Fedora 20 Update: jss-4.2.6-35.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-11933
2014-10-01 03:28:28
--------------------------------------------------------------------------------
Name : jss
Product : Fedora 20
Version : 4.2.6
Release : 35.fc20
URL : http://www.mozilla.org/projects/security/pki/jss/
Summary : Java Security Services (JSS)
Description :
Java Security Services (JSS) is a java native interface which provides a bridge
for java-based applications to use native Network Security Services (NSS).
This only works with gcj. Other JREs require that JCE providers be signed.
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Christina Fu <cfu(a)redhat.com> - 4.2.6-35
- Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
(cfu for jnimeh(a)gmail.com)
- Bugzilla Bug #1133718 - Key strength validation is not performed for RC4 algorithm (nkinder)
- Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
TLS v1.2 via NSS through JSS (cfu)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1040640 - Incorrect OIDs for SHA2 algorithms
https://bugzilla.redhat.com/show_bug.cgi?id=1040640
[ 2 ] Bug #1133718 - Key strength validation is not performed for RC4 algorithm
https://bugzilla.redhat.com/show_bug.cgi?id=1133718
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 20 Update: perl-MCE-1.520-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14830
2014-11-13 16:51:25
--------------------------------------------------------------------------------
Name : perl-MCE
Product : Fedora 20
Version : 1.520
Release : 1.fc20
URL : http://search.cpan.org/dist/MCE/
Summary : Many-core Engine for Perl providing parallel processing capabilities
Description :
Many-core Engine (MCE) for Perl helps enable a new level of performance by
maximizing all available cores. MCE spawns a pool of workers and therefore
does not fork a new process per each element of data. Instead, MCE follows
a bank queuing model. Imagine the line being the data and bank-tellers the
parallel workers. MCE enhances that model by adding the ability to chunk
the next n elements from the input stream to the next available worker.
--------------------------------------------------------------------------------
Update Information:
Many-core Engine (MCE) for Perl helps enable a new level of performance by maximizing all available cores. MCE spawns a pool of workers and therefore does not fork a new process per each element of data. Instead, MCE follows a bank queuing model. Imagine the line being the data and bank-tellers the parallel workers. MCE enhances that model by adding the ability to chunk the next n elements from the input stream to the next available worker.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1162531 - Review Request: perl-MCE - Many-core Engine for Perl providing parallel processing capabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1162531
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-MCE' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 19 Update: perl-Time-Warp-0.51-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15059
2014-11-14 11:05:37
--------------------------------------------------------------------------------
Name : perl-Time-Warp
Product : Fedora 19
Version : 0.51
Release : 1.fc19
URL : http://search.cpan.org/dist/Time-Warp
Summary : Control over the flow of time
Description :
Our external experience unfolds in 3 1/2 dimensions (time has a
dimensionality of 1/2). The Time::Warp module offers developers control
over the measurement of time.
--------------------------------------------------------------------------------
Update Information:
This relase corrects encoding of the documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 13 2014 Petr Pisar <ppisar(a)redhat.com> - 0.51-1
- 0.51 bump
- Do not build-require specific Test::More version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1163318 - perl-Time-Warp-0.51 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1163318
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Time-Warp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 20 Update: bashmount-3.2.0-3.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14528
2014-11-09 11:19:53
--------------------------------------------------------------------------------
Name : bashmount
Product : Fedora 20
Version : 3.2.0
Release : 3.fc20
URL : http://sourceforge.net/projects/bashmount
Summary : A menu-driven bash script for mounting removable media
Description :
bashmount is a menu-driven bash script that uses udisks2 to easily mount,
unmount or eject removable devices without dependencies on any GUI or
desktop environment. An extensive configuration file allows custom commands
to be run on devices.
The use of udisks2 is optional. The mount command can be used, or any other
suitable back-end can be configured.
--------------------------------------------------------------------------------
Update Information:
fix macro for udisks2 dependency
Unretire package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1089493 - Review Request: bashmount - A menu-driven bash script for mounting removable media
https://bugzilla.redhat.com/show_bug.cgi?id=1089493
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bashmount' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
[SECURITY] Fedora 19 Update: python-2.7.5-15.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14266
2014-11-05 02:56:22
--------------------------------------------------------------------------------
Name : python
Product : Fedora 19
Version : 2.7.5
Release : 15.fc19
URL : http://www.python.org/
Summary : An interpreted, interactive, object-oriented programming language
Description :
Python is an interpreted, interactive, object-oriented programming
language often compared to Tcl, Perl, Scheme or Java. Python includes
modules, classes, exceptions, very high level dynamic data types and
dynamic typing. Python supports interfaces to many system calls and
libraries, as well as to various windowing systems (X11, Motif, Tk,
Mac and MFC).
Programmers can write new built-in modules for Python in C or C++.
Python can be used as an extension language for applications that need
a programmable interface.
Note that documentation for Python is provided in the python-docs
package.
This package provides the "python" executable; most of the actual
implementation is within the "python-libs" package.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2014-4650: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 3 2014 Slavek Kabrda <bkabrda(a)redhat.com> - 2.7.5-15
- Fix CVE-2014-4650 - CGIHTTPServer URL handling
Resolves: rhbz#1113528
* Thu Sep 25 2014 Robert Kuska <rkuska(a)redhat.com> - 2.7.5-14
- potential buffer overflow
Resolves: rhbz#1146027
* Wed Jun 25 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 2.7.5-13
- JSON module could read arbitrary process memory
Resolves: rhbz#1112293
* Thu Jun 19 2014 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-12
- Fix test failures with SQLite 3.8.4
- Fix double close of subprocess pipes when child process fails
Resolves: rhbz#1103450
* Wed Feb 19 2014 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-11
- Enable loading sqlite extensions.
Resolves: rhbz#1066708
* Mon Feb 10 2014 Tomas Radej <tradej(a)redhat.com> - 2.7.5-10
- Fixed buffer overflow (upstream patch)
Resolves: rhbz#1062375
* Tue Nov 12 2013 Tomas Radej <tradej(a)redhat.com> - 2.7.5-9
- Import get_python_version in bdist_rpm
Resolves: rhbz#1029082
* Tue Oct 8 2013 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-8
- Fix processing gdb py-bt command in eval calls.
Resolves: rhbz#1008154
* Tue Sep 3 2013 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-7
- Removed ancient Obsolete: python-sqlite2.
* Mon Aug 26 2013 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-6
- Sync back/renumber patches to stay consistent with rhel.
* Mon Aug 19 2013 Matej Stuchlik <mstuchli(a)redhat.com> - 2.7.5-5
- Added fix for CVE-2013-4238 (rhbz#998430)
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.7.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jul 8 2013 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-3
- Fix build with libffi containing multilib wrapper for ffi.h (rhbz#979696).
* Mon Jul 8 2013 Bohuslav Kabrda <bkabrda(a)redhat.com> - 2.7.5-2
- Obsolete PyXML as requested in rhbz#981137.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1113528 - CVE-2014-4650 python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1113528
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 19 Update: perl-Text-MultiMarkdown-1.000035-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15021
2014-11-14 11:03:41
--------------------------------------------------------------------------------
Name : perl-Text-MultiMarkdown
Product : Fedora 19
Version : 1.000035
Release : 1.fc19
URL : http://search.cpan.org/dist/Text-MultiMarkdown/
Summary : Convert MultiMarkdown syntax to (X)HTML
Description :
Markdown is a text-to-HTML filter; it translates an easy-to-read / easy-to-
write structured text format into HTML. Markdown's text format is most
similar to that of plain text email, and supports features such as headers,
*emphasis*, code blocks, block quotes, and links.
--------------------------------------------------------------------------------
Update Information:
This release fixes encoding of XML metacharacters. It introduces a new self_url constructor configuration parameter to define footnote link prefix.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 13 2014 Petr Pisar <ppisar(a)redhat.com> - 1.000035-1
- 1.000035 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1163316 - perl-Text-MultiMarkdown-1.000035 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1163316
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Text-MultiMarkdown' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 20 Update: heat-cfntools-1.2.6-5.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14959
2014-11-13 17:02:21
--------------------------------------------------------------------------------
Name : heat-cfntools
Product : Fedora 20
Version : 1.2.6
Release : 5.fc20
URL : https://launchpad.net/heat-cfntools/
Summary : Tools required to be installed on Heat provisioned cloud instances
Description :
Tools required to be installed on Heat provisioned cloud instances
--------------------------------------------------------------------------------
Update Information:
Remove yum dependency, as it will not typically be installed on Atomic hosts
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 6 2014 Colin Walters <walters(a)redhat.com> - 1.2.6-5
- Remove yum dependency, as it will not typically be installed on Atomic hosts
* Thu Aug 28 2014 Jeff Peeler <jpeeler(a)redhat.com> 1.2.6-4
- add patch to remove wget dependency
- remove ruby dependency as it's too big for non-ruby users
* Tue Aug 19 2014 Jeff Peeler <jpeeler(a)redhat.com> 1.2.6-3
- fix dependencies to include external commands (rhbz#1130964)
* Mon Nov 11 2013 Jeff Peeler <jpeeler(a)redhat.com> 1.2.6-2
- add /var/lib/heat-cfntools directory (rhbz #1028664)
* Tue Oct 22 2013 Jeff Peeler <jpeeler(a)redhat.com> 1.2.6-1
- rebase to 1.2.6
- added new doc files
- bump boto version requirement
- add python-pbr buildrequire
- fixed previous changelog date
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1161290 - heat-cfntools should not depend on yum
https://bugzilla.redhat.com/show_bug.cgi?id=1161290
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update heat-cfntools' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 19 Update: nodejs-nsp-audit-shrinkwrap-1.0.0-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14907
2014-11-13 16:59:38
--------------------------------------------------------------------------------
Name : nodejs-nsp-audit-shrinkwrap
Product : Fedora 19
Version : 1.0.0
Release : 1.fc19
URL : https://github.com/nodesecurity/nsp-audit-shrinkwrap
Summary : Audits a shrinkwrap file against the NSP module vulnerability database
Description :
Audits a shrinkwrap file against the Node Security Project module
vulnerability database.
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1144666 - Review Request: nodejs-nsp-audit-shrinkwrap - Audits a shrinkwrap file against the Node Security Project module vulnerability database
https://bugzilla.redhat.com/show_bug.cgi?id=1144666
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nodejs-nsp-audit-shrinkwrap' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 19 Update: perl-Rose-DB-Object-0.813-4.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14926
2014-11-13 17:00:38
--------------------------------------------------------------------------------
Name : perl-Rose-DB-Object
Product : Fedora 19
Version : 0.813
Release : 4.fc19
URL : http://search.cpan.org/dist/Rose-DB-Object/
Summary : Extensible, high performance object-relational mapper (ORM)
Description :
Rose::DB::Object is a base class for objects that encapsulate a single row
in a database table. Rose::DB::Object-derived objects are sometimes simply
called "Rose::DB::Object objects" in this documentation for the sake of
brevity, but be assured that derivation is the only reasonable way to use
this class.
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 0.813
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 12 2014 Bill Pemberton <wfp5p(a)worldbroken.com> - 0.813-4
- update release to 4
* Wed Nov 12 2014 Bill Pemberton <wfp5p(a)worldbroken.com> - 0.813-3
- Update to version 0.813
- This version has several bug and documentation fixes.
* Wed Mar 26 2014 Bill Pemberton <wfp5p(a)worldbroken.com> - 0.811-1
- update to version 0.811
- fixes a bug that prevented many-to-many map records from being saved
to the database
* Thu Dec 5 2013 Bill Pemberton <wfp5p(a)worldbroken.com> - 0.809-1
- Update to version 0.809
- fixes precision and scale for auto-loaded numeric column metadata
* Tue Sep 3 2013 Bill Pemberton <wfp5p(a)worldbroken.com> - 0.807-1
- update to version 0.807
- Fixes inheritance of Rose::DB::Object::Cached's cached_objects_expire_in
attribute.
* Mon Jun 10 2013 Bill Pemberton <wfp5p(a)virginia.edu> - 0.806-1
- update to version 0.806
- fixes bug under perl 5.17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1163291 - perl-Rose-DB-Object-0.813 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1163291
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Rose-DB-Object' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months
Fedora 20 Update: tomcatjss-7.1.1-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-12069
2014-10-03 03:02:46
--------------------------------------------------------------------------------
Name : tomcatjss
Product : Fedora 20
Version : 7.1.1
Release : 1.fc20
URL : http://pki.fedoraproject.org/
Summary : JSSE implementation using JSS for Tomcat
Description :
A Java Secure Socket Extension (JSSE) implementation
using Java Security Services (JSS) for Tomcat 7.
NOTE: The 'tomcatjss' package conflicts with the 'tomcat-native' package
because it uses an underlying NSS security model rather than the
OpenSSL security model, so these two packages may not co-exist.
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #1058366 - Provide Tomcat support for TLS v1.1 and TLS v1.2 (Tomcatjss)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 Christina Fu <cfu(a)redhat.com> 7.1.1-1
- Bugzilla Bug #1058366 NullPointerException in tomcatjss searching
for attribute "clientauth" (cfu)
- Bugzilla Bug #871171 - Provide Tomcat support for TLS v1.1 and
TLS v1.2 (cfu)
- Bumped revision to 7.1.1
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 7.1.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Mar 25 2014 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 7.1.0-5
- Move to java-headless
- Resolves: rhbz#1068567
* Tue Jan 7 2014 Michael Simacek <msimacek(a)redhat.com> - 7.1.0-5
- Remove versioned symlink (rhbz#1022167)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #871171 - Provide Tomcat support for TLS v1.1 and TLS v1.2 (Tomcatjss)
https://bugzilla.redhat.com/show_bug.cgi?id=871171
[ 2 ] Bug #1058366 - NullPointerException in tomcatjss searching for attribute "clientauth"
https://bugzilla.redhat.com/show_bug.cgi?id=1058366
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tomcatjss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 7 months