[SECURITY] Fedora 25 Update: springframework-3.2.18-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-f341d71730
2017-01-01 18:36:12.605457
--------------------------------------------------------------------------------
Name : springframework
Product : Fedora 25
Version : 3.2.18
Release : 1.fc25
URL : http://projects.spring.io/spring-framework/
Summary : Spring Java Application Framework
Description :
Spring is a layered Java/J2EE application framework, based on code published in
Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002).
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.18.RELEASE. Resolves: CVE-2016-9878 (rhbz#1408164,1408165)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408164 - CVE-2016-9878 Spring Framework: Directory Traversal in the Spring Framework ResourceServlet
https://bugzilla.redhat.com/show_bug.cgi?id=1408164
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade springframework' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 25 Update: mingw-libwebp-0.5.2-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-469b8a7e43
2017-01-01 18:36:12.605309
--------------------------------------------------------------------------------
Name : mingw-libwebp
Product : Fedora 25
Version : 0.5.2
Release : 1.fc25
URL : http://webmproject.org
Summary : MinGW compilation of Library and tools for the WebP format
Description :
WebP is an image format that does lossy compression of digital
photographic images. WebP consists of a codec based on VP8, and a
container based on RIFF. Webmasters, web developers and browser
developers can use WebP to compress, archive and distribute digital
images more efficiently.
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.2, see
https://chromium.googlesource.com/webm/libwebp/+/master/NEWS for details.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade mingw-libwebp' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 25 Update: tinycompress-1.1.3-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-f6711c6f84
2017-01-01 18:36:12.605165
--------------------------------------------------------------------------------
Name : tinycompress
Product : Fedora 25
Version : 1.1.3
Release : 1.fc25
URL : http://alsa-project.org/
Summary : A library for compress audio offload in alsa
Description :
tinycompress is a library for compress audio offload in alsa
--------------------------------------------------------------------------------
Update Information:
1.1.3 release
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade tinycompress' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 25 Update: xorg-x11-drv-geode-2.11.19-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-ad074211ae
2017-01-01 18:36:12.605027
--------------------------------------------------------------------------------
Name : xorg-x11-drv-geode
Product : Fedora 25
Version : 2.11.19
Release : 1.fc25
URL : http://www.x.org/wiki/AMDGeodeDriver
Summary : Xorg X11 AMD Geode video driver
Description :
X.Org X11 AMD Geode video driver.
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404062 - xorg-x11-drv-geode-2.11.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1404062
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade xorg-x11-drv-geode' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora 25 Update: mingw-openjpeg2-2.1.2-3.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-89ee54c661
2017-01-01 18:36:12.604755
--------------------------------------------------------------------------------
Name : mingw-openjpeg2
Product : Fedora 25
Version : 2.1.2
Release : 3.fc25
URL : https://github.com/uclouvain/openjpeg
Summary : MinGW Windows openjpeg2 library
Description :
MinGW Windows openjpeg2 library.
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2016-9580 and CVE-2016-9581. ---- This update adds a
patch to fix CVE-2016-9573 and CVE-2016-9572.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405128 - CVE-2016-9580 openjpeg2: Integer overflow in tiftoimage causes heap buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1405128
[ 2 ] Bug #1405135 - CVE-2016-9581 openjpeg2: Infinite loop in tiftoimage resulting into heap buffer overflow in convert_32s_C1P1
https://bugzilla.redhat.com/show_bug.cgi?id=1405135
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade mingw-openjpeg2' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 25 Update: suricata-3.1.3-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-306434e9eb
2017-01-01 18:36:12.604532
--------------------------------------------------------------------------------
Name : suricata
Product : Fedora 25
Version : 3.1.3
Release : 1.fc25
URL : http://suricata-ids.org/
Summary : Intrusion Detection System
Description :
The Suricata Engine is an Open Source Next Generation Intrusion
Detection and Prevention Engine. This engine is not intended to
just replace or emulate the existing tools in the industry, but
will bring new ideas and technologies to the field. This new Engine
supports Multi-threading, Automatic Protocol Detection (IP, TCP,
UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP
Matching, and GeoIP identification.
--------------------------------------------------------------------------------
Update Information:
This release improves DNS logging accuracy. Other than that it is mostly a
collection of smaller fixes.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade suricata' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months