Fedora EPEL 6 Update: dibbler-1.0.1-3.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-2864119c48
2016-06-29 11:12:49.632456
--------------------------------------------------------------------------------
Name : dibbler
Product : Fedora EPEL 6
Version : 1.0.1
Release : 3.el6
URL : http://klub.com.pl/dhcpv6
Summary : Portable DHCPv6 implementation
Description :
Dibbler is a portable DHCPv6 implementation. It supports stateful (i.e. IPv6
address granting and IPv6 prefix delegation) as well as stateless (i.e. option
granting) autoconfiguration for IPv6.
--------------------------------------------------------------------------------
Update Information:
This is the initial version of the dibbler package for EPEL6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325681 - Build for EL6 in EPEL?
https://bugzilla.redhat.com/show_bug.cgi?id=1325681
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dibbler' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 6 Update: multilib-rpm-config-1-5.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-7b237aa12a
2016-06-29 11:12:49.632294
--------------------------------------------------------------------------------
Name : multilib-rpm-config
Product : Fedora EPEL 6
Version : 1
Release : 5.el6
URL : https://fedoraproject.org/wiki/PackagingDrafts/MultilibTricks
Summary : Multilib packaging helpers
Description :
Set of tools (shell scripts, RPM macro files) to help with multilib packaging
issues.
--------------------------------------------------------------------------------
Update Information:
packaging helpers for multilib issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344231 - Review Request: multilib-rpm-config - packaging helpers for multilib issues
https://bugzilla.redhat.com/show_bug.cgi?id=1344231
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update multilib-rpm-config' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
[SECURITY] Fedora EPEL 7 Update: php-zendframework-zendxml-1.0.2-2.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-86f7c45855
2016-06-28 05:34:10.532392
--------------------------------------------------------------------------------
Name : php-zendframework-zendxml
Product : Fedora EPEL 7
Version : 1.0.2
Release : 2.el7
URL : http://framework.zend.com/
Summary : Zend Framework ZendXml component
Description :
An utility component for XML usage and best practices in PHP.
--------------------------------------------------------------------------------
Update Information:
## 2.4.10 (2016-05-09) - Fix HeaderValue throwing an exception on legal
characters ## 2.4.9 (2015-11-23) ### SECURITY UPDATES - **ZF2015-09**:
`Zend\Captcha\Word` generates a "word" for a CAPTCHA challenge by selecting a
sequence of random letters from a character set. Prior to this vulnerability
announcement, the selection was performed using PHP's internal `array_rand()`
function. This function does not generate sufficient entropy due to its usage
of `rand()` instead of more cryptographically secure methods such as
`openssl_pseudo_random_bytes()`. This could potentially lead to information
disclosure should an attacker be able to brute force the random number
generation. This release contains a patch that replaces the `array_rand()`
calls to use `Zend\Math\Rand::getInteger()`, which provides better RNG. -
**ZF2015-10**: `Zend\Crypt\PublicKey\Rsa\PublicKey` has a call to
`openssl_public_encrypt()` which used PHP's default `$padding` argument, which
specifies `OPENSSL_PKCS1_PADDING`, indicating usage of PKCS1v1.5 padding. This
padding has a known vulnerability, the [Bleichenbacher's chosen-ciphertext
attack](http://crypto.stackexchange.com/questions/12688/can-you-explain-
bleichenbachers-cca-attack-on-pkcs1-v1-5), which can be used to recover an RSA
private key. This release contains a patch that changes the padding argument
to use `OPENSSL_PKCS1_OAEP_PADDING`. Users upgrading to this version may have
issues decrypting previously stored values, due to the change in padding. If
this occurs, you can pass the constant `OPENSSL_PKCS1_PADDING` to a new
`$padding` argument in `Zend\Crypt\PublicKey\Rsa::encrypt()` and `decrypt()`
(though typically this should only apply to the latter): ```php
$decrypted = $rsa->decrypt($data, $key, $mode, OPENSSL_PKCS1_PADDING); ```
where `$rsa` is an instance of `Zend\Crypt\PublicKey\Rsa`. (The `$key` and
`$mode` argument defaults are `null` and
`Zend\Crypt\PublicKey\Rsa::MODE_AUTO`, if you were not using them previously.)
We recommend re-encrypting any such values using the new defaults.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343990 - [epel7][security] php-ZendFramework2-2.4.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343990
[ 2 ] Bug #1289318 - CVE-2015-7503 php-ZendFramework2: Usage of vulnerable PKCS#1 v1.5 padding allows to recover RSA private key [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1289318
[ 3 ] Bug #1343995 - [f23][f22][security] php-ZendFramework2-2.4.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343995
[ 4 ] Bug #1289317 - CVE-2015-7503 php-ZendFramework2: Usage of vulnerable PKCS#1 v1.5 padding allows to recover RSA private key [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1289317
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-zendframework-zendxml' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
[SECURITY] Fedora EPEL 7 Update: php-ZendFramework2-2.4.10-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-86f7c45855
2016-06-28 05:34:10.532392
--------------------------------------------------------------------------------
Name : php-ZendFramework2
Product : Fedora EPEL 7
Version : 2.4.10
Release : 1.el7
URL : http://framework.zend.com
Summary : Zend Framework 2
Description :
Zend Framework 2 is an open source framework for developing web applications
and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code
and utilizes most of the new features of PHP 5.3, namely namespaces, late
static binding, lambda functions and closures.
Zend Framework 2 evolved from Zend Framework 1, a successful PHP framework
with over 15 million downloads.
Note: This meta package installs all base Zend Framework component packages
(Authentication, Barcode, Cache, Captcha, Code, Config, Console, Crypt, Db,
Debug, Di, Dom, Escaper, EventManager, Feed, File, Filter, Form, Http, I18n,
InputFilter, Json, Ldap, Loader, Log, Mail, Math, Memory, Mime, ModuleManager,
Mvc, Navigation, Paginator, Permissions-Acl, Permissions-Rbac, ProgressBar,
Serializer, Server, ServiceManager, Session, Soap, Stdlib, Tag, Test, Text,
Uri, Validator, Version, View, XmlRpc) except the optional Cache-apc and
Cache-memcached packages.
--------------------------------------------------------------------------------
Update Information:
## 2.4.10 (2016-05-09) - Fix HeaderValue throwing an exception on legal
characters ## 2.4.9 (2015-11-23) ### SECURITY UPDATES - **ZF2015-09**:
`Zend\Captcha\Word` generates a "word" for a CAPTCHA challenge by selecting a
sequence of random letters from a character set. Prior to this vulnerability
announcement, the selection was performed using PHP's internal `array_rand()`
function. This function does not generate sufficient entropy due to its usage
of `rand()` instead of more cryptographically secure methods such as
`openssl_pseudo_random_bytes()`. This could potentially lead to information
disclosure should an attacker be able to brute force the random number
generation. This release contains a patch that replaces the `array_rand()`
calls to use `Zend\Math\Rand::getInteger()`, which provides better RNG. -
**ZF2015-10**: `Zend\Crypt\PublicKey\Rsa\PublicKey` has a call to
`openssl_public_encrypt()` which used PHP's default `$padding` argument, which
specifies `OPENSSL_PKCS1_PADDING`, indicating usage of PKCS1v1.5 padding. This
padding has a known vulnerability, the [Bleichenbacher's chosen-ciphertext
attack](http://crypto.stackexchange.com/questions/12688/can-you-explain-
bleichenbachers-cca-attack-on-pkcs1-v1-5), which can be used to recover an RSA
private key. This release contains a patch that changes the padding argument
to use `OPENSSL_PKCS1_OAEP_PADDING`. Users upgrading to this version may have
issues decrypting previously stored values, due to the change in padding. If
this occurs, you can pass the constant `OPENSSL_PKCS1_PADDING` to a new
`$padding` argument in `Zend\Crypt\PublicKey\Rsa::encrypt()` and `decrypt()`
(though typically this should only apply to the latter): ```php
$decrypted = $rsa->decrypt($data, $key, $mode, OPENSSL_PKCS1_PADDING); ```
where `$rsa` is an instance of `Zend\Crypt\PublicKey\Rsa`. (The `$key` and
`$mode` argument defaults are `null` and
`Zend\Crypt\PublicKey\Rsa::MODE_AUTO`, if you were not using them previously.)
We recommend re-encrypting any such values using the new defaults.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343990 - [epel7][security] php-ZendFramework2-2.4.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343990
[ 2 ] Bug #1289318 - CVE-2015-7503 php-ZendFramework2: Usage of vulnerable PKCS#1 v1.5 padding allows to recover RSA private key [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1289318
[ 3 ] Bug #1343995 - [f23][f22][security] php-ZendFramework2-2.4.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343995
[ 4 ] Bug #1289317 - CVE-2015-7503 php-ZendFramework2: Usage of vulnerable PKCS#1 v1.5 padding allows to recover RSA private key [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1289317
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-ZendFramework2' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 6 Update: lbd-0.4-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-184d7b1d37
2016-06-28 00:27:52.521415
--------------------------------------------------------------------------------
Name : lbd
Product : Fedora EPEL 6
Version : 0.4
Release : 1.el6
URL : https://github.com/craig/ge.mine.nu/tree/master/lbd
Summary : A DNS/HTTP load balancing detector
Description :
lbd (load balancing detector) detects if a given domain uses DNS and/or HTTP
Load-Balancing (via Server: and Date: header and diffs between server answers).
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.4
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lbd' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 6 Update: mbuffer-20160228-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-22c5d0dac0
2016-06-28 00:27:52.521358
--------------------------------------------------------------------------------
Name : mbuffer
Product : Fedora EPEL 6
Version : 20160228
Release : 1.el6
URL : http://www.maier-komor.de/mbuffer.html
Summary : Measuring Buffer is an enhanced version of buffer
Description :
Measuring Buffer is an enhanced version of buffer. It features displayof
throughput, memory-mapped file I/O for huge buffers, and multithreading.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 20160228
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336192 - mbuffer: please consider building for EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=1336192
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mbuffer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 6 Update: mock-1.2.18-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-9e2f372208
2016-06-28 00:27:52.521173
--------------------------------------------------------------------------------
Name : mock
Product : Fedora EPEL 6
Version : 1.2.18
Release : 1.el6
URL : https://fedoraproject.org/wiki/Mock
Summary : Builds packages inside chroots
Description :
Mock takes an SRPM and builds it in a chroot.
--------------------------------------------------------------------------------
Update Information:
mock-1.2.18 has several bugfixes: * copy just content of SRPM not the
attributes (RHBZ#1301985) * do not fail when we cannot link default.cfg
(RHBZ#1305367) * Build always fails when using --nocheck (RHBZ#1327594) * keep
machine-id in /etc/machine-id (RHBZ#1344305) And several changes: *
Unconditionally setup resolver config * use DNF for F24 chroot * requires rpm-
python * Escape the escape sequences in PROMPT_COMMAND, improve prompt * Use
root name instead config name for backups dir * Add MIPS personalities * scm
plugin handle better submodules And there are two new groups of configs. There
are new Mageia configs: * mageia-cauldron-armv5tl * mageia-cauldron-armv7hl *
mageia-cauldron-i586 * mageia-cauldron-x86_64 * mageia-6-armv5tl *
mageia-6-armv7hl * mageia-6-i586 * mageia-6-x86_64 And there are new custom
configs: * custom-1-aarch64 * custom-1-armhfp * custom-1-i386 * custom-1-ppc64
* custom-1-ppc64le * custom-1-s390 * custom-1-s390x * custom-1-x86_64 Those
configs does not have any repository configured and base is empty. I.e:
config_opts['chroot_setup_cmd'] = '' This is useful if you want to prepare the
chroot yourself. Or when you use it with mockchain with `--addrepo=REPOS`
option. This was added on request of Koschei, which will use it.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344305 - Failed to read machine ID
https://bugzilla.redhat.com/show_bug.cgi?id=1344305
[ 2 ] Bug #1327594 - Build always fails when using --nocheck
https://bugzilla.redhat.com/show_bug.cgi?id=1327594
[ 3 ] Bug #1305367 - Non-fatal POSTIN scriptlet failure in rpm package mock
https://bugzilla.redhat.com/show_bug.cgi?id=1305367
[ 4 ] Bug #1301985 - mockbuild unable to read source rpm
https://bugzilla.redhat.com/show_bug.cgi?id=1301985
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mock' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 7 Update: lbd-0.4-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-80234d5ff9
2016-06-27 16:47:37.659940
--------------------------------------------------------------------------------
Name : lbd
Product : Fedora EPEL 7
Version : 0.4
Release : 1.el7
URL : https://github.com/craig/ge.mine.nu/tree/master/lbd
Summary : A DNS/HTTP load balancing detector
Description :
lbd (load balancing detector) detects if a given domain uses DNS and/or HTTP
Load-Balancing (via Server: and Date: header and diffs between server answers).
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.4
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lbd' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 7 Update: mbuffer-20160228-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-754ca5d7f9
2016-06-27 16:47:37.659870
--------------------------------------------------------------------------------
Name : mbuffer
Product : Fedora EPEL 7
Version : 20160228
Release : 1.el7
URL : http://www.maier-komor.de/mbuffer.html
Summary : Measuring Buffer is an enhanced version of buffer
Description :
Measuring Buffer is an enhanced version of buffer. It features displayof
throughput, memory-mapped file I/O for huge buffers, and multithreading.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 20160228
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336192 - mbuffer: please consider building for EPEL
https://bugzilla.redhat.com/show_bug.cgi?id=1336192
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mbuffer' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months
Fedora EPEL 7 Update: siege-4.0.2-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-fd4b923b58
2016-06-27 16:47:37.659802
--------------------------------------------------------------------------------
Name : siege
Product : Fedora EPEL 7
Version : 4.0.2
Release : 1.el7
URL : http://www.joedog.org/JoeDog/Siege
Summary : A HTTP regression testing and benchmarking utility
Description :
Siege is an HTTP regression testing and benchmarking utility.
It was designed to let web developers measure the performance of their code
under duress, to see how it will stand up to load on the internet.
Siege supports basic authentication, cookies, HTTP and HTTPS protocols.
It allows the user hit a web server with a configurable number of concurrent
simulated users. Those users place the web-server "under siege."
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release 4.0.2 (rhbz#1262154)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1262154 - siege-4.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1262154
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update siege' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
7 years, 9 months