--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-99fbdc5c34
2016-07-02 13:22:22.108452
--------------------------------------------------------------------------------
Name : php
Product : Fedora 22
Version : 5.6.23
Release : 1.fc22
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
23 Jun 2016, **PHP 5.6.23** **Core:** * Fixed bug php#72275 (Integer Overflow
in json_encode()/json_decode()/json_utf8_to_utf16()). (Stas) * Fixed bug
php#72400 (Integer Overflow in addcslashes/addslashes). (Stas) * Fixed bug
php#72403 (Integer Overflow in Length of String-typed ZVAL). (Stas) **GD:** *
Fixed bug php#72298 (pass2_no_dither out-of-bounds access). (Stas) * Fixed bug
php#72337 (invalid dimensions can lead to crash) (Pierre) * Fixed bug php#72339
(Integer Overflow in _gd2GetHeader() resulting in heap overflow). (Pierre) *
Fixed bug php#72407 (NULL Pointer Dereference at _gdScaleVert). (Stas) * Fixed
bug php#72446 (Integer Overflow in gdImagePaletteToTrueColor() resulting in heap
overflow). (Pierre) **Intl:** * Fixed bug php#70484 (selectordinal doesn't
work with named parameters). (Anatol) **mbstring:** * Fixed bug php#72402
(_php_mb_regex_ereg_replace_exec - double free). (Stas) **mcrypt:** * Fixed
bug php#72455 (Heap Overflow due to integer overflows). (Stas) **Phar:** *
Fixed bug php#72321 (invalid free in phar_extract_file()). (hji at dyntopia dot
com) **SPL:** * Fixed bug php#72262 (int/size_t confusion in
SplFileObject::fread). (Stas) * Fixed bug php#72433 (Use After Free
Vulnerability in PHP's GC algorithm and unserialize). (Dmitry) **OpenSSL:** *
Fixed bug php#72140 (segfault after calling ERR_free_strings()). (Jakub Zelenka)
**WDDX:** * Fixed bug php#72340 (Double Free Courruption in wddx_deserialize).
(Stas)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351175 - CVE-2016-5772 php: Double Free Corruption in wddx_deserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1351175
[ 2 ] Bug #1351173 - CVE-2016-5771 php: Use After Free Vulnerability in PHP's GC algorithm and unserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1351173
[ 3 ] Bug #1351171 - CVE-2016-5770 php: Int/size_t confusion in SplFileObject::fread
https://bugzilla.redhat.com/show_bug.cgi?id=1351171
[ 4 ] Bug #1351168 - CVE-2016-5768 php: Double free in _php_mb_regex_ereg_replace_exec
https://bugzilla.redhat.com/show_bug.cgi?id=1351168
[ 5 ] Bug #1351070 - CVE-2016-5769 php: Integer Overflows in mcrypt_generic() and mdecrypt_generic() resulting in heap overflows
https://bugzilla.redhat.com/show_bug.cgi?id=1351070
[ 6 ] Bug #1351069 - CVE-2016-5767 php: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1351069
[ 7 ] Bug #1351068 - CVE-2016-5766 php: Integer Overflow in _gd2GetHeader() resulting in heap overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1351068
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b08d0b00fc
2016-07-02 13:22:22.108379
--------------------------------------------------------------------------------
Name : php-pecl-zip
Product : Fedora 22
Version : 1.12.5
Release : 2.fc22
URL : http://pecl.php.net/package/zip
Summary : A ZIP archive management extension
Description :
Zip is an extension to create and read zip files.
--------------------------------------------------------------------------------
Update Information:
* Fix bug php#71561 (NULL pointer dereference in Zip::ExtractTo) * Fix bug
php#72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm
and unserialize
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351179 - CVE-2016-5773 php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1351179
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pecl-zip' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-91a5e6fa09
2016-07-02 13:22:22.108319
--------------------------------------------------------------------------------
Name : perl-autobox-Junctions
Product : Fedora 22
Version : 0.002
Release : 1.fc22
URL : http://search.cpan.org/dist/autobox-Junctions/
Summary : Autoboxified junction-style operators
Description :
This is a simple autoboxifying wrapper around Syntax::Keyword::Junction Perl
module, that provides array and array references with the functions provided
by that package as methods for arrays: any, all, one, and none.
--------------------------------------------------------------------------------
Update Information:
This release updates documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1349202 - perl-autobox-Junctions-0.002 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1349202
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-autobox-Junctions' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-a642f471eb
2016-07-02 13:22:22.108256
--------------------------------------------------------------------------------
Name : cairo-dock-plug-ins
Product : Fedora 22
Version : 3.4.1
Release : 8.fc22
URL : http://glx-dock.org/
Summary : Plug-ins files for Cairo-Dock
Description :
This package is a meta package for Cairo-Dock plugins.
--------------------------------------------------------------------------------
Update Information:
Currently weather forcast plugin does not work becase the URL where the
information is retrieved changed. This new rpm applies the upstream patch to
make weather plugin work again.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cairo-dock-plug-ins' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b16f00c952
2016-07-02 13:22:22.108194
--------------------------------------------------------------------------------
Name : arc-gui-clients
Product : Fedora 22
Version : 0.4.6
Release : 9.fc22
URL : http://sourceforge.net/projects/arc-gui-clients/
Summary : ARC Graphical Clients
Description :
Provides graphical clients to the NorduGrid ARC middleware.
--------------------------------------------------------------------------------
Update Information:
Adapt to ARC 5.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update arc-gui-clients' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-83691badff
2016-07-02 13:22:22.108076
--------------------------------------------------------------------------------
Name : fox
Product : Fedora 22
Version : 1.6.51
Release : 1.fc22
URL : http://www.fox-toolkit.org/
Summary : C++ based Toolkit for developing Graphical User Interfaces
Description :
FOX is a C++ based Toolkit for developing Graphical User Interfaces
easily and effectively. It offers a wide, and growing, collection of
Controls, and provides state of the art facilities such as drag and drop,
selection, as well as OpenGL widgets for 3D graphical manipulation.
FOX also implements icons, images, and user-convenience features such as
status line help, and tooltips. Tooltips may even be used for 3D
objects.
--------------------------------------------------------------------------------
Update Information:
New version 1.6.51 is released.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fox' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-7d69fa003b
2016-07-02 13:28:24.867369
--------------------------------------------------------------------------------
Name : hexer
Product : Fedora 24
Version : 0.2.3
Release : 1.fc24
URL : http://devel.ringlet.net/editors/hexer/
Summary : Interactive binary editor
Description :
Hexer is an interactive binary editor (also known as a hex-editor)
with a Vi-like interface. Its most important features are multiple buffers,
multiple-level undo, command-line editing with completion, and binary regular
expressions.
--------------------------------------------------------------------------------
Update Information:
initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213065 - Review Request: hexer - ncurses-based binary editor
https://bugzilla.redhat.com/show_bug.cgi?id=1213065
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update hexer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-02def8af6f
2016-07-02 13:28:24.867268
--------------------------------------------------------------------------------
Name : devilspie2
Product : Fedora 24
Version : 0.41
Release : 1.fc24
URL : http://www.gusnan.se/devilspie2
Summary : A window-matching utility
Description :
Devilspie2 is a window matching utility, allowing the user to perform scripted
actions on windows as they are created. For example you can script a terminal
program to always be positioned at a specific screen position, or position a
window on a specific workspace. It is based on the program Devilspie by Ross
Burton.
--------------------------------------------------------------------------------
Update Information:
New upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1321558 - devilspie2-0,41 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1321558
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update devilspie2' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-d91df226cd
2016-07-02 13:28:24.867182
--------------------------------------------------------------------------------
Name : rubygem-ox
Product : Fedora 24
Version : 2.4.1
Release : 2.fc24
URL : http://www.ohler.com/ox
Summary : Fast XML parser and object serializer
Description :
A fast XML parser and object serializer that uses only standard C lib.
Optimized XML (Ox), as the name implies was written to provide speed optimized
XML handling. It was designed to be an alternative to Nokogiri and other Ruby
XML parsers for generic XML parsing and as an alternative to Marshal for
Object serialization.
--------------------------------------------------------------------------------
Update Information:
New upstream release with new features. Added missing rubygem(bigdecimal)
dependency.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327571 - rubygem-ox-2.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1327571
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-ox' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-7cd281f6f2
2016-07-02 13:28:24.867123
--------------------------------------------------------------------------------
Name : atomic
Product : Fedora 24
Version : 1.10.5
Release : 1.gitce09e40.fc24
URL : https://github.com/projectatomic/atomic
Summary : Tool for managing ProjectAtomic systems and containers
Description :
The goal of Atomic is to provide a high level, coherent entrypoint to the
system, and fill in gaps.
For Docker, atomic can make it easier to interact with special kinds of
containers, such as super-privileged debugging tools and the like.
The atomic host subcommand wraps rpm-ostree, currently just providing a
friendlier name, but in the future Atomic may provide more unified
management.
--------------------------------------------------------------------------------
Update Information:
bump atomic v1.10.5 ---- build atomic 1.10 commit 1d6aecf ---- build atomic
1.9 commit#72cdbef
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update atomic' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------