Fedora 23 Update: qt5-qtbase-5.5.1-12.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-df9f4a6560
2016-02-28 08:31:31.053120
--------------------------------------------------------------------------------
Name : qt5-qtbase
Product : Fedora 23
Version : 5.5.1
Release : 12.fc23
URL : http://qt-project.org/
Summary : Qt5 - QtBase components
Description :
Qt is a software toolkit for developing applications.
This package contains base tools, like string, xml, and network
handling.
--------------------------------------------------------------------------------
Update Information:
Backport ListView fix for missing systray icons, see also:
https://bugs.kde.org/show_bug.cgi?id=352055
https://bugreports.qt.io/browse/QTBUG-48870
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qt5-qtbase' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
Fedora 23 Update: shogun-4.1.0-2.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-d08d6ec3f6
2016-02-28 08:31:31.053001
--------------------------------------------------------------------------------
Name : shogun
Product : Fedora 23
Version : 4.1.0
Release : 2.fc23
URL : http://shogun-toolbox.org
Summary : Large Scale Machine Learning Toolbox
Description :
The Shogun Machine learning toolbox provides a wide range of unified and
efficient Machine Learning (ML) methods. The toolbox seamlessly allows to
easily combine multiple data representations, algorithm classes, and general
purpose tools. This enables both rapid prototyping of data pipelines and
extensibility in terms of new algorithms. We combine modern software
architecture in C++ with both efficient low-level computing back-ends and
cutting edge algorithm implementations to solve large-scale Machine Learning
problems (yet) on single machines.
One of Shogun's most exciting features is that you can use the toolbox through
a unified interface from C++, Python(3), Octave, R, Java, Lua, etc. This not
just means that we are independent of trends in computing languages, but it
also lets you use Shogun as a vehicle to expose your algorithm to multiple
communities. We use SWIG to enable bidirectional communication between C++
and target languages. Shogun runs under Linux/Unix, MacOS, Windows.
Originally focusing on large-scale kernel methods and bioinformatics (for a
list of scientific papers mentioning Shogun, see here), the toolbox saw
massive extensions to other fields in recent years. It now offers features
that span the whole space of Machine Learning methods, including many
classical methods in classification, regression, dimensionality reduction,
clustering, but also more advanced algorithm classes such as metric,
multi-task, structured output, and online learning, as well as feature
hashing, ensemble methods, and optimization, just to name a few. Shogun in
addition contains a number of exclusive state-of-the art algorithms such as
a wealth of efficient SVM implementations, Multiple Kernel Learning, kernel
hypothesis testing, Krylov methods, etc. All algorithms are supported by a
collection of general purpose methods for evaluation, parameter tuning,
preprocessing, serialization & I/O, etc; the resulting combinatorial
possibilities are huge.
The wealth of ML open-source software allows us to offer bindings to other
sophisticated libraries including: LibSVM, LibLinear, LibOCAS, libqp,
VowpalWabbit, Tapkee, SLEP, GPML and more.
Shogun got initiated in 1999 by Soeren Sonnenburg and Gunnar Raetsch (that's
where the name ShoGun originates from). It is now developed by a larger team
of authors, and would not have been possible without the patches and bug
reports by various people. See contributions for a detailed list. Statistics
on Shogun's development activity can be found on ohloh.
--------------------------------------------------------------------------------
Update Information:
* fixed serialization with JSON-C
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update shogun' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
Fedora 23 Update: pcsc-tools-1.4.25-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-cf76b42abd
2016-02-28 08:31:31.052833
--------------------------------------------------------------------------------
Name : pcsc-tools
Product : Fedora 23
Version : 1.4.25
Release : 1.fc23
URL : http://ludovic.rousseau.free.fr/softwares/pcsc-tools/
Summary : Tools to be used with smart cards and PC/SC
Description :
The pcsc-tools package contains some useful tools for a PC/SC user:
pcsc_scan regularly scans connected PC/SC smart card readers and
prints detected events, ATR_analysis analyzes smart card ATRs (Anwser
To Reset), scriptor sends commands to a smart card, and gscriptor does
that from a GTK user interface.
--------------------------------------------------------------------------------
Update Information:
New upstream release with updated smart card database.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308753 - pcsc-tools smart card database out of date
https://bugzilla.redhat.com/show_bug.cgi?id=1308753
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pcsc-tools' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: bind99-9.9.8-2.P3.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-1323b9078a
2016-02-28 04:00:02.128800
--------------------------------------------------------------------------------
Name : bind99
Product : Fedora 22
Version : 9.9.8
Release : 2.P3.fc22
URL : http://www.isc.org/products/BIND/
Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. This package set contains only export
version of BIND libraries, that are used for building ISC DHCP.
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream version due to security fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300052 - CVE-2015-8704 bind99: bind: specific APL data could trigger an INSIST in apl_42.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1300052
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bind99' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: rubygem-rails-html-sanitizer-1.0.1-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-3a2606f993
2016-02-28 04:00:02.128747
--------------------------------------------------------------------------------
Name : rubygem-rails-html-sanitizer
Product : Fedora 22
Version : 1.0.1
Release : 2.fc22
URL : https://github.com/rails/rails-html-sanitizer
Summary : This gem is responsible to sanitize HTML fragments in Rails applications
Description :
HTML sanitization to Rails applications.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-7578 CVE-2015-7579 CVE-2015-7580
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301920 - CVE-2015-7578 rails-html-sanitizer: XSS vulnerability due to unremoved attributes from tags
https://bugzilla.redhat.com/show_bug.cgi?id=1301920
[ 2 ] Bug #1302014 - CVE-2015-7579 rubygem-rails-html-sanitizer: XSS vulnerability in Action View's strip_tags function
https://bugzilla.redhat.com/show_bug.cgi?id=1302014
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-rails-html-sanitizer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: rubygem-activesupport-4.2.0-4.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-cb30088b06
2016-02-28 04:00:02.128686
--------------------------------------------------------------------------------
Name : rubygem-activesupport
Product : Fedora 22
Version : 4.2.0
Release : 4.fc22
URL : http://www.rubyonrails.org
Summary : Support and utility classes used by the Rails framework
Description :
Utility library which carries commonly used classes and
goodies from the Rails framework
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-7576 CVE-2016-0753
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model
https://bugzilla.redhat.com/show_bug.cgi?id=1301973
[ 2 ] Bug #1301933 - CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller
https://bugzilla.redhat.com/show_bug.cgi?id=1301933
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-activesupport' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-3.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-fa0dec2360
2016-02-28 04:00:02.128624
--------------------------------------------------------------------------------
Name : rubygem-actionview
Product : Fedora 22
Version : 4.2.0
Release : 3.fc22
URL : http://www.rubyonrails.org
Summary : Rendering framework putting the V in MVC (part of Rails)
Description :
Simple, battle-tested conventions and helpers for building web pages.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-0752
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301963 - CVE-2016-0752 rubygem-actionview, rubygem-actionpack: directory traversal flaw in Action View
https://bugzilla.redhat.com/show_bug.cgi?id=1301963
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-actionview' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: rubygem-activemodel-4.2.0-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-94e71ee673
2016-02-28 04:00:02.128575
--------------------------------------------------------------------------------
Name : rubygem-activemodel
Product : Fedora 22
Version : 4.2.0
Release : 2.fc22
URL : http://www.rubyonrails.org
Summary : A toolkit for building modeling frameworks
Description :
Rich support for attributes, callbacks, validations, observers,
serialization, internationalization, and testing. It provides a known
set of interfaces for usage in model classes. It also helps building
custom ORMs for use outside of the Rails framework.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-7581 CVE-2015-7576 CVE-2016-0751 CVE-2016-0752
CVE-2016-0753
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model
https://bugzilla.redhat.com/show_bug.cgi?id=1301973
[ 2 ] Bug #1301933 - CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller
https://bugzilla.redhat.com/show_bug.cgi?id=1301933
[ 3 ] Bug #1301946 - CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack
https://bugzilla.redhat.com/show_bug.cgi?id=1301946
[ 4 ] Bug #1301981 - CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack
https://bugzilla.redhat.com/show_bug.cgi?id=1301981
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-activemodel' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: rubygem-actionpack-4.2.0-3.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-94e71ee673
2016-02-28 04:00:02.128575
--------------------------------------------------------------------------------
Name : rubygem-actionpack
Product : Fedora 22
Version : 4.2.0
Release : 3.fc22
URL : http://www.rubyonrails.org
Summary : Web-flow and rendering framework putting the VC in MVC
Description :
Eases web-request routing, handling, and response as a half-way front,
half-way page controller. Implemented with specific emphasis on enabling easy
unit/integration testing that doesn't require a browser.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-7581 CVE-2015-7576 CVE-2016-0751 CVE-2016-0752
CVE-2016-0753
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model
https://bugzilla.redhat.com/show_bug.cgi?id=1301973
[ 2 ] Bug #1301933 - CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller
https://bugzilla.redhat.com/show_bug.cgi?id=1301933
[ 3 ] Bug #1301946 - CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack
https://bugzilla.redhat.com/show_bug.cgi?id=1301946
[ 4 ] Bug #1301981 - CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack
https://bugzilla.redhat.com/show_bug.cgi?id=1301981
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-actionpack' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months
[SECURITY] Fedora 22 Update: rubygem-activerecord-4.2.0-2.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-73fe05d878
2016-02-28 04:00:02.128519
--------------------------------------------------------------------------------
Name : rubygem-activerecord
Product : Fedora 22
Version : 4.2.0
Release : 2.fc22
URL : http://www.rubyonrails.org
Summary : Implements the ActiveRecord pattern for ORM
Description :
Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties database
tables and classes together for business objects, like Customer or
Subscription, that can find, save, and destroy themselves without resorting to
manual SQL.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-7577 CVE-2016-0753
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model
https://bugzilla.redhat.com/show_bug.cgi?id=1301973
[ 2 ] Bug #1301957 - CVE-2015-7577 rubygem-activerecord: Nested attributes rejection proc bypass in Active Record
https://bugzilla.redhat.com/show_bug.cgi?id=1301957
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-activerecord' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 3 months