epel-package-announce October 2017

epel-package-announce@lists.fedoraproject.org

1 participants
244 discussions

[SECURITY] Fedora EPEL 7 Update: botan-1.10.17-1.el7
by updates＠fedoraproject.org 26 Oct '17

26 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-17b77b3268 2017-10-25 21:32:51.499479 -------------------------------------------------------------------------------- Name : botan Product : Fedora EPEL 7 Version : 1.10.17 Release : 1.el7 URL : http://botan.randombit.net/ Summary : Crypto library written in C++ Description : Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \#10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API reference, tutorial, and examples may help impart the flavor of the library. -------------------------------------------------------------------------------- Update Information: #### Version 1.10.17, 2017-10-02 #### * Address a side channel affecting modular exponentiation. An attacker capable of a local or cross-VM cache analysis attack may be able to recover bits of secret exponents as used in RSA, DH, etc. (CVE-2017-14737) * Workaround a miscompilation bug in GCC 7 on x86-32 affecting GOST-34.11 hash function. [GH #1192](https://github.com/randombit/botan/issues/1192) [GH #1148](https://github.com/randombit/botan/issues/1148) [GH #882](https://github.com/randombit/botan/issues/882) * Add SecureVector::data() function which returns the start of the buffer. This makes it slightly simpler to support both 1.10 and 2.x APIs in the same codebase. * When compiled by a C++11 (or later) compiler, a template typedef of SecureVector, secure_vector, is added. In 2.x this class is a std::vector with a custom allocator, so has a somewhat different interface than SecureVector in 1.10. But this makes it slightly simpler to support both 1.10 and 2.x APIs in the same codebase. * Fix a bug that prevented `configure.py` from running under Python3 * Botan 1.10.x does not support the OpenSSL 1.1 API. Now the build will #error if OpenSSL 1.1 is detected. Avoid ��with-openssl if compiling against 1.1 or later. [GH #753](https://github.com/randombit/botan/issues/753) * Import patches from Debian adding basic support for building on aarch64, ppc64le, or1k, and mipsn32 platforms. #### Version 1.10.16, 2017-04-04 #### * Fix a bug in X509 DN string comparisons that could result in out of bound reads. This could result in information leakage, denial of service, or potentially incorrect certificate validation results. (CVE-2017-2801) * Avoid throwing during a destructor since this is undefined in C++11 and rarely a good idea. [GH #930](https://github.com/randombit/botan/issues/930) #### Version 1.10.15, 2017-01-12 #### * Fix a bug causing modular exponentiations done modulo even numbers to almost always be incorrect, unless the values were small. This bug is not known to affect any cryptographic operation in Botan. [GH #754](https://github.com/randombit/botan/issues/754) * Avoid use of C++11 std::to_string in some code added in 1.10.14 [GH #747](https://github.com/randombit/botan/issues/747) [GH #834](https://github.com/randombit/botan/issues/834) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1441126 - CVE-2017-2801 botan: Incorrect comparison in X.509 DN strings https://bugzilla.redhat.com/show_bug.cgi?id=1441126 [ 2 ] Bug #1496368 - CVE-2017-14737 botan: cryptographic cache-based side channel in the RSA implementation https://bugzilla.redhat.com/show_bug.cgi?id=1496368 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update botan' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: purple-libsteam-1.6.1-17.20170929gitab6d446.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-08e561ae8d 2017-10-23 16:38:54.846041 -------------------------------------------------------------------------------- Name : purple-libsteam Product : Fedora EPEL 7 Version : 1.6.1 Release : 17.20170929gitab6d446.el7 URL : https://github.com/EionRobb/pidgin-opensteamworks Summary : Steam plugin for Pidgin/Adium/libpurple Description : Adds support for Steam to Pidgin, Adium, Finch and other libpurple based messengers. -------------------------------------------------------------------------------- Update Information: Upstream changelog: * Added option to redeem Steam game keys to the accounts menu. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update purple-libsteam' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-michaelklishin-rabbit-hole-1.4.0-1.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-c6537f8fae 2017-10-23 16:38:54.845993 -------------------------------------------------------------------------------- Name : golang-github-michaelklishin-rabbit-hole Product : Fedora EPEL 7 Version : 1.4.0 Release : 1.el7 URL : https://github.com/michaelklishin/rabbit-hole Summary : RabbitMQ HTTP API client in Go Description : RabbitMQ HTTP API client in Go -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430150 - Review Request: golang-github-michaelklishin-rabbit-hole - RabbitMQ HTTP API client in Go https://bugzilla.redhat.com/show_bug.cgi?id=1430150 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-michaelklishin-rabbit-hole' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-duosecurity-duo_api_golang-0-0.1.20160627git2b2d787.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-a42c4b5cd2 2017-10-23 16:38:54.845949 -------------------------------------------------------------------------------- Name : golang-github-duosecurity-duo_api_golang Product : Fedora EPEL 7 Version : 0 Release : 0.1.20160627git2b2d787.el7 URL : https://github.com/duosecurity/duo_api_golang Summary : Duo Security API for strong two-factor authentication Description : The Duo Auth API provides a low-level API for adding strong two-factor authentication to applications that cannot directly display rich web content. -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1297528 - Review Request: golang-github-duosecurity-duo_api_golang - Duo Security API for strong two-factor authentication https://bugzilla.redhat.com/show_bug.cgi?id=1297528 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-duosecurity-duo_api_golang' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-fatih-structs-0-0.1.20170612git7e5a8ee.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-2bfd0e9762 2017-10-23 16:38:54.845903 -------------------------------------------------------------------------------- Name : golang-github-fatih-structs Product : Fedora EPEL 7 Version : 0 Release : 0.1.20170612git7e5a8ee.el7 URL : https://github.com/fatih/structs Summary : Utilities for Go (golang) structs Description : Structs contains various utilities to work with Go (Golang) structs,` based on primitives from the reflect package. -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1297529 - Review Request: golang-github-fatih-structs - Utilities for Go structs https://bugzilla.redhat.com/show_bug.cgi?id=1297529 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-fatih-structs' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-streadway-amqp-0-0.1.20170926gitcefed15.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-1d01377910 2017-10-23 16:38:54.845856 -------------------------------------------------------------------------------- Name : golang-github-streadway-amqp Product : Fedora EPEL 7 Version : 0 Release : 0.1.20170926gitcefed15.el7 URL : https://github.com/streadway/amqp Summary : Go client for AMQP 0.9.1 with RabbitMQ extensions Description : Go client for AMQP 0.9.1 with RabbitMQ extensions -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430149 - Review Request: golang-github-streadway-amqp - Go client for AMQP 0.9.1 with RabbitMQ extensions https://bugzilla.redhat.com/show_bug.cgi?id=1430149 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-streadway-amqp' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-sstarcher-go-okta-0-0.1.20170901gite1cd21c.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-5787625148 2017-10-23 16:38:54.845811 -------------------------------------------------------------------------------- Name : golang-github-sstarcher-go-okta Product : Fedora EPEL 7 Version : 0 Release : 0.1.20170901gite1cd21c.el7 URL : https://github.com/sstarcher/go-okta Summary : Go (golang) Okta client Description : Go (golang) Okta client -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430153 - Review Request: golang-github-sstarcher-go-okta - Go (golang) Okta client https://bugzilla.redhat.com/show_bug.cgi?id=1430153 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-sstarcher-go-okta' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-sethgrid-pester-0-0.2.20170919git0af5bab.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-820db4cc71 2017-10-23 16:38:54.845764 -------------------------------------------------------------------------------- Name : golang-github-sethgrid-pester Product : Fedora EPEL 7 Version : 0 Release : 0.2.20170919git0af5bab.el7 URL : https://github.com/sethgrid/pester Summary : Go (golang) http calls with retries and backoff Description : Go (golang) http calls with retries and backoff -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430152 - Review Request: golang-github-sethgrid-pester - Go (golang) http calls with retries and backoff https://bugzilla.redhat.com/show_bug.cgi?id=1430152 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-sethgrid-pester' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-keybase-go-crypto-0-0.1.20170628git433e2f3.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-20ff0bd15f 2017-10-23 16:38:54.845706 -------------------------------------------------------------------------------- Name : golang-github-keybase-go-crypto Product : Fedora EPEL 7 Version : 0 Release : 0.1.20170628git433e2f3.el7 URL : https://github.com/keybase/go-crypto Summary : Supplementary Go cryptography libraries (Keybase fork) Description : Supplementary Go cryptography libraries (Keybase fork) -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430140 - Review Request: golang-github-keybase-go-crypto - Supplementary Go cryptography libraries (Keybase fork) https://bugzilla.redhat.com/show_bug.cgi?id=1430140 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-keybase-go-crypto' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: golang-github-fullsailor-pkcs7-0-0.1.20170613gita009d8d.el7
by updates＠fedoraproject.org 23 Oct '17

23 Oct '17

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-5dc853d8cd 2017-10-23 16:38:54.845644 -------------------------------------------------------------------------------- Name : golang-github-fullsailor-pkcs7 Product : Fedora EPEL 7 Version : 0 Release : 0.1.20170613gita009d8d.el7 URL : https://github.com/fullsailor/pkcs7 Summary : Parsing and generation of some PKCS#7 structures for Go (golang) Description : Implements a subset of PKCS#7/Crytpographic Message Syntax (rfc2315, rfc5652) -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430130 - Review Request: golang-github-fullsailor-pkcs7 - Parsing and generation of some PKCS#7 structures for Go (golang) https://bugzilla.redhat.com/show_bug.cgi?id=1430130 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update golang-github-fullsailor-pkcs7' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
25
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce October 2017