--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-5c19f6b8e6
2016-07-02 13:23:23.483862
--------------------------------------------------------------------------------
Name : engauge-digitizer
Product : Fedora 23
Version : 8.2
Release : 1.fc23
URL : https://github.com/markummitchell/engauge-digitizer
Summary : Convert graphs or map files into numbers
Description :
Engauge 8 is rewritten with Qt5.
This digitizing software converts an image file
showing a graph or map, into numbers.
The image file can come from a scanner, digital camera
or screen-shot. The numbers can be read on the screen,
and written or copied to a spreadsheet.
The process starts with an image file containing a graph or map.
The final result is digitized data that can be used by other tools
such as Gnumeric.
New features already added to Engauge:
- Fix loading of versions 6 and 7 DIG files with log coordinates
- Undo/redo of all operations means recovering from mistakes and experimenting
with options is painless
- Wizard provides an interactive tutorial to explain the basic steps
- Wizard creates a checklist guide to interactively leads user through steps
from file import to file export
- Cubic spline interpolation between points gives more accurate curves with
fewer points
- Axes Checker briefly highlights the axes when they are defined or modified,
to reveal entry mistakes
- Graph coordinates can be specified as date and time value, or as degrees,
minutes and seconds
- All settings dialogs are resizable so they can be enlarged as necessary to
display more information
- Import by drag-and-drop
- Replacement of Qt3 (which is at its end of life) by Qt5
- Much better zooming, with a fill mode that automatically zooms in on image
features, and rezooms when the application window is resized
- Color picking straight from the original image
- Uploadable error report generated when a programming error is encountered,
for identifying problems and improving user support
- Test suite for regression testing minimizes code breakage
as new features are added
- Multiple coordinate systems in the same image can be digitized in advanced mode
- Axes with only one known coordinate (floating axes) can be digitized in advanced mode
- File import by pasting
--------------------------------------------------------------------------------
Update Information:
- Update to 8.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update engauge-digitizer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-dc483e46b3
2016-07-02 13:23:23.483791
--------------------------------------------------------------------------------
Name : Field3D
Product : Fedora 23
Version : 1.7.2
Release : 1.fc23
URL : https://sites.google.com/site/field3d/
Summary : Library for storing voxel data
Description :
Field3D is an open source library for storing voxel data. It provides C++
classes that handle in-memory storage and a file format based on HDF5 that
allows the C++ objects to be written to and read from disk.
--------------------------------------------------------------------------------
Update Information:
Minor update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347967 - Field3D-v1.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1347967
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update Field3D' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-a023fd9be1
2016-07-02 13:23:23.483722
--------------------------------------------------------------------------------
Name : screen
Product : Fedora 23
Version : 4.4.0
Release : 1.fc23
URL : http://www.gnu.org/software/screen
Summary : A screen manager that supports multiple logins on one terminal
Description :
The screen utility allows you to have multiple logins on just one
terminal. Screen is useful for users who telnet into a machine or are
connected via a dumb terminal, but want to use more than just one
login.
Install the screen package if you need a screen manager that can
support multiple logins on one terminal.
--------------------------------------------------------------------------------
Update Information:
New upstream release 4.4.0 (#1348015)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348015 - screen-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1348015
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update screen' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-e9bc854cca
2016-07-02 13:23:23.483658
--------------------------------------------------------------------------------
Name : texinfo
Product : Fedora 23
Version : 6.0
Release : 3.fc23
URL : http://www.gnu.org/software/texinfo/
Summary : Tools needed to create Texinfo format documentation files
Description :
Texinfo is a documentation system that can produce both online
information and printed output from a single source file. The GNU
Project uses the Texinfo file format for most of its documentation.
Install texinfo if you want a documentation system for producing both
online and print documentation from the same source file and/or if you
are going to write documentation for the GNU Project.
--------------------------------------------------------------------------------
Update Information:
install-info: use create-tmp-then-rename pattern because of OSTree
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348671 - [PATCH] install-info: Use create-tmp-then-rename pattern
https://bugzilla.redhat.com/show_bug.cgi?id=1348671
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update texinfo' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b68f69b086
2016-07-02 13:23:23.483604
--------------------------------------------------------------------------------
Name : setroubleshoot-plugins
Product : Fedora 23
Version : 3.3.5.1
Release : 1.fc23
URL : https://github.com/fedora-selinux/setroubleshoot
Summary : Analysis plugins for use with setroubleshoot
Description :
This package provides a set of analysis plugins for use with
setroubleshoot. Each plugin has the capacity to analyze SELinux AVC
data and system data to provide user friendly reports describing how
to interpret SELinux AVC denials.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-4446
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339250 - CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1339250
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update setroubleshoot-plugins' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-73853a7a16
2016-07-02 13:23:23.483542
--------------------------------------------------------------------------------
Name : qemu
Product : Fedora 23
Version : 2.4.1
Release : 11.fc23
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:
* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.
As QEMU requires no host kernel patches to run, it is safe and easy to use.
--------------------------------------------------------------------------------
Update Information:
* CVE-2016-4002: net: buffer overflow in MIPSnet (bz #1326083) * CVE-2016-4952
scsi: pvscsi: out-of-bounds access issue * CVE-2016-5106: scsi: megasas: out-of-
bounds write (bz #1339581) * CVE-2016-5105: scsi: megasas: stack information
leakage (bz #1339585) * CVE-2016-5107: scsi: megasas: out-of-bounds read (bz
#1339573) * CVE-2016-4454: display: vmsvga: out-of-bounds read (bz #1340740) *
CVE-2016-4453: display: vmsvga: infinite loop (bz #1340744) * CVE-2016-5238:
scsi: esp: OOB write (bz #1341932) * CVE-2016-5338: scsi: esp: OOB r/w access
(bz #1343325) * CVE-2016-5337: scsi: megasas: information leakage (bz #1343910)
* Add deps on edk2-ovmf and edk2-aarch64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326082 - CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator
https://bugzilla.redhat.com/show_bug.cgi?id=1326082
[ 2 ] Bug #1334384 - CVE-2016-4952 Qemu: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines
https://bugzilla.redhat.com/show_bug.cgi?id=1334384
[ 3 ] Bug #1339578 - CVE-2016-5106 Qemu: scsi: megasas: out-of-bounds write while setting controller properties
https://bugzilla.redhat.com/show_bug.cgi?id=1339578
[ 4 ] Bug #1339583 - CVE-2016-5105 Qemu: scsi: megasas: stack information leakage while reading configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1339583
[ 5 ] Bug #1336461 - CVE-2016-5107 Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function
https://bugzilla.redhat.com/show_bug.cgi?id=1336461
[ 6 ] Bug #1336429 - CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine
https://bugzilla.redhat.com/show_bug.cgi?id=1336429
[ 7 ] Bug #1336650 - CVE-2016-4453 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine
https://bugzilla.redhat.com/show_bug.cgi?id=1336650
[ 8 ] Bug #1341931 - CVE-2016-5238 Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd
https://bugzilla.redhat.com/show_bug.cgi?id=1341931
[ 9 ] Bug #1343323 - CVE-2016-5338 Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO
https://bugzilla.redhat.com/show_bug.cgi?id=1343323
[ 10 ] Bug #1343909 - CVE-2016-5337 Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info
https://bugzilla.redhat.com/show_bug.cgi?id=1343909
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qemu' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-7a6f6826a0
2016-07-02 13:23:23.483471
--------------------------------------------------------------------------------
Name : fusioninventory-agent
Product : Fedora 23
Version : 2.3.18
Release : 2.fc23
URL : http://fusioninventory.org/
Summary : FusionInventory agent
Description :
FusionInventory Agent is an application designed to help a network
or system administrator to keep track of the hardware and software
configurations of computers that are installed on the network.
This agent can send information about the computer to a OCS Inventory NG
or GLPI server with the FusionInventory for GLPI plugin.
You can add additional packages for optional tasks:
* fusioninventory-agent-task-network
Network Discovery and Inventory support
* fusioninventory-agent-inventory
Local inventory support for FusionInventory
* fusioninventory-agent-task-deploy
Software deployment support
* fusioninventory-agent-task-esx
vCenter/ESX/ESXi remote inventory
* fusioninventory-agent-task-collect
Custom information retrieval support
* fusioninventory-agent-task-wakeonlan
not included due to a licensing issue for perl-Net-Write
Edit the /etc/sysconfig/fusioninventory-agent file for service configuration.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300870 - fusioninventory-agent-2.3.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1300870
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fusioninventory-agent' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-34a6b65583
2016-07-02 13:23:23.483220
--------------------------------------------------------------------------------
Name : php
Product : Fedora 23
Version : 5.6.23
Release : 1.fc23
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
23 Jun 2016, **PHP 5.6.23** **Core:** * Fixed bug php#72275 (Integer Overflow
in json_encode()/json_decode()/json_utf8_to_utf16()). (Stas) * Fixed bug
php#72400 (Integer Overflow in addcslashes/addslashes). (Stas) * Fixed bug
php#72403 (Integer Overflow in Length of String-typed ZVAL). (Stas) **GD:** *
Fixed bug php#72298 (pass2_no_dither out-of-bounds access). (Stas) * Fixed bug
php#72337 (invalid dimensions can lead to crash) (Pierre) * Fixed bug php#72339
(Integer Overflow in _gd2GetHeader() resulting in heap overflow). (Pierre) *
Fixed bug php#72407 (NULL Pointer Dereference at _gdScaleVert). (Stas) * Fixed
bug php#72446 (Integer Overflow in gdImagePaletteToTrueColor() resulting in heap
overflow). (Pierre) **Intl:** * Fixed bug php#70484 (selectordinal doesn't
work with named parameters). (Anatol) **mbstring:** * Fixed bug php#72402
(_php_mb_regex_ereg_replace_exec - double free). (Stas) **mcrypt:** * Fixed
bug php#72455 (Heap Overflow due to integer overflows). (Stas) **Phar:** *
Fixed bug php#72321 (invalid free in phar_extract_file()). (hji at dyntopia dot
com) **SPL:** * Fixed bug php#72262 (int/size_t confusion in
SplFileObject::fread). (Stas) * Fixed bug php#72433 (Use After Free
Vulnerability in PHP's GC algorithm and unserialize). (Dmitry) **OpenSSL:** *
Fixed bug php#72140 (segfault after calling ERR_free_strings()). (Jakub Zelenka)
**WDDX:** * Fixed bug php#72340 (Double Free Courruption in wddx_deserialize).
(Stas)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351175 - CVE-2016-5772 php: Double Free Corruption in wddx_deserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1351175
[ 2 ] Bug #1351173 - CVE-2016-5771 php: Use After Free Vulnerability in PHP's GC algorithm and unserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1351173
[ 3 ] Bug #1351171 - CVE-2016-5770 php: Int/size_t confusion in SplFileObject::fread
https://bugzilla.redhat.com/show_bug.cgi?id=1351171
[ 4 ] Bug #1351168 - CVE-2016-5768 php: Double free in _php_mb_regex_ereg_replace_exec
https://bugzilla.redhat.com/show_bug.cgi?id=1351168
[ 5 ] Bug #1351070 - CVE-2016-5769 php: Integer Overflows in mcrypt_generic() and mdecrypt_generic() resulting in heap overflows
https://bugzilla.redhat.com/show_bug.cgi?id=1351070
[ 6 ] Bug #1351069 - CVE-2016-5767 php: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1351069
[ 7 ] Bug #1351068 - CVE-2016-5766 php: Integer Overflow in _gd2GetHeader() resulting in heap overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1351068
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-4f3c77ef90
2016-07-02 13:23:23.483148
--------------------------------------------------------------------------------
Name : php-pecl-zip
Product : Fedora 23
Version : 1.13.3
Release : 1.fc23
URL : http://pecl.php.net/package/zip
Summary : A ZIP archive management extension
Description :
Zip is an extension to create and read zip files.
--------------------------------------------------------------------------------
Update Information:
**Version 1.13.3** - Fixed bug php#71923 (integer overflow in
ZipArchive::getFrom*). (CVE-2016-3078) (Stas) - Fixed bug php#72258 (ZipArchive
converts filenames to unrecoverable form). (Anatol) - Fixed bug php#72434
(ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and
unserialize). (Dmitry)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351179 - CVE-2016-5773 php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1351179
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pecl-zip' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-e52fe1a76b
2016-07-02 13:23:23.483085
--------------------------------------------------------------------------------
Name : pacemaker
Product : Fedora 23
Version : 1.1.15
Release : 1.fc23
URL : http://www.clusterlabs.org
Summary : Scalable High-Availability cluster resource manager
Description :
Pacemaker is an advanced, scalable High-Availability cluster resource
manager for Corosync, CMAN and/or Linux-HA.
It supports more than 16 node clusters with significant capabilities
for managing resources and dependencies.
It will run scripts at initialization, when machines go up or down,
when related resources fail and can be configured to periodically check
resource health.
Available rpmbuild rebuild options:
--with(out) : doc coverage profiling upstart_job
--------------------------------------------------------------------------------
Update Information:
* Update for new upstream tarball: Pacemaker-1.1.15, for full details, see
included `ChangeLog` file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15 * Adapt
spec file more akin to upstream version: - move xml schema files + `PCMK-
MIB.txt` (81ef956), logrotate configuration file (ce576cf; drop it from
`-remote` package as well), `attrd_updater` (aff80ae), the normal resource
agents (1fc7287), and common directories under `/var/lib/pacemaker`
(3492794) from main package under `-cli` - simplify `docdir` build parameter
passing and drop as of now redundant `chmod` invocations (e91769e)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pacemaker' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------