[SECURITY] Fedora EPEL 7 Update: python-django-1.11.21-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-58a16a4811
2019-06-20 00:33:23.211590
--------------------------------------------------------------------------------
Name : python-django
Product : Fedora EPEL 7
Version : 1.11.21
Release : 1.el7
URL : http://www.djangoproject.com/
Summary : A high-level Python Web framework
Description :
Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as
much as possible and adhering to the DRY (Don't Repeat Yourself)
principle.
--------------------------------------------------------------------------------
Update Information:
fix for CVE-2019-12308 (rhbz#1716764)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1716764 - CVE-2019-12308 python-django: django: missing URL validation by AdminURLFieldWidget leads to generation of clickable unsafe JavaScript link causing cross site scripting [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1716764
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-django' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: php-pda-pheanstalk-3.2.1-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-aa590ea9a6
2019-06-20 00:33:23.211576
--------------------------------------------------------------------------------
Name : php-pda-pheanstalk
Product : Fedora EPEL 7
Version : 3.2.1
Release : 1.el7
URL : https://github.com/pda/pheanstalk
Summary : PHP client for beanstalkd queue
Description :
Pheanstalk is a pure PHP 5.3+ client for the beanstalkd workqueue [1]. It has
been actively developed, and used in production by many, since late 2008.
Created by Paul Annesley [2], Pheanstalk is rigorously unit tested and written
using encapsulated, maintainable object oriented design. Community feedback,
bug reports and patches has led to a stable 1.0 release in 2010, a 2.0 release
in 2013, and a 3.0 release in 2014.
Pheanstalk 3.0 introduces PHP namespaces, PSR-1 and PSR-2 coding standards, and
PSR-4 autoloader standard.
beanstalkd up to the latest version 1.4 is supported. All commands and responses
specified in the protocol documentation for beanstalkd 1.3 are implemented.
Autoloader: /usr/share/php/Pheanstalk/autoload.php
[1] http://xph.us/software/beanstalkd/
[2] http://paul.annesley.cc/
--------------------------------------------------------------------------------
Update Information:
### v3.2.1 Bugfix for socket timeouts This release fixes a bug that could, in
certain cases, cause data to be lost from a connection. Due to the way beanstalk
reservations work no data is permanently lost and the main effect of this would
be a delay in task execution. Thanks for pointing out the problem @mialex! ###
v3.2.0 Maintenance release This is a maintenance release. One issue that was
fixed in this release was the risk of an infinite loop in
`Connection::getLine()`. Now after a timeout, configurable via `ini-
set('default_socket_timeout', $timeout)`, the `getLine()` function will throw an
exception to bring it in line with `Connection::read()` and
`Connection::write()`. If your worker has to potentially wait a long time for
jobs you might start to see exceptions that you did not see before. Even though
this behavior is a change it allows you to actually detect errors instead of
just waiting forever. #### My worker runs via a supervisor If your worker is
currently managed by a supervisor (ie, it restarts after it dies), set your
socket timeout to a value like `3600`. This means that if the worker doesn't get
jobs for 12 hours, it will be restarted 12 times, but in return, if the
connection is dead the worker will restart after at most 1 hour and resume
working. #### My worker does not run via a supervisor If a crash of your
worker results in manually having to restart it you should really change the
configuration. One option that partially resolves this is properly catching
errors in `reserve()`, socket errors are in that sense nothing new, the changes
in this version just make them more consistent in certain cases.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pda-pheanstalk' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: mozilla-https-everywhere-2019.5.13-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-bd51fcdac7
2019-06-20 00:33:23.211484
--------------------------------------------------------------------------------
Name : mozilla-https-everywhere
Product : Fedora EPEL 7
Version : 2019.5.13
Release : 1.el7
URL : https://eff.org/https-everywhere
Summary : HTTPS enforcement extension for Mozilla Firefox
Description :
HTTPS Everywhere is a Firefox extension produced as a collaboration between
The Tor Project and the Electronic Frontier Foundation. It encrypts your
communications with a number of major websites.
Many sites on the web offer some limited support for encryption over HTTPS,
but make it difficult to use. For instance, they may default to unencrypted
HTTP, or fill encrypted pages with links that go back to the unencrypted site.
The HTTPS Everywhere extension fixes these problems by rewriting all requests
to these sites to HTTPS.
The Fedora RPM package includes the legacy XUL version, no longer updated,
for SeaMonkey users.
--------------------------------------------------------------------------------
Update Information:
- UI and functionality patches for stable rules - Translations string fixes -
Minor npm updates for HSTS pruning
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1709619 - mozilla-https-everywhere-2019.5.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1709619
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-https-everywhere' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 6 Update: php-horde-imp-6.2.24-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-cd02e09073
2019-06-19 02:46:52.108860
--------------------------------------------------------------------------------
Name : php-horde-imp
Product : Fedora EPEL 6
Version : 6.2.24
Release : 1.el6
URL : http://www.horde.org/apps/imp
Summary : A web based webmail system
Description :
IMP, the Internet Mail Program, is one of the most popular and widely
deployed open source webmail applications in the world. It allows
universal, web-based access to IMAP and POP3 mail servers and provides
Ajax, mobile and traditional interfaces with a rich range of features
normally found only in desktop email clients.
--------------------------------------------------------------------------------
Update Information:
**imp 6.2.24** * [mjr] Fix errors on initial quick search breaking subsequent
searches (Bug #14838). * [mjr] Don't indicate success if MDN fails (Bug #14920).
* [mjr] Fix/improve generation of PDF preview images.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-imp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: x509watch-0.6.1-6.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-f5ccdc9eb2
2019-06-19 02:27:51.848320
--------------------------------------------------------------------------------
Name : x509watch
Product : Fedora EPEL 7
Version : 0.6.1
Release : 6.el7
URL : https://ftp.robert-scheck.de/linux/x509watch/
Summary : Simple tool to list expiring or expired X.509 certificates
Description :
x509watch is a simple command line application, written in Perl, that can be
used to list soon expiring or already expired X.509 certificates, such as e.g.
SSL certificates. All certificates are searched by default in the standard PKI
directory, but any other directory can be specified as parameter. Only Base64
encoded DER and PEM X.509 certificates are supported.
--------------------------------------------------------------------------------
Update Information:
- Corrected systemd scriptlets usage (#1716408)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1716408 - x509watch: %systemd_postun scriptlets need service files as an argument
https://bugzilla.redhat.com/show_bug.cgi?id=1716408
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update x509watch' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: cekit-3.1.0-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-eb75f98956
2019-06-19 02:27:51.848297
--------------------------------------------------------------------------------
Name : cekit
Product : Fedora EPEL 7
Version : 3.1.0
Release : 1.el7
URL : https://cekit.io
Summary : Container image creation tool
Description :
CEKit helps to build container images from image definition files
--------------------------------------------------------------------------------
Update Information:
Release 3.1.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cekit' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: sip-redirect-0.2.0-9.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-86a1240841
2019-06-19 02:27:51.848309
--------------------------------------------------------------------------------
Name : sip-redirect
Product : Fedora EPEL 7
Version : 0.2.0
Release : 9.el7
URL : https://ftp.robert-scheck.de/linux/sip-redirect/
Summary : Tiny IPv4 and IPv6 SIP redirect server written in Perl
Description :
sip-redirect is a tiny SIP redirect server written in Perl. It is IPv4 and
IPv6 capable, but the IPv6 support is optional. The RFC 3261 was the base for
this simple and very configurable implementation. There is neither TCP nor
multicast support programmed in.
--------------------------------------------------------------------------------
Update Information:
- Corrected systemd scriptlets usage (#1716388)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1716388 - sip-redirect: %systemd_postun scriptlets need service files as an argument
https://bugzilla.redhat.com/show_bug.cgi?id=1716388
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update sip-redirect' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: php-horde-imp-6.2.24-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-d510a5e20b
2019-06-19 02:27:51.848285
--------------------------------------------------------------------------------
Name : php-horde-imp
Product : Fedora EPEL 7
Version : 6.2.24
Release : 1.el7
URL : http://www.horde.org/apps/imp
Summary : A web based webmail system
Description :
IMP, the Internet Mail Program, is one of the most popular and widely
deployed open source webmail applications in the world. It allows
universal, web-based access to IMAP and POP3 mail servers and provides
Ajax, mobile and traditional interfaces with a rich range of features
normally found only in desktop email clients.
--------------------------------------------------------------------------------
Update Information:
**imp 6.2.24** * [mjr] Fix errors on initial quick search breaking subsequent
searches (Bug #14838). * [mjr] Don't indicate success if MDN fails (Bug #14920).
* [mjr] Fix/improve generation of PDF preview images.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-imp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: libsodium-1.0.18-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-707f5271ca
2019-06-19 02:27:51.848259
--------------------------------------------------------------------------------
Name : libsodium
Product : Fedora EPEL 7
Version : 1.0.18
Release : 1.el7
URL : http://libsodium.org/
Summary : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.
The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.
--------------------------------------------------------------------------------
Update Information:
** Version 1.0.18** - A test that didn't work properly on Linux systems with
overcommit memory turned on has been removed. This fixes Ansible builds. -
Emscripten: `print` and `printErr` functions are overridden to send errors to
the console, if there is one. - Emscripten: `UTF8ToString()` is now exported
since `Pointer_stringify()` has been deprecated. - Libsodium version detection
has been fixed in the CMake recipe. - Generic hashing got a 10% speedup on
AVX2. - New target: WebAssembly/WASI (compile with `dist-
builds/wasm32-wasi.sh`). - New functions to map a hash to an edwards25519 point
or get a random point: `core_ed25519_from_hash()` and `core_ed25519_random()`.
- `crypto_core_ed25519_scalar_mul()` has been implemented for `scalar*scalar`
`(mod L)` multiplication. - Support for the Ristretto group has been
implemented, for compatibility with wasm-crypto. - Improvements have been made
to the test suite. - Portability improvements has been made. - `getentropy()`
is now used on systems providing this system call. - `randombytes_salsa20 has
been renamed to `randombytes_internal`. - Support for (p)nacl has been removed.
- Most `((nonnull))` attributes have been relaxed to allow 0-length inputs to be
`NULL`. - The `-ftree-vectorize` and `-ftree-slp-vectorize` compiler switches
are now used, if available, for optimized builds.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora EPEL 7 Update: php-composer-xdebug-handler-1.3.3-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-03c96e507c
2019-06-19 02:27:51.848162
--------------------------------------------------------------------------------
Name : php-composer-xdebug-handler
Product : Fedora EPEL 7
Version : 1.3.3
Release : 1.el7
URL : https://github.com/composer/xdebug-handler
Summary : Restarts a process without xdebug
Description :
Restart a CLI process without loading the xdebug extension.
Originally written as part of composer/composer, now extracted
and made available as a stand-alone library.
Autoloader: /usr/share/php/Composer/XdebugHandler/autoload.php
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.3** - 2019-05-27 * Fixed: add environment changes to `$_ENV` if
it is being used.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-composer-xdebug-handler' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months