The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.el6https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el6https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el6https://admin.fedoraproject.org/updates/syslog-ng-3.2.4-1.el6https://admin.fedoraproject.org/updates/unbound-1.4.4-3.el6https://admin.fedoraproject.org/updates/drupal6-6.22-1.el6https://admin.fedoraproject.org/updates/drupal7-7.2-1.el6https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6https://admin.fedoraproject.org/updates/exim-4.72-2.el6https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
GitPython-0.2.0-0.6.beta1.el6
Macaulay2-1.3.1-9.el6
bfast-0.6.5a-1.el6
fedora-packager-0.5.9.2-1.el6
iverilog-0.9.20110317-1.el6
php-pecl-mailparse-2.1.5-2.el6
reptyr-0.3-1.el6
testdisk-6.12-2.el6
Details about builds:
================================================================================
GitPython-0.2.0-0.6.beta1.el6 (FEDORA-EPEL-2011-3438)
Python Git Library
--------------------------------------------------------------------------------
Update Information:
Fixes bugs parsing git config files
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Jesse Keating <jkeating(a)redhat.com> - 0.2.0-0.6.beta1
- Patches for indented parts of git config files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #703960 - [PATCH] Handle indented comments in git config files
https://bugzilla.redhat.com/show_bug.cgi?id=703960
[ 2 ] Bug #706218 - fedpkg fails to parse my gitconfig
https://bugzilla.redhat.com/show_bug.cgi?id=706218
--------------------------------------------------------------------------------
================================================================================
Macaulay2-1.3.1-9.el6 (FEDORA-EPEL-2011-3446)
System for algebraic geometry and commutative algebra
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.1-9
- Typo in INFO_FILES (#708086)
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.3.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Jun 30 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.1-7
- BR: cddlib-static (#609698)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #708086 - Typo in INFO_FILES
https://bugzilla.redhat.com/show_bug.cgi?id=708086
--------------------------------------------------------------------------------
================================================================================
bfast-0.6.5a-1.el6 (FEDORA-EPEL-2011-3437)
Blat-like Fast Accurate Search Tool
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Adam Huffman <bloch(a)verdurin.com> - 0.6.5a-1
- new upstream release
- remove obsolete file deletion
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.4e-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedora-packager-0.5.9.2-1.el6 (FEDORA-EPEL-2011-3439)
Tools for setting up a fedora maintainer environment
--------------------------------------------------------------------------------
Update Information:
Bugfix update and remove the branch checking stuff
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Jesse Keating <jkeating(a)redhat.com> - 0.5.9.2-1
- Strip the .py off of fixbranches (jkeating)
- Unconditionally check for new branch style (jkeating)
- Stop setting push.default (#705468) (jkeating)
- Make sure packages are built before lint (#702893) (jkeating)
- Except more build submission errors (#702235) (jkeating)
- Move the fixbranches.py script out of the $PATH (#698646) (jkeating)
- fedpkg: Support branch completion on non-default remotes (tmz)
- fedpkg: Update bash completion for new branch names (tmz)
- Fix retiring a package with a provided message (#701626) (jkeating)
- add arm specific and s390 specific packages so they get sent to the right
place (dennis)
- initial go at using consistent targets across all targets dist-rawhide is
still used for master branch (dennis)
- only pass in a target arch to local builds when specified on the command line
some arches notably x86, arm and sparc dont build for the base arch you end
up with .i386 .arm or .sparc rpms when you really want something else
(dennis)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705468 - Stop setting push.default = tracking in fedpkg
https://bugzilla.redhat.com/show_bug.cgi?id=705468
[ 2 ] Bug #702893 - [abrt] fedpkg-0.5.9.0-1.fc14: __init__.py:1653:lint:OSError: [Errno 2] No such file or directory: '/home/jeff/fedpkg/gourmet/noarch'
https://bugzilla.redhat.com/show_bug.cgi?id=702893
[ 3 ] Bug #702235 - [abrt] fedpkg-0.5.9.0-1.fc15: urllib2.py:1161:do_open:URLError: <urlopen error [Errno 110] Connection timed out>
https://bugzilla.redhat.com/show_bug.cgi?id=702235
[ 4 ] Bug #698646 - fedpkg - annoying bash completion
https://bugzilla.redhat.com/show_bug.cgi?id=698646
[ 5 ] Bug #701626 - [abrt] fedpkg-0.5.9.0-1.fc14: __init__.py:828:retire:UnboundLocalError: local variable 'msg' referenced before assignment
https://bugzilla.redhat.com/show_bug.cgi?id=701626
[ 6 ] Bug #697240 - [abrt] fedpkg-0.5.7.0-1.fc15: __init__.py:774:retire:UnboundLocalError: local variable 'msg' referenced before assignment
https://bugzilla.redhat.com/show_bug.cgi?id=697240
--------------------------------------------------------------------------------
================================================================================
iverilog-0.9.20110317-1.el6 (FEDORA-EPEL-2011-3445)
Icarus Verilog is a verilog compiler and simulator
--------------------------------------------------------------------------------
Update Information:
Release 0.9.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 28 2011 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 0.9.20110317-1
- new stable upstream release 0.9.4
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.20100928-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660314 - [abrt] iverilog-0.9.20100928-1.fc14: Process /usr/lib/ivl/ivl was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=660314
--------------------------------------------------------------------------------
================================================================================
php-pecl-mailparse-2.1.5-2.el6 (FEDORA-EPEL-2011-3435)
PHP PECL package for parsing and working with email messages
--------------------------------------------------------------------------------
Update Information:
Mailparse is an extension for parsing and working with email messages. It can deal with rfc822 and rfc2045 (MIME) compliant messages.
--------------------------------------------------------------------------------
================================================================================
reptyr-0.3-1.el6 (FEDORA-EPEL-2011-3444)
Attach a running process to a new terminal
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 0.3.
https://github.com/nelhage/reptyr/blob/master/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 28 2011 Ville Skyttä <ville.skytta(a)iki.fi> - 0.3-1
- Update to 0.3.
--------------------------------------------------------------------------------
================================================================================
testdisk-6.12-2.el6 (FEDORA-EPEL-2011-3436)
Tool to check and undelete partition, PhotoRec recovers lost files
--------------------------------------------------------------------------------
Update Information:
TestDisk and PhotoRec 6.12 now supports exFAT: partition recovery was possible since 6.11, now you can list files from a exFAT filesystem, copy files, undelete files, recover data from the "free" space...
More than 60 new file formats have been added to PhotoRec.
It's also possible to create your own custom signature to recover more file formats.
PhotoRec now generates Digital Forensics XML reports.
TestDisk and PhotoRec 6.12 now supports exFAT: partition recovery was possible since 6.11, now you can list files from a exFAT filesystem, copy files, undelete files, recover data from the "free" space...
More than 60 new file formats have been added to PhotoRec.
It's also possible to create your own custom signature to recover
more file formats. PhotoRec now generates Digital Forensics XML reports.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 28 2011 Christophe Grenier <grenier(a)cgsecurity.org> - 6.12.2
- rebuild for ntfs-3g-2011.4.12
* Thu May 12 2011 Christophe Grenier <grenier(a)cgsecurity.org> - 6.12.1
- Update to latest version
* Mon May 9 2011 Christophe Grenier <grenier(a)cgsecurity.org> 6.11-7
- rebuild with new ntfs-3g
- Move binaries to /usr/bin (#628050)
--------------------------------------------------------------------------------
The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/rt3-3.6.11-1.el5https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el5https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el5https://admin.fedoraproject.org/updates/drupal7-7.2-1.el5https://admin.fedoraproject.org/updates/drupal6-6.22-1.el5https://admin.fedoraproject.org/updates/unbound-1.4.4-3.el5https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5https://admin.fedoraproject.org/updates/cacti-0.8.7g-1.el5.1https://admin.fedoraproject.org/updates/viewvc-1.1.11-2.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
bfast-0.6.5a-1.el5
fedora-packager-0.5.9.2-1.el5
iverilog-0.9.20110317-1.el5
libguestfs-1.2.14-3.el5
reptyr-0.3-1.el5
Details about builds:
================================================================================
bfast-0.6.5a-1.el5 (FEDORA-EPEL-2011-3442)
Blat-like Fast Accurate Search Tool
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Adam Huffman <bloch(a)verdurin.com> - 0.6.5a-1
- new upstream release
- remove obsolete file deletion
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.4e-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedora-packager-0.5.9.2-1.el5 (FEDORA-EPEL-2011-3443)
Tools for setting up a fedora maintainer environment
--------------------------------------------------------------------------------
Update Information:
Bugfix update and remove the branch checking stuff
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Jesse Keating <jkeating(a)redhat.com> - 0.5.9.2-1
- Strip the .py off of fixbranches (jkeating)
- Unconditionally check for new branch style (jkeating)
- Stop setting push.default (#705468) (jkeating)
- Make sure packages are built before lint (#702893) (jkeating)
- Except more build submission errors (#702235) (jkeating)
- Move the fixbranches.py script out of the $PATH (#698646) (jkeating)
- fedpkg: Support branch completion on non-default remotes (tmz)
- fedpkg: Update bash completion for new branch names (tmz)
- Fix retiring a package with a provided message (#701626) (jkeating)
- add arm specific and s390 specific packages so they get sent to the right
place (dennis)
- initial go at using consistent targets across all targets dist-rawhide is
still used for master branch (dennis)
- only pass in a target arch to local builds when specified on the command line
some arches notably x86, arm and sparc dont build for the base arch you end
up with .i386 .arm or .sparc rpms when you really want something else
(dennis)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705468 - Stop setting push.default = tracking in fedpkg
https://bugzilla.redhat.com/show_bug.cgi?id=705468
[ 2 ] Bug #702893 - [abrt] fedpkg-0.5.9.0-1.fc14: __init__.py:1653:lint:OSError: [Errno 2] No such file or directory: '/home/jeff/fedpkg/gourmet/noarch'
https://bugzilla.redhat.com/show_bug.cgi?id=702893
[ 3 ] Bug #702235 - [abrt] fedpkg-0.5.9.0-1.fc15: urllib2.py:1161:do_open:URLError: <urlopen error [Errno 110] Connection timed out>
https://bugzilla.redhat.com/show_bug.cgi?id=702235
[ 4 ] Bug #698646 - fedpkg - annoying bash completion
https://bugzilla.redhat.com/show_bug.cgi?id=698646
[ 5 ] Bug #701626 - [abrt] fedpkg-0.5.9.0-1.fc14: __init__.py:828:retire:UnboundLocalError: local variable 'msg' referenced before assignment
https://bugzilla.redhat.com/show_bug.cgi?id=701626
[ 6 ] Bug #697240 - [abrt] fedpkg-0.5.7.0-1.fc15: __init__.py:774:retire:UnboundLocalError: local variable 'msg' referenced before assignment
https://bugzilla.redhat.com/show_bug.cgi?id=697240
--------------------------------------------------------------------------------
================================================================================
iverilog-0.9.20110317-1.el5 (FEDORA-EPEL-2011-3440)
Icarus Verilog is a verilog compiler and simulator
--------------------------------------------------------------------------------
Update Information:
Release 0.9.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 28 2011 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 0.9.20110317-1
- new stable upstream release 0.9.4
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.20100928-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660314 - [abrt] iverilog-0.9.20100928-1.fc14: Process /usr/lib/ivl/ivl was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=660314
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.2.14-3.el5 (FEDORA-EPEL-2011-3284)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
Rebuild because of ntfs-3g dependencies change.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #703290 - ntfs-3g fails to update when libguestfs is present
https://bugzilla.redhat.com/show_bug.cgi?id=703290
--------------------------------------------------------------------------------
================================================================================
reptyr-0.3-1.el5 (FEDORA-EPEL-2011-3441)
Attach a running process to a new terminal
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 0.3.
https://github.com/nelhage/reptyr/blob/master/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 28 2011 Ville Skyttä <ville.skytta(a)iki.fi> - 0.3-1
- Update to 0.3.
--------------------------------------------------------------------------------
The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.el6https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el6https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el6https://admin.fedoraproject.org/updates/syslog-ng-3.2.4-1.el6https://admin.fedoraproject.org/updates/unbound-1.4.4-3.el6https://admin.fedoraproject.org/updates/drupal6-6.22-1.el6https://admin.fedoraproject.org/updates/drupal7-7.2-1.el6https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6https://admin.fedoraproject.org/updates/exim-4.72-2.el6https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
amtterm-1.3-1.el6
facter-1.5.9-1.el6
fastx_toolkit-0.0.13-4.el6
perl-Devel-PatchPerl-0.36-1.el6
perlbrew-0.22-1.el6
Details about builds:
================================================================================
amtterm-1.3-1.el6 (FEDORA-EPEL-2011-3427)
Serial-over-lan (sol) client for Intel AMT
--------------------------------------------------------------------------------
Update Information:
Update to 1.3, bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Gerd Hoffmann <kraxel(a)redhat.com> - 1.3-1
- update to version 1.3
--------------------------------------------------------------------------------
================================================================================
facter-1.5.9-1.el6 (FEDORA-EPEL-2011-3424)
Ruby module for collecting simple facts about a host operating system
--------------------------------------------------------------------------------
Update Information:
Facter 1.5.9 is a maintenance release containing fixes and updates.
This release contains several fixes, and updated facts, as well as adding some new facts. These include enhancements with Facter & EC2, additional memory facts for OS X, and better Ruby 1.9 support.
A patch from Orion Poplawski to address upstream issue 7682 (http://projects.puppetlabs.com/issues/7682) has been applied. This should improve support for EPEL users on Scientific Linux.
For the full list of changes refer to the upstream release announcement:
http://groups.google.com/group/puppet-announce/browse_thread/thread/b4eb40f…
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Todd Zullinger <tmz(a)pobox.com> - 1.5.9-1
- Update to 1.5.9
- Improve Scientific Linux support, courtesy of Orion Poplawski (upstream #7682)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fastx_toolkit-0.0.13-4.el6 (FEDORA-EPEL-2011-3428)
Tools to process short-reads FASTA/FASTQ files
--------------------------------------------------------------------------------
================================================================================
perl-Devel-PatchPerl-0.36-1.el6 (FEDORA-EPEL-2011-3426)
Patch perl source à la Devel::PPPort's buildperl.pl
--------------------------------------------------------------------------------
Update Information:
This update fixes chmod of hints files, making it only set 644 instead of 755 (the 5.13.x branch of perls introduced 'porting/exec-bit.t' which is failing when files that shouldn't have execute bit in the source tree do).
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Iain Arnell <iarnell(a)gmail.com> 0.36-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perlbrew-0.22-1.el6 (FEDORA-EPEL-2011-3432)
Manage perl installations in your $HOME
--------------------------------------------------------------------------------
Update Information:
This update includes numerous bugfixes and enhancements.
0.22:
* Fix ccache support on Linux with bash
* `install` command no longer clobbers existing installations
* New commands: uninstall, alias, self-upgrade
* See more detail in http://perlbrew.pl/Release-0.22.html
0.21:
* Let version numbers alone mean installation names. For example, 5.12.3 means perl-5.12.3
* Fixed `perlbrew install <URL>` that might install to a wrong path
* Fixed the --as option
* Improve `perlbrew list` command output
* Improve `perlbrew install` command. Now it takes a local .tar.gz filename
* See more detail in http://perlbrew.pl/Release-0.21.html
0.20:
* stop when user specified an invalid perl version that cannot be found on cpan
* specialized version installation: perlbrew install perl-blead / <URL>
* fix `perlbrew install /path/to/git/src/dir`
* See more detail in http://www.perlbrew.pl/Release-0.20.html
0.19:
* Auto run 'perlbrew init' after an install (or upgrade)
* Symlink dev versions of executables. For example,'perl5.13.11' to 'perl', 'prove5.13.11' to 'prove'
* Automatically apply patches necessary to make older perls build again on modern platforms with the help of Devel::PatchPerl.
* A command `perlbrew available` to list recently available perls to build
0.18:
* Fixed an issue when bash set `noclobber` option, which breaks the creation of ~/.perlbrew/init.
* A simple `perlbrew clean` command to clean build dir
* Delegate `-j` arg value to `make test_harness`
* $HOME is replaced with "~" in many messages
0.17:
* Fix `perlbrew use` to work even if we are switched to a specific version
* Fix `perlbrew env` to use current version, sets PERLBREW_PERL and proper PATH
* Feature: `perlbrew use` shows current version in use
* Feature: `perlbrew switch /path/to/special/perl name-of-special-perl` names for adhoc perl's
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Iain Arnell <iarnell(a)gmail.com> 0.22-1
- update to latest upstream version
* Wed May 11 2011 Iain Arnell <iarnell(a)gmail.com> 0.20-1
- update to latest upstream version
* Wed Mar 16 2011 Iain Arnell <iarnell(a)gmail.com> 0.18-1
- update to latest upstream version
* Thu Mar 10 2011 Iain Arnell <iarnell(a)gmail.com> 0.17-1
- update to latest upstream version
--------------------------------------------------------------------------------
The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/rt3-3.6.11-1.el5https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el5https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el5https://admin.fedoraproject.org/updates/drupal7-7.2-1.el5https://admin.fedoraproject.org/updates/drupal6-6.22-1.el5https://admin.fedoraproject.org/updates/unbound-1.4.4-3.el5https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5https://admin.fedoraproject.org/updates/cacti-0.8.7g-1.el5.1https://admin.fedoraproject.org/updates/viewvc-1.1.11-2.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
389-ds-base-1.2.9-0.1.a1.el5
cacti-0.8.7g-1.el5.1
facter-1.5.9-1.el5
fastx_toolkit-0.0.13-4.el5
libcdio-0.78.2-6.el5
perl-Devel-PatchPerl-0.36-1.el5
perlbrew-0.22-1.el5
samtools-0.1.16-1.el5
Details about builds:
================================================================================
389-ds-base-1.2.9-0.1.a1.el5 (FEDORA-EPEL-2011-3422)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Auto Membership
More Coverity fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.2.9-0.1.a1
- 389-ds-base-1.2.9.a1
- Auto Membership
- More Coverity fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #708096 - Tracking bug for 389 Directory Server 1.2.9
https://bugzilla.redhat.com/show_bug.cgi?id=708096
--------------------------------------------------------------------------------
================================================================================
cacti-0.8.7g-1.el5.1 (FEDORA-EPEL-2011-3423)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
Update EL5 to 0.8.7g. Release notes available at http://cacti.net/release_notes_0_8_7g.php
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Ken Dreyer <ktdreyer(a)ktdreyer.com> 0.8.7g-1.el5.1
- Bump dist for koji.
* Mon Jul 12 2010 Mike McGrath <mmcgrath(a)redhat.com> 0.8.7g-1
- Upstream released new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #690581 - Security fixes in Cacti v0.8.7g for EPEL4/5
https://bugzilla.redhat.com/show_bug.cgi?id=690581
--------------------------------------------------------------------------------
================================================================================
facter-1.5.9-1.el5 (FEDORA-EPEL-2011-3425)
Ruby module for collecting simple facts about a host operating system
--------------------------------------------------------------------------------
Update Information:
Facter 1.5.9 is a maintenance release containing fixes and updates.
This release contains several fixes, and updated facts, as well as adding some new facts. These include enhancements with Facter & EC2, additional memory facts for OS X, and better Ruby 1.9 support.
A patch from Orion Poplawski to address upstream issue 7682 (http://projects.puppetlabs.com/issues/7682) has been applied. This should improve support for EPEL users on Scientific Linux.
For the full list of changes refer to the upstream release announcement:
http://groups.google.com/group/puppet-announce/browse_thread/thread/b4eb40f…
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Todd Zullinger <tmz(a)pobox.com> - 1.5.9-1
- Update to 1.5.9
- Improve Scientific Linux support, courtesy of Orion Poplawski (upstream #7682)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fastx_toolkit-0.0.13-4.el5 (FEDORA-EPEL-2011-3421)
Tools to process short-reads FASTA/FASTQ files
--------------------------------------------------------------------------------
================================================================================
libcdio-0.78.2-6.el5 (FEDORA-EPEL-2011-3434)
CD-ROM input and control library
--------------------------------------------------------------------------------
Update Information:
This update fixes one buffer overflow error in cdda-player and several other unprotected sprintf calls.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2011 Honza Horak <hhorak(a)redhat.com> - 0.78.2-6
- fixed #705673 buffer overflow and other unprotected sprintf calls
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705673 - [abrt] libcdio-0.82-2.fc13: _IO_str_chk_overflow: Process /usr/bin/cdda-player was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=705673
--------------------------------------------------------------------------------
================================================================================
perl-Devel-PatchPerl-0.36-1.el5 (FEDORA-EPEL-2011-3430)
Patch perl source à la Devel::PPPort's buildperl.pl
--------------------------------------------------------------------------------
Update Information:
This update fixes chmod of hints files, making it only set 644 instead of 755 (the 5.13.x branch of perls introduced 'porting/exec-bit.t' which is failing when files that shouldn't have execute bit in the source tree do).
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Iain Arnell <iarnell(a)gmail.com> 0.36-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perlbrew-0.22-1.el5 (FEDORA-EPEL-2011-3429)
Manage perl installations in your $HOME
--------------------------------------------------------------------------------
Update Information:
This update includes numerous bugfixes and enhancements.
0.22:
* Fix ccache support on Linux with bash
* `install` command no longer clobbers existing installations
* New commands: uninstall, alias, self-upgrade
* See more detail in http://perlbrew.pl/Release-0.22.html
0.21:
* Let version numbers alone mean installation names. For example, 5.12.3 means perl-5.12.3
* Fixed `perlbrew install <URL>` that might install to a wrong path
* Fixed the --as option
* Improve `perlbrew list` command output
* Improve `perlbrew install` command. Now it takes a local .tar.gz filename
* See more detail in http://perlbrew.pl/Release-0.21.html
0.20:
* stop when user specified an invalid perl version that cannot be found on cpan
* specialized version installation: perlbrew install perl-blead / <URL>
* fix `perlbrew install /path/to/git/src/dir`
* See more detail in http://www.perlbrew.pl/Release-0.20.html
0.19:
* Auto run 'perlbrew init' after an install (or upgrade)
* Symlink dev versions of executables. For example,'perl5.13.11' to 'perl', 'prove5.13.11' to 'prove'
* Automatically apply patches necessary to make older perls build again on modern platforms with the help of Devel::PatchPerl.
* A command `perlbrew available` to list recently available perls to build
0.18:
* Fixed an issue when bash set `noclobber` option, which breaks the creation of ~/.perlbrew/init.
* A simple `perlbrew clean` command to clean build dir
* Delegate `-j` arg value to `make test_harness`
* $HOME is replaced with "~" in many messages
0.17:
* Fix `perlbrew use` to work even if we are switched to a specific version
* Fix `perlbrew env` to use current version, sets PERLBREW_PERL and proper PATH
* Feature: `perlbrew use` shows current version in use
* Feature: `perlbrew switch /path/to/special/perl name-of-special-perl` names for adhoc perl's
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Iain Arnell <iarnell(a)gmail.com> 0.22-1
- update to latest upstream version
* Wed May 11 2011 Iain Arnell <iarnell(a)gmail.com> 0.20-1
- update to latest upstream version
* Wed Mar 16 2011 Iain Arnell <iarnell(a)gmail.com> 0.18-1
- update to latest upstream version
* Thu Mar 10 2011 Iain Arnell <iarnell(a)gmail.com> 0.17-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
samtools-0.1.16-1.el5 (FEDORA-EPEL-2011-3431)
Tools for nucleotide sequence alignments in the SAM format
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release
New samtools-devel subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 10 2011 Rasmus Ory Nielsen <ron(a)ron.dk> - 0.1.16-1
- Updated to 0.1.16
* Mon Apr 11 2011 Rasmus Ory Nielsen <ron(a)ron.dk> - 0.1.15-1
- Updated to 0.1.15
* Wed Mar 23 2011 Rasmus Ory Nielsen <ron(a)ron.dk> - 0.1.14-1
- Updated to 0.1.14
- Build shared library instead of static
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.1.12a-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Dec 6 2010 Rasmus Ory Nielsen <ron(a)ron.dk> - 0.1.12a-2
- Fixed header files directory ownership
- Added missing header files
* Mon Dec 6 2010 Rasmus Ory Nielsen <ron(a)ron.dk> - 0.1.12a-1
- Updated to 0.1.12a
* Tue Nov 23 2010 Adam Huffman <bloch(a)verdurin.com> - 0.1.8-4
- cleanup man page handling
* Sun Oct 10 2010 Adam Huffman <bloch(a)verdurin.com> - 0.1.8-4
- fix attributes for devel subpackage
- fix library location
* Sun Sep 26 2010 Adam Huffman <bloch(a)verdurin.com> - 0.1.8-3
- put headers and library in standard locations
* Mon Sep 6 2010 Adam Huffman <bloch(a)verdurin.com> - 0.1.8-2
- merge Rasmus' latest changes (0.1.8 update)
- include bam.h and libbam.a for Bio-SamTools compilation
- move bam.h and libbam.a to single directory
- put bgzf.h, khash.h and faidx.h in the same place
- add -fPIC to CFLAGS to make Bio-SamTools happy
- add virtual Provide as per guidelines
--------------------------------------------------------------------------------
The following Fedora EPEL 4 Security updates need testing:
https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el4https://admin.fedoraproject.org/updates/viewvc-1.1.11-2.el4
The following builds have been pushed to Fedora EPEL 4 updates-testing
facter-1.5.9-1.el4
Details about builds:
================================================================================
facter-1.5.9-1.el4 (FEDORA-EPEL-2011-3433)
Ruby module for collecting simple facts about a host operating system
--------------------------------------------------------------------------------
Update Information:
Facter 1.5.9 is a maintenance release containing fixes and updates.
This release contains several fixes, and updated facts, as well as adding some new facts. These include enhancements with Facter & EC2, additional memory facts for OS X, and better Ruby 1.9 support.
A patch from Orion Poplawski to address upstream issue 7682 (http://projects.puppetlabs.com/issues/7682) has been applied. This should improve support for EPEL users on Scientific Linux.
For the full list of changes refer to the upstream release announcement:
http://groups.google.com/group/puppet-announce/browse_thread/thread/b4eb40f…
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Todd Zullinger <tmz(a)pobox.com> - 1.5.9-1
- Update to 1.5.9
- Improve Scientific Linux support, courtesy of Orion Poplawski (upstream #7682)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/rt3-3.6.11-1.el5https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el5https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el5https://admin.fedoraproject.org/updates/drupal7-7.2-1.el5https://admin.fedoraproject.org/updates/drupal6-6.22-1.el5https://admin.fedoraproject.org/updates/unbound-1.4.4-3.el5https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5https://admin.fedoraproject.org/updates/viewvc-1.1.11-2.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
autoconf-archive-2011.04.12-1.el5
drupal6-6.22-1.el5
drupal7-7.2-1.el5
nagios-plugins-check-updates-1.4.14-1.el5
unbound-1.4.4-3.el5
Details about builds:
================================================================================
autoconf-archive-2011.04.12-1.el5 (FEDORA-EPEL-2011-3413)
The Autoconf Macro Archive
--------------------------------------------------------------------------------
Update Information:
The GNU Autoconf Archive is a collection of more than 450 macros for GNU Autoconf that have been contributed as free software by friendly supporters of the cause from all over the Internet.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #663925 - Review Request: autoconf-archive - The Autoconf Macro Archive
https://bugzilla.redhat.com/show_bug.cgi?id=663925
--------------------------------------------------------------------------------
================================================================================
drupal6-6.22-1.el5 (FEDORA-EPEL-2011-3408)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2011-001
* Project: Drupal core [1]
* Version: 6.x, 7.x
* Date: 2011-May-25
* Security risk: Critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass, Cross Site Scripting
-------- DESCRIPTION
---------------------------------------------------------
Multiple vulnerabilities and weaknesses were discovered in Drupal.
.... Reflected cross site scripting vulnerability in error handler
A reflected cross site scripting vulnerability was discovered in Drupal's
error handler. Drupal displays PHP errors in the messages area, and a
specially crafted URL can cause malicious scripts to be injected into the
message. The issue can be mitigated by disabling on-screen error display at
admin/settings/error-reporting. This is the recommended setting for
production sites.
This issue affects Drupal 6.x only.
.... Cross site scripting vulnerability in Color module
When using re-colorable themes, color inputs are not sanitized. Malicious
color values can be used to insert arbitrary CSS and script code. Successful
exploitation requires the "Administer themes" permission.
This issue affects Drupal 6.x and 7.x.
.... Access bypass in File module
When using private files in combination with a node access module, the File
module allows unrestricted access to private files.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.x before version 7.1.
* Drupal 6.x before version 6.21.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.1 [3] or 7.2 [4].
* If you are running Drupal 6.x then upgrade to Drupal 6.21 [5] or 6.22. [6]
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.1
[7] and Drupal 7.2 [8] or Drupal 6.21 [9] and Drupal 6.22 [10].
See the release announcement [11] for more information.
See also the Drupal core [12] project page.
-------- REPORTED BY
---------------------------------------------------------
* The reflected cross site scripting vulnerability was reported by Heine
Deelstra [13] (*).
* The Color module cross site scripting vulnerability was reported by Kasper
Lindgaard, Secunia Research.
* The File access bypass was reported by Hubert Lecorche, and Peter Bex
[14].
-------- FIXED BY
------------------------------------------------------------
* The reflected cross site scripting vulnerability was fixed by Alan
Smithee.
* The Color module cross site scripting vulnerability was fixed by Stéphane
Corlosquet [15] (*), Heine Deelstra [16] (*), and Peter Wolanin [17] (*).
* The File access bypass was fixed by Heine Deelstra [18] (*).
(*) Member of the Drupal security team.
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [19].
Learn more about the Drupal Security team and their policies [20], writing
secure code for Drupal [21], and securing your site [22].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1168910
[4] http://drupal.org/node/1168946
[5] http://drupal.org/node/1168908
[6] http://drupal.org/node/1168950
[7] http://drupal.org/node/1168910
[8] http://drupal.org/node/1168946
[9] http://drupal.org/node/1168908
[10] http://drupal.org/node/1168950
[11] http://drupal.org/drupal-7.2
[12] http://drupal.org/project/drupal
[13] http://drupal.org/user/17943
[14] https://drupal.org/user/309898
[15] http://drupal.org/user/52142
[16] http://drupal.org/user/17943
[17] http://drupal.org/user/49851
[18] http://drupal.org/user/17943
[19] http://drupal.org/contact
[20] http://drupal.org/security-team
[21] http://drupal.org/writing-secure-code
[22] http://drupal.org/security/secure-configuration
_______________________________________________
Security-news mailing list
Security-news(a)drupal.org
http://lists.drupal.org/mailman/listinfo/security-news
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Jon Ciesla <limb(a)jcomserv.net> - 6.22-1
- Update to 6.22, SA-CORE-2011-001.
--------------------------------------------------------------------------------
================================================================================
drupal7-7.2-1.el5 (FEDORA-EPEL-2011-3418)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2011-001
* Project: Drupal core [1]
* Version: 6.x, 7.x
* Date: 2011-May-25
* Security risk: Critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass, Cross Site Scripting
-------- DESCRIPTION
---------------------------------------------------------
Multiple vulnerabilities and weaknesses were discovered in Drupal.
.... Reflected cross site scripting vulnerability in error handler
A reflected cross site scripting vulnerability was discovered in Drupal's
error handler. Drupal displays PHP errors in the messages area, and a
specially crafted URL can cause malicious scripts to be injected into the
message. The issue can be mitigated by disabling on-screen error display at
admin/settings/error-reporting. This is the recommended setting for
production sites.
This issue affects Drupal 6.x only.
.... Cross site scripting vulnerability in Color module
When using re-colorable themes, color inputs are not sanitized. Malicious
color values can be used to insert arbitrary CSS and script code. Successful
exploitation requires the "Administer themes" permission.
This issue affects Drupal 6.x and 7.x.
.... Access bypass in File module
When using private files in combination with a node access module, the File
module allows unrestricted access to private files.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.x before version 7.1.
* Drupal 6.x before version 6.21.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.1 [3] or 7.2 [4].
* If you are running Drupal 6.x then upgrade to Drupal 6.21 [5] or 6.22. [6]
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.1
[7] and Drupal 7.2 [8] or Drupal 6.21 [9] and Drupal 6.22 [10].
See the release announcement [11] for more information.
See also the Drupal core [12] project page.
-------- REPORTED BY
---------------------------------------------------------
* The reflected cross site scripting vulnerability was reported by Heine
Deelstra [13] (*).
* The Color module cross site scripting vulnerability was reported by Kasper
Lindgaard, Secunia Research.
* The File access bypass was reported by Hubert Lecorche, and Peter Bex
[14].
-------- FIXED BY
------------------------------------------------------------
* The reflected cross site scripting vulnerability was fixed by Alan
Smithee.
* The Color module cross site scripting vulnerability was fixed by Stéphane
Corlosquet [15] (*), Heine Deelstra [16] (*), and Peter Wolanin [17] (*).
* The File access bypass was fixed by Heine Deelstra [18] (*).
(*) Member of the Drupal security team.
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [19].
Learn more about the Drupal Security team and their policies [20], writing
secure code for Drupal [21], and securing your site [22].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1168910
[4] http://drupal.org/node/1168946
[5] http://drupal.org/node/1168908
[6] http://drupal.org/node/1168950
[7] http://drupal.org/node/1168910
[8] http://drupal.org/node/1168946
[9] http://drupal.org/node/1168908
[10] http://drupal.org/node/1168950
[11] http://drupal.org/drupal-7.2
[12] http://drupal.org/project/drupal
[13] http://drupal.org/user/17943
[14] https://drupal.org/user/309898
[15] http://drupal.org/user/52142
[16] http://drupal.org/user/17943
[17] http://drupal.org/user/49851
[18] http://drupal.org/user/17943
[19] http://drupal.org/contact
[20] http://drupal.org/security-team
[21] http://drupal.org/writing-secure-code
[22] http://drupal.org/security/secure-configuration
_______________________________________________
Security-news mailing list
Security-news(a)drupal.org
http://lists.drupal.org/mailman/listinfo/security-news
Require php 5.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Jon Ciesla <limb(a)jcomserv.net> - 7.2-1
- New upstream, SA-CORE-2011-001.
* Thu May 12 2011 Jon Ciesla <limb(a)jcomserv.net> - 7.0-4.1
- Corrected php Requires to 5.3, BZ 704319.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #704319 - drupal7 should require php53 instead of php (including php sub-packages)
https://bugzilla.redhat.com/show_bug.cgi?id=704319
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-check-updates-1.4.14-1.el5 (FEDORA-EPEL-2011-3419)
A Nagios plugin to check if Red Hat or Fedora system is up-to-date
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.14
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 25 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.14-1
- Update to 1.4.14.
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.13-1
- Update to 1.4.13.
- Fixes a build problem in EPEL5 (test script failure).
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.12-1
- Update to 1.4.12.
- Upstream added a test suite.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
unbound-1.4.4-3.el5 (FEDORA-EPEL-2011-3415)
Validating, recursive, and caching DNS(SEC) resolver
--------------------------------------------------------------------------------
Update Information:
Denial of Service fix: CVE-2011-1922.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 25 2011 Paul Wouters <paul(a)xelerance.com> - 1.4.4-3
- Applied patch for CVE-2011-1922 DoS vulnerability
* Tue Oct 26 2010 Paul Wouters <paul(a)xelerance.com> - 1.4.4-2
- Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines
(see comments in inbound.conf)
* Mon May 31 2010 Paul Wouters <paul(a)xelerance.com> - 1.4.4-1
- Upgraded to 1.4.4 with svn patches
- Obsolete dnssec-conf to ensure it is de-installed
--------------------------------------------------------------------------------
The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.el6https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el6https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el6https://admin.fedoraproject.org/updates/syslog-ng-3.2.4-1.el6https://admin.fedoraproject.org/updates/unbound-1.4.4-3.el6https://admin.fedoraproject.org/updates/drupal6-6.22-1.el6https://admin.fedoraproject.org/updates/drupal7-7.2-1.el6https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6https://admin.fedoraproject.org/updates/exim-4.72-2.el6https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
autoconf-archive-2011.04.12-1.el6
drupal6-6.22-1.el6
drupal7-7.2-1.el6
livecd-tools-13.2-1.el6
nagios-plugins-check-updates-1.4.14-1.el6
syslog-ng-3.2.4-1.el6
unbound-1.4.4-3.el6
Details about builds:
================================================================================
autoconf-archive-2011.04.12-1.el6 (FEDORA-EPEL-2011-3414)
The Autoconf Macro Archive
--------------------------------------------------------------------------------
Update Information:
The GNU Autoconf Archive is a collection of more than 450 macros for GNU Autoconf that have been contributed as free software by friendly supporters of the cause from all over the Internet.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #663925 - Review Request: autoconf-archive - The Autoconf Macro Archive
https://bugzilla.redhat.com/show_bug.cgi?id=663925
--------------------------------------------------------------------------------
================================================================================
drupal6-6.22-1.el6 (FEDORA-EPEL-2011-3412)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2011-001
* Project: Drupal core [1]
* Version: 6.x, 7.x
* Date: 2011-May-25
* Security risk: Critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass, Cross Site Scripting
-------- DESCRIPTION
---------------------------------------------------------
Multiple vulnerabilities and weaknesses were discovered in Drupal.
.... Reflected cross site scripting vulnerability in error handler
A reflected cross site scripting vulnerability was discovered in Drupal's
error handler. Drupal displays PHP errors in the messages area, and a
specially crafted URL can cause malicious scripts to be injected into the
message. The issue can be mitigated by disabling on-screen error display at
admin/settings/error-reporting. This is the recommended setting for
production sites.
This issue affects Drupal 6.x only.
.... Cross site scripting vulnerability in Color module
When using re-colorable themes, color inputs are not sanitized. Malicious
color values can be used to insert arbitrary CSS and script code. Successful
exploitation requires the "Administer themes" permission.
This issue affects Drupal 6.x and 7.x.
.... Access bypass in File module
When using private files in combination with a node access module, the File
module allows unrestricted access to private files.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.x before version 7.1.
* Drupal 6.x before version 6.21.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.1 [3] or 7.2 [4].
* If you are running Drupal 6.x then upgrade to Drupal 6.21 [5] or 6.22. [6]
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.1
[7] and Drupal 7.2 [8] or Drupal 6.21 [9] and Drupal 6.22 [10].
See the release announcement [11] for more information.
See also the Drupal core [12] project page.
-------- REPORTED BY
---------------------------------------------------------
* The reflected cross site scripting vulnerability was reported by Heine
Deelstra [13] (*).
* The Color module cross site scripting vulnerability was reported by Kasper
Lindgaard, Secunia Research.
* The File access bypass was reported by Hubert Lecorche, and Peter Bex
[14].
-------- FIXED BY
------------------------------------------------------------
* The reflected cross site scripting vulnerability was fixed by Alan
Smithee.
* The Color module cross site scripting vulnerability was fixed by Stéphane
Corlosquet [15] (*), Heine Deelstra [16] (*), and Peter Wolanin [17] (*).
* The File access bypass was fixed by Heine Deelstra [18] (*).
(*) Member of the Drupal security team.
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [19].
Learn more about the Drupal Security team and their policies [20], writing
secure code for Drupal [21], and securing your site [22].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1168910
[4] http://drupal.org/node/1168946
[5] http://drupal.org/node/1168908
[6] http://drupal.org/node/1168950
[7] http://drupal.org/node/1168910
[8] http://drupal.org/node/1168946
[9] http://drupal.org/node/1168908
[10] http://drupal.org/node/1168950
[11] http://drupal.org/drupal-7.2
[12] http://drupal.org/project/drupal
[13] http://drupal.org/user/17943
[14] https://drupal.org/user/309898
[15] http://drupal.org/user/52142
[16] http://drupal.org/user/17943
[17] http://drupal.org/user/49851
[18] http://drupal.org/user/17943
[19] http://drupal.org/contact
[20] http://drupal.org/security-team
[21] http://drupal.org/writing-secure-code
[22] http://drupal.org/security/secure-configuration
_______________________________________________
Security-news mailing list
Security-news(a)drupal.org
http://lists.drupal.org/mailman/listinfo/security-news
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Jon Ciesla <limb(a)jcomserv.net> - 6.22-1
- Update to 6.22, SA-CORE-2011-001.
--------------------------------------------------------------------------------
================================================================================
drupal7-7.2-1.el6 (FEDORA-EPEL-2011-3417)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2011-001
* Project: Drupal core [1]
* Version: 6.x, 7.x
* Date: 2011-May-25
* Security risk: Critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass, Cross Site Scripting
-------- DESCRIPTION
---------------------------------------------------------
Multiple vulnerabilities and weaknesses were discovered in Drupal.
.... Reflected cross site scripting vulnerability in error handler
A reflected cross site scripting vulnerability was discovered in Drupal's
error handler. Drupal displays PHP errors in the messages area, and a
specially crafted URL can cause malicious scripts to be injected into the
message. The issue can be mitigated by disabling on-screen error display at
admin/settings/error-reporting. This is the recommended setting for
production sites.
This issue affects Drupal 6.x only.
.... Cross site scripting vulnerability in Color module
When using re-colorable themes, color inputs are not sanitized. Malicious
color values can be used to insert arbitrary CSS and script code. Successful
exploitation requires the "Administer themes" permission.
This issue affects Drupal 6.x and 7.x.
.... Access bypass in File module
When using private files in combination with a node access module, the File
module allows unrestricted access to private files.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.x before version 7.1.
* Drupal 6.x before version 6.21.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.1 [3] or 7.2 [4].
* If you are running Drupal 6.x then upgrade to Drupal 6.21 [5] or 6.22. [6]
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.1
[7] and Drupal 7.2 [8] or Drupal 6.21 [9] and Drupal 6.22 [10].
See the release announcement [11] for more information.
See also the Drupal core [12] project page.
-------- REPORTED BY
---------------------------------------------------------
* The reflected cross site scripting vulnerability was reported by Heine
Deelstra [13] (*).
* The Color module cross site scripting vulnerability was reported by Kasper
Lindgaard, Secunia Research.
* The File access bypass was reported by Hubert Lecorche, and Peter Bex
[14].
-------- FIXED BY
------------------------------------------------------------
* The reflected cross site scripting vulnerability was fixed by Alan
Smithee.
* The Color module cross site scripting vulnerability was fixed by Stéphane
Corlosquet [15] (*), Heine Deelstra [16] (*), and Peter Wolanin [17] (*).
* The File access bypass was fixed by Heine Deelstra [18] (*).
(*) Member of the Drupal security team.
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [19].
Learn more about the Drupal Security team and their policies [20], writing
secure code for Drupal [21], and securing your site [22].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1168910
[4] http://drupal.org/node/1168946
[5] http://drupal.org/node/1168908
[6] http://drupal.org/node/1168950
[7] http://drupal.org/node/1168910
[8] http://drupal.org/node/1168946
[9] http://drupal.org/node/1168908
[10] http://drupal.org/node/1168950
[11] http://drupal.org/drupal-7.2
[12] http://drupal.org/project/drupal
[13] http://drupal.org/user/17943
[14] https://drupal.org/user/309898
[15] http://drupal.org/user/52142
[16] http://drupal.org/user/17943
[17] http://drupal.org/user/49851
[18] http://drupal.org/user/17943
[19] http://drupal.org/contact
[20] http://drupal.org/security-team
[21] http://drupal.org/writing-secure-code
[22] http://drupal.org/security/secure-configuration
_______________________________________________
Security-news mailing list
Security-news(a)drupal.org
http://lists.drupal.org/mailman/listinfo/security-news
Require php 5.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Jon Ciesla <limb(a)jcomserv.net> - 7.2-1
- New upstream, SA-CORE-2011-001.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #704319 - drupal7 should require php53 instead of php (including php sub-packages)
https://bugzilla.redhat.com/show_bug.cgi?id=704319
--------------------------------------------------------------------------------
================================================================================
livecd-tools-13.2-1.el6 (FEDORA-EPEL-2011-3411)
Tools for building live CDs
--------------------------------------------------------------------------------
Update Information:
Sync'd up el6 release with f13.
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-check-updates-1.4.14-1.el6 (FEDORA-EPEL-2011-3410)
A Nagios plugin to check if Red Hat or Fedora system is up-to-date
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.14.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 25 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.14-1
- Update to 1.4.14.
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.13-1
- Update to 1.4.13.
- Fixes a build problem in EPEL5 (test script failure).
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.12-1
- Update to 1.4.12.
- Upstream added a test suite.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706924 - RHEL6 problem, unknown Linux distribution
https://bugzilla.redhat.com/show_bug.cgi?id=706924
--------------------------------------------------------------------------------
================================================================================
syslog-ng-3.2.4-1.el6 (FEDORA-EPEL-2011-3416)
Next-generation syslog server
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.4.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-1
- Updated the homepage URL
- Syslog-ng data directory in %{_datadir}/%{name}
- Include the main library header files in the devel subpackage
* Fri May 13 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-0
- Update to 3.2.4
- No need to create the directory /etc/syslog-ng in the install section
- Enable the test suite (but excluding the SQL and SSL tests)
--------------------------------------------------------------------------------
================================================================================
unbound-1.4.4-3.el6 (FEDORA-EPEL-2011-3420)
Validating, recursive, and caching DNS(SEC) resolver
--------------------------------------------------------------------------------
Update Information:
Denial of Service fix: CVE-2011-1922.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 25 2011 Paul Wouters <paul(a)xelerance.com> - 1.4.4-3
- Applied patch for CVE-2011-1922 DoS vulnerability
--------------------------------------------------------------------------------
The following Fedora EPEL 6 Security updates need testing:
https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.el6https://admin.fedoraproject.org/updates/erlang-R14B-02.1.el6https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el6https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el6https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6https://admin.fedoraproject.org/updates/exim-4.72-2.el6https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
ATpy-0.9.5.1-1.el6
Terminal-0.4.7-1.el6
Thunar-1.3.0-4.el6
dnsperf-1.0.1.0-15.el6
dojo-1.6.0-1.el6
exim-4.72-2.el6
exo-0.6.1-2.el6
garcon-0.1.7-1.el6
gigolo-0.4.1-2.el6
gtk-xfce-engine-2.8.1-1.el6
heartbeat-3.0.4-1.el6
leafpad-0.8.18.1-1.el6
libxfce4ui-4.8.0-4.el6
libxfce4util-4.8.1-2.el6
libxfcegui4-4.8.1-2.el6
liveusb-creator-3.11.1-1.el6
lyx-1.6.10-1.el6
mod_flvx-0-0.1.20100525git.el6
nagios-plugins-check-updates-1.4.12-1.el6
nagios-plugins-check-updates-1.4.13-1.el6
orage-4.8.1-3.el6
perl-AuthCAS-1.5-2.el6
perl-MIME-Lite-HTML-1.23-2.el6
perl-Net-Telnet-Cisco-1.10-4.el6
php-pdepend-PHP-Depend-0.10.5-1.el6
qt-mobility-1.1.3-2.el6
qtwebkit-2.1.1-1.el6
rear-1.11.0-1.el6
rubygem-thin-1.2.8-4.el6
thunar-archive-plugin-0.3.0-2.el6
thunar-volman-0.6.0-2.el6
tumbler-0.1.21-1.el6
xfce-utils-4.8.1-3.el6
xfce4-appfinder-4.8.0-2.el6
xfce4-dev-tools-4.8.0-2.el6
xfce4-icon-theme-4.4.3-5.el6
xfce4-mixer-4.8.0-1.el6
xfce4-panel-4.8.3-2.el6
xfce4-power-manager-1.0.10-1.el6
xfce4-session-4.8.1-4.el6
xfce4-settings-4.8.2-2.el6
xfconf-4.8.0-2.el6
xfdesktop-4.8.2-2.el6
xfwm4-4.8.1-2.el6
Details about builds:
================================================================================
ATpy-0.9.5.1-1.el6 (FEDORA-EPEL-2011-3382)
Astronomical Tables in Python
--------------------------------------------------------------------------------
Update Information:
New upstream release. Fixes crash if vo package is not present
Astronomical Tables in Python.
ATpy is a high-level Python package providing a way to manipulate tables of astronomical data in a uniform way. It provides built-in support for NumPy recarrays and common astronomical file/database formats (FITS, VO, HDF5, and ASCII tables) with a very simple API.
--------------------------------------------------------------------------------
================================================================================
Terminal-0.4.7-1.el6 (FEDORA-EPEL-2011-3404)
X Terminal Emulator for the Xfce Desktop environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
Thunar-1.3.0-4.el6 (FEDORA-EPEL-2011-3404)
Thunar File Manager
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
dnsperf-1.0.1.0-15.el6 (FEDORA-EPEL-2011-3401)
Benchmarking authorative and recursing DNS servers
--------------------------------------------------------------------------------
Update Information:
Rebuilt for newer bind libraries
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Paul Wouters <paul(a)xelerance.com> - 1.0.1.0-15
- Rebuilt for newer bind
--------------------------------------------------------------------------------
================================================================================
dojo-1.6.0-1.el6 (FEDORA-EPEL-2011-3390)
Modular JavaScript toolkit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #609817 - Review Request: dojo - Modular JavaScript toolkit
https://bugzilla.redhat.com/show_bug.cgi?id=609817
--------------------------------------------------------------------------------
================================================================================
exim-4.72-2.el6 (FEDORA-EPEL-2011-3406)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
Backport various security fixes
* CVE-2011-1407
* CVE-2011-1764
* CVE-2011-0017
* CVE-2010-4345
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Mark Chappell <tremble(a)tremble.org.uk> 4.72-2
- Backport various security fixes
- (CVE-2011-1407 CVE-2011-0017 CVE-2010-4345)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705446 - CVE-2011-1407 exim: arbitrary code execution via improper DKIM signature matching
https://bugzilla.redhat.com/show_bug.cgi?id=705446
[ 2 ] Bug #702474 - CVE-2011-1764 exim: improper format string handling in DKIM signatures
https://bugzilla.redhat.com/show_bug.cgi?id=702474
--------------------------------------------------------------------------------
================================================================================
exo-0.6.1-2.el6 (FEDORA-EPEL-2011-3404)
Application library for the Xfce desktop environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
garcon-0.1.7-1.el6 (FEDORA-EPEL-2011-3404)
Implementation of the freedesktop.org menu specification
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
gigolo-0.4.1-2.el6 (FEDORA-EPEL-2011-3404)
GIO/GVFS management application
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
gtk-xfce-engine-2.8.1-1.el6 (FEDORA-EPEL-2011-3404)
Xfce GTK theme engine
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
heartbeat-3.0.4-1.el6 (FEDORA-EPEL-2011-3383)
Messaging and membership subsystem for High-Availability Linux
--------------------------------------------------------------------------------
Update Information:
Heartbeat for epel6
--------------------------------------------------------------------------------
================================================================================
leafpad-0.8.18.1-1.el6 (FEDORA-EPEL-2011-3404)
GTK+ based simple text editor
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
libxfce4ui-4.8.0-4.el6 (FEDORA-EPEL-2011-3404)
Commonly used Xfce widgets
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
libxfce4util-4.8.1-2.el6 (FEDORA-EPEL-2011-3404)
Utility library for the Xfce4 desktop environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
libxfcegui4-4.8.1-2.el6 (FEDORA-EPEL-2011-3404)
GTK widgets for Xfce
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
liveusb-creator-3.11.1-1.el6 (FEDORA-EPEL-2011-3376)
A liveusb creator
--------------------------------------------------------------------------------
Update Information:
Support downloading the latest Fedora 15 release
--------------------------------------------------------------------------------
================================================================================
lyx-1.6.10-1.el6 (FEDORA-EPEL-2011-3388)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
Latest 1.6 bugfix release, and brings compatiblity with 2.0 .lyx files. See also: http://www.lyx.org/announce/1_6_10.txt
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.10-1
- lyx-1.6.10
* Mon Feb 7 2011 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.9-1
- lyx-1.6.9
--------------------------------------------------------------------------------
================================================================================
mod_flvx-0-0.1.20100525git.el6 (FEDORA-EPEL-2011-3380)
FLV progressive download streaming for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
FLV streaming means it can be sought to any position during video, and browser (Flash player) will buffer only from this position to the end. Thus streaming allows to skip boring parts or see video ending without loading the whole file, which simply saves bandwidth. Even H264 is more efficient, FLV is still a common container format for videos, because H264 is supported by Flash since version 9.115.
For using FLV streaming on the web, a pseudo-streaming compliant Flash player, such as Flowplayer, is needed. Streaming requires that the FLV has embedded key-frame markers (meta-data), that can be injected by any supported tool, e.g. flvtool2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688121 - Review Request: mod_flvx - FLV progressive download streaming for the Apache HTTP Server
https://bugzilla.redhat.com/show_bug.cgi?id=688121
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-check-updates-1.4.12-1.el6 (FEDORA-EPEL-2011-3379)
A Nagios plugin to check if Red Hat or Fedora system is up-to-date
--------------------------------------------------------------------------------
Update Information:
Detection of RHEL6.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.12-1
- Update to 1.4.12.
- Upstream added a test suite.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706924 - RHEL6 problem, unknown Linux distribution
https://bugzilla.redhat.com/show_bug.cgi?id=706924
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-check-updates-1.4.13-1.el6 (FEDORA-EPEL-2011-3407)
A Nagios plugin to check if Red Hat or Fedora system is up-to-date
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.13.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.13-1
- Update to 1.4.13.
- Fixes a build problem in EPEL5 (test script failure).
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.12-1
- Update to 1.4.12.
- Upstream added a test suite.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
orage-4.8.1-3.el6 (FEDORA-EPEL-2011-3404)
Time-managing application for Xfce4
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
perl-AuthCAS-1.5-2.el6 (FEDORA-EPEL-2011-3384)
Client library for CAS 2.0 authentication server
--------------------------------------------------------------------------------
================================================================================
perl-MIME-Lite-HTML-1.23-2.el6 (FEDORA-EPEL-2011-3377)
Provide routine to transform a HTML page in a MIME-Lite mail
--------------------------------------------------------------------------------
Update Information:
First release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705376 - Review Request: perl-MIME-Lite-HTML - Provide routine to transform a HTML page in a MIME-Lite mail
https://bugzilla.redhat.com/show_bug.cgi?id=705376
--------------------------------------------------------------------------------
================================================================================
perl-Net-Telnet-Cisco-1.10-4.el6 (FEDORA-EPEL-2011-3396)
Interact with a Cisco router
--------------------------------------------------------------------------------
================================================================================
php-pdepend-PHP-Depend-0.10.5-1.el6 (FEDORA-EPEL-2011-3393)
PHP_Depend design quality metrics for PHP package
--------------------------------------------------------------------------------
Update Information:
upstream 0.10.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2011 Christof Damian <christof(a)damian.net> - 0.10.5-1
- upstream 0.10.5
* Fri Mar 4 2011 Christof Damian <christof(a)damian.net> - 0.10.3-1
- upstream 0.10.3
* Mon Feb 28 2011 Christof Damian <cdamian(a)robin.gotham.krass.com> - 0.10.2-1
- upstream 0.10.2
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.10.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
qt-mobility-1.1.3-2.el6 (FEDORA-EPEL-2011-3398)
Qt Mobility Framework
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #651521 - Review Request: qtwebkit - Qt WebKit bindings
https://bugzilla.redhat.com/show_bug.cgi?id=651521
--------------------------------------------------------------------------------
================================================================================
qtwebkit-2.1.1-1.el6 (FEDORA-EPEL-2011-3398)
Qt WebKit bindings
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #651521 - Review Request: qtwebkit - Qt WebKit bindings
https://bugzilla.redhat.com/show_bug.cgi?id=651521
--------------------------------------------------------------------------------
================================================================================
rear-1.11.0-1.el6 (FEDORA-EPEL-2011-3392)
Relax and Recover (ReaR) is a Linux Disaster Recovery framework
--------------------------------------------------------------------------------
Update Information:
New release of rear-1.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Gratien D'haese <gdha at sourceforge.net> - 1.11.0-1
- placeholder for release
--------------------------------------------------------------------------------
================================================================================
rubygem-thin-1.2.8-4.el6 (FEDORA-EPEL-2011-3403)
A thin and fast web server
--------------------------------------------------------------------------------
Update Information:
Fix loading of thin_parser
--------------------------------------------------------------------------------
================================================================================
thunar-archive-plugin-0.3.0-2.el6 (FEDORA-EPEL-2011-3404)
Archive plugin for the Thunar file manager
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
thunar-volman-0.6.0-2.el6 (FEDORA-EPEL-2011-3404)
Automatic management of removable drives and media for the Thunar file manager
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
tumbler-0.1.21-1.el6 (FEDORA-EPEL-2011-3404)
D-Bus service for applications to request thumbnails
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce-utils-4.8.1-3.el6 (FEDORA-EPEL-2011-3404)
Utilities for the Xfce Desktop Environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-appfinder-4.8.0-2.el6 (FEDORA-EPEL-2011-3404)
Appfinder for the Xfce4 Desktop Environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-dev-tools-4.8.0-2.el6 (FEDORA-EPEL-2011-3404)
Xfce developer tools
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-icon-theme-4.4.3-5.el6 (FEDORA-EPEL-2011-3404)
Icons for Xfce
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-mixer-4.8.0-1.el6 (FEDORA-EPEL-2011-3404)
Volume control plugin for the Xfce 4 panel
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-panel-4.8.3-2.el6 (FEDORA-EPEL-2011-3404)
Next generation panel for Xfce
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-power-manager-1.0.10-1.el6 (FEDORA-EPEL-2011-3404)
Power management for the Xfce desktop environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-session-4.8.1-4.el6 (FEDORA-EPEL-2011-3404)
Xfce session manager
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfce4-settings-4.8.2-2.el6 (FEDORA-EPEL-2011-3404)
Settings Manager for Xfce
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfconf-4.8.0-2.el6 (FEDORA-EPEL-2011-3404)
Hierarchical configuration system for Xfce
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfdesktop-4.8.2-2.el6 (FEDORA-EPEL-2011-3404)
Desktop manager for the XFce Desktop Environment
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
================================================================================
xfwm4-4.8.1-2.el6 (FEDORA-EPEL-2011-3404)
Next generation window manager for Xfce
--------------------------------------------------------------------------------
Update Information:
XFCE 4.8
--------------------------------------------------------------------------------
The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/rt3-3.6.11-1.el5https://admin.fedoraproject.org/updates/rssh-2.3.3-1.el5https://admin.fedoraproject.org/updates/mediawiki116-1.16.5-1.el5https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5https://admin.fedoraproject.org/updates/viewvc-1.1.11-2.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
ATpy-0.9.5.1-1.el5
UpTools-8.5.5-1.el5
dojo-1.6.0-1.el5
dokuwiki-0-0.8.20101107.a.el5
ldns-1.6.9-1.el5
lyx-1.6.10-1.el5
mod_flvx-0-0.1.20100525git.el5
nagios-plugins-check-updates-1.4.13-1.el5
perl-AuthCAS-1.5-2.el5
perl-MIME-Lite-HTML-1.23-2.el5.1
python26-m2crypto-0.21.1-5.el5
rear-1.11.0-1.el5
rubygem-thin-1.2.8-2.el5
Details about builds:
================================================================================
ATpy-0.9.5.1-1.el5 (FEDORA-EPEL-2011-3389)
Astronomical Tables in Python
--------------------------------------------------------------------------------
Update Information:
New upstream release. Fixes crash if vo package is not present
Astronomical Tables in Python.
ATpy is a high-level Python package providing a way to manipulate tables of astronomical data in a uniform way. It provides built-in support for NumPy recarrays and common astronomical file/database formats (FITS, VO, HDF5, and ASCII tables) with a very simple API.
--------------------------------------------------------------------------------
================================================================================
UpTools-8.5.5-1.el5 (FEDORA-EPEL-2011-3400)
C++ library for HPC, parallel processing, networking, DB, memory, etc
--------------------------------------------------------------------------------
Update Information:
UpTools is an open source C++ development library that contains powerful
classes to facilitate and accelerate modern application development. The
following aspects are covered by the library: High performance computing
(HPC), Load distribution and parallel processing, Multi-threading, Time
and timers, Memory management, Text and strings, Database access,
Networking, and others.
UpTools is developed and maintained by the Engineering School of the
Universidad de Palermo, and originated in its Electronics and Communications
Department projects.
--------------------------------------------------------------------------------
================================================================================
dojo-1.6.0-1.el5 (FEDORA-EPEL-2011-3402)
Modular JavaScript toolkit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #609817 - Review Request: dojo - Modular JavaScript toolkit
https://bugzilla.redhat.com/show_bug.cgi?id=609817
--------------------------------------------------------------------------------
================================================================================
dokuwiki-0-0.8.20101107.a.el5 (FEDORA-EPEL-2011-3394)
Standards compliant simple to use wiki
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Andrew Colin Kissa <andrew(a)topdog.za.net> - 0-0.8.20101107.a
- Fix selinux package dependencies
--------------------------------------------------------------------------------
================================================================================
ldns-1.6.9-1.el5 (FEDORA-EPEL-2011-3397)
Lowlevel DNS(SEC) library with API
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version, minor bugfixes
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
lyx-1.6.10-1.el5 (FEDORA-EPEL-2011-3391)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
Latest 1.6 bugfix release, and brings compatiblity with 2.0 .lyx files. See also: http://www.lyx.org/announce/1_6_10.txt
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.10-1
- lyx-1.6.10
* Mon Feb 7 2011 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.9-1
- lyx-1.6.9
--------------------------------------------------------------------------------
================================================================================
mod_flvx-0-0.1.20100525git.el5 (FEDORA-EPEL-2011-3395)
FLV progressive download streaming for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
FLV streaming means it can be sought to any position during video, and browser (Flash player) will buffer only from this position to the end. Thus streaming allows to skip boring parts or see video ending without loading the whole file, which simply saves bandwidth. Even H264 is more efficient, FLV is still a common container format for videos, because H264 is supported by Flash since version 9.115.
For using FLV streaming on the web, a pseudo-streaming compliant Flash player, such as Flowplayer, is needed. Streaming requires that the FLV has embedded key-frame markers (meta-data), that can be injected by any supported tool, e.g. flvtool2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688121 - Review Request: mod_flvx - FLV progressive download streaming for the Apache HTTP Server
https://bugzilla.redhat.com/show_bug.cgi?id=688121
--------------------------------------------------------------------------------
================================================================================
nagios-plugins-check-updates-1.4.13-1.el5 (FEDORA-EPEL-2011-3387)
A Nagios plugin to check if Red Hat or Fedora system is up-to-date
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.13.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.13-1
- Update to 1.4.13.
- Fixes a build problem in EPEL5 (test script failure).
* Tue May 24 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.12-1
- Update to 1.4.12.
- Upstream added a test suite.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-AuthCAS-1.5-2.el5 (FEDORA-EPEL-2011-3405)
Client library for CAS 2.0 authentication server
--------------------------------------------------------------------------------
================================================================================
perl-MIME-Lite-HTML-1.23-2.el5.1 (FEDORA-EPEL-2011-3381)
Provide routine to transform a HTML page in a MIME-Lite mail
--------------------------------------------------------------------------------
================================================================================
python26-m2crypto-0.21.1-5.el5 (FEDORA-EPEL-2011-3386)
Support for using OpenSSL in python 2.6 scripts
--------------------------------------------------------------------------------
Update Information:
This update consolidates a number of fixes from Fedora's main m2crypto package:
- Fixed M2Crypto.SMIME documentation and examples
- Fixed sending SSL data from buffer objects
- Fixed a memory leak
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 12 2011 Miloslav Trmač <mitr(a)redhat.com> - 0.21.1-5
- Fix a memory leak in AES_crypt
Resolves: #659881
* Tue May 10 2011 Miloslav Trmač <mitr(a)redhat.com> - 0.21.1-4
- Fix handling of buffer() objects as input data to SSL
Resolves: #702766
* Mon Mar 28 2011 Miloslav Trmač <mitr(a)redhat.com> - 0.21.1-3
- Fix S/MIME documentation and examples
Resolves: #618500
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #618500 - S/MIME signing does not work
https://bugzilla.redhat.com/show_bug.cgi?id=618500
[ 2 ] Bug #702766 - [F15 regression] traceback when sending over SSL
https://bugzilla.redhat.com/show_bug.cgi?id=702766
[ 3 ] Bug #659881 - Memory leak in m2crypto-0.16/SWIG/_aes.i: AES_crypt
https://bugzilla.redhat.com/show_bug.cgi?id=659881
--------------------------------------------------------------------------------
================================================================================
rear-1.11.0-1.el5 (FEDORA-EPEL-2011-3399)
Relax and Recover (ReaR) is a Linux Disaster Recovery framework
--------------------------------------------------------------------------------
Update Information:
New release of rear-1.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Gratien D'haese <gdha at sourceforge.net> - 1.11.0-1
- placeholder for release
--------------------------------------------------------------------------------
================================================================================
rubygem-thin-1.2.8-2.el5 (FEDORA-EPEL-2011-3385)
A thin and fast web server
--------------------------------------------------------------------------------
Update Information:
Fix loading of thin_parser
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 David Lutterkort <lutter(a)redhat.com> - 1.2.8-2
- Fix loading of native extension
--------------------------------------------------------------------------------