Fedora EPEL 7 Update: packagedb-cli-2.13-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e6634296b1
2016-05-27 21:18:28.323312
--------------------------------------------------------------------------------
Name : packagedb-cli
Product : Fedora EPEL 7
Version : 2.13
Release : 1.el7
URL : https://fedorahosted.org/packagedb-cli/
Summary : A CLI for pkgdb
Description :
packagedb-cli is a command line interface of the well-known
packagedb of the Fedora project.
It allows you to manage the ACL for your packages as well
as requesting new ACL for new packages.
It also allows you to orphan and/or retire your package(s).
--------------------------------------------------------------------------------
Update Information:
- Update to 2.13 - Fix UnicodeDecode error with bug.summary - Check if there is
a pattern before checking what is in it - Auto approve branch requested by
package admins (Till Maas) - Generalize __get_namespace to allow checking for
other arguments - Allow bzurl to be more flexible (Ralph Bean) - Do not retry
calls to pkgdb so that 500 errors are returned entirely (Ralph Bean) - Start the
unretire action for pkgdb-admin (Till Maas) - If we get an invalid monitoring
status, use the default when processing a request
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update packagedb-cli' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
[SECURITY] Fedora EPEL 5 Update: openssl101e-1.0.1e-8.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-92e8b90065
2016-05-27 21:18:30.046117
--------------------------------------------------------------------------------
Name : openssl101e
Product : Fedora EPEL 5
Version : 1.0.1e
Release : 8.el5
URL : http://www.openssl.org/
Summary : A general purpose cryptography library with TLS implementation
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.
--------------------------------------------------------------------------------
Update Information:
OpenSSL ======= Security Fixes -------------- * A flaw was found in the way
OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw
to create a specially crafted certificate which, when verified or re-encoded by
OpenSSL, could cause it to crash, or execute arbitrary code using the
permissions of the user running an application compiled against the OpenSSL
library. (CVE-2016-2108) * Two integer overflow flaws, leading to buffer
overflows, were found in the way the EVP_EncodeUpdate() and EVP_EncryptUpdate()
functions of OpenSSL parsed very large amounts of input data. A remote attacker
could use these flaws to crash an application using OpenSSL or, possibly,
execute arbitrary code with the permissions of the user running that
application. (CVE-2016-2105, CVE-2016-2106) * It was discovered that OpenSSL
leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted
records when the connection used the AES CBC cipher suite and the server
supported AES-NI. A remote attacker could possibly use this flaw to retrieve
plain text from encrypted packets by using a TLS/SSL or DTLS server as a padding
oracle. (CVE-2016-2107) * Several flaws were found in the way BIO_*printf
functions were implemented in OpenSSL. Applications which passed large amounts
of untrusted data through these functions could crash or potentially execute
code with the permissions of the user running such an application.
(CVE-2016-0799, CVE-2016-2842) * A denial of service flaw was found in the way
OpenSSL parsed certain ASN.1-encoded data from BIO (OpenSSL's I/O abstraction)
inputs. An application using OpenSSL that accepts untrusted ASN.1 BIO input
could be forced to allocate an excessive amount of data. (CVE-2016-2109) Bug
Fixes --------- * Previously, the ciphers(1) manual page did not describe the
following Elliptic Curve Cryptography (ECC) cipher suite groups: Elliptic Curve
Diffie���Hellman (ECDH) and Elliptic Curve Digital Signature Algorithm (ECDSA), or
TLS version 1.2 (TLSv1.2) specific features. This update adds the missing
description of the ECDH and ECDSA cipher groups and TLSv1.2 features to
ciphers(1), and the documentation is now complete. (BZ#1119191) * The server-
side renegotiation support did previously not work as expected under certain
circumstances. A PostgreSQL failure of database dumps through TLS connection
could occur when the size of the dumped data was larger than the value defined
in the ssl_renegotiation_limit setting. The regression that caused this bug has
been fixed, and the PostgreSQL database dumps through TLS connection no longer
fail in the described situation. (BZ#1234487) Enhancement ----------- * This
update adds the "-keytab" option to the "openssl s_server" command and the
"-krb5svc" option to the "openssl s_server" and "openssl s_client" commands. The
"-keytab" option allows the user to specify a custom keytab location; if the
user does not add "-keytab", the openssl utility assumes the default keytab
location. The "-krb5svc" option enables selecting a service other than the
"host" service; this allows unprivileged users without keys to the host
principal to use "openssl s_server" and "open s_client" with Kerberos.
(BZ#961965)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312219 - CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions
https://bugzilla.redhat.com/show_bug.cgi?id=1312219
[ 2 ] Bug #1331536 - CVE-2016-2106 openssl: EVP_EncryptUpdate overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1331536
[ 3 ] Bug #1331441 - CVE-2016-2105 openssl: EVP_EncodeUpdate overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1331441
[ 4 ] Bug #1331426 - CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check
https://bugzilla.redhat.com/show_bug.cgi?id=1331426
[ 5 ] Bug #1331402 - CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder
https://bugzilla.redhat.com/show_bug.cgi?id=1331402
[ 6 ] Bug #1330101 - CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data
https://bugzilla.redhat.com/show_bug.cgi?id=1330101
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openssl101e' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora EPEL 7 Update: nudoku-0.2.4-2.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-8fd2586ddd
2016-05-26 17:30:52.269737
--------------------------------------------------------------------------------
Name : nudoku
Product : Fedora EPEL 7
Version : 0.2.4
Release : 2.el7
URL : https://github.com/jubalh/nudoku
Summary : Ncurses based Sudoku game
Description :
nudoku is a ncurses based Sudoku game.
--------------------------------------------------------------------------------
Update Information:
Add nudoku to repositories
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1315486 - Review Request: nudoku - Ncurses based sudoku game
https://bugzilla.redhat.com/show_bug.cgi?id=1315486
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nudoku' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora EPEL 7 Update: kde-plasma-redshift-1.0-2.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-5b073cdf47
2016-05-26 17:30:52.269676
--------------------------------------------------------------------------------
Name : kde-plasma-redshift
Product : Fedora EPEL 7
Version : 1.0
Release : 2.el7
URL : http://simgunz.org/projects/redshift-plasmoid
Summary : Plasmoid for redshift
Description :
Redshift plasmoid provides a configuration interface and allows to start/stop
redshift daemon either manually or automatically based on the current activity.
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update kde-plasma-redshift' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
[SECURITY] Fedora EPEL 7 Update: openvpn-2.3.11-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-dda6ebcd02
2016-05-26 17:30:52.269614
--------------------------------------------------------------------------------
Name : openvpn
Product : Fedora EPEL 7
Version : 2.3.11
Release : 1.el7
URL : http://openvpn.net/
Summary : A full-featured SSL VPN solution
Description :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port. It can use the Marcus Franz Xaver Johannes Oberhumer's LZO library
for compression.
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1334729 - openvpn-2.3.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1334729
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openvpn' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora EPEL 7 Update: mingw-filesystem-101-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-e593ecef49
2016-05-26 17:30:52.269550
--------------------------------------------------------------------------------
Name : mingw-filesystem
Product : Fedora EPEL 7
Version : 101
Release : 1.el7
URL : http://fedoraproject.org/wiki/MinGW
Summary : MinGW cross compiler base filesystem and environment
Description :
This package contains the base filesystem layout, RPM macros and
environment for all Fedora MinGW packages.
This environment is maintained by the Fedora MinGW SIG at:
http://fedoraproject.org/wiki/SIGs/MinGW
--------------------------------------------------------------------------------
Update Information:
* Update config.{guess,sub} in %mingw_configure (#1288256) * Regenerated list of
default win32 DLL's
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288256 - %mingw_configure should update config.{guess,sub}
https://bugzilla.redhat.com/show_bug.cgi?id=1288256
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-filesystem' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
[SECURITY] Fedora EPEL 7 Update: mingw-openssl-1.0.2h-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-fb5b01d185
2016-05-26 17:30:52.269483
--------------------------------------------------------------------------------
Name : mingw-openssl
Product : Fedora EPEL 7
Version : 1.0.2h
Release : 1.el7
URL : http://www.openssl.org/
Summary : MinGW port of the OpenSSL toolkit
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
This package contains Windows (MinGW) libraries and development tools.
--------------------------------------------------------------------------------
Update Information:
Update to latest openssl which fixes various CVE's
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1332591 - CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 mingw-openssl: various flaws [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1332591
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-openssl' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora EPEL 7 Update: mingw-harfbuzz-1.2.7-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-a8e97bcb30
2016-05-26 17:30:52.269424
--------------------------------------------------------------------------------
Name : mingw-harfbuzz
Product : Fedora EPEL 7
Version : 1.2.7
Release : 1.el7
URL : http://www.harfbuzz.org
Summary : MinGW Windows Harfbuzz library
Description :
HarfBuzz is an implementation of the OpenType Layout engine.
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.7 which is needed by Qt 5.6.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-harfbuzz' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora EPEL 7 Update: mingw-qt5-qtactiveqt-5.6.0-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-d932a27a31
2016-05-26 17:30:52.269359
--------------------------------------------------------------------------------
Name : mingw-qt5-qtactiveqt
Product : Fedora EPEL 7
Version : 5.6.0
Release : 1.el7
URL : http://qt.io/
Summary : Qt5 for Windows - QtActiveQt component
Description :
This package contains the Qt software toolkit for developing
cross-platform applications.
This is the Windows version of Qt, for use in conjunction with the
Fedora Windows cross-compiler.
--------------------------------------------------------------------------------
Update Information:
Update to Qt 5.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301577 - mingw-qt5 lupdate: Missing dependency on libQt5QmlDevTools.so.5
https://bugzilla.redhat.com/show_bug.cgi?id=1301577
[ 2 ] Bug #1288928 - epel7 mingw-qt5-qtsystems fails to rebuild
https://bugzilla.redhat.com/show_bug.cgi?id=1288928
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-qt5-qtactiveqt' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months
Fedora EPEL 7 Update: mingw-qt5-qtwebsockets-5.6.0-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-d932a27a31
2016-05-26 17:30:52.269359
--------------------------------------------------------------------------------
Name : mingw-qt5-qtwebsockets
Product : Fedora EPEL 7
Version : 5.6.0
Release : 1.el7
URL : http://www.qtsoftware.com/
Summary : Qt5 for Windows - QtWebsockets component
Description :
This package contains the Qt software toolkit for developing
cross-platform applications.
This is the Windows version of Qt, for use in conjunction with the
Fedora Windows cross-compiler.
--------------------------------------------------------------------------------
Update Information:
Update to Qt 5.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301577 - mingw-qt5 lupdate: Missing dependency on libQt5QmlDevTools.so.5
https://bugzilla.redhat.com/show_bug.cgi?id=1301577
[ 2 ] Bug #1288928 - epel7 mingw-qt5-qtsystems fails to rebuild
https://bugzilla.redhat.com/show_bug.cgi?id=1288928
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mingw-qt5-qtwebsockets' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 11 months