Fedora 23 Update: python-docker-squash-1.0.0-0.8.rc6.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-3643f8d262
2016-06-04 21:04:10.592695
--------------------------------------------------------------------------------
Name : python-docker-squash
Product : Fedora 23
Version : 1.0.0
Release : 0.8.rc6.fc23
URL : https://github.com/goldmann/docker-squash
Summary : Docker layer squashing tool
Description :
Tool to squash layers in Docker images.
--------------------------------------------------------------------------------
Update Information:
Upstream release `1.0.0rc6` ---- `1.0.0rc5` release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1319006 - python-docker-scripts-1.0.0rc6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1319006
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-docker-squash' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
[SECURITY] Fedora 23 Update: roundcubemail-1.2.0-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-396403ec02
2016-06-04 21:04:10.592614
--------------------------------------------------------------------------------
Name : roundcubemail
Product : Fedora 23
Version : 1.2.0
Release : 1.fc23
URL : http://www.roundcube.net
Summary : Round Cube Webmail is a browser-based multilingual IMAP client
Description :
RoundCube Webmail is a browser-based multilingual IMAP client
with an application-like user interface. It provides full
functionality you expect from an e-mail client, including MIME
support, address book, folder manipulation, message searching
and spell checking. RoundCube Webmail is written in PHP and
requires a database: MySQL, PostgreSQL and SQLite are known to
work. The user interface is fully skinnable using XHTML and
CSS 2.
--------------------------------------------------------------------------------
Update Information:
Upstream announcement: [Roundcube Webmail 1.2.0
released](https://roundcube.net/news/2016/05/22/roundcube-
webmail-1.2.0-released)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339654 - CVE-2016-5103 roundcube: XSS vulnerability in mail content page
https://bugzilla.redhat.com/show_bug.cgi?id=1339654
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update roundcubemail' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora 23 Update: ccsm-0.8.12.4-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-fcfd3f5cb7
2016-06-04 21:04:10.592536
--------------------------------------------------------------------------------
Name : ccsm
Product : Fedora 23
Version : 0.8.12.4
Release : 1.fc23
URL : https://github.com/compiz-reloaded/ccsm
Summary : Plugin and configuration tool - Compiz Fusion Project
Description :
The Compiz Project brings 3D desktop visual effects that improve
usability of the X Window System and provide increased productivity
though plugins and themes contributed by the community giving a
rich desktop experience.
This package contains a GUI configuration tool to configure Compiz
plugins and the composite window manager.
--------------------------------------------------------------------------------
Update Information:
ccsm update to 0.8.12.4 release emerald-themes update to 0.8.12.1
release obsolete emerald-themes-extra themes are moved to main package
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ccsm' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora 23 Update: emerald-themes-0.8.12.1-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-fcfd3f5cb7
2016-06-04 21:04:10.592536
--------------------------------------------------------------------------------
Name : emerald-themes
Product : Fedora 23
Version : 0.8.12.1
Release : 1.fc23
URL : https://github.com/compiz-reloaded/emerald-themes
Summary : Themes for Emerald, a window decorator for Compiz Fusion
Description :
Emerald is themeable window decorator and compositing
manager for Compiz Fusion.
This package contains themes for emerald.
--------------------------------------------------------------------------------
Update Information:
ccsm update to 0.8.12.4 release emerald-themes update to 0.8.12.1
release obsolete emerald-themes-extra themes are moved to main package
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update emerald-themes' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
[SECURITY] Fedora 23 Update: xen-4.5.3-6.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-8d3fe9914b
2016-06-04 21:04:10.592457
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 23
Version : 4.5.3
Release : 6.fc23
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
cleaner way to set kernel module load list Unrestricted qemu logging [XSA-180,
CVE-2014-3672] (#1339125) Qemu: scsi: esp: OOB write while writing to
's->cmdbuf' in esp_reg_write [CVE-2016-4439] (#1337502) Qemu: scsi: esp: OOB
write while writing to 's->cmdbuf' in get_cmd [CVE-2016-4441] (#1337505) Qemu:
scsi: megasas: out-of-bounds write while setting controller properties
[CVE-2016-5106] (#1339578) Qemu: scsi: megasas: stack information leakage while
reading configuration [CVE-2016-5105] (#1339583)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1337502 - CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write
https://bugzilla.redhat.com/show_bug.cgi?id=1337502
[ 2 ] Bug #1337505 - CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd
https://bugzilla.redhat.com/show_bug.cgi?id=1337505
[ 3 ] Bug #1339578 - CVE-2016-5106 Qemu: scsi: megasas: out-of-bounds write while setting controller properties
https://bugzilla.redhat.com/show_bug.cgi?id=1339578
[ 4 ] Bug #1339583 - CVE-2016-5105 Qemu: scsi: megasas: stack information leakage while reading configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1339583
[ 5 ] Bug #1339123 - CVE-2014-3672 xen: Unrestricted qemu logging
https://bugzilla.redhat.com/show_bug.cgi?id=1339123
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora 23 Update: strace-4.12-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-ce2e684467
2016-06-04 21:04:10.592378
--------------------------------------------------------------------------------
Name : strace
Product : Fedora 23
Version : 4.12
Release : 1.fc23
URL : http://sourceforge.net/projects/strace/
Summary : Tracks and displays system calls associated with a running process
Description :
The strace program intercepts and records the system calls called and
received by a running process. Strace can print a record of each
system call, its arguments and its return value. Strace is useful for
diagnosing problems and debugging, as well as for instructional
purposes.
Install strace if you need a tool to track the system calls made and
received by a process.
--------------------------------------------------------------------------------
Update Information:
v4.11 -> v4.12.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update strace' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
[SECURITY] Fedora 23 Update: sudo-1.8.15-2.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-d25ebba412
2016-06-04 21:04:10.592276
--------------------------------------------------------------------------------
Name : sudo
Product : Fedora 23
Version : 1.8.15
Release : 2.fc23
URL : http://www.courtesan.com/sudo/
Summary : Allows restricted root access for specified users
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis. It is not a replacement for the shell. Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.
--------------------------------------------------------------------------------
Update Information:
* removed INPUTRC from env_keep to prevent a possible info leak
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339935 - readline: Possible info leak via INPUTRC
https://bugzilla.redhat.com/show_bug.cgi?id=1339935
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sudo' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora 23 Update: cmake-3.4.3-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-d7f570536f
2016-06-04 21:04:10.592230
--------------------------------------------------------------------------------
Name : cmake
Product : Fedora 23
Version : 3.4.3
Release : 1.fc23
URL : http://www.cmake.org
Summary : Cross-platform make system
Description :
CMake is used to control the software compilation process using simple
platform and compiler independent configuration files. CMake generates
native makefiles and workspaces that can be used in the compiler
environment of your choice. CMake is quite sophisticated: it is possible
to support complex environments requiring system configuration, preprocessor
generation, code generation, and template instantiation.
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342123 - Please update CMake in Fedora 23 from 3.4.1 to 3.4.3
https://bugzilla.redhat.com/show_bug.cgi?id=1342123
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cmake' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora 23 Update: nss-3.24.0-1.2.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-db48cd10e9
2016-06-04 21:04:10.592128
--------------------------------------------------------------------------------
Name : nss
Product : Fedora 23
Version : 3.24.0
Release : 1.2.fc23
URL : http://www.mozilla.org/projects/security/pki/nss/
Summary : Network Security Services
Description :
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.
--------------------------------------------------------------------------------
Update Information:
Fix a bug introduced with the update to nss-3.24, that SSLSv2 support removed,
that caused of IPA failures because nss init failed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails
https://bugzilla.redhat.com/show_bug.cgi?id=1342158
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nss' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora 22 Update: httpie-0.9.3-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-830e469da5
2016-06-04 21:03:36.632851
--------------------------------------------------------------------------------
Name : httpie
Product : Fedora 22
Version : 0.9.3
Release : 1.fc22
URL : http://httpie.org/
Summary : A Curl-like tool for humans
Description :
HTTPie is a CLI HTTP utility built out of frustration with existing tools. The
goal is to make CLI interaction with HTTP-based services as human-friendly as
possible.
HTTPie does so by providing an http command that allows for issuing arbitrary
HTTP requests using a simple and natural syntax and displaying colorized
responses.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update httpie' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months