---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-145
2005-02-14
---------------------------------------------------------------------
Product : Fedora Core 2
Name : xemacs
Version : 21.4.17
Release : 0.FC2
Summary : A different version of Emacs.
Description :
XEmacs is a highly customizable open source text editor and
application development system. It is protected under the
GNU Public License and related to other versions of Emacs,
in particular GNU Emacs. Its emphasis is on modern graphical
user interface support and an open software development
model, similar to Linux.
This package contains xemacs built for X Windows with MULE support.
---------------------------------------------------------------------
Update Information:
Update to 21.4.17 stable release, which also fixes the
CAN-2005-0100 movemail string format vulnerability.
---------------------------------------------------------------------
* Mon Feb 7 2005 Jens Petersen <petersen(a)redhat.com>
- update to 21.4.17
- fixes movemail format string vulnerability (CAN-2005-0100, 146705)
- xemacs-21.4.16-xutil-keysym-144601.patch no longer needed
* Tue Jan 25 2005 Jens Petersen <petersen(a)redhat.com> - 21.4.16-2
- workaround xorg-x11 issue with iso-level3-shift (Ville Skyttä, 144601)
* Mon Dec 13 2004 Jens Petersen <petersen(a)redhat.com> - 21.4.16-1
- update to new stable release
- no longer need configure-ppc-ldscript.patch and
xemacs-21.4.15-pui-120437.patch
- default to unified diff in .xemacs/init.el
* Thu Nov 18 2004 Jens Petersen <petersen(a)redhat.com> - 21.4.15-10
- show xemacs again in the desktop menu (132567)
* Mon Oct 18 2004 Jens Petersen <petersen(a)redhat.com> - 21.4.15-9
- fix etag alternatives removal when uninstalling (Karsten Hopp, 136137)
* Wed Oct 6 2004 Jens Petersen <petersen(a)redhat.com>
- xemacs-el no longer requires xemacs for -nox users
(Lars Hupfeldt Nielsen, 134479)
* Thu Sep 30 2004 Jens Petersen <petersen(a)redhat.com> - 21.4.15-8
- cleanup and update .desktop file
- make xemacs not appear in the desktop menu (Seth Nickell,132567)
- move the desktop file from -common to main package
- etags is now handled by alternatives (92256)
- no longer require ctags
- turn back on wnn support and add xemacs-21.4.15-wnnfix-128362.patch
(Yukihiro Nakai, 128362)
* Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Mon Jun 7 2004 Jens Petersen <petersen(a)redhat.com> - 21.4.15-6
- don't link with -export-dynamic on ia64 to stop dumped function pointers from
breaking (Roland McGrath & Jakub Jelinek, #106744)
- disable dynamic module support on ia64
- change the xemacs-info uninstall script from %postun to %preun and move
the post/preun install-info requires to xemacs-info
- simplify coding-system setup somewhat in site-start.el
- fix up the desktop file (Ville Skyttä, 123135)
- xemacs-nox now requires xemacs-sumo
- build without xfs since it seems to cause some problem with fonts missing
* Wed May 5 2004 Jens Petersen <petersen(a)redhat.com>
- move install-info requirement to xemacs-info
- drop unnecessary Canna-libs requirement
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
d97d1380dba413cbddedda2fa141394a SRPMS/xemacs-21.4.17-0.FC2.src.rpm
303906a89774a0bd34d84354859264c6 x86_64/xemacs-21.4.17-0.FC2.x86_64.rpm
104f72f402d2e83af7a6c067c9d37333 x86_64/xemacs-common-21.4.17-0.FC2.x86_64.rpm
0c90a50234004203cfe7e97c3d08ca8d x86_64/xemacs-nox-21.4.17-0.FC2.x86_64.rpm
07f12cb446ffa6c92aada9b2a3411680 x86_64/xemacs-el-21.4.17-0.FC2.x86_64.rpm
9cd30580fc3b572a0bd7defe19d3fa6b x86_64/xemacs-info-21.4.17-0.FC2.x86_64.rpm
18a67f26082b215599a07f2818bd434a
x86_64/debug/xemacs-debuginfo-21.4.17-0.FC2.x86_64.rpm
3c01ec4518483f5c39e1fefb7a896d60 i386/xemacs-21.4.17-0.FC2.i386.rpm
e640edccfe9d85c6d78b73ab00843662 i386/xemacs-common-21.4.17-0.FC2.i386.rpm
bbbef68286645419681a3e5625532d29 i386/xemacs-nox-21.4.17-0.FC2.i386.rpm
68f22b910cefcc42bc020e3331721661 i386/xemacs-el-21.4.17-0.FC2.i386.rpm
2a3bb0839ad8c3a0c173b5791cba6b8d i386/xemacs-info-21.4.17-0.FC2.i386.rpm
69fef3ec6d429bc548a2c602b0a919be i386/debug/xemacs-debuginfo-21.4.17-0.FC2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-144
2005-02-11
---------------------------------------------------------------------
Product : Fedora Core 3
Name : openoffice.org
Version : 1.1.3
Release : 5.5.0.fc3
Summary : OpenOffice.org comprehensive office suite.
Description :
OpenOffice.org is an Open Source, community-developed, multi-platform
office productivity suite. It includes the key desktop applications,
such as a word processor, spreadsheet, presentation manager, formula
editor and drawing program, with a user interface and feature set
similar to other office suites. Sophisticated and flexible,
OpenOffice.org also works transparently with a variety of file
formats, including Microsoft Office.
Usage: Simply type "ooffice" to run OpenOffice.org or select the
requested component (Writer, Calc, Draw, Impress, etc.) from your
desktop menu. The ooffice wrapper script will install a few files in
the user's home, if necessary.
The OpenOffice.org team hopes you enjoy working with OpenOffice.org!
Note: Non-.vor templates covered under the GPL license.
---------------------------------------------------------------------
Update Information:
This update resolves:
1) Calc cell-pasting bug
2) No printers bug
---------------------------------------------------------------------
* Sat Feb 5 2005 Dan Williams <dcbw(a)redhat.com> - 1.1.3-5
- Disable Evo2 connector on FC4 builds until we can get it ported to Evo 2.2
* Tue Feb 1 2005 Dan Williams <dcbw(a)redhat.com> - 1.1.3-4
- #rh146328# Fix printer discovery
* Tue Feb 1 2005 Dan Williams <dcbw(a)redhat.com> - 1.1.3-3
- #rh146580# Dump upstream Novell patch that shifts rows on paste in Calc
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
3d728ce5278ba08b406a6faf5b92b50a SRPMS/openoffice.org-1.1.3-5.5.0.fc3.src.rpm
4745a203c5674ff483ee36a77854a511 x86_64/openoffice.org-1.1.3-5.5.0.fc3.i386.rpm
8936ad9a73d38df29d7dc9909a9748c3 x86_64/openoffice.org-libs-1.1.3-5.5.0.fc3.i386.rpm
167e7c61738a687dbb533c63f4d84d0e x86_64/openoffice.org-i18n-1.1.3-5.5.0.fc3.i386.rpm
4745a203c5674ff483ee36a77854a511 i386/openoffice.org-1.1.3-5.5.0.fc3.i386.rpm
8936ad9a73d38df29d7dc9909a9748c3 i386/openoffice.org-libs-1.1.3-5.5.0.fc3.i386.rpm
167e7c61738a687dbb533c63f4d84d0e i386/openoffice.org-i18n-1.1.3-5.5.0.fc3.i386.rpm
cab5b72fd0e23258be59d87b5c4b8b21 i386/openoffice.org-kde-1.1.3-5.5.0.fc3.i386.rpm
ab46cc7c98658b590a6e8b7690a1faa5 i386/debug/openoffice.org-debuginfo-1.1.3-5.5.0.fc3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-140
2005-02-10
---------------------------------------------------------------------
Product : Fedora Core 3
Name : mod_python
Version : 3.1.3
Release : 5.2
Summary : An embedded Python interpreter for the Apache Web server.
Description :
Mod_python is a module that embeds the Python language interpreter within
the server, allowing Apache handlers to be written in Python.
Mod_python brings together the versatility of Python and the power of
the Apache Web server for a considerable boost in flexibility and
performance over the traditional CGI approach.
---------------------------------------------------------------------
Update Information:
Graham Dumpleton discovered a flaw affecting the publisher handler of
mod_python, used to make objects inside modules callable via URL.
A remote user could visit a carefully crafted URL that would gain access to
objects that should not be visible, leading to an information leak. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0088 to this issue.
This update includes a patch which fixes this issue.
---------------------------------------------------------------------
* Mon Jan 31 2005 Joe Orton <jorton(a)redhat.com> 3.1.3-5.2
- add security fix for CVE CAN-2005-0088 (#146655)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
2f8f27de0ed294fb0df1dbcc4b459d1b SRPMS/mod_python-3.1.3-5.2.src.rpm
14821a1a3b89506fddc51b338f93a800 x86_64/mod_python-3.1.3-5.2.x86_64.rpm
07653b192939283ac05b094f6963af43 x86_64/debug/mod_python-debuginfo-3.1.3-5.2.x86_64.rpm
5908a986650071f30ab180724d3a461b i386/mod_python-3.1.3-5.2.i386.rpm
24f5c62133e734b1b2b109d3fe19a83b i386/debug/mod_python-debuginfo-3.1.3-5.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-139
2005-02-10
---------------------------------------------------------------------
Product : Fedora Core 2
Name : mod_python
Version : 3.1.3
Release : 1.fc2.2
Summary : An embedded Python interpreter for the Apache Web server.
Description :
Mod_python is a module that embeds the Python language interpreter within
the server, allowing Apache handlers to be written in Python.
Mod_python brings together the versatility of Python and the power of
the Apache Web server for a considerable boost in flexibility and
performance over the traditional CGI approach.
---------------------------------------------------------------------
Update Information:
Graham Dumpleton discovered a flaw affecting the publisher handler of
mod_python, used to make objects inside modules callable via URL.
A remote user could visit a carefully crafted URL that would gain access to
objects that should not be visible, leading to an information leak. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0088 to this issue.
This update includes a patch which fixes this issue.
---------------------------------------------------------------------
* Mon Jan 31 2005 Joe Orton <jorton(a)redhat.com> 3.1.3-1.fc2.2
- add security fix for CVE CAN-2005-0088 (#146656)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
cf23151b04a255effb2a138aaceb94f6 SRPMS/mod_python-3.1.3-1.fc2.2.src.rpm
59f9678fa03b908065cd3944bf7808a7 x86_64/mod_python-3.1.3-1.fc2.2.x86_64.rpm
d07a9c2cc5a95feb3ff830dd20d25ef5 x86_64/debug/mod_python-debuginfo-3.1.3-1.fc2.2.x86_64.rpm
e660f1f9839de749e7818cdaba49a2fb i386/mod_python-3.1.3-1.fc2.2.i386.rpm
24ff630cfbdbda45808def9370f06231 i386/debug/mod_python-debuginfo-3.1.3-1.fc2.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-131
2005-02-10
---------------------------------------------------------------------
Product : Fedora Core 2
Name : mailman
Version : 2.1.5
Release : 8.fc2
Summary : Mailing list manager with built in Web access.
Description :
Mailman is software to help manage email discussion lists, much like
Majordomo and Smartmail. Unlike most similar products, Mailman gives
each mailing list a webpage, and allows users to subscribe,
unsubscribe, etc. over the Web. Even the list manager can administer
his or her list entirely from the Web. Mailman also integrates most
things people want to do with mailing lists, including archiving, mail
<-> news gateways, and so on.
Documentation can be found in: /usr/share/doc/mailman-2.1.5
---------------------------------------------------------------------
Update Information:
There is a critical security flaw in Mailman 2.1.5 which will allow
attackers to read arbitrary files.
The extent of the vulnerability depends on what version of Apache
(httpd) you are running, and (possibly) how you have configured your
web server. It is believed the vulnerability is not available when
Mailman is paired with a version of Apache >= 2.0, however earlier
versions of Apache, e.g. version 1.3, will allow the exploit when
executing a Mailman CGI script. All versions of Fedora have shipped
with the later 2.0 version of Apache and thus if you are running a
Fedora release you are not likely to be vulnerable to the exploit
unless you have explicitly downgraded the version of your web
server. However, installing this version of mailman with a security
patch represents a prudent safeguard.
This issue has been assigned CVE number CAN-2005-0202.
The bug report associated with this is:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=147343
The errata associated with this for RHEL releases is:
http://rhn.redhat.com/errata/RHSA-2005-136.html
For additional piece of mind, it is recommended that you regenerate
your list member passwords. Instructions on how to do this, and more
information about this vulnerability are available here:
http://www.list.org/security.html
---------------------------------------------------------------------
* Tue Feb 08 2005 John Dennis <jdennis(a)redhat.com> - 3:2.1.5-8.fc2
- fix security vulnerability CAN-2005-0202, errata RHSA-2005:136, bug #147343
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
4664674e6a2f8cf94457f87541f6fdee SRPMS/mailman-2.1.5-8.fc2.src.rpm
c66f11090b5c284d5e5d0b804e844788 x86_64/mailman-2.1.5-8.fc2.x86_64.rpm
9f79a60e105043526ea9fe0b951c4310 x86_64/debug/mailman-debuginfo-2.1.5-8.fc2.x86_64.rpm
c9537949ed7ee6c9a96316d72277bbe4 i386/mailman-2.1.5-8.fc2.i386.rpm
52e1f9a0ec60bc34c84f52f8442355ac i386/debug/mailman-debuginfo-2.1.5-8.fc2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
--
John Dennis <jdennis(a)redhat.com>
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-132
2005-02-10
---------------------------------------------------------------------
Product : Fedora Core 3
Name : mailman
Version : 2.1.5
Release : 30.fc3
Summary : Mailing list manager with built in Web access.
Description :
Mailman is software to help manage email discussion lists, much like
Majordomo and Smartmail. Unlike most similar products, Mailman gives
each mailing list a webpage, and allows users to subscribe,
unsubscribe, etc. over the Web. Even the list manager can administer
his or her list entirely from the Web. Mailman also integrates most
things people want to do with mailing lists, including archiving, mail
<-> news gateways, and so on.
Documentation can be found in: /usr/share/doc/mailman-2.1.5
---------------------------------------------------------------------
Update Information:
There is a critical security flaw in Mailman 2.1.5 which will allow
attackers to read arbitrary files.
The extent of the vulnerability depends on what version of Apache
(httpd) you are running, and (possibly) how you have configured your
web server. It is believed the vulnerability is not available when
Mailman is paired with a version of Apache >= 2.0, however earlier
versions of Apache, e.g. version 1.3, will allow the exploit when
executing a Mailman CGI script. All versions of Fedora have shipped
with the later 2.0 version of Apache and thus if you are running a
Fedora release you are not likely to be vulnerable to the exploit
unless you have explicitly downgraded the version of your web
server. However, installing this version of mailman with a security
patch represents a prudent safeguard.
This issue has been assigned CVE number CAN-2005-0202.
The bug report associated with this is:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=147343
The errata associated with this for RHEL releases is:
http://rhn.redhat.com/errata/RHSA-2005-136.html
For additional piece of mind, it is recommended that you regenerate
your list member passwords. Instructions on how to do this, and more
information about this vulnerability are available here:
http://www.list.org/security.html
---------------------------------------------------------------------
* Tue Feb 08 2005 John Dennis <jdennis(a)redhat.com> - 3:2.1.5-30.fc3
- fix security vulnerability CAN-2005-0202, errata RHSA-2005:137, bug #147343
* Tue Nov 09 2004 John Dennis <jdennis(a)redhat.com> 3:2.1.5-29.fc3
- fix bug #137863, buildroot path in .pyc files
* Mon Nov 08 2004 John Dennis <jdennis(a)redhat.com> 3:2.1.5-27
- rebuild to fix bug #137863, python embeds build root in .pyc files
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
457b27f2f15c18b8de0e5fcff977d171 SRPMS/mailman-2.1.5-30.fc3.src.rpm
da424d3d5227650d843654acb22e23c3 x86_64/mailman-2.1.5-30.fc3.x86_64.rpm
e408bc622edf77f04680ead0cdae36cf x86_64/debug/mailman-debuginfo-2.1.5-30.fc3.x86_64.rpm
ec264fec376555f5af505f9b320020c6 i386/mailman-2.1.5-30.fc3.i386.rpm
fad64f3280cfdb4fcdd4520cf79a16b9 i386/debug/mailman-debuginfo-2.1.5-30.fc3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
--
John Dennis <jdennis(a)redhat.com>
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-138
2005-02-09
---------------------------------------------------------------------
Product : Fedora Core 3
Name : gpdf
Version : 2.8.2
Release : 4.2
Summary : viewer for Portable Document Format (PDF) files for GNOME
Description :
This is GPdf, a viewer for Portable Document Format (PDF) files for
GNOME. GPdf is based on the Xpdf program and uses additional GNOME
libraries for better desktop integration.
GPdf includes the gpdf application, a Bonobo control for PDF display
which can be embedded in Nautilus, and a Nautilus property page for
PDF files.
---------------------------------------------------------------------
* Wed Feb 09 2005 Marco Pesenti Gritti <mpg(a)redhat.com> 2.8.2-4.2
- Update gpdf-2.8.2-overflow-fix.patch
* Wed Feb 09 2005 Marco Pesenti Gritti <mpg(a)redhat.com> 2.8.2-3.2
- Fix CAN-2004-0888 fix. Bug #147518
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
56306405b73627d4fbe6819db408b23f SRPMS/gpdf-2.8.2-4.2.src.rpm
15a54e8a58ee9878432dc57562a3cb56 x86_64/gpdf-2.8.2-4.2.x86_64.rpm
84b73a2d9927622ec78b462404acd890 x86_64/debug/gpdf-debuginfo-2.8.2-4.2.x86_64.rpm
f63300b10628b1f92f6035f37d472492 i386/gpdf-2.8.2-4.2.i386.rpm
5c62784eef0279841a4c69814c6f1436 i386/debug/gpdf-debuginfo-2.8.2-4.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-137
2005-02-09
---------------------------------------------------------------------
Product : Fedora Core 2
Name : gpdf
Version : 2.8.2
Release : 4.1
Summary : viewer for Portable Document Format (PDF) files for GNOME
Description :
This is GPdf, a viewer for Portable Document Format (PDF) files for
GNOME. GPdf is based on the Xpdf program and uses additional GNOME
libraries for better desktop integration.
GPdf includes the gpdf application, a Bonobo control for PDF display
which can be embedded in Nautilus, and a Nautilus property page for
PDF files.
---------------------------------------------------------------------
* Wed Feb 09 2005 Marco Pesenti Gritti <mpg(a)redhat.com> 2.8.2-4.1
- Fix CAN-2004-0888 fix. Bug #147518
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
dd7997e6c5c57cc952bffbd35c7b54d3 SRPMS/gpdf-2.8.2-4.1.src.rpm
b6929aa080dd5c06d30422fa289f26a9 x86_64/gpdf-2.8.2-4.1.x86_64.rpm
f057aac1b50ad3fca31d5c49f409c059 x86_64/debug/gpdf-debuginfo-2.8.2-4.1.x86_64.rpm
9a5c7a737746c5a3d44d4ca82c4eb2e4 i386/gpdf-2.8.2-4.1.i386.rpm
613df3808898d61d090003dba4761838 i386/debug/gpdf-debuginfo-2.8.2-4.1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------