upstream's blog post at
https://blog.prosody.im/prosody-0-10-1-released/ for a full overview of the
release changes. Security -------- * SQL: Ensure user archives are purged
when a user account is deleted (fixes #1009) Fixes and improvements
---------------------- * Core: More robust signal handling (fixes #1047,
#1029) * MUC: Ensure that elements which match our from are stripped (fixes
#1055) * MUC: More robust handling of storage failures (fixes #1091, #1091)
* mod_mam: Ensure a user's archiving preferences apply even when they are
offline (fixes #1024) * Compatibility improvements with LuaSec 0.7, improving
curve support * mod_stanza_debug: New module that logs full stanzas sent and
received for debugging purposes * mod_mam: Implement option to enable MAM
implicitly when client support is detected (#867) * mod_mam: Add an option for
whether to include 'total' counts by default in queries (for performance) *
MUC: send muc#stanza_id feature as per XEP-0045 v1.31 (fixes #1097) Minor
changes ------------- * SQL: Suppress error log if a transaction failed but
was retried ok * core.stanza_router: Verify that xmlns exists for firing
stanza/iq/xmlns/name events (fixes #1022) (thanks SamWhited) * mod_carbons:
Synthesize a 'to' attribute for carbons of stanzas to "self" (fixes #956) *
Core: Re-enable timestamps by default when logging to files (fixes #1004) *
HTTP: Report HTML Content-Type on error pages (fixes #1030) * mod_c2s: Set a
default value for c2s_timeout (fixes #1036) * prosodyctl: Fix traceback with
lfs < 1.6.2 and show warning * Fix incorrect '::' compression of a single
0-group which broke some IPv6 address matching * mod_dialback: Copy function
from mod_s2s instead of depending on it, which made it harder to disable s2s
(fixes #1050) * mod_storage_sql: Add an index to SQL archive stores to improve
performance of some queries * MUC: Don't attempt to reply to errors with more
errors (fixes #1122) * Module API: Fix parameter order to http client
callbacks * mod_blocklist: Allow mod_presence to handle subscription stanzas
before bouncing outgoing presence (fixes #575) * mod_http_files: Fix directory
listing cache entries not expiring (fixes #1130) Please also read the upgrade
notes at https://prosody.im/doc/release/0.10.0#upgrade_notes if you are
upgrading from 0.9.x.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1578371 - prosody-0.10.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1578371
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update prosody' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: ocserv-0.12.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-f696417894
2018-05-27 20:11:43.790136
--------------------------------------------------------------------------------
Name : ocserv
Product : Fedora EPEL 7
Version : 0.12.1
Release : 1.el7
URL : http://www.infradead.org/ocserv/
Summary : OpenConnect SSL VPN server
Description :
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a
secure, small, fast and configurable VPN server. It implements the OpenConnect
SSL VPN protocol, and has also (currently experimental) compatibility with
clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol
uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS
to provide the secure VPN service.
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 0.12.1 release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ocserv' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: php-react-promise-stream-1.1.1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-65803f74fd
2018-05-27 20:11:43.790080
--------------------------------------------------------------------------------
Name : php-react-promise-stream
Product : Fedora EPEL 7
Version : 1.1.1
Release : 2.el7
URL : https://github.com/reactphp/promise-stream
Summary : The missing link between Promise-land and Stream-land for ReactPHP
Description :
The missing link between Promise-land and Stream-land for ReactPHP [1].
Autoloader: /usr/share/php/React/Promise/Stream/autoload.php
[1] https://reactphp.org/
--------------------------------------------------------------------------------
Update Information:
The missing link between Promise-land and Stream-land for ReactPHP
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1570303 - Review Request: php-react-promise-stream - The missing link between Promise-land and Stream-land for ReactPHP
https://bugzilla.redhat.com/show_bug.cgi?id=1570303
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-react-promise-stream' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: php-grasmash-expander-1.0.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1971e16168
2018-05-27 20:11:43.790022
--------------------------------------------------------------------------------
Name : php-grasmash-expander
Product : Fedora EPEL 7
Version : 1.0.0
Release : 1.el7
URL : https://github.com/grasmash/expander
Summary : Expands internal property references in PHP arrays file
Description :
This tool expands property references in PHP arrays. For example implementation,
see Yaml Expander [1].
Autoloader: /usr/share/php/Grasmash/Expander/autoload.php
[1] https://github.com/grasmash/yaml-expander
--------------------------------------------------------------------------------
Update Information:
Expands internal property references in PHP arrays file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1570300 - Review Request: php-grasmash-expander - Expands internal property references in PHP arrays file
https://bugzilla.redhat.com/show_bug.cgi?id=1570300
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-grasmash-expander' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: php-ringcentral-psr7-1.2.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-143d5fc290
2018-05-27 20:11:43.789965
--------------------------------------------------------------------------------
Name : php-ringcentral-psr7
Product : Fedora EPEL 7
Version : 1.2.2
Release : 1.el7
URL : https://github.com/ringcentral/psr7
Summary : PSR-7 message implementation
Description :
This repository contains a partial PSR-7 [1] message implementation, several
stream decorators, and some helpful functionality like query string parsing.
Currently missing ServerRequestInterface and UploadedFileInterface; a pull
request for these features is welcome.
Autoloader: /usr/share/php/RingCentral/Psr7/autoload.php
[1] http://www.php-fig.org/psr/psr-7/
--------------------------------------------------------------------------------
Update Information:
This repository contains a partial PSR-7 [1] message implementation, several
stream decorators, and some helpful functionality like query string parsing.
Currently missing ServerRequestInterface and UploadedFileInterface; a pull
request for these features is welcome. [1] http://www.php-fig.org/psr/psr-7/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1570304 - Review Request: php-ringcentral-psr7 - PSR-7 message implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1570304
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-ringcentral-psr7' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: php-paragonie-random-compat-2.0.12-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-8cc8571e7f
2018-05-27 20:11:43.789886
--------------------------------------------------------------------------------
Name : php-paragonie-random-compat
Product : Fedora EPEL 7
Version : 2.0.12
Release : 1.el7
URL : https://github.com/paragonie/random_compat
Summary : PHP 5.x polyfill for random_bytes() and random_int() from PHP 7
Description :
PHP 5.x polyfill for random_bytes() and random_int() from PHP 7.
Autoloader: /usr/share/php/random_compat/autoload.php
--------------------------------------------------------------------------------
Update Information:
### Version 2.0.12 - 2018-04-04 * Minor docblock issue that's breaking Psalm
downstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1564120 - php-paragonie-random-compat-2.0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1564120
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-paragonie-random-compat' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: qt5-qtquick1-5.7.1-1.2bc722agit.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-4975f86358
2018-05-26 22:40:40.451519
--------------------------------------------------------------------------------
Name : qt5-qtquick1
Product : Fedora EPEL 7
Version : 5.7.1
Release : 1.2bc722agit.el7
URL : http://www.qt.io
Summary : A declarative language for describing user interfaces in Qt5
Description :
Qt Quick is a collection of technologies that are designed to help
developers create the kind of intuitive, modern, fluid user interfaces
that are increasingly used on mobile phones, media players, set-top
boxes and other portable devices.
Qt Quick consists of a rich set of user interface elements, a declarative
language for describing user interfaces and a language runtime. A
collection of C++ APIs is used to integrate these high level features
with classic Qt applications.
--------------------------------------------------------------------------------
Update Information:
New build for rhel7.5's Qt 5.9.x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576820 - qt5-qtquick1 broken deps since rhel7.5 introduced Qt 5.9.x
https://bugzilla.redhat.com/show_bug.cgi?id=1576820
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update qt5-qtquick1' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years
Fedora EPEL 7 Update: abi-dumper-1.1-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-2fb2bec893
2018-05-26 22:40:40.451540
--------------------------------------------------------------------------------
Name : abi-dumper
Product : Fedora EPEL 7
Version : 1.1
Release : 3.el7
URL : http://github.com/lvc/abi-dumper/
Summary : Tool to dump ABI of an ELF object containing DWARF debug info
Description :
A tool to dump ABI of an ELF object containing DWARF debug info.
The tool is intended to be used with ABI Compliance Checker tool for tracking
ABI changes of a C/C++ library or kernel module.
--------------------------------------------------------------------------------
Update Information:
Add elfutils as a package requirement, fixes 1576565.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576565 - abi-dumper: fails on fedora28
https://bugzilla.redhat.com/show_bug.cgi?id=1576565
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update abi-dumper' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years