Fedora EPEL 7 Update: libidn2-2.0.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-e4b968e7e8
2018-05-22 17:19:43.785655
--------------------------------------------------------------------------------
Name : libidn2
Product : Fedora EPEL 7
Version : 2.0.5
Release : 1.el7
URL : https://www.gnu.org/software/libidn/#libidn2
Summary : Library to support IDNA2008 internationalized domain names
Description :
Libidn2 is an implementation of the IDNA2008 specifications in RFC
5890, 5891, 5892, 5893 and TR46 for internationalized domain names
(IDN). It is a standalone library, without any dependency on libidn.
--------------------------------------------------------------------------------
Update Information:
Libidn 2.0.5 (released 2018-05-18) ================================== *
Switched the default library behavior to IDNA2008 as amended by TR#46 (non-
transitional). That default behavior is enabled when no flags are specified to
function calls. Applications can utilize the %IDN2_NO_TR46 flag to switch to the
unamended IDNA2008. This is done in the interest of interoperability based on
the fact that this is what application writers care about rather than strict
compliance with a particular protocol. * Fixed memleak in
idn2_to_unicode_8zlz(). * Return error (IDN2_ICONV_FAIL) on charset conversion
errors. * Fixed issue with STD3 rules applying in non-transitional TR46 mode.
* idn2: added option --usestd3asciirules.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577864 - libidn2: Enable TR46 by default
https://bugzilla.redhat.com/show_bug.cgi?id=1577864
[ 2 ] Bug #1579825 - libidn2-2.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1579825
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libidn2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 7 Update: engauge-digitizer-10.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-388db6e054
2018-05-22 17:19:43.785635
--------------------------------------------------------------------------------
Name : engauge-digitizer
Product : Fedora EPEL 7
Version : 10.6
Release : 1.el7
URL : http://markummitchell.github.io/engauge-digitizer/
Summary : Convert graphs or map files into numbers
Description :
The Engauge Digitizer tool accepts image files
(like PNG, JPEG and TIFF) containing graphs,
and recovers the data points from those graphs.
The resulting data points are usually used as input
to other software applications.
Conceptually, Engauge Digitizer is the opposite of
a graphing tool that converts data points to graphs.
The process is shown below - an image file is imported,
digitized within Engauge, and exported as a table of
numeric data to a text file.
Work can be saved into an Engauge DIG file.
New features already added to Engauge:
- Grid lines are displayed for fine adjustments of the axis points that define the coordinate systems
- Automated line and point extraction rapidly digitizes data
- Image processing for separating important details from background information
- Undo/redo of all operations means recovering from mistakes and experimenting with options is painless
- Installers for Windows and OSX operating systems, and repository packages for Linux make installation easy
- Wizard provides an interactive tutorial to explain the basic steps
- Wizard creates a checklist guide to interactively leads user through steps from file import to file export
- Cubic spline interpolation between points gives more accurate curves with fewer points
- Axes Checker briefly highlights the axes when they are defined or modified, to reveal entry mistakes
- Graph coordinates can be specified as date and time values, or as degrees, minutes and seconds
- File import and data export by drag-and-drop and copy/paste
- Test suite for regression testing minimizes code breakage as new features are added
- Multiple coordinate systems in the same image can be digitized in advanced mode
- Axes with only one known coordinate (floating axes) can be digitized in advanced mode
- Geometry Window displays geometric information about the selected curve
- Curve Fitting Window fits a polynomial function to the selected curve
--------------------------------------------------------------------------------
Update Information:
- Update to 10.6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update engauge-digitizer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 7 Update: csmock-2.1.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-5c53f75ef5
2018-05-22 17:19:43.785613
--------------------------------------------------------------------------------
Name : csmock
Product : Fedora EPEL 7
Version : 2.1.1
Release : 1.el7
URL : https://github.com/kdudka/csmock
Summary : A mock wrapper for Static Analysis tools
Description :
This is a metapackage pulling in csmock-common and basic csmock plug-ins.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csmock' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 7 Update: csdiff-1.4.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-5c53f75ef5
2018-05-22 17:19:43.785613
--------------------------------------------------------------------------------
Name : csdiff
Product : Fedora EPEL 7
Version : 1.4.0
Release : 1.el7
URL : https://github.com/kdudka/csdiff
Summary : Non-interactive tools for processing code scan results in plain-text
Description :
This package contains the csdiff tool for comparing code scan defect lists in
order to find out added or fixed defects, and the csgrep utility for filtering
defect lists using various filtering predicates.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csdiff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 7 Update: nodejs-6.14.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-994322297a
2018-05-22 17:19:43.785563
--------------------------------------------------------------------------------
Name : nodejs
Product : Fedora EPEL 7
Version : 6.14.2
Release : 1.el7
URL : http://nodejs.org/
Summary : JavaScript runtime
Description :
Node.js is a platform built on Chrome's JavaScript runtime
for easily building fast, scalable network applications.
Node.js uses an event-driven, non-blocking I/O model that
makes it lightweight and efficient, perfect for data-intensive
real-time applications that run across distributed devices.
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 6.14.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 6 Update: csmock-2.1.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-0925416250
2018-05-22 16:14:14.782876
--------------------------------------------------------------------------------
Name : csmock
Product : Fedora EPEL 6
Version : 2.1.1
Release : 1.el6
URL : https://github.com/kdudka/csmock
Summary : A mock wrapper for Static Analysis tools
Description :
This is a metapackage pulling in csmock-common and basic csmock plug-ins.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csmock' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 6 Update: csdiff-1.4.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-0925416250
2018-05-22 16:14:14.782876
--------------------------------------------------------------------------------
Name : csdiff
Product : Fedora EPEL 6
Version : 1.4.0
Release : 1.el6
URL : https://github.com/kdudka/csdiff
Summary : Non-interactive tools for processing code scan results in plain-text
Description :
This package contains the csdiff tool for comparing code scan defect lists in
order to find out added or fixed defects, and the csgrep utility for filtering
defect lists using various filtering predicates.
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update csdiff' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 7 Update: aime-8.20180501-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-cf38252acd
2018-05-21 14:48:41.827456
--------------------------------------------------------------------------------
Name : aime
Product : Fedora EPEL 7
Version : 8.20180501
Release : 1.el7
URL : http://aime-embedded.sourceforge.net/
Summary : An application embeddable programming language interpreter
Description :
aime is a programming language with a C like syntax, intended for application
extending purposes. The aime collection comprises the language description, an
application embeddable interpreter (libaime), the interpreter C interface
description and a standalone interpreter. Many examples on how the interpreter
can be used (embedded in an application) are also available, together with
some hopefully useful applications, such as expression evaluators.
--------------------------------------------------------------------------------
Update Information:
- Updated to new 8.20180501 upstream version, fixes rhbz #1574484 ---- Updated
to new 8.20180417 upstream version, fixes rhbz #1569267
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574484 - aime-8.20180501 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574484
[ 2 ] Bug #1569267 - aime-8.20180417 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569267
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update aime' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora EPEL 7 Update: python-mpmath-1.0.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-7acb3b5454
2018-05-21 14:48:41.827411
--------------------------------------------------------------------------------
Name : python-mpmath
Product : Fedora EPEL 7
Version : 1.0.0
Release : 1.el7
URL : http://mpmath.org
Summary : A pure Python library for multiprecision floating-point arithmetic
Description :
Mpmath is a pure-Python library for multiprecision floating-point arithmetic.
It provides an extensive set of transcendental functions, unlimited exponent
sizes, complex numbers, interval arithmetic, numerical integration and
differentiation, root-finding, linear algebra, and much more. Almost any
calculation can be performed just as well at 10-digit or 1000-digit precision,
and in many cases mpmath implements asymptotically fast algorithms that scale
well for extremely high precision work. If available, mpmath will (optionally)
use gmpy to speed up high precision operations.
If you require plotting capabilities in mpmath, install python-matplotlib.
--------------------------------------------------------------------------------
Update Information:
Update to ten-year anniversary 1.0.0 release, mostly containing various bug
fixes. See full changelog at https://github.com/fredrik-
johansson/mpmath/blob/master/CHANGES
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1565339 - python-mpmath-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1565339
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-mpmath' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
[SECURITY] Fedora EPEL 7 Update: mysql-mmm-2.2.1-15.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1698223c96
2018-05-21 14:48:41.827364
--------------------------------------------------------------------------------
Name : mysql-mmm
Product : Fedora EPEL 7
Version : 2.2.1
Release : 15.el7
URL : http://mysql-mmm.org
Summary : Multi-Master Replication Manager for MySQL
Description :
MMM (MySQL Master-Master Replication Manager) is a set of flexible scripts
to perform monitoring/failover and management of MySQL Master-Master
replication configurations (with only one node writable at any time). The
toolset also has the ability to read balance standard master/slave
configurations with any number of slaves, so you can use it to move virtual
IP addresses around a group of servers depending on whether they are behind
in replication. In addition to that, it also has scripts for data backups,
resynchronization between nodes etc.
--------------------------------------------------------------------------------
Update Information:
# Multi-Master Replication Manager for MySQL mmm_agentd Remote Command Injection
Vulnerabilities This update adds data sanitization to inputs for the mmm agent.
Multiple exploitable remote command injection vulnerabilities exist in the MySQL
Master-Master Replication Manager (MMM) mmm_agentd daemon 2.2.1. mmm_agentd
commonly runs with root privileges and does not require authentication by
default. A specially crafted MMM protocol message can cause a shell command
injection resulting in arbitrary command execution with the privileges of the
mmm_agentd process. An attacker that can initiate a TCP session with mmm_agentd
can trigger these vulnerabilities. The impact of these vulnerabilities can be
lessened by configuring mmm_agentd to require TLS mutual authentication and by
using network ACLs to prevent hosts other than legitimate mmm_mond hosts from
accessing mmm_agentd. For example on Linux iptables rules can be used to block
access to the port mmm_agent is listening on from all hosts except the
mmm_monitor. The configuration of ssl can be used where firewall rules are not
practical. See Socket Documentation http://mysql-mmm.org/mysql-mmm.html#SEC58
Add to mmm_common.conf <socket> type ssl cert_file
/etc/ssl/certs/www.example.com.bundle.crt key_file
/etc/ssl/certs/www.example.com.key ca_file /etc/ssl/certs/ca-bundle.crt
# or ca-certificates.crt </socket> Now only those with access to the
private key can send commands. Whilst your web server certificate will do the
job, you may consider registering a dedicated certificate just for this task.
NOTE: By now there are a some good alternatives to MySQL-MMM. Maybe you
want to check out Galera Cluster which is part of MariaDB Galera Cluster
and Percona XtraDB Cluster. - http://mysql-mmm.org - http://galeracluster.com/
- https://mariadb.com/kb/en/library/what-is-mariadb-galera-cluster/ -
https://www.percona.com/software/mysql-database/percona-xtradb-cluster
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575161
https://bugzilla.redhat.com/show_bug.cgi?id=1575161
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mysql-mmm' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months