--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-3093027736
2016-07-02 13:23:23.482251
--------------------------------------------------------------------------------
Name : mediawiki
Product : Fedora 23
Version : 1.26.3
Release : 1.fc23
URL : http://www.mediawiki.org/
Summary : A wiki engine
Description :
MediaWiki is the software used for Wikipedia and the other Wikimedia
Foundation websites. Compared to other wikis, it has an excellent
range of features and support for high-traffic websites using multiple
servers
This package supports wiki farms. Read the instructions for creating wiki
instances under /usr/share/doc/mediawiki/README.RPM.
Remember to remove the config dir after completing the configuration.
--------------------------------------------------------------------------------
Update Information:
https://www.mediawiki.org/wiki/Release_notes/1.26#MediaWiki_1.26.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1338413 - mediawiki-1.26.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1338413
[ 2 ] Bug #1338658 - mediawiki: Multiple vulnerabilities fixed in 1.26.3, 1.25.6 and 1.23.14 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1338658
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mediawiki' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-2cc0c081b2
2016-07-02 13:23:23.482175
--------------------------------------------------------------------------------
Name : xcircuit
Product : Fedora 23
Version : 3.9.48
Release : 2.fc23
URL : http://opencircuitdesign.com/xcircuit
Summary : Electronic circuit schematic drawing program
Description :
Xcircuit is a general-purpose drawing program and also a specific-purpose
CAD program for circuit schematic drawing and schematic capture.
--------------------------------------------------------------------------------
Update Information:
xcircuit currently shipped on Fedora was not compiled with Tk correctly. This
rpm should enable Tk support again. New version 3.9.48 is released.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xcircuit' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-73a733f4d9
2016-07-02 13:23:23.482017
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 23
Version : 4.5.7
Release : 202.fc23
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 4.5.7-202 kernel update contains a number of important security fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344721 - CVE-2016-1583 kernel: Stack overflow via ecryptfs and /proc/$pid/environ
https://bugzilla.redhat.com/show_bug.cgi?id=1344721
[ 2 ] Bug #1341716 - CVE-2016-4470 kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path
https://bugzilla.redhat.com/show_bug.cgi?id=1341716
[ 3 ] Bug #1349886 - CVE-2016-4998 kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt
https://bugzilla.redhat.com/show_bug.cgi?id=1349886
[ 4 ] Bug #1350509 - CVE-2016-5829 kernel: Heap buffer overflow in hiddev driver
https://bugzilla.redhat.com/show_bug.cgi?id=1350509
[ 5 ] Bug #1350811 - CVE-2016-5728 kernel: Race condition vulnerability in VOP driver
https://bugzilla.redhat.com/show_bug.cgi?id=1350811
[ 6 ] Bug #1350845 - CVE-2016-1237 kernel: Missing check for permissions when setting ACL
https://bugzilla.redhat.com/show_bug.cgi?id=1350845
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-af1f30412b
2016-07-02 13:22:22.108863
--------------------------------------------------------------------------------
Name : pygtk2
Product : Fedora 22
Version : 2.24.0
Release : 14.fc22
URL : http://www.pygtk.org/
Summary : Python bindings for GTK+
Description :
PyGTK is an extension module for Python that gives you access to the GTK+
widget set. Just about anything you can write in C with GTK+ you can write
in Python with PyGTK (within reason), but with all the benefits of using a
high-level scripting language.
--------------------------------------------------------------------------------
Update Information:
Fix Pango objects leaking
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325709 - Old bug - Pango objects leaking
https://bugzilla.redhat.com/show_bug.cgi?id=1325709
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pygtk2' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-c3bd6a3496
2016-07-02 13:22:22.108816
--------------------------------------------------------------------------------
Name : ntp
Product : Fedora 22
Version : 4.2.6p5
Release : 41.fc22
URL : http://www.ntp.org
Summary : The NTP daemon and utilities
Description :
The Network Time Protocol (NTP) is used to synchronize a computer's
time with another reference time source. This package includes ntpd
(a daemon which continuously adjusts system time) and utilities used
to query and configure the ntpd daemon.
Perl scripts ntp-wait and ntptrace are in the ntp-perl package,
ntpdate is in the ntpdate package and sntp is in the sntp package.
The documentation is in the ntp-doc package.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-8139, CVE-2016-4954, CVE-2016-4955, CVE-2016-4956
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300654 - CVE-2015-8139 ntp: ntpq and ntpdc disclose origin timestamp to unauthenticated clients
https://bugzilla.redhat.com/show_bug.cgi?id=1300654
[ 2 ] Bug #1302225 - CVE-2016-4954 ntp: partial processing of spoofed packets
https://bugzilla.redhat.com/show_bug.cgi?id=1302225
[ 3 ] Bug #1340858 - CVE-2016-4955 ntp: autokey association reset
https://bugzilla.redhat.com/show_bug.cgi?id=1340858
[ 4 ] Bug #1340860 - CVE-2016-4956 ntp: broadcast interleave (incomplete fix for CVE-2016-1548)
https://bugzilla.redhat.com/show_bug.cgi?id=1340860
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ntp' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-03be061176
2016-07-02 13:22:22.108748
--------------------------------------------------------------------------------
Name : dcraw
Product : Fedora 22
Version : 9.27.0
Release : 1.fc22
URL : http://cybercom.net/~dcoffin/dcraw
Summary : Tool for decoding raw image data from digital cameras
Description :
This package contains dcraw, a command line tool to decode raw image data
downloaded from digital cameras.
--------------------------------------------------------------------------------
Update Information:
This update contains a new upstream bugfix and enhancement release. It contains
updated color matrices and adds support for the ACES colorspace, as well as
improving device support: * Blackmagic URSA * Canon EOS 750D, EOS 760D, EOS M,
EOS 80D, IXUS 160 and sRAW/mRAW for EOS 5DS R * Fuji X-E2, X-E2S and X-Pro2 *
Nokia N9 * Photron BC2-HD
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update dcraw' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-25ff545639
2016-07-02 13:22:22.108687
--------------------------------------------------------------------------------
Name : Field3D
Product : Fedora 22
Version : 1.7.2
Release : 1.fc22
URL : https://sites.google.com/site/field3d/
Summary : Library for storing voxel data
Description :
Field3D is an open source library for storing voxel data. It provides C++
classes that handle in-memory storage and a file format based on HDF5 that
allows the C++ objects to be written to and read from disk.
--------------------------------------------------------------------------------
Update Information:
Minor update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347967 - Field3D-v1.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1347967
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update Field3D' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-94747bc6c3
2016-07-02 13:22:22.108627
--------------------------------------------------------------------------------
Name : strongswan
Product : Fedora 22
Version : 5.4.0
Release : 2.fc22
URL : http://www.strongswan.org/
Summary : An OpenSource IPsec-based VPN and TNC solution
Description :
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key
exchange protocols in conjunction with the native NETKEY IPsec stack of the
Linux kernel.
--------------------------------------------------------------------------------
Update Information:
Enhancement update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1298230 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1298230
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update strongswan' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-ea3002b577
2016-07-02 13:22:22.108573
--------------------------------------------------------------------------------
Name : qemu
Product : Fedora 22
Version : 2.3.1
Release : 16.fc22
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:
* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.
As QEMU requires no host kernel patches to run, it is safe and easy to use.
--------------------------------------------------------------------------------
Update Information:
* CVE-2016-4002: net: buffer overflow in MIPSnet (bz #1326083) * CVE-2016-4952
scsi: pvscsi: out-of-bounds access issue * CVE-2016-5106: scsi: megasas: out-of-
bounds write (bz #1339581) * CVE-2016-5105: scsi: megasas: stack information
leakage (bz #1339585) * CVE-2016-5107: scsi: megasas: out-of-bounds read (bz
#1339573) * CVE-2016-4454: display: vmsvga: out-of-bounds read (bz #1340740) *
CVE-2016-4453: display: vmsvga: infinite loop (bz #1340744) * CVE-2016-5238:
scsi: esp: OOB write (bz #1341932) * CVE-2016-5338: scsi: esp: OOB r/w access
(bz #1343325) * CVE-2016-5337: scsi: megasas: information leakage (bz #1343910)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326082 - CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator
https://bugzilla.redhat.com/show_bug.cgi?id=1326082
[ 2 ] Bug #1334384 - CVE-2016-4952 Qemu: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines
https://bugzilla.redhat.com/show_bug.cgi?id=1334384
[ 3 ] Bug #1339578 - CVE-2016-5106 Qemu: scsi: megasas: out-of-bounds write while setting controller properties
https://bugzilla.redhat.com/show_bug.cgi?id=1339578
[ 4 ] Bug #1339583 - CVE-2016-5105 Qemu: scsi: megasas: stack information leakage while reading configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1339583
[ 5 ] Bug #1336461 - CVE-2016-5107 Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function
https://bugzilla.redhat.com/show_bug.cgi?id=1336461
[ 6 ] Bug #1336429 - CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine
https://bugzilla.redhat.com/show_bug.cgi?id=1336429
[ 7 ] Bug #1336650 - CVE-2016-4453 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine
https://bugzilla.redhat.com/show_bug.cgi?id=1336650
[ 8 ] Bug #1341931 - CVE-2016-5238 Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd
https://bugzilla.redhat.com/show_bug.cgi?id=1341931
[ 9 ] Bug #1343323 - CVE-2016-5338 Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO
https://bugzilla.redhat.com/show_bug.cgi?id=1343323
[ 10 ] Bug #1343909 - CVE-2016-5337 Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info
https://bugzilla.redhat.com/show_bug.cgi?id=1343909
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qemu' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b25f815538
2016-07-02 13:22:22.108508
--------------------------------------------------------------------------------
Name : fusioninventory-agent
Product : Fedora 22
Version : 2.3.18
Release : 2.fc22
URL : http://fusioninventory.org/
Summary : FusionInventory agent
Description :
FusionInventory Agent is an application designed to help a network
or system administrator to keep track of the hardware and software
configurations of computers that are installed on the network.
This agent can send information about the computer to a OCS Inventory NG
or GLPI server with the FusionInventory for GLPI plugin.
You can add additional packages for optional tasks:
* fusioninventory-agent-task-network
Network Discovery and Inventory support
* fusioninventory-agent-inventory
Local inventory support for FusionInventory
* fusioninventory-agent-task-deploy
Software deployment support
* fusioninventory-agent-task-esx
vCenter/ESX/ESXi remote inventory
* fusioninventory-agent-task-collect
Custom information retrieval support
* fusioninventory-agent-task-wakeonlan
not included due to a licensing issue for perl-Net-Write
Edit the /etc/sysconfig/fusioninventory-agent file for service configuration.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300870 - fusioninventory-agent-2.3.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1300870
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fusioninventory-agent' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------