[SECURITY] Fedora EPEL 5 Update: spamass-milter-0.3.1-18.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2461
2010-03-24 17:23:17
--------------------------------------------------------------------------------
Name : spamass-milter
Product : Fedora EPEL 5
Version : 0.3.1
Release : 18.el5
URL : http://savannah.nongnu.org/projects/spamass-milt/
Summary : Milter (mail filter) for spamassassin
Description :
A milter (Mail Filter) application that pipes incoming mail (including things
received by rmail/UUCP) through SpamAssassin, a highly customizable spam
filter. A milter-compatible MTA such as Sendmail or Postfix is required.
--------------------------------------------------------------------------------
Update Information:
This update includes a fix for a problem where if the milter is running using
the "-x" option to expand aliases before passing inbound mail through
SpamAssassin, a malicious client using a carefully-crafted SMTP session could
execute arbitrary code on the mail server. The fix avoids the use of a shell in
the alias expansion and hence there is no longer a problem with having to
sanitize input from the client. This problem has been assigned CVE-2010-1132,
which is tracked upstream at https://savannah.nongnu.org/bugs/?29136 The
update also contains improved Received-header-generation for message submission
and a fix for a problem where the milter would erroneously log warnings about
the mail server's configuration when the first message from a non-authenticated
client passed through. As part of the fix for this issue, the required milter
macro configuration for the mail server has changed slightly: see the README
file included in the package for details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #572117 - SpamAssassin Mail Filter: Arbitrary shell command injection (privilege escalation)
https://bugzilla.redhat.com/show_bug.cgi?id=572117
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update spamass-milter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: rubygem-right_aws-1.10.0-4.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2449
2010-03-18 21:51:45
--------------------------------------------------------------------------------
Name : rubygem-right_aws
Product : Fedora EPEL 5
Version : 1.10.0
Release : 4.el5
URL : http://rubyforge.org/projects/rightscale
Summary : Interface classes for the Amazon EC2/EBS, SQS, S3, SDB, and ACF Web Services
Description :
The RightScale AWS gems have been designed to provide a robust,
fast, and secure interface to Amazon EC2, EBS, S3, SQS, SDB, and
a CloudFront.
--------------------------------------------------------------------------------
Update Information:
Fixed right_http_connection dependency
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-right_aws' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: python-psycopg2-2.0.14-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2442
2010-03-17 18:27:39
--------------------------------------------------------------------------------
Name : python-psycopg2
Product : Fedora EPEL 5
Version : 2.0.14
Release : 1.el5
URL : http://www.initd.org/software/initd/psycopg
Summary : A PostgreSQL database adapter for Python
Description :
psycopg is a PostgreSQL database adapter for the Python programming
language (just like pygresql and popy.) It was written from scratch
with the aim of being very small and fast, and stable as a rock. The
main advantages of psycopg are that it supports the full Python
DBAPI-2.0 and being thread safe at level 2.
--------------------------------------------------------------------------------
Update Information:
This new release ships some new features, as well as a few bug fixes: * New
features: - Support for adapting tuples to PostgreSQL arrays is now enabled
by default and does not require importing psycopg2.extensions anymore. -
"can't adapt" error message now includes full type information. - Thank to
Daniele Varrazzo (piro) psycopg2's source package now includes full
documentation in HTML and plain text format. * Bug fixes: - No loss of
precision when using floats anymore. - decimal.Decimal "nan" and "infinity"
correctly converted to PostgreSQL numeric NaN values (note that PostgreSQL
numeric type does not support infinity but just NaNs.) -
psycopg2.extensions now includes Binary.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-psycopg2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: dbus-cxx-0.7.0-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2453
2010-03-18 21:51:56
--------------------------------------------------------------------------------
Name : dbus-cxx
Product : Fedora EPEL 5
Version : 0.7.0
Release : 1.el5
URL : http://dbus-cxx.sourceforge.net/
Summary : C++ bindings for the DBus library
Description :
C++ wrapper for the DBus C reference implementation.
--------------------------------------------------------------------------------
Update Information:
dbus-cxx is a C++ wrapper for the dbus library http://dbus-cxx.sourceforge.net
===== 0.7.0 ===== This release primarily features code cleanup, but in doing
so there were several minor feature additions, added documentation, bug fixes
and minor API changes. == New Documentation and Tutorial == A quickstart
guide has been added to the documentation. This will take you through a simple
client/server example. The quickstart tutorial can be found in the
documentation or on the dbus-cxx website here: http://dbus-
cxx.sourceforge.net/quick_start.html Also, documentation has been added for
many of the m4 generated templates. == Cleanup == A significant portion of
the cleanup related to the headers. As the library grew and evolved the headers
became messy, from old includes that are no longer needed to templates that had
very touchy include orders. These have been significantly cleaned up and
several key template headers have been split into two parts with the first part
declarations and the second part definitions and specializations. The
utility.h header had also grown to include many things beyond simple utility
functions. The dbus typing functions have been split out into types.h and the
introspect() function has been properly incorporated into the DBus::Connection
class. The functions related to signatures in utility.h have been moved into
the header signature.h along where DBus::Signature is. == New API == * In
cleaning up the macros that generate the sigc++ slot based DBus::Method
templates support for void methods has been added. * A force parameter was
added to DBus::Object::add_child() to allow a child with a similar name to be
forced into the hierarchy replacing the old child == Key API Changes == *
DBus::Dispatcher's constructor is now protected; use DBus::Dispatcher::create()
to allocate a smart pointer * When a named object interface doesn't handle an
incoming message, the default interface is tried before failing.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dbus-cxx' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: voms-1.9.16.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2463
2010-03-24 17:23:25
--------------------------------------------------------------------------------
Name : voms
Product : Fedora EPEL 5
Version : 1.9.16.1
Release : 1.el5
URL : http://glite.web.cern.ch/glite/
Summary : Virtual Organization Membership Service
Description :
In grid computing, and whenever the access to resources may be controlled
by parties external to the resource provider, users may be grouped to
Virtual Organizations (VOs). This package provides a VO Membership Service
(VOMS), which informs on that association between users and their VOs:
groups, roles and capabilities.
This package offers libraries that applications using the VOMS functionality
will bind to.
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug that occasionally made voms-proxy-init fail when
creating RFC compliant VOMS proxy certificates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #573922 - voms-proxy-init does not work reliably
https://bugzilla.redhat.com/show_bug.cgi?id=573922
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update voms' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: openslide-3.0.3-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2412
2010-03-16 19:08:24
--------------------------------------------------------------------------------
Name : openslide
Product : Fedora EPEL 5
Version : 3.0.3
Release : 1.el5
URL : http://openslide.cs.cmu.edu/
Summary : C library for reading virtual slides
Description :
The OpenSlide library allows programs to access virtual slide files
regardless of the underlying image format.
--------------------------------------------------------------------------------
Update Information:
First EPEL version of OpenSlide.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openslide' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: tetex-IEEEtran-1.7.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2454
2010-03-18 21:51:57
--------------------------------------------------------------------------------
Name : tetex-IEEEtran
Product : Fedora EPEL 5
Version : 1.7.1
Release : 1.el5
URL : http://www.ctan.org/tex-archive/help/Catalogue/entries/ieeetran.html
Summary : Official LaTeX class for IEEE transactions journals and conferences
Description :
The IEEEtran class is the official LaTeX class for authors of the
Institute of Electrical and Electronics Engineers (IEEE) transactions
journals and conferences.
--------------------------------------------------------------------------------
Update Information:
Initial release for EL-5 of the official LaTeX class for IEEE transactions
journals and conferences
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tetex-IEEEtran' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 4 Update: voms-1.9.16.1-1.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2469
2010-03-24 17:23:38
--------------------------------------------------------------------------------
Name : voms
Product : Fedora EPEL 4
Version : 1.9.16.1
Release : 1.el4
URL : http://glite.web.cern.ch/glite/
Summary : Virtual Organization Membership Service
Description :
In grid computing, and whenever the access to resources may be controlled
by parties external to the resource provider, users may be grouped to
Virtual Organizations (VOs). This package provides a VO Membership Service
(VOMS), which informs on that association between users and their VOs:
groups, roles and capabilities.
This package offers libraries that applications using the VOMS functionality
will bind to.
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug that occasionally made voms-proxy-init fail when
creating RFC compliant VOMS proxy certificates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #573922 - voms-proxy-init does not work reliably
https://bugzilla.redhat.com/show_bug.cgi?id=573922
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update voms' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 4 Update: myproxy-5.1-2.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2441
2010-03-17 18:27:37
--------------------------------------------------------------------------------
Name : myproxy
Product : Fedora EPEL 4
Version : 5.1
Release : 2.el4
URL : http://grid.ncsa.illinois.edu/myproxy/
Summary : Manage X.509 Public Key Infrastructure (PKI) security credentials
Description :
MyProxy is open source software for managing X.509 Public Key Infrastructure
(PKI) security credentials (certificates and private keys). MyProxy
combines an online credential repository with an online certificate
authority to allow users to securely obtain credentials when and where needed.
Users run myproxy-logon to authenticate and obtain credentials, including
trusted CA certificates and Certificate Revocation Lists (CRLs).
--------------------------------------------------------------------------------
Update Information:
* changes for compatibility with OpenSSL 1.0.0-beta5 * fix myproxy.h header
dependencies * fix configure script check for non-flavored globus_usage and
globus_gsi_proxy_core libraries for Fedora/EPEL RPM compatibility
(http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6897) * fix myproxy-logon
-T segfault after "removed bad CRL file" message *
(http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6909) * add server-side
support for including VOMS attributes in retrieved credentials (from the
repository); requires setting "allow_voms_attribute_requests true" in myproxy-
server.config (http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6882) * add
support for LDAP StartTLS
(http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6957) * fix myproxy-test
behavior when -startserver is not given
(http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6959) * fix parsing of
certificate_issuer_hashalg (broken since v4.8) * treat trustroot file contents
as binary data rather than text in myproxy-logon -T / myproxy-get-trustroots *
fix escaping of POSIX extended regular expression meta-characters in myproxy-
server authorization policies
(http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=6903)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #573273 - myproxy-devel package is broken
https://bugzilla.redhat.com/show_bug.cgi?id=573273
[ 2 ] Bug #574116 - missing dependency: globus-usage-devel
https://bugzilla.redhat.com/show_bug.cgi?id=574116
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update myproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora EPEL 5 Update: php-pear-Net-SMTP-1.4.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-2385
2010-03-11 23:38:21
--------------------------------------------------------------------------------
Name : php-pear-Net-SMTP
Product : Fedora EPEL 5
Version : 1.4.2
Release : 1.el5
URL : http://pear.php.net/package/Net_SMTP
Summary : Provides an implementation of the SMTP protocol
Description :
Provides an implementation of the SMTP protocol using PEAR's Net_Socket class.
php-pear-Net-SMTP can optionally use package "php-pear-Auth-SASL".
--------------------------------------------------------------------------------
Update Information:
Upstream changelog: - Fixing header string quoting in data(). (Bug #17199)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pear-Net-SMTP' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years