Fedora EPEL 7 Update: mozilla-noscript-10.2.1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-a7b8a87641
2019-03-10 17:04:47.987643
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora EPEL 7
Version : 10.2.1
Release : 2.el7
URL : http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript Firefox extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
v 10.2.1 ============================================================= * Cascade
top document's restrictions to subframes (Tor issue #28873) * Fixed restored
media element from placeholder not loading previously blocked content
automatically * Fixed placeholders missing for some blocked embeddings (Tor
ticket #28720) v 10.2
============================================================ * [L10n] Updated
fr, he * Allow origin-less fetch for extensions (issue #41) * Fixed meta refresh
inside NOSCRIPT emulation breaking Firefox's built-in refresh blocking * Fixed
issue #35 "tabId is not defined" on startup * Darker red badge background to
ensure text is kept white across browsers
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-noscript' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
Fedora EPEL 7 Update: flatpak-module-tools-0.9.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-87bc7fa489
2019-03-10 17:04:47.987554
--------------------------------------------------------------------------------
Name : flatpak-module-tools
Product : Fedora EPEL 7
Version : 0.9.2
Release : 1.el7
URL : https://pagure.io/flatpak-module-tools
Summary : Tools for maintaining Flatpak applications and runtimes as Fedora modules
Description :
flatpak-module-tools is a set of command line tools (all accessed via a single
'flatpak-module' executable) for operations related to maintaining Flatpak
applications and runtimes as Fedora modules.
--------------------------------------------------------------------------------
Update Information:
Version 0.9.2 * Fixes compatibility with Flatpak 1.2 ---- Version 0.9.1 *
Add a configuration system to allow profiles pointing at different
infrastructure * Bug fixes
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update flatpak-module-tools' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
[SECURITY] Fedora EPEL 7 Update: distcc-3.2rc1-22.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-0593f2795d
2019-03-08 20:50:43.579202
--------------------------------------------------------------------------------
Name : distcc
Product : Fedora EPEL 7
Version : 3.2rc1
Release : 22.el7
URL : https://github.com/distcc/distcc
Summary : Distributed C/C++ compilation
Description :
distcc is a program to distribute compilation of C or C++ code across
several machines on a network. distcc should always generate the same
results as a local compile, is simple to install and use, and is often
two or more times faster than a local compile.
--------------------------------------------------------------------------------
Update Information:
Restrict default configuration to localhost.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660408 - CVE-2004-2687 distcc: TCP mode has too permissive default IP address whitelist [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660408
[ 2 ] Bug #1660407 - CVE-2004-2687 distcc: TCP mode has too permissive default IP address whitelist [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660407
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update distcc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
[SECURITY] Fedora EPEL 7 Update: koji-1.16.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-84bd195679
2019-03-08 20:50:43.579191
--------------------------------------------------------------------------------
Name : koji
Product : Fedora EPEL 7
Version : 1.16.2
Release : 1.el7
URL : https://pagure.io/koji/
Summary : Build system tools
Description :
Koji is a system for building and tracking RPMS. The base package
contains shared libraries and the command-line interface.
--------------------------------------------------------------------------------
Update Information:
Rebase to Koji 1.16.2 for CVE-2018-1002161
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update koji' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
Fedora EPEL 7 Update: openvpn-2.4.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-02ab99370d
2019-03-08 20:50:43.579180
--------------------------------------------------------------------------------
Name : openvpn
Product : Fedora EPEL 7
Version : 2.4.7
Release : 1.el7
URL : https://community.openvpn.net/
Summary : A full-featured SSL VPN solution
Description :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library
for compression.
--------------------------------------------------------------------------------
Update Information:
Updating to upstream OpenVPN 2.4.7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openvpn' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
Fedora EPEL 7 Update: twa-1.8.0-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-96b8154221
2019-03-08 20:50:43.579169
--------------------------------------------------------------------------------
Name : twa
Product : Fedora EPEL 7
Version : 1.8.0
Release : 2.el7
URL : https://github.com/trailofbits/twa
Summary : Tiny web auditor with strong opinions
Description :
twa is a website auditing tool that can be used to detect
HTTPS issues, missing security headers, information-leaking headers,
and other potential security headers.
--------------------------------------------------------------------------------
Update Information:
Add missing dependency on /usr/bin/dig ---- Update to latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update twa' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
[SECURITY] Fedora EPEL 7 Update: python-django-1.11.20-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-0911253d1e
2019-03-08 20:50:43.579157
--------------------------------------------------------------------------------
Name : python-django
Product : Fedora EPEL 7
Version : 1.11.20
Release : 1.el7
URL : http://www.djangoproject.com/
Summary : A high-level Python Web framework
Description :
Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as
much as possible and adhering to the DRY (Don't Repeat Yourself)
principle.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2019-6975 (rhbz#1678265)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1673642 - CVE-2019-6975 python-django: memory exhaustion in django.utils.numberformat.format()
https://bugzilla.redhat.com/show_bug.cgi?id=1673642
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-django' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
Fedora EPEL 7 Update: python-pykwalify-1.7.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-7dae6fb5b6
2019-03-08 20:50:43.579111
--------------------------------------------------------------------------------
Name : python-pykwalify
Product : Fedora EPEL 7
Version : 1.7.0
Release : 1.el7
URL : https://github.com/grokzen/pykwalify
Summary : Python lib/cli for JSON/YAML schema validation
Description :
It is a YAML/JSON validation library.
This framework is a port with a lot added functionality
of the java version of the framework kwalify that can be
found at: http://www.kuwata-lab.com/kwalify/
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.0. ---- Removed versions of BR
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1384917 - Review Request: python-pykwalify - Python lib/cli for JSON/YAML schema validation
https://bugzilla.redhat.com/show_bug.cgi?id=1384917
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pykwalify' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
[SECURITY] Fedora EPEL 6 Update: distcc-3.2rc1-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-b4ed6df2c1
2019-03-08 20:47:16.172451
--------------------------------------------------------------------------------
Name : distcc
Product : Fedora EPEL 6
Version : 3.2rc1
Release : 3.el6
URL : http://distcc.org/
Summary : Distributed C/C++ compilation
Description :
distcc is a program to distribute compilation of C or C++ code across
several machines on a network. distcc should always generate the same
results as a local compile, is simple to install and use, and is often
two or more times faster than a local compile.
--------------------------------------------------------------------------------
Update Information:
Restrict default configuration to localhost.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660408 - CVE-2004-2687 distcc: TCP mode has too permissive default IP address whitelist [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660408
[ 2 ] Bug #1660407 - CVE-2004-2687 distcc: TCP mode has too permissive default IP address whitelist [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660407
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update distcc' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months
[SECURITY] Fedora EPEL 6 Update: koji-1.16.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-26a7e6e4e8
2019-03-08 20:47:16.172441
--------------------------------------------------------------------------------
Name : koji
Product : Fedora EPEL 6
Version : 1.16.2
Release : 1.el6
URL : https://pagure.io/koji/
Summary : Build system tools
Description :
Koji is a system for building and tracking RPMS. The base package
contains shared libraries and the command-line interface.
--------------------------------------------------------------------------------
Update Information:
Rebase to Koji 1.16.2 for CVE-2018-1002161
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update koji' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 3 months