[SECURITY] Fedora EPEL 4 Update: phpMyAdmin-2.11.9.6-1.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0650
2009-10-16 18:47:51
--------------------------------------------------------------------------------
Name : phpMyAdmin
Product : Fedora EPEL 4
Version : 2.11.9.6
Release : 1.el4
URL : http://www.phpmyadmin.net/
Summary : Web based MySQL browser written in php
Description :
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the Web. Currently it can create and drop databases,
create/drop/alter tables, delete/edit/add fields, execute any SQL statement,
manage keys on fields, manage privileges,export data into various formats and
is available in 50 languages
--------------------------------------------------------------------------------
Update Information:
Changes for 2.11.9.6: - [security] XSS and SQL injection, thanks to Herman van
Rink
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #528769 - phpMyAdmin: XSS and SQL injection (PMASA-2009-6)
https://bugzilla.redhat.com/show_bug.cgi?id=528769
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update phpMyAdmin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 4 Update: log4cpp-1.0-4.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0512
2009-09-26 00:45:03
--------------------------------------------------------------------------------
Name : log4cpp
Product : Fedora EPEL 4
Version : 1.0
Release : 4.el4
URL : http://sourceforge.net/projects/log4cpp/
Summary : C++ logging library
Description :
A library of C++ classes for flexible logging to files, syslog, IDSA and
other destinations. It is modeled after the Log for Java library
(http://www.log4j.org), staying as close to their API as is reasonable.
--------------------------------------------------------------------------------
Update Information:
This is exact rebuild of Fedora12's log4cpp for EPEL4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #476247 - Review Request: log4cpp - logging library for c++
https://bugzilla.redhat.com/show_bug.cgi?id=476247
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update log4cpp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 5 Update: gnucap-0.35-6.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0564
2009-10-02 04:43:24
--------------------------------------------------------------------------------
Name : gnucap
Product : Fedora EPEL 5
Version : 0.35
Release : 6.el5
URL : http://www.geda.seul.org/tools/gnucap
Summary : The Gnu Circuit Analysis Package
Description :
The primary component is a general purpose circuit simulator. It performs
nonlinear dc and transient analyses, fourier analysis, and ac analysis. Spice
compatible models for the MOSFET (level 1-7), BJT, and diode are included in
this release. Gnucap is not based on Spice, but some of the models have been
derived from the Berkeley models. Unlike Spice, the engine is designed to do
true mixed-mode simulation. Most of the code is in place for future support of
event driven analog simulation, and true multi-rate simulation.
--------------------------------------------------------------------------------
Update Information:
first package for EL-5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #525991 - Request: Package gnucap for EL-5
https://bugzilla.redhat.com/show_bug.cgi?id=525991
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gnucap' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 5 Update: nrpe-2.12-11.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0519
2009-09-26 00:45:18
--------------------------------------------------------------------------------
Name : nrpe
Product : Fedora EPEL 5
Version : 2.12
Release : 11.el5
URL : http://www.nagios.org
Summary : Host/service/network monitoring agent for Nagios
Description :
Nrpe is a system daemon that will execute various Nagios plugins
locally on behalf of a remote (monitoring) host that uses the
check_nrpe plugin. Various plugins that can be executed by the
daemon are available at:
http://sourceforge.net/projects/nagiosplug
This package provides the core agent.
--------------------------------------------------------------------------------
Update Information:
Added /etc/nrpe.d directory.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #515324 - RFE: Add /etc/nrpe.d include dir
https://bugzilla.redhat.com/show_bug.cgi?id=515324
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nrpe' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
[SECURITY] Fedora EPEL 5 Update: Django-1.1.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0621
2009-10-10 20:12:08
--------------------------------------------------------------------------------
Name : Django
Product : Fedora EPEL 5
Version : 1.1.1
Release : 1.el5
URL : http://www.djangoproject.com/
Summary : A high-level Python Web framework
Description :
Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as
much as possible and adhering to the DRY (Don't Repeat Yourself)
principle.
--------------------------------------------------------------------------------
Update Information:
http://www.djangoproject.com/weblog/2009/oct/09/security/ Description of
vulnerability ============================ Django's forms library included
field types which perform regular-expression-based validation of email addresses
and URLs. Certain addresses/URLs could trigger a pathological performance case
in this regular expression, resulting in the server process/thread becoming
unresponsive, and consuming excessive CPU over an extended period of time. If
deliberately triggered, this could result in an effective denial-of-service
attack.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #528246 - Django's forms DOS in 1.1/1.0
https://bugzilla.redhat.com/show_bug.cgi?id=528246
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update Django' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 5 Update: lua-lunit-0.4-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0515
2009-09-26 00:45:09
--------------------------------------------------------------------------------
Name : lua-lunit
Product : Fedora EPEL 5
Version : 0.4
Release : 1.el5
URL : http://nessie.de/mroth/lunit/index.html
Summary : Unit testing framework for Lua
Description :
Lunit is a unit testing framework for lua, written in lua.
Lunit provides 26 assert functions, and a few misc functions for usage
in an easy unit testing framework.
Lunit comes with a test suite to test itself. The testsuite consists
of approximately 710 assertions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #522979 - Review Request: lua-lunit - Unit testing framework for Lua
https://bugzilla.redhat.com/show_bug.cgi?id=522979
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lua-lunit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 5 Update: perl-IPC-DirQueue-1.0-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0531
2009-09-28 17:49:56
--------------------------------------------------------------------------------
Name : perl-IPC-DirQueue
Product : Fedora EPEL 5
Version : 1.0
Release : 2.el5
URL : http://search.cpan.org/dist/IPC-DirQueue/
Summary : Disk-based many-to-many task queue
Description :
This module implements a FIFO queueing infrastructure, using a directory as
the communications and storage media. No daemon process is required to
manage the queue; all communication takes place via the filesystem.
--------------------------------------------------------------------------------
Update Information:
New package for IPC::DirQueue
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #525077 - Review Request: perl-IPC-DirQueue - Disk-based many-to-many task queue
https://bugzilla.redhat.com/show_bug.cgi?id=525077
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-IPC-DirQueue' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 5 Update: dokuwiki-0-0.2.20090214.b.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0562
2009-10-02 04:43:18
--------------------------------------------------------------------------------
Name : dokuwiki
Product : Fedora EPEL 5
Version : 0
Release : 0.2.20090214.b.el5
URL : http://www.dokuwiki.org/dokuwiki
Summary : Standards compliant simple to use wiki
Description :
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating
documentation of any kind. It has a simple but powerful syntax which makes sure
the datafiles remain readable outside the Wiki and eases the creation of
structured texts.
All data is stored in plain text files no database is required.
--------------------------------------------------------------------------------
Update Information:
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating
documentation of any kind. It has a simple but powerful syntax which makes sure
the datafiles remain readable outside the Wiki and eases the creation of
structured texts. All data is stored in plain text files no database is
required.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #516059 - Review Request: dokuwiki - Standards compliant simple to use wiki
https://bugzilla.redhat.com/show_bug.cgi?id=516059
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dokuwiki' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 5 Update: rlog-1.4-7.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0547
2009-09-28 17:50:34
--------------------------------------------------------------------------------
Name : rlog
Product : Fedora EPEL 5
Version : 1.4
Release : 7.el5
URL : http://arg0.net/rlog
Summary : Runtime Logging for C++
Description :
RLog provides a flexible message logging facility for C++ programs and
libraries. It is meant to be fast enough to leave in production code.
--------------------------------------------------------------------------------
Update Information:
fixed building against valgring
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rlog' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months
Fedora EPEL 4 Update: rlog-1.4-7.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0533
2009-09-28 17:50:01
--------------------------------------------------------------------------------
Name : rlog
Product : Fedora EPEL 4
Version : 1.4
Release : 7.el4
URL : http://arg0.net/rlog
Summary : Runtime Logging for C++
Description :
RLog provides a flexible message logging facility for C++ programs and
libraries. It is meant to be fast enough to leave in production code.
--------------------------------------------------------------------------------
Update Information:
fixed building against valgring
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rlog' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 11 months