[SECURITY] Fedora EPEL 8 Update: clamav-0.101.4-1.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-fabd190d13
2019-09-08 01:58:44.422004
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora EPEL 8
Version : 0.101.4
Release : 1.el8
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.101.4 is a security patch release that addresses the following issues.
- An out of bounds write was possible within ClamAV's NSIS bzip2 library when
attempting decompression in cases where the number of selectors exceeded the max
limit set by the library (CVE-2019-12900). The issue has been resolved by
respecting that limit. Thanks to Martin Simmons for reporting the issue
here. - The zip bomb vulnerability mitigated in 0.101.3 has been assigned
the CVE identifier CVE-2019-12625. Unfortunately, a workaround for the zip-bomb
mitigation was immediately identified. To remediate the zip-bomb scan time
issue, a scan time limit has been introduced in 0.101.4. This limit now resolves
ClamAV's vulnerability to CVE-2019-12625. The default scan time limit is 2
minutes (120000 milliseconds). To customize the time limit: - use the
clamscan --max-scantime option - use the clamd MaxScanTime config option
Libclamav users may customize the time limit using the cl_engine_set_num
function. For example: C cl_engine_set_num(engine,
CL_ENGINE_MAX_SCANTIME, time_limit_milliseconds) Thanks to David Fifield
for reviewing the zip-bomb mitigation in 0.101.3 and reporting the issue.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 8 Update: python-ecdsa-0.13.2-3.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-e9edb47a44
2019-09-08 01:58:44.421988
--------------------------------------------------------------------------------
Name : python-ecdsa
Product : Fedora EPEL 8
Version : 0.13.2
Release : 3.el8
URL : https://pypi.python.org/pypi/ecdsa
Summary : ECDSA cryptographic signature library
Description :
This is an easy-to-use implementation of ECDSA cryptography (Elliptic Curve
Digital Signature Algorithm), implemented purely in Python, released under
the MIT license. With this library, you can quickly create keypairs (signing
key and verifying key), sign messages, and verify the signatures. The keys
and signatures are very short, making them easy to handle and incorporate
into other protocols.
--------------------------------------------------------------------------------
Update Information:
This is an easy-to-use implementation of ECDSA cryptography (Elliptic Curve
Digital Signature Algorithm), implemented purely in Python, released under the
MIT license. With this library, you can quickly create keypairs (signing key and
verifying key), sign messages, and verify the signatures. The keys and
signatures are very short, making them easy to handle and incorporate into other
protocols.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744977 - Request to build python-ecdsa for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1744977
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-ecdsa' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 8 Update: perl-Net-IP-1.26-20.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-e5ad6f9682
2019-09-08 01:58:44.421972
--------------------------------------------------------------------------------
Name : perl-Net-IP
Product : Fedora EPEL 8
Version : 1.26
Release : 20.el8
URL : https://metacpan.org/release/Net-IP
Summary : Perl module for manipulation of IPv4 and IPv6 addresses
Description :
This is the Net::IP module, designed to allow easy manipulation of IPv4 and
IPv6 addresses.
Two applications using the Net::IP module are included: ipcount, an IP address
mini-calculator, which can calculate the number of IP addresses in a prefix or
all the prefixes contained in a given range; and iptab, which prints out a
handy IP "cheat sheet".
--------------------------------------------------------------------------------
Update Information:
This is the first EPEL-8 build of perl-Net-IP.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744681 - [RFE] EPEL8 branch of perl-Net-IP
https://bugzilla.redhat.com/show_bug.cgi?id=1744681
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Net-IP' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 8 Update: perl-CPAN-Changes-0.400002-13.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-0a41d88896
2019-09-08 01:58:44.421953
--------------------------------------------------------------------------------
Name : perl-CPAN-Changes
Product : Fedora EPEL 8
Version : 0.400002
Release : 13.el8
URL : https://metacpan.org/release/CPAN-Changes
Summary : Read and write Changes files
Description :
It is standard practice to include a Changes file in your distribution. The
purpose of the Changes file is to help a user figure out what has changed
since the last release.
People have devised many ways to write the Changes file. A preliminary
specification has been created (CPAN::Changes::Spec) to encourage module
authors to write clear and concise Changes.
This module will help users programmatically read and write Changes files
that conform to the specification.
--------------------------------------------------------------------------------
Update Information:
This is the first EPEL-8 package of perl-CPAN-Changes.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-CPAN-Changes' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 8 Update: perl-Expect-1.35-10.el8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-6fc04a83e8
2019-09-08 01:58:44.421872
--------------------------------------------------------------------------------
Name : perl-Expect
Product : Fedora EPEL 8
Version : 1.35
Release : 10.el8
URL : https://metacpan.org/release/Expect
Summary : Expect for Perl
Description :
This module provides Expect-like functionality to Perl. Expect is
a tool for automating interactive applications such as telnet, ftp,
passwd, fsck, rlogin, tip, etc.
--------------------------------------------------------------------------------
Update Information:
This is the first EPEL-8 build of perl-Expect.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744512 - Request to build perl-Expect for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1744512
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Expect' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 6 Update: php-pear-CAS-1.3.8-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-184f92b8b3
2019-09-06 14:54:55.505145
--------------------------------------------------------------------------------
Name : php-pear-CAS
Product : Fedora EPEL 6
Version : 1.3.8
Release : 1.el6
URL : https://wiki.jasig.org/display/CASC/phpCAS
Summary : Central Authentication Service client library in php
Description :
This package is a PEAR library for using a Central Authentication Service.
Autoloader '%{pear_phpdir}/CAS/Autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Changes in version 1.3.8** **Bug Fixes:** * Fix pear package [#297] (Phil
Fenstermacher) **Improvement:** * Adding support for PROXY CALLBACK using
POST parameters instead of GET [#312]
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pear-CAS' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 7 Update: paho-c-1.3.1-0.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-c6e437bf9e
2019-09-06 13:26:08.942205
--------------------------------------------------------------------------------
Name : paho-c
Product : Fedora EPEL 7
Version : 1.3.1
Release : 0.el7
URL : https://eclipse.org/paho/clients/c/
Summary : MQTT C Client
Description :
The Paho MQTT C Client is a fully fledged MQTT client written in C.
--------------------------------------------------------------------------------
Update Information:
Update paho-c package to the latest upstream verssion 1.3.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update paho-c' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 7 Update: firebird-2.5.9.27139.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-731e43d3e3
2019-09-06 13:26:08.942191
--------------------------------------------------------------------------------
Name : firebird
Product : Fedora EPEL 7
Version : 2.5.9.27139.0
Release : 1.el7
URL : http://www.firebirdsql.org/
Summary : SQL relational database management system
Description :
This package contains common files between firebird-classic, firebird-superclassic and
firebird-superserver. You will need this if you want to use either one.
--------------------------------------------------------------------------------
Update Information:
update to 2.5.9 (End of Series)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update firebird' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 7 Update: xrdp-0.9.11-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-2c5871fa0f
2019-09-06 13:26:08.942176
--------------------------------------------------------------------------------
Name : xrdp
Product : Fedora EPEL 7
Version : 0.9.11
Release : 1.el7
URL : http://www.xrdp.org/
Summary : Open source remote desktop protocol (RDP) server
Description :
xrdp provides a fully functional RDP server compatible with a wide range
of RDP clients, including FreeRDP and Microsoft RDP client.
--------------------------------------------------------------------------------
Update Information:
New features - Suppress output (do not draw screen when client window is
minimized) #1330 - Audio input (microphone) redirection compatible with MS-
RDPEAI #1369 - Now xrdp can listen on more than one port #1124 #1366 Bug fixes
- Fix the issue audio redirection sometimes sounds with long delay #1363 - Check
term event for more responsive shutdown #1372
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xrdp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months
Fedora EPEL 7 Update: cekit-3.4.0-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-b0e456e708
2019-09-06 13:26:08.942160
--------------------------------------------------------------------------------
Name : cekit
Product : Fedora EPEL 7
Version : 3.4.0
Release : 1.el7
URL : https://cekit.io
Summary : Container image creation tool
Description :
CEKit helps to build container images from image definition files
--------------------------------------------------------------------------------
Update Information:
Adds support for multi-stage builds.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cekit' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 9 months