Fedora 25 Update: blueman-2.0.4-4.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-f00c1f5bba
2016-09-28 13:09:29.208284
--------------------------------------------------------------------------------
Name : blueman
Product : Fedora 25
Version : 2.0.4
Release : 4.fc25
URL : https://github.com/blueman-project/blueman
Summary : GTK+ Bluetooth Manager
Description :
Blueman is a tool to use Bluetooth devices. It is designed to provide simple,
yet effective means for controlling BlueZ API and simplifying bluetooth tasks
such as:
- Connecting to 3G/EDGE/GPRS via dial-up
- Connecting to/Creating bluetooth networks
- Connecting to input devices
- Connecting to audio devices
- Sending/Receiving files via OBEX
- Pairing
--------------------------------------------------------------------------------
Update Information:
Fix obexd dependencies (#1377640)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1377640 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1377640
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update blueman' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 25 Update: python-blivet-2.1.5-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-a8a52958b8
2016-09-28 13:09:29.208168
--------------------------------------------------------------------------------
Name : python-blivet
Product : Fedora 25
Version : 2.1.5
Release : 1.fc25
URL : http://fedoraproject.org/wiki/blivet
Summary : A python module for system storage configuration
Description :
The python-blivet package is a python module for examining and modifying
storage configuration.
--------------------------------------------------------------------------------
Update Information:
Move parted changes to after format destroy. (#1378162) (dlehman)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378162 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1378162
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-blivet' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 25 Update: desktop-backgrounds-25.0.0-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-01b667a139
2016-09-28 13:09:29.207803
--------------------------------------------------------------------------------
Name : desktop-backgrounds
Product : Fedora 25
Version : 25.0.0
Release : 1.fc25
URL : None
Summary : Desktop backgrounds
Description :
The desktop-backgrounds package contains artwork intended to be used as
desktop background image.
--------------------------------------------------------------------------------
Update Information:
This update provides the Fedora 25 f25-backgrounds and desktop-backgrounds
packages, necessary for ensuring Fedora 25 images and installations have the
correct official backgrounds.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379459 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379459
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update desktop-backgrounds' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 25 Update: f25-backgrounds-25.0.0-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-01b667a139
2016-09-28 13:09:29.207803
--------------------------------------------------------------------------------
Name : f25-backgrounds
Product : Fedora 25
Version : 25.0.0
Release : 1.fc25
URL : https://fedoraproject.org/wiki/F25_Artwork
Summary : Fedora 25 default desktop background
Description :
This package contains desktop backgrounds for the Fedora 25 default
theme. Pulls in themes for GNOME, KDE, Mate and Xfce desktops.
--------------------------------------------------------------------------------
Update Information:
This update provides the Fedora 25 f25-backgrounds and desktop-backgrounds
packages, necessary for ensuring Fedora 25 images and installations have the
correct official backgrounds.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379459 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379459
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update f25-backgrounds' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 23 Update: owncloud-client-2.2.2-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-a02cde9f60
2016-09-27 21:44:48.199472
--------------------------------------------------------------------------------
Name : owncloud-client
Product : Fedora 23
Version : 2.2.2
Release : 1.fc23
URL : http://owncloud.org/sync-clients/
Summary : The ownCloud Client
Description :
Owncloud-client enables you to connect to your private ownCloud Server.
With it you can create folders in your home directory, and keep the contents
of those folders synced with your ownCloud server. Simply copy a file into
the directory and the ownCloud Client does the rest.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update owncloud-client' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 23 Update: shinken-2.4.3-2.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-1beef051d8
2016-09-27 21:44:48.199302
--------------------------------------------------------------------------------
Name : shinken
Product : Fedora 23
Version : 2.4.3
Release : 2.fc23
URL : http://www.shinken-monitoring.org
Summary : Python Monitoring tool
Description :
Shinken is a new monitoring tool written in Python.
The main goal of Shinken is to allow users to have a fully flexible
architecture for their monitoring system that can easily scale to large
environments.
Shinken also provide interfaces with NDODB and Merlin database,
Livestatus connector Shinken does not include any human interfaces.
--------------------------------------------------------------------------------
Update Information:
https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_...
s
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update shinken' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 23 Update: RemoteBox-2.2-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-1dec88e232
2016-09-27 21:44:48.199136
--------------------------------------------------------------------------------
Name : RemoteBox
Product : Fedora 23
Version : 2.2
Release : 1.fc23
URL : http://remotebox.knobgoblin.org.uk/
Summary : Open Source VirtualBox Client with Remote Management
Description :
VirtualBox is traditionally considered to be a virtualization solution aimed
at the desktop as opposed to other solutions such as KVM, Xen and VMWare ESX
which are considered more server oriented solutions. While it is certainly
possible to install VirtualBox on a server, it offers few remote management
features beyond using the vboxmanage command line. RemoteBox aims to fill
this gap by providing a graphical VirtualBox client which is able to
communicate with and manage a VirtualBox server installation.
RemoteBox achieves this by using the vboxwebsrv feature of VirtualBox that
allows its API to be accessed using a protocol called SOAP, even across a
network. RemoteBox is very similar in look and feel to the native VirtualBox
interface and allows you to perform most of the same tasks, including
accessing the display of guests ��� completely remotely.
--------------------------------------------------------------------------------
Update Information:
Update to 2.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370811 - RemoteBox-2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370811
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update RemoteBox' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
[SECURITY] Fedora 23 Update: php-5.6.26-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-db71b72137
2016-09-27 21:44:48.198874
--------------------------------------------------------------------------------
Name : php
Product : Fedora 23
Version : 5.6.26
Release : 1.fc23
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
15 Sep 2016 **PHP version 5.6.26** **Core:** * Fixed bug php#72907 (null
pointer deref, segfault in gc_remove_zval_from_buffer (zend_gc.c:260)).
(Laruence) **Dba:** * Fixed bug php#71514 (Bad dba_replace condition because
of wrong API usage). (cmb) * Fixed bug php#70825 (Cannot fetch multiple values
with group in ini file). (cmb) **EXIF:** * Fixed bug php#72926 (Uninitialized
Thumbail Data Leads To Memory Leakage in exif_process_IFD_in_TIFF). (Stas)
**FTP:** * Fixed bug php#70195 (Cannot upload file using ftp_put to FTPES with
require_ssl_reuse). (Benedict Singer) **GD:** * Fixed bug php#66005 (imagecopy
does not support 1bit transparency on truecolor images). (cmb) * Fixed bug
php#72913 (imagecopy() loses single-color transparency on palette images). (cmb)
* Fixed bug php#68716 (possible resource leaks in _php_image_convert()). (cmb)
**Intl:** * Fixed bug php#73007 (add locale length check). (Stas) **JSON:** *
Fixed bug php#72787 (json_decode reads out of bounds). (Jakub Zelenka)
**mbstring:** * Fixed bug php#66797 (mb_substr only takes 32-bit signed
integer). (cmb) * Fixed bug php#72910 (Out of bounds heap read in mbc_to_code()
/ triggered by mb_ereg_match()). (Stas) **MSSQL:** * Fixed bug php#72039 (Use
of uninitialised value on mssql_guid_string). (Kalle) **Mysqlnd:** * Fixed bug
php#72293 (Heap overflow in mysqlnd related to BIT fields). (Stas) **Phar:** *
Fixed bug php#72928 (Out of bound when verify signature of zip phar in
phar_parse_zipfile). (Stas) * Fixed bug php#73035 (Out of bound when verify
signature of tar phar in phar_parse_tarfile). (Stas) **PDO:** * Fixed bug
php#60665 (call to empty() on NULL result using PDO::FETCH_LAZY returns false).
(cmb) **PDO_pgsql:** * Implemented FR php#72633 (Postgres PDO lastInsertId()
should work without specifying a sequence). (Pablo Santiago S��nchez, Matteo) *
Fixed bug php#72759 (Regression in pgo_pgsql). (Anatol) **SPL:** * Fixed bug
php#73029 (Missing type check when unserializing SplArray). (Stas)
**Standard:** * Fixed bug php#72823 (strtr out-of-bound access). (cmb) * Fixed
bug php#72278 (getimagesize returning FALSE on valid jpg). (cmb) * Fixed bug
php#65550 (get_browser() incorrectly parses entries with "+" sign). (cmb) *
Fixed bug php#71882 (Negative ftruncate() on php://memory exhausts memory).
(cmb) * Fixed bug php#73011 (integer overflow in fgets cause heap corruption).
(Stas) * Fixed bug php#73017 (memory corruption in wordwrap function). (Stas) *
Fixed bug php#73045 (integer overflow in fgetcsv caused heap corruption). (Stas)
* Fixed bug php#73052 (Memory Corruption in During Deserialized-object
Destruction) (Stas) **Streams:** * Fixed bug php#72853 (stream_set_blocking
doesn't work). (Laruence) **Wddx:** * Fixed bug php#72860 (wddx_deserialize
use-after-free). (Stas) * Fixed bug php#73065 (Out-Of-Bounds Read in
php_wddx_push_element). (Stas) **XML:** * Fixed bug php#72085 (SEGV on unknown
address zif_xml_parse). (cmb) * Fixed bug php#72927 (integer overflow in
xml_utf8_encode). (Stas)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1377352 - CVE-2016-7418 php: Null pointer dereference in php_wddx_push_element
https://bugzilla.redhat.com/show_bug.cgi?id=1377352
[ 2 ] Bug #1377344 - CVE-2016-7417 php: Missing type check when unserializing SplArray
https://bugzilla.redhat.com/show_bug.cgi?id=1377344
[ 3 ] Bug #1377340 - CVE-2016-7416 php: Stack based buffer overflow in msgfmt_format_message
https://bugzilla.redhat.com/show_bug.cgi?id=1377340
[ 4 ] Bug #1377336 - CVE-2016-7414 php: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile
https://bugzilla.redhat.com/show_bug.cgi?id=1377336
[ 5 ] Bug #1377314 - CVE-2016-7413 php: Use after free in wddx_deserialize
https://bugzilla.redhat.com/show_bug.cgi?id=1377314
[ 6 ] Bug #1377311 - CVE-2016-7412 php: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field
https://bugzilla.redhat.com/show_bug.cgi?id=1377311
[ 7 ] Bug #1377303 - CVE-2016-7411 php: Memory corruption when destructing deserialized object
https://bugzilla.redhat.com/show_bug.cgi?id=1377303
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
[SECURITY] Fedora 23 Update: jansson-2.9-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-cc7f19cb5b
2016-09-27 21:44:48.198692
--------------------------------------------------------------------------------
Name : jansson
Product : Fedora 23
Version : 2.9
Release : 1.fc23
URL : http://www.digip.org/jansson/
Summary : C library for encoding, decoding and manipulating JSON data
Description :
Small library for parsing and writing JSON documents.
--------------------------------------------------------------------------------
Update Information:
Update to Jansson 2.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1332202 - CVE-2016-4425 jansson: stack exhaustion parsing a JSON file [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1332202
[ 2 ] Bug #1332201 - CVE-2016-4425 jansson: stack exhaustion parsing a JSON file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1332201
[ 3 ] Bug #1375710 - Rebase jansson + patch
https://bugzilla.redhat.com/show_bug.cgi?id=1375710
[ 4 ] Bug #1150479 - jansson-2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1150479
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jansson' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months
Fedora 23 Update: libtasn1-4.9-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-924d3acd8a
2016-09-27 21:44:48.197714
--------------------------------------------------------------------------------
Name : libtasn1
Product : Fedora 23
Version : 4.9
Release : 1.fc23
URL : http://www.gnu.org/software/libtasn1/
Summary : The ASN.1 library used in GNUTLS
Description :
A library that provides Abstract Syntax Notation One (ASN.1, as specified
by the X.680 ITU-T recommendation) parsing and structures management, and
Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.
--------------------------------------------------------------------------------
Update Information:
Update to 4.9 (#1360315)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1360315 - libtasn1-4.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1360315
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libtasn1' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 8 months