[SECURITY] Fedora EPEL 6 Update: cacti-0.8.7h-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4820
2011-10-31 18:29:20
--------------------------------------------------------------------------------
Name : cacti
Product : Fedora EPEL 6
Version : 0.8.7h
Release : 1.el6
URL : http://www.cacti.net/
Summary : An rrd based graphing tool
Description :
Cacti is a complete frontend to RRDTool. It stores all of the
necessary information to create graphs and populate them with
data in a MySQL database. The frontend is completely PHP
driven. Along with being able to maintain graphs, data
sources, and round robin archives in a database, Cacti also
handles the data gathering. There is SNMP support for those
used to creating traffic graphs with MRTG.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release. Fixes SQL injection and XSS. Upstream release notes are at http://www.cacti.net/release_notes_0_8_7h.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #748451 - update cacti to latest upstream (0.8.7h)
https://bugzilla.redhat.com/show_bug.cgi?id=748451
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cacti' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
[SECURITY] Fedora EPEL 5 Update: atop-1.26-1.el5.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4689
2011-10-12 20:44:41
--------------------------------------------------------------------------------
Name : atop
Product : Fedora EPEL 5
Version : 1.26
Release : 1.el5.1
URL : http://www.atcomputing.nl/Tools/atop/
Summary : An advanced interactive monitor to view the load on system and process level
Description :
An advanced interactive monitor for Linux-systems to view the load on
system-level and process-level.
The command atop has some major advantages compared to other
performance-monitors:
- Resource consumption by all processes
- Utilization of all relevant resources
- Permanent logging of resource utilization
- Highlight critical resources
- Watch activity only
- Watch deviations only
- Accumulated process activity per user
- Accumulated process activity per program
For more informations: http://www.atcomputing.nl/Tools/atop
The package does not make use of the patches available at
http://www.atcomputing.nl/Tools/atop/kernpatch.html
--------------------------------------------------------------------------------
Update Information:
Tempfile flaw corerction.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #745481 - CVE-2011-3618 atop: Insecure temporary file use flaw by management of runtime data [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=745481
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update atop' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
[SECURITY] Fedora EPEL 5 Update: puppet-2.6.12-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4772
2011-10-27 18:32:53
--------------------------------------------------------------------------------
Name : puppet
Product : Fedora EPEL 5
Version : 2.6.12
Release : 1.el5
URL : http://puppetlabs.com
Summary : A network tool for managing many disparate systems
Description :
Puppet lets you centrally manage every important aspect of your system using a
cross-platform specification language that manages all the separate elements
normally aggregated in different files, like users, cron jobs, and hosts,
along with obviously discrete elements like packages, services, and files.
--------------------------------------------------------------------------------
Update Information:
A bug in puppet's SSL certificate handling could allow nodes with a valid certificate to impersonate the puppet master. To be vulnerable, a user would have had to set the certdnsnames variable and generated certificates. This setting is not set by default in the Fedora/EPEL packages.
This update closes the vulnerability in newly generated certificates, but cannot prevent existing certificates from being used to exploit the vulnerability. Please refer to the upstream documentation for more details on mitigation and remediation of this issue, if you have generate certificates that are vulnerable to this issue:
http://puppetlabs.com/security/cve/cve-2011-3872/
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update puppet' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 6 Update: python-cli-1.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4849
2011-11-01 23:35:33
--------------------------------------------------------------------------------
Name : python-cli
Product : Fedora EPEL 6
Version : 1.2
Release : 1.el6
URL : https://bitbucket.org/geertj/python-cli/wiki/Home
Summary : A CLI construction toolkit for Python
Description :
This is Python-CLI, a CLI construction toolkit for Python.
It is similar in scope to Python's "cmd", "cmd2", and pyCLI.
--------------------------------------------------------------------------------
Update Information:
Upstream update to 1.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-cli' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
[SECURITY] Fedora EPEL 4 Update: atop-1.26-1.el4.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4688
2011-10-12 20:44:39
--------------------------------------------------------------------------------
Name : atop
Product : Fedora EPEL 4
Version : 1.26
Release : 1.el4.1
URL : http://www.atcomputing.nl/Tools/atop/
Summary : An advanced interactive monitor to view the load on system and process level
Description :
An advanced interactive monitor for Linux-systems to view the load on
system-level and process-level.
The command atop has some major advantages compared to other
performance-monitors:
- Resource consumption by all processes
- Utilization of all relevant resources
- Permanent logging of resource utilization
- Highlight critical resources
- Watch activity only
- Watch deviations only
- Accumulated process activity per user
- Accumulated process activity per program
For more informations: http://www.atcomputing.nl/Tools/atop
The package does not make use of the patches available at
http://www.atcomputing.nl/Tools/atop/kernpatch.html
--------------------------------------------------------------------------------
Update Information:
Tempfile flaw corerction.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #745482 - CVE-2011-3618 atop: Insecure temporary file use flaw by management of runtime data [epel-4]
https://bugzilla.redhat.com/show_bug.cgi?id=745482
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update atop' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: safekeep-1.3.2-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4841
2011-11-01 23:35:16
--------------------------------------------------------------------------------
Name : safekeep
Product : Fedora EPEL 5
Version : 1.3.2
Release : 2.el5
URL : http://safekeep.sourceforge.net
Summary : The SafeKeep backup system
Description :
SafeKeep is a client/server backup system which enhances the
power of rdiff-backup with simple, centralized configuration.
--------------------------------------------------------------------------------
Update Information:
SafeKeep is a client/server backup system which enhances the
power of rdiff-backup with simple, centralized configuration.
This is the common component of SafeKeep. It is shared in
between the client/server components.
Added to EPEL
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update safekeep' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: findthatword-0.1-3.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4725
2011-10-18 18:53:54
--------------------------------------------------------------------------------
Name : findthatword
Product : Fedora EPEL 5
Version : 0.1
Release : 3.el5
URL : http://findthatword.sourceforge.net/
Summary : A word search maker
Description :
A word search maker for teachers, parents and those who enjoy creating
puzzles. FindThatWord aims to be the best free word search creation
program available with useful features such as clues, hidden messages
and automated page layout.
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #746520 - Review Request: findthatword - A word search maker
https://bugzilla.redhat.com/show_bug.cgi?id=746520
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update findthatword' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 5 Update: facter-1.6.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4739
2011-10-24 14:36:56
--------------------------------------------------------------------------------
Name : facter
Product : Fedora EPEL 5
Version : 1.6.2
Release : 1.el5
URL : http://www.puppetlabs.com/puppet/related-projects/facter/
Summary : Ruby module for collecting simple facts about a host operating system
Description :
Ruby module for collecting simple facts about a host Operating
system. Some of the facts are preconfigured, such as the hostname and the
operating system. Additional facts can be added through simple Ruby scripts
--------------------------------------------------------------------------------
Update Information:
This is an upstream bugfix release. One new addition that is of interest is the osfamily fact. For details on the fixes refer to the upstream release announcement:
http://groups.google.com/group/puppet-users/msg/9856678279f498a5
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update facter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
Fedora EPEL 6 Update: facter-1.6.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4730
2011-10-24 14:36:35
--------------------------------------------------------------------------------
Name : facter
Product : Fedora EPEL 6
Version : 1.6.2
Release : 1.el6
URL : http://www.puppetlabs.com/puppet/related-projects/facter/
Summary : Ruby module for collecting simple facts about a host operating system
Description :
Ruby module for collecting simple facts about a host Operating
system. Some of the facts are preconfigured, such as the hostname and the
operating system. Additional facts can be added through simple Ruby scripts
--------------------------------------------------------------------------------
Update Information:
This is an upstream bugfix release. One new addition that is of interest is the osfamily fact. For details on the fixes refer to the upstream release announcement:
http://groups.google.com/group/puppet-users/msg/9856678279f498a5
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update facter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months
[SECURITY] Fedora EPEL 6 Update: moodle-2.1.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4744
2011-10-24 14:37:12
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 6
Version : 2.1.2
Release : 1.el6
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
Multiple security fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #747445 - moodle: Multiple security fixes in 2.1.2, 2.0.5, and 1.9.14 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=747445
[ 2 ] Bug #747446 - moodle: Multiple security fixes in 2.1.2, 2.0.5, and 1.9.14 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=747446
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 6 months