Fedora 22 Update: supybot-fedmsg-0.1.0-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4193
2015-03-19 14:10:10
--------------------------------------------------------------------------------
Name : supybot-fedmsg
Product : Fedora 22
Version : 0.1.0
Release : 1.fc22
URL : http://github.com/ralphbean/supybot-fedmsg
Summary : Plugin for supybot that enables meetbot with fedmsg output.
Description :
A Supybot plugin for sending messages across the Fedora Infrastructure message
bus. This plugin modifies other installed plugins during runtime,
instrumenting them to send messages on certain events.
Currently supported target plugins are:
- meetbot
--------------------------------------------------------------------------------
Update Information:
Publish new meeting line items.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update supybot-fedmsg' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 22 Update: gparted-0.22.0-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4631
2015-03-26 16:41:39
--------------------------------------------------------------------------------
Name : gparted
Product : Fedora 22
Version : 0.22.0
Release : 1.fc22
URL : http://www.gparted.org
Summary : Gnome Partition Editor
Description :
GParted stands for Gnome Partition Editor and is a graphical frontend to
libparted. Among other features it supports creating, resizing, moving
and copying of partitions. Also several (optional) filesystem tools provide
support for filesystems not included in libparted. These optional packages
will be detected at runtime and don't require a rebuild of GParted
--------------------------------------------------------------------------------
Update Information:
Update to version 0.22.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gparted' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 22 Update: yum-langpacks-0.4.5-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4845
2015-03-28 23:41:30
--------------------------------------------------------------------------------
Name : yum-langpacks
Product : Fedora 22
Version : 0.4.5
Release : 1.fc22
URL : https://fedorahosted.org/yum-langpacks/
Summary : Langpacks plugin for yum
Description :
Yum-langpacks is a plugin for YUM that looks for langpacks for your native
language for packages you install.
--------------------------------------------------------------------------------
Update Information:
Upstream release 0.4.5, just remove /var/lib/yum/plugins/langpacks/installed_langpacks file as root and run "yum langlist", should show you "No langpacks installed".
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1203571 - should show "No Langpacks installed" when no langpacks are installed
https://bugzilla.redhat.com/show_bug.cgi?id=1203571
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update yum-langpacks' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
[SECURITY] Fedora 20 Update: libssh2-1.5.0-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-3791
2015-03-13 12:40:16
--------------------------------------------------------------------------------
Name : libssh2
Product : Fedora 20
Version : 1.5.0
Release : 1.fc20
URL : http://www.libssh2.org/
Summary : A library implementing the SSH2 protocol
Description :
libssh2 is a library implementing the SSH2 protocol as defined by
Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25),
SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*,
SECSH-DHGEX(04), and SECSH-NUMBERS(10).
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream release version, contains numerous bug fixes and enhancements as described in the RELEASE-NOTES file.
These include a security fix for CVE-2015-1782:
A malicious attacker could man in the middle a real server and cause libssh2-using clients to crash (denial of service) or otherwise read and use completely unintended memory areas in this process. There are no known exploits of this flaw at this time.
See http://www.libssh2.org/adv_20150311.html for further details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 11 2015 Paul Howarth <paul(a)city-fan.org> - 1.5.0-1
- Update to 1.5.0
- See RELEASE-NOTES for details of bug fixes and enhancements
- Security Advisory for CVE-2015-1782, using SSH_MSG_KEXINIT data unbounded
* Fri Oct 10 2014 Kamil Dudka <kdudka(a)redhat.com> 1.4.3-10
- prevent a not-connected agent from closing STDIN (#1147717)
* Wed Apr 30 2014 Kamil Dudka <kdudka(a)redhat.com> 1.4.3-9
- Fix curl's excessive memory consumption during scp download
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1199511 - CVE-2015-1782 libssh2: Using SSH_MSG_KEXINIT data unbounded
https://bugzilla.redhat.com/show_bug.cgi?id=1199511
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libssh2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 22 Update: mingw-colord-1.2.9-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-3673
2015-03-13 12:28:02
--------------------------------------------------------------------------------
Name : mingw-colord
Product : Fedora 22
Version : 1.2.9
Release : 1.fc22
URL : http://www.freedesktop.org/software/colord/
Summary : Color libraries and data files for MinGW
Description :
colord is a low level system activated daemon that maps color devices
to color profiles. This package is designed for MinGW where the color libraries
are being installed without the daemon.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mingw-colord' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 22 Update: qt-4.8.6-26.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4796
2015-03-28 23:39:03
--------------------------------------------------------------------------------
Name : qt
Product : Fedora 22
Version : 4.8.6
Release : 26.fc22
URL : http://qt-project.org/
Summary : Qt toolkit
Description :
Qt is a software toolkit for developing applications.
This package contains base tools, like string, xml, and network
handling.
--------------------------------------------------------------------------------
Update Information:
macros.qt4: fix _qt4_evr macro (missing : after epoch)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 22 Update: mingw-colorhug-client-0.2.6-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-3817
2015-03-13 12:45:08
--------------------------------------------------------------------------------
Name : mingw-colorhug-client
Product : Fedora 22
Version : 0.2.6
Release : 1.fc22
URL : http://www.hughski.com/
Summary : MinGW Tools for the Hughski ColorHug
Description :
The Hughski ColorHug colorimeter is a low cost open-source hardware
sensor used to calibrate screens.
This package includes the client tools which allows the user to upgrade
the firmware on the sensor or to access the sensor from command line
scripts.
This is the MinGW version of these tools.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mingw-colorhug-client' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
[SECURITY] Fedora 21 Update: php-5.6.7-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4236
2015-03-21 00:12:36
--------------------------------------------------------------------------------
Name : php
Product : Fedora 21
Version : 5.6.7
Release : 1.fc21
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
**19 Mar 2015, PHP 5.6.7**
Core:
* Fixed bug #69174 (leaks when unused inner class use traits precedence). (Laruence)
* Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize). (Laruence)
* Fixed bug #69121 (Segfault in get_current_user when script owner is not in passwd with ZTS build). (dan at syneto dot net)
* Fixed bug #65593 (Segfault when calling ob_start from output buffering callback). (Mike)
* Fixed bug #68986 (pointer returned by php_stream_fopen_temporary_file not validated in memory.c). (nayana at ddproperty dot com)
* Fixed bug #68166 (Exception with invalid character causes segv). (Rasmus)
* Fixed bug #69141 (Missing arguments in reflection info for some builtin functions). (kostyantyn dot lysyy at oracle dot com)
* Fixed bug #68976 (Use After Free Vulnerability in unserialize()) (CVE-2015-0231). (Stas)
* Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options). (Anatol Belski)
* Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)
CGI:
* Fixed bug #69015 (php-cgi's getopt does not see $argv). (Laruence)
CLI:
* Fixed bug #67741 (auto_prepend_file messes up __LINE__). (Reeze Xia)
cURL:
* Fixed bug #69088 (PHP_MINIT_FUNCTION does not fully initialize cURL on Win32). (Grant Pannell)
* Add CURLPROXY_SOCKS4A and CURLPROXY_SOCKS5_HOSTNAME constants if supported by libcurl. (Linus Unneback)
Ereg:
* Fixed bug #69248 (heap overflow vulnerability in regcomp.c) (CVE-2015-2305). (Stas)
FPM:
* Fixed bug #68822 (request time is reset too early). (honghu069 at 163 dot com)
ODBC:
* Fixed bug #68964 (Allowed memory size exhausted with odbc_exec). (Anatol)
Opcache:
* Fixed bug #69159 (Opcache causes problem when passing a variable variable to a function). (Dmitry, Laruence)
* Fixed bug #69125 (Array numeric string as key). (Laruence)
* Fixed bug #69038 (switch(SOMECONSTANT) misbehaves). (Laruence)
OpenSSL:
* Fixed bug #68912 (Segmentation fault at openssl_spki_new). (Laruence)
* Fixed bug #61285, #68329, #68046, #41631 (encrypted streams don't observe socket timeouts). (Brad Broerman)
* Fixed bug #68920 (use strict peer_fingerprint input checks) (Daniel Lowrey)
* Fixed bug #68879 (IP Address fields in subjectAltNames not used) (Daniel Lowrey)
* Fixed bug #68265 (SAN match fails with trailing DNS dot) (Daniel Lowrey)
* Fixed bug #67403 (Add signatureType to openssl_x509_parse) (Daniel Lowrey)
* Fixed bug (#69195 Inconsistent stream crypto values across versions) (Daniel Lowrey)
pgsql:
* Fixed bug #68638 (pg_update() fails to store infinite values). (william dot welter at 4linux dot com dot br, Laruence)
Readline:
* Fixed bug #69054 (Null dereference in readline_(read|write)_history() without parameters). (Laruence)
SOAP:
* Fixed bug #69085 (SoapClient's __call() type confusion through unserialize()). (andrea dot palazzo at truel dot it, Laruence)
SPL:
* Fixed bug #69108 ("Segmentation fault" when (de)serializing SplObjectStorage). (Laruence)
* Fixed bug #68557 (RecursiveDirectoryIterator::seek(0) broken after calling getChildren()). (Julien)
ZIP:
* Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap boundary) (CVE-2015-2331). (Stas)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 20 2015 Remi Collet <remi(a)fedoraproject.org> 5.6.7-1
- Update to 5.6.7
http://www.php.net/releases/5_6_7.php
* Thu Feb 19 2015 Remi Collet <remi(a)fedoraproject.org> 5.6.6-1
- Update to 5.6.6
http://www.php.net/releases/5_6_6.php
* Thu Jan 22 2015 Remi Collet <remi(a)fedoraproject.org> 5.6.5-1
- Update to 5.6.5
http://www.php.net/releases/5_6_5.php
- FPM: enable ACL support for Unix Domain Socket
* Wed Dec 17 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.4-2
- Update to 5.6.4 (real)
http://www.php.net/releases/5_6_4.php
- php-xmlrpc requires php-xml
* Wed Dec 10 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.4-1
- Update to 5.6.4
http://www.php.net/releases/5_6_4.php
* Fri Nov 28 2014 Remi Collet <rcollet(a)redhat.com> 5.6.4-0.1.RC1
- php 5.6.4RC1
* Mon Nov 17 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.3-4
- FPM: add upstream patch for https://bugs.php.net/68428
listen.allowed_clients is IPv4 only
* Mon Nov 17 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.3-3
- sync php-fpm configuration with upstream
- refresh upstream patch for 68421
* Sun Nov 16 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.3-2
- FPM: add upstream patch for https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423
will no longer load all pools
* Thu Nov 13 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.3-1
- Update to PHP 5.6.3
http://php.net/releases/5_6_3.php
* Fri Oct 31 2014 Remi Collet <rcollet(a)redhat.com> 5.6.3-0.2.RC1
- php 5.6.3RC1 (refreshed, phpdbg changes reverted)
- new version of systzdata patch, fix case sensitivity
- ignore Factory in date tests
* Wed Oct 29 2014 Remi Collet <rcollet(a)redhat.com> 5.6.3-0.1.RC1
- php 5.6.3RC1
- disable opcache.fast_shutdown in default config
- enable phpdbg_webhelper new extension (in php-dbg)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1204868 - php: SoapClient's __call() type confusion through unserialize()
https://bugzilla.redhat.com/show_bug.cgi?id=1204868
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 21 Update: ratools-0.6.1-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4295
2015-03-21 00:14:47
--------------------------------------------------------------------------------
Name : ratools
Product : Fedora 21
Version : 0.6.1
Release : 1.fc21
URL : https://www.nonattached.net/ratools
Summary : Framework for IPv6 Router Advertisements
Description :
Ratools is a fast, dynamic, multi-threading framework for creating, modifying
and sending IPv6 Router Advertisements (RA).
--------------------------------------------------------------------------------
Update Information:
Update to Version 0.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 18 2015 Florian Lehner <dev(a)der-flo.net> - 0.6.1-1
- Update to Version 0.6.1
- Use license-Macro
* Mon Dec 29 2014 Florian Lehner <dev(a)der-flo.net> - 0.6.0-1
- Update to Version 0.6.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ratools' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months
Fedora 22 Update: whois-5.2.7-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4918
2015-03-28 23:44:52
--------------------------------------------------------------------------------
Name : whois
Product : Fedora 22
Version : 5.2.7
Release : 1.fc22
URL : http://www.linux.it/~md/software/
Summary : Improved WHOIS client
Description :
Searches for an object in a RFC 3912 database.
This version of the WHOIS client tries to guess the right server to ask for
the specified object. If no guess can be made it will connect to
whois.networksolutions.com for NIC handles or whois.arin.net for IPv4
addresses and network names.
--------------------------------------------------------------------------------
Update Information:
This release addds records for new gTLDs: ads., film., gold., golf., guge., plus., tours.
This release fixes a regression in hiding disclaimers.
This release updates disclaimer database to suppress more of them. It adds servers for new gTLDs: abbott., bbc., cfd., chloe., datsun., epson., erni., fan., forex., goo., infiniti., java., leclerc., maif., markets., mtpc., news., nissan., online., oracle., page., piaget., pictet., site., spreadbetting., tech., trading., xin., 政府., and 信息. It adds records for domains edu.ph. and gov.ph. It removes record for discontinued tp. TLD.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1206179 - whois-5.2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1206179
[ 2 ] Bug #1204776 - whois-5.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1204776
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update whois' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 2 months