[SECURITY] Fedora 21 Update: torque-4.2.10-3.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8571
2015-05-20 14:43:55
--------------------------------------------------------------------------------
Name : torque
Product : Fedora 21
Version : 4.2.10
Release : 3.fc21
URL : http://www.adaptivecomputing.com/products/open-source/torque/
Summary : Tera-scale Open-source Resource and QUEue manager
Description :
TORQUE (Tera-scale Open-source Resource and QUEue manager) is a resource
manager providing control over batch jobs and distributed compute nodes.
TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability,
fault tolerance, and feature extension patches provided by USC, NCSA, OSC,
the U.S. Dept of Energy, Sandia, PNNL, U of Buffalo, TeraGrid, and many
other leading edge HPC organizations.
This package holds just a few shared files and directories.
--------------------------------------------------------------------------------
Update Information:
Bugfix - #1215207 create/install service files for these
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 19 2015 David Brown <david.brown(a)pnnl.gov> - 4.2.10-3
- Bugfix - #1215207 create/install service files for these
- Bugfix - #1117263 qmgr aborts in some instances
- Bugfix - #1144396 Hey! Version Bump!
- Bugfix - #1215992 more service scripts
- Bugfix - #1216037 fixed permissions on directories
- Bugfix - #1149045 hopefully these are all fixed now
- Bugfix - #965513 calling this one fixed...
* Fri Apr 24 2015 David Brown <david.brown(a)pnnl.gov> - 4.2.10-2
- Bugfix - #1154413 make manipulating services better.
* Mon Apr 6 2015 David Brown <david.brown(a)pnnl.gov> - 4.2.10-1
- Updated upstream version
* Thu Apr 2 2015 David Brown <david.brown(a)pnnl.gov> - 4.2.8-3
- Version bump to merge from previous version
* Thu Mar 26 2015 Richard Hughes <rhughes(a)redhat.com> - 4.2.8-2
- Add an AppData file for the software center
* Tue Oct 14 2014 David Brown <david.brown(a)pnnl.gov> - 4.2.8-2
- merged fedora latest into epel
- This breaks old configs and should be treated carefully
* Wed Oct 1 2014 Haïkel Guémar <hguemar(a)fedoraproject.org> - 3.0.4-6
- Fix CVE-2013-4319 (RHBZ #1005918, #1005919)
* Fri Sep 5 2014 Haïkel Guémar <hguemar(a)fedoraproject.org> - 3.0.4-5
- Fix CVE-2013-4495 (RHBZ #1029752)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215207 - pbs_server does not start trqauthd
https://bugzilla.redhat.com/show_bug.cgi?id=1215207
[ 2 ] Bug #1117263 - torque qmgr aborts on server commands while jobs are running
https://bugzilla.redhat.com/show_bug.cgi?id=1117263
[ 3 ] Bug #1144396 - torque-4.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1144396
[ 4 ] Bug #1215992 - torque-client (4.x) should package trqauthd service
https://bugzilla.redhat.com/show_bug.cgi?id=1215992
[ 5 ] Bug #1216037 - permissions on some /var/lib/torque/ sub-directories
https://bugzilla.redhat.com/show_bug.cgi?id=1216037
[ 6 ] Bug #1149045 - CVE-2014-3684 torque: non-root users able to kill any process on any node in a job [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1149045
[ 7 ] Bug #965513 - torque package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=965513
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update torque' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 22 Update: why3-0.86-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8439
2015-05-18 07:06:58
--------------------------------------------------------------------------------
Name : why3
Product : Fedora 22
Version : 0.86
Release : 1.fc22
URL : http://why3.lri.fr/
Summary : Software verification platform
Description :
Why3 is the next generation of the Why software verification platform.
Why3 clearly separates the purely logical specification part from
generation of verification conditions for programs. It features a rich
library of proof task transformations that can be chained to produce a
suitable input for a large set of theorem provers, including SMT
solvers, TPTP provers, as well as interactive proof assistants.
--------------------------------------------------------------------------------
Update Information:
See http://lists.gforge.inria.fr/pipermail/why3-club/2015-May/001227.html for the list of changes in this release of why3. The frama-c and why packages were merely rebuilt against the new version of why3.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2015 Jerry James <loganjerry(a)gmail.com> - 0.86-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update why3' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 22 Update: frama-c-1.10-23.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8439
2015-05-18 07:06:58
--------------------------------------------------------------------------------
Name : frama-c
Product : Fedora 22
Version : 1.10
Release : 23.fc22
URL : http://frama-c.com/
Summary : Framework for source code analysis of C software
Description :
Frama-C is a suite of tools dedicated to the analysis of the source
code of software written in C.
Frama-C gathers several static analysis techniques in a single
collaborative framework. The collaborative approach of Frama-C allows
static analyzers to build upon the results already computed by other
analyzers in the framework. Thanks to this approach, Frama-C provides
sophisticated tools, such as a slicer and dependency analysis.
--------------------------------------------------------------------------------
Update Information:
See http://lists.gforge.inria.fr/pipermail/why3-club/2015-May/001227.html for the list of changes in this release of why3. The frama-c and why packages were merely rebuilt against the new version of why3.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2015 Jerry James <loganjerry(a)gmail.com> - 1.10-23
- Rebuild for why3 0.86
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update frama-c' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 22 Update: why-2.34-19.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8439
2015-05-18 07:06:58
--------------------------------------------------------------------------------
Name : why
Product : Fedora 22
Version : 2.34
Release : 19.fc22
URL : http://why.lri.fr/
Summary : Software verification platform
Description :
Why is a software verification platform that applies formal proving
tools to annotated programs. It is currently capable of analysis of C
(through "Frama-C"), Java (through the included tool "Krakatoa"), and
potentially ML programs with some modification into Why's own ML-like
language. Furthermore, Why is capable of analysis of any program that
is mapped onto its own internal language. It uses a weakest
precondition involving calculus to generate potential theorems necessary
for the proof of a program's correctness. It translates these theorems
into formats that can be used by external proof assistants (without any
extra work Coq, PVS, HOL Light, and Mizar are supported - having one is
recommended and both Coq and PVS are packaged for Fedora) and automated
theorem provers (without any extra work Simplify, Alt-Ergo, Yices, Z3,
CVC3, and Zenon are supported and Alt-Ergo, CVC3, and Zenon are packaged
for Fedora) so that these results can be externally proven, resulting in
a proof of program correctness.
Note: Each user account must be set up by running "why-config" at the
command line (to set up a configuration file).
--------------------------------------------------------------------------------
Update Information:
See http://lists.gforge.inria.fr/pipermail/why3-club/2015-May/001227.html for the list of changes in this release of why3. The frama-c and why packages were merely rebuilt against the new version of why3.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2015 Jerry James <loganjerry(a)gmail.com> - 2.34-19
- Rebuild for why3 0.86
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update why' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 21 Update: man-db-2.6.7.1-15.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8644
2015-05-21 13:05:56
--------------------------------------------------------------------------------
Name : man-db
Product : Fedora 21
Version : 2.6.7.1
Release : 15.fc21
URL : http://www.nongnu.org/man-db/
Summary : Tools for searching and reading man pages
Description :
The man-db package includes five tools for browsing man-pages:
man, whatis, apropos, manpath and lexgrog. man formats and displays
manual pages. whatis searches the manual page names. apropos searches the
manual page names and descriptions. manpath determines search path
for manual pages. lexgrog directly reads header information in
manual pages.
--------------------------------------------------------------------------------
Update Information:
Test for /run/systemd only if mandb.timer is actually installed
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2015 jchaloup <jchaloup(a)redhat.com> - 2.6.7.1-15
- Test for /run/systemd only if mandb.timer is actually installed
resolves: #1223244
* Wed May 13 2015 Cole Robinson <crobinso(a)redhat.com> 2.6.7.1-14
- Test for /run/systemd to detect systemd state rather than invoking
rpm in % pre - it is not really supported by rpm.
* Fri Jan 2 2015 jchaloup <jchaloup(a)redhat.com> - 2.6.7.1-13
- switching back to crontabs
resolves: #1177993
resolves: #1171450
- rpm verify reports for /var/cache/man
resolves: #1173496
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1223244 - Failed to stop mandb.timer: Unit mandb.timer not loaded.
https://bugzilla.redhat.com/show_bug.cgi?id=1223244
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update man-db' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
[SECURITY] Fedora 22 Update: zeromq-4.0.5-3.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8635
2015-05-20 22:16:42
--------------------------------------------------------------------------------
Name : zeromq
Product : Fedora 22
Version : 4.0.5
Release : 3.fc22
URL : http://www.zeromq.org
Summary : Software library for fast, message-based applications
Description :
The 0MQ lightweight messaging kernel is a library which extends the
standard socket interfaces with features traditionally provided by
specialized messaging middle-ware products. 0MQ sockets provide an
abstraction of asynchronous message queues, multiple messaging
patterns, message filtering (subscriptions), seamless access to
multiple transport protocols and more.
This package contains the ZeroMQ shared library.
--------------------------------------------------------------------------------
Update Information:
Cherry-pick a fix for the protocol downgrade attack (CVE-2014-9721)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 19 2015 Thomas Spura <tomspur(a)fedoraproject.org> - 4.0.5-3
- Cherry-pick patch for protocol downgrade attack (#1221666)
- Remove Provides:zeromq-utils
- Remove %defattr
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 4.0.5-2
- Rebuilt for GCC 5 C++11 ABI change
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1221666 - CVE-2014-9721 zeromq: protocol downgrade attack on sockets using the ZMTP v3 protocol
https://bugzilla.redhat.com/show_bug.cgi?id=1221666
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zeromq' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 21 Update: rubygem-byebug-5.0.0-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8664
2015-05-21 13:07:11
--------------------------------------------------------------------------------
Name : rubygem-byebug
Product : Fedora 21
Version : 5.0.0
Release : 1.fc21
URL : http://github.com/deivid-rodriguez/byebug
Summary : Ruby 2.0 fast debugger - base + CLI
Description :
Byebug is a Ruby 2 debugger. It's implemented using the
Ruby 2 TracePoint C API for execution control and the Debug Inspector C API
for call stack navigation. The core component provides support that
front-ends can build on. It provides breakpoint handling and bindings for
stack frames among other things and it comes with an easy to use command
line interface.
--------------------------------------------------------------------------------
Update Information:
New version 5.0.0 is released.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-byebug' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 22 Update: fedora-review-0.6.0-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8701
2015-05-22 00:29:45
--------------------------------------------------------------------------------
Name : fedora-review
Product : Fedora 22
Version : 0.6.0
Release : 1.fc22
URL : https://fedorahosted.org/FedoraReview/
Summary : Review tool for fedora rpm packages
Description :
This tool automates much of the dirty work when reviewing a package
for the Fedora Package Collection like:
* Downloading SRPM & SPEC.
* Download upstream source
* Check md5sums
* Build and install package in mock.
* Run rpmlint.
* Generate a review template, which becomes the starting
point for the review work.
The tool is composed of plugins, one for each supported language.
As of today, there is plugins for C/C++, Ruby, java, R, perl and
python. There is also support for external tests that can be written
in a simple way in bash.
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2015 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.0-1.afb5485
- Update to 0.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1156479 - [rfe] switch to dnf repoquery
https://bugzilla.redhat.com/show_bug.cgi?id=1156479
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fedora-review' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 22 Update: libgsystem-2015.1-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8985
2015-05-27 10:20:34
--------------------------------------------------------------------------------
Name : libgsystem
Product : Fedora 22
Version : 2015.1
Release : 2.fc22
URL : https://wiki.gnome.org/Projects/LibGSystem
Summary : GIO-based library with Unix/Linux specific API
Description :
LibGSystem is a GIO-based library targeted primarily
for use by operating system components.
--------------------------------------------------------------------------------
Update Information:
Add patch to fall back to copying if link() returns EPERM,
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 25 2015 Colin Walters <walters(a)redhat.com> - 2015.1-2
- Add patch to fall back to copying if link() returns EPERM,
to hopefully fix Bodhi calling rpm-ostree
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libgsystem' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months
Fedora 22 Update: xorg-x11-drv-intel-2.99.917-10.20150526.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8962
2015-05-27 10:19:11
--------------------------------------------------------------------------------
Name : xorg-x11-drv-intel
Product : Fedora 22
Version : 2.99.917
Release : 10.20150526.fc22
URL : http://www.x.org
Summary : Xorg X11 Intel video driver
Description :
X.Org X11 Intel video driver.
--------------------------------------------------------------------------------
Update Information:
fixes crash with xrandr --props
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 26 2015 Dave Airlie <airlied(a)redhat.com> 2.99.917-10
- update git snap
- fixes uninitialised properties crash
* Wed May 20 2015 Adam Jackson <ajax(a)redhat.com> 2.99.917-9
- Today's git snap
- Don't force the default to DRI3, use upstream's preference
- Fix build failure due to GCC PR65873
* Mon Mar 2 2015 Dave Airlie <airlied(a)redhat.com> 2.99.917-8
- this time for sure, now less hardended.
* Mon Mar 2 2015 Dave Airlie <airlied(a)redhat.com> 2.99.917-7
- remove cement, X.org drivers aren't hard enough.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xorg-x11-drv-intel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 11 months