--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0899
2009-11-24 19:02:05
--------------------------------------------------------------------------------
Name : libcue
Product : Fedora EPEL 4
Version : 1.3.0
Release : 2.el4
URL : http://libcue.sourceforge.net/
Summary : Cue sheet parser library
Description :
Libcue is intended for parsing a so-called cue sheet from a char string or
a file pointer. For handling of the parsed data a convenient API is available.
--------------------------------------------------------------------------------
Update Information:
Initial commit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #533803 - Review Request: libcue - CUE sheet parser library
https://bugzilla.redhat.com/show_bug.cgi?id=533803
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libcue' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0996
2009-12-10 03:37:38
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 5
Version : 1.8.11
Release : 1.el5
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
Moodle upstream has released latest stable versions (1.9.7 and 1.8.11), fixing
multiple security issues. The list for 1.9.7 release:
-------------------------- Security issues * MSA-09-0022 - Multiple
CSRF problems fixed * MSA-09-0023 - Fixed user account disclosure in LAMS
module * MSA-09-0024 - Fixed insufficient access control in Glossary module
* MSA-09-0025 - Unneeded MD5 hashes removed from user table * MSA-09-0026 -
Fixed invalid application access control in MNET interface * MSA-09-0027 -
Ensured login information is always sent secured when using
SSL for logins * MSA-09-0028 - Passwords and secrets are no longer ever
saved in backups, new backup capabilities
moodle/backup:userinfo and moodle/restore:userinfo for
controlling who can backup/restore user data, new checks in
the security overview report help admins identify dangerous
backup permissions * MSA-09-0029 - A strong password
policy is now enabled by default, enabling password salt in
encouraged in config.php, admins are forced to change
password after the upgrade and admins can force password
change on other users via Bulk user actions *
MSA-09-0030 - New detection of insecure Flash player plugins, Moodle
won't serve Flash to insecure plugins * MSA-09-0031 - Fixed SQL injection
in SCORM module The list for 1.8.11 release: ----------------------------
Security issues * MSA-09-0022 - Multiple CSRF problems fixed *
MSA-09-0023 - Fixed user account disclosure in LAMS module * MSA-09-0024 -
Fixed insufficient access control in Glossary module * MSA-09-0025 -
Unneeded MD5 hashes removed from user table * MSA-09-0026 - Fixed invalid
application access control in MNET interface * MSA-09-0027 - Ensured login
information is always sent secured when using SSL for
logins * MSA-09-0028 - Passwords and secrets are no longer ever saved in
backups, new backup capabilities moodle/backup:userinfo and
moodle/restore:userinfo for controlling who can
backup/restore user data * MSA-09-0029 - Enabling a password salt in
encouraged in config.php and admins are forced to change
password after the upgrade * MSA-09-0031 -
Fixed SQL injection in SCORM module References: -----------
http://docs.moodle.org/en/Moodle_1.9.7_release_noteshttp://docs.moodle.org/en/Moodle_1.8.11_release_notes CVE Request:
------------ http://www.openwall.com/lists/oss-security/2009/12/06/1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #544766 - Moodle: Multiple security fixes in 1.9.7 and 1.8.11 upstream releases
https://bugzilla.redhat.com/show_bug.cgi?id=544766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0886
2009-11-23 16:22:55
--------------------------------------------------------------------------------
Name : dia-electronic
Product : Fedora EPEL 5
Version : 0.1
Release : 1.el5
URL : http://dia-installer.de/shapes/electronic/index_en.html
Summary : Dia Digital IC logic shapes
Description :
The following shapes are included in the package:
* Antenna
* Bell
* Button
* Capacitor
* Electrolytic capacitor
* Crystal
* Di-Gate
* Diac
* Engine
* Headphone
* Inverse diode
* Schottky diode
* Tunnel diode
* Zenner diode
* Inductor
* LED display
* Microphone
* Photo-emiting part
* Photosensitive part
* Potenciometer
* Ground
* Contact
* Contact Pair
* IN Port
* OUT Port
* IN/OUT Port
* Voltmeter
* Ampermeter
* Source or Meter
* Current source
* Substitute linearised source
* Voltage source
* Alternating voltage source
* Direct voltage source
* Bipolar transistor NPN
* Bipolar transistor NPN
* Bipolar transistor PNP
* Bipolar transistor PNP
* JFE transitor - N
* JFE transistor - P
* MISFE conducting transistor - N
* MISFE conducting transistor - P
* MISFE inducting transistor - N
* MISFE inducting transistor - P
* Single ..... transistor
* Triac
* Diode tyristor, blocking
* Triode tyristor, blocking
* Vacuum diode
* Vacuum pentode
* Vacuum triode
* Linear variable part
* Nonlinear variable part
* Varicap
--------------------------------------------------------------------------------
Update Information:
new package for fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #538340 - Review Request: dia-electronic - Dia electronic Shapes
https://bugzilla.redhat.com/show_bug.cgi?id=538340
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dia-electronic' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0993
2009-12-10 03:37:34
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 4
Version : 1.8.11
Release : 1.el4
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
Moodle upstream has released latest stable versions (1.9.7 and 1.8.11), fixing
multiple security issues. The list for 1.9.7 release:
-------------------------- Security issues * MSA-09-0022 - Multiple
CSRF problems fixed * MSA-09-0023 - Fixed user account disclosure in LAMS
module * MSA-09-0024 - Fixed insufficient access control in Glossary module
* MSA-09-0025 - Unneeded MD5 hashes removed from user table * MSA-09-0026 -
Fixed invalid application access control in MNET interface * MSA-09-0027 -
Ensured login information is always sent secured when using
SSL for logins * MSA-09-0028 - Passwords and secrets are no longer ever
saved in backups, new backup capabilities
moodle/backup:userinfo and moodle/restore:userinfo for
controlling who can backup/restore user data, new checks in
the security overview report help admins identify dangerous
backup permissions * MSA-09-0029 - A strong password
policy is now enabled by default, enabling password salt in
encouraged in config.php, admins are forced to change
password after the upgrade and admins can force password
change on other users via Bulk user actions *
MSA-09-0030 - New detection of insecure Flash player plugins, Moodle
won't serve Flash to insecure plugins * MSA-09-0031 - Fixed SQL injection
in SCORM module The list for 1.8.11 release: ----------------------------
Security issues * MSA-09-0022 - Multiple CSRF problems fixed *
MSA-09-0023 - Fixed user account disclosure in LAMS module * MSA-09-0024 -
Fixed insufficient access control in Glossary module * MSA-09-0025 -
Unneeded MD5 hashes removed from user table * MSA-09-0026 - Fixed invalid
application access control in MNET interface * MSA-09-0027 - Ensured login
information is always sent secured when using SSL for
logins * MSA-09-0028 - Passwords and secrets are no longer ever saved in
backups, new backup capabilities moodle/backup:userinfo and
moodle/restore:userinfo for controlling who can
backup/restore user data * MSA-09-0029 - Enabling a password salt in
encouraged in config.php and admins are forced to change
password after the upgrade * MSA-09-0031 -
Fixed SQL injection in SCORM module References: -----------
http://docs.moodle.org/en/Moodle_1.9.7_release_noteshttp://docs.moodle.org/en/Moodle_1.8.11_release_notes CVE Request:
------------ http://www.openwall.com/lists/oss-security/2009/12/06/1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #544766 - Moodle: Multiple security fixes in 1.9.7 and 1.8.11 upstream releases
https://bugzilla.redhat.com/show_bug.cgi?id=544766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0881
2009-11-20 23:04:20
--------------------------------------------------------------------------------
Name : rho
Product : Fedora EPEL 5
Version : 0.0.20
Release : 1.el5
URL : http://github.com/jmrodri/rho
Summary : An SSH system profiler
Description :
Rho is a tool for scanning your network, logging into systems via SSH, and
retrieving information about them.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rho' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0891
2009-11-23 16:23:04
--------------------------------------------------------------------------------
Name : dia-CMOS
Product : Fedora EPEL 5
Version : 0.1
Release : 1.el5
URL : http://dia-installer.de/shapes/cmos/index_en.html
Summary : Dia CMOS Shapes
Description :
The following shapes are included in the package:
* NMOS Transistor
* PMOS Transistor
* Ground
* Vdd
--------------------------------------------------------------------------------
Update Information:
New fedora package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #538335 - Review Request: dia-CMOS - Dia CMOS Shapes
https://bugzilla.redhat.com/show_bug.cgi?id=538335
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dia-CMOS' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0892
2009-11-23 16:23:06
--------------------------------------------------------------------------------
Name : dia-electric2
Product : Fedora EPEL 5
Version : 0.1
Release : 1.el5
URL : http://dia-installer.de/shapes/electric2/index.html.en
Summary : Dia Digital IC logic shapes
Description :
The following shapes are included in the package:
* CKT Breaker
* Generator
* Isolator
* Transformer
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #538339 - Review Request: dia-electric2 - Dia electric2 Shapes
https://bugzilla.redhat.com/show_bug.cgi?id=538339
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dia-electric2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0790
2009-11-05 21:12:54
--------------------------------------------------------------------------------
Name : kobo
Product : Fedora EPEL 5
Version : 0.2.0
Release : 1.el5
URL : https://fedorahosted.org/kobo/
Summary : Python modules for tools development
Description :
Kobo is a set of python modules designed for rapid tools development.
--------------------------------------------------------------------------------
Update Information:
Backwards incompatible changes: - kobo.hub: TASK_DIR needs to be added to
settings - kobo.django.menu: rewritten from scratch, menu definition needs
complete rewrite
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update kobo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0887
2009-11-23 16:22:57
--------------------------------------------------------------------------------
Name : ndisc6
Product : Fedora EPEL 5
Version : 0.9.9
Release : 1.el5
URL : http://www.remlab.net/ndisc6/
Summary : IPv6 diagnostic tools
Description :
This package gathers a few diagnostic tools for IPv6 networks:
- ndisc6, which performs ICMPv6 Neighbor Discovery in userland,
- rdisc6, which performs ICMPv6 Router Discovery in userland,
- rltraceroute6, yet another IPv6 implementation of traceroute,
- tcptraceroute6, a TCP/IPv6-based traceroute implementation,
- tracert6, a ICMPv6 Echo Request based traceroute,
- tcpspray6, a TCP/IP Discard/Echo bandwidth metter.
--------------------------------------------------------------------------------
Update Information:
This package gathers a few diagnostic tools for IPv6 networks: (i) ndisc6,
which performs ICMPv6 Neighbor Discovery in userland, (ii) rdisc6, which
performs ICMPv6 Router Discovery in userland, (iii) rltraceroute6, yet another
IPv6 implementation of traceroute, (iv) tcptraceroute6, a TCP/IPv6-based
traceroute implementation, (v) tracert6, a ICMPv6 Echo Request based
traceroute, (vi) tcpspray6, a TCP/IP Discard/Echo bandwidth metter.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #424841 - Review Request: ndisc6 - IPv6 diagnostic tools
https://bugzilla.redhat.com/show_bug.cgi?id=424841
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ndisc6' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0985
2009-12-10 03:37:18
--------------------------------------------------------------------------------
Name : rubygem-actionpack
Product : Fedora EPEL 5
Version : 2.1.1
Release : 5.el5
URL : http://www.rubyonrails.org
Summary : Web-flow and rendering framework putting the VC in MVC
Description :
Eases web-request routing, handling, and response as a half-way front,
half-way page controller. Implemented with specific emphasis on enabling easy
unit/integration testing that doesn't require a browser.
--------------------------------------------------------------------------------
Update Information:
Two security issues are found on activepack shipped on Fedora 10. One bug is
that there is a weakness in the strip_tags function in ruby on rails (bug
542786, CVE-2009-4214). Another one is a possibility to circumvent protection
against cross-site request forgery (CSRF) attacks (bug 544329). This new rpm
will fix these issues.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #542786 - rubygem-actionpack: XSS weakness in strip_tags
https://bugzilla.redhat.com/show_bug.cgi?id=542786
[ 2 ] Bug #544329 - rubygem-actionpack: Potential CSRF protection circumvention
https://bugzilla.redhat.com/show_bug.cgi?id=544329
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-actionpack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------