[SECURITY] Fedora 24 Update: wordpress-4.5.3-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-7db496f6f2
2016-06-30 19:57:05.713620
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora 24
Version : 4.5.3
Release : 1.fc24
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress/README.fedora
--------------------------------------------------------------------------------
Update Information:
See upstream announcement [WordPress 4.5.3 Maintenance and Security
Release](ttps://wordpress.org/news/2016/06/wordpress-4-5-3/) Packaging changes:
- provide nginx configuration (fedora) - drop mandatory dependency on httpd
(suggested) #1336091 - protect php files in uploads directory
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1349323 - CVE-2016-5832 CVE-2016-5833 CVE-2016-5834 CVE-2016-5835 CVE-2016-5836 CVE-2016-5837 CVE-2016-5838 CVE-2016-5839 wordpress: 4.5.3 Security Release
https://bugzilla.redhat.com/show_bug.cgi?id=1349323
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: rubygem-github-linguist-4.8.7-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-fd8aec7587
2016-06-30 19:57:05.713570
--------------------------------------------------------------------------------
Name : rubygem-github-linguist
Product : Fedora 24
Version : 4.8.7
Release : 1.fc24
URL : https://github.com/github/linguist
Summary : GitHub Language detection
Description :
Library to detect blob languages, highlight code, ignore
binary files, suppress generated files in diffs, and generate language
breakdown graphs.
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348747 - rubygem-github-linguist-v4.8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1348747
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-github-linguist' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: valgrind-3.11.0-23.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-d448fefa4a
2016-06-30 19:57:05.713514
--------------------------------------------------------------------------------
Name : valgrind
Product : Fedora 24
Version : 3.11.0
Release : 23.fc24
URL : http://www.valgrind.org/
Summary : Tool for finding memory management bugs in programs
Description :
Valgrind is a tool to help you find memory-management problems in your
programs. When a program is run under Valgrind's supervision, all
reads and writes of memory are checked, and calls to
malloc/new/free/delete are intercepted. As a result, Valgrind can
detect a lot of problems that are otherwise very hard to
find/diagnose.
--------------------------------------------------------------------------------
Update Information:
Fix a bug with the pselect syscall wrapper, more syscall wrappers on ppc64
(sync, waitid and name_to/open_by_handle_at) and arm64 (name_to_handle_at and
open_by_handle_at).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344082 - valgrind mishandles pselect with null sigmask
https://bugzilla.redhat.com/show_bug.cgi?id=1344082
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update valgrind' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: mongo-cxx-driver-1.1.2-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-32bb831c06
2016-06-30 19:57:05.713469
--------------------------------------------------------------------------------
Name : mongo-cxx-driver
Product : Fedora 24
Version : 1.1.2
Release : 1.fc24
URL : https://github.com/mongodb/mongo-cxx-driver/wiki
Summary : A legacy C++ Driver for MongoDB
Description :
This package provides the shared library for the MongoDB legacy C++ Driver.
--------------------------------------------------------------------------------
Update Information:
Upgrade to latest minor version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mongo-cxx-driver' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: php-zendframework-zend-view-2.8.0-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-ba0dd522c8
2016-06-30 19:57:05.713396
--------------------------------------------------------------------------------
Name : php-zendframework-zend-view
Product : Fedora 24
Version : 2.8.0
Release : 1.fc24
URL : http://framework.zend.com/
Summary : Zend Framework View component
Description :
Zend\View provides the ���View��� layer of Zend Framework 2���s MVC system.
It is a multi-tiered system allowing a variety of mechanisms for extension,
substitution, and more.
Documentation: https://zendframework.github.io/zend-view/
--------------------------------------------------------------------------------
Update Information:
**zend-view 2.8.0** - 2016-06-21 - [#67](https://github.com/zendframework/zend-
view/pull/67) adds a script, `templatemap_generator.php`, which is available
in `vendor/bin/templatemap_generator.php` once installed. This script replaces
the original present in the zendframework/zendframework package, and
simplifies it for the most common use case. Usage is: ```bash $ cd
module/ModuleName/config $ ../../../vendor/bin/templatemap_generator.php
../view > template_map.config.php ``` You can also provide a list of files
via globbing or usage of `find` after the initial directory argument; if
provided that list of files will be used to generate the map. (The directory
argument is then used to strip the path information when generating the
template name.)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-zendframework-zend-view' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: php-zendframework-2.5.3-3.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-ba0dd522c8
2016-06-30 19:57:05.713396
--------------------------------------------------------------------------------
Name : php-zendframework
Product : Fedora 24
Version : 2.5.3
Release : 3.fc24
URL : http://framework.zend.com/
Summary : Zend Framework
Description :
Zend Framework is an open source framework for developing web applications
and services using PHP.
This package is a metapackage aggregating most of the components.
Documentation: https://zendframework.github.io/
--------------------------------------------------------------------------------
Update Information:
**zend-view 2.8.0** - 2016-06-21 - [#67](https://github.com/zendframework/zend-
view/pull/67) adds a script, `templatemap_generator.php`, which is available
in `vendor/bin/templatemap_generator.php` once installed. This script replaces
the original present in the zendframework/zendframework package, and
simplifies it for the most common use case. Usage is: ```bash $ cd
module/ModuleName/config $ ../../../vendor/bin/templatemap_generator.php
../view > template_map.config.php ``` You can also provide a list of files
via globbing or usage of `find` after the initial directory argument; if
provided that list of files will be used to generate the map. (The directory
argument is then used to strip the path information when generating the
template name.)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-zendframework' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
[SECURITY] Fedora 24 Update: struts-1.3.10-18.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-d717fdcf74
2016-06-30 19:57:05.713348
--------------------------------------------------------------------------------
Name : struts
Product : Fedora 24
Version : 1.3.10
Release : 18.fc24
URL : http://struts.apache.org/
Summary : Web application framework
Description :
Welcome to the Struts Framework! The goal of this project is to provide
an open source framework useful in building web applications with Java
Servlet and JavaServer Pages (JSP) technology. Struts encourages
application architectures based on the Model-View-Controller (MVC)
design paradigm, colloquially known as Model 2 in discussions on various
servlet and JSP related mailing lists.
Struts includes the following primary areas of functionality:
A controller servlet that dispatches requests to appropriate Action
classes provided by the application developer.
JSP custom tag libraries, and associated support in the controller
servlet, that assists developers in creating interactive form-based
applications.
Utility classes to support XML parsing, automatic population of
JavaBeans properties based on the Java reflection APIs, and
internationalization of prompts and messages.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-1181, CVE-2016-1182
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343538 - CVE-2016-1181 struts: Vulnerability in ActionForm allows unintended remote operations against components on server memory
https://bugzilla.redhat.com/show_bug.cgi?id=1343538
[ 2 ] Bug #1343540 - CVE-2016-1182 struts: Improper input validation in Validator
https://bugzilla.redhat.com/show_bug.cgi?id=1343540
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update struts' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: paraview-5.1.0-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-359b86b0df
2016-06-30 19:57:05.713301
--------------------------------------------------------------------------------
Name : paraview
Product : Fedora 24
Version : 5.1.0
Release : 1.fc24
URL : http://www.paraview.org/
Summary : Parallel visualization application
Description :
ParaView is an application designed with the need to visualize large data
sets in mind. The goals of the ParaView project include the following:
* Develop an open-source, multi-platform visualization application.
* Support distributed computation models to process large data sets.
* Create an open, flexible, and intuitive user interface.
* Develop an extensible architecture based on open standards.
ParaView runs on distributed and shared memory parallel as well as single
processor systems and has been successfully tested on Windows, Linux and
various Unix workstations and clusters. Under the hood, ParaView uses the
Visualization Toolkit as the data processing and rendering engine and has a
user interface written using a unique blend of Tcl/Tk and C++.
NOTE: The version in this package has NOT been compiled with MPI support.
Install the paraview-openmpi package to get a version compiled with openmpi.
Install the paraview-mpich package to get a version compiled with mpich.
--------------------------------------------------------------------------------
Update Information:
Update to 5.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1346533 - paraview-v5.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1346533
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update paraview' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: ghex-3.18.2-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-a73a600a83
2016-06-30 19:57:05.713256
--------------------------------------------------------------------------------
Name : ghex
Product : Fedora 24
Version : 3.18.2
Release : 1.fc24
URL : http://ftp.gnome.org/pub/GNOME/sources/ghex/
Summary : Binary editor for GNOME
Description :
GHex can load raw data from binary files and display them for editing in the
traditional hex editor view. The display is split in two columns, with
hexadecimal values in one column and the ASCII representation in the other.
A useful tool for working with raw data.
--------------------------------------------------------------------------------
Update Information:
ghex 3.18.2 release with translation updates.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ghex' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months
Fedora 24 Update: mdds-1.1.0-2.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-4bd570a7dd
2016-06-30 19:57:05.713210
--------------------------------------------------------------------------------
Name : mdds
Product : Fedora 24
Version : 1.1.0
Release : 2.fc24
URL : https://gitlab.com/mdds/mdds
Summary : A collection of multi-dimensional data structures and indexing algorithms
Description :
mdds is a collection of multi-dimensional data structures and
indexing algorithms.
--------------------------------------------------------------------------------
Update Information:
fix double delete in mtv::swap
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mdds' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 10 months