[SECURITY] Fedora 22 Update: rt-4.2.12-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13718
2015-08-27 17:52:04.306418
--------------------------------------------------------------------------------
Name : rt
Product : Fedora 22
Version : 4.2.12
Release : 1.fc22
URL : http://www.bestpractical.com/rt
Summary : Request tracker
Description :
RT is an enterprise-grade ticketing system which enables a group of people
to intelligently and efficiently manage tasks, issues, and requests submitted
by a community of users.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-5475
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1254111 - CVE-2015-5475 CVE-2015-6506 rt: multiple XSS flaws
https://bugzilla.redhat.com/show_bug.cgi?id=1254111
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rt' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 22 Update: rubygem-gem2rpm-0.11.2-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13662
2015-08-27 17:52:04.306388
--------------------------------------------------------------------------------
Name : rubygem-gem2rpm
Product : Fedora 22
Version : 0.11.2
Release : 1.fc22
URL : https://github.com/fedora-ruby/gem2rpm
Summary : Generate rpm specfiles from gems
Description :
Generate source rpms and rpm spec files from a Ruby Gem. The spec file
tries to follow the gem as closely as possible, and be compliant with the
Fedora rubygem packaging guidelines.
--------------------------------------------------------------------------------
Update Information:
Update to gem2rpm 0.11.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253872 - rubygem-gem2rpm-0.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1253872
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-gem2rpm' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 22 Update: reposurgeon-3.28-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13660
2015-08-27 17:52:04.306356
--------------------------------------------------------------------------------
Name : reposurgeon
Product : Fedora 22
Version : 3.28
Release : 1.fc22
URL : http://www.catb.org/~esr/reposurgeon/
Summary : SCM Repository Manipulation Tool
Description :
Reposurgeon enables risky operations that version-control systems don't want
to let you do, such as editing past comments and metadata and removing
commits. It works with any version control system that can export and import
git fast-import streams, including git, hg, fossil, bzr, CVS and RCS. It can
also read Subversion dump files directly and can thus be used to script
production of very high-quality conversions from Subversion to any supported
DVCS.
--------------------------------------------------------------------------------
Update Information:
== 3.28: 2015-07-05 == * Make repotool honor the mirror directory argument for
CVS. * Fix gitlab issue 4: even successful CVS export returns error code. *
Fix some name lookup issues from the cache needing invalidation. * Implement
and document that action stamps from author dates are preferred. * New --filter
option to mailbox_out for selective emission of headers. * Fix gitlab issue #9:
blank lines in svn:ignore misinterpreted. == 3.27: 2015-06-22 == * Per-repo-
type preserves aren't clobbered when there's a lister. * Git repository hooks
are preserved. * Read support for Monotone, not yet very well tested. ==
3.26: 2015-06-10 == * Output redirect with '>>' appends to the output file. *
The strip blob command can take a selection set. * Repo source type is now kept
inline in stream files and emitted on write. * Legacy IDs are now kept inline
in stream files and emitted on write. * The selection syntax <#nnn> now names
commit nnn, 1-origin numbering. == 3.25: 2015-06-03 == * Reading hg is now
supported through an extractor class, no plugin required. * Now 'blob' command
allows creating new content from lift scripts. == 3.24: 2015-05-31 == * Fix
repository-type detection bug introduced in 3.23. * DVCS Migration HOWTO is now
merged into this distribution. * Legacy-ID detection is now more
discriminating, based on sourcetype. == 3.23: 2015-05-29 == * The 'prefer'
command no longer changes the repo type, but 'sourcetype' does. * The =N set is
all commits and tags with text matching a legacy ID. * Legacy-ID recognition is
more intelligent, depending on the source type. * The 'lint' command now checks
for time and action-stamp collisions. * Exporters can now embed a repository
type declaration in an import stream. * Fast-import syntax extensions are
documented. == 3.22: 2015-05-20 == * The path rename --relax option has been
removed as too confusing. * In selection expressions, =Z is the set of all
commits with no fileops. * repopuller has been replaced by the more general
repotool. * For consistency, the 'changed' modifier of mailbox_in is now '--
changed'. * New '--create' option of mailbox_in to create new tags and commits.
* The command prompt can be queried or set with the new command 'prompt'. *
Change in terminology: fossil IDs and maps are now legacy IDs and maps. * The
'fossils {read.write}' commands are now 'legacy {read,write}'. * A front end
can now set legacy IDs via the "legacy-id" property. * DMRCN suffix flags on
restrict path regexp matches to specified op types. * The 'remove' command can
now be told to look for specific fileop types. == 3.21: 2015-04-02 == * In
selection expressions, =U is the set of all commits with callouts. == 3.20:
2015-02-22 == * Code is now fully functional, all regression tests passing, on
Mac OS X. * Warn in the docs about the consequences of case-smashing
filesystems. * diff command no longer relies on external diff(1). * Bugfix for
writing callouts in partial dumps.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1195045 - reposurgeon-3.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1195045
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update reposurgeon' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 23 Update: crontabs-1.11-11.20150630git.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13451
2015-08-27 17:56:49.070129
--------------------------------------------------------------------------------
Name : crontabs
Product : Fedora 23
Version : 1.11
Release : 11.20150630git.fc23
URL : https://fedorahosted.org/crontabs
Summary : Root crontab files used to schedule the execution of programs
Description :
This package is used by Fedora mainly for executing files by cron.
The crontabs package contains root crontab files and directories.
You will need to install cron daemon to run the jobs from the crontabs.
The cron daemon such as cronie or fcron checks the crontab files to
see when particular commands are scheduled to be executed. If commands
are scheduled, it executes them.
Crontabs handles a basic system function, so it should be installed on
your system.
--------------------------------------------------------------------------------
Update Information:
Unifies logging of job startup and finish.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update crontabs' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 22 Update: firefox-40.0-7.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13883
2015-08-27 17:52:04.306317
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 22
Version : 40.0
Release : 7.fc22
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
firefox-40.0-7.fc22 - Fix crash reporter layout under GTK3 - mozbz#1192243
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update firefox' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 23 Update: pam-1.2.1-2.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13530
2015-08-27 17:56:49.070095
--------------------------------------------------------------------------------
Name : pam
Product : Fedora 23
Version : 1.2.1
Release : 2.fc23
URL : http://www.linux-pam.org/
Summary : An extensible library which provides authentication for applications
Description :
PAM (Pluggable Authentication Modules) is a system security tool that
allows system administrators to set authentication policy without
having to recompile programs that handle authentication.
--------------------------------------------------------------------------------
Update Information:
Removes the nproc process limitation setting default.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pam' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 23 Update: php-scssphp-0.1.9-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13425
2015-08-27 17:56:49.070064
--------------------------------------------------------------------------------
Name : php-scssphp
Product : Fedora 23
Version : 0.1.9
Release : 1.fc23
URL : http://leafo.net/scssphp
Summary : A compiler for SCSS written in PHP
Description :
SCSS (http://sass-lang.com/) is a CSS preprocessor that adds many features like
variables, mixins, imports, color manipulation, functions, and tons of other
powerful features.
The entire compiler comes in a single class file ready for including in any kind
of project in addition to a command line tool for running the compiler from the
terminal.
scssphp implements SCSS (3.2.12). It does not implement the SASS syntax, only
the SCSS syntax.
--------------------------------------------------------------------------------
Update Information:
## v0.1.9 ### Announcements * Adoption of the [Sass Community
Guidelines](http://leafo.github.io/scssphp/community/) ### Compatibility Bug
Fixes * Nested selector fixes with lists, interpolated string, and parent
selector * Implement list-separator() and set-nth() built-ins * Implement
@warn and @error * Removed spaceship operator pending discussion with reference
implementators ## v0.1.8 ### Announcements * Online documentation moved
to http://leafo.github.com/scssphp/ ### Compatibility Bug Fixes * index()
- map support; now returns null (instead of false) when value not found *
lighten(), darken() - percentages don't require % unit * str-slice() - edge
cases when starts-at or ends-at is 0 * type-of() - returns arglist for variable
arguments * != * @return inside @each ## v0.1.7 ### Announcements *
simplified licensing (MIT) ### Enhancements * bin/pscss: added --line-
numbers and --debug-info options * Compiler: added setLineNumberStyle() and 'q'
unit ### Maintenance * Parser: deprecated show() and to() methods *
refactoring internals and misc bug fixes (maps, empty list, function-exists())
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1238727 - php-scssphp-v0.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1238727
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-scssphp' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 23 Update: php-silex-1.3.1-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13458
2015-08-27 17:56:49.070033
--------------------------------------------------------------------------------
Name : php-silex
Product : Fedora 23
Version : 1.3.1
Release : 1.fc23
URL : http://silex.sensiolabs.org
Summary : PHP micro-framework based on the Symfony components
Description :
Silex is a PHP micro-framework. It is built on the shoulders of Symfony and
Pimple and also inspired by Sinatra.
A micro-framework provides the guts for building simple single-file apps. Silex
aims to be:
* Concise: Silex exposes an intuitive and concise API that is fun to use
* Extensible: Silex has an extension system based around the Pimple micro
service-container that makes it even easier to tie in third party libraries
* Testable: Silex uses Symfony's HttpKernel which abstracts requests and
responses. This makes it very easy to test apps and the framework itself.
It also respects the HTTP specification and encourages its' proper use.
--------------------------------------------------------------------------------
Update Information:
1.3.1 (2015-08-04) ------------------ * added missing support for the
Expression constraint * fixed the possibility to override translations for
validator error messages * fixed sub-mounts with same name clash * fixed
session logout handler when a firewall is stateless
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250055 - php-silex-v1.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1250055
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-silex' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 23 Update: python-setproctitle-1.1.9-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13575
2015-08-27 17:56:49.070000
--------------------------------------------------------------------------------
Name : python-setproctitle
Product : Fedora 23
Version : 1.1.9
Release : 1.fc23
URL : http://pypi.python.org/pypi/setproctitle
Summary : Python module to customize a process title
Description :
Python module allowing a process to change its title as displayed by
system tool such as ps and top.
It's useful in multiprocess systems, allowing to identify tasks each forked
process is busy with. This technique has been used by PostgreSQL and OpenSSH.
It's based on PostgreSQL implementation which has proven to be portable.
--------------------------------------------------------------------------------
Update Information:
Upstream 1.1.9
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-setproctitle' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months
Fedora 22 Update: nss-3.20.0-1.0.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13992
2015-08-27 17:52:04.306286
--------------------------------------------------------------------------------
Name : nss
Product : Fedora 22
Version : 3.20.0
Release : 1.0.fc22
URL : http://www.mozilla.org/projects/security/pki/nss/
Summary : Network Security Services
Description :
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.
--------------------------------------------------------------------------------
Update Information:
nss-3.20.0-1.0.fc22 - Update to NSS 3.20 For details about new functionality
and a list of bugs fixed in this release please see the upstream releases notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.20_release_notes nss-
softokn-3.20.0-1.0.fc22 - Update to NSS 3.20 nss-util-3.20.0-1.0.fc22 -
Update to NSS 3.20
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nss' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 8 months