[SECURITY] Fedora EPEL 6 Update: tcpreplay-4.3.2-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-d8d946a765
2019-03-29 02:10:53.213241
--------------------------------------------------------------------------------
Name : tcpreplay
Product : Fedora EPEL 6
Version : 4.3.2
Release : 1.el6
URL : http://tcpreplay.appneta.com/
Summary : Replay captured network traffic
Description :
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay
supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep
a tool to pre-process capture files to allow increased performance under
certain conditions as well as capinfo which provides basic information about
capture files.
--------------------------------------------------------------------------------
Update Information:
Patch CVE-2019-8376, CVE-2019-8377 and CVE-2019-8381.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1678245 - CVE-2019-8377 tcpreplay: null pointer dereference in function get_ipv6_l4proto() in get.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678245
[ 2 ] Bug #1678242 - CVE-2019-8376 tcpreplay: null pointer dereference in function get_layer4_v6() in get.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678242
[ 3 ] Bug #1678231 - CVE-2019-8381 tcpreplay: invalid memory access in function do_checksum in checksum.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678231
[ 4 ] Bug #1646408 - CVE-2018-18408 tcpreplay: use-after-free in post_args function in tcpbridge.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1646408
[ 5 ] Bug #1646403 - CVE-2018-18407 tcpreplay: tcpreplay: heap-based buffer over-read in csum_replace4 function in incremental_checksum.h [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1646403
[ 6 ] Bug #1678244 - CVE-2019-8377 tcpreplay: null pointer dereference in function get_ipv6_l4proto() in get.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678244
[ 7 ] Bug #1678241 - CVE-2019-8376 tcpreplay: null pointer dereference in function get_layer4_v6() in get.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678241
[ 8 ] Bug #1678230 - CVE-2019-8381 tcpreplay: invalid memory access in function do_checksum in checksum.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1678230
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tcpreplay' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 6 Update: php-phpseclib-2.0.15-1.el6
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-4c7ded8849
2019-03-27 05:37:54.913000
--------------------------------------------------------------------------------
Name : php-phpseclib
Product : Fedora EPEL 6
Version : 2.0.15
Release : 1.el6
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.15** - 2019-03-10 - SFTP: make it so get() can correctly handle
out of order responses (#1343) - Crypt: avoid bogus IV errors in ECB mode with
OpenSSL (#1087) - RSA: protect against possible timing attack during OAEP
decryption - RSA: fix possible memory leak with XML keys (#1346) - Hash: fix
issue with undefined constants (#1347) - Hash: fix issues with the mode - SCP:
issue error if remote_file is empty in put() call (#1335) - X509: whitelist OID
1.3.6.1.4.1.11129.2.4.2 (#1341)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-phpseclib' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: abi-dumper-1.1-7.el7.1
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-e8b2cf956f
2019-03-27 05:37:15.591613
--------------------------------------------------------------------------------
Name : abi-dumper
Product : Fedora EPEL 7
Version : 1.1
Release : 7.el7.1
URL : http://github.com/lvc/abi-dumper/
Summary : Tool to dump ABI of an ELF object containing DWARF debug info
Description :
A tool to dump ABI of an ELF object containing DWARF debug info.
The tool is intended to be used with ABI Compliance Checker tool for tracking
ABI changes of a C/C++ library or kernel module.
--------------------------------------------------------------------------------
Update Information:
Fix unescaped left hand brace, fixes BZ#1685441. ---- Fix unescaped left
brace, fixes BZ#1685441.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1685441 - Unescaped left brace in regex is deprecated
https://bugzilla.redhat.com/show_bug.cgi?id=1685441
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update abi-dumper' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: dar-2.5.20-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-14393ffe7b
2019-03-27 05:37:15.591602
--------------------------------------------------------------------------------
Name : dar
Product : Fedora EPEL 7
Version : 2.5.20
Release : 1.el7
URL : http://dar.linux.free.fr/
Summary : Software for making/restoring incremental CD/DVD backups
Description :
DAR is a command line tool to backup a directory tree and files. DAR is
able to make differential backups, split them over a set of disks or files
of a given size, use compression, filter files or subtrees to be saved or
not saved, directly access and restore given files. DAR is also able
to handle extented attributes, and can make remote backups through an
ssh session for example. Finally, DAR handles save and restore of hard
and symbolic links.
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dar' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: moodle-3.1.17-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-1133333640
2019-03-27 05:37:15.591592
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 7
Version : 3.1.17
Release : 1.el7
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
Latest releases.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1687222 - moodle-3.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1687222
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: mate-themes-3.22.19-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-d58767d856
2019-03-27 05:37:15.591580
--------------------------------------------------------------------------------
Name : mate-themes
Product : Fedora EPEL 7
Version : 3.22.19
Release : 1.el7
URL : http://mate-desktop.org
Summary : MATE Desktop themes
Description :
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- update to 3.22.19
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mate-themes' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: php-phpseclib-2.0.15-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-420fc41116
2019-03-27 05:37:15.591569
--------------------------------------------------------------------------------
Name : php-phpseclib
Product : Fedora EPEL 7
Version : 2.0.15
Release : 1.el7
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.15** - 2019-03-10 - SFTP: make it so get() can correctly handle
out of order responses (#1343) - Crypt: avoid bogus IV errors in ECB mode with
OpenSSL (#1087) - RSA: protect against possible timing attack during OAEP
decryption - RSA: fix possible memory leak with XML keys (#1346) - Hash: fix
issue with undefined constants (#1347) - Hash: fix issues with the mode - SCP:
issue error if remote_file is empty in put() call (#1335) - X509: whitelist OID
1.3.6.1.4.1.11129.2.4.2 (#1341)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-phpseclib' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: netatalk-3.1.12-4.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-075ee1a840
2019-03-27 05:37:15.591556
--------------------------------------------------------------------------------
Name : netatalk
Product : Fedora EPEL 7
Version : 3.1.12
Release : 4.el7
URL : http://netatalk.sourceforge.net
Summary : Open Source Apple Filing Protocol(AFP) File Server
Description :
Netatalk is a freely-available Open Source AFP file server. A *NIX/*BSD
system running Netatalk is capable of serving many Macintosh clients
simultaneously as an AppleShare file server (AFP).
--------------------------------------------------------------------------------
Update Information:
use python2 binary for el7 compat, use python3 binary everywhere else ----
execstartpre instead of runtimedirectory in service file for el7 compat ----
fix license
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1658199 - Review Request: netatalk - Open Source Apple Filing Protocol(AFP) File Server
https://bugzilla.redhat.com/show_bug.cgi?id=1658199
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update netatalk' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: python-regex-2019.03.09-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-3041bd018f
2019-03-27 05:37:15.591509
--------------------------------------------------------------------------------
Name : python-regex
Product : Fedora EPEL 7
Version : 2019.03.09
Release : 1.el7
URL : https://bitbucket.org/mrabarnett/mrab-regex
Summary : Alternative regular expression module, to replace re
Description :
This new regex implementation is intended eventually to replace
Python's current re module implementation.
For testing and comparison with the current 're' module the new
implementation is in the form of a module called 'regex'.
--------------------------------------------------------------------------------
Update Information:
Update to the latest released version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-regex' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month
Fedora EPEL 7 Update: atop-2.4.0-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-9054078157
2019-03-25 06:52:33.557787
--------------------------------------------------------------------------------
Name : atop
Product : Fedora EPEL 7
Version : 2.4.0
Release : 1.el7
URL : http://www.atcomputing.nl/Tools/atop/
Summary : An advanced interactive monitor to view the load on system and process level
Description :
An advanced interactive monitor for Linux-systems to view the load on
system-level and process-level.
The command atop has some major advantages compared to other
performance-monitors:
- Resource consumption by all processes
- Utilization of all relevant resources
- Permanent logging of resource utilization
- Highlight critical resources
- Watch activity only
- Watch deviations only
- Accumulated process activity per user
- Accumulated process activity per program
For more informations: http://www.atcomputing.nl/Tools/atop
The package does not make use of the patches available at
http://www.atcomputing.nl/Tools/atop/kernpatch.html
--------------------------------------------------------------------------------
Update Information:
2.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1686801 - Update to version 2.4.0 on RHEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1686801
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update atop' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 1 month