epel-package-announce March 2018

epel-package-announce@lists.fedoraproject.org

1 participants
315 discussions

[SECURITY] Fedora EPEL 7 Update: php-simplesamlphp-saml2-2.3.8-1.el7
by updates＠fedoraproject.org 29 Mar '18

29 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-7150fa5dce 2018-03-29 15:42:14.125031 -------------------------------------------------------------------------------- Name : php-simplesamlphp-saml2 Product : Fedora EPEL 7 Version : 2.3.8 Release : 1.el7 URL : https://github.com/simplesamlphp/saml2 Summary : SAML2 PHP library from SimpleSAMLphp Description : A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp [1], used by OpenConext [2]. This library started as a collaboration between UNINETT [3] and SURFnet [4] but everyone is invited to contribute. Autoloader: /usr/share/php/SAML2/autoload.php [1] https://www.simplesamlphp.org/ [2] https://www.openconext.org/ [3] https://www.uninett.no/ [4] https://www.surfnet.nl/ -------------------------------------------------------------------------------- Update Information: * [SSPSA 201803-01 / CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01 / CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA 201801-01 / CVE-2018-6519](https://simplesamlphp.org/security/201801-01) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the signature validation utilities https://bugzilla.redhat.com/show_bug.cgi?id=1553357 [ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass https://bugzilla.redhat.com/show_bug.cgi?id=1553352 [ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in xs:DateTime timestamp in SAML2 library https://bugzilla.redhat.com/show_bug.cgi?id=1542244 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-simplesamlphp-saml2' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: php-simplesamlphp-saml2_1-1.10.6-1.el7
by updates＠fedoraproject.org 29 Mar '18

29 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-635348eab4 2018-03-29 15:42:14.124965 -------------------------------------------------------------------------------- Name : php-simplesamlphp-saml2_1 Product : Fedora EPEL 7 Version : 1.10.6 Release : 1.el7 URL : https://github.com/simplesamlphp/saml2 Summary : SAML2 PHP library from SimpleSAMLphp (version 1) Description : A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp [1], used by OpenConext [2]. This library started as a collaboration between UNINETT [3] and SURFnet [4] but everyone is invited to contribute. Autoloader: /usr/share/php/SAML2_1/autoload.php [1] https://www.simplesamlphp.org/ [2] https://www.openconext.org/ [3] https://www.uninett.no/ [4] https://www.surfnet.nl/ -------------------------------------------------------------------------------- Update Information: * [SSPSA 201803-01 / CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01 / CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA 201801-01 / CVE-2018-6519](https://simplesamlphp.org/security/201801-01) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the signature validation utilities https://bugzilla.redhat.com/show_bug.cgi?id=1553357 [ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass https://bugzilla.redhat.com/show_bug.cgi?id=1553352 [ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in xs:DateTime timestamp in SAML2 library https://bugzilla.redhat.com/show_bug.cgi?id=1542244 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-simplesamlphp-saml2_1' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: freshmaker-0.0.13-1.el7
by updates＠fedoraproject.org 28 Mar '18

28 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-c79ca6a585 2018-03-29 01:42:57.607774 -------------------------------------------------------------------------------- Name : freshmaker Product : Fedora EPEL 7 Version : 0.0.13 Release : 1.el7 URL : https://pagure.io/freshmaker Summary : Freshmaker is a service scheduling rebuilds of artifacts as new content becomes available. Description : Freshmaker is a service scheduling rebuilds of artifacts as new content becomes available. -------------------------------------------------------------------------------- Update Information: Update to new version 0.0.13. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update freshmaker' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: xml-security-c-1.7.3-4.el7
by updates＠fedoraproject.org 28 Mar '18

28 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-0903d1a99e 2018-03-29 01:42:57.607688 -------------------------------------------------------------------------------- Name : xml-security-c Product : Fedora EPEL 7 Version : 1.7.3 Release : 4.el7 URL : http://santuario.apache.org/c/ Summary : C++ Implementation of W3C security standards for XML Description : The xml-security-c library is a C++ implementation of the XML Digital Signature specification. The library makes use of the Apache XML project's Xerces-C XML Parser and Xalan-C XSLT processor. The latter is used for processing XPath and XSLT transforms. -------------------------------------------------------------------------------- Update Information: I've been asked to push xml-security-c-1.7.3 to EPEL7. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update xml-security-c' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: jansson-2.11-1.el6
by updates＠fedoraproject.org 28 Mar '18

28 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-13f9eadb7c 2018-03-29 01:35:46.007591 -------------------------------------------------------------------------------- Name : jansson Product : Fedora EPEL 6 Version : 2.11 Release : 1.el6 URL : http://www.digip.org/jansson/ Summary : C library for encoding, decoding and manipulating JSON data Description : Small library for parsing and writing JSON documents. -------------------------------------------------------------------------------- Update Information: Update to Jansson 2.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1554392 - Please update jansson to version 2.11 in RHEL https://bugzilla.redhat.com/show_bug.cgi?id=1554392 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update jansson' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: nmh-1.7.1-3.el6
by updates＠fedoraproject.org 27 Mar '18

27 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-eae0de1c6b 2018-03-27 19:05:24.060197 -------------------------------------------------------------------------------- Name : nmh Product : Fedora EPEL 6 Version : 1.7.1 Release : 3.el6 URL : http://savannah.nongnu.org/projects/nmh Summary : A capable MIME-email-handling system with a command-line interface Description : nmh is a collection of single-purpose programs that send, receive, show, search, and otherwise manipulate emails, including MIME. They combine well with other Unix programs, easing the development of custom shorthand commands as shell scripts. Optional GUI interfaces are provided by the external xmh and exmh projects. nmh is a descendant of the RAND MH, Mail Handler, project. -------------------------------------------------------------------------------- Update Information: Replaced /usr/bin/vi with /bin/vi. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update nmh' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: python-antlr-2.7.7-5.el6
by updates＠fedoraproject.org 27 Mar '18

27 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-2a2c9fbdde 2018-03-27 19:05:24.060174 -------------------------------------------------------------------------------- Name : python-antlr Product : Fedora EPEL 6 Version : 2.7.7 Release : 5.el6 URL : https://www.antlr2.org/ Summary : Python runtime support for ANTLR-generated parsers Description : ANTLR, ANother Tool for Language Recognition, (formerly PCCTS) is a language tool that provides a framework for constructing recognizers, compilers, and translators from grammatical descriptions containing C++ or Java actions [You can use PCCTS 1.xx to generate C-based parsers]. This package contains the Python runtime support for ANTLR-generated parsers. -------------------------------------------------------------------------------- Update Information: This package contains the Python runtime support for ANTLR-generated parsers. **NOTE:** this EL6-only package supplements RHEL6 package antlr, which is missing the Python runtime support. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1189171 - Review Request: python-antlr - Python runtime support for ANTLR-generated parsers https://bugzilla.redhat.com/show_bug.cgi?id=1189171 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-antlr' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: fedfind-4.1.1-1.el6
by updates＠fedoraproject.org 27 Mar '18

27 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-8f1ce5d95e 2018-03-27 19:05:24.060151 -------------------------------------------------------------------------------- Name : fedfind Product : Fedora EPEL 6 Version : 4.1.1 Release : 1.el6 URL : https://pagure.io/fedora-qa/fedfind Summary : Fedora compose and image finder Description : Fedora Finder finds Fedora. For now, that means it finds Fedora images - for stable releases, milestone pre-releases, candidate composes, and nightly composes. The fedfind package provides a simple CLI for showing image URLs. -------------------------------------------------------------------------------- Update Information: This update provides a new release of fedfind, which adapts the `expected_images` for a few `Release` classes, and `const.SUBVARIANTS`, for the renaming of the `Atomic` and `Workstation Ostree` (sub)variants in Fedora 28+ (see [this pull request](https://pagure.io/pungi-fedora/pull-request/498)). -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fedfind' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: php-pecl-krb5-1.1.2-1.el6
by updates＠fedoraproject.org 27 Mar '18

27 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-9eb81e5ec3 2018-03-27 19:05:24.060128 -------------------------------------------------------------------------------- Name : php-pecl-krb5 Product : Fedora EPEL 6 Version : 1.1.2 Release : 1.el6 URL : http://pecl.php.net/package/krb5 Summary : Kerberos authentification extension Description : Features: + An interface for maintaining credential caches (KRB5CCache), that can be used for authenticating against a kerberos5 realm + Bindings for nearly the complete GSSAPI (RFC2744) + The administrative interface (KADM5) + Support for HTTP Negotiate authentication via GSSAPI -------------------------------------------------------------------------------- Update Information: **Version 1.1.2** - [BUG] Add missing function entry termination for TLData - [CLEANUP] Don't return garbage on hard class initialization errors, don't throw from create_object handlers -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-pecl-krb5' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: libabigail-1.2-1.el6
by updates＠fedoraproject.org 27 Mar '18

27 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-b6e67b83c8 2018-03-27 19:05:24.060105 -------------------------------------------------------------------------------- Name : libabigail Product : Fedora EPEL 6 Version : 1.2 Release : 1.el6 URL : https://sourceware.org/libabigail/ Summary : Set of ABI analysis tools Description : The libabigail package comprises seven command line utilities: abidiff, kmidiff, abipkgdiff, abicompat, abidw, abilint and fedabipkgdiff. The abidiff command line tool compares the ABI of two ELF shared libraries and emits meaningful textual reports about changes impacting exported functions, variables and their types. Simarly, the kmidiff compares the kernel module interface of two Linux kernels. abipkgdiff compares the ABIs of ELF binaries contained in two packages. abicompat checks if a subsequent version of a shared library is still compatible with an application that is linked against it. abidw emits an XML representation of the ABI of a given ELF shared library. abilint checks that a given XML representation of the ABI of a shared library is correct. fedabipkgdiff interacts with the Fedora Build System over the internet to let the user compare the ABI of Fedora packages without having to download them manually. Install libabigail if you need to compare the ABI of ELF shared libraries. -------------------------------------------------------------------------------- Update Information: Update to upstream 1.2 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update libabigail' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce March 2018