package-announce January 2018

package-announce@lists.fedoraproject.org

1 participants
2478 discussions

[SECURITY] Fedora 27 Update: GraphicsMagick-1.3.28-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-7c61d08c4f 2018-01-31 21:56:56.444040 -------------------------------------------------------------------------------- Name : GraphicsMagick Product : Fedora 27 Version : 1.3.28 Release : 1.fc27 URL : http://www.graphicsmagick.org/ Summary : An ImageMagick fork, offering faster image generation and better quality Description : GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. -------------------------------------------------------------------------------- Update Information: Latest stable release, includes many bug and security fixes. See also http://www.graphicsmagick.org/NEWS.html#january-20-2017 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536950 - GraphicsMagick: 2018-5685 GraphicsMagick: Infinite loop and application hang in coders/bmp.c:ReadBMPImage [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1536950 [ 2 ] Bug #1529579 - CVE-2017-17912 GraphicsMagick: GraphicsMagick: heap-based buffer over-read in ReadNewsProfile in coders/tiff.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1529579 [ 3 ] Bug #1529558 - CVE-2017-17913 GraphicsMagick: stack-based buffer over-read in WriteWEBPImage in coders/webp.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1529558 [ 4 ] Bug #1529536 - CVE-2017-17915 GraphicsMagick: Memory leak in the function ReadMNGImage in coders/png.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1529536 [ 5 ] Bug #1528050 - CVE-2017-17783 GraphicsMagick: heap based buffer over-read in ReadPALMImage in coders/palm.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1528050 [ 6 ] Bug #1528038 - CVE-2017-17782 GraphicsMagick: heap-based buffer over-read in ReadOneJNGImage function in coders/png.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1528038 [ 7 ] Bug #1515317 - CVE-2017-16353 GraphicsMagick: ImageMagick, GraphicsMagick: memory information disclosure in DescribeImage function in magick/describe.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1515317 [ 8 ] Bug #1512039 - CVE-2017-16669 GraphicsMagick: Heap buffer over-write in AcquireCacheNexus function in magick/pixel_cache.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1512039 [ 9 ] Bug #1484484 - CVE-2017-13147 GraphicsMagick: Allocation failure in ReadMNGImage function in coders/png.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1484484 [ 10 ] Bug #1475499 - CVE-2017-11643 GraphicsMagick: Heap based over-write in WriteCMYKImagefunction in coders/cmyk.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1475499 [ 11 ] Bug #1475491 - CVE-2017-11641 GraphicsMagick: Memory Leak in the PersistCache in magick/pixel_cache.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1475491 [ 12 ] Bug #1475457 - CVE-2017-11636 GraphicsMagick: Heap based buffer over-write in WriteRGBImage in coders/rgb.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1475457 [ 13 ] Bug #1475453 - CVE-2017-11637 GraphicsMagick: NULL pointer dereference in WritePCLImage() in coders/pcl.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1475453 [ 14 ] Bug #1473751 - CVE-2017-11140 GraphicsMagick: Resource exhaustion denial of service in ReadJPEGImage function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1473751 [ 15 ] Bug #1473745 - CVE-2017-11139 GraphicsMagick: double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1473745 [ 16 ] Bug #1473730 - CVE-2017-11102 GraphicsMagick: Input validation failure in ReadOneJNGImage function may cause denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1473730 [ 17 ] Bug #1536770 - GraphicsMagick-1.3.28 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536770 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade GraphicsMagick' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: perl-MogileFS-Server-2.73-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-fe2f50a7d6 2018-01-31 21:56:56.443946 -------------------------------------------------------------------------------- Name : perl-MogileFS-Server Product : Fedora 27 Version : 2.73 Release : 1.fc27 URL : http://search.cpan.org/dist/MogileFS-Server/ Summary : Server part of the MogileFS distributed file system Description : Server part of the MogileFS distributed file system. -------------------------------------------------------------------------------- Update Information: Updated to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536701 - perl-MogileFS-Server-2.73 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536701 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade perl-MogileFS-Server' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: perl-CPAN-Perl-Releases-3.46-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-bcae7a802a 2018-01-31 21:56:56.443902 -------------------------------------------------------------------------------- Name : perl-CPAN-Perl-Releases Product : Fedora 27 Version : 3.46 Release : 1.fc27 URL : http://search.cpan.org/dist/CPAN-Perl-Releases/ Summary : Mapping Perl releases on CPAN to the location of the tarballs Description : CPAN::Perl::Releases is a module that contains the mappings of all perl releases that have been uploaded to CPAN to the authors/id/ path that the tarballs reside in. -------------------------------------------------------------------------------- Update Information: Updated to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536767 - perl-CPAN-Perl-Releases-3.46 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536767 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade perl-CPAN-Perl-Releases' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: perl-Module-CoreList-5.20180120-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-ba7045015e 2018-01-31 21:56:56.443924 -------------------------------------------------------------------------------- Name : perl-Module-CoreList Product : Fedora 27 Version : 5.20180120 Release : 1.fc27 URL : http://search.cpan.org/dist/Module-CoreList/ Summary : What modules are shipped with versions of perl Description : Module::CoreList provides information on which core and dual-life modules are shipped with each version of perl. -------------------------------------------------------------------------------- Update Information: Updated to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536773 - perl-Module-CoreList-5.20180120 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536773 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade perl-Module-CoreList' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: anyremote-6.7.1-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-560f8b3622 2018-01-31 21:56:56.443879 -------------------------------------------------------------------------------- Name : anyremote Product : Fedora 27 Version : 6.7.1 Release : 1.fc27 URL : http://anyremote.sourceforge.net/ Summary : Remote control through Wi-Fi or bluetooth connection Description : Remote control software for applications using Wi-Fi or Bluetooth. -------------------------------------------------------------------------------- Update Information: v6.7.1 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade anyremote' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: rubygem-mixlib-config-2.2.4-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-93f1e514eb 2018-01-31 21:56:56.443803 -------------------------------------------------------------------------------- Name : rubygem-mixlib-config Product : Fedora 27 Version : 2.2.4 Release : 1.fc27 URL : https://github.com/chef/mixlib-config Summary : Simple Ruby config mix-in Description : A class-based config mixin, similar to the one found in Chef. -------------------------------------------------------------------------------- Update Information: Upgrade to 2.2.4 (bz#1220590) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1220590 - rubygem-mixlib-config-2.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1220590 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade rubygem-mixlib-config' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: rubygem-mixlib-shellout-2.3.2-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-3bd7b33bef 2018-01-31 21:56:56.443848 -------------------------------------------------------------------------------- Name : rubygem-mixlib-shellout Product : Fedora 27 Version : 2.3.2 Release : 1.fc27 URL : https://github.com/chef/mixlib-shellout Summary : Run external commands on Unix or Windows Description : Run external commands on Unix or Windows -------------------------------------------------------------------------------- Update Information: Upgrade to 2.3.2 (bz#1150550) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1150550 - rubygem-mixlib-shellout-2.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1150550 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade rubygem-mixlib-shellout' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: rubygem-mixlib-cli-1.7.0-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-375fa8a980 2018-01-31 21:56:56.443781 -------------------------------------------------------------------------------- Name : rubygem-mixlib-cli Product : Fedora 27 Version : 1.7.0 Release : 1.fc27 URL : https://github.com/chef/mixlib-cli Summary : Simple Ruby mix-in for CLI interfaces Description : A simple mix-in for CLI interfaces, including option parsing. -------------------------------------------------------------------------------- Update Information: Update to 1.7.0 (bz#1333395) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1333395 - rubygem-mixlib-cli-1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1333395 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade rubygem-mixlib-cli' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: rubygem-mixlib-log-1.7.1-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-3fc7e791f2 2018-01-31 21:56:56.443736 -------------------------------------------------------------------------------- Name : rubygem-mixlib-log Product : Fedora 27 Version : 1.7.1 Release : 1.fc27 URL : http://github.com/chef/mixlib-log Summary : Ruby mix-in for log functionality Description : A gem that provides a simple mix-in for log functionality. -------------------------------------------------------------------------------- Update Information: Upgrade to 1.7.1 (bz#1365126) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1365126 - rubygem-mixlib-log-1.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1365126 [ 2 ] Bug #1424340 - rubygem-mixlib-log: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1424340 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade rubygem-mixlib-log' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 27 Update: rubygem-mixlib-authentication-1.4.2-1.fc27
by updates＠fedoraproject.org 31 Jan '18

31 Jan '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-565894725d 2018-01-31 21:56:56.443758 -------------------------------------------------------------------------------- Name : rubygem-mixlib-authentication Product : Fedora 27 Version : 1.4.2 Release : 1.fc27 URL : http://github.com/chef/mixlib-authentication Summary : Simple per-request authentication Description : Mixlib::Authentication provides a class-based header signing authentication object. -------------------------------------------------------------------------------- Update Information: Update to 1.4.2 (bz#1424339) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1424339 - rubygem-mixlib-authentication: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1424339 [ 2 ] Bug #1300119 - rubygem-mixlib-authentication-1.4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1300119 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade rubygem-mixlib-authentication' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce January 2018