[SECURITY] Fedora 21 Update: php-guzzle-Guzzle-3.9.3-5.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13488
2015-08-27 19:40:20.011512
--------------------------------------------------------------------------------
Name : php-guzzle-Guzzle
Product : Fedora 21
Version : 3.9.3
Release : 5.fc21
URL : https://github.com/guzzle/guzzle3
Summary : PHP HTTP client library and framework for building RESTful web service clients
Description :
Guzzle takes the pain out of sending HTTP requests and the redundancy out
of creating web service clients.
Guzzle is a framework that includes the tools needed to create a robust web
service client, including: Service descriptions for defining the inputs and
outputs of an API, resource iterators for traversing paginated resources,
batching for sending a large number of requests as efficiently as possible.
* All the power of cURL with a simple interface
* Persistent connections and parallel requests
* Streams request and response bodies
* Service descriptions for quickly building clients
* Powered by the Symfony2 EventDispatcher
* Use all of the code or only specific components
* Plugins for caching, logging, OAuth, mocks, and more
Optional dependencies:
* Doctrine Cache (1.3 <= php-doctrine-cache < 2.0)
* Monolog (1.0 <= php-Monolog < 2.0)
* Zend Framework 2 Cache (2.0 <= php-ZendFramework2-Cache < 3)
* Zend Framework 2 Log (2.0 <= php-ZendFramework2-Log < 3)
***** EOL NOTICE *****
This package is for Guzzle 3.x. Guzzle 5.x+, the new versions of Guzzle, has
been released and is available as the package "php-guzzlehttp-guzzle". The
documentation for Guzzle version 5+ can be found at http://guzzlephp.org.
Guzzle 3 is only maintained for bug and security fixes. Guzzle 3 will be EOL at
some point in late 2015.
**********************
--------------------------------------------------------------------------------
Update Information:
Zend Framework Upstream ChangeLogs: * [Version
2.4.7](http://framework.zend.com/changelog/2.4.7/) * [Version
2.4.6](http://framework.zend.com/changelog/2.4.6/) * [Version
2.4.5](http://framework.zend.com/changelog/2.4.5/) * [Version
2.4.4](http://framework.zend.com/changelog/2.4.4/) * [Version
2.4.3](http://framework.zend.com/changelog/2.4.3/) * [Version
2.4.2](http://framework.zend.com/changelog/2.4.2/) * [Version
2.4.1](http://framework.zend.com/changelog/2.4.1/) * [Version
2.4.0](http://framework.zend.com/changelog/2.4.0/)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253250 - CVE-2015-5161 php-ZendFramework: XML external entity injection (XXE) on PHP FPM
https://bugzilla.redhat.com/show_bug.cgi?id=1253250
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-guzzle-Guzzle' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
[SECURITY] Fedora 21 Update: php-ZendFramework2-2.4.7-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13488
2015-08-27 19:40:20.011512
--------------------------------------------------------------------------------
Name : php-ZendFramework2
Product : Fedora 21
Version : 2.4.7
Release : 1.fc21
URL : http://framework.zend.com
Summary : Zend Framework 2
Description :
Zend Framework 2 is an open source framework for developing web applications
and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code
and utilizes most of the new features of PHP 5.3, namely namespaces, late
static binding, lambda functions and closures.
Zend Framework 2 evolved from Zend Framework 1, a successful PHP framework
with over 15 million downloads.
Note: This meta package installs all base Zend Framework component packages
(Authentication, Barcode, Cache, Captcha, Code, Config, Console, Crypt, Db,
Debug, Di, Dom, Escaper, EventManager, Feed, File, Filter, Form, Http, I18n,
InputFilter, Json, Ldap, Loader, Log, Mail, Math, Memory, Mime, ModuleManager,
Mvc, Navigation, Paginator, Permissions-Acl, Permissions-Rbac, ProgressBar,
Serializer, Server, ServiceManager, Session, Soap, Stdlib, Tag, Test, Text,
Uri, Validator, Version, View, XmlRpc) except the optional Cache-apc and
Cache-memcached packages.
--------------------------------------------------------------------------------
Update Information:
Zend Framework Upstream ChangeLogs: * [Version
2.4.7](http://framework.zend.com/changelog/2.4.7/) * [Version
2.4.6](http://framework.zend.com/changelog/2.4.6/) * [Version
2.4.5](http://framework.zend.com/changelog/2.4.5/) * [Version
2.4.4](http://framework.zend.com/changelog/2.4.4/) * [Version
2.4.3](http://framework.zend.com/changelog/2.4.3/) * [Version
2.4.2](http://framework.zend.com/changelog/2.4.2/) * [Version
2.4.1](http://framework.zend.com/changelog/2.4.1/) * [Version
2.4.0](http://framework.zend.com/changelog/2.4.0/)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253250 - CVE-2015-5161 php-ZendFramework: XML external entity injection (XXE) on PHP FPM
https://bugzilla.redhat.com/show_bug.cgi?id=1253250
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-ZendFramework2' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: php-scssphp-0.1.9-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13492
2015-08-27 19:40:20.011406
--------------------------------------------------------------------------------
Name : php-scssphp
Product : Fedora 21
Version : 0.1.9
Release : 1.fc21
URL : http://leafo.net/scssphp
Summary : A compiler for SCSS written in PHP
Description :
SCSS (http://sass-lang.com/) is a CSS preprocessor that adds many features like
variables, mixins, imports, color manipulation, functions, and tons of other
powerful features.
The entire compiler comes in a single class file ready for including in any kind
of project in addition to a command line tool for running the compiler from the
terminal.
scssphp implements SCSS (3.2.12). It does not implement the SASS syntax, only
the SCSS syntax.
--------------------------------------------------------------------------------
Update Information:
## v0.1.9 ### Announcements * Adoption of the [Sass Community
Guidelines](http://leafo.github.io/scssphp/community/) ### Compatibility Bug
Fixes * Nested selector fixes with lists, interpolated string, and parent
selector * Implement list-separator() and set-nth() built-ins * Implement
@warn and @error * Removed spaceship operator pending discussion with reference
implementators ## v0.1.8 ### Announcements * Online documentation moved
to http://leafo.github.com/scssphp/ ### Compatibility Bug Fixes * index()
- map support; now returns null (instead of false) when value not found *
lighten(), darken() - percentages don't require % unit * str-slice() - edge
cases when starts-at or ends-at is 0 * type-of() - returns arglist for variable
arguments * != * @return inside @each ## v0.1.7 ### Announcements *
simplified licensing (MIT) ### Enhancements * bin/pscss: added --line-
numbers and --debug-info options * Compiler: added setLineNumberStyle() and 'q'
unit ### Maintenance * Parser: deprecated show() and to() methods *
refactoring internals and misc bug fixes (maps, empty list, function-exists())
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1238727 - php-scssphp-v0.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1238727
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-scssphp' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: php-silex-1.3.1-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13506
2015-08-27 19:40:20.011350
--------------------------------------------------------------------------------
Name : php-silex
Product : Fedora 21
Version : 1.3.1
Release : 1.fc21
URL : http://silex.sensiolabs.org
Summary : PHP micro-framework based on the Symfony components
Description :
Silex is a PHP micro-framework. It is built on the shoulders of Symfony and
Pimple and also inspired by Sinatra.
A micro-framework provides the guts for building simple single-file apps. Silex
aims to be:
* Concise: Silex exposes an intuitive and concise API that is fun to use
* Extensible: Silex has an extension system based around the Pimple micro
service-container that makes it even easier to tie in third party libraries
* Testable: Silex uses Symfony's HttpKernel which abstracts requests and
responses. This makes it very easy to test apps and the framework itself.
It also respects the HTTP specification and encourages its' proper use.
--------------------------------------------------------------------------------
Update Information:
1.3.1 (2015-08-04) ------------------ * added missing support for the
Expression constraint * fixed the possibility to override translations for
validator error messages * fixed sub-mounts with same name clash * fixed
session logout handler when a firewall is stateless 1.3.0 (2015-06-05)
------------------ * added a `$app['user']` to get the current user (security
provider) * added view handlers * added support for the OPTIONS HTTP method *
added caching for the Translator provider * deprecated
`$app['exception_handler']->disable()` in favor of
`unset($app['exception_handler'])` * made Silex compatible with Symfony 2.7 and
2.8 (and keep compatibility with Symfony 2.3, 2.5, and 2.6) * removed
deprecated TwigCoreExtension class (register the new HttpFragmentServiceProvider
instead) * bumped minimum version of PHP to 5.3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250055 - php-silex-v1.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1250055
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-silex' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-16.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13469
2015-08-27 19:40:20.011294
--------------------------------------------------------------------------------
Name : openssh
Product : Fedora 21
Version : 6.6.1p1
Release : 16.fc21
URL : http://www.openssh.com/portable.html
Summary : An open source implementation of SSH protocol versions 1 and 2
Description :
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features.
This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.
--------------------------------------------------------------------------------
Update Information:
This update provides fixes for vulnerabilities published with openssh-7.0
Security fix for CVE-2015-5600
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252844 - CVE-2015-6563 openssh: Privilege separation weakness related to PAM support
https://bugzilla.redhat.com/show_bug.cgi?id=1252844
[ 2 ] Bug #1252852 - CVE-2015-6564 openssh: Use-after-free bug related to PAM support
https://bugzilla.redhat.com/show_bug.cgi?id=1252852
[ 3 ] Bug #1245969 - CVE-2015-5600 openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
https://bugzilla.redhat.com/show_bug.cgi?id=1245969
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openssh' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: java-1.8.0-openjdk-1.8.0.51-5.b16.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13578
2015-08-27 19:40:20.011230
--------------------------------------------------------------------------------
Name : java-1.8.0-openjdk
Product : Fedora 21
Version : 1.8.0.51
Release : 5.b16.fc21
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.
--------------------------------------------------------------------------------
Update Information:
another touching attempt to polycies... Hoepfully fixinf (in two updates)
1111349
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update java-1.8.0-openjdk' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: imaptest-20150812-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13600
2015-08-27 19:40:20.011141
--------------------------------------------------------------------------------
Name : imaptest
Product : Fedora 21
Version : 20150812
Release : 1.fc21
URL : http://www.imapwiki.org/ImapTest
Summary : A generic IMAP server compliancy tester
Description :
ImapTest is a generic IMAP server compliancy tester that works with all IMAP
servers. It supports stress testing with state tracking, scripted testing and
benchmarking. When stress testing with state tracking ImapTest sends random
commands to the server and verifies that server's output looks correct. Using
the scripted testing ImapTest runs a list of predefined scripted tests and
verifies that server returns expected output.
Examples and details are provided online at: http://www.imapwiki.org/ImapTest
--------------------------------------------------------------------------------
Update Information:
ImapTest 20150811 ================= * Renamed username_prefix to
username_format in profile.conf This allows using e.g. %03n to add zero-padding.
* src/imaptest.c, src/settings.h, src/user.c: Added users=n and domains=n
parameters. So they're no longer hardcoded to 99. ImapTest 20150809
================= * tests: Fixed BINARY tests to not use <partial> without
the ".size" suffix. I seem to have always assumed that the .size was optional.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update imaptest' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: osmpbf-1.3.3-7.20150712git17fd0cc.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13583
2015-08-27 19:40:20.011076
--------------------------------------------------------------------------------
Name : osmpbf
Product : Fedora 21
Version : 1.3.3
Release : 7.20150712git17fd0cc.fc21
URL : https://github.com/scrosby/OSM-binary
Summary : C library to read and write OpenStreetMap PBF files
Description :
Osmpbf is a Java/C library to read and write OpenStreetMap PBF files.
PBF (Protocol buffer Binary Format) is a binary file format for OpenStreetMap
data that uses Google Protocol Buffers as low-level storage.
--------------------------------------------------------------------------------
Update Information:
Package the Java library
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253965 - Build Java library
https://bugzilla.redhat.com/show_bug.cgi?id=1253965
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update osmpbf' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: python-setproctitle-1.1.9-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13543
2015-08-27 19:40:20.010979
--------------------------------------------------------------------------------
Name : python-setproctitle
Product : Fedora 21
Version : 1.1.9
Release : 1.fc21
URL : http://pypi.python.org/pypi/setproctitle
Summary : Python module to customize a process title
Description :
Python module allowing a process to change its title as displayed by
system tool such as ps and top.
It's useful in multiprocess systems, allowing to identify tasks each forked
process is busy with. This technique has been used by PostgreSQL and OpenSSH.
It's based on PostgreSQL implementation which has proven to be portable.
--------------------------------------------------------------------------------
Update Information:
Upstream 1.1.9
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-setproctitle' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months
Fedora 21 Update: php-guzzlehttp-promises-1.0.2-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13588
2015-08-27 19:40:20.010896
--------------------------------------------------------------------------------
Name : php-guzzlehttp-promises
Product : Fedora 21
Version : 1.0.2
Release : 1.fc21
URL : https://github.com/guzzle/promises
Summary : Guzzle promises library
Description :
Promises/A+ [1] implementation that handles promise chaining and resolution
interactively, allowing for "infinite" promise chaining while keeping the
stack size constant.
[1] https://promisesaplus.com/
--------------------------------------------------------------------------------
Update Information:
## 1.0.2 - 2015-05-15 * Conditionally require functions.php.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253996 - php-guzzlehttp-promises-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1253996
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-guzzlehttp-promises' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 7 months