epel-package-announce December 2009

epel-package-announce@lists.fedoraproject.org

1 participants
163 discussions

Fedora EPEL 5 Update: postgresql-pgpool-II-2.2.6-1.el5
by updates＠fedoraproject.org 18 Dec '09

18 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0941 2009-12-02 19:59:59 -------------------------------------------------------------------------------- Name : postgresql-pgpool-II Product : Fedora EPEL 5 Version : 2.2.6 Release : 1.el5 URL : http://pgpool.projects.PostgreSQL.org Summary : Pgpool is a connection pooling/replication server for PostgreSQL Description : pgpool-II is a inherited project of pgpool (to classify from pgpool-II, it is sometimes called as pgpool-I). For those of you not familiar with pgpool-I, it is a multi-functional middle ware for PostgreSQL that features connection pooling, replication and load balancing functions. pgpool-I allows a user to connect at most two PostgreSQL servers for higher availability or for higher search performance compared to a single PostgreSQL server. pgpool-II, on the other hand, allows multiple PostgreSQL servers (DB nodes) to be connected, which enables queries to be executed simultaneously on all servers. In other words, it enables "parallel query" processing. Also, pgpool-II can be started as pgpool-I by changing configuration parameters. pgpool-II that is executed in pgpool-I mode enables multiple DB nodes to be connected, which was not possible in pgpool-I. -------------------------------------------------------------------------------- Update Information: This version enhances handling of backend weight. Also it allows to use temp tables in master/slave mode. It includes various fixes for bugs in 2.2.5 or before as usual. Please read NEWS for more details. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update postgresql-pgpool-II' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 4 Update: gsoap-2.7.13-2.el4
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0920 2009-12-01 17:50:16 -------------------------------------------------------------------------------- Name : gsoap Product : Fedora EPEL 4 Version : 2.7.13 Release : 2.el4 URL : http://gsoap2.sourceforge.net Summary : Generator Tools for Coding SOAP/XML Web Services in C and C++ Description : The gSOAP Web services development toolkit offers an XML to C/C++ language binding to ease the development of SOAP/XML Web services in C and C/C++. -------------------------------------------------------------------------------- Update Information: This is the first build of gsoap for EPEL. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update gsoap' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 Update: hdf5-1.6.10-1.el5
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0924 2009-12-01 17:50:27 -------------------------------------------------------------------------------- Name : hdf5 Product : Fedora EPEL 5 Version : 1.6.10 Release : 1.el5 URL : http://www.hdfgroup.org/HDF5/ Summary : A general purpose library and file format for storing scientific data Description : HDF5 is a general purpose library and file format for storing scientific data. HDF5 can store two primary objects: datasets and groups. A dataset is essentially a multidimensional array of data elements, and a group is a structure for organizing objects in an HDF5 file. Using these two basic objects, one can create and store almost any kind of scientific data structure, such as images, arrays of vectors, and structured and unstructured grids. You can also mix and match them in HDF5 files according to your needs. -------------------------------------------------------------------------------- Update Information: Update to 1.6.10. - Embedded HDF5 Library Settings Information Library settings are now embedded in an HDF5 executable so that an “orphaned” executable can be queried (via the Unix strings command, for example) to display the library settings used to build it. The embedded settings information is the same as that normally found in the libhdf5.settings file. This capability may be disabled with the use of the --disable-embedded-libinfo flag during configure. Function with Changed Interface or Behavior H5check_version now displays embedded library information (see above) if a version mismatch is detected. The function has also been changed to suppress the warning message entirely if $HDF5_DISABLE_VERSION_CHECK is set to 2 or higher. - New C++ Member Functions New C++ member functions are provided to determine a dataset’s or attribute’s data size in memory: size_t DataSet::getInMemDataSize() const size_t Attribute::getInMemDataSize() const The size in each case is in bytes. - Tool with Changed Interface or Behavior h5diff has one new option: --use-system-epsilon With this option, h5diff returns a difference if and only if the difference between two data values exceeds the system value for epsilon (that is, if |a-b| > epsilon). The tool’s default behavior has also changed; without this option, the tool now checks for strict equality. This option has no short form. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update hdf5' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 Update: CGSI-gSOAP-1.3.3.2-2.20090920cvs.el5
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0977 2009-12-07 05:55:41 -------------------------------------------------------------------------------- Name : CGSI-gSOAP Product : Fedora EPEL 5 Version : 1.3.3.2 Release : 2.20090920cvs.el5 URL : http://glite.web.cern.ch/glite/ Summary : GSI plugin for gSOAP Description : This is a GSI plugin for gSOAP. It uses the globus GSI libraries to implement GSI secure authentication and encryption on top of gSOAP. -------------------------------------------------------------------------------- Update Information: This is a GSI plugin for gSOAP. It uses the globus GSI libraries to implement GSI secure authentication and encryption on top of gSOAP. -------------------------------------------------------------------------------- References: [ 1 ] Bug #531255 - Review Request: CGSI-gSOAP - GSI plugin for gSOAP https://bugzilla.redhat.com/show_bug.cgi?id=531255 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update CGSI-gSOAP' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 4 Update: drupal-5.21-1.el4
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-1025 2009-12-17 23:17:39.797575 -------------------------------------------------------------------------------- Name : drupal Product : Fedora EPEL 4 Version : 5.21 Release : 1.el4 URL : http://www.drupal.org Summary : An open-source content-management platform Description : Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure. -------------------------------------------------------------------------------- Update Information: * Advisory ID: DRUPAL-SA-CORE-2009-009 * Project: Drupal core * Version: 5.x, 6.x * Date: 2009-December-16 * Security risk: Not critical * Exploitable from: Remote * Vulnerability: Cross site scripting -------- DESCRIPTION --------------------------------------------------------- Multiple vulnerabilities were discovered in Drupal. .... Contact category name cross-site scripting The Contact module does not correctly handle certain user input when displaying category information. Users privileged to create contact categories can insert arbitrary HTML and script code into the contact module administration page. Such a cross-site scripting attack may lead to the malicious user gaining administrative access. Wikipedia has more information about cross-site scripting [1] (XSS). This issue affects Drupal 6.x and Drupal 5.x. .... Menu description cross-site scripting The Menu module does not correctly handle certain user input when displaying the menu administration overview. Users privileged to create new menus can insert arbitrary HTML and script code into the menu module administration page. Such a cross-site scripting attack may lead to the malicious user gaining administrative access. Wikipedia has more information about cross-site scripting [2] (XSS). This issue affects Drupal 6.x only. -------- VERSIONS AFFECTED --------------------------------------------------- * Drupal 5.x before version 5.21. * Drupal 6.x before version 6.15. -------- SOLUTION ------------------------------------------------------------ Install the latest version: * If you are running Drupal 6.x then upgrade to Drupal 6.15 [3]. * If you are running Drupal 5.x then upgrade to Drupal 5.21 [4]. If you are unable to upgrade immediately, you can apply a patch to secure your installation until you are able to do a proper upgrade. Theses patches fix the security vulnerability, but do not contain other fixes which were released in Drupal 5.21 or Drupal 6.15. * To patch Drupal 6.14 use SA- CORE-2009-009-6.14.patch [5]. * To patch Drupal 5.20 use SA- CORE-2009-009-5.20.patch [6]. -------- REPORTED BY --------------------------------------------------------- The contact category XSS issue was independently reported by mr.baileys and Justin Klein Keane [7]. The menu description XSS issue was reported by mr.baileys [8]. -------- FIXED BY ------------------------------------------------------------ The contact category XSS issue was fixed by Justin Klein Keane [9] and Dave Reid [10]. The menu description XSS issue was fixed by Gábor Hojtsy [11] and Heine Deelstra [12]. -------- CONTACT ------------------------------------------------------------- The security team for Drupal can be reached at security at drupal.org or via the form at http://drupal.org/contact. [1] http://en.wikipedia.org/wiki/Cross- site_scripting [2] http://en.wikipedia.org/wiki/Cross-site_scripting [3] http://ftp.drupal.org/files/projects/drupal-6.15.tar.gz [4] http://ftp.drupal.org/files/projects/drupal-5.21.tar.gz [5] http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch [6] http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-5.20.patch [7] http://drupal.org/user/302225 [8] http://drupal.org/user/383424 [9] http://drupal.org/user/302225 [10] http://drupal.org/user/53892 [11] http://drupal.org/user/4166 [12] http://drupal.org/user/17943 _______________________________________________ Security-news mailing list Security-news(a)drupal.org http://lists.drupal.org/mailman/listinfo/security-news -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update drupal' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 4 Update: globus-gass-cache-program-2.7-1.el4
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0969 2009-12-07 05:55:24 -------------------------------------------------------------------------------- Name : globus-gass-cache-program Product : Fedora EPEL 4 Version : 2.7 Release : 1.el4 URL : http://www.globus.org/ Summary : Globus Toolkit - Tools to manipulate local and remote GASS caches Description : The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for their cause. The globus-gass-cache-program package contains: Tools to manipulate local and remote GASS caches -------------------------------------------------------------------------------- Update Information: The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for their cause. The globus-gass-cache-program package contains: Tools to manipulate local and remote GASS caches -------------------------------------------------------------------------------- References: [ 1 ] Bug #516531 - Review Request: globus-gass-cache-program - Globus Toolkit - Tools to manipulate local and remote GASS caches https://bugzilla.redhat.com/show_bug.cgi?id=516531 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update globus-gass-cache-program' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 Update: python-pip-0.4-1.el5
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0912 2009-12-01 17:50:01 -------------------------------------------------------------------------------- Name : python-pip Product : Fedora EPEL 5 Version : 0.4 Release : 1.el5 URL : http://pip.openplans.org Summary : Pip installs packages. Python packages. An easy_install replacement Description : Pip is a replacement for `easy_install <http://peak.telecommunity.com/DevCenter/EasyInstall>`_. It uses mostly the same techniques for finding packages, so packages that were made easy_installable should be pip-installable as well. pip is meant to improve on easy_install.bulletin boards, etc.). -------------------------------------------------------------------------------- Update Information: new package for python-pip a Python package installer -------------------------------------------------------------------------------- References: [ 1 ] Bug #520352 - Review Request: python-pip - Pip installs packages. Python packages. An easy_install replacement https://bugzilla.redhat.com/show_bug.cgi?id=520352 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-pip' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 4 Update: erlang-erlsom-1.2.1-3.el4
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0905 2009-11-24 19:02:18 -------------------------------------------------------------------------------- Name : erlang-erlsom Product : Fedora EPEL 4 Version : 1.2.1 Release : 3.el4 URL : http://sourceforge.net/projects/erlsom/ Summary : Support for XML Schema in Erlang Description : Erlsom is a set of functions to deal with XML Schema (XSDs) in Erlang. First you 'compile' the schema, and after that you can parse XML documents that conform to the schema. The result is a structure of Erlang records, based on the types that are defined by the Schema. Or, the other way around, a structure of records can be translated to an XML document. -------------------------------------------------------------------------------- Update Information: Initial commit. -------------------------------------------------------------------------------- References: [ 1 ] Bug #502991 - Review Request: erlang-erlsom - Support for XML Schema in Erlang https://bugzilla.redhat.com/show_bug.cgi?id=502991 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update erlang-erlsom' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 Update: php-pear-Net-URL2-0.3.0-1.el5
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0978 2009-12-07 05:55:43 -------------------------------------------------------------------------------- Name : php-pear-Net-URL2 Product : Fedora EPEL 5 Version : 0.3.0 Release : 1.el5 URL : http://pear.php.net/package/Net_URL2 Summary : Class for parsing and handling URL Description : Provides parsing of URLs into their constituent parts (scheme, host, path etc.), URL generation, and resolving of relative URLs. -------------------------------------------------------------------------------- Update Information: New package : Provides parsing of URLs into their constituent parts (scheme, host, path etc.), URL generation, and resolving of relative URLs. -------------------------------------------------------------------------------- References: [ 1 ] Bug #542075 - Review Request: php-pear-Net-URL2 - Class for parsing and handling URL https://bugzilla.redhat.com/show_bug.cgi?id=542075 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-pear-Net-URL2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 4 Update: mock-1.0.1-1.el4
by updates＠fedoraproject.org 17 Dec '09

17 Dec '09

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0909 2009-12-01 17:49:47 -------------------------------------------------------------------------------- Name : mock Product : Fedora EPEL 4 Version : 1.0.1 Release : 1.el4 URL : http://fedoraproject.org/wiki/Projects/Mock Summary : Builds packages inside chroots Description : Mock takes a srpm and builds it in a chroot -------------------------------------------------------------------------------- Update Information: Fix creation of root cache tarballs -------------------------------------------------------------------------------- References: [ 1 ] Bug #540997 - Intermittent errors creating mock root cache tarball https://bugzilla.redhat.com/show_bug.cgi?id=540997 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update mock' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
...
17
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce December 2009