--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6498
2015-04-21 13:43:24
--------------------------------------------------------------------------------
Name : rubygem-unf_ext
Product : Fedora 20
Version : 0.0.7.1
Release : 1.fc20
URL : http://github.com/knu/ruby-unf_ext
Summary : Unicode Normalization Form support library for CRuby
Description :
Unicode Normalization Form support library for CRuby.
--------------------------------------------------------------------------------
Update Information:
New version 0.0.7.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.0.7.1-1
- 0.0.7.1
* Fri Jan 16 2015 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.0.6-8
- F-22: Rebuild for ruby 2.2
* Fri Nov 14 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.0.6-7
- F-21 shoulda is now 3.5.0, fix test case
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.6-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.0.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Apr 22 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.0.6-4
- Use minitest/autorun instead of minitest/unit
* Tue Apr 22 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.0.6-3
- F-21: rebuild for ruby 2.1 / rubygems 2.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-unf_ext' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6458
2015-04-21 13:41:38
--------------------------------------------------------------------------------
Name : prosody
Product : Fedora 21
Version : 0.9.8
Release : 1.fc21
URL : https://prosody.im/
Summary : Flexible communications server for Jabber/XMPP
Description :
Prosody is a flexible communications server for Jabber/XMPP written in Lua.
It aims to be easy to use, and light on resources. For developers it aims
to be easy to extend and give a flexible system on which to rapidly develop
added functionality, or prototype new protocols.
--------------------------------------------------------------------------------
Update Information:
Prosody 0.9.8
=============
A summary of changes in this release:
High
----
* Ensure only valid UTF-8 is passed to libidn. It was found (CVE-2015-2059) that libidn can read beyond the boundaries of the provided buffer when an input string contains invalid UTF-8 sequences.
Systems where Prosody is compiled to use libICU are not affected by this issue.
Medium
------
* DNS: Fix traceback caused when DNS server IP is unroutable (issue 473)
* HTTP client: More robust handling of chunked encoding across packet boundaries
* Stanza router: Fix handling of 'error' <iq>'s with multiple children
Minor
-----
* c2s: Fix error reply when clients try to bind multiple resources on the same stream (issue 484)
* s2s: Ensure to/from attributes are always present on stream headers, even if empty (issue 468)
* Build scripts: Add --libdir option to ./configure to simplify building on some platforms
* Fix traceback in datamanager when used outside of Prosody (e.g. in some migration tools)
* mod_admin_telnet: Fix potential traceback in server:memory() command (issue 471)
* HTTP server: Improved debug logging
Prosody 0.9.7
=============
A summary of changes in this release:
* util.stanza: Don't XML-escape whitespace
* prosodyctl: Fix traceback in 'about' command with LuaRocks 2.2.0
Prosody 0.9.6
=============
Note: This release disables SSLv3 by default, which has been shown to be insecure when used by clients. Clients that only support SSLv3 will no longer be able to connect. There are not many of these nowadays, but they exist.
A summary of changes in this release:
* certmanager, net.http: Disable SSLv3 by default
* net.http.parser: Support status code 101 and allow handling of the received data by plugins
* util.filters: Ignore filters being added twice (fixes issues on removal, i.e. when some plugins are reloaded/unloaded)
* mod_s2s: Close offending s2s streams missing an 'id' attribute with a stream error instead of throwing an unhandled error
* Networking API: Add 'ondetach' callback for listener objects, to prevent leaks when connections have their listener changed
* core.stanza_router: Stricter validation of stanzas
* mod_admin_adhoc: Mark 'accountjids' field as required in 'end user sessions' command (thanks Lloyd)
* mod_admin_adhoc: Add required to field in user deletion form too
* net.dns: Avoid duplicate cache entries
* util.stanza: Escape newlines and tabs (
) when serializing stanzas.
* util/dataforms: Make sure we iterate over field tags only
* mod_s2s: Capitalize log message
* mod_pubsub: Fix error type of 'forbidden' (change from 'cancel' to 'auth')
Prosody 0.9.5
=============
A summary of changes in this release:
* C2S: Fix traceback if a client opens a stream to component, which could cause a crash in combination with some versions of LuaEvent
* C2S, S2S: Log received invalid stream headers
* S2S: Fix case where stream headers were sometimes sent twice
* DNS: Ensure all pending requests get notified of a timeout when looking up a record
* DNS: Fix duplicated cache insertions by limiting outstanding queries per name to one
* xmppstream: Disable LuaExpat's buffering
* xmppstream: Disable CharacterData merging after stream restarts
* xmppstream: Pass invalid stream headers to error handling
* Privacy lists: Correctly sort privacy list rules by order
* prosody: Check dependencies later in the startup sequence
* Config: Delay importing LuaFileSystem until needed by an Include line
* Config: Normalize VirtualHost and Component names
* prosodyctl: Normalize JIDs for adduser/passwd/deluser
* POSIX: Fix error reporting from disk space allocation
* POSIX: Verify that 'pidfile' is a string, show friendly error otherwise
* Dependency checking: Check that prosody is running under Lua 5.1. We don't currently support any other versions. (LuaJIT identifies as 5.1)
* Compliance: Reset stream ID when resetting stream
* Compression: Log compression setup errors
* Console: Fix commands for adding and replacing name servers
* Console MUC commands: Fix error when a non-existent host is entered
* Filters: Prevent filters from being added twice
* Network: Transfer all available data between linked sockets
* dataforms: Add support for XEP-0221: Data Forms Media Element
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 18 2015 Robert Scheck <robert(a)fedoraproject.org> 0.9.8-1
- Upgrade to 0.9.8 (#1152126)
* Sat Feb 14 2015 Robert Scheck <robert(a)fedoraproject.org> 0.9.7-1
- Upgrade to 0.9.7 (#985563, #1152126)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #985563 - Logging, conf.d and log rotation
https://bugzilla.redhat.com/show_bug.cgi?id=985563
[ 2 ] Bug #1091499 - Please use luajit instead of lua in F20+ (prosody requires lua 5.1; lua 5.2 is packaged)
https://bugzilla.redhat.com/show_bug.cgi?id=1091499
[ 3 ] Bug #1152126 - prosody-0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1152126
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update prosody' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-1803
2015-02-07 00:47:56
--------------------------------------------------------------------------------
Name : fcgi
Product : Fedora 21
Version : 2.4.0
Release : 26.fc21
URL : http://www.fastcgi.com/#TheDevKit
Summary : FastCGI development kit
Description :
FastCGI is a language independent, scalable, open extension to CGI that
provides high performance without the limitations of server specific APIs.
--------------------------------------------------------------------------------
Update Information:
Fix crash when too many connections are used
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2015 Till Maas <opensource(a)till.name> - 2.4.0-26
- Use %license
* Fri Feb 6 2015 Till Maas <opensource(a)till.name> - 2.4.0-25
- Fix crash when too many connections are used
- Make gcc build dependencies obvious for local builds
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1189958 - Stack smashing while using a lot of connections
https://bugzilla.redhat.com/show_bug.cgi?id=1189958
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fcgi' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6550
2015-04-21 13:45:37
--------------------------------------------------------------------------------
Name : mksh
Product : Fedora 21
Version : 50f
Release : 1.fc21
URL : https://www.mirbsd.org/mksh.htm
Summary : MirBSD enhanced version of the Korn Shell
Description :
mksh is the MirBSD enhanced version of the Public Domain Korn shell (pdksh),
a bourne-compatible shell which is largely similar to the original AT&T Korn
shell. It includes bug fixes and feature improvements in order to produce a
modern, robust shell good for interactive and especially script use, being a
bourne shell replacement, pdksh successor and an alternative to the C shell.
--------------------------------------------------------------------------------
Update Information:
R50f is a required security and bugfix release:
* Add a patch marker for vendor patch versioning to mksh.1
* SECURITY: make unset HISTFILE actually work
* Document some more issues with the current history code
* Remove some unused code
* RCSID-only sync with OpenBSD, for bogus and irrelevant changes
* Also disable field splitting for alias 'local= ypeset'
* Fix read -n-1 to not be identical to read -N-1
* Several fixes and improvements to lksh(1) and mksh(1) manpages
* More code (int → size_t), comment and testsuite fixes
* Make dot.mkshrc more robust (LP#1441853)
* Fix issues with IFS='' read, found by edualbus
* Fix integer overflows related to file descriptor parsing, found by Pawel Wylecial (LP#1440685); reduce memory usage for I/O redirs
* Document in the manpage how to set ±U according to the current locale settings via LANG/LC_* parameters (cf. Debian #782225)
* Some code cleanup and restructuring
* Handle number parsing and storing more carefully
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Robert Scheck <robert(a)fedoraproject.org> 50f-1
- Upgrade to 50f
* Thu Mar 19 2015 Robert Scheck <robert(a)fedoraproject.org> 50e-1
- Upgrade to 50e
- Apply https://fedoraproject.org/wiki/Features/UsrMove
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mksh' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6433
2015-04-21 13:39:58
--------------------------------------------------------------------------------
Name : dmapd
Product : Fedora 21
Version : 0.0.72
Release : 1.fc21
URL : http://www.flyn.org/projects/dmapd/
Summary : A server that provides DAAP and DPAP shares
Description :
The dmapd project provides a GObject-based, Open Source implementation
of DMAP sharing with the following features:
o Support for both DAAP and DPAP
o Support for realtime transcoding of media formats not natively
supported by clients
o Support for many metadata formats, such as those associated with Ogg
Vorbis and MP3 (e.g., ID3)
o Detection of video streams so that clients may play them as video
o Use of GStreamer to support a wide range of audio and video CODECs
o Caching of photograph thumbnails to avoid regenerating them each time
the server restarts
Dmapd runs on Linux and other POSIX operating systems. It has been
used on OpenWrt Linux-based systems with as little as 32MB of memory
to serve music, video and photograph libraries containing thousands of
files.
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 19 2015 W. Michael Petullo <mike[(a)]flyn.org> - 0.0.72-1
- New upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update dmapd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6224
2015-04-17 17:09:25
--------------------------------------------------------------------------------
Name : python-pelican
Product : Fedora 22
Version : 3.5.0
Release : 3.fc22
URL : http://getpelican.com/
Summary : A tool to generate a static blog from reStructuredText or Markdown input files
Description :
Pelican is a static site generator, written in Python_.
* Write your weblog entries directly with your editor of choice (vim!)
in reStructuredText_ or Markdown_
* Includes a simple CLI tool to ...
--------------------------------------------------------------------------------
Update Information:
change requirements for pytz
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-pelican' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6554
2015-04-21 13:45:45
--------------------------------------------------------------------------------
Name : sflphone
Product : Fedora 20
Version : 1.4.1
Release : 7.fc20
URL : http://sflphone.org/
Summary : SIP/IAX2 compatible enterprise-class software phone
Description :
SFLphone is a robust standards-compliant enterprise software phone,
for desktop and embedded systems. It is designed to handle
several hundreds of calls a day. It supports both SIP and IAX2
protocols.
--------------------------------------------------------------------------------
Update Information:
This update correctly disables video support also in the gnome client, fixing a crash when opening the preferences dialog.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213076 - [abrt] sflphone-gnome: fill_devices(): sflphone-client-gnome killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1213076
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sflphone' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-7031
2015-04-28 07:17:44
--------------------------------------------------------------------------------
Name : pdns-recursor
Product : Fedora 21
Version : 3.7.2
Release : 1.fc21
URL : http://powerdns.com
Summary : Modern, advanced and high performance recursing/non authoritative name server
Description :
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this
package if you need a dns cache for your network.
--------------------------------------------------------------------------------
Update Information:
- Update to 3.7.2
- CVE-2015-1868
External References:
https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2015 Morten Stevens <mstevens(a)imt-systems.com> - 3.7.2-1
- Update to 3.7.2
- CVE-2015-1868
* Thu Feb 12 2015 Morten Stevens <mstevens(a)imt-systems.com> - 3.7.1-1
- Update to 3.7.1
- Disable security status polling by default
* Tue Jan 27 2015 Petr Machata <pmachata(a)redhat.com> - 3.7.0-0.2.rc1
- Rebuild for boost 1.57.0
* Thu Jan 22 2015 Morten Stevens <mstevens(a)imt-systems.com> - 3.7.0-0.1.rc1
- Update to 3.7.0-rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213377 - CVE-2015-1868 pdns: Label decompression bug in PowerDNS can cause crashes on specific platforms
https://bugzilla.redhat.com/show_bug.cgi?id=1213377
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pdns-recursor' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6420
2015-04-21 13:39:28
--------------------------------------------------------------------------------
Name : spacefm
Product : Fedora 20
Version : 1.0.0
Release : 1.fc20
URL : http://ignorantguru.github.io/spacefm/
Summary : Multi-panel tabbed file and desktop manager
Description :
SpaceFM is a multi-panel tabbed file manager with built-in VFS, udev-based
device manager, customizable menu system, and bash integration.
--------------------------------------------------------------------------------
Update Information:
New version 1.0.0 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.0.0-1
- 1.0.0
* Thu Oct 2 2014 Rex Dieter <rdieter(a)fedoraproject.org> 0.9.4-4
- update mime scriptlets
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon Apr 7 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.9.4-1
- 0.9.4
* Mon Jan 27 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.9.3-1
- 0.9.3
* Tue Dec 10 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.9.2-1
- 0.9.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update spacefm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6252
2015-04-18 05:38:14
--------------------------------------------------------------------------------
Name : qt
Product : Fedora 21
Version : 4.8.6
Release : 28.fc21
URL : http://qt-project.org/
Summary : Qt toolkit
Description :
Qt is a software toolkit for developing applications.
This package contains base tools, like string, xml, and network
handling.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-1859, CVE-2015-1858, CVE-2015-1860
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 13 2015 Than Ngo <than(a)redhat.com> - 1:4.8.6-28
- bz#1210677, CVE-2015-1860 CVE-2015-1859 CVE-2015-1858
* Thu Mar 26 2015 Richard Hughes <rhughes(a)redhat.com> - 1:4.8.6-27
- Add an AppData file for the software center
* Fri Mar 20 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-26
- macros.qt4: fix _qt4_evr macro (missing : after epoch)
* Fri Feb 27 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-25
- DoS vulnerability in the BMP image handler (CVE-2015-0295)
* Mon Feb 16 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-24
- more gcc5 detection fixes, in particular, ensure same QT_BUILD_KEY as gcc4 for now
* Fri Feb 13 2015 Rex Dieter <rdieter(a)fedoraproject.org> - 1:4.8.6-23
- Qt: FTBFS with gcc5 (#1192464)
- Make Adwaita the default theme for applications running in the GNOME DE (#1192453)
* Wed Feb 11 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-22
- rebuild (gcc5)
* Thu Jan 29 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-21
- refresh boost/moc patch (QTBUG-22829)
* Sun Jan 18 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-20
- fix %pre scriptlet (#1183299)
* Sat Jan 17 2015 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-19
- ship /etc/xdg/qtchooser/4.conf alternative instead (of qt4.conf)
* Wed Nov 26 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-18
- omit previously-overlooked webkit bits (#1168259)
* Sun Nov 9 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-17
- Broken qmake_qt4 in /usr/lib/rpm/macros.d/macros.qt4 (#1161927)
* Mon Nov 3 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.6-16
- macros.qt4: standalone, improved %qmake_qt4 macro (sync'd with qt5 version)
* Sat Nov 1 2014 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 1:4.8.6-15
- sync system-clucene patch from qt5-qttools (some QDir::mkpath in QtCLucene)
* Sun Oct 26 2014 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 1:4.8.6-14
- build against the system clucene09-core (same patch as for qt5-qttools)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1210673 - CVE-2015-1858 qt: segmentation fault in qbmphandler.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1210673
[ 2 ] Bug #1210674 - CVE-2015-1859 qt: segmentation fault in qicohandler.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1210674
[ 3 ] Bug #1210675 - CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1210675
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------