package-announce March 2018

package-announce@lists.fedoraproject.org

1 participants
3164 discussions

[SECURITY] Fedora 26 Update: phpMyAdmin-4.7.8-1.fc26
by updates＠fedoraproject.org 01 Mar '18

01 Mar '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-147d33439c 2018-03-01 15:57:44.337366 -------------------------------------------------------------------------------- Name : phpMyAdmin Product : Fedora 26 Version : 4.7.8 Release : 1.fc26 URL : https://www.phpmyadmin.net/ Summary : Handle the administration of MySQL over the World Wide Web Description : phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface (managing databases, tables, fields, relations, indexes, users, permissions), while you still have the ability to directly execute any SQL statement. Features include an intuitive web interface, support for most MySQL features (browse and drop databases, tables, views, fields and indexes, create, copy, drop, rename and alter databases, tables, fields and indexes, maintenance server, databases and tables, with proposals on server configuration, execute, edit and bookmark any SQL-statement, even batch-queries, manage MySQL users and privileges, manage stored procedures and triggers), import data from CSV and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers, creating PDF graphics of your database layout, creating complex queries using Query-by-example (QBE), searching globally in a database or a subset of it, transforming stored data into any format using a set of predefined functions, like displaying BLOB-data as image or download-link and much more... -------------------------------------------------------------------------------- Update Information: From upstream announcement: **Security fix: phpMyAdmin 4.7.8 is released** Welcome to phpMyAdmin 4.7.8, a security releaes also containing regular maintenance bug fixes. The security fix relates to a self-XSS vulnerability in the central columns feature that is reported as PMASA-2018-1 https://www.phpmyadmin.net/security/PMASA-2018-1/. Thanks to Mayur Udiniya https://www.linkedin.com/in/mayur-udiniya-09247b129/ for finding and responsibly disclosing this flaw. We recommend all users upgrade to resolve this security problem. A complete list of new features and bugs that have been fixed is available in the ChangeLog file or changelog.php included with this release. Notable changes since 4.7.7: * Fixed error handling with PHP 7.2 * Fixed resetting default setting values * Fixed fallback value for collation connection Additionally, there have been continuous improvements to many of the translations. If you don't see your language or find a problem, you can contribute too; see https://www.phpmyadmin.net/translate/ for details. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1547748 - CVE-2018-7260 phpMyAdmin: XSS in db_central_columns.php https://bugzilla.redhat.com/show_bug.cgi?id=1547748 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade phpMyAdmin' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 26 Update: meson-0.44.1-1.fc26
by updates＠fedoraproject.org 01 Mar '18

01 Mar '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-e74dbcacc5 2018-03-01 15:57:44.337342 -------------------------------------------------------------------------------- Name : meson Product : Fedora 26 Version : 0.44.1 Release : 1.fc26 URL : http://mesonbuild.com/ Summary : High productivity build system Description : Meson is a build system designed to optimize programmer productivity. It aims to do this by providing simple, out-of-the-box support for modern software development tools and practices, such as unit tests, coverage reports, Valgrind, CCache and the like. -------------------------------------------------------------------------------- Update Information: Update to 0.44.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1539287 - [abrt] meson: detect_meson_py_location(): mesonlib.py:51:detect_meson_py_location:RuntimeError: Could not determine how to run Meson. Please file a bug with details. https://bugzilla.redhat.com/show_bug.cgi?id=1539287 [ 2 ] Bug #1547304 - meson-0.44.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1547304 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade meson' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 26 Update: spectre-meltdown-checker-0.35-1.fc26
by updates＠fedoraproject.org 01 Mar '18

01 Mar '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-b25332842d 2018-03-01 15:57:44.337306 -------------------------------------------------------------------------------- Name : spectre-meltdown-checker Product : Fedora 26 Version : 0.35 Release : 1.fc26 URL : https://github.com/speed47/spectre-meltdown-checker Summary : Spectre & Meltdown vulnerability/mitigation checker for Linux Description : Spectre & Meltdown vulnerability/mitigation checker for Linux. -------------------------------------------------------------------------------- Update Information: Update to 0.35 - Feature: correctly detect specific Red Hat/Ubuntu patch for Spectre Variant 1 - Update: new list of blacklisted microcodes (from Intel document) - Enhancement: detect disrepancy between found kernel image and running kernel - Enhancement: speed up execution by not decompressing kernel in --sysfs-only mode - Enhancement: find images installed by systemd kernel-install - Enhancement: better explanation when kernel supports IBRS but CPU doesn't - Misc: other minor changes and bugfixes -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade spectre-meltdown-checker' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 26 Update: krb5-1.15.2-7.fc26
by updates＠fedoraproject.org 01 Mar '18

01 Mar '18

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-f97cb1c9b0 2018-03-01 15:57:44.337234 -------------------------------------------------------------------------------- Name : krb5 Product : Fedora 26 Version : 1.15.2 Release : 7.fc26 URL : http://web.mit.edu/kerberos/www/ Summary : The Kerberos network authentication system Description : Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form. -------------------------------------------------------------------------------- Update Information: Fix CVE-2018-5729, CVE-2018-5730. These are low-impact, requiring administrator access to exploit. ---- Fix leak in previous version. ---- Always read config snippets in alphabetical order per-directory. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1535576 - CVE-2018-5729, CVE-2018-5730 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1535576 [ 2 ] Bug #1540939 - krb5-libs are leaking memory when parsing krb5 configuration https://bugzilla.redhat.com/show_bug.cgi?id=1540939 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade krb5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce March 2018