--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-3248
2015-03-05 09:18:10
--------------------------------------------------------------------------------
Name : ghc-polyparse
Product : Fedora 20
Version : 1.11
Release : 1.fc20
URL : https://hackage.haskell.org/package/polyparse
Summary : A variety of alternative parser combinator libraries
Description :
A variety of alternative parser combinator libraries, including the original
HuttonMeijer set. The Poly sets have features like good error reporting,
arbitrary token type, running state, lazy parsing, and so on. Finally,
Text.Parse is a proposed replacement for the standard Read class, for better
deserialisation of Haskell values from Strings.
--------------------------------------------------------------------------------
Update Information:
alternative parser combinators
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1197337 - Review Request: ghc-polyparse - A variety of alternative parser combinator libraries
https://bugzilla.redhat.com/show_bug.cgi?id=1197337
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ghc-polyparse' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4460
2015-03-23 02:39:37
--------------------------------------------------------------------------------
Name : moarvm
Product : Fedora 21
Version : 0.2014.12
Release : 1.fc21
URL : http://moarvm.org
Summary : Short for "Metamodel On A Runtime", MoarVM is a virtual machine as a backend for NQP and then Rakudo Perl 6 at the top.
Description :
Short for "Metamodel On A Runtime", MoarVM is a virtual machine built
especially for Rakudo Perl 6 and the NQP Compiler Toolchain. MoarVM is a
backend for NQP.
MoarVM already stands out amongst the various Rakudo and NQP compilation
targets by typically:
Running the Perl 6 specification test suite fastest
Having the lowest memory usage
Having the best startup time
Being fastest to build both NQP and Rakudo - and thus in theory your
Perl 6 and NQP programs too!
--------------------------------------------------------------------------------
Update Information:
update to 2014.12
add BuildRequies: perl(ExtUtils::Command) perl(autodie)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 24 2015 Gerd Pokorra <gp(a)zimt.uni-siegen.de> 0.2014.12-1
- update to 2014.12
- add pkgconfig/moar.pc file
- --libdir option could used
* Thu Jan 22 2015 Gerd Pokorra <gp(a)zimt.uni-siegen.de> 0.2014.04-6
- add BuildRequies: perl(ExtUtils::Command) perl(autodie)
- rebuild to solve dependency
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1105630 - Missing or wrong version of dependency 'gen/parrot/stage2/QRegex.nqp'
https://bugzilla.redhat.com/show_bug.cgi?id=1105630
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update moarvm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4068
2015-03-18 05:57:19
--------------------------------------------------------------------------------
Name : maven
Product : Fedora 21
Version : 3.2.2
Release : 3.fc21
URL : http://maven.apache.org/
Summary : Java project management and project comprehension tool
Description :
Maven is a software project management and comprehension tool. Based on the
concept of a project object model (POM), Maven can manage a project's build,
reporting and documentation from a central piece of information.
--------------------------------------------------------------------------------
Update Information:
Add missing libs to ${M2_HOME}/lib (Resolves: rhbz#1202286)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Michal Srb <msrb(a)redhat.com> - 3.2.2-3
- Add commons-io, commons-lang and jsoup to plexus.core (Resolves: rhbz#1202286)
* Mon Feb 16 2015 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 3.2.2-2
- Add patch for MNG-5663
- Resolves: rhbz#1193103
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1202286 - maven: missing libs in ${M2_HOME}/lib may cause java.lang.NoClassDefFoundError
https://bugzilla.redhat.com/show_bug.cgi?id=1202286
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update maven' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4110
2015-03-18 06:02:11
--------------------------------------------------------------------------------
Name : scap-security-guide
Product : Fedora 20
Version : 0.1.21
Release : 1.fc20
URL : https://fedorahosted.org/scap-security-guide/
Summary : Security guidance and baselines in SCAP formats
Description :
The scap-security-guide project provides a guide for configuration of the
system from the final system's security point of view. The guidance is specified
in the Security Content Automation Protocol (SCAP) format and constitutes
a catalog of practical hardening advice, linked to government requirements
where applicable. The project bridges the gap between generalized policy
requirements and specific implementation guidelines. The Fedora system
administrator can use the oscap CLI tool from openscap-scanner package, or the
scap-workbench GUI tool from scap-workbench package to verify that the system
conforms to provided guideline. Refer to scap-security-guide(8) manual page for
further information.
--------------------------------------------------------------------------------
Update Information:
update to the latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 4 2015 Šimon Lukašík <slukasik(a)redhat.com> - 0.1.21-1
- update to the latest upstream release
- move content to /usr/share/scap/ssg/content
* Thu Oct 2 2014 Šimon Lukašík <slukasik(a)redhat.com> - 0.1.19-1
- update to the latest upstream release
* Mon Jul 14 2014 Šimon Lukašík <slukasik(a)redhat.com> - 0.1.5-3
- require only openscap-scanner, not whole openscap-utils package
* Tue Jul 1 2014 Šimon Lukašík <slukasik(a)redhat.com> - 0.1.5-2
- Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
- Add STIG DISCLAIMER to the shipped documentation
* Thu Feb 27 2014 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.5-1
- Fix fedora-srpm and fedora-rpm Make targets to work again
- Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
- EOL for Fedora 18 support
- Include Fedora datastream file for remote Fedora system scans
* Mon Jan 6 2014 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.4-2
- Drop -compat package, provide openscap-content directly (RH BZ#1040335#c14)
* Fri Dec 20 2013 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.4-1
- Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
it to /shared
- Add shared remediations for sshd disable empty passwords and
sshd set idle timeout
- Shared remediation for sshd disable root login
- Add empty -compat subpackage to ensure backward-compatibility with
openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
- OVAL check for sshd disable root login
- Fix typo in OVAL check for sshd disable empty passwords
- OVAL check for sshd disable empty passwords
- Unselect no shelllogin for systemaccounts rule from being run by default
- Rename XCCDF rules
- Revert Set up Fedora release name and CPE based on build system properties
- Shared OVAL check for Verify that Shared Library Files Have Root Ownership
- Shared OVAL check for Verify that System Executables Have Restrictive Permissions
- Shared OVAL check for Verify that System Executables Have Root Ownership
- Shared OVAL check for Verify that Shared Library Files Have Restrictive
Permissions
- Fix remediation for Disable Prelinking rule
- OVAL check and remediation for sshd's ClientAliveCountMax rule
- OVAL check for sshd's ClientAliveInterval rule
- Include descriptions for permissions section, and rules for checking
permissions and ownership of shared library files and system executables
- Disable selected rules by default
- Add remediation for Disable Prelinking rule
- Adjust service-enable-macro, service-disable-macro XSLT transforms
definition to evaluate to proper systemd syntax
- Fix service_ntpd_enabled OVAL check make validate to pass again
- Include patch from Šimon Lukašík to obsolete openscap-content
package (RH BZ#1028706)
- Add OVAL check to test if there's is remote NTP server configured for
time data
- Add system settings section for the guide (to track system wide
hardening configurations)
- Include disable prelink rule and OVAL check for it
- Initial OVAL check if ntpd service is enabled. Add package_installed
OVAL templating directory structure and functionality.
- Include services section, and XCCDF description for selected ntpd's
sshd's service rules
- Include remediations for login.defs' based password minimum, maximum and
warning age rules
- Include directory structure to support remediations
- Add SCAP "replace or append pattern value in text file based on variable"
remediation script generator
- Add remediation for "Set Password Minimum Length in login.defs" rule
* Mon Nov 18 2013 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.3-1
- Update versioning scheme - move fedorassgrelease to be part of
upstream version. Rename it to fedorassgversion to avoid name collision
with Fedora package release.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update scap-security-guide' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4449
2015-03-23 02:38:58
--------------------------------------------------------------------------------
Name : xapian-core
Product : Fedora 21
Version : 1.2.20
Release : 1.fc21
URL : http://www.xapian.org/
Summary : The Xapian Probabilistic Information Retrieval Library
Description :
Xapian is an Open Source Probabilistic Information Retrieval Library. It
offers a highly adaptable toolkit that allows developers to easily add advanced
indexing and search facilities to applications
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.20
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2015 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.2.20-1
- Update to 1.2.20
* Wed Feb 25 2015 Than Ngo <than(a)redhat.com> 1.2.19-3
- rebuilt against new gcc5
* Sat Feb 7 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1.2.19-2
- rebuild (gcc)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1173099 - xapian-core-devel missing libuuid-devel dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1173099
[ 2 ] Bug #1173098 - xapian-core-devel ships libtool archive (.la)
https://bugzilla.redhat.com/show_bug.cgi?id=1173098
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xapian-core' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4449
2015-03-23 02:38:58
--------------------------------------------------------------------------------
Name : xapian-bindings
Product : Fedora 21
Version : 1.2.20
Release : 1.fc21
URL : http://www.xapian.org/
Summary : Bindings for the Xapian Probabilistic Information Retrieval Library
Description :
Xapian is an Open Source Probabilistic Information Retrieval Library. It
offers a highly adaptable toolkit that allows developers to easily add advanced
indexing and search facilities to applications. This package provides the
files needed for scripts which use Xapian.
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.20
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 21 2015 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.2.20-1
- Update to 1.2.20
* Tue Jan 20 2015 Vít Ondruch <vondruch(a)redhat.com> - 1.2.19-2
- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1173099 - xapian-core-devel missing libuuid-devel dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1173099
[ 2 ] Bug #1173098 - xapian-core-devel ships libtool archive (.la)
https://bugzilla.redhat.com/show_bug.cgi?id=1173098
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xapian-bindings' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4280
2015-03-21 00:14:10
--------------------------------------------------------------------------------
Name : drupal7-ctools
Product : Fedora 20
Version : 1.7
Release : 1.fc20
URL : http://drupal.org/project/ctools
Summary : Primarily a set of APIs and tools to improve the developer experience
Description :
This suite is primarily a set of APIs and tools to improve the developer
experience. It also contains a module called the Page Manager whose job
is to manage pages. In particular it manages panel pages, but as it grows
it will be able to manage far more than just Panels.
For the moment, it includes the following tools:
* Plugins -- tools to make it easy for modules to let other modules implement
plugins from .inc files.
* Exportables -- tools to make it easier for modules to have objects that live
in database or live in code, such as 'default views'.
* AJAX responder -- tools to make it easier for the server to handle AJAX
requests and tell the client what to do with them.
* Form tools -- tools to make it easier for forms to deal with AJAX.
* Object caching -- tool to make it easier to edit an object across multiple
page requests and cache the editing work.
* Contexts -- the notion of wrapping objects in a unified wrapper and providing
an API to create and accept these contexts as input.
* Modal dialog -- tool to make it simple to put a form in a modal dialog.
* Dependent -- a simple form widget to make form items appear and disappear
based upon the selections in another item.
* Content -- pluggable content types used as panes in Panels and other modules
like Dashboard.
* Form wizard -- an API to make multi-step forms much easier.
* CSS tools -- tools to cache and sanitize CSS easily to make user-input CSS
safe.
This package provides the following Drupal modules:
* bulk_export
* ctools
* ctools_access_ruleset
* ctools_ajax_sample
* ctools_custom_content
* ctools_plugin_example
* page_manager
* stylizer
* term_depth
* views_content
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.7 release for security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 19 2015 Jared Smith <jsmith(a)fedoraproject.org> - 1.7-1
- Update to upstream 1.7 release for security fixes
- SA-CONTRIB-2015-079 details at https://www.drupal.org/node/2454909
- Full upstream changelog at https://www.drupal.org/node/2454883
* Sat Feb 7 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.6-1
- Updated to 1.6 (BZ #1187880)
* Sat Dec 13 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.5-1
- Updated to 1.5 (BZ #1166343)
- Removed RPM README b/c it only explained common Drupal workflow
- %license usage
- Spec cleanup
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Feb 14 2014 Peter Borsa <peter.borsa(a)gmail.com> - 1.4-1
- Update to upstream 1.4 release for bug and security fixes
- Upstream changelog for this release is available at https://drupal.org/node/2194551
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1203480 - drupal7-ctools-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1203480
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update drupal7-ctools' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------