[SECURITY] Fedora EPEL 5 Update: mantis-1.1.8-4.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3412
2010-09-21 16:49:54
--------------------------------------------------------------------------------
Name : mantis
Product : Fedora EPEL 5
Version : 1.1.8
Release : 4.el5
URL : http://www.mantisbt.org/
Summary : Web-based issue tracking system
Description :
Mantis is a web-based bugtracking system.
It is written in the PHP scripting language and requires the MySQL
database and a webserver. Mantis has been installed on Windows, MacOS,
OS/2, and a variety of Unix operating systems. Any web browser should
be able to function as a client.
Documentation can be found in: /usr/share/doc/mantis-1.1.8
When the package has finished installing, you will need to perform some
additional configuration steps; these are described in:
/usr/share/doc/mantis-1.1.8/README.Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #633011 - Mantis: Vulnerable to CVE-2010-3070 (XSS in php-nusoap) due use of embedded copy of nusoap library
https://bugzilla.redhat.com/show_bug.cgi?id=633011
[ 2 ] Bug #634340 - CVE-2010-3303 mantis: several XSS flaws fixed in 1.2.3
https://bugzilla.redhat.com/show_bug.cgi?id=634340
[ 3 ] Bug #633003 - CVE-2010-2574 Mantis: XSS in Add Category action.
https://bugzilla.redhat.com/show_bug.cgi?id=633003
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mantis' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: rubygem-fattr-1.0.3-3.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3411
2010-09-21 16:49:52
--------------------------------------------------------------------------------
Name : rubygem-fattr
Product : Fedora EPEL 5
Version : 1.0.3
Release : 3.el5
URL : http://rubyforge.org/projects/codeforpeople/
Summary : Fatter attribute for Ruby
Description :
The fattr gem is a Fatter attribute for Ruby
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-fattr' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: iodine-0.6.0-0.rc1.4.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3413
2010-09-21 16:49:55
--------------------------------------------------------------------------------
Name : iodine
Product : Fedora EPEL 5
Version : 0.6.0
Release : 0.rc1.4.el5
URL : http://code.kryo.se/iodine/
Summary : Solution to tunnel IPv4 data through a DNS server
Description :
iodine lets you tunnel IPv4 data through a DNS server. This can be usable in
different situations where internet access is firewalled, but DNS queries are
allowed.
It runs on Linux, Mac OS X, FreeBSD, NetBSD, OpenBSD and Windows and needs a
TUN/TAP device. The bandwidth is asymmetrical with limited upstream and up to
1 Mbit/s downstream.
--------------------------------------------------------------------------------
Update Information:
Initial import iodine into Fedora/EPEL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530747 - Review Request: iodine - Solution to tunnel IPv4 data through a DNS server
https://bugzilla.redhat.com/show_bug.cgi?id=530747
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update iodine' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
[SECURITY] Fedora EPEL 5 Update: couchdb-0.11.2-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3276
2010-08-26 22:02:37
--------------------------------------------------------------------------------
Name : couchdb
Product : Fedora EPEL 5
Version : 0.11.2
Release : 2.el5
URL : http://couchdb.apache.org/
Summary : A document database server, accessible via a RESTful JSON API
Description :
Apache CouchDB is a distributed, fault-tolerant and schema-free
document-oriented database accessible via a RESTful HTTP/JSON API.
Among other features, it provides robust, incremental replication
with bi-directional conflict detection and resolution, and is
queryable and indexable using a table-oriented view engine with
JavaScript acting as the default view definition language.
--------------------------------------------------------------------------------
Update Information:
Despite the fact that this is a security-related fix I would like to test these packages for a while because of possible API incompatibilities (version upgrade).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #627498 - CVE-2010-2953 couchdb: start-up script sets insecure LD_LIBRARY_PATH
https://bugzilla.redhat.com/show_bug.cgi?id=627498
[ 2 ] Bug #624764 - CVE-2010-2234 couchdb: CSRF vulnerability in versions prior to 0.11.2/1.0.1
https://bugzilla.redhat.com/show_bug.cgi?id=624764
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update couchdb' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: libtelnet-0.20-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3404
2010-09-20 17:21:02
--------------------------------------------------------------------------------
Name : libtelnet
Product : Fedora EPEL 5
Version : 0.20
Release : 2.el5
URL : http://github.com/elanthis/libtelnet
Summary : TELNET protocol parsing framework
Description :
Small library for parsing the TELNET protocol, responding to TELNET
commands via an event interface, and generating valid TELNET commands.
libtelnet includes support for the non-official MCCP, MCCP2, ZMP, and
MSSP protocols used by MUD servers and clients.
--------------------------------------------------------------------------------
Update Information:
Initial release of libtelnet to EPEL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #515832 - Review Request: libtelnet - TELNET protocol handling library
https://bugzilla.redhat.com/show_bug.cgi?id=515832
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libtelnet' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: rubygem-right_aws-2.0.0-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3341
2010-09-09 15:49:43
--------------------------------------------------------------------------------
Name : rubygem-right_aws
Product : Fedora EPEL 5
Version : 2.0.0
Release : 1.el5
URL : http://rubyforge.org/projects/rightscale
Summary : Interface classes for the Amazon EC2/EBS, SQS, S3, SDB, and ACF Web Services
Description :
The RightScale AWS gems have been designed to provide a robust,
fast, and secure interface to Amazon EC2, EBS, S3, SQS, SDB, and
a CloudFront.
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-right_aws' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 4 Update: rtpproxy-1.2.1-2.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3405
2010-09-20 17:21:04
--------------------------------------------------------------------------------
Name : rtpproxy
Product : Fedora EPEL 4
Version : 1.2.1
Release : 2.el4
URL : http://www.rtpproxy.org
Summary : A symmetric RTP proxy
Description :
This is symmetric RTP proxy designed to be used in conjunction with
the SIP Express Router (SER) or any other SIP proxy capable of
rewriting SDP bodies in SIP messages that it processes.
--------------------------------------------------------------------------------
Update Information:
Allow group users to write to controlling UNIX-socket.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #626863 - Rtpproxy control socket gets erroneous default permissions
https://bugzilla.redhat.com/show_bug.cgi?id=626863
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rtpproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: python-pip-0.8-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3401
2010-09-18 17:39:49
--------------------------------------------------------------------------------
Name : python-pip
Product : Fedora EPEL 5
Version : 0.8
Release : 1.el5
URL : http://pip.openplans.org
Summary : Pip installs packages. Python packages. An easy_install replacement
Description :
Pip is a replacement for `easy_install
<http://peak.telecommunity.com/DevCenter/EasyInstall>`_. It uses mostly the
same techniques for finding packages, so packages that were made
easy_installable should be pip-installable as well.
pip is meant to improve on easy_install.bulletin boards, etc.).
--------------------------------------------------------------------------------
Update Information:
Update to 0.8 of pip
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-pip' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: rtpproxy-1.2.1-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3407
2010-09-20 17:21:09
--------------------------------------------------------------------------------
Name : rtpproxy
Product : Fedora EPEL 5
Version : 1.2.1
Release : 2.el5
URL : http://www.rtpproxy.org
Summary : A symmetric RTP proxy
Description :
This is symmetric RTP proxy designed to be used in conjunction with
the SIP Express Router (SER) or any other SIP proxy capable of
rewriting SDP bodies in SIP messages that it processes.
--------------------------------------------------------------------------------
Update Information:
Allow group users to write to controlling UNIX-socket.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #626863 - Rtpproxy control socket gets erroneous default permissions
https://bugzilla.redhat.com/show_bug.cgi?id=626863
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rtpproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months
Fedora EPEL 5 Update: rubygem-sinatra-1.0-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3340
2010-09-09 15:49:41
--------------------------------------------------------------------------------
Name : rubygem-sinatra
Product : Fedora EPEL 5
Version : 1.0
Release : 2.el5
URL : http://sinatra.rubyforge.org
Summary : Ruby-based web application framework
Description :
Sinatra is a DSL intended for quickly creating web-applications in Ruby
with minimal effort.
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-sinatra' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 6 months