epel-package-announce October 2017

epel-package-announce@lists.fedoraproject.org

1 participants
244 discussions

[SECURITY] Fedora EPEL 7 Update: php-horde-Horde-Image-2.5.2-1.el7
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-30a9c74908 2017-10-05 21:00:53.414643 -------------------------------------------------------------------------------- Name : php-horde-Horde-Image Product : Fedora EPEL 7 Version : 2.5.2 Release : 1.el7 URL : http://pear.horde.org Summary : Horde Image API Description : An Image utility API, with backends for: * GD * GIF * PNG * SVG * SWF * ImageMagick convert command line tool * Imagick Extension Optional dependency: php-pecl-imagick -------------------------------------------------------------------------------- Update Information: **Horde_Image 2.5.1** * [mjr] SECURITY: Fix more potential places for command injections. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-horde-Horde-Image' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: libprelude-4.0.0-1.el7
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-226512eef7 2017-10-05 21:00:53.414596 -------------------------------------------------------------------------------- Name : libprelude Product : Fedora EPEL 7 Version : 4.0.0 Release : 1.el7 URL : https://www.prelude-siem.org/ Summary : Secure Connections between all Sensors and the Prelude Manager Description : Libprelude is a collection of generic functions providing communication between all Sensors, like IDS (Intrusion Detection System), and the Prelude Manager. It provides a convenient interface for sending and receiving IDMEF (Information and Event Message Exchange Format) alerts to Prelude Manager with transparent SSL, fail-over and replication support, asynchronous events and timer interfaces, an abstracted configuration API (hooking at the command-line, the configuration line, or wide configuration, available from the Manager), and a generic plugin API. It allows you to easily turn your favorite security program into a Prelude sensor. -------------------------------------------------------------------------------- Update Information: Bump version 4.0.0 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update libprelude' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: batctl-2017.2-1.el7
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-293706db16 2017-10-05 21:00:53.414545 -------------------------------------------------------------------------------- Name : batctl Product : Fedora EPEL 7 Version : 2017.2 Release : 1.el7 URL : http://www.open-mesh.org/ Summary : B.A.T.M.A.N. advanced control and management tool Description : batctl offers a convenient way to configure the batman-adv kernel module as well as displaying debug information such as originator tables, translation tables and the debug log. In combination with a bat-hosts file batctl allows the use of host names instead of MAC addresses. B.A.T.M.A.N. advanced operates on layer 2. Thus all hosts participating in the virtual switched network are transparently connected together for all protocols above layer 2. Therefore the common diagnosis tools do not work as expected. To overcome these problems batctl contains the commands ping, traceroute, tcpdump which provide similar functionality to the normal ping(1), traceroute(1), tcpdump(1) commands, but modified to layer 2 behavior or using the B.A.T.M.A.N. advanced protocol. -------------------------------------------------------------------------------- Update Information: Fix error messages on traceroute send failures -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update batctl' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: drupal7-l10n_update-2.2-1.el7
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-b9a3b1b05c 2017-10-05 21:00:53.414469 -------------------------------------------------------------------------------- Name : drupal7-l10n_update Product : Fedora EPEL 7 Version : 2.2 Release : 1.el7 URL : http://drupal.org/project/l10n_update Summary : Provides automatic downloads and updates for translations Description : Automatically download and update your translations fetching them from localize.drupal.org [1] or any other localization server [2]. This package provides the following Drupal module: * l10n_update [1] http://localize.drupal.org/ [2] http://drupal.org/project/l10n_server -------------------------------------------------------------------------------- Update Information: * [7.x-2.2](https://www.drupal.org/project/l10n_update/releases/7.x-2.2) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492654 - drupal7-l10n_update-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492654 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update drupal7-l10n_update' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: alembic-1.7.3-1.el7
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-250d73884a 2017-10-05 21:00:53.414386 -------------------------------------------------------------------------------- Name : alembic Product : Fedora EPEL 7 Version : 1.7.3 Release : 1.el7 URL : http://alembic.io/ Summary : Open framework for storing and sharing scene data Description : Alembic is an open computer graphics interchange framework. Alembic distills complex, animated scenes into a non-procedural, application-independent set of baked geometric results. This 'distillation' of scenes into baked geometry is exactly analogous to the distillation of lighting and rendering scenes into rendered image data. -------------------------------------------------------------------------------- Update Information: Update to 1.7.3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1473982 - alembic-1.7.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1473982 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update alembic' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: daala-0-8.20170616git7278368.el7
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-db9ddd2afb 2017-10-05 21:00:53.414159 -------------------------------------------------------------------------------- Name : daala Product : Fedora EPEL 7 Version : 0 Release : 8.20170616git7278368.el7 URL : http://xiph.org/daala/ Summary : Daala video compression Description : A new video compression technology. The goal of the project is to provide a video format that's free to implement, use and distribute, and a reference implementation with technical performance superior to H.265. -------------------------------------------------------------------------------- Update Information: Update to the latest snapshot. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update daala' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 6 Update: wordpress-4.8.2-1.el6
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-bfeae1e322 2017-10-05 21:00:54.743556 -------------------------------------------------------------------------------- Name : wordpress Product : Fedora EPEL 6 Version : 4.8.2 Release : 1.el6 URL : http://www.wordpress.org Summary : Blog tool and publishing platform Description : Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress-4.8.2/README.fedora -------------------------------------------------------------------------------- Update Information: Upstream announcement: **WordPress 4.8.2 is now available**. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.8.1 and earlier are affected by these security issues: * $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we��ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Slavco * A cross-site scripting (XSS) vulnerability was discovered in the oEmbed discovery. Reported by xknown of the WordPress Security Team. * A cross-site scripting (XSS) vulnerability was discovered in the visual editor. Reported by Rodolfo Assis (@brutelogic) of Sucuri Security. * A path traversal vulnerability was discovered in the file unzipping code. Reported by Alex Chapman (noxrnet). * A cross-site scripting (XSS) vulnerability was discovered in the plugin editor. Reported by �� (Chen Ruiqi). * An open redirect was discovered on the user and term edit screens. Reported by Yasin Soliman (ysx). * A path traversal vulnerability was discovered in the customizer. Reported by Weston Ruter of the WordPress Security Team. * A cross-site scripting (XSS) vulnerability was discovered in template names. Reported by Luka (sikic). * A cross-site scripting (XSS) vulnerability was discovered in the link modal. Reported by Anas Roubi (qasuar). Thank you to the reporters of these issues for practicing [responsible disclosure](https://make.wordpress.org/core/handbook/testing /reporting-security-vulnerabilities/). In addition to the security issues above, WordPress 4.8.2 contains 6 maintenance fixes to the 4.8 release series. For more information, see the [release notes](https://codex.wordpress.org/Version_4.8.2) or consult the [list of change s](https://core.trac.wordpress.org/query?status=closed&milestone=4.8.2&grou… ponent&col=id&col=summary&col=component&col=status&col=owner&col=type&col=priori ty&col=keywords&order=priority). Thanks to everyone who contributed to 4.8.2. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update wordpress' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 6 Update: php-horde-Horde-Image-2.5.2-1.el6
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-e563119ec9 2017-10-05 21:00:54.743510 -------------------------------------------------------------------------------- Name : php-horde-Horde-Image Product : Fedora EPEL 6 Version : 2.5.2 Release : 1.el6 URL : http://pear.horde.org Summary : Horde Image API Description : An Image utility API, with backends for: * GD * GIF * PNG * SVG * SWF * ImageMagick convert command line tool * Imagick Extension Optional dependency: php-pecl-imagick -------------------------------------------------------------------------------- Update Information: **Horde_Image 2.5.1** * [mjr] SECURITY: Fix more potential places for command injections. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-horde-Horde-Image' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: kmodtool-1-26.el6
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-aa38a067ca 2017-10-05 21:00:54.743460 -------------------------------------------------------------------------------- Name : kmodtool Product : Fedora EPEL 6 Version : 1 Release : 26.el6 URL : http://rpmfusion.org/Packaging/KernelModules/Kmods2 Summary : Tool for building kmod packages Description : This package contains tools and list of recent kernels that get used when building kmod-packages. -------------------------------------------------------------------------------- Update Information: Add conditional fix for (/usr)/sbin/depmod for RHEL/CentOS 6: Without this change, built kmod-<module> package depends on /usr/sbin/depmod, which does not exist on RHEL/CentOS 6 (which only provides /sbin/depmod) instead. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update kmodtool' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: drupal7-l10n_update-2.2-1.el6
by updates＠fedoraproject.org 05 Oct '17

05 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-fe185ccadd 2017-10-05 21:00:54.743361 -------------------------------------------------------------------------------- Name : drupal7-l10n_update Product : Fedora EPEL 6 Version : 2.2 Release : 1.el6 URL : http://drupal.org/project/l10n_update Summary : Provides automatic downloads and updates for translations Description : Automatically download and update your translations fetching them from localize.drupal.org [1] or any other localization server [2]. This package provides the following Drupal module: * l10n_update [1] http://localize.drupal.org/ [2] http://drupal.org/project/l10n_server -------------------------------------------------------------------------------- Update Information: * [7.x-2.2](https://www.drupal.org/project/l10n_update/releases/7.x-2.2) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492654 - drupal7-l10n_update-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492654 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update drupal7-l10n_update' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
...
15
16
17
18
19
20
21
...
25
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce October 2017