[SECURITY] Fedora EPEL 6 Update: bird-1.6.8-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-3012c9e1ad
2019-09-27 00:51:58.616974
--------------------------------------------------------------------------------
Name : bird
Product : Fedora EPEL 6
Version : 1.6.8
Release : 1.el6
URL : https://bird.network.cz
Summary : BIRD Internet Routing Daemon
Description :
BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border
Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open
Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel),
Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static
routes, inter-table protocol, command-line interface allowing on-line control
and inspection of the status of the daemon, soft reconfiguration as well as a
powerful language for route filtering.
This package contains IPv4 version.
--------------------------------------------------------------------------------
Update Information:
BIRD 1.6.8 (2019-09-10) ======================= * Several important bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1751031 - CVE-2019-16159 bird: incorrect logical expressionwhen checking the validity of an input message leads to stack-based buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1751031
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bird' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
Fedora EPEL 7 Update: mozilla-noscript-11.0.3-3.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-1a34b82a87
2019-09-27 00:24:54.140022
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora EPEL 7
Version : 11.0.3
Release : 3.el7
URL : http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript Firefox extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release. Full [changelog](https://noscript.net/changelog).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1751683 - mozilla-noscript-11.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1751683
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-noscript' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
Fedora EPEL 7 Update: wabt-1.0.11-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-f81b600696
2019-09-27 00:24:54.140009
--------------------------------------------------------------------------------
Name : wabt
Product : Fedora EPEL 7
Version : 1.0.11
Release : 1.el7
URL : https://github.com/WebAssembly/wabt
Summary : The WebAssembly Binary Toolkit
Description :
WABT (we pronounce it "wabbit") is a suite of tools for WebAssembly. These tools
are intended for use in (or for development of) toolchains or other systems that
want to manipulate WebAssembly files. Unlike the WebAssembly spec interpreter
(which is written to be as simple, declarative and "speccy" as possible), they
are written in C/C++ and designed for easier integration into other systems.
Unlike Binaryen these tools do not aim to provide an optimization platform or a
higher-level compiler target; instead they aim for full fidelity and compliance
with the spec (e.g. 1:1 round-trips with no changes to instructions).
--------------------------------------------------------------------------------
Update Information:
Latest upstream release with a number of bug fixes. Adds support for custom
annotations.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1708856 - wabt-1.0.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1708856
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wabt' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
[SECURITY] Fedora EPEL 7 Update: seamonkey-2.49.5-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-57cf200dc6
2019-09-27 00:24:54.139997
--------------------------------------------------------------------------------
Name : seamonkey
Product : Fedora EPEL 7
Version : 2.49.5
Release : 2.el7
URL : http://www.seamonkey-project.org
Summary : Web browser, e-mail, news, IRC client, HTML editor
Description :
SeaMonkey is an all-in-one Internet application suite. It includes
a browser, mail/news client, IRC client, JavaScript debugger, and
a tool to inspect the DOM for web pages. It is derived from the
application formerly known as Mozilla Application Suite.
--------------------------------------------------------------------------------
Update Information:
Rebuild to properly handle external lightning extension. ---- Update to
2.49.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1750450 - Lightning not working in SeaMonkey 2.49.5 due to --disable-calendar
https://bugzilla.redhat.com/show_bug.cgi?id=1750450
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update seamonkey' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
Fedora EPEL 7 Update: mozilla-ublock-origin-1.22.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-f2e9b0ce82
2019-09-27 00:24:54.139985
--------------------------------------------------------------------------------
Name : mozilla-ublock-origin
Product : Fedora EPEL 7
Version : 1.22.2
Release : 1.el7
URL : https://github.com/gorhill/uBlock
Summary : An efficient blocker for Firefox
Description :
An efficient blocker: easy on memory and CPU footprint, and yet can load and
enforce thousands more filters than other popular blockers out there.
Flexible, it's more than an "ad blocker": it can also read and create filters
from hosts files.
--------------------------------------------------------------------------------
Update Information:
**New:** New procedural cosmetic/HTML filtering operator: `min-text-length(x)`,
where `x` is the minimal text length of the subject DOM element. It is
chainable. Example: example.de##^script:has-text(.charCodeAt):min-text-
length(14000) New keyboard shortcut available: "Relax blocking mode". Use it to
lower the current blocking mode to a lower one. Currently the default behavior
is: + Allow JavaScript; or + Allow 3rd-party network requests Consequently, if
your default blocking profile is to disable JavaScript and 3rd-party network
requests, you will need to press twice to lower uBO's blocking mode to the
lowest blocking mode achievable through the keyboard command. The current web
page will be automatically reloaded each time the current blocking mode is
lowered. The shortcut will have no effect when the current blocking mode in
effect does not forbid JavaScript and 3rd-party requests. **Fixed** * url(...)
style injections in cosmetic filters * Parse search string as plaintext to avoid
doubling \ * Commit button gets stuck under specific circumstances *
Whitelisting behind-the-scene causes uBO to disregard the moz-extension-scheme
rule * Add link to open urls in a new tab * Coalesce common plain filters in a
bucket into a single trie * Temporary dynamic filters with 3p-script won't save
* Keyboard shortcut to change modes * Fix thrown exception in onHeadersReceived
listener * Prevent adding known invalid URL-based rules * Fix background color
of previewed image in logger * Finalize converting resources.txt into immutable
resources * Save only modified immediate hidden settings * Refactor management
of injectable resources * Strict-block only if match is anchored to end of
hostname * Minor code review re. context menu code * Add ability to suspend
network request handler at will * Fix some element picker-related issues * Fix
merging multiple URls in element picker * Replace exec with transpose in
procedural filters * Add test pages for procedural filters * Add new procedural
operator: :min-text-length(x) * Does not block large media fetched over Fetch
API * Last permanent rule is marked as changed when rules are added to the
bottom * Dashboard open from uBO popup triggers unsaved changes dialog *
Multiple "Advanced settings" opened * Redirection fails for filters having * in
the host part * Show requests blocked in the logger as a result of csp= option *
Element picker normalize style attrib * "#@#+js" entries are shown in the logger
as yellow instead of green * no-scripting: behind-the-scene false sticks even
after restoring uBO from a config where it's not present * Revert button remains
active/clickable after clicking on Apply changes * "Block element" item should
have ellipsis (usability) * Nested !#if/!#endif directives not evaluated
properly * Hide predefined whitelist directives * Non-specific procedural
filters * HTML filter showing up as cosmetic filter in logger * No warning for
unsaved changes in dashboard * Logger: can't bring up filtering options for
popup entries where URL does not start with http[s] * Switching configuration
tabs [appears to stop] list updates * Cosmetic filter exceptions not displayed
in network request logger * Fix generichide not being evaluated for local
context * Discard whole filter with bad csp= content * Add a link to the remote
asset in asset viewer * Rearrange inner loop of static network filtering engine
* Fix "Close this window" not working on document-blocked page * Add support for
all filter option * Set default delay for creating selfie to 3 minutes * Avoid
duplicated strings in filterOrigin w/ new approach * Revisit code to benefit
from ES6 syntax * Refactor runtime storage of specific cosmetic filters * Add
support for nth-ancestor operator in HTML filtering * Ensure "Ignore generic
cosmetic filters" sticks on Fennec * Fix regression affecting `*$csp=`-like
filters * Fix error when loading a non-cached non-local asset
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1713383 - mozilla-ublock-origin-1.22.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1713383
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-ublock-origin' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
[SECURITY] Fedora EPEL 7 Update: mkvtoolnix-37.0.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-c9e955fd21
2019-09-27 00:24:54.139973
--------------------------------------------------------------------------------
Name : mkvtoolnix
Product : Fedora EPEL 7
Version : 37.0.0
Release : 1.el7
URL : https://mkvtoolnix.download/
Summary : Matroska container manipulation utilities
Description :
Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle
streams into and from Matroska containers.
--------------------------------------------------------------------------------
Update Information:
Latest Matroska container stack (libebml, libmatroska, mkvtoolnix). Includes a
fix for CVE-2019-13615 in libebml.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734735 - CVE-2019-13615 libebml: could be made to crash if it opened a specially crafted file
https://bugzilla.redhat.com/show_bug.cgi?id=1734735
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mkvtoolnix' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
[SECURITY] Fedora EPEL 7 Update: libmatroska-1.5.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-c9e955fd21
2019-09-27 00:24:54.139973
--------------------------------------------------------------------------------
Name : libmatroska
Product : Fedora EPEL 7
Version : 1.5.2
Release : 1.el7
URL : https://www.matroska.org/
Summary : Open audio/video container format library
Description :
Matroska is an extensible open standard Audio/Video container. It
aims to become THE standard of multimedia container formats. Matroska
is usually found as .mkv files (matroska video) and .mka files
(matroska audio).
--------------------------------------------------------------------------------
Update Information:
Latest Matroska container stack (libebml, libmatroska, mkvtoolnix). Includes a
fix for CVE-2019-13615 in libebml.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734735 - CVE-2019-13615 libebml: could be made to crash if it opened a specially crafted file
https://bugzilla.redhat.com/show_bug.cgi?id=1734735
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmatroska' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
[SECURITY] Fedora EPEL 7 Update: libebml-1.3.9-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-c9e955fd21
2019-09-27 00:24:54.139973
--------------------------------------------------------------------------------
Name : libebml
Product : Fedora EPEL 7
Version : 1.3.9
Release : 1.el7
URL : https://www.matroska.org/
Summary : Extensible Binary Meta Language library
Description :
Extensible Binary Meta Language access library A library for reading
and writing files with the Extensible Binary Meta Language, a binary
pendant to XML.
--------------------------------------------------------------------------------
Update Information:
Latest Matroska container stack (libebml, libmatroska, mkvtoolnix). Includes a
fix for CVE-2019-13615 in libebml.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734735 - CVE-2019-13615 libebml: could be made to crash if it opened a specially crafted file
https://bugzilla.redhat.com/show_bug.cgi?id=1734735
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libebml' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months
[SECURITY] Fedora EPEL 7 Update: bird2-2.0.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-3da69c71ad
2019-09-27 00:24:54.139961
--------------------------------------------------------------------------------
Name : bird2
Product : Fedora EPEL 7
Version : 2.0.6
Release : 1.el7
URL : https://bird.network.cz/
Summary : BIRD Internet Routing Daemon
Description :
BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border
Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open
Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel),
Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static
routes, inter-table protocol, command-line interface allowing on-line control
and inspection of the status of the daemon, soft reconfiguration as well as a
powerful language for route filtering.
--------------------------------------------------------------------------------
Update Information:
BIRD 2.0.6 (2019-09-10) ======================= * RAdv: Solicited unicast RAs
* BGP: Optional Adj-RIB-Out * BGP: Extended optional parameters length *
Filter: Sets and set expressions in path masks * Several important bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1751031 - CVE-2019-16159 bird: incorrect logical expressionwhen checking the validity of an input message leads to stack-based buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1751031
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bird2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 2 months