Fedora 25 Update: perl-Archive-Extract-0.80-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-969ef7e68f
2017-01-30 21:12:11.410721
--------------------------------------------------------------------------------
Name : perl-Archive-Extract
Product : Fedora 25
Version : 0.80
Release : 1.fc25
URL : http://search.cpan.org/dist/Archive-Extract/
Summary : Generic archive extracting mechanism
Description :
Archive::Extract is a generic archive extraction mechanism. It allows you to
extract any archive file of the type .tar, .tar.gz, .gz, .Z, tar.bz2, .tbz,
.bz2, .zip, .xz,, .txz, .tar.xz, or .lzma without having to worry how it does
so, or use different interfaces for each type by using either perl modules, or
command-line tools on your system.
--------------------------------------------------------------------------------
Update Information:
This release fixes unzip tool detection.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414772 - perl-Archive-Extract-0.80 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1414772
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl-Archive-Extract' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
[SECURITY] Fedora 25 Update: python-crypto-2.6.1-13.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-7c569d396b
2017-01-30 21:12:11.410680
--------------------------------------------------------------------------------
Name : python-crypto
Product : Fedora 25
Version : 2.6.1
Release : 13.fc25
URL : http://www.pycrypto.org/
Summary : Cryptography library for Python
Description :
PyCrypto is a collection of both secure hash functions (such as MD5 and
SHA), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).
--------------------------------------------------------------------------------
Update Information:
A heap-buffer overflow vulnerability was discovered in pycrypto leading to
arbitrary code execution. All users of pycrypto's AES module that allow the mode
of operation to be specified by an attacker, check for ECB explicitly and create
the objects without specifying an IV are vulnerable to this issue. This is
CVE-2013-7459.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409754 - CVE-2013-7459 pycrypto: Heap-buffer overflow in ALGobject structure
https://bugzilla.redhat.com/show_bug.cgi?id=1409754
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-crypto' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 25 Update: uwsgi-2.0.14-6.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-7c8abcd2a6
2017-01-30 21:12:11.410638
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora 25
Version : 2.0.14
Release : 6.fc25
URL : https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
Adding the cheaper_busyness plugin (Jorge Gallegos)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade uwsgi' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 25 Update: python-pyroute2-0.4.10-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-1c078d4da2
2017-01-30 21:12:11.410458
--------------------------------------------------------------------------------
Name : python-pyroute2
Product : Fedora 25
Version : 0.4.10
Release : 1.fc25
URL : https://github.com/svinota/pyroute2
Summary : Pure Python netlink library
Description :
PyRoute2 provides several levels of API to work with Netlink
protocols, such as Generic Netlink, RTNL, TaskStats, NFNetlink,
IPQ.
--------------------------------------------------------------------------------
Update Information:
devlink fd leak fix ---- critical fd leak fix ---- uplift to 0.4.x
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-pyroute2' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
[SECURITY] Fedora 24 Update: firefox-51.0.1-2.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-12c3b2fec3
2017-01-29 18:50:33.473332
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 24
Version : 51.0.1
Release : 2.fc24
URL : https://www.mozilla.org/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Update to Firefox 51.0.1. ---- - new upstream version (51.0.1)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1412971 - Firefox does not send telemetry data
https://bugzilla.redhat.com/show_bug.cgi?id=1412971
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade firefox' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: perl-5.22.3-368.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-61698d771f
2017-01-29 18:50:33.473251
--------------------------------------------------------------------------------
Name : perl
Product : Fedora 24
Version : 5.22.3
Release : 368.fc24
URL : http://www.perl.org/
Summary : Practical Extraction and Report Language
Description :
Perl is a high-level programming language with roots in C, sed, awk and shell
scripting. Perl is good at handling processes and files, and is especially
good at handling text. Perl's hallmarks are practicality and efficiency.
While it is used to do a lot of different things, Perl's most common
applications are system administration utilities and web programming.
Install this package if you want to program in Perl or enable your system to
handle Perl scripts with /usr/bin/perl interpreter.
If your script requires some Perl modules, you can install them with
"perl(MODULE)" where "MODULE" is a name of required module. E.g. install
"perl(Test::More)" to make Test::More Perl module available.
If you need all the Perl modules that come with upstream Perl sources, so
called core modules, install perl-core package.
If you only need perl run-time as a shared library, i.e. Perl interpreter
embedded into another application, the only essential package is perl-libs.
Perl header files can be found in perl-devel package.
Perl utils like "splain" or "perlbug" can be found in perl-utils package.
--------------------------------------------------------------------------------
Update Information:
This release fixes UTF-8 string handling in & operator, recreation of *:: glob,
parsing goto statements in multicalled subroutines, and a heap overlow in
parsing source code with $# variable.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
[SECURITY] Fedora 24 Update: libXpm-3.5.12-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-6d6e2bfd1a
2017-01-29 18:50:33.473159
--------------------------------------------------------------------------------
Name : libXpm
Product : Fedora 24
Version : 3.5.12
Release : 1.fc24
URL : http://www.x.org
Summary : X.Org X11 libXpm runtime library
Description :
X.Org X11 libXpm runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-10164
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1416410 - CVE-2016-10164 libXpm: Out-of-bounds write in XPM extension parsing
https://bugzilla.redhat.com/show_bug.cgi?id=1416410
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade libXpm' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
[SECURITY] Fedora 24 Update: ghostscript-9.20-6.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-5136456ce3
2017-01-29 18:50:33.473064
--------------------------------------------------------------------------------
Name : ghostscript
Product : Fedora 24
Version : 9.20
Release : 6.fc24
URL : http://www.ghostscript.com/
Summary : A PostScript interpreter and renderer
Description :
Ghostscript is a set of software that provides a PostScript
interpreter, a set of C procedures (the Ghostscript library, which
implements the graphics capabilities in the PostScript language) and
an interpreter for Portable Document Format (PDF) files. Ghostscript
translates PostScript code into many common, bitmapped formats, like
those understood by your printer or screen. Ghostscript is normally
used to display PostScript files and to print PostScript files to
non-PostScript printers.
If you need to display PostScript files or print them to
non-PostScript printers, you should install ghostscript. If you
install ghostscript, you also need to install the ghostscript-fonts
package.
--------------------------------------------------------------------------------
Update Information:
This is a security update for these CVEs: *
[CVE-2016-9601](https://bugzilla.redhat.com/show_bug.cgi?id=1410021) - *Heap-
buffer overflow in jbig2_image_new function* This update also solves possible
licensing issues with ghostscritpt's source code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410022 - CVE-2016-9601 ghostscript: Heap-buffer overflow due to Integer overflow in jbig2_image_new function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1410022
[ 2 ] Bug #1404933 - ghostscript and non-free UTF code.
https://bugzilla.redhat.com/show_bug.cgi?id=1404933
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade ghostscript' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: php-phpmd-PHP-PMD-2.6.0-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-80380239a1
2017-01-29 18:50:33.472972
--------------------------------------------------------------------------------
Name : php-phpmd-PHP-PMD
Product : Fedora 24
Version : 2.6.0
Release : 1.fc24
URL : http://phpmd.org/
Summary : PHPMD - PHP Mess Detector
Description :
This is the project site of PHPMD. It is a spin-off project of PHP Depend
and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can
be seen as an user friendly front-end application for the raw metrics
stream measured by PHP Depend.
--------------------------------------------------------------------------------
Update Information:
**phpmd-2.6.0** (2017/01/20) This release incorporates several pending PRs.
Beside that we have rebased PHPMD on PDepend 2.5 which should complete support
for PHP 7 language features. - Fixed #345: Development Code Fragment feature
is not working - Fixed #384: use-statement for functions returns in:
UnexpectedTokenException - Fixed #409: Test for PHPMD or PMD on SuppressWarnings
- Fixed #418: Add missing link to TooManyPublicMethods rule in the rules
document - Fixed #419: Fix a link to github help because the link is broken -
Fixed #426: Enable Windows Update service on AppVeyor - Fixed #429: Added ext-
xml to require in composer.json file - Fixed #433: Mistake in documentation of
CCN - Implemented #379: Code cleaning. - Implemented #412: Add .mailmap file to
fix git shortlog - Implemented #416: Test against lowest possible dependencies
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-phpmd-PHP-PMD' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: php-udan11-sql-parser-3.4.17-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-66ae091005
2017-01-29 18:50:33.472851
--------------------------------------------------------------------------------
Name : php-udan11-sql-parser
Product : Fedora 24
Version : 3.4.17
Release : 1.fc24
URL : https://github.com/phpmyadmin/sql-parser
Summary : A validating SQL lexer and parser with a focus on MySQL dialect
Description :
A validating SQL lexer and parser with a focus on MySQL dialect.
This library was originally developed for phpMyAdmin during
the Google Summer of Code 2015.
Autoloader: /usr/share/php/SqlParser/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.17** - 2017-01-20 * Coding style fixes. * Fixed indentation in
HTML formatting. * Fixed parsing of unterminated variables. * Improved comments
lexing.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-udan11-sql-parser' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months