[SECURITY] Fedora EPEL 5 Update: pulseaudio-0.9.10-1.el5.2
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0092
2009-07-16 18:24:41
--------------------------------------------------------------------------------
Name : pulseaudio
Product : Fedora EPEL 5
Version : 0.9.10
Release : 1.el5.2
URL : http://pulseaudio.org
Summary : Improved Linux sound server
Description :
PulseAudio is a sound server for Linux and other Unix like operating
systems. It is intended to be an improved drop-in replacement for the
Enlightened Sound Daemon (ESOUND).
--------------------------------------------------------------------------------
Update Information:
Tavis Ormandy and Julien Tinnes, Google Security Team, discovered a flaw in the
way pulseaudio tries to re-exec itself with LD_BIND_NOW environment variable set
to 1 that can be exploited by local user to gain root privilegies. All users
of pulseaudio are strongly advised to update to these packages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #510071 - CVE-2009-1894 pulseaudio: privilege escalation flaw via pulseaudio re-exec
https://bugzilla.redhat.com/show_bug.cgi?id=510071
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pulseaudio' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
Fedora EPEL 5 Update: libguestfs-1.0.58-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0055
2009-07-13 19:26:00
--------------------------------------------------------------------------------
Name : libguestfs
Product : Fedora EPEL 5
Version : 1.0.58
Release : 2.el5
URL : http://libguestfs.org/
Summary : Access and modify virtual machine disk images
Description :
Libguestfs is a library for accessing and modifying guest disk images.
Amongst the things this is good for: making batch configuration
changes to guests, getting disk used/free statistics (see also:
virt-df), migrating between virtualization systems (see also:
virt-p2v), performing partial backups, performing partial guest
clones, cloning guests and changing registry/UUID/hostname info, and
much else besides.
Libguestfs uses Linux kernel and qemu code, and can access any type of
guest filesystem that Linux and qemu can, including but not limited
to: ext2/3/4, btrfs, FAT and NTFS, LVM, many different disk partition
schemes, qcow, qcow2, vmdk.
Libguestfs provides ways to enumerate guest storage (eg. partitions,
LVs, what filesystem is in each LV, etc.). It can also run commands
in the context of the guest. Also you can access filesystems over FTP.
Libguestfs is a library that can be linked with C and C++ management
programs.
See also the 'guestfish' package for shell scripting and command line
access.
For Perl bindings, see 'perl-libguestfs'.
For OCaml bindings, see 'ocaml-libguestfs-devel'.
For Python bindings, see 'python-libguestfs'.
For Ruby bindings, see 'ruby-libguestfs'.
For Java bindings, see 'libguestfs-java-devel'.
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.0.58. New upstream version 1.0.57.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #509597 - command "find /" causes appliance to die
https://bugzilla.redhat.com/show_bug.cgi?id=509597
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libguestfs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
[SECURITY] Fedora EPEL 5 Update: bugzilla-3.2.4-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0036
2009-07-09 22:58:32
--------------------------------------------------------------------------------
Name : bugzilla
Product : Fedora EPEL 5
Version : 3.2.4
Release : 1.el5
URL : http://www.bugzilla.org/
Summary : Bug tracking system
Description :
Bugzilla is a popular bug tracking system used by multiple open source projects
It requires a database engine installed - either MySQL, PostgreSQL or Oracle.
Without one of these database engines (local or remote), Bugzilla will not work
- see the Release Notes for details.
--------------------------------------------------------------------------------
Update Information:
New upstream version fixing Unauthorized Bug Change flaw:
http://www.bugzilla.org/security/3.2.3/
https://bugzilla.mozilla.org/show_bug.cgi?id=495257
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bugzilla' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
[SECURITY] Fedora EPEL 4 Update: bugzilla-3.2.4-1.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0021
2009-07-09 22:58:37
--------------------------------------------------------------------------------
Name : bugzilla
Product : Fedora EPEL 4
Version : 3.2.4
Release : 1.el4
URL : http://www.bugzilla.org/
Summary : Bug tracking system
Description :
Bugzilla is a popular bug tracking system used by multiple open source projects
It requires a database engine installed - either MySQL, PostgreSQL or Oracle.
Without one of these database engines (local or remote), Bugzilla will not work
- see the Release Notes for details.
--------------------------------------------------------------------------------
Update Information:
New upstream version fixing Unauthorized Bug Change flaw:
http://www.bugzilla.org/security/3.2.3/
https://bugzilla.mozilla.org/show_bug.cgi?id=495257
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bugzilla' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
Fedora EPEL 5 Update: par2cmdline-0.4-12.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0004
2009-07-07 03:42:05
--------------------------------------------------------------------------------
Name : par2cmdline
Product : Fedora EPEL 5
Version : 0.4
Release : 12.el5
URL : http://parchive.sourceforge.net/
Summary : PAR 2.0 compatible file verification and repair tool
Description :
par2cmdline is a program for creating and using PAR2 files to detect damage
in data files and repair them if necessary. PAR2 files are usually
published in binary newsgroups on Usenet; they apply the data-recovery
capability concepts of RAID-like systems to the posting and recovery of
multi-part archives.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #508772 - par2cmdline isn't in EPEL-5 yet
https://bugzilla.redhat.com/show_bug.cgi?id=508772
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update par2cmdline' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
[SECURITY] Fedora EPEL 5 Update: wordpress-2.8.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0054
2009-07-13 19:25:55
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 5
Version : 2.8.1
Release : 1.el5
URL : http://www.wordpress.org
Summary : WordPress blogging software
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #510745 - CVE-2009-2334, CVE-2009-2335, CVE-2009-2336 wordpress: multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=510745
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
Fedora EPEL 5 updates-testing report
by updates@fedoraproject.org
The following builds have been pushed to Fedora EPEL 5 updates-testing
fakeroot-1.12.2-21.el5.2
febootstrap-2.3-1.el5.1
fedora-packager-0.3.4-3.el5
libguestfs-1.0.56-1.el5
mantis-1.1.8-1.el5
mingw32-nsiswrapper-3-3.el5.2
perl-Test-Unit-Runner-Xml-0.1-2.el5
pyOpenSSL-0.7-6.el5
pyevent-0.3-6.el5
python-demjson-1.3-4.el5
python-webpy-0.32-3.el5
qemu-0.10.5-1.el5.1
rubygem-bacon-1.1.0-2.el5
rubygem-configuration-0.0.5-3.el5
rubygem-diff-lcs-1.1.2-3.el5
rubygem-rspec-1.2.7-1.el5
supybot-meetbot-0.1.1-2.el5
trac-git-plugin-0.0.1-5.20090628svn3369.el5
ucarp-1.5-1.el5
vidalia-0.1.14-1.el5
ykclient-2.3-1.el5
Details about builds:
================================================================================
fakeroot-1.12.2-21.el5.2 (FEDORA-EPEL-2009-0035)
Gives a fake root environment
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 22 2009 Richard W.M. Jones <rjones(a)redhat.com> - 2.9-22.el5.2
- Bump release to force a rebuild.
--------------------------------------------------------------------------------
================================================================================
febootstrap-2.3-1.el5.1 (FEDORA-EPEL-2009-0017)
Bootstrap a new Fedora system (like debootstrap)
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2009 Richard Jones <rjones(a)redhat.com> - 2.3-1.el5.1
- Package version regressed in EPEL 5 after the move to Koji. Force rebuild.
* Mon Jun 22 2009 Richard Jones <rjones(a)redhat.com> - 2.3-1
- New upstream release 2.3.
* Mon Jun 15 2009 Richard Jones <rjones(a)redhat.com> - 2.2-1
- New upstream release 2.2.
--------------------------------------------------------------------------------
================================================================================
fedora-packager-0.3.4-3.el5 (FEDORA-EPEL-2009-0031)
Tools for setting up a fedora maintainer environment
--------------------------------------------------------------------------------
Update Information:
Require redhat-rpm-config so that all available host macros are there. mock
makes sure that they are available for other releases
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 6 2009 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.3.4-3
- add Requires: redhat-rpm-config to be sure fedora packagers are using all available macros
* Wed Jun 24 2009 Dennis Gilmore <dennis(a)ausil.us> - 0.3.4-2
- minor bump
* Mon Jun 22 2009 Dennis Gilmore <dennis(a)ausil.us> - 0.3.4-1
- update to 0.3.4
- bugfix release with some new scripts
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #497813 - add a dep on redhat-rpm-config
https://bugzilla.redhat.com/show_bug.cgi?id=497813
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.0.56-1.el5 (FEDORA-EPEL-2009-0019)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #509597 - command "find /" causes appliance to die
https://bugzilla.redhat.com/show_bug.cgi?id=509597
[ 2 ] Bug #509383 - mkfs.ext2 much slower with virtio-backed disks than with IDE-backed disks (NOT sparseness issue)
https://bugzilla.redhat.com/show_bug.cgi?id=509383
--------------------------------------------------------------------------------
================================================================================
mantis-1.1.8-1.el5 (FEDORA-EPEL-2009-0034)
Web-based bugtracking system
--------------------------------------------------------------------------------
Update Information:
New upstream bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 8 2009 Gianluca Sforna <giallu gmail com> - 1.1.8-1
- new upstream release
--------------------------------------------------------------------------------
================================================================================
mingw32-nsiswrapper-3-3.el5.2 (FEDORA-EPEL-2009-0027)
Helper program for making NSIS Windows installers
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 5 2009 Richard W.M. Jones <rjones(a)redhat.com> - 3-3.el5.2
- Add runtime requires mingw32-binutils (RHBZ#509747).
--------------------------------------------------------------------------------
================================================================================
perl-Test-Unit-Runner-Xml-0.1-2.el5 (FEDORA-EPEL-2009-0024)
Generate XML reports from unit test results
--------------------------------------------------------------------------------
Update Information:
Initial release.
--------------------------------------------------------------------------------
================================================================================
pyOpenSSL-0.7-6.el5 (FEDORA-EPEL-2009-0022)
Python wrapper module around the OpenSSL library
--------------------------------------------------------------------------------
Update Information:
Initial release of pyOpenSSL on the EL-5 branch. Now with egg-info!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #504301 - EL-5 branch request for pyOpenSSL
https://bugzilla.redhat.com/show_bug.cgi?id=504301
--------------------------------------------------------------------------------
================================================================================
pyevent-0.3-6.el5 (FEDORA-EPEL-2009-0020)
Python bindings for libevent
--------------------------------------------------------------------------------
Update Information:
Initial release of pyevent for EL-5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #504299 - EL-5 branch request for pyevent.
https://bugzilla.redhat.com/show_bug.cgi?id=504299
--------------------------------------------------------------------------------
================================================================================
python-demjson-1.3-4.el5 (FEDORA-EPEL-2009-0033)
Python JSON module and lint checker
--------------------------------------------------------------------------------
Update Information:
Initial release of python-demjson for EL-5
--------------------------------------------------------------------------------
================================================================================
python-webpy-0.32-3.el5 (FEDORA-EPEL-2009-0029)
A simple web framework for Python
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #503672 - Review Request: python-webpy - A simple web framework for Python
https://bugzilla.redhat.com/show_bug.cgi?id=503672
--------------------------------------------------------------------------------
================================================================================
qemu-0.10.5-1.el5.1 (FEDORA-EPEL-2009-0030)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
Package version regressed in EPEL 5 after the move to Koji. Force rebuild.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 30 2009 Richard Jones <rjones(a)redhat.com> - 2:0.10.5-1.el5.1
- Package version regressed in EPEL 5 after the move to Koji. Force rebuild.
* Sun May 24 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2:0.10.5-1
- Use the devel KVM spec file as base for EL-5 qemu
- Rebase to stable qemu 0.10.5
* Thu May 21 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10.50-4.kvm86
- Update to kvm-86 release
- ChangeLog here: http://marc.info/?l=kvm&m=124282885729710
* Fri May 1 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10.50-3.kvm85
- Really provide qemu-kvm as a metapackage for comps
* Tue Apr 28 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10.50-2.kvm85
- Provide qemu-kvm as a metapackage for comps
* Mon Apr 27 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10.50-1.kvm85
- Update to qemu-kvm-devel-85
- kvm-85 is based on qemu development branch, currently version 0.10.50
- Include new qemu-io utility in qemu-img package
- Re-instate -help string for boot=on to fix virtio booting with libvirt
- Drop upstreamed patches
- Fix missing kernel/include/asm symlink in upstream tarball
- Fix target-arm build
- Fix build on ppc
- Disable preadv()/pwritev() until bug #497429 is fixed
- Kill more .kernelrelease uselessness
- Make non-kvm qemu build verbose
* Fri Apr 24 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-15
- Fix source numbering typos caused by make-release addition
* Thu Apr 23 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-14
- Improve instructions for generating the tarball
* Tue Apr 21 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-13
- Enable pulseaudio driver to fix qemu lockup at shutdown (#495964)
* Tue Apr 21 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-12
- Another qcow2 image corruption fix (#496642)
* Mon Apr 20 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-11
- Fix qcow2 image corruption (#496642)
* Sun Apr 19 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-10
- Run sysconfig.modules from %post on x86_64 too (#494739)
* Sun Apr 19 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-9
- Align VGA ROM to 4k boundary - fixes 'qemu-kvm -std vga' (#494376)
* Tue Apr 14 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-8
- Provide qemu-kvm conditional on the architecture.
* Thu Apr 9 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-7
- Add a much cleaner fix for vga segfault (#494002)
* Sun Apr 5 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-6
- Fixed qcow2 segfault creating disks over 2TB. #491943
* Fri Apr 3 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-5
- Fix vga segfault under kvm-autotest (#494002)
- Kill kernelrelease hack; it's not needed
- Build with "make V=1" for more verbose logs
* Thu Apr 2 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-4
- Support botting gpxe roms.
* Wed Apr 1 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-2
- added missing patch. love for CVS.
* Wed Apr 1 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-1
- Include debuginfo for qemu-img
- Do not require qemu-common for qemu-img
- Explicitly own each of the firmware files
- remove firmwares for ppc and sparc. They should be provided by an external package.
Not that the packages exists for sparc in the secondary arch repo as noarch, but they
don't automatically get into main repos. Unfortunately it's the best we can do right
now.
- rollback a bit in time. Snapshot from avi's maint/2.6.30
- this requires the sasl patches to come back.
- with-patched-kernel comes back.
* Wed Mar 25 2009 Mark McLoughlin <markmc(a)redhat.com> - 2:0.10-0.12.kvm20090323git
- BuildRequires pciutils-devel for device assignment (#492076)
* Mon Mar 23 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.11.kvm20090323git
- Update to snapshot kvm20090323.
- Removed patch2 (upstream).
- use upstream's new split package.
- --with-patched-kernel flag not needed anymore
- Tell how to get the sources.
* Wed Mar 18 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.10.kvm20090310git
- Added extboot to files list.
* Wed Mar 11 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.9.kvm20090310git
- Fix wrong reference to bochs bios.
* Wed Mar 11 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.8.kvm20090310git
- fix Obsolete/Provides pair
- Use kvm bios from bochs-bios package.
- Using RPM_OPT_FLAGS in configure
- Picked back audio-drv-list from kvm package
* Tue Mar 10 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.7.kvm20090310git
- modify ppc patch
* Tue Mar 10 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.6.kvm20090310git
- updated to kvm20090310git
- removed sasl patches (already in this release)
* Tue Mar 10 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.5.kvm20090303git
- kvm.modules were being wrongly mentioned at %install.
- update description for the x86 system package to include kvm support
- build kvm's own bios. It is still necessary while kvm uses a slightly different
irq routing mechanism
* Thu Mar 5 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.4.kvm20090303git
- seems Epoch does not go into the tags. So start back here.
* Thu Mar 5 2009 Glauber Costa <glommer(a)redhat.com> - 2:0.10-0.1.kvm20090303git
- Use bochs-bios instead of bochs-bios-data
- It's official: upstream set on 0.10
* Thu Mar 5 2009 Daniel P. Berrange <berrange(a)redhat.com> - 2:0.9.2-0.2.kvm20090303git
- Added BSD to license list, since many files are covered by BSD
* Wed Mar 4 2009 Glauber Costa <glommer(a)redhat.com> - 0.9.2-0.1.kvm20090303git
- missing a dot. shame on me
* Wed Mar 4 2009 Glauber Costa <glommer(a)redhat.com> - 0.92-0.1.kvm20090303git
- Set Epoch to 2
- Set version to 0.92. It seems upstream keep changing minds here, so pick the lowest
- Provides KVM, Obsoletes KVM
- Only install qemu-kvm in ix86 and x86_64
- Remove pkgdesc macros, as they were generating bogus output for rpm -qi.
- fix ppc and ppc64 builds
* Tue Mar 3 2009 Glauber Costa <glommer(a)redhat.com> - 0.10-0.3.kvm20090303git
- only execute post scripts for user package.
- added kvm tools.
* Tue Mar 3 2009 Glauber Costa <glommer(a)redhat.com> - 0.10-0.2.kvm20090303git
- put kvm.modules into cvs
* Tue Mar 3 2009 Glauber Costa <glommer(a)redhat.com> - 0.10-0.1.kvm20090303git
- Set Epoch to 1
- Build KVM (basic build, no tools yet)
- Set ppc in ExcludeArch. This is temporary, just to fix one issue at a time.
ppc users (IBM ? ;-)) please wait a little bit.
* Tue Mar 3 2009 Daniel P. Berrange <berrange(a)redhat.com> - 1.0-0.5.svn6666
- Support VNC SASL authentication protocol
- Fix dep on bochs-bios-data
* Tue Mar 3 2009 Glauber Costa <glommer(a)redhat.com> - 1.0-0.4.svn6666
- use bios from bochs-bios package.
* Tue Mar 3 2009 Glauber Costa <glommer(a)redhat.com> - 1.0-0.3.svn6666
- use vgabios from vgabios package.
* Mon Mar 2 2009 Glauber Costa <glommer(a)redhat.com> - 1.0-0.2.svn6666
- use pxe roms from etherboot package.
* Mon Mar 2 2009 Glauber Costa <glommer(a)redhat.com> - 1.0-0.1.svn6666
- Updated to tip svn (release 6666). Featuring split packages for qemu.
Unfortunately, still using binary blobs for the bioses.
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Sun Jan 11 2009 Debarshi Ray <rishi(a)fedoraproject.org> - 0.9.1-12
- Updated build patch. Closes Red Hat Bugzilla bug #465041.
* Wed Dec 31 2008 Dennis Gilmore <dennis(a)ausil.us> - 0.9.1-11
- add sparcv9 and sparc64 support
--------------------------------------------------------------------------------
================================================================================
rubygem-bacon-1.1.0-2.el5 (FEDORA-EPEL-2009-0021)
A ruby-based testing framework
--------------------------------------------------------------------------------
================================================================================
rubygem-configuration-0.0.5-3.el5 (FEDORA-EPEL-2009-0025)
Pure Ruby scoped configuration files
--------------------------------------------------------------------------------
================================================================================
rubygem-diff-lcs-1.1.2-3.el5 (FEDORA-EPEL-2009-0028)
Provide a list of changes between two sequenced collections
--------------------------------------------------------------------------------
================================================================================
rubygem-rspec-1.2.7-1.el5 (FEDORA-EPEL-2009-0014)
Behaviour driven development (BDD) framework for Ruby
--------------------------------------------------------------------------------
Update Information:
Updated from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 22 2009 Michael Stahnke <stahnma(a)fedoraproject.org> - 1.2.7-1
- New Version
--------------------------------------------------------------------------------
================================================================================
supybot-meetbot-0.1.1-2.el5 (FEDORA-EPEL-2009-0032)
Plugin for Supybot for handling IRC meetings
--------------------------------------------------------------------------------
Update Information:
Fixes from initial version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #505965 - Review Request: supybot-meetbot - Plugin for Supybot for handling IRC meetings
https://bugzilla.redhat.com/show_bug.cgi?id=505965
--------------------------------------------------------------------------------
================================================================================
trac-git-plugin-0.0.1-5.20090628svn3369.el5 (FEDORA-EPEL-2009-0015)
GIT version control plugin for Trac
--------------------------------------------------------------------------------
Update Information:
New upstream snapshot with various fixes
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 28 2009 Jesse Keating <jkeating(a)redhat.com> - 0.0.1-5.20090628svn3369
- New snapshot from upstream with fixes.
- Drop patches from nanosleep as they no longer apply
--------------------------------------------------------------------------------
================================================================================
ucarp-1.5-1.el5 (FEDORA-EPEL-2009-0016)
Common Address Redundancy Protocol (CARP) for Unix
--------------------------------------------------------------------------------
Update Information:
Ucarp had been branched but never built. Updated to current version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #510287 - ucarp is not in EPEL for EL5, even though it builds and works fine
https://bugzilla.redhat.com/show_bug.cgi?id=510287
--------------------------------------------------------------------------------
================================================================================
vidalia-0.1.14-1.el5 (FEDORA-EPEL-2009-0026)
GUI controller for the Tor Onion Routing Network
--------------------------------------------------------------------------------
Update Information:
0.1.13 -> 0.1.14
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 7 2009 Simon Wesp <cassmodiah(a)fedoraproject.org> - 0.1.14-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
ykclient-2.3-1.el5 (FEDORA-EPEL-2009-0023)
Yubikey management library and client
--------------------------------------------------------------------------------
Update Information:
Update to 2.3 of ykclient
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
13 years, 8 months
[SECURITY] Fedora EPEL 4 Update: nagios-2.12-6.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0012
2009-07-08 23:39:43
--------------------------------------------------------------------------------
Name : nagios
Product : Fedora EPEL 4
Version : 2.12
Release : 6.el4
URL : http://www.nagios.org/
Summary : Host/service/network monitoring program
Description :
Nagios is a program that will monitor hosts and services on your
network. It has the ability to send email or page alerts when a
problem arises and when a problem is resolved. Nagios is written
in C and is designed to run under Linux (and some other *NIX
variants) as a background process, intermittently running checks
on various services that you specify.
The actual service checks are performed by separate "plugin" programs
which return the status of the checks to Nagios. The plugins are
available at http://sourceforge.net/projects/nagiosplug.
This package provides the core program, web interface, and documentation
files for Nagios. Development files are built as a separate package.
--------------------------------------------------------------------------------
Update Information:
input sanitation of statuswml.cgi
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #508646 - CVE-2009-2288 nagios: remote code execution via statuswml.cgi CGI script
https://bugzilla.redhat.com/show_bug.cgi?id=508646
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
[SECURITY] Fedora EPEL 5 Update: nagios-2.12-6.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0018
2009-07-08 23:39:43
--------------------------------------------------------------------------------
Name : nagios
Product : Fedora EPEL 5
Version : 2.12
Release : 6.el5
URL : http://www.nagios.org/
Summary : Host/service/network monitoring program
Description :
Nagios is a program that will monitor hosts and services on your
network. It has the ability to send email or page alerts when a
problem arises and when a problem is resolved. Nagios is written
in C and is designed to run under Linux (and some other *NIX
variants) as a background process, intermittently running checks
on various services that you specify.
The actual service checks are performed by separate "plugin" programs
which return the status of the checks to Nagios. The plugins are
available at http://sourceforge.net/projects/nagiosplug.
This package provides the core program, web interface, and documentation
files for Nagios. Development files are built as a separate package.
--------------------------------------------------------------------------------
Update Information:
input sanitation of statuswml.cgi
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #508646 - CVE-2009-2288 nagios: remote code execution via statuswml.cgi CGI script
https://bugzilla.redhat.com/show_bug.cgi?id=508646
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months
[SECURITY] Fedora EPEL 4 Update: drupal-5.19-1.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0003
2009-07-07 01:13:07
--------------------------------------------------------------------------------
Name : drupal
Product : Fedora EPEL 4
Version : 5.19
Release : 1.el4
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
When an anonymous user fails to login due to mistyping his username or password,
and the page he is on contains a sortable table, the (incorrect) username and
password are included in links on the table. If the user visits these links the
password may then be leaked to external sites via the HTTP referer. In addition,
if the anonymous user is enticed to visit the site via a specially crafted URL
while the Drupal page cache is enabled, a malicious user might be able to
retrieve the "incorrect" username and password from the page cache.
http://drupal.org/node/507572
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 8 months