[SECURITY] Fedora EPEL 4 Update: cabextract-1.3-1.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3383
2010-09-14 16:58:17
--------------------------------------------------------------------------------
Name : cabextract
Product : Fedora EPEL 4
Version : 1.3
Release : 1.el4
URL : http://www.cabextract.org.uk/
Summary : Utility for extracting cabinet (.cab) archives
Description :
cabextract is a program which can extract files from cabinet (.cab)
archives.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #620450 - CVE-2010-2800 cabextract: Infinite loop in MS-ZIP and Quantum decoders
https://bugzilla.redhat.com/show_bug.cgi?id=620450
[ 2 ] Bug #620454 - CVE-2010-2801 cabextract: Integer wrap-around (crash) by processing certain *.cab files in test archive mode
https://bugzilla.redhat.com/show_bug.cgi?id=620454
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cabextract' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 5 months
[SECURITY] Fedora EPEL 4 Update: libmspack-0.2-0.1.20100723alpha.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3383
2010-09-14 16:58:17
--------------------------------------------------------------------------------
Name : libmspack
Product : Fedora EPEL 4
Version : 0.2
Release : 0.1.20100723alpha.el4
URL : http://www.cabextract.org.uk/libmspack/
Summary : Library for CAB and related files compression and decompression
Description :
The purpose of libmspack is to provide both compression and decompression of
some loosely related file formats used by Microsoft.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #620450 - CVE-2010-2800 cabextract: Infinite loop in MS-ZIP and Quantum decoders
https://bugzilla.redhat.com/show_bug.cgi?id=620450
[ 2 ] Bug #620454 - CVE-2010-2801 cabextract: Integer wrap-around (crash) by processing certain *.cab files in test archive mode
https://bugzilla.redhat.com/show_bug.cgi?id=620454
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmspack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 5 months
Fedora EPEL 5 Update: perl-Font-TTF-0.45-7.el5.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3355
2010-09-11 18:13:30
--------------------------------------------------------------------------------
Name : perl-Font-TTF
Product : Fedora EPEL 5
Version : 0.45
Release : 7.el5.1
URL : http://search.cpan.org/dist/Font-TTF/
Summary : Perl library for modifying TTF font files
Description :
Perl module for TrueType font hacking. Supports reading, processing and writing
of the following tables: GDEF, GPOS, GSUB, LTSH, OS/2, PCLT, bsln, cmap, cvt,
fdsc, feat, fpgm, glyf, hdmx, head, hhea, hmtx, kern, loca, maxp, mort, name,
post, prep, prop, vhea, vmtx and the reading and writing of all other table
types.
In short, you can do almost anything with a standard TrueType font with this
module.
--------------------------------------------------------------------------------
Update Information:
Perl module for TrueType font hacking. Supports reading, processing and writing of the following tables: GDEF, GPOS, GSUB, LTSH, OS/2, PCLT, bsln, cmap, cvt, fdsc, feat, fpgm, glyf, hdmx, head, hhea, hmtx, kern, loca, maxp, mort, name, post, prep, prop, vhea, vmtx and the reading and writing of all other table types.
In short, you can do almost anything with a standard TrueType font with this module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #621447 - fontpackages-tools has broken deps.
https://bugzilla.redhat.com/show_bug.cgi?id=621447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Font-TTF' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: duplicity-0.6.09-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3376
2010-09-13 16:17:04
--------------------------------------------------------------------------------
Name : duplicity
Product : Fedora EPEL 5
Version : 0.6.09
Release : 1.el5
URL : http://www.nongnu.org/duplicity/
Summary : Encrypted bandwidth-efficient backup using rsync algorithm
Description :
Duplicity incrementally backs up files and directory by encrypting
tar-format volumes with GnuPG and uploading them to a remote (or
local) file server. In theory many protocols for connecting to a
file server could be supported; so far ssh/scp, local file access,
rsync, ftp, HSI, WebDAV and Amazon S3 have been written.
Because duplicity uses librsync, the incremental archives are space
efficient and only record the parts of files that have changed since
the last backup. Currently duplicity supports deleted files, full
unix permissions, directories, symbolic links, fifos, device files,
but not hard links.
--------------------------------------------------------------------------------
Update Information:
New in v0.6.09 (2010/07/25)
----------------------------
Bugs closed in this release:
- Unknown error while uploading duplicity-full-signatures
- Duplicity returns 1 when continuing an interrupted backup
- duplicity doesn't handle with large files well
- --ssh-options options passing options to ssh do not work
- username not url decoded in backend (at least rsync)
- Assertion error "time not moving forward at appropriate pace"
- Diminishing performance on large files
- Upgraded tahoebackend to new parse_url
- Fix to warning message in sshbackend
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #596018 - [abrt] crash in duplicity-0.6.08b-1.fc13: duplicity:474:incremental_backup:AssertionError: time not moving forward at appropriate pace - system clock issues?
https://bugzilla.redhat.com/show_bug.cgi?id=596018
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update duplicity' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: perl-Term-ProgressBar-2.09-8.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3353
2010-09-11 18:13:27
--------------------------------------------------------------------------------
Name : perl-Term-ProgressBar
Product : Fedora EPEL 5
Version : 2.09
Release : 8.el5
URL : http://search.cpan.org/dist/Term-ProgressBar/
Summary : Provide a progress meter on a standard terminal
Description :
Term::ProgressBar provides a simple progress bar on the terminal, to let
the user know that something is happening, roughly how much stuff has been
done, and maybe an estimate at how long remains.
--------------------------------------------------------------------------------
Update Information:
Term::ProgressBar provides a simple progress bar on the terminal, to let the user know that something is happening, roughly how much stuff has been done, and maybe an estimate at how long remains.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Term-ProgressBar' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: rubygem-uuidtools-2.1.1-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3377
2010-09-13 16:17:06
--------------------------------------------------------------------------------
Name : rubygem-uuidtools
Product : Fedora EPEL 5
Version : 2.1.1
Release : 2.el5
URL : http://uuidtools.rubyforge.org/
Summary : A simple universally unique ID generation library
Description :
UUIDTools was designed to be a simple library for generating any of the various
types of UUIDs. It conforms to RFC 4122 whenever possible.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-uuidtools' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: collectl-3.4.3-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3366
2010-09-13 16:16:44
--------------------------------------------------------------------------------
Name : collectl
Product : Fedora EPEL 5
Version : 3.4.3
Release : 1.el5
URL : http://collectl.sourceforge.net
Summary : A utility to collect various Linux performance data
Description :
A utility to collect Linux performance data
--------------------------------------------------------------------------------
Update Information:
update to version 3.4.3
- new switch: --netfilt
- fixed a few problems between OFED 1.4 and 1.5
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update collectl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: perl-MIME-Base32-1.02a-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3356
2010-09-12 17:52:24
--------------------------------------------------------------------------------
Name : perl-MIME-Base32
Product : Fedora EPEL 5
Version : 1.02a
Release : 1.el5
URL : http://search.cpan.org/dist/MIME-Base32/
Summary : Base32 encoder / decoder
Description :
Encodes and decodes data in a similar way like MIME::Base64 does.
--------------------------------------------------------------------------------
Update Information:
Initial pacakge. It is a requirement for the latest perl-Net-DNS-SEC. perl-MIME-Base32 is a Base32 encoder / decoder, similar to perl-MIME-Base64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #626605 - Review Request: perl-MIME-Base32 - Encode data similar way like MIME::Base64 does
https://bugzilla.redhat.com/show_bug.cgi?id=626605
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-MIME-Base32' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: rubygem-archive-tar-minitar-0.5.2-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3378
2010-09-13 16:17:08
--------------------------------------------------------------------------------
Name : rubygem-archive-tar-minitar
Product : Fedora EPEL 5
Version : 0.5.2
Release : 2.el5
URL : http://rubyforge.org/projects/ruwiki
Summary : Provides POSIX tar archive management from Ruby programs
Description :
Archive::Tar::Minitar is a pure-Ruby library and command-line utility that
provides the ability to deal with POSIX tar(1) archive files. The
implementation is based heavily on Mauricio Ferna'ndez's implementation in
rpa-base, but has been reorganised to promote reuse in other projects.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-archive-tar-minitar' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: tor-0.2.1.19-4.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3352
2010-09-10 19:54:47
--------------------------------------------------------------------------------
Name : tor
Product : Fedora EPEL 5
Version : 0.2.1.19
Release : 4.el5
URL : http://tor.eff.org
Summary : Anonymizing overlay network for TCP (The onion router)
Description :
Tor is a connection-based low-latency anonymous communication system.
Applications connect to the local Tor proxy using the SOCKS protocol. The
local proxy chooses a path through a set of relays, in which each relay
knows its predecessor and successor, but no others. Traffic flowing down
the circuit is unwrapped by a symmetric key at each relay, which reveals
the downstream relay.
Warnings: Tor does no protocol cleaning. That means there is a danger
that application protocols and associated programs can be induced to
reveal information about the initiator. Tor depends on Privoxy and
similar protocol cleaners to solve this problem. This is alpha code,
and is even more likely than released code to have anonymity-spoiling
bugs. The present network is very small -- this further reduces the
strength of the anonymity provided. Tor is not presently suitable for
high-stakes anonymity.
--------------------------------------------------------------------------------
Update Information:
Rebuild required by an EL5.5 version increment to libevent.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tor' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months