Fedora 24 Update: python-rhsm-1.19.0-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-8d88a8f4a1
2017-01-30 21:12:12.103199
--------------------------------------------------------------------------------
Name : python-rhsm
Product : Fedora 24
Version : 1.19.0
Release : 1.fc24
URL : http://www.candlepinproject.org
Summary : A Python library to communicate with a Red Hat Unified Entitlement Platform
Description :
A small library for communicating with the REST interface of a Red Hat Unified
Entitlement Platform. This interface is used for the management of system
entitlements, certificates, and access to content.
--------------------------------------------------------------------------------
Update Information:
The newest version of subscription-manager and python-rhsm feature: * Numerous
bug fixes * DBus interfaces for interacting with subscription-manager
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-rhsm' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: subscription-manager-1.19.1-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-8d88a8f4a1
2017-01-30 21:12:12.103199
--------------------------------------------------------------------------------
Name : subscription-manager
Product : Fedora 24
Version : 1.19.1
Release : 1.fc24
URL : http://www.candlepinproject.org/
Summary : Tools and libraries for subscription and repository management
Description :
The Subscription Manager package provides programs and libraries to allow users
to manage subscriptions and yum repositories from the Red Hat entitlement
platform.
--------------------------------------------------------------------------------
Update Information:
The newest version of subscription-manager and python-rhsm feature: * Numerous
bug fixes * DBus interfaces for interacting with subscription-manager
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade subscription-manager' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: procServ-2.7.0-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-7763cdf3a8
2017-01-30 21:12:12.103161
--------------------------------------------------------------------------------
Name : procServ
Product : Fedora 24
Version : 2.7.0
Release : 1.fc24
URL : https://github.com/ralphlange/procServ
Summary : Process server with telnet console and log access
Description :
procServ is a wrapper that starts an arbitrary command as a child process in
the background, connecting its standard input and output to a Unix domain
socket or a TCP port for telnet access.
It supports logging, child restart (manual or automatic on exit), and more.
procServ does not have the rich feature set of the screen utility,
but is intended to provide running a command in a system service style,
in a small, robust way.
Handling multiple users, authorization, authentication, central logging
is done best on a higher level, using a package like conserver.
For security reasons, procServ only accepts connections from localhost.
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade procServ' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: datovka-4.7.1-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-e90c4457d1
2017-01-30 21:12:12.103124
--------------------------------------------------------------------------------
Name : datovka
Product : Fedora 24
Version : 4.7.1
Release : 1.fc24
URL : https://labs.nic.cz/cs/nova-datovka.html
Summary : A free graphical interface for Czech Databox (Datov�� schr��nky)
Description :
GUI application allowing access to Czech Databox - an electronic communication
interface endorsed by the Czech government.
--------------------------------------------------------------------------------
Update Information:
This is new version of datovka, for details see changelog:
https://gitlab.labs.nic.cz/labs/qdatovka/blob/master/ChangeLog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414773 - datovka-4.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1414773
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade datovka' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora 24 Update: irssi-0.8.21-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-d2e7217e2a
2017-01-30 21:12:12.103085
--------------------------------------------------------------------------------
Name : irssi
Product : Fedora 24
Version : 0.8.21
Release : 1.fc24
URL : http://irssi.org/
Summary : Modular text mode IRC client with Perl scripting
Description :
Irssi is a modular IRC client with Perl scripting. Only text-mode
frontend is currently supported. The GTK/GNOME frontend is no longer
being maintained.
--------------------------------------------------------------------------------
Update Information:
This is an security update fixing CVE-2017-5193, CVE-2017-5194, CVE-2017-5195,
CVE-2017-5196, CVE-2017-5356.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410821 - CVE-2017-5193 irssi: Null pointer dereference in the nickcmp function
https://bugzilla.redhat.com/show_bug.cgi?id=1410821
[ 2 ] Bug #1410824 - CVE-2017-5194 irssi: Null pointer dereference in the nickcmp function
https://bugzilla.redhat.com/show_bug.cgi?id=1410824
[ 3 ] Bug #1410825 - CVE-2017-5195 irssi: Out of bounds read in certain incomplete control codes
https://bugzilla.redhat.com/show_bug.cgi?id=1410825
[ 4 ] Bug #1410827 - CVE-2017-5196 irssi: Out of bounds read in certain incomplete character sequences
https://bugzilla.redhat.com/show_bug.cgi?id=1410827
[ 5 ] Bug #1413890 - CVE-2017-5356 irssi: Out-of-bounds read in format string
https://bugzilla.redhat.com/show_bug.cgi?id=1413890
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade irssi' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: openhpi-3.6.1-3.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-9a1c64624c
2017-01-30 21:12:12.103043
--------------------------------------------------------------------------------
Name : openhpi
Product : Fedora 24
Version : 3.6.1
Release : 3.fc24
URL : http://www.openhpi.org
Summary : Hardware Platform Interface library and tools
Description :
OpenHPI is an open source project created with the intent of providing an
implementation of the SA Forum's Hardware Platform Interface (HPI). HPI
provides an abstracted interface to managing computer hardware, typically for
chassis and rack based servers. HPI includes resource modeling; access to and
control over sensor, control, watchdog, and inventory data associated with
resources; abstracted System Event Log interfaces; hardware events and alerts;
and a managed hot swap interface.
OpenHPI provides a modular mechanism for adding new hardware and device support
easily. Many plug-ins exist in the OpenHPI source tree to provide access to
various types of hardware. This includes, but is not limited to, IPMI based
servers, Blade Center, and machines which export data via sysfs.
--------------------------------------------------------------------------------
Update Information:
Fix #1414802 - double free or corruption on sysfs plugin.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414802 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1414802
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade openhpi' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: perl-Archive-Extract-0.80-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-d631f3ccd2
2017-01-30 21:12:12.103006
--------------------------------------------------------------------------------
Name : perl-Archive-Extract
Product : Fedora 24
Version : 0.80
Release : 1.fc24
URL : http://search.cpan.org/dist/Archive-Extract/
Summary : Generic archive extracting mechanism
Description :
Archive::Extract is a generic archive extraction mechanism. It allows you to
extract any archive file of the type .tar, .tar.gz, .gz, .Z, tar.bz2, .tbz,
.bz2, .zip, .xz,, .txz, .tar.xz, or .lzma without having to worry how it does
so, or use different interfaces for each type by using either perl modules, or
command-line tools on your system.
--------------------------------------------------------------------------------
Update Information:
This release fixes unzip tool detection.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414772 - perl-Archive-Extract-0.80 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1414772
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl-Archive-Extract' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
[SECURITY] Fedora 24 Update: python-crypto-2.6.1-13.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-08207fe48b
2017-01-30 21:12:12.102967
--------------------------------------------------------------------------------
Name : python-crypto
Product : Fedora 24
Version : 2.6.1
Release : 13.fc24
URL : http://www.pycrypto.org/
Summary : Cryptography library for Python
Description :
PyCrypto is a collection of both secure hash functions (such as MD5 and
SHA), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).
--------------------------------------------------------------------------------
Update Information:
A heap-buffer overflow vulnerability was discovered in pycrypto leading to
arbitrary code execution. All users of pycrypto's AES module that allow the mode
of operation to be specified by an attacker, check for ECB explicitly and create
the objects without specifying an IV are vulnerable to this issue. This is
CVE-2013-7459.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409754 - CVE-2013-7459 pycrypto: Heap-buffer overflow in ALGobject structure
https://bugzilla.redhat.com/show_bug.cgi?id=1409754
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-crypto' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: uwsgi-2.0.14-6.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-a57d33965a
2017-01-30 21:12:12.102927
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora 24
Version : 2.0.14
Release : 6.fc24
URL : https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
Adding the cheaper_busyness plugin (Jorge Gallegos)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade uwsgi' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months
Fedora 24 Update: python-pyroute2-0.4.10-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-32c2ab8f8e
2017-01-30 21:12:12.102799
--------------------------------------------------------------------------------
Name : python-pyroute2
Product : Fedora 24
Version : 0.4.10
Release : 1.fc24
URL : https://github.com/svinota/pyroute2
Summary : Pure Python netlink library
Description :
PyRoute2 provides several levels of API to work with Netlink
protocols, such as Generic Netlink, RTNL, TaskStats, NFNetlink,
IPQ.
--------------------------------------------------------------------------------
Update Information:
devlink fd leak fix ---- critical fd leak fix ---- uplift to 0.4.x ----
separate Python2 and Python3 packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309389 - python-pyroute2: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1309389
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-pyroute2' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 2 months