Fedora 22 Update: php-ircmaxell-security-lib-1.1.0-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4424
2015-03-21 23:49:10
--------------------------------------------------------------------------------
Name : php-ircmaxell-security-lib
Product : Fedora 22
Version : 1.1.0
Release : 1.fc22
URL : https://github.com/ircmaxell/SecurityLib
Summary : A Base Security Library
Description :
This is a base set of libraries used in other projects.
This isn't useful on its own...
Optional dependency: php-gmp or php-bcmath
--------------------------------------------------------------------------------
Update Information:
From release notes:
* Includes string utilities for binary safe string length comparison.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-ircmaxell-security-lib' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 22 Update: ipa-ex-mincho-fonts-002.01-5.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4527
2015-03-26 16:37:36
--------------------------------------------------------------------------------
Name : ipa-ex-mincho-fonts
Product : Fedora 22
Version : 002.01
Release : 5.fc22
URL : http://ossipedia.ipa.go.jp/ipafont/
Summary : Japanese Mincho-typeface OpenType font by IPA
Description :
IPAex Font is a Japanese OpenType fonts that is JIS X 0213:2004
compliant, provided by Information-technology Promotion Agency, Japan.
This package contains Mincho style font.
--------------------------------------------------------------------------------
Update Information:
Add metainfo file
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ipa-ex-mincho-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 22 Update: openssh-6.8p1-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4898
2015-03-28 23:44:05
--------------------------------------------------------------------------------
Name : openssh
Product : Fedora 22
Version : 6.8p1
Release : 2.fc22
URL : http://www.openssh.com/portable.html
Summary : An open source implementation of SSH protocol versions 1 and 2
Description :
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features.
This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.
--------------------------------------------------------------------------------
Update Information:
New upstream version release with many bug-fixes and features including host key rotation.
Additionally fixing problems with auditing which made `ansible` failing after last update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1203900 - ansible failing file copies to rawhide machine because of sshd error: mm_answer_audit_end_command: invalid handle
https://bugzilla.redhat.com/show_bug.cgi?id=1203900
[ 2 ] Bug #1203245 - openssh-6.8p1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1203245
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openssh' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
[SECURITY] Fedora 22 Update: freeipa-4.1.4-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4788
2015-03-28 23:38:43
--------------------------------------------------------------------------------
Name : freeipa
Product : Fedora 22
Version : 4.1.4
Release : 1.fc22
URL : http://www.freeipa.org/
Summary : The Identity, Policy and Audit system
Description :
IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof).
--------------------------------------------------------------------------------
Update Information:
CVE-2015-1827: It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash.
CVE-2015-0283: It was discovered that the slapi-nis Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for information about a group with many members, or a request for a user that belongs to a large number of groups, would cause a Directory Server to enter an infinite loop and consume an excessive amount of CPU time.
These issues were discovered by Sumit Bose of Red Hat.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1195729 - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
https://bugzilla.redhat.com/show_bug.cgi?id=1195729
[ 2 ] Bug #1205200 - CVE-2015-1827 ipa: memory corruption when using get_user_grouplist()
https://bugzilla.redhat.com/show_bug.cgi?id=1205200
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update freeipa' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
[SECURITY] Fedora 22 Update: slapi-nis-0.54.2-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4788
2015-03-28 23:38:43
--------------------------------------------------------------------------------
Name : slapi-nis
Product : Fedora 22
Version : 0.54.2
Release : 1.fc22
URL : http://slapi-nis.fedorahosted.org/
Summary : NIS Server and Schema Compatibility plugins for Directory Server
Description :
This package provides two plugins for Red Hat and 389 Directory Server.
The NIS Server plugin allows the directory server to act as a NIS server
for clients, dynamically generating and updating NIS maps according to
its configuration and the contents of the DIT, and serving the results to
clients using the NIS protocol as if it were an ordinary NIS server.
The Schema Compatibility plugin allows the directory server to provide an
alternate view of entries stored in part of the DIT, optionally adding,
dropping, or renaming attribute values, and optionally retrieving values
for attributes from multiple entries in the tree.
--------------------------------------------------------------------------------
Update Information:
CVE-2015-1827: It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash.
CVE-2015-0283: It was discovered that the slapi-nis Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for information about a group with many members, or a request for a user that belongs to a large number of groups, would cause a Directory Server to enter an infinite loop and consume an excessive amount of CPU time.
These issues were discovered by Sumit Bose of Red Hat.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1195729 - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
https://bugzilla.redhat.com/show_bug.cgi?id=1195729
[ 2 ] Bug #1205200 - CVE-2015-1827 ipa: memory corruption when using get_user_grouplist()
https://bugzilla.redhat.com/show_bug.cgi?id=1205200
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update slapi-nis' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 22 Update: airline-0.7-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4599
2015-03-26 16:40:35
--------------------------------------------------------------------------------
Name : airline
Product : Fedora 22
Version : 0.7
Release : 1.fc22
URL : https://github.com/airlift/airline
Summary : Java annotation-based framework
Description :
Airline is a Java annotation-based framework
for parsing Git like command line structures.
--------------------------------------------------------------------------------
Update Information:
Initial import (#1200885).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1200885 - Review Request: airline - Java annotation-based framework
https://bugzilla.redhat.com/show_bug.cgi?id=1200885
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update airline' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 22 Update: perl-Dist-Zilla-5.034-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4695
2015-03-26 16:44:55
--------------------------------------------------------------------------------
Name : perl-Dist-Zilla
Product : Fedora 22
Version : 5.034
Release : 1.fc22
URL : http://search.cpan.org/dist/Dist-Zilla/
Summary : Distribution builder; installer not included!
Description :
Dist::Zilla builds distributions of code to be uploaded to the CPAN. In
this respect, it is like ExtUtils::MakeMaker, Module::Build, or
Module::Install. Unlike those tools, however, it is not also a system for
installing code that has been downloaded from the CPAN. Since it's only run
by authors, and is meant to be run on a repository checkout rather than on
published, released code, it can do much more than those tools, and is free
to make much more ludicrous demands in terms of prerequisites.
--------------------------------------------------------------------------------
Update Information:
A new version of Dist::Zilla is available. See http://cpansearch.perl.org/src/RJBS/Dist-Zilla-5.034/Changes for summary of changes in this release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1204317 - perl-Dist-Zilla-5.034 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1204317
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Dist-Zilla' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 20 Update: php-ircmaxell-security-lib-1.1.0-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4381
2015-03-21 23:47:06
--------------------------------------------------------------------------------
Name : php-ircmaxell-security-lib
Product : Fedora 20
Version : 1.1.0
Release : 1.fc20
URL : https://github.com/ircmaxell/SecurityLib
Summary : A Base Security Library
Description :
This is a base set of libraries used in other projects.
This isn't useful on its own...
Optional dependency: php-gmp or php-bcmath
--------------------------------------------------------------------------------
Update Information:
From release notes:
* Includes string utilities for binary safe string length comparison.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-ircmaxell-security-lib' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 22 Update: gd-2.1.1-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4515
2015-03-26 16:36:45
--------------------------------------------------------------------------------
Name : gd
Product : Fedora 22
Version : 2.1.1
Release : 2.fc22
URL : http://libgd.bitbucket.org/
Summary : A graphics library for quick creation of PNG or JPEG images
Description :
The gd graphics library allows your code to quickly draw images
complete with lines, arcs, text, multiple colors, cut and paste from
other images, and flood fills, and to write out the result as a PNG or
JPEG file. This is particularly useful in Web applications, where PNG
and JPEG are two of the formats accepted for inline images by most
browsers. Note that gd is not a paint program.
--------------------------------------------------------------------------------
Update Information:
Fix version in gdlib.pc, so "pkg-config gdlib --modversion" works as expected.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years
Fedora 22 Update: perl-threads-2.01-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-3862
2015-03-14 05:07:18
--------------------------------------------------------------------------------
Name : perl-threads
Product : Fedora 22
Version : 2.01
Release : 1.fc22
URL : http://search.cpan.org/dist/threads/
Summary : Perl interpreter-based threads
Description :
Since Perl 5.8, thread programming has been available using a model called
interpreter threads which provides a new Perl interpreter for each thread,
and, by default, results in no data or state information being shared
between threads.
(Prior to Perl 5.8, 5005threads was available through the "Thread.pm" API.
This threading model has been deprecated, and was removed as of Perl 5.10.0.)
--------------------------------------------------------------------------------
Update Information:
This release fixes tests to work on perl older than 5.14.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1201578 - perl-threads-2.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1201578
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-threads' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years