Fedora 20 Update: php-ocramius-instantiator-1.1.2-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9506
2014-08-16 21:42:56
--------------------------------------------------------------------------------
Name : php-ocramius-instantiator
Product : Fedora 20
Version : 1.1.2
Release : 2.fc20
URL : https://github.com/Ocramius/Instantiator
Summary : Instantiate objects in PHP without invoking their constructors
Description :
This library provides a way of avoiding usage of constructors when
instantiating PHP classes.
--------------------------------------------------------------------------------
Update Information:
From upstream changelog:
* 14: Backporting tests from doctrine/instantiator#4
* 12: HHVM does not have a PDORow class - breaks test suite
* 6: PHP 5.6 fails on tests - may require a change in php-src before fixing
* 8: PHP 5.4.30 5.5.14 5.6.0-rc* compat
* 9: Please provide LICENSE
* 10: Sending code coverage reports to scrutinizer-ci
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-ocramius-instantiator' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
[SECURITY] Fedora 20 Update: gtk3-3.10.9-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9794
2014-08-27 00:47:57
--------------------------------------------------------------------------------
Name : gtk3
Product : Fedora 20
Version : 3.10.9
Release : 2.fc20
URL : http://www.gtk.org
Summary : The GIMP ToolKit (GTK+), a library for creating GUIs for X
Description :
GTK+ is a multi-platform toolkit for creating graphical user
interfaces. Offering a complete set of widgets, GTK+ is suitable for
projects ranging from small one-off tools to complete application
suites.
This package contains version 3 of GTK+.
--------------------------------------------------------------------------------
Update Information:
This update fixes an issue that could lead to opening a cascade of menus on top of menus when holding down the menu key.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 25 2014 Kalev Lember <kalevlember(a)gmail.com> - 3.10.9-2
- Backport a fix for opening popup menus with the menu key
* Thu May 15 2014 Kalev Lember <kalevlember(a)gmail.com> - 3.10.9-1
- Update to 3.10.9
* Sun Apr 6 2014 Kalev Lember <kalevlember(a)gmail.com> - 3.10.8-1
- Update to 3.10.8
* Mon Mar 24 2014 Debarshi Ray <rishi(a)fedoraproject.org> - 3.10.7-1
- Update to 3.10.7
* Thu Dec 5 2013 Matthias Clasen <mclasen(a)redhat.com> - 3.10.6-1
- Update to 3.10.6
* Tue Nov 26 2013 Matthias Clasen <mclasen(a)redhat.com> - 3.10.5-1
- Update to 3.10.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064695 - CVE-2014-1949 cinnamon: bypass screensaver lock via the keyboard's Menu key
https://bugzilla.redhat.com/show_bug.cgi?id=1064695
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gtk3' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
Fedora 20 Update: perl-Log-Dispatch-2.42-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9579
2014-08-19 05:23:03
--------------------------------------------------------------------------------
Name : perl-Log-Dispatch
Product : Fedora 20
Version : 2.42
Release : 1.fc20
URL : http://search.cpan.org/dist/Log-Dispatch/
Summary : Dispatches messages to one or more outputs
Description :
Log::Dispatch is a suite of OO modules for logging messages to
multiple outputs, each of which can have a minimum and maximum log
level. It is designed to be easily subclassed, both for creating a
new dispatcher object and particularly for creating new outputs.
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 18 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 2.42-1
- Upstream update.
- Reflect dep changes.
- Add Log-Dispatch-2.42.diff.
- Remove Log-Dispatch-2.38.diff
* Mon Apr 7 2014 Petr Pisar <ppisar(a)redhat.com> - 2.41-2
- Build-require a sendmail program for tests (bug #1083418)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Log-Dispatch' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
Fedora 20 Update: python-fedmsg-genacls-0.3-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9303
2014-08-09 06:52:50
--------------------------------------------------------------------------------
Name : python-fedmsg-genacls
Product : Fedora 20
Version : 0.3
Release : 1.fc20
URL : http://pypi.python.org/pypi/fedmsg_genacls
Summary : A fedmsg consumer that sets gitosis acls in response to pkgdb messages
Description :
An example of using fedmsg to monitor pkgdb for messages, but delaying action
for a few seconds to accumulate messages and avoid pile-up.
--------------------------------------------------------------------------------
Update Information:
handle teams support in pkgdb2
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-fedmsg-genacls' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
[SECURITY] Fedora 20 Update: GraphicsMagick-1.3.20-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9596
2014-08-21 07:53:51
--------------------------------------------------------------------------------
Name : GraphicsMagick
Product : Fedora 20
Version : 1.3.20
Release : 1.fc20
URL : http://www.graphicsmagick.org/
Summary : An ImageMagick fork, offering faster image generation and better quality
Description :
GraphicsMagick is a comprehensive image processing package which is initially
based on ImageMagick 5.5.2, but which has undergone significant re-work by
the GraphicsMagick Group to significantly improve the quality and performance
of the software.
--------------------------------------------------------------------------------
Update Information:
New stable upstream release, patched for CVE-2014-1947. See also:
http://www.graphicsmagick.org/NEWS.html#august-16-2014
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 20 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.20-1
- 1.3.20, CVE-2014-1947 (#1064098,#1083082)
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.3.19-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Wed Aug 13 2014 Orion Poplawski <orion(a)cora.nwra.com> - 1.3.19-8
- Rebuild for libjbig soname bump
* Fri Jun 6 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.3.19-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun May 11 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.19-6
- handle upgrade path for introduction of -doc subpkg in 1.3.19-4
* Mon Feb 3 2014 Remi Collet <remi(a)fedoraproject.org> - 1.3.19-5
- upstream patch, drop debug output (#1060665)
* Sat Jan 25 2014 Ville Skyttä <ville.skytta(a)iki.fi> - 1.3.19-4
- Split docs into -doc subpackage, drop README.txt (#1056306).
- Drop no longer needed BrowseDelegateDefault modification.
- Convert docs to UTF-8.
* Thu Jan 9 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.19-3
- ppc64le is a multilib arch (#1051208)
* Wed Jan 1 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.19-2
- BR: jbigkit, libwebp, xdg-utils, xz
* Wed Jan 1 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.19-1
- 1.3.19 (#1047676)
* Tue Oct 15 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.18-5
- trim changelog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064098 - CVE-2014-1947 ImageMagick: PSD writing layer name buffer overflow ("L%02ld")
https://bugzilla.redhat.com/show_bug.cgi?id=1064098
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update GraphicsMagick' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
Fedora 19 Update: abduco-0.1-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8175
2014-07-09 01:27:29
--------------------------------------------------------------------------------
Name : abduco
Product : Fedora 19
Version : 0.1
Release : 1.fc19
URL : http://www.brain-dump.org/projects/abduco/
Summary : Session management in a clean and simple way
Description :
abduco provides session management i.e. it allows programs to be run
independently from its controlling terminal. That is programs can be
detached - run in the background - and then later reattached.
Together with dvtm it provides a simpler and cleaner alternative to tmux or
screen.
--------------------------------------------------------------------------------
Update Information:
Initial package (RHBZ #1116653)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1116653 - Review Request: abduco - Session management in a clean and simple way
https://bugzilla.redhat.com/show_bug.cgi?id=1116653
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update abduco' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
Fedora 19 Update: openttd-1.4.2-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9532
2014-08-19 05:21:00
--------------------------------------------------------------------------------
Name : openttd
Product : Fedora 19
Version : 1.4.2
Release : 1.fc19
URL : http://www.openttd.org
Summary : Transport system simulation game
Description :
OpenTTD is modeled after a popular transportation business simulation game
by Chris Sawyer and enhances the game experience dramatically. Many features
were inspired by TTDPatch while others are original.
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.2 containing a few minor bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 16 2014 Felix Kaechele <heffer(a)fedoraproject.org> - 1.4.2-1
- update to 1.4.2
* Sat Jun 21 2014 Felix Kaechele <heffer(a)fedoraproject.org> - 1.4.1-1
- update to 1.4.1
- change my e-mail in the changelogs
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Apr 4 2014 Felix Kaechele <heffer(a)fedoraproject.org> - 1.4.0-1
- update to 1.4.0
- bump dependency on openttd-opengfx to 0.5.0
* Thu Feb 13 2014 Felix Kaechele <heffer(a)fedoraproject.org> - 1.3.3-2
- rebuild for new ICU
* Thu Dec 12 2013 Felix Kaechele <heffer(a)fedoraproject.org> - 1.3.3-1
- update to 1.3.3
- fixes CVE-2013-6411
* Sat Sep 21 2013 Felix Kaechele <heffer(a)fedoraproject.org> - 1.3.2-3
- another try at a rebuild to fix BZ#989786
* Fri Aug 2 2013 Felix Kaechele <heffer(a)fedoraproject.org> - 1.3.2-2
- rebuild for icu
* Sun Jul 28 2013 Felix Kaechele <heffer(a)fedoraproject.org> - 1.3.2-1
- update to 1.3.2
* Mon Jul 22 2013 David Tardon <dtardon(a)redhat.com> - 1.3.2-0.2.RC1
- rebuild for ICU ABI break
* Thu Jul 4 2013 Felix Kaechele <heffer(a)fedoraproject.org> - 1.3.2-0.1.RC1
- update to 1.3.2-RC1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openttd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
Fedora 20 Update: php-htmLawed-1.1.18-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9556
2014-08-19 05:22:04
--------------------------------------------------------------------------------
Name : php-htmLawed
Product : Fedora 20
Version : 1.1.18
Release : 1.fc20
URL : http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/
Summary : PHP code to purify and filter HTML
Description :
PHP code to purify and filter HTML
* make HTML markup in text secure and standard-compliant
* process text for use in HTML, XHTML or XML documents
* restrict HTML elements, attributes or URL protocols
using black or white-lists
* balance tags, check element nesting, transform deprecated
attributes and tags, make relative URLs absolute, etc.
* fast, highly customizable, well-documented
* single, 48 kb file
* simple HTML Tidy alternative
* free and licensed under LGPL v3 and GPL v2+
* use to filter, secure and sanitize HTML in blog comments or
forum posts, generate XML-compatible feed items from web-page
excerpts, convert HTML to XHTML, pretty-print HTML, scrape
web-pages, reduce spam, remove XSS code, etc.
--------------------------------------------------------------------------------
Update Information:
Version 1.1.18 - 2 August 2014.
* Fix for a potential security vulnerability arising from specially encoded text with serial opening tags
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Remi Collet <remi(a)fedoraproject.org> - 1.1.18-1
- update to 1.1.18 (security)
- fix license handling
* Thu Mar 27 2014 Remi Collet <remi(a)fedoraproject.org> - 1.1.17-1
- update to 1.1.17, improves php 5.5 compatibility
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-htmLawed' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
[SECURITY] Fedora 20 Update: subversion-1.8.10-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9636
2014-08-21 07:55:28
--------------------------------------------------------------------------------
Name : subversion
Product : Fedora 20
Version : 1.8.10
Release : 1.fc20
URL : http://subversion.apache.org/
Summary : A Modern Concurrent Version Control System
Description :
Subversion is a concurrent version control system which enables one
or more users to collaborate in developing and maintaining a
hierarchy of files and directories while keeping a history of all
changes. Subversion only stores the differences between versions,
instead of every complete file. Subversion is intended to be a
compelling replacement for CVS.
--------------------------------------------------------------------------------
Update Information:
This update includes the latest stable release of **Apache Subversion**, version **1.8.10**.
**Client-side bugfixes:**
* guard against md5 hash collisions when finding cached credentials
* ra_serf: properly match wildcards in SSL certs.
* ra_serf: ignore the CommonName in SSL certs where there are Subject Alt Names
* ra_serf: fix a URI escaping bug that prevented deleting locked paths
* rm: Display the proper URL when deleting a URL in the commit log editor
* log: Fix another instance of broken pipe error
* copy: Properly handle props not present or excluded on cross wc copy
* copy: Fix copying parents of locally deleted nodes between wcs
* externals: Properly delete ancestor directories of externals when removing the external by changing svn:externals.
* ra_serf: fix memory lifetime of some hash values
**Server-side bugfixes:**
* fsfs: omit config file when creating pre-1.5 format repos
**Bindings:**
* ruby: removing warning about Ruby 1.9 support being new.
* python: fix notify_func callbacks
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 18 2014 Joe Orton <jorton(a)redhat.com> - 1.8.10-1
- update to 1.8.10 (#1129100, #1128884, #1125800)
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.8.9-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.8.9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 28 2014 Joe Orton <jorton(a)redhat.com> - 1.8.9-1
- update to 1.8.9 (#1100779)
* Tue Apr 29 2014 Vít Ondruch <vondruch(a)redhat.com> - 1.8.8-3
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1
* Tue Apr 22 2014 Joe Orton <jorton(a)redhat.com> - 1.8.8-2
- require minitest 4 to fix tests for Ruby bindings (#1089252)
* Fri Feb 28 2014 Joe Orton <jorton(a)redhat.com> - 1.8.8-1
- update to 1.8.8
* Thu Jan 23 2014 Joe Orton <jorton(a)redhat.com> - 1.8.5-4
- fix _httpd_mmn expansion in absence of httpd-devel
* Mon Jan 6 2014 Joe Orton <jorton(a)redhat.com> - 1.8.5-3
- fix permissions of /run/svnserve (#1048422)
* Tue Dec 10 2013 Joe Orton <jorton(a)redhat.com> - 1.8.5-2
- don't drop -Wall when building swig Perl bindings (#1037341)
* Tue Nov 26 2013 Joe Orton <jorton(a)redhat.com> - 1.8.5-1
- update to 1.8.5 (#1034130)
- add fix for wc-queries-test breakage (h/t Andreas Stieger, r1542774)
* Mon Nov 18 2013 Joe Orton <jorton(a)redhat.com> - 1.8.4-2
- add fix for ppc breakage (Andreas Stieger, #985582)
* Tue Oct 29 2013 Joe Orton <jorton(a)redhat.com> - 1.8.4-1
- update to 1.8.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1125800 - subversion: credentials leak via MD5 collision [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1125800
[ 2 ] Bug #1129100 - subversion-1.8.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1129100
[ 3 ] Bug #1128884 - CVE-2014-3522 subversion: incorrect SSL certificate validation in Serf RA (repository access) layer [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1128884
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update subversion' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months
[SECURITY] Fedora 20 Update: perl-Plack-1.0031-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9542
2014-08-19 05:21:24
--------------------------------------------------------------------------------
Name : perl-Plack
Product : Fedora 20
Version : 1.0031
Release : 1.fc20
URL : http://search.cpan.org/dist/Plack/
Summary : Perl Superglue for Web frameworks and Web Servers (PSGI toolkit)
Description :
Plack is a set of tools for using the PSGI stack. It contains middleware
components, a reference server and utilities for Web application
frameworks. Plack is like Ruby's Rack or Python's Paste for WSGI.
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 8 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.0031-1
- Upstream update.
* Thu Jan 16 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.0030-3
- Move misplaced %exclude-line from base-package to *-Test.
* Wed Jan 15 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.0030-2
- Split out perl-Plack-Test to avoid dependency on Test::More (RHBZ #1052859).
* Mon Dec 30 2013 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.0030-1
- Upstream update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1128978 - CVE-2014-5269 perl-Plack: trailing slashes removed leading to source code disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1128978
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Plack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 8 months