[SECURITY] Fedora 24 Update: kernel-4.7.2-201.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-2e5ebfed6d
2016-09-02 17:22:54.519821
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 24
Version : 4.7.2
Release : 201.fc24
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The -201 build is an incremental build. it contains several fixes for known
bugzillas and one fix for a known oom regression. ---- This is a rebase to the
4.7.2 kernel. The 4.7.2 update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1362466 - CVE-2016-6480 kernel: scsi: aacraid: double fetch in ioctl_send_fib()
https://bugzilla.redhat.com/show_bug.cgi?id=1362466
[ 2 ] Bug #1367091 - CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue
https://bugzilla.redhat.com/show_bug.cgi?id=1367091
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 24 Update: libinput-1.4.2-2.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-c4c3b886ca
2016-09-02 17:22:54.519764
--------------------------------------------------------------------------------
Name : libinput
Product : Fedora 24
Version : 1.4.2
Release : 2.fc24
URL : http://www.freedesktop.org/wiki/Software/libinput/
Summary : Input device library
Description :
libinput is a library that handles input devices for display servers and other
applications that need to directly deal with input devices.
It provides device detection, device handling, input device event processing
and abstraction so minimize the amount of custom input code the user of
libinput need to provide the common set of functionality that users expect.
--------------------------------------------------------------------------------
Update Information:
Add quirk for the HP 8510w touchpad (#1351285)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351285 - Synaptics TouchPad erroneously shown as supporting two-finger scroll
https://bugzilla.redhat.com/show_bug.cgi?id=1351285
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libinput' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 24 Update: slic3r-1.2.9-8.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-8850c67eb6
2016-09-02 17:22:54.519705
--------------------------------------------------------------------------------
Name : slic3r
Product : Fedora 24
Version : 1.2.9
Release : 8.fc24
URL : http://slic3r.org/
Summary : G-code generator for 3D printers (RepRap, Makerbot, Ultimaker etc.)
Description :
Slic3r is a G-code generator for 3D printers. It's compatible with RepRaps,
Makerbots, Ultimakers and many more machines.
See the project homepage at slic3r.org and the documentation on the Slic3r wiki
for more information.
--------------------------------------------------------------------------------
Update Information:
Fix bug that crashes slic3r when about dialog is opened (#1285807)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285807 - Opening About Slic3r dialog window crashes slic3r
https://bugzilla.redhat.com/show_bug.cgi?id=1285807
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update slic3r' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 24 Update: gpodder-3.9.1-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-81cefdab69
2016-09-02 17:22:54.519575
--------------------------------------------------------------------------------
Name : gpodder
Product : Fedora 24
Version : 3.9.1
Release : 1.fc24
URL : http://gpodder.org
Summary : Podcast receiver/catcher written in Python
Description :
gPodder is a Podcast receiver/catcher written in Python, using GTK.
It manages podcast feeds for you and automatically downloads all
podcasts from as many feeds as you like.
It also optionally supports syncing with ipods.
--------------------------------------------------------------------------------
Update Information:
3.9.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1372109 - gpodder-3.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1372109
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gpodder' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 23 Update: keepalived-1.2.23-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-5fa7285526
2016-09-01 13:34:04.326611
--------------------------------------------------------------------------------
Name : keepalived
Product : Fedora 23
Version : 1.2.23
Release : 1.fc23
URL : http://www.keepalived.org/
Summary : High Availability monitor built upon LVS, VRRP and service pollers
Description :
Keepalived provides simple and robust facilities for load balancing
and high availability to Linux system and Linux based infrastructures.
The load balancing framework relies on well-known and widely used
Linux Virtual Server (IPVS) kernel module providing Layer4 load
balancing. Keepalived implements a set of checkers to dynamically and
adaptively maintain and manage load-balanced server pool according
their health. High availability is achieved by VRRP protocol. VRRP is
a fundamental brick for router failover. In addition, keepalived
implements a set of hooks to the VRRP finite state machine providing
low-level and high-speed protocol interactions. Keepalived frameworks
can be used independently or all together to provide resilient
infrastructures.
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.23
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1354696 - keepalived-1.2.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1354696
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update keepalived' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 23 Update: php-league-flysystem-1.0.27-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-efb94e82f1
2016-09-01 13:34:04.326553
--------------------------------------------------------------------------------
Name : php-league-flysystem
Product : Fedora 23
Version : 1.0.27
Release : 1.fc23
URL : https://github.com/thephpleague/flysystem
Summary : Filesystem abstraction: Many filesystems, one API
Description :
Flysystem is a filesystem abstraction which allows you to easily swap out
a local filesystem for a remote one.
Autoloader: '/usr/share/php/League/Flysystem/autoload.php';
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.27** - 2016-08-10 * [#684] The local adapter now infers the
mimetype based on the extension for empty files. ---- **Version 1.0.26** -
2016-08-03 * [Filesystem] Added an option to disable asserts.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-league-flysystem' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
[SECURITY] Fedora 23 Update: tomcat-8.0.36-2.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-0a4dccdd23
2016-09-01 13:34:04.326474
--------------------------------------------------------------------------------
Name : tomcat
Product : Fedora 23
Version : 8.0.36
Release : 2.fc23
URL : http://tomcat.apache.org/
Summary : Apache Servlet/JSP Engine, RI for Servlet 3.1/JSP 2.3 API
Description :
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.
Tomcat is developed in an open and participatory environment and
released under the Apache Software License version 2.0. Tomcat is intended
to be a collaboration of the best-of-breed developers from around the world.
--------------------------------------------------------------------------------
Update Information:
This updates includes a rebase from tomcat 8.0.32 up to 8.0.36 to resolve: *
rhbz#1349469 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can
result in denial of service and also includes the following bug fixes: *
rhbz#1341850 tomcat-jsvc.service has TOMCAT_USER value hard-coded * rhbz#1341853
rpm -V tomcat fails on /var/log/tomcat/catalina.out * rhbz#1347835 The security
manager doesn't work correctly (JSPs cannot be compiled) * rhbz#1347864 The
systemd service unit does not allow tomcat to shut down gracefully *
rhbz#1357428 Tomcat 8.0.32 breaks deploy for candlepin. * rhbz#1359737 Missing
maven depmap for the following artifacts: org.apache.tomcat:tomcat-websocket,
org.apache.tomcat:tomcat-websocket-api * rhbz#1363884 The tomcat-tool-wrapper
script is broken * rhbz#1364056 The command tomcat-digest doesn't work
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1349468 - CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1349468
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tomcat' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 23 Update: php-theseer-autoload-1.22.0-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-fa8f4cf863
2016-09-01 13:34:04.326403
--------------------------------------------------------------------------------
Name : php-theseer-autoload
Product : Fedora 23
Version : 1.22.0
Release : 1.fc23
URL : https://github.com/theseer/Autoload
Summary : A tool and library to generate autoload code
Description :
The PHP AutoloadBuilder CLI tool phpab is a command line application
to automate the process of generating an autoload require file with
the option of creating static require lists as well as phar archives.
--------------------------------------------------------------------------------
Update Information:
** Release 1.22.0** * Merge PR
[#73](https://github.com/theseer/Autoload/pull/73): no cs/ci dir for static tpl
[Remi] * Merge PR [#74](https://github.com/theseer/Autoload/pull/74): auto add
suffix to (short) template name [Remi]
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-theseer-autoload' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 23 Update: cmake-fedora-2.7.1-1.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b42680dbcf
2016-09-01 13:34:04.326351
--------------------------------------------------------------------------------
Name : cmake-fedora
Product : Fedora 23
Version : 2.7.1
Release : 1.fc23
URL : https://fedorahosted.org/cmake-fedora/
Summary : CMake helper modules for fedora developers
Description :
cmake-fedora consist a set of cmake modules that provides
helper macros and targets for fedora developers.
--------------------------------------------------------------------------------
Update Information:
- Bugs: + cmake-fedora-fedpkg: fix when git change is at staging, but not
committed yet.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1367656 - cmake-fedora-fedpkg: failed when commit is clean
https://bugzilla.redhat.com/show_bug.cgi?id=1367656
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cmake-fedora' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora 23 Update: qgit-2.6-3.fc23
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-1b2898d44a
2016-09-01 13:34:04.326295
--------------------------------------------------------------------------------
Name : qgit
Product : Fedora 23
Version : 2.6
Release : 3.fc23
URL : http://libre.tibirna.org/projects/qgit
Summary : GUI browser for git repositories
Description :
With qgit you are able to browse revisions history, view patch content
and changed files, graphically following different development branches.
--------------------------------------------------------------------------------
Update Information:
Fix handling of unapplied StGit patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1367575 - Unapplied StGit patches don't display correctly in qgit
https://bugzilla.redhat.com/show_bug.cgi?id=1367575
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qgit' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months