[SECURITY] Fedora EPEL 6 Update: lighttpd-1.4.47-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-785de4dd7a
2018-08-30 02:49:59.851724
--------------------------------------------------------------------------------
Name : lighttpd
Product : Fedora EPEL 6
Version : 1.4.47
Release : 2.el6
URL : http://www.lighttpd.net/
Summary : Lightning fast webserver with light system requirements
Description :
Secure, fast, compliant and very flexible web-server which has been optimized
for high-performance environments. It has a very low memory footprint compared
to other webservers and takes care of cpu-load. Its advanced feature-set
(FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more) make
it the perfect webserver-software for every server that is suffering load
problems.
--------------------------------------------------------------------------------
Update Information:
Backported security fix from 1.4.50
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lighttpd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 6 Update: clamav-0.100.1-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-ecc69a2903
2018-08-30 02:49:59.851710
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 6
Version : 0.100.1
Release : 2.el6
URL : https://www.clamav.net/
Summary : Anti-virus software
Description :
Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of
this software is the integration with mail servers (attachment scanning).
The package provides a flexible and scalable multi-threaded daemon, a
command line scanner, and a tool for automatic updating via Internet.
The programs are based on a shared library distributed with the Clam
AntiVirus package, which you can use with your own software. Most
importantly, the virus database is kept up to date
--------------------------------------------------------------------------------
Update Information:
- Bundle zlib 1.2.7-17.el7 to avoid malformed database errors (#1600458)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1600458 - [EL6] Clamd fails to run after upgrading to 0.100.0-1 (main.cvd: Malformed database)
https://bugzilla.redhat.com/show_bug.cgi?id=1600458
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
[SECURITY] Fedora EPEL 6 Update: tomcat-7.0.90-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-d143ebd7cc
2018-08-30 02:49:59.851694
--------------------------------------------------------------------------------
Name : tomcat
Product : Fedora EPEL 6
Version : 7.0.90
Release : 1.el6
URL : http://tomcat.apache.org/
Summary : Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API
Description :
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.
Tomcat is developed in an open and participatory environment and
released under the Apache Software License version 2.0. Tomcat is intended
to be a collaboration of the best-of-breed developers from around the world.
--------------------------------------------------------------------------------
Update Information:
This update includes a rebase from 7.0.86 up to 7.0.90 which resolves two CVEs
along with various other bugs/features: * rhbz#1607585 CVE-2018-8037 tomcat:
Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed
up * rhbz#1579613 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable
'supportsCredentials' for all origins
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1579611 - CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
https://bugzilla.redhat.com/show_bug.cgi?id=1579611
[ 2 ] Bug #1607582 - CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
https://bugzilla.redhat.com/show_bug.cgi?id=1607582
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tomcat' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 6 Update: GitPython-0.3.2-0.7.RC1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-e580d70574
2018-08-30 02:49:59.851642
--------------------------------------------------------------------------------
Name : GitPython
Product : Fedora EPEL 6
Version : 0.3.2
Release : 0.7.RC1.el6
URL : http://pypi.python.org/pypi/GitPython/
Summary : Python Git Library
Description :
GitPython is a python library used to interact with Git repositories.
GitPython provides object model access to your git repository. Once you have
created a repository object, you can traverse it to find parent commit(s),
trees, blobs, etc.
GitPython is a port of the grit library in Ruby created by Tom Preston-Werner
and Chris Wanstrath.
--------------------------------------------------------------------------------
Update Information:
Fix interaction with repositories cloned/created with git >= 2.15.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1520479 - fedpkg local and prep fail after latest stable updates.
https://bugzilla.redhat.com/show_bug.cgi?id=1520479
[ 2 ] Bug #1508639 - GitPython and git 2.15.0 don't play nicely
https://bugzilla.redhat.com/show_bug.cgi?id=1508639
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update GitPython' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 6 Update: zstd-1.3.5-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1a5d711a98
2018-08-28 20:01:05.871130
--------------------------------------------------------------------------------
Name : zstd
Product : Fedora EPEL 6
Version : 1.3.5
Release : 1.el6
URL : https://github.com/facebook/zstd
Summary : Zstd compression library
Description :
Zstd, short for Zstandard, is a fast lossless compression algorithm,
targeting real-time compression scenarios at zlib-level compression ratio.
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zstd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 7 Update: classification-banner-1.6.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-6484740c70
2018-08-28 19:58:56.229500
--------------------------------------------------------------------------------
Name : classification-banner
Product : Fedora EPEL 7
Version : 1.6.7
Release : 1.el7
URL : https://github.com/SecurityCentral/classification-banner
Summary : Displays Classification Banner for a Graphical Session
Description :
Classification Banner is a python script that will display the
classification level banner of a session with a variety of
configuration options on the primary screen. This script can
help government and possibly private customers display a
notification that sensitive material is being displayed - for
example PII or SECRET Material being processed in a graphical
session. The script has been tested on a variety of graphical
environments such as GNOME2, GNOME3, KDE, twm, icewm, and Cinnamon.
--------------------------------------------------------------------------------
Update Information:
First package for EPEL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1615640 - Review Request: classification-banner - Displays Classification Banner for a Graphical Session
https://bugzilla.redhat.com/show_bug.cgi?id=1615640
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update classification-banner' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 7 Update: zstd-1.3.5-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-d02a785e0b
2018-08-28 19:58:56.229485
--------------------------------------------------------------------------------
Name : zstd
Product : Fedora EPEL 7
Version : 1.3.5
Release : 1.el7
URL : https://github.com/facebook/zstd
Summary : Zstd compression library
Description :
Zstd, short for Zstandard, is a fast lossless compression algorithm,
targeting real-time compression scenarios at zlib-level compression ratio.
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zstd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 7 Update: libfaketime-0.9.6-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-0c075c34b7
2018-08-28 19:58:56.229424
--------------------------------------------------------------------------------
Name : libfaketime
Product : Fedora EPEL 7
Version : 0.9.6
Release : 3.el7
URL : http://www.code-wizards.com/projects/libfaketime/
Summary : Manipulate system time per process for testing purposes
Description :
libfaketime intercepts various system calls which programs use to
retrieve the current date and time. It can then report faked dates and
times (as specified by you, the user) to these programs. This means you
can modify the system time a program sees without having to change the
time system- wide.
--------------------------------------------------------------------------------
Update Information:
Add support for CLOCK_BOOTTIME (patch by Mario Pareja <pareja.mario(a)gmail.com>)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libfaketime' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 7 Update: zchunk-0.9.7-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-080e852e16
2018-08-27 01:51:08.882496
--------------------------------------------------------------------------------
Name : zchunk
Product : Fedora EPEL 7
Version : 0.9.7
Release : 2.el7
URL : https://github.com/zchunk/zchunk
Summary : Compressed file format that allows easy deltas
Description :
zchunk is a compressed file format that splits the file into independent
chunks. This allows you to only download the differences when downloading a
new version of the file, and also makes zchunk files efficient over rsync.
zchunk files are protected with strong checksums to verify that the file you
downloaded is in fact the file you wanted.
--------------------------------------------------------------------------------
Update Information:
New release with contrib script to generate dictionaries
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zchunk' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months
Fedora EPEL 7 Update: perl-Parse-EDID-1.0.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-32805ecaa4
2018-08-27 01:51:08.882481
--------------------------------------------------------------------------------
Name : perl-Parse-EDID
Product : Fedora EPEL 7
Version : 1.0.7
Release : 1.el7
URL : https://metacpan.org/release/Parse-EDID
Summary : Extended display identification data (EDID) parser
Description :
This module provides some function to parse Extended Display Identification
Data binary data structures.
--------------------------------------------------------------------------------
Update Information:
upgrade to 1.0.7 various bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613213 - Upgrade perl-Parse-EDID to 1.0.7
https://bugzilla.redhat.com/show_bug.cgi?id=1613213
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Parse-EDID' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 7 months