January 2015 - erlang - Fedora Mailing-Lists

[Bug 1084850] XMPP resource consumption denial of service when using application-layer compression (XEP-0138)

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1084850 Vincent Danen <vdanen(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1184157 Depends On| |1184158 Depends On| |1184159 Depends On| |1184160 --- Comment #6 from Vincent Danen <vdanen(a)redhat.com> --- Created jabberd tracking bugs for this issue: Affects: fedora-all [bug 1184157] Affects: epel-all [bug 1184158] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1184157 [Bug 1184157] jabberd: XMPP resource consumption denial of service when using application-layer compression (XEP-0138) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1184158 [Bug 1184158] jabberd: XMPP resource consumption denial of service when using application-layer compression (XEP-0138) [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1184159 [Bug 1184159] ejabberd: XMPP resource consumption denial of service when using application-layer compression (XEP-0138) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1184160 [Bug 1184160] ejabberd: XMPP resource consumption denial of service when using application-layer compression (XEP-0138) [epel-all] -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
0
0 / 0

[Bug 1184160] New: ejabberd: XMPP resource consumption denial of service when using application-layer compression (XEP-0138) [epel-all]

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1184160 Bug ID: 1184160 Summary: ejabberd: XMPP resource consumption denial of service when using application-layer compression (XEP-0138) [epel-all] Product: Fedora EPEL Version: el6 Component: ejabberd Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: extras-orphan(a)fedoraproject.org Reporter: vdanen(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erlang(a)lists.fedoraproject.org, extras-orphan(a)fedoraproject.org, jkaluza(a)redhat.com, martin(a)laptop.org, mmahut(a)redhat.com Blocks: 1084850 This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1084850 [Bug 1084850] XMPP resource consumption denial of service when using application-layer compression (XEP-0138) -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
1
0 / 0

[rabbitmq-server] Move /etc/tmpfiles.d/* to /usr/lib/tmpfiles.d/*

by Richard W.M. Jones

commit b78a62527828b56b3f11c92aa4cd67ff6586727a Author: Richard W.M. Jones <rjones(a)redhat.com> Date: Mon Jan 19 13:11:33 2015 +0000 Move /etc/tmpfiles.d/* to /usr/lib/tmpfiles.d/* See: https://bugzilla.redhat.com/show_bug.cgi?id=1180990 rabbitmq-server.spec | 10 +++++++--- 1 files changed, 7 insertions(+), 3 deletions(-) --- diff --git a/rabbitmq-server.spec b/rabbitmq-server.spec index b036cc8..f95e2fd 100644 --- a/rabbitmq-server.spec +++ b/rabbitmq-server.spec @@ -3,7 +3,7 @@ Name: rabbitmq-server Version: 3.4.3 -Release: 1%{?dist} +Release: 2%{?dist} License: MPLv1.1 Group: Development/Libraries Source: http://www.rabbitmq.com/releases/rabbitmq-server/v%{version}/%{name}-%{ve... @@ -120,7 +120,7 @@ echo '%defattr(-,root,root, -)' >> %{_builddir}/%{buildsubdir}/%{name}.files install -d %{buildroot}%{_localstatedir}/run/rabbitmq %if 0%{?fedora} > 14 || 0%{?rhel} >= 7 -install -D -p -m 0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/tmpfiles.d/%{name}.conf +install -D -p -m 0644 %{SOURCE5} %{buildroot}%{_prefix}/lib/tmpfiles.d/%{name}.conf %endif rm -rf %{buildroot}%{_rabbit_erllibdir}/LICENSE-* @@ -198,7 +198,7 @@ done %endif %config(noreplace) %{_sysconfdir}/logrotate.d/rabbitmq-server %if 0%{?fedora} || 0%{?rhel} >= 7 -%config(noreplace) %{_sysconfdir}/tmpfiles.d/%{name}.conf +%config(noreplace) %{_prefix}/lib/tmpfiles.d/%{name}.conf %endif %dir %attr(755, rabbitmq, rabbitmq) %{_localstatedir}/run/rabbitmq %doc LICENSE LICENSE-* @@ -207,6 +207,10 @@ done rm -rf %{buildroot} %changelog +* Mon Jan 19 2015 Richard W.M. Jones <rjones(a)redhat.com> - 3.4.3-2 +- Move /etc/tmpfiles.d/* to /usr/lib/tmpfiles.d/* + See: https://bugzilla.redhat.com/show_bug.cgi?id=1180990 + * Wed Jan 7 2015 John Eckersberg <eck(a)redhat.com> - 3.4.3-1 - New upstream release - 3.4.3

9 years, 3 months

1
0
0 / 0

[Bug 1153842] New: CVE-2014-8760 ejabberd: clients can unexpectedly connect without encryption [epel-6]

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1153842 Bug ID: 1153842 Summary: CVE-2014-8760 ejabberd: clients can unexpectedly connect without encryption [epel-6] Product: Fedora EPEL Version: el6 Component: ejabberd Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: extras-orphan(a)fedoraproject.org Reporter: mmcallis(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erlang(a)lists.fedoraproject.org, extras-orphan(a)fedoraproject.org, jkaluza(a)redhat.com, martin(a)laptop.org, mmahut(a)redhat.com Blocks: 1153839 (CVE-2014-8760) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. epel-6 tracking bug for ejabberd: see blocks bug list for full details of the security issue(s). [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1153839 [Bug 1153839] CVE-2014-8760 ejabberd: clients can unexpectedly connect without encryption -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
3
0 / 0

[Bug 1154288] New: The package is missing

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1154288 Bug ID: 1154288 Summary: The package is missing Product: Fedora EPEL Version: epel7 Component: ejabberd Assignee: extras-orphan(a)fedoraproject.org Reporter: frank-buettner(a)gmx.net QA Contact: extras-qa(a)fedoraproject.org CC: erlang(a)lists.fedoraproject.org, extras-orphan(a)fedoraproject.org, jkaluza(a)redhat.com, martin(a)laptop.org, mmahut(a)redhat.com It still exits in EL6 but missing for EL7. Erlang 16 is an part of EL7 so I think ejabberd 14.07 shut possible. -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
1
0 / 0

[Bug 1153841] New: CVE-2014-8760 ejabberd: clients can unexpectedly connect without encryption [epel-5]

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1153841 Bug ID: 1153841 Summary: CVE-2014-8760 ejabberd: clients can unexpectedly connect without encryption [epel-5] Product: Fedora EPEL Version: el5 Component: ejabberd Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: extras-orphan(a)fedoraproject.org Reporter: mmcallis(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erlang(a)lists.fedoraproject.org, extras-orphan(a)fedoraproject.org, jkaluza(a)redhat.com, martin(a)laptop.org, mmahut(a)redhat.com Blocks: 1153839 (CVE-2014-8760) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. epel-5 tracking bug for ejabberd: see blocks bug list for full details of the security issue(s). [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1153839 [Bug 1153839] CVE-2014-8760 ejabberd: clients can unexpectedly connect without encryption -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
2
0 / 0

[Bug 1154320] New: remove support for SSLv3

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1154320 Bug ID: 1154320 Summary: remove support for SSLv3 Product: Fedora EPEL Version: el6 Component: ejabberd Severity: urgent Assignee: extras-orphan(a)fedoraproject.org Reporter: frank-buettner(a)gmx.net QA Contact: extras-qa(a)fedoraproject.org CC: erlang(a)lists.fedoraproject.org, extras-orphan(a)fedoraproject.org, jkaluza(a)redhat.com, martin(a)laptop.org, mmahut(a)redhat.com Description of problem: Version-Release number of selected component (if applicable): 2.1.13 How reproducible: check the server from https://xmpp.net Steps to Reproduce: 1. Enter den jabber domain 2. run the test Actual results: SSLv3 is supportet Expected results: SSLv3 is not used. -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
1
0 / 0

[Bug 1082168] CVE-2014-2668 couchdb: remote denial of service flaw

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1082168 Bug 1082168 depends on bug 1082171, which changed state. Bug 1082171 Summary: CVE-2014-2668 couchdb: remote denial of service flaw [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1082171 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
0
0 / 0

[Bug 1082171] New: CVE-2014-2668 couchdb: remote denial of service flaw [epel-all]

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1082171 Bug ID: 1082171 Summary: CVE-2014-2668 couchdb: remote denial of service flaw [epel-all] Product: Fedora EPEL Version: el6 Component: couchdb Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: extras-orphan(a)fedoraproject.org Reporter: vdanen(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erlang(a)lists.fedoraproject.org, extras-orphan(a)fedoraproject.org Blocks: 1082168 (CVE-2014-2668) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When creating a Bodhi update request, please use the bodhi submission link noted in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the Bodhi notes field when available. Please note: this issue affects multiple supported versions of Fedora EPEL. Only one tracking bug has been filed; please ensure that it is only closed when all affected versions are fixed. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1082168 [Bug 1082168] CVE-2014-2668 couchdb: remote denial of service flaw -- You are receiving this mail because: You are on the CC list for the bug.

9 years, 3 months

1
3
0 / 0

Fixed_mortgage_rates decline for third straight week

by Julie＠lists.fedoraproject.org

Hоmеоwnеr lee.porter, Dо уоu knоw thаt уоu cаn ѕаvе а tоn оf mоnеу wіth thе Nеw Hоmе ᎪffоrdаЬlе Ρlаn? Yоur рrоfіlе ѕhоwѕ thаt уоu mау quаlіfу аnd thаt thеrе аrе nеw rаtеѕ іn уоur аrеа. If уоu dоn't аррlу Ьеfоrе rаtеѕ gо uр, уоu cаn mіѕѕ оut оn hugе SᎪVINGS. Sее hоw much уоu cаn ѕаv&#x043 5; Ьеfоrе іntеrеѕt-rаtеѕ rіѕе! Sіncеrеlу, Ꭺmеrіvаluе 2045 Bаrrіngtоn Ꭺvе. Lоѕ Ꭺngеlеѕ, ᏟᎪ If уоu wіѕh tо nо lоngеr rеcеіvе еmаіlѕ frоm ᎪmеrіVаluе, vіѕіt hеrе. Thіѕ mеѕѕаgе hаѕ Ьееn ѕеnt tо уоu thrоugh аn аffіlіаtе оf ᎪmеrіVаluе.

9 years, 3 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

erlang January 2015