July 2018 - epel-package-announce - Fedora Mailing-Lists

[SECURITY] Fedora EPEL 7 Update: nodejs-6.14.3-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-871d88af0e 2018-07-03 12:53:01.278443 -------------------------------------------------------------------------------- Name : nodejs Product : Fedora EPEL 7 Version : 6.14.3 Release : 1.el7 URL : http://nodejs.org/ Summary : JavaScript runtime Description : Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. -------------------------------------------------------------------------------- Update Information: Update for security fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1591019 - CVE-2018-7162 nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591019 [ 2 ] Bug #1591014 - CVE-2018-7161 nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591014 [ 3 ] Bug #1591009 - CVE-2018-7167 nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591009 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update nodejs' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: python-voluptuous-0.11.1-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-717fa9b9ad 2018-07-03 12:53:01.278414 -------------------------------------------------------------------------------- Name : python-voluptuous Product : Fedora EPEL 7 Version : 0.11.1 Release : 1.el7 URL : https://github.com/alecthomas/voluptuous Summary : A Python data validation library Description : Voluptuous, despite the name, is a Python data validation library. It is primarily intended for validating data coming into Python as JSON, YAML, etc. -------------------------------------------------------------------------------- Update Information: See changes here: https://github.com/alecthomas/voluptuous/blob/master/CHANGELOG.md -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-voluptuous' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: clamav-0.100.0-2.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-7d6dc8227a 2018-07-03 12:53:01.278364 -------------------------------------------------------------------------------- Name : clamav Product : Fedora EPEL 7 Version : 0.100.0 Release : 2.el7 URL : https://www.clamav.net/ Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: Try to mitigate bug #1583599 ---- ClamAV 0.100.0 ============== ClamAV 0.100.0 is a feature release which includes many code submissions from the ClamAV community. Some of the more prominent submissions include: * Interfaces to the Prelude SIEM open source package for collecting ClamAV virus events. * Support for Visual Studio 2015 for Windows builds. Please note that we have deprecated support for Windows XP, and while Vista may still work, we no longer test ClamAV on Windows XP or Vista. * Support libmspack internal code or as a shared object library. The internal library is the default and includes modifications to enable parsing of CAB files that do not entirely adhere to the CAB file format. * Linking with OpenSSL 1.1.0. * Deprecation of the AllowSupplementaryGroups parameter statement in clamd, clamav-milter, and freshclam. Use of supplementary is now in effect by default. * Numerous bug fixes, typo corrections, and compiler warning fixes. Additionally, upstream introduced important changes and new features in ClamAV 0.100, including but not limited to: * Deprecating internal LLVM code support. The configure script has changed to search the system for an installed instance of the LLVM development libraries, and to otherwise use the bytecode interpreter for ClamAV bytecode signatures. To use the LLVM Just-In-Time compiler for executing bytecode signatures, please ensure that the LLVM development package at version 3.6 or lower is installed. Using the deprecated LLVM code is possible with the command: `./configure --with-system-llvm=no`, but it no longer compiles on all platforms. * Compute and check PE import table hash (a.k.a. "imphash") signatures. * Support file property collection and analysis for MHTML files. * Raw scanning of PostScript files. * Fix clamsubmit to use the new virus and false positive submission web interface. * Optionally, flag files with the virus "Heuristic.Limits.Exceeded" when size limitations are exceeded. * Improved decoders for PDF files. * Reduced number of compile time warnings. * Improved support for C++11. * Improved detection of system installed libraries. * Fixes to ClamAV's Container system and the introduction of Intermediates for more descriptive signatures. * Improvements to clamd's On- Access scanning capabilities for Linux. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1583599 - 0.100.0-1 re-packaging stops and disables services https://bugzilla.redhat.com/show_bug.cgi?id=1583599 [ 2 ] Bug #1526628 - please backport OnAccessExcludeRootUID from clamav-master https://bugzilla.redhat.com/show_bug.cgi?id=1526628 [ 3 ] Bug #1565381 - clamav-0.100.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1565381 [ 4 ] Bug #1579829 - clamav-0.100.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1579829 [ 5 ] Bug #1540113 - Database format inconsistency cvd vs cld https://bugzilla.redhat.com/show_bug.cgi?id=1540113 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update clamav' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: marco-1.16.1-3.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-75111625de 2018-07-01 23:00:53.197304 -------------------------------------------------------------------------------- Name : marco Product : Fedora EPEL 7 Version : 1.16.1 Release : 3.el7 URL : http://mate-desktop.org Summary : MATE Desktop window manager Description : MATE Desktop window manager -------------------------------------------------------------------------------- Update Information: - fix for rhbz (#1591973) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1591973 - Windows get permanently composited on the screen https://bugzilla.redhat.com/show_bug.cgi?id=1591973 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update marco' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: ga-5.6.5-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-4c4a047281 2018-07-01 01:07:11.502629 -------------------------------------------------------------------------------- Name : ga Product : Fedora EPEL 7 Version : 5.6.5 Release : 1.el7 URL : http://github.com/GlobalArrays/ga Summary : Global Arrays Toolkit Description : The Global Arrays (GA) toolkit provides an efficient and portable "shared-memory" programming interface for distributed-memory computers. Each process in a MIMD parallel program can asynchronously access logical blocks of physically distributed dense multi- dimensional arrays, without need for explicit cooperation by other processes. Unlike other shared-memory environments, the GA model exposes to the programmer the non-uniform memory access (NUMA) characteristics of the high performance computers and acknowledges that access to a remote portion of the shared data is slower than to the local portion. The locality information for the shared data is available, and a direct access to the local portions of shared data is provided. - Global Arrays Toolkit Base Package. -------------------------------------------------------------------------------- Update Information: New release 5.6.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1357022 - rebuild ga against new openmpi/scalapack https://bugzilla.redhat.com/show_bug.cgi?id=1357022 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update ga' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: python-aexpect-1.5.1-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-4afb2f4d96 2018-07-01 01:07:11.502617 -------------------------------------------------------------------------------- Name : python-aexpect Product : Fedora EPEL 7 Version : 1.5.1 Release : 1.el7 URL : https://github.com/avocado-framework/aexpect Summary : A python library to control interactive applications Description : Aexpect is a python library used to control interactive applications, very similar to pexpect. You can use it to control applications such as ssh, scp sftp, telnet, among others. -------------------------------------------------------------------------------- Update Information: Sync python-aexpect with upstream release 1.5.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1588660 - python-aexpect-1.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588660 [ 2 ] Bug #1437184 - python-aexpect: python3-aexpect is missing Python 3 version of executables https://bugzilla.redhat.com/show_bug.cgi?id=1437184 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-aexpect' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

[SECURITY] Fedora EPEL 7 Update: thunderbird-enigmail-2.0.7-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-e70dca1af5 2018-07-01 01:07:11.502605 -------------------------------------------------------------------------------- Name : thunderbird-enigmail Product : Fedora EPEL 7 Version : 2.0.7 Release : 1.el7 URL : http://enigmail.net/ Summary : Authentication and encryption extension for Mozilla Thunderbird Description : Enigmail is an extension to the mail client Mozilla Thunderbird which allows users to access the authentication and encryption features provided by GnuPG -------------------------------------------------------------------------------- Update Information: Security update to fix CVE-2018-12019 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1591098 - CVE-2018-12019 thunderbird-enigmail: Signature verification does not handle user ids correctly allowing attackers to spoof arbitrary email signatures [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1591098 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update thunderbird-enigmail' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: libass-0.13.4-6.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-e8edde23a0 2018-07-01 01:07:11.502592 -------------------------------------------------------------------------------- Name : libass Product : Fedora EPEL 7 Version : 0.13.4 Release : 6.el7 URL : https://github.com/libass Summary : Portable library for SSA/ASS subtitles rendering Description : Libass is a portable library for SSA/ASS subtitles rendering. -------------------------------------------------------------------------------- Update Information: Add upstreamed 4k patch and enable ASM. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1429460 - Add "BR: yasm" to increase speed https://bugzilla.redhat.com/show_bug.cgi?id=1429460 [ 2 ] Bug #1591142 - Default libass package significantly out of date, contains bugs that can break subtitle rendering on 2160p+ displays https://bugzilla.redhat.com/show_bug.cgi?id=1591142 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update libass' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: nsd-4.1.22-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-edd11c6c38 2018-07-01 01:07:11.502578 -------------------------------------------------------------------------------- Name : nsd Product : Fedora EPEL 7 Version : 4.1.22 Release : 1.el7 URL : http://www.nlnetlabs.nl/nsd/ Summary : Fast and lean authoritative DNS Name Server Description : NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution. -------------------------------------------------------------------------------- Update Information: Update to 4.1.22 and enable round-robin, minimal-responses and refuse-any -------------------------------------------------------------------------------- References: [ 1 ] Bug #1575608 - nsd-4.1.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1575608 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update nsd' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

Fedora EPEL 7 Update: python-gitlab-1.3.0-3.el7.1

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-4619de4f36 2018-07-01 01:07:11.502527 -------------------------------------------------------------------------------- Name : python-gitlab Product : Fedora EPEL 7 Version : 1.3.0 Release : 3.el7.1 URL : https://github.com/python-gitlab/python-gitlab Summary : Interact with GitLab API Description : Interact with GitLab API -------------------------------------------------------------------------------- Update Information: First release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1577217 - Review Request: python-gitlab - Interact with GitLab API https://bugzilla.redhat.com/show_bug.cgi?id=1577217 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-gitlab' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 9 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce July 2018