[SECURITY] Fedora EPEL 7 Update: nodejs-6.14.3-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-871d88af0e
2018-07-03 12:53:01.278443
--------------------------------------------------------------------------------
Name : nodejs
Product : Fedora EPEL 7
Version : 6.14.3
Release : 1.el7
URL : http://nodejs.org/
Summary : JavaScript runtime
Description :
Node.js is a platform built on Chrome's JavaScript runtime
for easily building fast, scalable network applications.
Node.js uses an event-driven, non-blocking I/O model that
makes it lightweight and efficient, perfect for data-intensive
real-time applications that run across distributed devices.
--------------------------------------------------------------------------------
Update Information:
Update for security fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591019 - CVE-2018-7162 nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591019
[ 2 ] Bug #1591014 - CVE-2018-7161 nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591014
[ 3 ] Bug #1591009 - CVE-2018-7167 nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591009
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: python-voluptuous-0.11.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-717fa9b9ad
2018-07-03 12:53:01.278414
--------------------------------------------------------------------------------
Name : python-voluptuous
Product : Fedora EPEL 7
Version : 0.11.1
Release : 1.el7
URL : https://github.com/alecthomas/voluptuous
Summary : A Python data validation library
Description :
Voluptuous, despite the name, is a Python data validation library. It is
primarily intended for validating data coming into Python as JSON, YAML, etc.
--------------------------------------------------------------------------------
Update Information:
See changes here:
https://github.com/alecthomas/voluptuous/blob/master/CHANGELOG.md
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-voluptuous' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: clamav-0.100.0-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-7d6dc8227a
2018-07-03 12:53:01.278364
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 7
Version : 0.100.0
Release : 2.el7
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
Try to mitigate bug #1583599 ---- ClamAV 0.100.0 ============== ClamAV
0.100.0 is a feature release which includes many code submissions from the
ClamAV community. Some of the more prominent submissions include: *
Interfaces to the Prelude SIEM open source package for collecting ClamAV virus
events. * Support for Visual Studio 2015 for Windows builds. Please note that
we have deprecated support for Windows XP, and while Vista may still work, we no
longer test ClamAV on Windows XP or Vista. * Support libmspack internal code
or as a shared object library. The internal library is the default and includes
modifications to enable parsing of CAB files that do not entirely adhere to the
CAB file format. * Linking with OpenSSL 1.1.0. * Deprecation of the
AllowSupplementaryGroups parameter statement in clamd, clamav-milter, and
freshclam. Use of supplementary is now in effect by default. * Numerous bug
fixes, typo corrections, and compiler warning fixes. Additionally, upstream
introduced important changes and new features in ClamAV 0.100, including but not
limited to: * Deprecating internal LLVM code support. The configure script
has changed to search the system for an installed instance of the LLVM
development libraries, and to otherwise use the bytecode interpreter for ClamAV
bytecode signatures. To use the LLVM Just-In-Time compiler for executing
bytecode signatures, please ensure that the LLVM development package at version
3.6 or lower is installed. Using the deprecated LLVM code is possible with the
command: `./configure --with-system-llvm=no`, but it no longer compiles on all
platforms. * Compute and check PE import table hash (a.k.a. "imphash")
signatures. * Support file property collection and analysis for MHTML files.
* Raw scanning of PostScript files. * Fix clamsubmit to use the new virus and
false positive submission web interface. * Optionally, flag files with the
virus "Heuristic.Limits.Exceeded" when size limitations are exceeded. *
Improved decoders for PDF files. * Reduced number of compile time warnings.
* Improved support for C++11. * Improved detection of system installed
libraries. * Fixes to ClamAV's Container system and the introduction of
Intermediates for more descriptive signatures. * Improvements to clamd's On-
Access scanning capabilities for Linux.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1583599 - 0.100.0-1 re-packaging stops and disables services
https://bugzilla.redhat.com/show_bug.cgi?id=1583599
[ 2 ] Bug #1526628 - please backport OnAccessExcludeRootUID from clamav-master
https://bugzilla.redhat.com/show_bug.cgi?id=1526628
[ 3 ] Bug #1565381 - clamav-0.100.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1565381
[ 4 ] Bug #1579829 - clamav-0.100.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1579829
[ 5 ] Bug #1540113 - Database format inconsistency cvd vs cld
https://bugzilla.redhat.com/show_bug.cgi?id=1540113
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: marco-1.16.1-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-75111625de
2018-07-01 23:00:53.197304
--------------------------------------------------------------------------------
Name : marco
Product : Fedora EPEL 7
Version : 1.16.1
Release : 3.el7
URL : http://mate-desktop.org
Summary : MATE Desktop window manager
Description :
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
- fix for rhbz (#1591973)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591973 - Windows get permanently composited on the screen
https://bugzilla.redhat.com/show_bug.cgi?id=1591973
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update marco' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: ga-5.6.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-4c4a047281
2018-07-01 01:07:11.502629
--------------------------------------------------------------------------------
Name : ga
Product : Fedora EPEL 7
Version : 5.6.5
Release : 1.el7
URL : http://github.com/GlobalArrays/ga
Summary : Global Arrays Toolkit
Description :
The Global Arrays (GA) toolkit provides an efficient and portable
"shared-memory" programming interface for distributed-memory
computers. Each process in a MIMD parallel program can asynchronously
access logical blocks of physically distributed dense multi-
dimensional arrays, without need for explicit cooperation by other
processes. Unlike other shared-memory environments, the GA model
exposes to the programmer the non-uniform memory access (NUMA)
characteristics of the high performance computers and acknowledges
that access to a remote portion of the shared data is slower than to
the local portion. The locality information for the shared data is
available, and a direct access to the local portions of shared data
is provided.
- Global Arrays Toolkit Base Package.
--------------------------------------------------------------------------------
Update Information:
New release 5.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1357022 - rebuild ga against new openmpi/scalapack
https://bugzilla.redhat.com/show_bug.cgi?id=1357022
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ga' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: python-aexpect-1.5.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-4afb2f4d96
2018-07-01 01:07:11.502617
--------------------------------------------------------------------------------
Name : python-aexpect
Product : Fedora EPEL 7
Version : 1.5.1
Release : 1.el7
URL : https://github.com/avocado-framework/aexpect
Summary : A python library to control interactive applications
Description :
Aexpect is a python library used to control interactive applications, very
similar to pexpect. You can use it to control applications such as ssh, scp
sftp, telnet, among others.
--------------------------------------------------------------------------------
Update Information:
Sync python-aexpect with upstream release 1.5.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1588660 - python-aexpect-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1588660
[ 2 ] Bug #1437184 - python-aexpect: python3-aexpect is missing Python 3 version of executables
https://bugzilla.redhat.com/show_bug.cgi?id=1437184
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-aexpect' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
[SECURITY] Fedora EPEL 7 Update: thunderbird-enigmail-2.0.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-e70dca1af5
2018-07-01 01:07:11.502605
--------------------------------------------------------------------------------
Name : thunderbird-enigmail
Product : Fedora EPEL 7
Version : 2.0.7
Release : 1.el7
URL : http://enigmail.net/
Summary : Authentication and encryption extension for Mozilla Thunderbird
Description :
Enigmail is an extension to the mail client Mozilla Thunderbird
which allows users to access the authentication and encryption
features provided by GnuPG
--------------------------------------------------------------------------------
Update Information:
Security update to fix CVE-2018-12019
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591098 - CVE-2018-12019 thunderbird-enigmail: Signature verification does not handle user ids correctly allowing attackers to spoof arbitrary email signatures [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1591098
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update thunderbird-enigmail' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: libass-0.13.4-6.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-e8edde23a0
2018-07-01 01:07:11.502592
--------------------------------------------------------------------------------
Name : libass
Product : Fedora EPEL 7
Version : 0.13.4
Release : 6.el7
URL : https://github.com/libass
Summary : Portable library for SSA/ASS subtitles rendering
Description :
Libass is a portable library for SSA/ASS subtitles rendering.
--------------------------------------------------------------------------------
Update Information:
Add upstreamed 4k patch and enable ASM.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429460 - Add "BR: yasm" to increase speed
https://bugzilla.redhat.com/show_bug.cgi?id=1429460
[ 2 ] Bug #1591142 - Default libass package significantly out of date, contains bugs that can break subtitle rendering on 2160p+ displays
https://bugzilla.redhat.com/show_bug.cgi?id=1591142
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libass' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: nsd-4.1.22-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-edd11c6c38
2018-07-01 01:07:11.502578
--------------------------------------------------------------------------------
Name : nsd
Product : Fedora EPEL 7
Version : 4.1.22
Release : 1.el7
URL : http://www.nlnetlabs.nl/nsd/
Summary : Fast and lean authoritative DNS Name Server
Description :
NSD is a complete implementation of an authoritative DNS name server.
For further information about what NSD is and what NSD is not please
consult the REQUIREMENTS document which is a part of this distribution.
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.22 and enable round-robin, minimal-responses and refuse-any
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575608 - nsd-4.1.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1575608
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nsd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months
Fedora EPEL 7 Update: python-gitlab-1.3.0-3.el7.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-4619de4f36
2018-07-01 01:07:11.502527
--------------------------------------------------------------------------------
Name : python-gitlab
Product : Fedora EPEL 7
Version : 1.3.0
Release : 3.el7.1
URL : https://github.com/python-gitlab/python-gitlab
Summary : Interact with GitLab API
Description :
Interact with GitLab API
--------------------------------------------------------------------------------
Update Information:
First release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577217 - Review Request: python-gitlab - Interact with GitLab API
https://bugzilla.redhat.com/show_bug.cgi?id=1577217
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-gitlab' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 5 months