[SECURITY] Fedora 22 Update: php-ZendFramework-1.12.13-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8704
2015-05-22 00:29:59
--------------------------------------------------------------------------------
Name : php-ZendFramework
Product : Fedora 22
Version : 1.12.13
Release : 1.fc22
URL : http://framework.zend.com/
Summary : Leading open-source PHP framework
Description :
Extending the art & spirit of PHP, Zend Framework is based on simplicity,
object-oriented best practices, corporate friendly licensing, and a rigorously
tested agile code base. Zend Framework is focused on building more secure,
reliable, and modern Web 2.0 applications & web services, and consuming widely
available APIs from leading vendors like Google, Amazon, Yahoo!, Flickr, as
well as API providers and catalogers like StrikeIron and ProgrammableWeb.
--------------------------------------------------------------------------------
Update Information:
**Zend Framework 1.12.13**
* 567: Cast int and float to string when creating headers
**Zend Framework 1.12.12**
* 493: PHPUnit not being installed
* 511: Add PATCH to the list of allowed methods in Zend_Controller_Request_HttpTestCase
* 513: Save time and space when cloning PHPUnit
* 515: !IE conditional comments bug
* 516: Zend_Locale does not honor parentLocale configuration
* 518: Run travis build also on PHP 7 builds
* 534: Failing unit test: Zend_Validate_EmailAddressTest::testIdnHostnameInEmaillAddress
* 536: Zend_Measure_Number convert some decimal numbers to roman with space char
* 537: Extend view renderer controller fix (#440)
* 540: Fix PHP 7 BC breaks in Zend_XmlRpc/Amf_Server
* 541: Fixed errors in tests on PHP7
* 542: Correctly reset the sub-path when processing routes
* 545: Fixed path delimeters being stripped by chain routes affecting later routes
* 546: TravisCI: Skip memcache(d) on PHP 5.2
* 547: Session Validators throw 'general' Session Exception during Session start
* 550: Notice "Undefined index: browser_version"
* 557: doc: Zend Framework Dependencies table unreadable
* 559: Fixes a typo in Zend_Validate messages for SK
* 561: Zend_Date not expected year
* 564: Zend_Application tries to load ZendX_Application_Resource_FrontController during instantiation
**Security**
* **ZF2015-04**: Zend_Mail and Zend_Http were both susceptible to CRLF Injection Attack vectors (for HTTP, this is often referred to as HTTP Response Splitting). Both components were updated to perform header value validations to ensure no values contain characters not detailed in their corresponding specifications, and will raise exceptions on detection. Each also provides new facilities for both validating and filtering header values prior to injecting them into header classes. If you use either Zend_Mail or Zend_Http, we recommend upgrading immediately.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2015 Remi Collet <RPMS(a)FamilleCollet.com> - 1.12.13-1
- update to 1.12.13
- add composer provides
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215712 - CVE-2015-3154 php-ZendFramework2: ZF2015-04: Potential header and mail injection vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1215712
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-ZendFramework' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: man-pages-3.81-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8816
2015-05-25 20:40:57
--------------------------------------------------------------------------------
Name : man-pages
Product : Fedora 22
Version : 3.81
Release : 2.fc22
URL : http://www.kernel.org/doc/man-pages/
Summary : Linux kernel and C library user-space interface documentation
Description :
A large collection of manual pages from the Linux Documentation Project (LDP).
--------------------------------------------------------------------------------
Update Information:
rtld-audit.7: use the correct format character
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2015 jchaloup <jchaloup(a)redhat.com> - 3.81-2
- rtld-audit.7: use the correct format character
resolves: #1222719
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222719 - rtld-audit man example code uses wrong format for cookies
https://bugzilla.redhat.com/show_bug.cgi?id=1222719
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update man-pages' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 20 Update: genders-1.22-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8574
2015-05-20 14:44:03
--------------------------------------------------------------------------------
Name : genders
Product : Fedora 20
Version : 1.22
Release : 2.fc20
URL : http://genders.sf.net
Summary : Static cluster configuration database
Description :
Genders is a static cluster configuration database used for cluster
configuration management. It is used by a variety of tools and
scripts for management of large clusters. The genders database is
typically replicated on every node of the cluster. It describes the
layout and configuration of the cluster so that tools and scripts can
sense the variations of cluster nodes. By abstracting this information
into a plain text file, it becomes possible to change the
configuration of a cluster by modifying only one file.
--------------------------------------------------------------------------------
Update Information:
Bugfix make libgenders man page part of libgenders (#1220093)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 19 2015 David Brown <david.brown(a)pnnl.gov> - 1.22-2
- Bugfix make libgenders man page part of libgenders (#1220093)
* Sat May 2 2015 David Brown <david.brown(a)pnnl.gov> - 1.22-1
- new upstream build
- fix bugzilla #1217007
* Tue Aug 26 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.21-3
- Perl 5.20 rebuild
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.21-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Mon Jul 7 2014 David Brown <david.brown(a)pnnl.gov> - 1.21-1
- New updated version
- Wow, they have java bindings now
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.20-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1220093 - Empty man page for genders config file
https://bugzilla.redhat.com/show_bug.cgi?id=1220093
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update genders' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: phpMyAdmin-4.4.8-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-9081
2015-05-30 09:27:09
--------------------------------------------------------------------------------
Name : phpMyAdmin
Product : Fedora 22
Version : 4.4.8
Release : 1.fc22
URL : http://www.phpmyadmin.net/
Summary : Handle the administration of MySQL over the World Wide Web
Description :
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the World Wide Web. Most frequently used operations are supported
by the user interface (managing databases, tables, fields, relations, indexes,
users, permissions), while you still have the ability to directly execute any
SQL statement.
Features include an intuitive web interface, support for most MySQL features
(browse and drop databases, tables, views, fields and indexes, create, copy,
drop, rename and alter databases, tables, fields and indexes, maintenance
server, databases and tables, with proposals on server configuration, execute,
edit and bookmark any SQL-statement, even batch-queries, manage MySQL users
and privileges, manage stored procedures and triggers), import data from CSV
and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text
and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers,
creating PDF graphics of your database layout, creating complex queries using
Query-by-example (QBE), searching globally in a database or a subset of it,
transforming stored data into any format using a set of predefined functions,
like displaying BLOB-data as image or download-link and much more...
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.4.8.0 (2015-05-28)
===============================
- Allow accessing visual query builder when pmadb is not configured
- Nav tree line alignment issue
- Lock page icon is not shown after fresh reload
- "Highlight pointer" and "Row marker" doesn't work properly
- Browse foreigners window goes out of the window
- Date field popup dialog position bug
- In /setup, PMA_messages is not defined
- Recaptcha failure
- Database copy doesn't work for tables with more than one FULLTEXT index
- Edit view structure doesn't load the algorithm
- Do not limit table comments to 60 characters
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 28 2015 Robert Scheck <robert(a)fedoraproject.org> 4.4.8-1
- Upgrade to 4.4.8
* Sat May 16 2015 Robert Scheck <robert(a)fedoraproject.org> 4.4.7-1
- Upgrade to 4.4.7 (#1222215)
* Thu May 14 2015 Robert Scheck <robert(a)fedoraproject.org> 4.4.6.1-1
- Upgrade to 4.4.6.1 (#1221418, #1221580, #1221581)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update phpMyAdmin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 21 Update: man-pages-3.69-3.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8755
2015-05-25 20:38:22
--------------------------------------------------------------------------------
Name : man-pages
Product : Fedora 21
Version : 3.69
Release : 3.fc21
URL : http://www.kernel.org/doc/man-pages/
Summary : Linux kernel and C library user-space interface documentation
Description :
A large collection of manual pages from the Linux Documentation Project (LDP).
--------------------------------------------------------------------------------
Update Information:
rtld-audit.7: use the correct format character
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 22 2015 jchaloup <jchaloup(a)redhat.com> - 3.69-3
- rtld-audit.7: use the correct format character
resolves: #1222719
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222719 - rtld-audit man example code uses wrong format for cookies
https://bugzilla.redhat.com/show_bug.cgi?id=1222719
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update man-pages' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: golang-github-mitchellh-goamz-0-0.5.gitcaaaea8.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8615
2015-05-20 22:15:31
--------------------------------------------------------------------------------
Name : golang-github-mitchellh-goamz
Product : Fedora 22
Version : 0
Release : 0.5.gitcaaaea8.fc22
URL : http://github.com/mitchellh/goamz
Summary : An Amazon Library for Go
Description :
An Amazon Library for Go.
--------------------------------------------------------------------------------
Update Information:
Bump to upstream caaaea8b30ee15616494ee68abd5d8ebbbef05cf
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.5.gitcaaaea8
- Bump to upstream caaaea8b30ee15616494ee68abd5d8ebbbef05cf
- Add license macro
- Remove runtime dependency on golang
resolves: #1223451
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1223451 - Tracker for golang-github-mitchellh-goamz
https://bugzilla.redhat.com/show_bug.cgi?id=1223451
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update golang-github-mitchellh-goamz' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
[SECURITY] Fedora 22 Update: netty-4.0.28-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8684
2015-05-22 00:28:33
--------------------------------------------------------------------------------
Name : netty
Product : Fedora 22
Version : 4.0.28
Release : 1.fc22
URL : https://netty.io/
Summary : An asynchronous event-driven network application framework and tools for Java
Description :
Netty is a NIO client server framework which enables quick and easy
development of network applications such as protocol servers and
clients. It greatly simplifies and streamlines network programming
such as TCP and UDP socket server.
'Quick and easy' doesn't mean that a resulting application will suffer
from a maintainability or a performance issue. Netty has been designed
carefully with the experiences earned from the implementation of a lot
of protocols such as FTP, SMTP, HTTP, and various binary and
text-based legacy protocols. As a result, Netty has succeeded to find
a way to achieve ease of development, performance, stability, and
flexibility without a compromise.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-2156
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2015 Severin Gehwolf <sgehwolf(a)redhat.com> - 4.0.28-1
- Update to upstream 4.0.28 release.
- Fixes CVE-2015-2156 (HttpOnly cookie bypass).
- Resolves RHBZ#1111502
* Wed May 20 2015 Severin Gehwolf <sgehwolf(a)redhat.com> - 4.0.27-1
- Update to upstream 4.0.27 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222923 - CVE-2015-2156 netty: HttpOnly cookie bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1222923
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update netty' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: wireshark-1.12.5-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8210
2015-05-14 20:20:34
--------------------------------------------------------------------------------
Name : wireshark
Product : Fedora 22
Version : 1.12.5
Release : 1.fc22
URL : http://www.wireshark.org/
Summary : Network traffic analyzer
Description :
Wireshark is a network traffic analyzer for Unix-ish operating systems.
This package lays base for libpcap, a packet capture and filtering
library, contains command-line utilities, contains plugins and
documentation for wireshark. A graphical user interface is packaged
separately to GTK+ package.
--------------------------------------------------------------------------------
Update Information:
Ver. 1.12.5
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2015 Peter Hatina <phatina(a)redhat.com> - 1.12.5-1
- Ver. 1.12.5
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wireshark' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: foomatic-db-4.0-45.20150415.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8692
2015-05-22 00:28:53
--------------------------------------------------------------------------------
Name : foomatic-db
Product : Fedora 22
Version : 4.0
Release : 45.20150415.fc22
URL : http://www.openprinting.org
Summary : Database of printers and printer drivers
Description :
This is the database of printers, printer drivers, and driver options
for Foomatic.
The site http://www.openprinting.org/ is based on this database.
--------------------------------------------------------------------------------
Update Information:
Database update.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2015 Jiri Popelka <jpopelka(a)redhat.com> - 4.0-45.20150415
- Updated to foomatic-db-4.0-20150415
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update foomatic-db' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: perl-JavaScript-Beautifier-0.18-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8683
2015-05-22 00:28:31
--------------------------------------------------------------------------------
Name : perl-JavaScript-Beautifier
Product : Fedora 22
Version : 0.18
Release : 1.fc22
URL : http://search.cpan.org/dist/JavaScript-Beautifier/
Summary : Beautify Javascript (beautifier for javascript)
Description :
This module is mostly a Perl-rewrite of
http://github.com/einars/js-beautify/tree/master/beautify.js
--------------------------------------------------------------------------------
Update Information:
Update to the latest release
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 21 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.18-1
- 0.18 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222930 - perl-JavaScript-Beautifier-0.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1222930
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-JavaScript-Beautifier' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months