[SECURITY] Fedora 24 Update: wordpress-4.7.2-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-338a3f27e5
2017-02-02 16:34:58.790182
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora 24
Version : 4.7.2
Release : 1.fc24
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress/README.fedora
--------------------------------------------------------------------------------
Update Information:
**WordPress 4.7.2 Security Release** WordPress 4.7.2 is now available. This is
a security release for all previous versions and we strongly encourage you to
update your sites immediately. WordPress versions 4.7.1 and earlier are
affected by three security issues: * The user interface for assigning
taxonomy terms in Press This is shown to users who do not have permissions to
use it. Reported by David Herrera of Alley Interactive. * WP_Query is
vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is
not directly vulnerable to this issue, but we���ve added hardening to prevent
plugins and themes from accidentally causing a vulnerability. Reported by Mo
Jangda (batmoo). * A cross-site scripting (XSS) vulnerability was discovered
in the posts list table. Reported by Ian Dunn of the WordPress Security Team.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1417158 - CVE-2017-5610 CVE-2017-5611 CVE-2017-5612 wordpress: Multiple security fixes in 4.7.2
https://bugzilla.redhat.com/show_bug.cgi?id=1417158
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade wordpress' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: qt5ct-0.29-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-384d969051
2017-02-02 16:34:58.790124
--------------------------------------------------------------------------------
Name : qt5ct
Product : Fedora 24
Version : 0.29
Release : 1.fc24
URL : https://sourceforge.net/projects/qt5ct/
Summary : Qt5 Configuration Tool
Description :
qt5ct allows users to configure Qt5 settings (theme, font, icons, etc.) under
DE/WM without Qt integration.
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1416400 - qt5ct-0.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1416400
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade qt5ct' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: python-distro-1.0.2-2.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-1bb302fc08
2017-02-02 16:34:58.790067
--------------------------------------------------------------------------------
Name : python-distro
Product : Fedora 24
Version : 1.0.2
Release : 2.fc24
URL : https://github.com/nir0s/distro
Summary : Linux Distribution - a Linux OS platform information API
Description :
The distro (for: Linux Distribution) package provides information about the
Linux distribution it runs on, such as a reliable machine-readable ID, or
version information.
It is a renewed alternative implementation for Python's original
platform.linux_distribution function, but it also provides much more
functionality. An alternative implementation became necessary because
Python 3.5 deprecated this function, and Python 3.7 is expected to remove it
altogether. Its predecessor function platform.dist was already deprecated since
Python 2.6 and is also expected to be removed in Python 3.7. Still, there are
many cases in which access to that information is needed. See Python issue 1322
for more information.
--------------------------------------------------------------------------------
Update Information:
update LICENSE file and deps.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-distro' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: vdr-epg-daemon-1.1.88-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-6593654365
2017-02-02 16:34:58.790014
--------------------------------------------------------------------------------
Name : vdr-epg-daemon
Product : Fedora 24
Version : 1.1.88
Release : 1.fc24
URL : http://projects.vdr-developer.org/projects/vdr-epg-daemon
Summary : A daemon to download EPG data from internet and manage it in a mysql database
Description :
epgd is part of the double team epgd+epg2vdr to effectively retrieve,
store and import epg data to vdr. It is designed to handle large amount of
data and pictures in a distributed environment with one epg-server and
many possible vdr-clients - therefore it relays on mysql.
Though it is possible to use epgd alone with mysql it only makes sense to
use it as back-end to the vdr-plugin epg2vdr. That being said you need to
install, setup and configure mysql, epgd and epg2vdr in order to get a
working environment.
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.88 ---- Update to 1.1.87 ---- Update to 1.1.85 ---- Update
to 1.1.84 ---- Update to 1.1.81 ---- Update to 1.1.79 ---- Update to
1.1.78 ---- Update to 1.1.75
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade vdr-epg-daemon' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: python-html2text-2016.9.19-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-0dd3963752
2017-02-02 16:34:58.789960
--------------------------------------------------------------------------------
Name : python-html2text
Product : Fedora 24
Version : 2016.9.19
Release : 1.fc24
URL : http://alir3z4.github.io/html2text
Summary : Convert HTML to Markdown-formatted text
Description :
html2text is a Python script that converts a page
of HTML into clean, easy-to-read plain ASCII text. Better yet, that ASCII
also happens to be valid Markdown (a text-to-HTML format).
--------------------------------------------------------------------------------
Update Information:
* Update to latest upstream * Package license and documentation * Package
generated man-pages * Adapt to recent guidelines * Fix other packaging issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1289269 - Failing testsuite with python3 ... perhaps some Unicode problem?
https://bugzilla.redhat.com/show_bug.cgi?id=1289269
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-html2text' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: perl-Astro-SunTime-0.05-2.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-5bfcccedd5
2017-02-02 16:34:58.789905
--------------------------------------------------------------------------------
Name : perl-Astro-SunTime
Product : Fedora 24
Version : 0.05
Release : 2.fc24
URL : http://search.cpan.org/dist/Astro-SunTime/
Summary : Calculates sun rise/set times
Description :
Astro::SunTime Perl module provides a function interface to calculate sun
rise/set times.
--------------------------------------------------------------------------------
Update Information:
This is a new package. perl(Time::ParseDate) was not autodetected and has been
manually added to Requires.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409866 - Review Request: perl-Astro-SunTime - Calculates sun rise/set times
https://bugzilla.redhat.com/show_bug.cgi?id=1409866
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl-Astro-SunTime' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: php-echonest-api-0-0.3.20131228git.662d62a7.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-5a4124a65b
2017-02-02 16:34:58.789851
--------------------------------------------------------------------------------
Name : php-echonest-api
Product : Fedora 24
Version : 0
Release : 0.3.20131228git.662d62a7.fc24
URL : https://github.com/Afterster/php-echonest-api
Summary : PHP classes for the Echo Nest API
Description :
A simple, Object Oriented API wrapper for the EchoNest Api written with PHP5.
This library is modeled after the php-github-api library built by ornicar.
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1411188 - Review Request: php-echonest-api - PHP classes for the Echo Nest API
https://bugzilla.redhat.com/show_bug.cgi?id=1411188
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-echonest-api' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: php-evenement-2.0.0-3.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-62f41a1300
2017-02-02 16:34:58.789789
--------------------------------------------------------------------------------
Name : php-evenement
Product : Fedora 24
Version : 2.0.0
Release : 3.fc24
URL : https://github.com/igorw/evenement
Summary : ��v��nement is a very simple event dispatching library for PHP
Description :
��v��nement is a very simple event dispatching library for PHP.
It has the same design goals as Silex and Pimple, to empower the user
while staying concise and simple.
It is very strongly inspired by the EventEmitter API found in node.js.
Autoloader: /usr/share/php/Evenement/autoload.php
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413339 - Review Request: php-evenement - ��v��nement is a very simple event dispatching library for PHP
https://bugzilla.redhat.com/show_bug.cgi?id=1413339
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-evenement' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: batctl-2016.5-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-b7c24854f7
2017-02-02 16:34:58.789723
--------------------------------------------------------------------------------
Name : batctl
Product : Fedora 24
Version : 2016.5
Release : 1.fc24
URL : http://www.open-mesh.org/
Summary : B.A.T.M.A.N. advanced control and management tool
Description :
batctl offers a convenient way to configure the batman-adv kernel module
as well as displaying debug information such as originator tables,
translation tables and the debug log. In combination with a bat-hosts
file batctl allows the use of host names instead of MAC addresses.
B.A.T.M.A.N. advanced operates on layer 2. Thus all hosts participating
in the virtual switched network are transparently connected together
for all protocols above layer 2. Therefore the common diagnosis tools
do not work as expected. To overcome these problems batctl contains the
commands ping, traceroute, tcpdump which provide similar functionality
to the normal ping(1), traceroute(1), tcpdump(1) commands, but modified
to layer 2 behavior or using the B.A.T.M.A.N. advanced protocol.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade batctl' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months
Fedora 24 Update: gfal2-python-1.8.5-1.fc24
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-8af6f770a5
2017-02-02 16:34:58.789672
--------------------------------------------------------------------------------
Name : gfal2-python
Product : Fedora 24
Version : 1.8.5
Release : 1.fc24
URL : http://dmc.web.cern.ch/
Summary : Python bindings for gfal 2
Description :
Python bindings for gfal2.
GFAL2 offers an a single, simple and portable API
for the file operations in grids and cloud environments.
--------------------------------------------------------------------------------
Update Information:
Update for new upstream release
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade gfal2-python' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 3 months