epel-package-announce October 2017

epel-package-announce@lists.fedoraproject.org

1 participants
244 discussions

[SECURITY] Fedora EPEL 7 Update: chromium-61.0.3163.100-1.el7
by updates＠fedoraproject.org 10 Oct '17

10 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-9179bc1cf5 2017-10-10 19:22:44.151861 -------------------------------------------------------------------------------- Name : chromium Product : Fedora EPEL 7 Version : 61.0.3163.100 Release : 1.el7 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to 61.0.3163.100. Fixes issue where images were not loading on RHEL 7. Security fix for CVE-2017-5111, CVE-2017-5112, CVE-2017-5113, CVE-2017-5114, CVE-2017-5115, CVE-2017-5116, CVE-2017-5117, CVE-2017-5118, CVE-2017-5119, CVE-2017-5120, CVE-2017-5121, CVE-2017-5122 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1488782 - CVE-2017-5120 chromium-browser: potential https downgrade during redirect navigation https://bugzilla.redhat.com/show_bug.cgi?id=1488782 [ 2 ] Bug #1488781 - CVE-2017-5119 chromium-browser: use of uninitialized value in skia https://bugzilla.redhat.com/show_bug.cgi?id=1488781 [ 3 ] Bug #1488779 - CVE-2017-5118 chromium-browser: bypass of content security policy in blink https://bugzilla.redhat.com/show_bug.cgi?id=1488779 [ 4 ] Bug #1488778 - CVE-2017-5117 chromium-browser: use of uninitialized value in skia https://bugzilla.redhat.com/show_bug.cgi?id=1488778 [ 5 ] Bug #1488777 - CVE-2017-5116 chromium-browser: type confusion in v8 https://bugzilla.redhat.com/show_bug.cgi?id=1488777 [ 6 ] Bug #1488776 - CVE-2017-5115 chromium-browser: type confusion in v8 https://bugzilla.redhat.com/show_bug.cgi?id=1488776 [ 7 ] Bug #1488775 - CVE-2017-5114 chromium-browser: memory lifecycle issue in pdfium https://bugzilla.redhat.com/show_bug.cgi?id=1488775 [ 8 ] Bug #1488774 - CVE-2017-5113 chromium-browser: heap buffer overflow in skia https://bugzilla.redhat.com/show_bug.cgi?id=1488774 [ 9 ] Bug #1488773 - CVE-2017-5112 chromium-browser: heap buffer overflow in webgl https://bugzilla.redhat.com/show_bug.cgi?id=1488773 [ 10 ] Bug #1488772 - CVE-2017-5111 chromium-browser: use after free in pdfium https://bugzilla.redhat.com/show_bug.cgi?id=1488772 [ 11 ] Bug #1494392 - CVE-2017-5122 chromium-browser: out-of-bounds access in v8 https://bugzilla.redhat.com/show_bug.cgi?id=1494392 [ 12 ] Bug #1494391 - CVE-2017-5121 chromium-browser: out-of-bounds access in v8 https://bugzilla.redhat.com/show_bug.cgi?id=1494391 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update chromium' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: ansible-lint-3.4.15-1.el7
by updates＠fedoraproject.org 10 Oct '17

10 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-7588b1d6c5 2017-10-10 19:22:44.151825 -------------------------------------------------------------------------------- Name : ansible-lint Product : Fedora EPEL 7 Version : 3.4.15 Release : 1.el7 URL : https://github.com/willthames/ansible-lint Summary : Best practices checker for Ansible Description : Checks playbooks for practices and behavior that could potentially be improved -------------------------------------------------------------------------------- Update Information: Update to 3.4.15 version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1494183 - not compatible with ansible 2.4 https://bugzilla.redhat.com/show_bug.cgi?id=1494183 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ansible-lint' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-russross-blackfriday-1.5-1.el7
by updates＠fedoraproject.org 10 Oct '17

10 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-7ea6dde7a4 2017-10-10 19:22:44.151785 -------------------------------------------------------------------------------- Name : golang-github-russross-blackfriday Product : Fedora EPEL 7 Version : 1.5 Release : 1.el7 URL : https://github.com/russross/blackfriday Summary : Markdown processor implemented in Go Description : Markdown processor implemented in Go -------------------------------------------------------------------------------- Update Information: Update to v1.5 ---- Bump to upstream 5f33e7b7878355cd2b7e6b8eefc48a5472c69f70 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1222338 - Tracker for golang-github-russross-blackfriday https://bugzilla.redhat.com/show_bug.cgi?id=1222338 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-russross-blackfriday' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: fedfind-3.6.2-1.el7
by updates＠fedoraproject.org 10 Oct '17

10 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-e89a91ba69 2017-10-10 19:22:44.151595 -------------------------------------------------------------------------------- Name : fedfind Product : Fedora EPEL 7 Version : 3.6.2 Release : 1.el7 URL : https://pagure.io/fedora-qa/fedfind Summary : Fedora compose and image finder Description : Fedora Finder finds Fedora. For now, that means it finds Fedora images - for stable releases, milestone pre-releases, candidate composes, and nightly composes. The fedfind package provides a simple CLI for showing image URLs. -------------------------------------------------------------------------------- Update Information: This update fixes [PDC](https://pdc.fedoraproject.org/) queries to work correctly again. fedfind has always formed such queries using URLs without trailing slashes, and this must have worked at some point, or none of the functions that rely on PDC queries ever would have worked. However, current PDC [seems not to handle API queries without trailing slashes properly at all](https://github.com/product-definition-center/product-definition- center/issues/467), just returning a 404 error for an API endpoint URL that would be valid with a `/` character added. So, this new fedfind version ensures PDC queries use URLs with a trailing `/`. This should resolve [issue #9](https://pagure.io/fedora-qa/fedfind/issue/9), and any other issue caused by PDC queries not working correctly. One practical consequence was that the metadata for composes produced by Pungi 4 but which had their metadata stripped on release to the mirror system (e.g. Fedora 24, 25 and 26 stable releases) was not being retrieved from PDC and modified (as was the optimal path in recent fedfind releases), but was being fully synthesized by fedfind, which results in much less data. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fedfind' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: python-falcon-1.3.0-1.el7
by updates＠fedoraproject.org 09 Oct '17

09 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-dcd307e2b4 2017-10-09 13:07:47.972492 -------------------------------------------------------------------------------- Name : python-falcon Product : Fedora EPEL 7 Version : 1.3.0 Release : 1.el7 URL : https://falconframework.org Summary : An unladen web framework for building APIs and app backends Description : Falcon is a high-performance Python framework for building cloud APIs. It encourages the REST architectural style, and tries to do as little as possible while remaining highly effective. -------------------------------------------------------------------------------- Update Information: - Latest upstream - Enable python34 EPEL subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #1480025 - python-falcon-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1480025 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-falcon' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: libbson-1.3.5-4.el7
by updates＠fedoraproject.org 09 Oct '17

09 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-e3436f7a95 2017-10-09 13:07:47.972320 -------------------------------------------------------------------------------- Name : libbson Product : Fedora EPEL 7 Version : 1.3.5 Release : 4.el7 URL : https://github.com/mongodb/libbson Summary : Building, parsing, and iterating BSON documents Description : This is a library providing useful routines related to building, parsing, and iterating BSON documents <http://bsonspec.org/>. -------------------------------------------------------------------------------- Update Information: This release fixes CVE-2017-14227 vulnerability, a crash when parsing an empty code string of a codewscope type. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1494401 - CVE-2017-14227 libbson: Heap based buffer over read in the bson_utf8_validate function https://bugzilla.redhat.com/show_bug.cgi?id=1494401 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update libbson' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: php-SymfonyCmfRouting-1.4.1-1.el7
by updates＠fedoraproject.org 08 Oct '17

08 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-2ae2b8fd19 2017-10-08 23:54:55.048932 -------------------------------------------------------------------------------- Name : php-SymfonyCmfRouting Product : Fedora EPEL 7 Version : 1.4.1 Release : 1.el7 URL : http://symfony.com/doc/master/cmf/book/routing.html Summary : Extends the Symfony2 routing component for dynamic routes and chaining Description : The Symfony CMF Routing component extends the Symfony2 core routing component. It provides: * A ChainRouter to run several routers in parallel * A DynamicRouter that can load routes from any database and can generate additional information in the route match Even though it has Symfony in its name, the Routing component does not need the full Symfony2 Framework and can be used in standalone projects. Autoloader: /usr/share/php/Symfony/Cmf/Component/Routing/autoload.php -------------------------------------------------------------------------------- Update Information: ## 1.4.1 * Fix locale matching in candidates -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-SymfonyCmfRouting' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: php-symfony-psr-http-message-bridge-1.0.0-3.el7
by updates＠fedoraproject.org 08 Oct '17

08 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-8f41aee8f8 2017-10-08 23:54:55.048883 -------------------------------------------------------------------------------- Name : php-symfony-psr-http-message-bridge Product : Fedora EPEL 7 Version : 1.0.0 Release : 3.el7 URL : https://github.com/symfony/psr-http-message-bridge Summary : Symfony PSR HTTP message bridge Description : Provides integration for PSR7. Autoloader: /usr/share/php/Symfony/Bridge/PsrHttpMessage/autoload.php -------------------------------------------------------------------------------- Update Information: RPM only release - Allow Symfony 3 - Modify tests - Apply patch to fix test suite with !el6 and zendframework/zend-diactoros -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-symfony-psr-http-message-bridge' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: php-symfony-security-acl-2.8.0-4.el7
by updates＠fedoraproject.org 08 Oct '17

08 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-afa02aa335 2017-10-08 23:54:55.048837 -------------------------------------------------------------------------------- Name : php-symfony-security-acl Product : Fedora EPEL 7 Version : 2.8.0 Release : 4.el7 URL : https://github.com/symfony/security-acl Summary : Symfony Security Component - ACL (Access Control List) Description : Symfony Security Component - ACL (Access Control List). Autoloader: /usr/share/php/Symfony/Component/Security/Acl/autoload.php -------------------------------------------------------------------------------- Update Information: RPM only release - Add max versions to BuildRequires - Switch autoloader to fedora/autoloader - Remove Conflicts for Suggests - Test with SCLs if available -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-symfony-security-acl' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: icemon-3.1.0-5.el7
by updates＠fedoraproject.org 08 Oct '17

08 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-9884c72a89 2017-10-08 23:54:55.048785 -------------------------------------------------------------------------------- Name : icemon Product : Fedora EPEL 7 Version : 3.1.0 Release : 5.el7 URL : http://kfunk.org/tag/icemon/ Summary : Icecream GUI monitor Description : A GUI monitor for Icecream, a distributed compiler system -------------------------------------------------------------------------------- Update Information: New package for epel7 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update icemon' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
...
12
13
14
15
16
17
18
...
25
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce October 2017