package-announce January 2015

package-announce@lists.fedoraproject.org

1 participants
1707 discussions

Fedora 21 Update: calamares-0.17.0-8.20150119git5c6a302112cee.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-0905 2015-01-20 20:09:58 -------------------------------------------------------------------------------- Name : calamares Product : Fedora 21 Version : 0.17.0 Release : 8.20150119git5c6a302112cee.fc21 URL : http://calamares.io/ Summary : Installer from a live CD/DVD/USB to disk Description : Calamares is a distribution-independent installer framework, designed to install from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working replacement for Anaconda's liveinst. -------------------------------------------------------------------------------- Update Information: An update of Calamares to a new upstream snapshot: * Network access is no longer required when Calamares removes itself from the installed system. (It now passes the `--disablerepo=*` and `-C` arguments to yum.) * The /etc/fstab entries for swap partitions now have "swap" rather than "none" as the mountpoint, fixing hibernating. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update calamares' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 21 Update: clamav-0.98.6-1.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1461 2015-01-30 20:40:57 -------------------------------------------------------------------------------- Name : clamav Product : Fedora 21 Version : 0.98.6 Release : 1.fc21 URL : http://www.clamav.net Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: ClamAV 0.98.6 ============= ClamAV 0.98.6 is a bug fix release correcting the following: * library shared object revisions. * installation issues on some Mac OS X and FreeBSD platforms. * includes a patch from Sebastian Andrzej Siewior making ClamAV pid files compatible with systemd. * Fix a heap out of bounds condition with crafted Yoda's crypter files. This issue was discovered by Felix Groebert of the Google Security Team. * Fix a heap out of bounds condition with crafted mew packer files. This issue was discovered by Felix Groebert of the Google Security Team. * Fix a heap out of bounds condition with crafted upx packer files. This issue was discovered by Kevin Szkudlapski of Quarkslab. * Fix a heap out of bounds condition with crafted upack packer files. This issue was discovered by Sebastian Andrzej Siewior. CVE-2014-9328. * Compensate a crash due to incorrect compiler optimization when handling crafted petite packer files. This issue was discovered by Sebastian Andrzej Siewior. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 29 2015 Robert Scheck <robert(a)fedoraproject.org> - 0.98.6-1 - Upgrade to 0.98.6 and updated daily.cvd (#1187050) * Wed Nov 19 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.5-2 - Corrected summary of clamav-server-systemd package (#1165672) * Wed Nov 19 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.5-1 - Upgrade to 0.98.5 and updated daily.cvd (#1138101) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1187050 - CVE-2014-9328 clamav: heap out of bounds condition with crafted upack packer files https://bugzilla.redhat.com/show_bug.cgi?id=1187050 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update clamav' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 20 Update: cifs-utils-6.4-3.fc20
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1017 2015-01-21 22:09:16 -------------------------------------------------------------------------------- Name : cifs-utils Product : Fedora 20 Version : 6.4 Release : 3.fc20 URL : http://linux-cifs.samba.org/cifs-utils/ Summary : Utilities for mounting and managing CIFS mounts Description : The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system. -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 21 2015 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 6.4-3 - Let package own %{_sysconfdir}/cifs-utils (RHBZ#1184390). - Let package own %{_libdir}/cifs-utils (RHBZ#1184391). * Mon Aug 4 2014 Sachin Prabhu <sprabhu(a)redhat.com> - 6.4-1 - update to 6.4 release * Tue May 6 2014 Sachin Prabhu <sprabhu(a)redhat.com> 6.3-2 - autoconf: allow PAM security install directory to be configurable - cifs: use krb5_kt_default() to determine default keytab location - cifskey: better use snprintf() - cifscreds: better error handling when key_search fails - cifscreds: better error handling for key_add * Thu Jan 9 2014 Jeff Layton <jlayton(a)redhat.com> 6.3-1 - update to 6.3 release * Fri Dec 13 2013 Jeff Layton <jlayton(a)redhat.com> 6.2-5 - fix linking of wbclient - add pam_cifscreds module and manpage -------------------------------------------------------------------------------- References: [ 1 ] Bug #1184390 - Unowned directory /etc/cifs-utils https://bugzilla.redhat.com/show_bug.cgi?id=1184390 [ 2 ] Bug #1184391 - Unowned directory /usr/lib64/cifs-utils https://bugzilla.redhat.com/show_bug.cgi?id=1184391 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update cifs-utils' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 21 Update: firefox-35.0.1-3.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1404 2015-01-30 00:57:39 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 21 Version : 35.0.1 Release : 3.fc21 URL : http://www.mozilla.org/projects/firefox/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: New upstream - 35.0.1 Enabled click-to-play for flash by default due to live and exploited 0-day flash vulnerability. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 27 2015 Martin Stransky <stransky(a)redhat.com> - 35.0.1-3 - Backed out the flash click-to-play setup * Mon Jan 26 2015 David Tardon <dtardon(a)redhat.com> - 35.0.1-2 - rebuild for ICU 54.1 * Fri Jan 23 2015 Martin Stransky <stransky(a)redhat.com> - 35.0.1-1 - New upstream version * Thu Jan 22 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-7 - Updated hiDPI patch to upstream version (mozbz#975919) * Thu Jan 22 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-6 - Disabled flash by default because of 0day live flash exploit (see https://isc.sans.edu/diary/Flash+0-Day+Exploit+Used+by+Angler+Exploit+Kit/1…) * Mon Jan 19 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-5 - Enable release build config - Gtk3 - added patch for HiDPI support (mozbz#975919) * Mon Jan 19 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-4 - Gtk3 - fixed tabs rendering * Wed Jan 14 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-3 - Gtk3 - replaced obsoleted focus properties - Make start.fedoraproject.org the homepage * Mon Jan 12 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-2 - Update to 35.0 Build 3 - Gtk3 - added fix for button/entry box sizes - Gtk3 - added fix for button/entry focus sizes - Spec clean-up (by moez.roy(a)gmail.com) * Tue Jan 6 2015 Martin Stransky <stransky(a)redhat.com> - 35.0-1 - Update to 35.0 Build 1 * Mon Jan 5 2015 Martin Stransky <stransky(a)redhat.com> - 34.0-12 - Fixed rhbz#1014858 - GLib-CRITICAL **: g_slice_set_config: assertion `sys_page_size == 0' failed * Fri Jan 2 2015 Martin Stransky <stransky(a)redhat.com> - 34.0-11 - Build with system jpeg on rawhide - Updated ATK patch for gtk3 * Tue Dec 23 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-9 - Added fix for rhbz#1173156 - Native NTLM authentication on Linux unsupported - Added fix for rhbz#1170109 - data corruption bug on armhfp * Sat Dec 13 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-8 - Gtk3 - Workaround for Firefox freeze when accessibility is enabled * Fri Dec 12 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-7 - Added fix for mozbz#1097592 - Firefox freeze in Gtk3 * Thu Dec 11 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-6 - Disabled Gtk3 on Fedora 21 and earlier (rhbz#1172926) * Wed Dec 10 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-5 - Disabled flash plugin instllation pop-up (mozbz#1108645) * Mon Dec 8 2014 Jiri Vanek <jvanek(a)redhat.com> - 34.0-4 - added and applied patch218, java-plugin-url.patch - fixed url for java plugin installation guide - resolves rhbz#979985 * Mon Dec 8 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-3 - Gtk3 flash plugin fix (rhbz#1171457) - Gtk3 theme fixes * Wed Dec 3 2014 Jan Horak <jhorak(a)redhat.com> - 34.0-2 - Fix for mozbz#1097550 - wrong default dictionary * Mon Dec 1 2014 Martin Stransky <stransky(a)redhat.com> - 34.0-1 - Update to 34.0 build 2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1185241 - Enable click-to-play for flash-plugin play due to 0-day vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1185241 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update firefox' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 21 Update: gpsbabel-1.5.2-1.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1038 2015-01-21 22:10:30 -------------------------------------------------------------------------------- Name : gpsbabel Product : Fedora 21 Version : 1.5.2 Release : 1.fc21 URL : http://www.gpsbabel.org Summary : A tool to convert between various formats used by GPS devices Description : Converts GPS waypoint, route, and track data from one format type to another. -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 9 2015 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.5.2-1 - Upstream update. - Rebase patches. - Reflect upstream having stopped providing tarballs: - Add gpsbabel-tarball. - Remove gpsbabel-download-latest.py. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update gpsbabel' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 21 Update: selinux-policy-3.13.1-105.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1337 2015-01-30 00:49:30 -------------------------------------------------------------------------------- Name : selinux-policy Product : Fedora 21 Version : 3.13.1 Release : 105.fc21 URL : http://github.com/TresysTechnology/refpolicy/wiki Summary : SELinux policy configuration Description : SELinux Reference Policy - modular. Based off of reference policy: Checked out revision 2.20091117 -------------------------------------------------------------------------------- Update Information: More info: http://koji.fedoraproject.org/koji/buildinfo?buildID=604115 -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 15 2015 Lukas Vrabec <lvrabec(a)redhat.com> 3.13.1-105 - Fix labels on /etc/kde/kdm - Allow texlive managers to relabelfrom - Add iptables_var_lib_t for /var/lib/ebtables - Allow mount_ecryptfs_t to read/write pam_console data - allow mozilla plugins to connect to bluetooth devices - Allow system_mail_t to create content in /var/lib/munin - Allow prosody_t to execmem, since it is using loajit. - Allow NetworkManager to noatsecure openvpn - Allow canna go call getpw* - Allow telepathy_mission_control to create tmp files - Remove boolean gpg_agent_env_file - Allow shorewall to transition to the netutils domain - Allow bumblebee read proc_net_t. BZ (1176329) - Dontaudit attempts by thumb_t to setfscreate, this is caused by executing mv command under thumb_t domain * Thu Jan 15 2015 Lukas Vrabec <lvrabec(a)redhat.com> 3.13.1-104 - Fix unconfined_server_dbus_chat() interface - Add type for tcp/18700 port and have it as lsm_plugin_port_t. - Fix mount_entry_type() interface. - Update xserver_rw_xdm_keys() interface to have 'setattr'. - fix storage_tmp_filetrans_fixed_disk() interface. - Allow sulogin to read /dev/urandom and /dev/random. - Update radius port definition to have also tcp/18121. - Add 18120/tcp as radius port. - Label prandom as random_device_t. - Allow charon to manage files in /etc/strongimcv labeled as ipsec_conf_t. - Dontaudit svirt_domains attempting to setattr on /proc - Allow systemd_passwd_agent to look at processes in /proc - Fix label on /var/lib/sddm - Allow systemd_logind_t to delete tmpfs files - Allow systemd to manage all lock files - Allow mdadm_t to create fixed_disk_device_t on /tmp file systems - Allow init_t to create gnome content in homedirs - systemd_sysctl needs to have sys_rawio - userdom_dontaudit_search_user_home_content should not search through any homedirs and subdirs - Allow userdomains to use mount commands as entrypoints - bug #1178562 shows systemd_hostnamed_t reads /proc/xen - Label /usr/libexec/Xorg.bin as xserver_exec_t. - Allow sssd to send dbus all user domains. - Allow lsm plugin to read certificates. - Make snapperd as unconfined domain. - Fix labeling for keystone CGI scripts - Fix bugs in interfaces discovered by sepolicy. - Allow slapd to read /usr/share/cracklib/pw_dict.hwm. - Allow lsm plugins to connect to tcp/18700 by default. - Allow brltty mknod capability to allow create /var/run/brltty/vcsa. - Fix pcp_domain_template() interface. - Allow mon_fsstatd to read /proc/sys/fs/binfmt_misc. - Allow glance-scrubber to connect tcp/9191. - Add conman_can_network. - Allow conman to create files/dirs in /tmp. - Allow rabbitmq_t to run hostname - Allow named to manage files in dnssec_trigger_var_run_t directory - Allow rabbitmq_t to deal with link files created with its content - Allow pcp_domains to connect to ephemeral ports, allow webd domain to dbus with avahi - Dontaudit svirt_domains attempting to setattr on /proc - Allow mdadm_t to getattr on init status files - Allow rpcd_t to write to /proc - Allow mdadm_t to create fixed_disk_device_t on /tmp file systems - Add lmt-req.lock as a apmd_lock file - Allow rpm running under sblim domain to send signull to setroubleshootd. * Mon Dec 15 2014 Lukas Vrabec <lvrabec(a)redhat.com> 3.13.1-103 - Docker has a new config/key file it writes to /etc/docker - Add support for /usr/share/vdsm/daemonAdapter - Add additionnal MLS attribute for oddjob_mkhomedir to create homedirs. - Add missing files_dontaudit_list_security_dirs() for smbd_t in samba_export_all_ro boolean. - Allow virt_qemu_ga_t to execute kmod - Allow logrotate to read hawkey.log in /var/cache/dnf/ BZ(1163438) * Thu Dec 11 2014 Lukas Vrabec <lvrabec(a)redhat.com> 3.13.1-102 - Allow pegasus_openlmi_storage_t use nsswitch. BZ(1172258) - Allow docker daemon to start transitiant units - Add support for /var/run/gluster. - Allow openvpn manage systemd_passwd_var_run_t files. BZ(1170085) - Fix /usr/libexec/sssd/selinux_child labeling. - Label /usr/libexec/tomcat/server as tomcat_exec_t. * Tue Dec 2 2014 Lukas Vrabec <lvrabec(a)redhat.com> 3.13.1-101 - Add files_dontaudit_list_security_dirs() interface - Allow rlogind to use also rlogin ports - Dontaudit couchdb to list /var - couchdb: allow disksup to monitor the local disks - dontaudit list security dirs for samba domain. - Label /var/lib/rpmrebuilddb/ as rpm_var_lib_t. BZ (1167946) * Tue Nov 25 2014 Lukas Vrabec <lvrabec(a)redhat.com> 3.13.1-100 - Add seutil_dontaudit_access_check_semanage_module_store() interface - Update to have all _systemctl() interface also init_reload_services() - Allow named_filetrans_domain to create ibus directory with correct labeling - Add labeling for /sbin/iw. - Label tcp port 5280 as ejabberd port. BZ(1059930) - Make /usr/bin/vncserver running as unconfined_service_t. - getty_t should be ranged in MLS. Then also local_login_t runs as ranged domain - Label /etc/docker/certs.d as cert_t - Allow all systemd domains to search file systems - I guess there can be content under /var/lib/lockdown #1167502 - Dontaudit access check on SELinux module store for sssd - Update to have all _systemctl() interface also init_reload_services() - Allow rhev-agentd to read /dev/.udev/db to make deploying hosted engine via iSCSI working - Allow keystone to send a generic signal to own process. - Dontaudit list user_tmp files for system_mail_t - label virt-who as virtd_exec_t - Allow rhsmcertd to send a null signal to virt-who running as virtd_t - Add virt_signull() interface - Allow .snapshots to be created in other directories, on all mountpoints - Add missing alias for _content_rw_t - Allow spamd to access razor-agent.log -------------------------------------------------------------------------------- References: [ 1 ] Bug #1156557 - [nagios_system_plugin_t] SELinux is preventing check_procs from getattr access on the file /usr/sbin/nrpe. https://bugzilla.redhat.com/show_bug.cgi?id=1156557 [ 2 ] Bug #1158258 - SELinux is preventing /usr/bin/python2.7 from 'ioctl' accesses on the unix_stream_socket unix_stream_socket. https://bugzilla.redhat.com/show_bug.cgi?id=1158258 [ 3 ] Bug #1167109 - /usr/bin/newaliases: No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=1167109 [ 4 ] Bug #1168112 - SELinux is preventing /usr/bin/python2.7 (deleted) from 'setattr' accesses on the directory /proc. https://bugzilla.redhat.com/show_bug.cgi?id=1168112 [ 5 ] Bug #1169836 - SELinux drops AVC related to certmonger during ipa-server-install https://bugzilla.redhat.com/show_bug.cgi?id=1169836 [ 6 ] Bug #1170083 - SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from 'getattr' accesses on the file /proc/<pid>/stat. https://bugzilla.redhat.com/show_bug.cgi?id=1170083 [ 7 ] Bug #1170084 - SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from 'search' accesses on the directory 3631. https://bugzilla.redhat.com/show_bug.cgi?id=1170084 [ 8 ] Bug #1172413 - SELinux is preventing /usr/bin/touch from 'create' accesses on the file libvirt-guests. https://bugzilla.redhat.com/show_bug.cgi?id=1172413 [ 9 ] Bug #1172774 - SELinux is preventing /usr/bin/freshclam from 'read' accesses on the file filesystems. https://bugzilla.redhat.com/show_bug.cgi?id=1172774 [ 10 ] Bug #1174278 - ecryptfs doesn't automount Private at login since upgrade to FC21 beta https://bugzilla.redhat.com/show_bug.cgi?id=1174278 [ 11 ] Bug #1174915 - OPENSSL_ENABLE_MD5_VERIFY can not be used with NetworkManager & OpenVPN to re-enable MD5 certificate verification https://bugzilla.redhat.com/show_bug.cgi?id=1174915 [ 12 ] Bug #1175054 - SELinux is preventing /usr/bin/kdm (deleted) from 'entrypoint' accesses on the file /etc/kde/kdm/Xsetup. https://bugzilla.redhat.com/show_bug.cgi?id=1175054 [ 13 ] Bug #1175068 - SELinux is preventing /usr/sbin/hddtemp from using the 'sys_admin' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1175068 [ 14 ] Bug #1175258 - SELinux is preventing /usr/bin/dbus-launch from 'write' accesses on the file /var/lib/sddm/.dbus/session-bus/c5b7de15f3c24e0a9eb37f4427130ae7-0. https://bugzilla.redhat.com/show_bug.cgi?id=1175258 [ 15 ] Bug #1175927 - SELinux is preventing umount.ecryptfs from read, write access on the file /run/console/brandoni. https://bugzilla.redhat.com/show_bug.cgi?id=1175927 [ 16 ] Bug #1175928 - SELinux is preventing login from 'entrypoint' accesses on the file /usr/sbin/mount.ecryptfs_private. https://bugzilla.redhat.com/show_bug.cgi?id=1175928 [ 17 ] Bug #1176226 - SELinux is preventing mv from using the 'setfscreate' accesses on a process. https://bugzilla.redhat.com/show_bug.cgi?id=1176226 [ 18 ] Bug #1176289 - SELinux is preventing /usr/bin/mv from 'relabelfrom' accesses on the file . https://bugzilla.redhat.com/show_bug.cgi?id=1176289 [ 19 ] Bug #1176327 - SELinux is preventing /usr/libexec/Xorg.bin from 'write' accesses on the directory /tmp. https://bugzilla.redhat.com/show_bug.cgi?id=1176327 [ 20 ] Bug #1176329 - SELinux is preventing bumblebeed from 'read' accesses on the file unix. https://bugzilla.redhat.com/show_bug.cgi?id=1176329 [ 21 ] Bug #1176625 - SELinux denials for shorewall https://bugzilla.redhat.com/show_bug.cgi?id=1176625 [ 22 ] Bug #1176711 - SELinux is preventing gpg-agent from 'create' accesses on the file .gpg-agent-info. https://bugzilla.redhat.com/show_bug.cgi?id=1176711 [ 23 ] Bug #1176712 - SELinux is preventing mission-control from 'write' accesses on the directory /run/user/1002. https://bugzilla.redhat.com/show_bug.cgi?id=1176712 [ 24 ] Bug #1176845 - SELinux is preventing cannaserver from 'search' accesses on the directory /var/lib/sss. https://bugzilla.redhat.com/show_bug.cgi?id=1176845 [ 25 ] Bug #1176848 - SELinux is preventing cannaserver from 'read' accesses on the file /etc/passwd. https://bugzilla.redhat.com/show_bug.cgi?id=1176848 [ 26 ] Bug #1177040 - [abrt] dnssec-trigger: subprocess.py:540:check_call:CalledProcessError: Command '['unbound-control', 'flush_zone', '.']' returned non-zero exit status 1 https://bugzilla.redhat.com/show_bug.cgi?id=1177040 [ 27 ] Bug #1177296 - SELinux is preventing /usr/libexec/bluetooth/bluetoothd from 'write' accesses on the file brightness. https://bugzilla.redhat.com/show_bug.cgi?id=1177296 [ 28 ] Bug #1177632 - SELinux is preventing revalidator5 from search access on the directory net. https://bugzilla.redhat.com/show_bug.cgi?id=1177632 [ 29 ] Bug #1178562 - SELinux is preventing /usr/lib/systemd/systemd-hostnamed from 'getattr' accesses on the file /proc/xen/capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1178562 [ 30 ] Bug #1178730 - SELinux is preventing Xorg.bin from 'getattr' accesses on the file /proc/<pid>/cmdline. https://bugzilla.redhat.com/show_bug.cgi?id=1178730 [ 31 ] Bug #1179488 - SELinux is preventing docker from using the 'setsched' accesses on a process. https://bugzilla.redhat.com/show_bug.cgi?id=1179488 [ 32 ] Bug #1159672 - SELinux is preventing /usr/lib/systemd/systemd-logind from 'getattr' accesses on the file /dev/shm/spice.2372. https://bugzilla.redhat.com/show_bug.cgi?id=1159672 [ 33 ] Bug #1162546 - missing SELinux policy for Xorg.bin https://bugzilla.redhat.com/show_bug.cgi?id=1162546 [ 34 ] Bug #1162712 - SELinux AVCs with pcp-webapi https://bugzilla.redhat.com/show_bug.cgi?id=1162712 [ 35 ] Bug #1167759 - selinux denies pam_mount to mount home on Fedora 21 https://bugzilla.redhat.com/show_bug.cgi?id=1167759 [ 36 ] Bug #1173486 - RPM verification reports vbetool.pp as missing https://bugzilla.redhat.com/show_bug.cgi?id=1173486 [ 37 ] Bug #1177051 - bacula-fd generates SELinux alerts when it tries to back up a FIFO. https://bugzilla.redhat.com/show_bug.cgi?id=1177051 [ 38 ] Bug #1177716 - [PATCH] couchdb_t must be allowed to sendto kernel unix dgram sockets https://bugzilla.redhat.com/show_bug.cgi?id=1177716 [ 39 ] Bug #1177717 - couchdb selinux: gconf_home_t AVC https://bugzilla.redhat.com/show_bug.cgi?id=1177717 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update selinux-policy' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 21 Update: patch-2.7.3-1.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1134 2015-01-25 23:44:11 -------------------------------------------------------------------------------- Name : patch Product : Fedora 21 Version : 2.7.3 Release : 1.fc21 URL : http://www.gnu.org/software/patch/patch.html Summary : Utility for modifying/upgrading files Description : The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file). Patch should be installed because it is a common way of upgrading applications. -------------------------------------------------------------------------------- Update Information: Security fixes for CVE-2014-9637 and CVE-2015-1196. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.3-1 - 2.7.3 (bug #1182157, CVE-2015-1196, bug #1184491, CVE-2014-9637). * Tue Jan 20 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.1-12 - Apply upstream patch to fix line numbering integer overflow. * Tue Jan 20 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.1-11 - Apply upstream patch to fix directory traversal via symlinks (bug #1182157, CVE-2015-1196). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1184490 - CVE-2015-1395 patch: directory traversal via file rename https://bugzilla.redhat.com/show_bug.cgi?id=1184490 [ 2 ] Bug #1185262 - CVE-2014-9637 patch: local denial of service with a crafted patch https://bugzilla.redhat.com/show_bug.cgi?id=1185262 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update patch' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 20 Update: gnome-chemistry-utils-0.14.10-1.fc20
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-0788 2015-01-17 04:41:39 -------------------------------------------------------------------------------- Name : gnome-chemistry-utils Product : Fedora 20 Version : 0.14.10 Release : 1.fc20 URL : http://www.nongnu.org/gchemutils/ Summary : A set of chemical utilities Description : This package is a set of chemical utils. Several programs are available: * A 3D molecular structure viewer (GChem3D). * A Chemical calculator (GChemCalc). * A 2D structure editor (GChemPaint). * A periodic table of the elements application (GChemTable). * A crystalline structure editor (GCrystal). * A spectra viewer (GSpectrum). -------------------------------------------------------------------------------- Update Information: This is an update to the latest bugfix release of gnome-chemistry-utils: * https://savannah.nongnu.org/forum/forum.php?forum_id=8180 -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 12 2015 Richard Hughes <richard(a)hughsie.com> - 0.14.10-1 - Updated to 0.14.10 * Sat Sep 27 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.9-2 - Rebuilt for gnumeric-1.12.18 * Mon Sep 1 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.9-1 - Updated to 0.14.9 - Added appdata files * Thu Jun 12 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.8-3 - Rebuilt for gnumeric-1.12.17 * Wed May 28 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.8-2 - Rebuilt for gnumeric-1.12.16 * Tue May 13 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.8-1 - Updated to 0.14.8 * Sun May 4 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.7-6 - Rebuilt for gnumeric-1.12.15 * Mon Apr 21 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.7-5 - Rebuilt for gnumeric-1.12.14 * Fri Mar 21 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.7-4 - Rebuilt for gnumeric-1.12.13 * Tue Mar 4 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.7-3 - Rebuilt for gnumeric-1.12.12 * Wed Feb 19 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.7-2 - Rebuilt for gnumeric-1.12.11 * Sun Feb 16 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.7-1 - Updated to 0.14.7 * Fri Jan 31 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.6-1 - Updated to 0.14.6 * Wed Jan 1 2014 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.5-1 - Updated to 0.14.5 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update gnome-chemistry-utils' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 21 Update: gnome-chemistry-utils-0.14.10-2.fc21
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-0902 2015-01-20 20:09:44 -------------------------------------------------------------------------------- Name : gnome-chemistry-utils Product : Fedora 21 Version : 0.14.10 Release : 2.fc21 URL : http://www.nongnu.org/gchemutils/ Summary : A set of chemical utilities Description : This is a meta-package for applications in the GNOME Chemistry Utils suite: * A 3D molecular structure viewer (GChem3D). * A Chemical calculator (GChemCalc). * A 2D structure editor (GChemPaint). * A periodic table of the elements application (GChemTable). * A crystalline structure editor (GCrystal). * A spectra viewer (GSpectrum). -------------------------------------------------------------------------------- Update Information: Make the AppData files actually validate. This is an update to the latest bugfix release of gnome-chemistry-utils: * https://savannah.nongnu.org/forum/forum.php?forum_id=8180 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 16 2015 Richard Hughes <richard(a)hughsie.com> - 0.14.10-2 - Make the AppData files actually validate. * Mon Jan 12 2015 Richard Hughes <richard(a)hughsie.com> - 0.14.10-1 - Updated to 0.14.10 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update gnome-chemistry-utils' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 20 Update: clamav-0.98.6-1.fc20
by updates＠fedoraproject.org 30 Jan '15

30 Jan '15

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-1437 2015-01-30 20:40:13 -------------------------------------------------------------------------------- Name : clamav Product : Fedora 20 Version : 0.98.6 Release : 1.fc20 URL : http://www.clamav.net Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: ClamAV 0.98.6 ============= ClamAV 0.98.6 is a bug fix release correcting the following: * library shared object revisions. * installation issues on some Mac OS X and FreeBSD platforms. * includes a patch from Sebastian Andrzej Siewior making ClamAV pid files compatible with systemd. * Fix a heap out of bounds condition with crafted Yoda's crypter files. This issue was discovered by Felix Groebert of the Google Security Team. * Fix a heap out of bounds condition with crafted mew packer files. This issue was discovered by Felix Groebert of the Google Security Team. * Fix a heap out of bounds condition with crafted upx packer files. This issue was discovered by Kevin Szkudlapski of Quarkslab. * Fix a heap out of bounds condition with crafted upack packer files. This issue was discovered by Sebastian Andrzej Siewior. CVE-2014-9328. * Compensate a crash due to incorrect compiler optimization when handling crafted petite packer files. This issue was discovered by Sebastian Andrzej Siewior. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 29 2015 Robert Scheck <robert(a)fedoraproject.org> - 0.98.6-1 - Upgrade to 0.98.6 and updated daily.cvd (#1187050) * Wed Nov 19 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.5-2 - Corrected summary of clamav-server-systemd package (#1165672) * Wed Nov 19 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.5-1 - Upgrade to 0.98.5 and updated daily.cvd (#1138101) * Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.98.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 21 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.4-1 - Upgrade to 0.98.4 and updated daily.cvd (#1111811) - Add build requirement to libxml2 for DMG, OpenIOC and XAR * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.98.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat May 10 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.3-1 - Upgrade to 0.98.3 and updated daily.cvd (#1095614) - Avoid automatic path detection breakage regarding curl - Added build requirement to openssl-devel for hasing code - Added clamsubmit to main package * Wed Jan 15 2014 Robert Scheck <robert(a)fedoraproject.org> - 0.98.1-1 - Upgrade to 0.98.1 and updated daily.cvd (#1053400) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1187050 - CVE-2014-9328 clamav: heap out of bounds condition with crafted upack packer files https://bugzilla.redhat.com/show_bug.cgi?id=1187050 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update clamav' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce January 2015