[SECURITY] Fedora 25 Update: wget-1.18-3.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-22f1a8404e
2017-06-02 17:35:06.904003
--------------------------------------------------------------------------------
Name : wget
Product : Fedora 25
Version : 1.18
Release : 3.fc25
URL : http://www.gnu.org/software/wget/
Summary : A utility for retrieving files using the HTTP or FTP protocols
Description :
GNU Wget is a file retrieval utility which can use either the HTTP or
FTP protocols. Wget features include the ability to work in the
background while you are logged out, recursive retrieval of
directories, file name wildcard matching, remote file timestamp
storage and comparison, use of Rest with FTP servers and Range with
HTTP servers to retrieve files over slow or unstable connections,
support for Proxy servers, and configurability.
--------------------------------------------------------------------------------
Update Information:
Fixed CVE-2017-6508: CRLF injection in the url_parse function in url.c
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429984 - CVE-2017-6508 wget: CRLF injection in the url_parse function in url.c
https://bugzilla.redhat.com/show_bug.cgi?id=1429984
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade wget' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: python-pycurl-7.43.0-6.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-01cceaebe9
2017-06-02 17:35:06.903949
--------------------------------------------------------------------------------
Name : python-pycurl
Product : Fedora 25
Version : 7.43.0
Release : 6.fc25
URL : http://pycurl.sourceforge.net/
Summary : A Python interface to libcurl
Description :
PycURL is a Python interface to libcurl. PycURL can be used to fetch
objects identified by a URL from a Python program, similar to the
urllib Python module. PycURL is mature, very fast, and supports a lot
of features.
--------------------------------------------------------------------------------
Update Information:
- Fix python2 subpackage name
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1456477 - engine-python-sdk4 still fails running until updating libcurl on fedora 25
https://bugzilla.redhat.com/show_bug.cgi?id=1456477
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-pycurl' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: switchboard-plug-notifications-0.1.2-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-be94b18268
2017-06-02 17:35:06.903881
--------------------------------------------------------------------------------
Name : switchboard-plug-notifications
Product : Fedora 25
Version : 0.1.2
Release : 1.fc25
URL : https://github.com/elementary/switchboard-plug-notifications
Summary : Switchboard Notifications plug
Description :
Configure which apps should be allowed to show notifications.
This is a GModule plugin for Switchboard that configures gsettings keys
related to the Notifications plugin for Gala.
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1455376 - switchboard-plug-notifications-0.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1455376
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade switchboard-plug-notifications' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: quodlibet-3.9.0-2.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-0555b17ba9
2017-06-02 17:35:06.903830
--------------------------------------------------------------------------------
Name : quodlibet
Product : Fedora 25
Version : 3.9.0
Release : 2.fc25
URL : https://quodlibet.readthedocs.org/en/latest/
Summary : A music management program
Description :
Quod Libet is a music management program. It provides several different ways
to view your audio library, as well as support for Internet radio and
audio feeds. It has extremely flexible metadata tag editing and searching
capabilities.
Supported file formats include Ogg Vorbis, MP3, FLAC, MOD/XM/IT, Musepack,
Wavpack, and MPEG-4 AAC.
--------------------------------------------------------------------------------
Update Information:
- update to 3.9.0 - http://quodlibet.readthedocs.io/en/latest/changelog.html#if-
you-can-whistle-you-can-do-this-too
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1210333 - quodlibet-3.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1210333
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade quodlibet' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: php-cs-fixer-2.2.4-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-04764590df
2017-06-02 17:35:06.903775
--------------------------------------------------------------------------------
Name : php-cs-fixer
Product : Fedora 25
Version : 2.2.4
Release : 1.fc25
URL : https://github.com/FriendsOfPHP/PHP-CS-Fixer
Summary : A tool to automatically fix PHP code style
Description :
The PHP Coding Standards Fixer tool fixes most issues in your code when you
want to follow the PHP coding standards as defined in the PSR-1 and PSR-2
documents and many more.
If you are already using a linter to identify coding standards problems in
your code, you know that fixing them by hand is tedious, especially on large
projects. This tool does not only detect them, but also fixes them for you.
--------------------------------------------------------------------------------
Update Information:
Changelog for **version 2.2.4** * bug #2682 DoctrineAnnotationIndentationFixer
- fix handling nested annotations (edhgoose, julienfalque) * bug #2700 Fix
Doctrine Annotation end detection (julienfalque) * bug #2715 OrderedImportsFixer
- handle indented groups (pilgerone) * bug #2732 HeaderCommentFixer - fix
handling blank lines (s7b4) * bug #2745 Fix Doctrine Annotation newlines
(julienfalque) * bug #2752 FixCommand - fix typo in warning message (mnapoli) *
bug #2757 GeckoPHPUnit is not dev dependency (keradus) * bug #2759 Update
gitattributes (SpacePossum) * bug #2763 Fix describe command with PSR-0 fixer
(julienfalque) * bug #2768 Tokens::ensureWhitespaceAtIndex - clean up comment
check, add check for T_OPEN (SpacePossum) * bug #2783
Tokens::ensureWhitespaceAtIndex - Fix handling line endings (SpacePossum) *
minor #2663 Use colors for keywords in commands output (julienfalque, keradus) *
minor #2706 Update README (SpacePossum) * minor #2714 README.rst - fix wrong
value in example (mleko) * minor #2721 Update phpstorm article link to a fresh
blog post (valeryan) * minor #2727 PHPUnit - use speedtrap (keradus) * minor
#2728 SelfUpdateCommand - verify that it's possible to replace current file
(keradus) * minor #2729 DescribeCommand - add decorated output test
(julienfalque) * minor #2731 BracesFixer - properly pass config in utest
dataProvider (keradus) * minor #2738 Upgrade tests to use new, namespaced
PHPUnit TestCase class (keradus) * minor #2743 Fixing example and description
for GeneralPhpdocAnnotationRemoveFixer (kubawerlos) * minor #2744
AbstractDoctrineAnnotationFixerTestCase - split fixers test cases (julienfalque)
* minor #2755 Fix compatibility with PHPUnit 5.4.x (keradus) * minor #2758
Readme - improve CI integration guidelines (keradus) * minor #2769 Psr0Fixer -
remove duplicated example (julienfalque) * minor #2775
NoExtraConsecutiveBlankLinesFixer - remove duplicate code sample. (SpacePossum)
* minor #2778 AutoReview - watch that code samples are unique (keradus) * minor
#2787 Add warnings about missing dom ext and require json ext (keradus) * minor
#2792 Use composer-require-checker (keradus) * minor #2796 Update .gitattributes
(SpacePossum) * minor #2800 PhpdocTypesFixerTest - Fix typo in covers annotation
(SpacePossum)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-cs-fixer' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: rakudo-0.2017.04.2-3.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-c193b5345f
2017-06-02 17:35:06.903718
--------------------------------------------------------------------------------
Name : rakudo
Product : Fedora 25
Version : 0.2017.04.2
Release : 3.fc25
URL : http://rakudo.org/
Summary : Perl 6 compiler implementation that runs on MoarVM
Description :
Rakudo Perl 6, or just Rakudo, is an implementation of the
Perl 6 language specification. More information about Perl 6 is available
from <http://perl6.org/>. This package provides a Perl 6 compiler built for
MoarVM virtual machine.
--------------------------------------------------------------------------------
Update Information:
desktop file sources are updated
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade rakudo' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: brotli-0.6.0-4.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-7299929ef6
2017-06-02 17:35:06.903668
--------------------------------------------------------------------------------
Name : brotli
Product : Fedora 25
Version : 0.6.0
Release : 4.fc25
URL : https://github.com/google/brotli
Summary : Lossless compression algorithm
Description :
Brotli is a generic-purpose lossless compression algorithm that compresses
data using a combination of a modern variant of the LZ77 algorithm, Huffman
coding and 2nd order context modeling, with a compression ratio comparable
to the best currently available general-purpose compression methods.
It is similar in speed with deflate but offers more dense compression.
--------------------------------------------------------------------------------
Update Information:
New package Brotli
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448661 - Review Request: brotli - Lossless compression algorithm
https://bugzilla.redhat.com/show_bug.cgi?id=1448661
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade brotli' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: awscli-1.11.90-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-b5739eafc9
2017-06-02 17:35:06.903612
--------------------------------------------------------------------------------
Name : awscli
Product : Fedora 25
Version : 1.11.90
Release : 1.fc25
URL : http://aws.amazon.com/cli
Summary : Universal Command Line Environment for AWS
Description :
This package provides a unified
command line interface to Amazon Web Services.
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435219 - awscli-1.11.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1435219
[ 2 ] Bug #1437278 - python-botocore-1.5.53 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1437278
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade awscli' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: python-botocore-1.5.53-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-b5739eafc9
2017-06-02 17:35:06.903612
--------------------------------------------------------------------------------
Name : python-botocore
Product : Fedora 25
Version : 1.5.53
Release : 1.fc25
URL : https://github.com/boto/botocore
Summary : Low-level, data-driven core of boto 3
Description :
A low-level interface to a growing number of Amazon Web Services. The
botocore package is the foundation for the AWS CLI as well as boto3.
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435219 - awscli-1.11.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1435219
[ 2 ] Bug #1437278 - python-botocore-1.5.53 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1437278
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-botocore' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora 25 Update: jitterentropy-rngd-1.0.6-1.fc25
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-fef102d8c8
2017-06-02 17:35:06.903553
--------------------------------------------------------------------------------
Name : jitterentropy-rngd
Product : Fedora 25
Version : 1.0.6
Release : 1.fc25
URL : http://www.chronox.de/jent.html
Summary : RNGD based on CPU Jitter RNG
Description :
The CPU Jitter Random Number Generator provides a non-physical true
random number generator that works equally in kernel and user land. The
only prerequisite is the availability of a high-resolution timer that
is available in modern CPUs.
Upon starting as a service, it will block until it has written 256 bytes
of entropy (which happens almost immediately)
A whitepaper is available at:
http://www.chronox.de/jent/doc/CPU-Jitter-NPTRNG.pdf
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.6, fixup After target in service file, patches merged upstream
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade jitterentropy-rngd' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months