[SECURITY] Fedora 22 Update: pdns-3.4.4-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-7018
2015-04-28 07:17:08
--------------------------------------------------------------------------------
Name : pdns
Product : Fedora 22
Version : 3.4.4
Release : 1.fc22
URL : http://powerdns.com
Summary : A modern, advanced and high performance authoritative-only nameserver
Description :
The PowerDNS Nameserver is a modern, advanced and high performance
authoritative-only nameserver. It is written from scratch and conforms
to all relevant DNS standards documents.
Furthermore, PowerDNS interfaces with almost any database.
--------------------------------------------------------------------------------
Update Information:
- Update to 3.4.4
- CVE-2015-1868
Release notes:
https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-344
External References:
https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213377 - CVE-2015-1868 pdns: Label decompression bug in PowerDNS can cause crashes on specific platforms
https://bugzilla.redhat.com/show_bug.cgi?id=1213377
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pdns' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
[SECURITY] Fedora 21 Update: mailman-2.1.20-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-5216
2015-04-01 21:09:35
--------------------------------------------------------------------------------
Name : mailman
Product : Fedora 21
Version : 2.1.20
Release : 1.fc21
URL : http://www.list.org/
Summary : Mailing list manager with built in Web access
Description :
Mailman is software to help manage email discussion lists, much like
Majordomo and Smartmail. Unlike most similar products, Mailman gives
each mailing list a webpage, and allows users to subscribe,
unsubscribe, etc. over the Web. Even the list manager can administer
his or her list entirely from the Web. Mailman also integrates most
things people want to do with mailing lists, including archiving, mail
<-> news gateways, and so on.
Documentation can be found in: /usr/share/doc/mailman
When the package has finished installing, you will need to perform some
additional installation steps, these are described in:
/usr/share/doc/mailman/INSTALL.REDHAT
--------------------------------------------------------------------------------
Update Information:
Update to new version 2.1.20.
Fix dependency on python-dns.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 1 2015 Jan Kaluza <jkaluza(a)redhat.com> - 3:2.1.20-1
- update to new upstream versino 2.1.20 (#1207900)
* Mon Mar 2 2015 Jan Kaluza <jkaluza(a)redhat.com> - 3:2.1.19-1
- update to new upstream version 2.1.19 (#1187894)
* Tue Feb 17 2015 Jan Kaluza <jkaluza(a)redhat.com> - 3:2.1.18.1-4
- require python-dns
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1208059 - CVE-2015-2775 mailman: directory traversal in MTA transports that deliver programmatically
https://bugzilla.redhat.com/show_bug.cgi?id=1208059
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mailman' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 21 Update: zsh-5.0.7-7.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6478
2015-04-21 13:42:30
--------------------------------------------------------------------------------
Name : zsh
Product : Fedora 21
Version : 5.0.7
Release : 7.fc21
URL : http://zsh.sourceforge.net/
Summary : Powerful interactive shell
Description :
The zsh shell is a command interpreter usable as an interactive login
shell and as a shell script command processor. Zsh resembles the ksh
shell (the Korn shell), but includes many enhancements. Zsh supports
command line editing, built-in spelling correction, programmable
command completion, shell functions (with autoloading), a history
mechanism, and more.
--------------------------------------------------------------------------------
Update Information:
- fix SIGSEGV when handling heredocs and keyboard interrupt (#972624)
- queue signals when manipulating global state to avoid deadlock
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Kamil Dudka <kdudka(a)redhat.com> - 5.0.7-7
- fix SIGSEGV when handling heredocs and keyboard interrupt (#972624)
- queue signals when manipulating global state to avoid deadlock
* Sun Jan 25 2015 Kamil Dudka <kdudka(a)redhat.com> - 5.0.7-6
- use correct allocation function in the new 'cd' code (#1183238)
* Fri Jan 23 2015 Kamil Dudka <kdudka(a)redhat.com> - 5.0.7-5
- suppress a warning about closing an already closed file descriptor (#1184002)
- improve handling of NULL in the 'cd' built-in (#1183238)
* Wed Nov 19 2014 Kamil Dudka <kdudka(a)redhat.com> - 5.0.7-4
- update documentation of POSIX_JOBS in the zshoptions.1 man page (#1162198)
* Tue Nov 18 2014 Kamil Dudka <kdudka(a)redhat.com> - 5.0.7-3
- replace an incorrect comment in /etc/zshenv (#1164313)
* Mon Nov 10 2014 Kamil Dudka <kdudka(a)redhat.com> - 5.0.7-2
- make the wait built-in work for already exited processes (#1162198)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #972624 - [abrt] zsh-5.0.2-1.fc18: setheredoc: Process /usr/bin/zsh was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=972624
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zsh' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 21 Update: jxmpp-0.4.1-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6563
2015-04-21 13:46:57
--------------------------------------------------------------------------------
Name : jxmpp
Product : Fedora 21
Version : 0.4.1
Release : 1.fc21
URL : https://github.com/igniterealtime/jxmpp
Summary : An Open Source XMPP Java base-library
Description :
JXMPP is an Open Source Java base library for XMPP. It
provides often used functionality needed to build a XMPP stack.
--------------------------------------------------------------------------------
Update Information:
Initial import (#1177453).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1177453 - Review Request: jxmpp - An Open Source XMPP Java base-library
https://bugzilla.redhat.com/show_bug.cgi?id=1177453
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jxmpp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 20 Update: lua-expat-1.3.0-4.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6553
2015-04-21 13:45:43
--------------------------------------------------------------------------------
Name : lua-expat
Product : Fedora 20
Version : 1.3.0
Release : 4.fc20
URL : http://www.keplerproject.org/luaexpat/
Summary : SAX XML parser based on the Expat library
Description :
LuaExpat is a SAX XML parser based on the Expat library.
--------------------------------------------------------------------------------
Update Information:
Apply patch by jkaluza (fix RHBZ# 1100238) to build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.3.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.3.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 27 2014 Matěj Cepl <mcepl(a)redhat.com> - 1.3.0-2
- Apply patch by jkaluza (fix RHBZ# 1100238) to build -compat subpackage
against compat-lua
* Wed Apr 23 2014 Robert Scheck <robert(a)fedoraproject.org> - 1.3.0-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1100238 - [PATCH] Build lua-expat also against compat-lua
https://bugzilla.redhat.com/show_bug.cgi?id=1100238
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update lua-expat' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: rubygem-domain_name-0.5.24-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6482
2015-04-21 13:42:36
--------------------------------------------------------------------------------
Name : rubygem-domain_name
Product : Fedora 22
Version : 0.5.24
Release : 1.fc22
URL : https://github.com/knu/ruby-domain_name
Summary : Domain Name manipulation library for Ruby
Description :
This is a Domain Name manipulation library for Ruby.
It can also be used for cookie domain validation based on the Public
Suffix List.
--------------------------------------------------------------------------------
Update Information:
New version 0.5.24 is released.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-domain_name' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: python-mistune-0.5.1-1.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6489
2015-04-21 13:42:58
--------------------------------------------------------------------------------
Name : python-mistune
Product : Fedora 22
Version : 0.5.1
Release : 1.fc22
URL : https://github.com/lepture/mistune
Summary : Markdown parser for Python
Description :
The fastest markdown parser in pure Python, inspired by marked.
--------------------------------------------------------------------------------
Update Information:
new upstream release (0.5.1)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-mistune' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 21 Update: laszip-2.2.0-4.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6532
2015-04-21 13:45:00
--------------------------------------------------------------------------------
Name : laszip
Product : Fedora 21
Version : 2.2.0
Release : 4.fc21
URL : http://www.laszip.org/
Summary : Quickly turns bulky LAS files into compant LAZ files
Description :
LASzip - a free product of rapidlasso GmbH - quickly turns bulky LAS files into
compact LAZ files without information loss.
--------------------------------------------------------------------------------
Update Information:
New package: laszip
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1199296 - Review Request: laszip - Quickly turns bulky LAS files into compant LAZ files
https://bugzilla.redhat.com/show_bug.cgi?id=1199296
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update laszip' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 21 Update: tig-2.1.1-1.fc21
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6340
2015-04-18 05:42:35
--------------------------------------------------------------------------------
Name : tig
Product : Fedora 21
Version : 2.1.1
Release : 1.fc21
URL : http://jonas.nitro.dk/tig
Summary : Text-mode interface for the git revision control system
Description :
Tig is a repository browser for the git revision control system that
additionally can act as a pager for output from various git commands.
When browsing repositories, it uses the underlying git commands to present the
user with various views, such as summarized revision log and showing the commit
with the log message, diffstat, and the diff.
Using it as a pager, it will display input from stdin and colorize it.
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 14 2015 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 2.1.1-1
- Update to 2.1.1.
* Fri Mar 13 2015 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 2.1-1
- Update to 2.1.
* Sat Feb 14 2015 Ville Skyttä <ville.skytta(a)iki.fi> - 2.0.3-2
- Move bash completion to %{_datadir}/bash-completion/completions
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tig' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months
Fedora 22 Update: python-XStatic-Angular-1.3.7.0-4.fc22
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6805
2015-04-24 17:58:47
--------------------------------------------------------------------------------
Name : python-XStatic-Angular
Product : Fedora 22
Version : 1.3.7.0
Release : 4.fc22
URL : http://angularjs.org
Summary : Angular (XStatic packaging standard)
Description :
Angular JavaScript library packaged for
setuptools (easy_install) / pip.
This package is intended to be used by
**any** project that needs these files.
It intentionally does **not** provide
any extra code except some metadata
**nor** has any extra requirements. You MAY
use some minimal support code from
the XStatic base package, if you like.
--------------------------------------------------------------------------------
Update Information:
provide obsoleted python-XStatic-Angular-Cookies (rhbz#1210692)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1210692 - Old Horizon package dependencies are breaking instack-install-undercloud
https://bugzilla.redhat.com/show_bug.cgi?id=1210692
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-XStatic-Angular' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
8 years, 12 months