Fedora 27 Update: mozilla-noscript-10.1.6.5-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-efefaeecab
2018-03-06 17:17:51.854193
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora 27
Version : 10.1.6.5
Release : 1.fc27
URL : http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript Firefox extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
**NOTE:** All packaged Firefox add-ons are affected by Firefox bug
fedora#1508827 . A workaround is provided in the bug report. Please do not give
negative karma just because of that bug. **WebExtension changes:** * Context
menu on web pages to access main UI * Fixed UI regression showing only the two
rightmost components of IPv4 addresses * [XSS] More specific and unobtrusive
handling of window.name sanitization * Fixed "XSS User Choices" not being
included in Export files **Classic version changes:** * Fixed XSS false
positive on some Facebook embeddings (thanks barbaz for reporting) * Fixed edge
case origin checks for WebExtensions embedded in privileged documents * Fixed
DNT support initialization regression (thanks barbaz for reporting) * [XSS]
Fixed false positives on badly encoded URLs (thanks sage11 for reporting) *
Script Surrogates don't affect privileged URLs anymore, unless the
noscript.surrogate.matchPrivileged about:config preference is set to true
(thanks barbaz for RFE) * [e10s] Fixed temporary permissions inter-process sync
issue (thanks to the TorBrowser team for solution)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543851 - mozilla-noscript-10.1.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1543851
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade mozilla-noscript' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora 26 Update: sharutils-4.15.2-6.fc26
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-4e657bf5e3
2018-03-06 17:26:39.510865
--------------------------------------------------------------------------------
Name : sharutils
Product : Fedora 26
Version : 4.15.2
Release : 6.fc26
URL : http://www.gnu.org/software/sharutils/
Summary : The GNU shar utilities for packaging and unpackaging shell archives
Description :
The sharutils package contains the GNU shar utilities, a set of tools for
encoding and decoding packages of files (in binary or text format) in
a special plain text format called shell archives (shar). This format can be
sent through e-mail (which can be problematic for regular binary files). The
shar utility supports a wide range of capabilities (compressing, uuencoding,
splitting long files for multi-part mailings, providing check-sums), which
make it very flexible at creating shar files. After the files have been sent,
the unshar tool scans mail messages looking for shar files. Unshar
automatically strips off mail headers and introductory text and then unpacks
the shar files.
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap buffer overflow when processing a shar archive by
unshar tool if the arhive contains overlong lines.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548018 - sharutils: heap-buffer-overflow in find_archive in unshar.c
https://bugzilla.redhat.com/show_bug.cgi?id=1548018
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade sharutils' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 27 Update: mozilla-lightbeam-2.1.0-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-b9100f34e8
2018-03-06 17:17:51.854171
--------------------------------------------------------------------------------
Name : mozilla-lightbeam
Product : Fedora 27
Version : 2.1.0
Release : 1.fc27
URL : https://www.mozilla.org/lightbeam/
Summary : An add-on for visualizing HTTP requests between websites in real time
Description :
Using interactive visualizations, Lightbeam enables you to see the first
and third party sites you interact with on the Web. As you browse,
Lightbeam reveals the full depth of the Web today, including parts
that are not transparent to the average user. Using three distinct
interactive graphic representations ��� Graph, Clock and
List ��� Lightbeam enables you to examine individual third parties
over time and space, identify where they connect to your online activity
and provides ways for you to engage with this unique view of the Web.
--------------------------------------------------------------------------------
Update Information:
**NOTE:** All packaged Firefox add-ons are affected by Firefox bug
fedora#1508827 . A workaround is provided in the bug report. Please do not give
negative karma just because of that bug. This update brings visualization
performance improvements.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546516 - mozilla-lightbeam-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1546516
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade mozilla-lightbeam' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora 26 Update: quagga-1.2.2-2.fc26
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-b3e985489b
2018-03-06 17:26:39.510841
--------------------------------------------------------------------------------
Name : quagga
Product : Fedora 26
Version : 1.2.2
Release : 2.fc26
URL : http://www.quagga.net
Summary : Routing daemon
Description :
Quagga is free software that operates TCP/IP-based routing protocols. It takes
a multi-server and multi-threaded approach to resolving the current complexity
of the Internet.
Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS (experimental), OSPFv2,
OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP.
Quagga is intended to be used as a Route Server and a Route Reflector. It is
not a toolkit; it provides full routing power under a new architecture.
Quagga by design has a process for each protocol.
Quagga is a fork of GNU Zebra.
--------------------------------------------------------------------------------
Update Information:
Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546008 - CVE-2018-5379 quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1546008
[ 2 ] Bug #1546006 - CVE-2018-5380 quagga: bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1546006
[ 3 ] Bug #1546004 - CVE-2018-5381 quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1546004
[ 4 ] Bug #1546009 - CVE-2018-5378 quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1546009
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade quagga' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 27 Update: lmms-1.1.3-8.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-060a0e9df6
2018-03-06 17:17:51.854150
--------------------------------------------------------------------------------
Name : lmms
Product : Fedora 27
Version : 1.1.3
Release : 8.fc27
URL : https://lmms.io/
Summary : Linux MultiMedia Studio
Description :
LMMS aims to be a free alternative to popular (but commercial and
closed- source) programs like FruityLoops/FL Studio, Cubase and Logic
allowing you to produce music with your computer. This includes
creation of loops, synthesizing and mixing sounds, arranging samples,
having fun with your MIDI-keyboard and much more...
LMMS combines the features of a tracker-/sequencer-program and those
of powerful synthesizers, samplers, effects etc. in a modern,
user-friendly and easy to use graphical user-interface.
Features
* Song-Editor for arranging the song
* creating beats and basslines using the Beat-/Bassline-Editor
* easy-to-use piano-roll for editing patterns and melodies
* instrument- and effect-plugins
* support for hosting VST(i)- and LADSPA-plugins (instruments/effects)
* automation-editor
* MIDI-support
--------------------------------------------------------------------------------
Update Information:
Add patch that should fix linkage of the Vestige module (#1388466).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1388466 - Vestige plugin is not showing up in the instrument plugins list.
https://bugzilla.redhat.com/show_bug.cgi?id=1388466
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade lmms' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: datagrepper-0.9.1-2.fc26
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-80f105a556
2018-03-06 17:26:39.510819
--------------------------------------------------------------------------------
Name : datagrepper
Product : Fedora 26
Version : 0.9.1
Release : 2.fc26
URL : https://github.com/fedora-infra/datagrepper
Summary : A webapp to query fedmsg history
Description :
A webapp to retrieve historical information about messages on the fedmsg
bus. It is a JSON api for the datanommer message store.
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade datagrepper' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 27 Update: perl-Importer-0.025-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-7787adcfb9
2018-03-06 17:17:51.854128
--------------------------------------------------------------------------------
Name : perl-Importer
Product : Fedora 27
Version : 0.025
Release : 1.fc27
URL : http://search.cpan.org/dist/Importer/
Summary : Alternative interface to modules that export symbols
Description :
This Perl module acts as a layer between Exporter and modules which consume
exports. It is feature-compatible with Exporter, plus some much needed
extras. You can use this to import symbols from any exporter that follows
Exporters specification. The exporter modules themselves do not need to use
or inherit from the Exporter module, they just need to set @EXPORT and/or
other variables.
--------------------------------------------------------------------------------
Update Information:
This release corrects a test.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546584 - perl-Importer-0.025 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1546584
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl-Importer' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 27 Update: ccnet-6.1.4-2.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-ca94df292c
2018-03-06 17:17:51.854106
--------------------------------------------------------------------------------
Name : ccnet
Product : Fedora 27
Version : 6.1.4
Release : 2.fc27
URL : https://github.com/haiwen/ccnet
Summary : A framework for writing networked applications in C
Description :
Ccnet is a framework for writing networked applications in C. It provides the
following basic services:
* Peer identification
* Connection Management
* Service invocation
* Message sending
In ccnet network, there are two types of nodes, i.e., client and server.
Server has the following functions:
* User management
* Group management
* Cluster management
--------------------------------------------------------------------------------
Update Information:
Add a require for sqlite: configuration is stored in a sqlite database. Without
sqlite, it cannot work.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546560 - seafile-client needs sqlite
https://bugzilla.redhat.com/show_bug.cgi?id=1546560
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade ccnet' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: paraview-5.4.1-13.fc26
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-5629e2ec4f
2018-03-06 17:26:39.510795
--------------------------------------------------------------------------------
Name : paraview
Product : Fedora 26
Version : 5.4.1
Release : 13.fc26
URL : http://www.paraview.org/
Summary : Parallel visualization application
Description :
ParaView is an open-source, multi-platform data analysis and visualization
application. ParaView users can quickly build visualizations to analyze their
data using qualitative and quantitative techniques. The data exploration can
be done interactively in 3D or programmatically using ParaView���s batch
processing capabilities.
ParaView was developed to analyze extremely large datasets using distributed
memory computing resources. It can be run on supercomputers to analyze
datasets of petascale size as well as on laptops for smaller data.
NOTE: The version in this package has NOT been compiled with MPI support.
Install the paraview-openmpi package to get a version compiled with openmpi.
Install the paraview-mpich package to get a version compiled with mpich.
--------------------------------------------------------------------------------
Update Information:
- Enable VisitBridge support (bz#1546474) - Patched for building VisItBridge
plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546474 - Enable VisIt bridge
https://bugzilla.redhat.com/show_bug.cgi?id=1546474
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade paraview' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: qbittorrent-4.0.4-1.fc26
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-cf943c3e99
2018-03-06 17:26:39.510771
--------------------------------------------------------------------------------
Name : qbittorrent
Product : Fedora 26
Version : 4.0.4
Release : 1.fc26
URL : http://www.qbittorrent.org
Summary : A Bittorrent Client
Description :
A Bittorrent client using rb_libtorrent and a Qt4 Graphical User Interface.
It aims to be as fast as possible and to provide multi-OS, unicode support.
--------------------------------------------------------------------------------
Update Information:
4.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473748 - Qbittorrent 3.3.13 web API does not work with custom clients.
https://bugzilla.redhat.com/show_bug.cgi?id=1473748
[ 2 ] Bug #1546526 - qbittorrent-4.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1546526
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade qbittorrent' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months